August 2011 - dovecot

Re: [Dovecot] File Permissions and delivery
by Timo Sirainen 30 Aug '11

30 Aug '11

On Mon, 2011-08-29 at 11:14 -0400, Simon Brereton wrote: > Aug 29 15:59:14 mail dovecot: deliver(simon(a)lydiard.net): stat(/var/spool/mail/virtual/domain.net/simon/tmp) failed: Permission denied (euid=999(mailsystem) egid=115(mailsystem) missing +x perm: /var/spool/mail/virtual) > > Even if I make EVERTHING under /var/spool/mail/virtual/* owned by mailsystem:mailsystem - and reload postfix and restart doevcot. But you didn't change the /var/spool/mail/virtual directory itself? (Like the error message says.)

2 1

[Dovecot] Virtual user and post-login 2.0.13
by Pelle Svensson 30 Aug '11

30 Aug '11

Hi I tried several variants of suggestions but I can't get it working dovecot-info.log: =========== Aug 25 17:37:48 imap-login: Info: Login: user=<vuser>, method=PLAIN, rip=192.168.1.xx, lip=192.168.1.xx, mpid=11264 Aug 25 17:37:48 imap(vuser): Info: Post-login script denied access to user vuser dovecot.log ======== Aug 25 17:31:28 imap-postlogin: Error: script-login: Error: user pmp(a)bredband.net: Error reading configuration: net_connect_unix(/var/run/dovecot/config) failed: Permission denied Aug 25 17:31:28 imap-postlogin: Error: script-login: Fatal: Internal error occurred. Refer to server log for more information. Aug 25 17:31:28 log: Error: service(imap-postlogin): child 11082 returned error 89 (Fatal failure) dovecot.conf ======== protocols = imap pop3 base_dir = /var/run/dovecot/ log_path = /var/log/dovecot.log info_log_path = /var/log/dovecot-info.log ssl = no # v1.2+, for older versions use: ssl_disable = yes disable_plaintext_auth = no mail_location = maildir:/home/fetchmail/mailroot/dummy pop3_uidl_format = %08Xu%08Xv !include conf.d/*.conf !include_try local.conf mail_uid=500 mail_gid=500 auth_verbose = yes auth_debug=yes auth_debug_passwords=yes mail_debug=yes # Optional tried with this!!! service config { unix_listener config { group = dovecot mode = 0660 } } service imap { # tell imap to do post-login lookup using a socket called "imap-postlogin" executable = imap imap-postlogin # Optional tried with this!!! user=dovecot } # The service name below doesn't actually matter. service imap-postlogin { # all post-login scripts are executed via script-login binary executable = script-login /home/fetchmail/dovecot-postlogin.sh # the script process runs as the user specified here (v2.0.14+): # Optional tried with this!!! # user=dovecot # user = $default_internal_user # this UNIX socket listener must use the same name as given to imap executable # Optional tried with this!!! #unix_listener imap-postlogin { #} } users ==== vuser:{PLAIN}pass:500:500::/home/fetchmail::userdb_mail=maildir:/home/fetchmail/mailroot/vuser-root allow_nets=192.168.1.0/24 ls -l /home/fetchmail/dovecot-postlogin.sh -rwxrwxrwx. 1 dovecot root 108 Aug 25 17:08 dovecot-postlogin.sh Any suggestions are very welcome!! /Thanks

3 4

[Dovecot] Dovecot service needs a second restart after boot - euid is not dir owner
by Pelle Svensson 30 Aug '11

30 Aug '11

After reboot dovecot service need a restart. dovecot service starts as S99dovecot with only S99rc-local coming up. After boot following error is filled up in dovecot.log Aug 28 11:33:12 imap(vuser): Error: open(/home/fetchmail/mailroot/map/dovecot.index.log) failed: Permission denied (euid=500(vuser) egid=500(vuser) missing +r perm: /home/fetchmail/mailroot/map/dovecot.index.log, euid is not dir owner) Aug 28 11:33:12 imap(vuser): Error: file_dotlock_create(/home/fetchmail/mailroot/map/dovecot-uidlist) failed: Permission denied (euid=500(fetchmail) egid=500(fetchmail) missing +w perm: /home/fetchmail/mailroot/map, euid is not dir owner) Aug 28 11:33:12 imap(vuser): Error: open(/home/fetchmail/mailroot/map/dovecot-uidlist) failed: Permission denied After Linux has booted you just issue service dovecot restart And everything is back to normal and no error. Running on a Pentium 800MHz not too fast pc

