January 2012 - dovecot

[Dovecot] A small bug and a question about CONTEXT=SEARCH
by Anders 10 Jan '12

10 Jan '12

Hi, I have been looking at search and sorting with dovecot and have run into some things. The first one I think may be a minor bug because a set of commands result in the socket connection being closed without warning: UID SEARCH RETURN (SAVE COUNT) CHARSET UTF-8 (UNDELETED TEXT "foo") UID SEARCH RETURN (COUNT MIN) CHARSET UTF-8 () $ The empty paranthesis before the reference to the previous search result ($) is not legal IMAP, but should not cause the socket to be closed I think. Then I have question about RFC5267 and the announcement of CONTEXT=SEARCH in the capabilities. I think this RFC is supported by dovecot, or maybe just part of the RFC is supported? At least when I include the CONTEXT ADDTO or REMOVEFROM keywords I get an error, but UPDATE and CANCELUPDATE seem to be supported. The RFC has been updated by the RFC describing the NOTIFY extension to IMAP so maybe it has been decided to not add these keywords until a later time? I am using dovecot version 2.0.15 (with patches from Apple). Best Regards Anders

2 1

[Dovecot] rewriting mail_location
by Burckhard Schmidt 10 Jan '12

10 Jan '12

Hello, I have LDAP as userdb. Entries containing attributes mail=alias.user1(a)some.domain.de and uid=user1 Mail to alias.user1(a)some.domain.de gets delivered into /datatest/user/alias.user1 instead of /datatest/user/user1 by lda. I have userdb { args = /usr/dovecot/etc/ldapuser.conf driver = ldap } with a ldapuser.conf: hosts ... base ... user_filter = (&(|(mail=%u)(mail=%n(a)some.domain) (uid=%u))(objectClass=posixAccount)) user_attrs = uid=mail_location=maildir:/datatest/user/%$, uidNumber=29,gidNumber=133 I hoped local part of attribute mail could be replaced by uid for local delivery with dovecots lda? Any hints how to do that? (With postfix I could rewrite the address to uid@host and use local_transport = dovecot.) postfix has virtual_transport = dovecot. LDAP entry: mail: alias.user1(a)some.domain.de uid: user1 homeDirectory: /dev/null uidNumber: 464 gidNumber: 100 mail to alias.user1(a)some.domain.de Jan 10 14:03:24 ubu1004 postfix/qmgr[25221]: C434D1EE: from=<user@domain>, size=239, nrcpt=1 (queue active) Jan 10 14:03:24 ubu1004 dovecot: lda: Debug: Loading modules from directory: /usr/dovecot/lib/dovecot Jan 10 14:03:24 ubu1004 dovecot: lda: Debug: Module loaded: /usr/dovecot/lib/dovecot/lib20_autocreate_plugin.so Jan 10 14:03:24 ubu1004 dovecot: auth: Debug: master in: USER#0111#011alias.user1#011service=lda Jan 10 14:03:24 ubu1004 dovecot: auth: Debug: ldap(alias.user1): user search: base=ou=users,ou=...,c=de scope=subtree filter=(&(|(mail=alias.user1)(mail=alias.user1(a)some.domain.de)(uid=alias.user1))(objectClass=posixAccount)) fields=uid,uidNumber,gidNumber some substitutions are visibly: Jan 10 14:03:24 ubu1004 dovecot: auth: Debug: ldap(alias.user1): result: