July 2011 - dovecot - dovecot.org

[Dovecot] Dovecot 2, Imap service, client_limit
by Steve Fatula 20 Jul '11

20 Jul '11

I see back in November of last year, a thread about using client_limit in the imap service (not imap-login) that would allow each imap process serve more than one connection. Sounded good, until I tried it! When I did, unlike the OP of that thread, I got: dovecot: imap(submit.user): Fatal: setuid(503(submit.user) from userdb lookup) failed with euid=501(links): Operation not permitted (This binary should probably be called with process user set to 503(submit.user) instead of 501(links)) So, it would appear that this does not work. Still, the thread was posting results of their testing even that showed it worked. Sample message within the thread, read for more: http://www.dovecot.org/list/dovecot/2010-November/054893.html I'd love to be able to use a single imap process for more than one connection. Is this still possible, or, not? If so, how? Steve

4 3

[Dovecot] DoveCot plugin "mailbox approaching limit" warning?
by Zhou, Yan 20 Jul '11

20 Jul '11

Hi there, I am aware of the "Quota" plugin, but is there any way that DoveCot will place a warning message in user mailbox if it is getting close to its mail quota (but have not exceeded yet)? Thanks, Yan Confidentiality Notice: The information contained in this electronic transmission is confidential and may be legally privileged. It is intended only for the addressee(s) named above. If you are not an intended recipient, be aware that any disclosure, copying, distribution or use of the information contained in this transmission is prohibited and may be unlawful. If you have received this transmission in error, please notify us by telephone (513) 229-5500 or by email (postmaster(a)MedPlus.com) After replying, please erase it from your computer system.

2 2

[Dovecot] quota-warning.sh not working (lda problem?)
by Thomas Krause 19 Jul '11

19 Jul '11

Hi, I setup a new mailserver with dovecot 2.0.12. Everything is working fine (including quota) - except of sending quota warning mails. When running /usr/local/bin/quota-warning.sh 95 user(a)domain.de manually as root or user vmail, the mail is delivered. content of /usr/local/bin/quota-warning.sh #!/bin/sh PERCENT=$1 USER=$2 logger -p mail.info "$PERCENT% Quota-warning sent to $USER" cat << EOF | /usr/local/libexec/dovecot/dovecot-lda -d $USER -o "plugin/quota=maildir:User quota:noenforcing" From: postmaster(a)domain.de Subject: $PERCENT% Mail quota warning Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 8bit Der Speicherplatz Ihres E-Mail-Postfaches ist zu $PERCENT% gefüllt. Bitte löschen Sie alte und unerwünschte E-Mails vom Server, um den Emfang neuer E-Mails aufgrund Speicherplatzmangels nicht zu behindern. Your mailbox with us is now more than $PERCENT% full. To avoid mail loss due to lack of sufficient space, please remove old and unwanted mails from the server. EOF Because of line 4 of the script I see in maillog, that the script is executed, but no mail is delivered? Any ideas? Regards, Tom.

1 1

[Dovecot] Dovecot + Vpopmail quota issues
by qmail＠top-consulting.net 19 Jul '11

19 Jul '11

I can't get dovecot to ignore a certain directory/namespace when calculating quotas. I am running dovecot 1.2.16 with vpopmail configured for quotas. I use the dot (.) as my separator and my user structure is as follows: ../domain.com/user/Maildir for all the user directories I also have for each user: ../domain.com/user/Maildir/Archive which is a symlink to a NFS mounted partition that holds read-only archives In dovecot.conf I have defined them as follows: mail_location = maildir:~/Maildir namespace private { separator = . prefix = ARCHIVE. inbox = no hidden = yes list = yes location = maildir:~/Maildir/Archive } namespace private { separator = . prefix = inbox = yes } This works very well, in as much as I see the Archive namespace and its folders. The problem arises in the fact that Dovecot insists on calculating the 'Archive' namespace/directory storage towards the total storage used. My Quota configuration is as follows: auth default { mechanisms = plain login digest-md5 cram-md5 passdb vpopmail { args = webmail=192.168.1.12 } userdb vpopmail { args = quota_template=quota_rule3=*:backend=%q } ... } plugin { quota = maildir quota_rule = ?:storage=0 quota_rule2 = Archive:ignore quota_rule3 = ARCHIVE:ignore } From what I've read, this is supposed to use the maildirsize file when available or otherwise return no quota. It worked just fine before this new Archive namespace. For a certain user, vpopmail writes the 'maildirsize' file in ../domain.com/user/Maildir/maildirsize and it contains the correct value ( without the /Archive directory ). The problem is that for some reason, something ( I suspect dovecot ) writes a new maildirsize file in ../domain.com/user/Maildir/Archive/maildirsize which also contains the size of Archive. Subsequently, Dovecot adds the two of them up and usually throws me over quota. To test, I have emptied the maildirsize file under Archive and changed its owner to root (perms are 755 ) so that nobody but root can write to it. Dovecot complained right away about it: Jul 19 12:55:21 pop1 dovecot: IMAP(user(a)domain.com): open(/home/vpopmail/domains/B/domain.com/user/Maildir/Archive/maildirsize) failed: Permission denied Despite passing the quota responsibility to vpopmail it seems that Dovecot still tries to update that file. And finally the question... How do I get dovecot to not calculate a quota for that directory/namespace ?