2 2

[Dovecot] ldap authentication
by Daminto Lie 30 Aug '11

30 Aug '11

Hi, I have got Postfix, Dovecot IMAP and squirrelmail up and running on my ubuntu server 10.04 for a testing purpose. My question is in order to be able to login, do I need to create user accounts for each users on the server? I have about 20 users at the moment, and it's going to take time. I was thinking of using LDAP and have the dovecot authentication through LDAP. This way, I do not have to create accounts for 20 users on the server. The dovecot can just authenticate users by looking them up against the LDAP. I wonder if anyone would be able to share some guides as to how to set it up to work with Postfix and Dovecot. Thank you

1 0

[Dovecot] dovecot w/ libwrap on fbsd
by Gelu Lupas 30 Aug '11

30 Aug '11

Dovecot with libwrap doesn't work on FreeBSD for some reason or another. I have these lines in my /etc/hosts.allow: ALL: LOCAL 127.0.0.1: allow pop3: ALL: allow ALL: ALL: deny Yet when you try to telnet to localhost, port 110 this is what happens: Aug 29 22:48:38 dodo dovecot: pop3-login: Error: connect(tcpwrap) failed: Permission denied I also tried auth_debug=yes to see what's wrong but it only shows the processes which handled the connection, no extra info with the reason why it failed. Here's the config: # 2.0.13: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 7.4-RELEASE i386 auth_mechanisms = plain login base_dir = /var/run/dovecot/ disable_plaintext_auth = no dotlock_use_excl = no first_valid_uid = 1000 listen = * login_access_sockets = tcpwrap login_greeting = login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c mail_location = mbox:~/Mail/:INBOX=/var/mail/%u mail_log_prefix = "%Us(%u): " mail_privileged_group = mail maildir_copy_with_hardlinks = no passdb { driver = pam } protocols = pop3 service auth { executable = /usr/local/libexec/dovecot/auth unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root vsz_limit = 64 M } service imap-login { chroot = login client_limit = 128 process_limit = 32 process_min_avail = 3 service_count = 1 user = dovecot vsz_limit = 32 M } service imap { drop_priv_before_exec = no process_limit = 128 vsz_limit = 256 M } service pop3-login { chroot = login client_limit = 128 process_limit = 32 process_min_avail = 3 service_count = 1 user = dovecot vsz_limit = 32 M } service pop3 { drop_priv_before_exec = no process_limit = 128 vsz_limit = 256 M } service tcpwrap { unix_listener login/tcpwrap { group = $default_login_user mode = 0600 user = $default_login_user } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } verbose_proctitle = yes protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } protocol lda { postmaster_address = postmaster(a)europrima.ro sendmail_path = /usr/sbin/sendmail }

2 1

[Dovecot] : error while loading shared libraries: libdovecot.so.0 (arm cross compile)
by Stephen Feyrer 29 Aug '11