uid(location=maildir:/datatest/user/%$/maildir)=user1 gidNumber(133)=100 uidNumber(29)=464 Jan 10 14:03:24 ubu1004 dovecot: auth: Debug: master out: USER#0111#011alias.user1#011location=maildir:/datatest/user/user1/maildir#011133=100#01129=464 Jan 10 14:03:24 ubu1004 dovecot: lda: Debug: auth input: alias.user1 location=maildir:/datatest/user/user1/maildir 133=100 29=464 Jan 10 14:03:24 ubu1004 dovecot: lda: Debug: Added userdb setting: plugin/location=maildir:/datatest/user/user1/maildir but alias "alias.user1" still used for delivery: Jan 10 14:03:24 ubu1004 dovecot: lda: Debug: Added userdb setting: plugin/133=100 Jan 10 14:03:24 ubu1004 dovecot: lda: Debug: Added userdb setting: plugin/29=464 Jan 10 14:03:24 ubu1004 dovecot: lda(alias.user1): Debug: Effective uid=29, gid=133, home= Jan 10 14:03:24 ubu1004 dovecot: lda(alias.user1): Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/datatest/user/alias.user1/maildir:INDEX=/datatest/addons/index/alias.user1:CONTROL=/datatest/user/alias.user1/control:LAYOUT=fs Jan 10 14:03:24 ubu1004 dovecot: lda(alias.user1): Debug: fs: root=/datatest/user/alias.user1/maildir, index=/datatest/addons/index/alias.user1, control=/datatest/user/alias.user1/control, inbox=/datatest/user/alias.user1/maildir, alt= Jan 10 14:03:24 ubu1004 dovecot: lda(alias.user1): Debug: Namespace : Using permissions from /datatest/user/alias.user1/maildir: mode=0700 gid=-1 Jan 10 14:03:24 ubu1004 dovecot: lda(alias.user1): Debug: none: root=, index=, control=, inbox=, alt= Jan 10 14:03:24 ubu1004 dovecot: lda(alias.user1): Debug: Destination address: alias.user1@ubu1004 (source: user@hostname) Jan 10 14:03:24 ubu1004 dovecot: lda(alias.user1): msgid=unspecified: saved mail to INBOX Jan 10 14:03:24 ubu1004 postfix/pipe[25226]: C434D1EE: to=<alias.user1(a)some.domain.de>, relay=dovecot, delay=14, delays=14/0.01/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service) Jan 10 14:03:24 ubu1004 postfix/qmgr[25221]: C434D1EE: removed dovecot -n # 2.0.17 (684381041dc4+): /usr/dovecot/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-34-generic-pae i686 Ubuntu 10.04.3 LTS ext4 mail_gid = sysdov mail_location = maildir:/datatest/user/%n/maildir:INDEX=/datatest/addons/index/%n:CONTROL=/datatest/user/%n/control:LAYOUT=fs mail_plugins = autocreate mail_uid = sysdov passdb { args = failure_show_msg=yes imap driver = pam } service auth { client_limit = 30000 unix_listener auth-userdb { group = sysdov #effective 133 mode = 01204 user = sysdov #effective 29 } } userdb { args = /usr/dovecot/etc/ldapuser.conf driver = ldap } protocol lda { mail_plugins = autocreate } and ldapuser.conf: hosts ... base ... user_filter = (&(|(mail=%u)(mail=%n(a)some.domain) (uid=%u))(objectClass=posixAccount)) user_attrs = uid=mail_location=maildir:/datatest/user/%$, uidNumber=29,gidNumber=133 local part of mail should be replaced by uid for local delivery -- Regards --- Burckhard Schmidt