1 2

[Dovecot] Problem with zlib plugin and flags
by Jeremy Maryott 19 Jul '11

19 Jul '11

Hi, I'm working on enabling the zlib plugin and compressing most of the mail on my mail server, and I've run into a bit of a problem with doing things as described on the wiki's zlib plugin page (here: http://wiki.dovecot.org/Plugins/Zlib) I'm using Dovecot 1.2.15 and maildir as a mailbox format on Debian 5. I have a script that implements the steps listed at the bottom of the wiki page. The problem has to do with step 5, which recommends that you add a 'Z' flag to each email that you compress so that you don't compress it again. The problem that I ran into is that when you move an email to another mail folder, this flag appears to go away. As a result, my script has compressed some emails that were already compressed, rendering them unreadable by Dovecot. I've mostly solved that problem, and my compression script now runs 'file' and looks to see if it's gzipped already for each file that's a candidate for compression. I'm not sure this is the best solution (it's definitely slower than just checking the filename), so I'm open to better alternatives. Reading http://wiki.dovecot.org/MailboxFormat/Maildir, I see that Dovecot supports 'non-standard fields' specified after normal flags and a comma. It seems like that might be a better place to put the 'Z' flag, if Dovecot won't retain it when places with the normal flags. I'm unsure how the filename would look if it doesn't currently have any flags, though. Would there just be two commas in a row, followed by my non-standard flag? If I haven't missed or misconfigured anything and what I said above is correct, the wiki should be changed so others don't run into the same problems I have. I'm happy to do so, but I didn't want to make any changes without making sure I was right about what was going on. Thanks, Jeremy

1 0

[Dovecot] PgSQL+TLS
by Christian Roessner 19 Jul '11

19 Jul '11

Hi, I would like to use PostgreSQL instead of a flat file for ACLs: http://wiki2.dovecot.org/SharedMailboxes/Shared How must a connect=-line look like to connect with TLS to a server? Thanks in advance Christian -- Roessner-Network-Solutions Bachelor of Science Informatik 50°34.725'N, 08°40.904'O, Nahrungsberg 81, 35390 Giessen F: +49 641 5879091, M: +49 176 93118939 USt-IdNr.: DE225643613 http://www.roessner-network-solutions.com

2 5

[Dovecot] Dovecot 1.2.17, Proxy and forwarding of remote ip
by Tomislav Mihalicek 19 Jul '11

19 Jul '11

Hi i have a nice working proxy setup and postlogin script that is doing logging logs. echo "$(date +%Y.%m.%d-%H:%M:%S), $USER, $IP, ${1}" >> /var/log/mail/logins.info 2>&1 is it possible that i recieve a remote ip of user client on proxied internal machine, cause i have only the proxy one, and that date is not a relevant to me thanx t. -- View this message in context: http://old.nabble.com/Dovecot-1.2.17%2C-Proxy-and-forwarding-of-remote-ip-t… Sent from the Dovecot mailing list archive at Nabble.com.