29 Aug '11

Hi. I've made a new attempt at build Dovecot. The build and then install processes appeared to work find. Then when I try to run Dovecot it reports the error: /share/MD0_DATA/optware/opt/sbin/dovecot: error while loading shared libraries: libdovecot.so.0: cannot open shared object file: No such file or directory To get a better idea of what's going on, I added --enable-devel-checks at ./configure and then ran gdb: # gdb --args dovecot -F GNU gdb 6.8 [snip] This GDB was configured as "arm-none-linux-gnueabi"... (no debugging symbols found) (gdb) run Starting program: /share/MD0_DATA/optware/opt/sbin/dovecot -F (no debugging symbols found) /share/MD0_DATA/optware/opt/sbin/dovecot: error while loading shared libraries: libdovecot.so.0: cannot open shared object file: No such file or directory Program exited with code 0177. (gdb) bt full No stack. (gdb) quit By the way on a separate but related note, adding --enable-maintiner-mode introduced a new problem also relating to libdovecot.so.0.0.0 I'll refer to that in the post script. # ls -alh /opt/lib/dovecot/ drwxr-xr-x 8 admin administ 4.0k Aug 27 16:31 ./ drwxr-xr-x 37 admin administ 16.0k Aug 27 16:27 ../ drwxr-xr-x 2 avahi avahi 4.0k Nov 26 2009 .debug/ drwxr-xr-x 2 admin administ 4.0k Aug 27 16:27 auth/ drwxr-xr-x 2 admin administ 4.0k Aug 27 16:31 doveadm/ -rw-r--r-- 1 admin administ 678 Aug 27 16:27 dovecot-config drwxr-xr-x 3 admin administ 4.0k Aug 26 18:01 imap/ drwxr-xr-x 2 admin administ 4.0k Aug 26 18:01 lda/ -rw-r--r-- 1 admin administ 527.6k Jan 6 2011 lib01_acl_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib01_acl_plugin.la* -rwxr-xr-x 1 admin administ 56.3k Aug 27 16:27 lib01_acl_plugin.so* -rw-r--r-- 1 admin administ 70.5k Jan 6 2011 lib02_imap_acl_plugin.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 lib02_imap_acl_plugin.la* -rwxr-xr-x 1 admin administ 13.1k Aug 27 16:27 lib02_imap_acl_plugin.so* -rw-r--r-- 1 admin administ 69.9k Jan 6 2011 lib02_lazy_expunge_plugin.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 lib02_lazy_expunge_plugin.la* -rwxr-xr-x 1 admin administ 13.0k Aug 27 16:27 lib02_lazy_expunge_plugin.so* -rw-r--r-- 1 admin administ 51.3k Jan 6 2011 lib05_snarf_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib05_snarf_plugin.la* -rwxr-xr-x 1 admin administ 7.4k Aug 27 16:27 lib05_snarf_plugin.so* -rw-r--r-- 1 admin administ 443.4k Jan 6 2011 lib10_quota_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib10_quota_plugin.la* -rwxr-xr-x 1 admin administ 51.5k Aug 27 16:27 lib10_quota_plugin.so* -rw-r--r-- 1 admin administ 23.6k Jan 6 2011 lib11_imap_quota_plugin.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 lib11_imap_quota_plugin.la* -rwxr-xr-x 1 admin administ 8.3k Aug 27 16:27 lib11_imap_quota_plugin.so* -rw-r--r-- 1 admin administ 56.9k Jan 6 2011 lib11_trash_plugin.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 lib11_trash_plugin.la* -rwxr-xr-x 1 admin administ 9.9k Aug 27 16:27 lib11_trash_plugin.so* -rw-r--r-- 1 admin administ 71.8k Jan 6 2011 lib15_notify_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib15_notify_plugin.la* -rwxr-xr-x 1 admin administ 10.6k Aug 27 16:27 lib15_notify_plugin.so* -rw-r--r-- 1 admin administ 14.4k Jan 6 2011 lib20_autocreate_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib20_autocreate_plugin.la* -rwxr-xr-x 1 admin administ 5.3k Aug 27 16:27 