1 0

[Dovecot] Proxy login failures
by Urban Loesch 10 Jan '12

10 Jan '12

Hi, I'm using two dovecot pop3/imap proxies in front of our dovecot servers. Since some days I see many of the following errors in the logs of the two proxy-servers: ... dovecot: pop3-login: Error: proxy: Remote "IPV6-IP":110 disconnected: Connection closed: Connection reset by peer (state=0): user=<myuser>, method=PLAIN, rip=remote-ip, lip=localip ... dovecot: imap-login: Error: proxy: Remote "IPV6-IP":143 disconnected: Connection closed: Connection reset by peer (state=0): user=<myuser>, method=PLAIN, rip=remote-ip, lip=localip ... When this happens the Client gets the following error from the proxy: -ERR [IN-USE] Account is temporarily unavailable. System-details: OS: Debian Linux Proxy: 2.0.5-0~auto+23 Backend: 2.0.13-0~auto+54 Have you any idea what could cause this type of error? Thanks and regards Urban Loesch doveconf -n from one of our backendservers: # 2.0.13 (02d97fb66047): /etc/dovecot/dovecot.conf # OS: Linux 2.6.38.8-vs2.3.0.37-rc17-rol-em64t-timerp x86_64 Debian 6.0.2 ext4 auth_cache_negative_ttl = 0 auth_cache_size = 40 M auth_cache_ttl = 12 hours auth_mechanisms = plain login auth_username_format = %Lu auth_verbose = yes deliver_log_format = msgid=%m: %$ %p %w disable_plaintext_auth = no login_trusted_networks = our Proxy IP's (v4 and v6) mail_gid = mailstore mail_location = mdbox:/home/vmail/%d/%n:INDEX=/home/dovecotindex/%d/%n mail_plugins = " quota mail_log notify zlib" mail_uid = mailstore managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags notify mdbox_rotate_size = 5 M passdb { args = /etc/dovecot/dovecot-sql-account.conf driver = sql } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size from mail_log_group_events = no quota = dict:Storage used::file:%h/dovecot-quota sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags sieve_max_redirects = 10 zlib_save = gz zlib_save_level = 5 } protocols = imap pop3 lmtp sieve service imap-login { inet_listener imap { port = 143 } service_count = 0 vsz_limit = 256 M } service lmtp { inet_listener lmtp { address = * port = 24 } unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0666 user = postfix } vsz_limit = 512 M } service pop3-login { inet_listener pop3 { port = 110 } service_count = 0 vsz_limit = 256 M } ssl = no ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql-account.conf driver = sql } protocol lmtp { mail_plugins = " quota mail_log notify zlib sieve zlib" } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_max_userip_connections = 40 mail_plugins = " quota mail_log notify zlib imap_quota imap_zlib" } protocol pop3 { mail_plugins = " quota mail_log notify zlib" pop3_logout_format = bytes_sent=%o top=%t/%p, retr=%r/%b, del=%d/%m, size=%s uidl_hash=%u }

2 4

[Dovecot] Strange error: DIGEST-MD5 mechanism can't be supported with given passdbs
by Yubao Liu 10 Jan '12

10 Jan '12

Hi all, I have no idea about that message, here is my configuration, what's wrong? Debian testing, Dovecot 2.0.15 $ doveconf -n # 2.0.15: /etc/dovecot/dovecot.conf # OS: Linux 3.1.0-1-686-pae i686 Debian wheezy/sid auth_default_realm = corp.example.com auth_krb5_keytab = /etc/dovecot.keytab auth_master_user_separator = * auth_mechanisms = gssapi digest-md5 auth_realms = corp.example.com auth_username_format = %n first_valid_gid = 1000 first_valid_uid = 1000 mail_location = mdbox:/srv/mail/%u/Mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes pass = yes } passdb { driver = pam } plugin { sieve = /srv/mail/%u/.dovecot.sieve sieve_dir = /srv/mail/%u/sieve } protocols = " imap lmtp sieve" service auth { unix_listener auth-client { group = Debian-exim mode = 0660 } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = home=/srv/mail/%u driver = passwd } protocol lmtp { mail_plugins = " sieve" } protocol lda { mail_plugins = " sieve" } # cat /etc/dovecot/master-users xxx@corp.example.com:zzzzzzzz The zzzzz is obtained by "doveadm pw -s digest-md5 -u xxx(a)corp.example.com", I tried to add prefix "{DIGEST-MD5}" before the generated hash and/or add "scheme=DIGEST-MD5" to the passwd-file passdb's "args" option, both don't help. The error message: dovecot: master: Dovecot v2.0.15 starting up (core dumps disabled) dovecot: auth: Fatal: DIGEST-MD5 mechanism can't be supported with given passdbs gold dovecot: master: Error: service(auth): command startup failed, throttling I opened debug auth log, it showed dovecot read /etc/dovecot/master-users and parsed one line, then the error occurred. Doesn't passwd-file passdb support digest-md5 password scheme? If it doesn't support, how do I configure digest-md5 auth mechanism with digest-md5 password scheme for virtual users? Regards, Yubao Liu

4 10

[Dovecot] Postfix user map
by Timo Sirainen 10 Jan '12

10 Jan '12

http://hg.dovecot.org/dovecot-2.1/rev/f562bcaca215 implements "postmap" type sockets, which follow Postfix's tcp_table(5) protocol. So you can ask: get user@domain and Dovecot answers one of: - 200 1 - 500 User not found - 400 Internal failure So you can use this with Postfix: virtual_mailbox_maps = tcp:127.0.0.1:1234 With Dovecot you can enable it with: service auth { inet_listener postmap { listen = 127.0.0.1 port = 1234 } } Anyone have ideas if this could be improved, or used for some other purposes?