2 2

[Dovecot] help
by Guruprasad S N 18 Jul '11

18 Jul '11

Hi I have postfix-2.4.7 and Dovecot 1.0.7 integrated with Windows Active Directory , I have some issue here . can dovecot create the mailbox in the same case which is stored in AD ( eg if my Samaccountname attribute is GuruPrasad or Test123 ) , can the mailbox be created in same case and can it deliver the mail to the same path. Config details attached . 1 Dovecot 1.0.7 2 dovecot -n # 1.0.7: /etc/dovecot.conf login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_location: maildir:~/Maildir mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(pop3): outlook-idle pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login username_format: %Lu passdb: driver: pam userdb: driver: passwd userdb: driver: static args: uid=502 gid=502 home=/var/mail/%u socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix ============================================================================================================================ Disclaimer: This message and the information contained herein is proprietary and confidential and subject to the Tech Mahindra policy statement, you may review the policy at <a href="http://www.techmahindra.com/Disclaimer.html">http://www.techmahindra.com/Disclaimer.html</a> externally and <a href="http://tim.techmahindra.com/Disclaimer.html">http://tim.techmahindra.com/Disclaimer.html</a> internally within Tech Mahindra. ============================================================================================================================

1 0

[Dovecot] dovecot 2.0.13 using LDAP and proxying IMAP4 and POP3 to gmail
by Volker Scheuber 18 Jul '11