lib20_autocreate_plugin.so* -rw-r--r-- 1 avahi avahi 10.9k Nov 26 2009 lib20_convert_plugin.a -rw-r--r-- 1 admin administ 62.7k Jan 6 2011 lib20_expire_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib20_expire_plugin.la* -rwxr-xr-x 1 admin administ 10.6k Aug 27 16:27 lib20_expire_plugin.so* -rw-r--r-- 1 admin administ 161.0k Jan 6 2011 lib20_fts_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib20_fts_plugin.la* -rwxr-xr-x 1 admin administ 29.4k Aug 27 16:27 lib20_fts_plugin.so* -rw-r--r-- 1 admin administ 59.4k Jan 6 2011 lib20_listescape_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib20_listescape_plugin.la* -rwxr-xr-x 1 admin administ 9.4k Aug 27 16:27 lib20_listescape_plugin.so* -rw-r--r-- 1 admin administ 62.8k Jan 6 2011 lib20_mail_log_plugin.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 lib20_mail_log_plugin.la* -rwxr-xr-x 1 admin administ 10.1k Aug 27 16:27 lib20_mail_log_plugin.so* -rw-r--r-- 1 avahi avahi 54.4k Nov 6 2010 lib20_mbox_snarf_plugin.a -rw-r--r-- 1 admin administ 450.8k Jan 6 2011 lib20_virtual_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib20_virtual_plugin.la* -rwxr-xr-x 1 admin administ 47.6k Aug 27 16:27 lib20_virtual_plugin.so* -rw-r--r-- 1 admin administ 115.1k Jan 6 2011 lib20_zlib_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib20_zlib_plugin.la* -rwxr-xr-x 1 admin administ 18.4k Aug 27 16:27 lib20_zlib_plugin.so* -rw-r--r-- 1 admin administ 181.7k Jan 6 2011 lib21_fts_squat_plugin.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 lib21_fts_squat_plugin.la* -rwxr-xr-x 1 admin administ 48.8k Aug 27 16:27 lib21_fts_squat_plugin.so* -rw-r--r-- 1 admin administ 22.0k Jan 6 2011 lib30_imap_zlib_plugin.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 lib30_imap_zlib_plugin.la* -rwxr-xr-x 1 admin administ 6.5k Aug 27 16:27 lib30_imap_zlib_plugin.so* -rw-r--r-- 1 admin administ 101.3k Jan 6 2011 libdovecot-lda.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 libdovecot-lda.la* lrwxrwxrwx 1 admin administ 23 Aug 27 16:31 libdovecot-lda.so -> libdovecot-lda.so.0.0.0* lrwxrwxrwx 1 admin administ 23 Aug 27 16:31 libdovecot-lda.so.0 -> libdovecot-lda.so.0.0.0* -rwxr-xr-x 1 admin administ 35.2k Aug 27 16:27 libdovecot-lda.so.0.0.0* -rw-r--r-- 1 admin administ 241.7k Jan 6 2011 libdovecot-login.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 libdovecot-login.la* lrwxrwxrwx 1 admin administ 25 Aug 27 16:31 libdovecot-login.so -> libdovecot-login.so.0.0.0* lrwxrwxrwx 1 admin administ 25 Aug 27 16:31 libdovecot-login.so.0 -> libdovecot-login.so.0.0.0* -rwxr-xr-x 1 admin administ 65.5k Aug 27 16:27 libdovecot-login.so.0.0.0* -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 libdovecot-sql.la* lrwxrwxrwx 1 admin administ 23 Aug 27 16:31 libdovecot-sql.so -> libdovecot-sql.so.0.0.0* lrwxrwxrwx 1 admin administ 23 Aug 27 16:31 libdovecot-sql.so.0 -> libdovecot-sql.so.0.0.0* -rwxr-xr-x 1 admin administ 19.3k Aug 27 16:27 libdovecot-sql.so.0.0.0* -rw-r--r-- 1 admin administ 6.2M Jan 6 2011 libdovecot-storage.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 libdovecot-storage.la* lrwxrwxrwx 1 admin administ 27 Aug 27 16:31 libdovecot-storage.so -> libdovecot-storage.so.0.0.0* lrwxrwxrwx 1 admin administ 27 Aug 27 16:31 libdovecot-storage.so.0 -> libdovecot-storage.so.0.0.0* -rwxr-xr-x 1 admin administ 737.5k Aug 27 16:27 libdovecot-storage.so.0.0.0* -rw-r--r-- 1 admin administ 1.8M Jan 6 2011 libdovecot.a -rwxr-xr-x 1 admin administ 1011 Aug 27 16:27 libdovecot.la* lrwxrwxrwx 1 admin administ 19 Aug 27 16:31 libdovecot.so -> libdovecot.so.0.0.0* lrwxrwxrwx 1 admin administ 19 Aug 27 16:31 libdovecot.so.0 -> libdovecot.so.0.0.0* -rwxr-xr-x 1 admin administ 440.8k Aug 27 16:27 libdovecot.so.0.0.0* drwxr-xr-x 2 admin administ 4.0k Aug 26 18:01 pop3/ Everything seems to be in the right place. So I don't know what's wrong. Now on to my post script. This issue first appears when I try to package my freshly built Dovecot for installation on my arm powered nas. #make dovecot-ipk [...] test -z "/opt/include/dovecot" || /usr/bin/mkdir -p "~/Projects/nslu2/optware/tsx09/builds/dovecot-2.0.13-ipk/opt/include/dovecot" /usr/bin/install -c -m 644 settings.h settings-parser.h '~/Projects/nslu2/optware/tsx09/builds/dovecot-2.0.13-ipk/opt/include/dovecot' make[5]: Leaving directory `~/Projects/nslu2/optware/tsx09/builds/dovecot/src/lib-settings' make[4]: Leaving directory `~/Projects/nslu2/optware/tsx09/builds/dovecot/src/lib-settings' Making install in lib-dovecot make[4]: Entering directory `~/Projects/nslu2/optware/tsx09/builds/dovecot/src/lib-dovecot' make[5]: Entering directory `~/Projects/nslu2/optware/tsx09/builds/dovecot/src/lib-dovecot' test -z "/opt/lib/dovecot" || /usr/bin/mkdir -p "~/Projects/nslu2/optware/tsx09/builds/dovecot-2.0.13-ipk/opt/lib/dovecot" /bin/sh ../../libtool --mode=install /usr/bin/install -c -s libdovecot.la '~/Projects/nslu2/optware/tsx09/builds/dovecot-2.0.13-ipk/opt/lib/dovecot' libtool: install: /usr/bin/install -c .libs/libdovecot.so.0.0.0 ~/Projects/nslu2/optware/tsx09/builds/dovecot-2.0.13-ipk/opt/lib/dovecot/libdovecot.so.0.0.0 libtool: install: strip --strip-unneeded ~/Projects/nslu2/optware/tsx09/builds/dovecot-2.0.13-ipk/opt/lib/dovecot/libdovecot.so.0.0.0 strip: Unable to recognise the format of the input file `~/Projects/nslu2/optware/tsx09/builds/dovecot-2.0.13-ipk/opt/lib/dovecot/libdovecot.so.0.0.0' make[5]: *** [install-pkglibLTLIBRARIES] Error 1 make[5]: Leaving directory `~/Projects/nslu2/optware/tsx09/builds/dovecot/src/lib-dovecot' make[4]: *** [install-am] Error 2 make[4]: Leaving directory `~/Projects/nslu2/optware/tsx09/builds/dovecot/src/lib-dovecot' make[3]: *** [install-recursive] Error 1 make[3]: Leaving directory `~/Projects/nslu2/optware/tsx09/builds/dovecot/src' make[2]: *** [install-recursive] Error 1 make[2]: Leaving directory `~/Projects/nslu2/optware/tsx09/builds/dovecot' make[1]: *** [install-strip] Error 2 make[1]: Leaving directory `~/Projects/nslu2/optware/tsx09/builds/dovecot' make: *** [~/Projects/nslu2/optware/tsx09/builds/dovecot_2.0.13-2_arm.ipk] Error 2 So I went looking for libdovecot.so.0.0.0 and found, ls -ahl ~/Projects/nslu2/optware/tsx09/builds/dovecot-2.0.13-ipk/opt/lib/dovecot/: total 1.3M drwxr-xr-x 2 leonidis leonidis 4.0K Aug 27 17:07 . drwxr-xr-x 3 leonidis leonidis 4.0K Aug 27 17:07 .. -rw-r--r-- 1 leonidis leonidis 678 Aug 27 17:07 dovecot-config -rwxr-xr-x 1 leonidis leonidis 1.3M Aug 27 17:07 libdovecot.so.0.0.0 The other libraries appear to have been built and are waiting to be packaged up but ipackage doesn't seem to get that far. What this says about ipackage and how it might relate to my first problem I don't know. I apologise this all seems a bit like a broken record to me. -- Kind regards Stephen Feyrer.