18 Jul '11

Fellow dovecot users/contributors, I am building a POP3/IMAP4 proxy solution for an enterprise, where users can login with their common username and then they get single sign-on to all kinds of different applications in the backend. Some of these applications are SaaS apps like gmail. For gmail in particular, I want dovecot to solve the following issues for me: 1. be an IMAP4/POP3 proxy in the enterprise, proxying client requests to mail.com. 2. change both username and password from what's coming in from the client to what's being proxied out to gmail. 3. use LDAP for authentication As a prototype, I implemented #1 and #2 using passwd-files and after a few hours of try and error, I got it to work and was able to login with "username" and "password" and was proxied through to gmail with "username(a)gmail.com" and "gmailpassword". Totally awesome. Now I am stuck porting my working prototype from my laptop and passwd-files to my real lab environment and LDAP. I was able to get the authentication to work but that's about it. I can't get dovecot to do the proxying. I searched the mailing list archives and saw other people having similar issues, but that was almost 4 years ago... The most promising thread similar to my requirements and issues was this one: http://www.dovecot.org/list/dovecot/2007-September/025740.html but it was never fully answered nor did the suggestion given to that thread help me with my issue (but I did follow them). Here is my current configuration: dovecot -n # 2.0.13: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32.36-0.5-default x86_64 SUSE Linux Enterprise Server 11 (x86_64) auth_debug = yes auth_debug_passwords = yes auth_verbose = yes auth_verbose_passwords = plain disable_plaintext_auth = no mail_location = mbox:~/mail:INBOX=/var/mail/%n passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap master = yes pass = yes } passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } My ldap configuration is: cat /usr/local/etc/dovecot/dovecot-ldap.conf.ext |grep -v ^##* |grep . hosts = 127.0.0.1:389 dn = cn=user,ou=users,o=config dnpass = password auth_bind = yes auth_bind_userdn = cn=%n,ou=users,o=data ldap_version = 3 base = ou=users,o=data deref = never scope = subtree user_attrs = =home=/var/mail,uidNumber=uid,gidNumber=gid user_filter = (&(objectClass=posixAccount)(uid=%n)) pass_attrs = mail=user,userPassword=password,uid=proxy,=ssl=any-cert,city=host,description=pass,cn=nologin pass_filter = (&(objectClass=posixAccount)(uid=%n)) iterate_filter = (objectClass=posixAccount) default_pass_scheme = CRYPT When connecting to dovecot through an IMAP client (evolution in my case) the dovecot log shows: Jul 16 13:32:17 linux-1hen dovecot: auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Jul 16 13:32:17 linux-1hen dovecot: auth: Debug: auth client connected (pid=26601) Jul 16 13:32:17 linux-1hen dovecot: auth: Debug: client in: AUTH1PLAINservice=imapsecuredlip=137.65.156.25rip=164.99.195.4lport=993rport=49203resp=AGFhYmVsbABOMHYzbGwxMjM0NTY= Jul 16 13:32:17 linux-1hen dovecot: auth: Debug: client out: OK1user=aabell Jul 16 13:32:17 linux-1hen dovecot: auth: Debug: master in: REQUEST3762290689266011e9ff0815dea78591a5437731034c14aa Jul 16 13:32:17 linux-1hen dovecot: auth: Debug: ldap(aabell,164.99.195.4): user search: base=ou=users,o=data scope=subtree filter=(&(objectClass=posixAccount)(uid=aabell)) fields=uidNumber,gidNumber Jul 16 13:32:17 linux-1hen dovecot: auth: Debug: ldap(aabell,164.99.195.4): result: gidNumber(gid)=1001 uidNumber(uid)=1001 Jul 16 13:32:17 linux-1hen dovecot: auth: Debug: master out: USER3762290689aabellgid=1001uid=1001home=/var/mail Jul 16 13:32:17 linux-1hen dovecot: imap-login: Login: user=<aabell>, method=PLAIN, rip=164.99.195.4, lip=137.65.156.25, mpid=26604, TLS It doesn't even seem to be recognizing the extra fields I defined in pass_attrs. So I changed my ldap configuration to: cat /usr/local/etc/dovecot/dovecot-ldap.conf.ext |grep -v ^##* |grep . hosts = 127.0.0.1:389 dn = cn=supervisor,ou=sa,o=system dnpass = n0v3ll123 auth_bind = yes auth_bind_userdn = cn=%n,ou=users,o=data ldap_version = 3 base = ou=users,o=data deref = never scope = subtree user_attrs = mail=user,=home=/var/mail,uidNumber=uid,gidNumber=gid,=proxy=y,=ssl=any-cert,=host=209.85.225.109,description=pass,=nologin=y user_filter = (&(objectClass=posixAccount)(uid=%n)) pass_attrs = mail=user,userPassword=password pass_filter = (&(objectClass=posixAccount)(uid=%n)) iterate_filter = (objectClass=posixAccount) default_pass_scheme = CRYPT This time things looked much better, but still not good enough: Jul 16 13:36:12 linux-1hen dovecot: auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Jul 16 13:36:12 linux-1hen dovecot: auth: Debug: auth client connected (pid=26787) Jul 16 13:36:12 linux-1hen dovecot: auth: Debug: client in: AUTH1PLAINservice=imapsecuredlip=137.65.156.25rip=164.99.195.4lport=993rport=57079resp=AGFhYmVsbABOMHYzbGwxMjM0NTY= Jul 16 13:36:12 linux-1hen dovecot: auth: Debug: client out: OK1user=aabell Jul 16 13:36:12 linux-1hen dovecot: auth: Debug: master in: REQUEST159789875326787162fbc34468ae7853209715c05e11ad14 Jul 16 13:36:12 linux-1hen dovecot: auth: Debug: ldap(aabell,164.99.195.4): user search: base=ou=users,o=data scope=subtree filter=(&(objectClass=posixAccount)(uid=aabell)) fields=mail,uidNumber,gidNumber,description Jul 16 13:36:12 linux-1hen dovecot: auth: Debug: auth(aabell,164.99.195.4): username changed aabell -> vscheuber(a)gmail.com Jul 16 13:36:12 linux-1hen dovecot: auth: Debug: ldap(vscheuber(a)gmail.com,164.99.195.4): result: description(pass)=gmailpassword gidNumber(gid)=1001 uidNumber(uid)=1001 mail(user)=vscheuber(a)gmail.com Jul 16 13:36:12 linux-1hen dovecot: auth: Debug: master out: USER1597898753vscheuber@gmail.compass=gmailpasswordgid=1001uid=1001home=/var/mailproxy=yssl=any-certhost=209.85.225.109nologin=y Jul 16 13:36:12 linux-1hen dovecot: imap-login: Login: user=<aabell>, method=PLAIN, rip=164.99.195.4, lip=137.65.156.25, mpid=26790, TLS I thought I'd also post here the log of my working prototype configuration with passwd-files. I would expect the ldap output to look similar in some key areas like proxying, but it doesn't: Jul 15 15:04:25 vscdevws dovecot: auth: Debug: client in: AUTH1PLAINservice=imapsecuredlip=::1rip=::1lport=143rport=36444resp=AHZzY2hldWJlcgBwYXNzd29yZA== Jul 15 15:04:25 vscdevws dovecot: auth: Debug: passwd-file(vscheuber,::1): lookup: user=vscheuber file=/etc/dovecot/users Jul 15 15:04:25 vscdevws dovecot: auth: Debug: auth(vscheuber,::1): username changed vscheuber -> vscheuber(a)gmail.com Jul 15 15:04:25 vscdevws dovecot: auth: Debug: client out: OK1user=vscheuber@gmail.comproxyhost=209.85.225.109port=993ssl=any-certpass=gmailpassword Jul 15 15:04:26 vscdevws dovecot: imap-login: proxy(vscheuber(a)gmail.com): started proxying to 209.85.225.109:993: user=<vscheuber(a)gmail.com>, method=PLAIN, rip=::1, lip=::1, secured If you read to this point, I say "thank you!" just for that. Please advise where my misconfiguration could be. Thank you very much, I appreciate your time and help! Volker

1 1

[Dovecot] ACL/shared-folder and Thunderbird
by Christian Roessner 17 Jul '11

17 Jul '11

Hi, I still have some problems with thunderbird and Dovecot. I added ACL/shared-folders to dovecot. While everything is working perfectly under Apple Mail and roundcube, thunderbird behaves very strange. What I did: 1. Step I have three mail accounts set up in thunderbird. In the second and third account I managed IMAL-ACLs on the INBOXes, with following flags: eilrwtsd 2. Step At the first account, I chose IMAP subscriptions and I added both INBOXes (shared/.../INBOX) 3. Step Accounts were shown under shared. The folder shared and one level under shared was wriiten in italic. The INBOXes were shown as regular. 4. Step Clicking on each INBOX showed the mails. I chose properties and selected to compress each folder, if it shows more than 100 mails. 5. Step Closing Thunderbird and restarting it. Now thunderbird shows error notifications that it could noct find a mailbox named shared/shared and that mailboxes shared/system(a)service.intern and shared/de1001(a)service.intern would not exist. The folders shared and the level beyond now is shown as regular folder. I still can see the mails form the INBOXes. But each time I reopen Thunderbird, I get the same error messages. This is, what dovecot is logging: Jul 17 14:38:51 mx0 dovecot: auth: ldap(shared(a)roessner-net.de): unknown user Jul 17 14:38:51 mx0 dovecot: imap(de10000(a)service.intern): Error: Couldn't create namespace 'shared/' for user shared: userdb didn't return a home directory, but plugin setting quota used it (%h): dict:User quota::file:%h/mdbox/dovecot-quota Jul 17 14:40:51 mx0 dovecot: imap(de10000(a)service.intern): Error: Couldn't create namespace 'shared/' for user shared: userdb didn't return a home directory, but plugin setting quota used it (%h): dict:User quota::file:%h/mdbox/dovecot-quota Jul 17 14:42:49 mx0 dovecot: imap(de10000(a)service.intern): Error: Couldn't create namespace 'shared/' for user shared: userdb didn't return a home directory, but plugin setting quota used it (%h): dict:User quota::file:%h/mdbox/dovecot-quota doveadm config -n # 2.0.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-33-generic-pae i686 Ubuntu 10.04.2 LTS auth_cache_size = 10 M auth_default_realm = roessner-net.de auth_master_user_separator = * auth_mechanisms = plain login digest-md5 cram-md5 ntlm auth_realms = roessner-net.de auth_verbose = yes lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_access_groups = vmail mail_gid = vmail mail_location = mdbox:~/mdbox mail_plugins = quota mail_privileged_group = mail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = prefix = separator = / } namespace { list = children location = mdbox:%%h/mdbox:INDEX=~/mdbox/shared/%%u prefix = shared/%%u/ separator = / subscriptions = no type = shared } passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = file:/var/mail/virtual/shared-mailboxes quota = dict:User quota::file:%h/mdbox/dovecot-quota quota_rule = *:storage=300M:messages=20000 quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u recipient_delimiter = + sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = -reject } postmaster_address = postmaster(a)mx0.roessner-net.de protocols = imap pop3 sieve lmtp service auth-worker { unix_listener auth-worker { user = vmail } user = vmail } service auth { unix_listener auth-userdb { group = vmail mode = 0660 } user = vmail } service imap-login { service_count = 0 vsz_limit = 64 M } service lmtp { inet_listener lmtp { address = ::1 port = 24 } } service managesieve-login { service_count = 0 } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } ssl_cert = </ca/mail.roessner-net.de/newcert.pem ssl_key = </ca/mail.roessner-net.de/newkey.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes protocol lmtp { mail_plugins = quota sieve } protocol lda { mail_plugins = quota sieve acl } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_max_userip_connections = 50 mail_plugins = quota imap_quota acl imap_acl } Sorry to bother you once again with dovecot/thunderbird questions. It all began by switching from maildir to mdbox (which I wanted to test for shared file systems in the future...) Thunderbird 3.1.11 (Ubuntu Natty version) Best wishes and many thanks in advance Christian -- Roessner-Network-Solutions Bachelor of Science Informatik 50°34.725'N, 08°40.904'O, Nahrungsberg 81, 35390 Giessen F: +49 641 5879091, M: +49 176 93118939 USt-IdNr.: DE225643613 http://www.roessner-network-solutions.com

1 1