3 2

Re: [Dovecot] File Permissions and delivery
by Timo Sirainen 29 Aug '11

29 Aug '11

On Fri, 2011-08-26 at 13:10 -0400, Simon Brereton wrote: > mail:~# ls /var/spool/mail/virtual/domain.net/simon/new/ > -rwxrwx--- 1 postfix mailsystem 2.5K Aug 26 03:33 1314326000.V801I1666018M803015.mail.net,S=2461:2, > -rwxrwx--- 1 postfix mailsystem 2.5K Aug 26 03:36 1314326209.V801I1666019M447273.mail.net,S=2460:2, > -rw-rw---- 1 postfix mailsystem 2.5K Aug 26 04:00 1314327630.V801I166601aM308173.mail.net,S=2477:2, > -rw------- 1 postfix mailsystem 2.5K Aug 26 04:22 1314328966.V801I166601bM756462.mail.net,S=2461:2, > -rw------- 1 postfix mailsystem 1.1K Aug 26 16:28 1314372534.V801I166601cM615258.mail.net,S=1097:2, > -rw------- 1 postfix mailsystem 1.1K Aug 26 16:31 1314372685.V801I166601dM264242.mail.net,S=1097:2, > > Mails are being delivered with 0600 permissions and not 0660 (the mails from courier seem to have all been 0770 as you can see). If I manually change the permission (to 0660) then I can see the mail in the MUA. If /var/spool/mail/virtual/domain.net/simon has 0770 permissions, the new mails should be delivered with 0660 permissions. (I don't remember if having g+s makes any difference in the directory like you have in the domain dir.) In any case, it would be better if mails were delivered as mailsystem:mailsystem 0600 since that's what you're reading them as. Unless you have some other good reason for requiring mailsystem group to be able to read them.

2 1

Re: [Dovecot] File Permissions and delivery
by Patrick Domack 29 Aug '11

29 Aug '11

My guess is your delivering email with postfix to the inbox, instead of using dovecot-lda. And something odd is going on with that postfix to get odd permissions like that. You probably needed to edit the postfix virtual deliever transport, or maybe you just forget to active the dovecot-lda (deliever) transport. Quoting Simon Brereton <simon.brereton(a)buongiorno.com>: > Hi > > I'm very new to Dovecot (been using Courier for 5 years), but I've > been persuaded of the merits of Dovecot and since the server needs > upgrading that seems like the perfect time/excuse. > > On a test server, I set up postfix and installed Dovecot (running > 32-bit Debian Squeeze, installed from apt-get). I mirrored the mail > store (Maildirs, for historical reasons located under > /var/spool/mail/virtual/domain.com/user). Then I ran the courier > migration perl script and everything was fine and dandy. > > However, when I can to do the production migration, things weren't > as smooth. The new server is 64-bit (not that I think it makes a > difference, but if you're going to help me you should have all the > information :) > > Again, I installed Postfix and Dovecot > Took down the old server > Mirrored the Maildirs > Ran the migration script > Restarted everything > > At this point everything looked like it was ok. Mail was being > received and delivered to the Maildirs and the IMAP login was fine. > However, I noticed errors in the logs when retreiving mail with the > MUA along the lines of: > > Aug 26 16:59:48 mail dovecot: IMAP(simon(a)lydiard.net): > open(/var/spool/mail/virtual/domain.net/simon/cur/1314328966.V801I166601bM7… failed: Permission denied (euid=999(mailsystem) egid=115(mailsystem) missing +r perm: > /var/spool/mail/virtual/domain.net/simon/cur/1314328966.V801I166601bM756462.mail.net,S=2461:2,) > > After messing around with the chown and chmod (even though these > were exactly the same as the test server) I finally discovered the > issue. > > mail:~# ls /var/spool/mail/virtual/domain.net/simon/new/ > -rwxrwx--- 1 postfix mailsystem 2.5K Aug 26 03:33 > 1314326000.V801I1666018M803015.mail.net,S=2461:2, > -rwxrwx--- 1 postfix mailsystem 2.5K Aug 26 03:36 > 1314326209.V801I1666019M447273.mail.net,S=2460:2, > -rw-rw---- 1 postfix mailsystem 2.5K Aug 26 04:00 > 1314327630.V801I166601aM308173.mail.net,S=2477:2, > -rw------- 1 postfix mailsystem 2.5K Aug 26 04:22 > 1314328966.V801I166601bM756462.mail.net,S=2461:2, > -rw------- 1 postfix mailsystem 1.1K Aug 26 16:28 > 1314372534.V801I166601cM615258.mail.net,S=1097:2, > -rw------- 1 postfix mailsystem 1.1K Aug 26 16:31 > 1314372685.V801I166601dM264242.mail.net,S=1097:2, > > Mails are being delivered with 0600 permissions and not 0660 (the > mails from courier seem to have all been 0770 as you can see). If I > manually change the permission (to 0660) then I can see the mail in > the MUA. > > After thinking for a while it occurred to me that this is covered in > the LDA section. But making changes to the config file (either > permissions or UID/GID) doesn't seem to make a difference. (Yes, I > did restart postfix and dovecot after the changes). > > Anyway, here is my dovecot -n: > > mail:~# dovecot -n > # 1.2.15: /etc/dovecot/dovecot.conf > # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.2 ext3 > log_timestamp: %Y-%m-%d %H:%M:%S > protocols: imap imaps pop3 pop3s > ssl_ca_file: /etc/ssl/keys/ca.crt > ssl_cert_file: /etc/ssl/keys/mail.net.crt > ssl_key_file: /etc/ssl/private/mail.net.key > disable_plaintext_auth: no > login_dir: /var/run/dovecot/login > login_executable(default): /usr/lib/dovecot/imap-login > login_executable(imap): /usr/lib/dovecot/imap-login > login_executable(pop3): /usr/lib/dovecot/pop3-login > mail_privileged_group: mailsystem > mail_location: maildir:/var/spool/mail/virtual/%d/%n > maildir_very_dirty_syncs: yes > mbox_write_locks: fcntl dotlock > mail_executable(default): /usr/lib/dovecot/imap > mail_executable(imap): /usr/lib/dovecot/imap > mail_executable(pop3): /usr/lib/dovecot/pop3 > mail_plugins(default): quota imap_quota > mail_plugins(imap): quota imap_quota > mail_plugins(pop3): quota > mail_plugin_dir(default): /usr/lib/dovecot/modules/imap > mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap > mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 > imap_client_workarounds(default): outlook-idle delay-newmail > imap_client_workarounds(imap): outlook-idle delay-newmail > imap_client_workarounds(pop3): > pop3_client_workarounds(default): > pop3_client_workarounds(imap): > pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh > lda: > postmaster_address: postmaster@net > mail_plugins: quota > log_path: > info_log_path: > deliver_log_format: msgid=%m: %f: %$ > auth default: > mechanisms: plain login > user: mailsystem > verbose: yes > passdb: > driver: sql > args: /etc/dovecot/dovecot-sql.conf > userdb: > driver: prefetch > userdb: > driver: static > args: uid=999 gid=115 home=/var/spool/mail/virtual/%d/%n > allow_all_users=yes > socket: > type: listen > client: > path: /var/spool/postfix/private/auth > mode: 432 > user: postfix > group: mailsystem > master: > path: /var/run/dovecot/auth-master > mode: 432 > user: mailsystem > group: mailsystem > plugin: > quota: maildir > > As you can see, I tried to go 0660 in both client and master. > > The portion of my master.cf > 81 # SPB - Attempt to deliver with Dovecot LDA > 82 dovecot unix - n n - - pipe > 83 flags=DRhu user=mailsystem argv=/usr/lib/dovecot/deliver -f > ${sender} -d ${user}@${nexthop} > > Is there anything else I should include? > > I'm pretty sure it's an error on my part. I'm just not clued up > enough to know where. > > My second problem is that I thought I had things back to where they > were before I messed with chown and chmod, but now I get this in the > logs > > dovecot: dovecot: Fatal: > chdir(/var/spool/mail/virtual/domain.net/simon//) failed: Permission > denied (euid=999(mailsystem) egid=115(mailsystem) missing +x perm: > /var/spool/mail/virtual) > > But the ls on that is exactly the same as on the test server: > ls /var/spool/mail/virtual/ > total 44K > drwxrwS--- 11 postfix mailsystem 4.0K Aug 25 23:07 ./ > drwxrwsr-x 5 amavis mailsystem 4.0K Oct 19 2009 ../ > drwxrws--- 5 mailsystem mailsystem 4.0K Aug 26 02:33 domain.net/ > > So, now I'm stumped. I hope someone can spot the simple thing I've missed! > > Thanks. > > > Simon

2 3

[Dovecot] limiting number of incorrect logins per connection
by Alex 29 Aug '11

29 Aug '11

Hi Guys, Running Dovecot 2 on my server. It is regularly getting dictionary auth attacked. What I have noticed is that once connected to a pop3/imap login session, you can send endless incorrect usernames+passwords attempts. This is a problem for me... I use fail2ban to try and stop these script kiddies. The problem is that fail2ban detects the bad auths, firewalls the IP, however, since it's an "established" session, the attacker can keep authing away... It's only on a subsequent (new) connection that the firewalling will take effect. Why is there no configuration option such as "max auth attempts per connection"? This would be useful, so once the limit is reached, the connection is dropped. is there a patch/workaround?

7 11

Re: [Dovecot] Catch22: user needs space to fix out of space condition
by Joseph Tam 29 Aug '11

29 Aug '11

Thanks to all who've made suggestions. It seems removing dotlocks as a locking method is the way to go. There is another dotlock locking variant mentioned in 10-mail.conf that seems to address this situation for those that can't get away from dotlocks: # dotlock_try: Same as dotlock, but if it fails because of permissions or # because there isn't enough disk space, just skip it. mbox_write_locks = dotlock_try fcntl Joseph Tam <jtam.home(a)gmail.com>

3 4