3 9

[Dovecot] Solr plugin
by Daniel L. Miller 10 Jan '12

10 Jan '12

On 1/8/2012 3:40 PM, Daniel L. Miller wrote: > On 1/6/2012 12:32 PM, Daniel L. Miller wrote: >> On 1/6/2012 9:36 AM, Timo Sirainen wrote: >>> On 6.1.2012, at 19.30, Daniel L. Miller wrote: >>> > > Jan 8 15:40:09 bubba dovecot: imap(user1(a)domain.com): Error: > fts_solr: Lookup failed: 400 undefined field CC > Jan 8 15:40:09 bubba dovecot: imap: Error: > > Looking at the Solr output - looks like the CC parameter is being capitalized while all the other fieldnames are lowercase. -- Daniel

2 3

[Dovecot] uid / gid and systemusers
by xamiw＠arcor.de 10 Jan '12

10 Jan '12

Hi all, I'm facing a problem when a user (q and g in this example) is logging into dovecot. Can anybody tell some hint? Thanks in advance. George /var/log/mail.log: ... Jan 8 16:18:28 test dovecot: User q is missing UID (see mail_uid setting) Jan 8 16:18:28 test dovecot: imap-login: Internal login failure (auth failed, 1 attempts): user=<q>, method=PLAIN, rip=AAA.BBB.CCC.DDD, lip=EEE.FFF.GGG.HHH TLS <--- edited by me Jan 8 16:18:28 test dovecot: dovecot: User g is missing UID (see mail_uid setting) Jan 8 16:18:28 test dovecot: imap-login: Internal login failure (auth failed, 1 attempts): user=<g>, method=PLAIN, rip=AAA.BBB.CCC.DDD, lip=EEE.FFF.GGG.HHH TLS <--- edited by me /etc/dovecot/dovecot.conf: protocols = imaps disable_plaintext_auth = yes shutdown_clients = yes log_timestamp = "%Y-%m-%d %H:%M:%S " ssl = yes ssl_cert_file = /etc/ssl/certs/dovecot.pem ssl_key_file = /etc/ssl/private/dovecot.pem mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_privileged_group = mail mbox_write_locks = fnctl dotlock auth default { mechanisms = plain passdb shadow { } } /etc/passwd: ... g:x:1000:1000:test1,,,:/home/g:/bin/bash q:x:1001:1001:test2,,,:/home/q:/bin/bash /etc/group: ... g:x:1000: q:x:1001:

2 2

[Dovecot] FTS-Solr plugin
by Daniel L. Miller 09 Jan '12

09 Jan '12

Solr plugin appears to break when mailbox names have an ampersand in the name. The messages appear to indicate '&' gets translated to '&--'. -- Daniel

2 1

[Dovecot] change initial permissions on creation of mail folder
by mailinglist 09 Jan '12

09 Jan '12

Installed dovcot from Debian .deb file. Creating a new account for system users sets permission for user-only. Where to change initial permissions on creation of mail folder and other subdirectories. Installed dovecot using "apt-get install dovecot-imapd dovecot-pop3d". Any time when I create a new account in my mail client for a system user, Dovecot tries to create ~/mail/.imap/INBOX. The permissions for mail and .imap are set to 0700. By this permissions INBOX can not be created leading to an error message in log files. When I manualy change the permissions to 0770, INBOX is created

2 1

[Dovecot] failed: Too many levels of symbolic links
by David Egbert 09 Jan '12

09 Jan '12

All, My dovecot install works great except for one error I keep seeing this in my logs. The folder has 7138 messages in it. I am informed the user they needed to reduce the number of messages in the folder and believe this will fix the problem. My question is about where the problem lies. Is the problem related to an internal limit with Dovecot v2.0.15 or with my Debian (3.1.0-1-amd64)? Thanks --- dovecot: imap(XXXXX(a)XXXXX.com): Error: readdir(/XXXX/XXXX/XXXXXXXXX/XXXXX/XXXXXXX/XXXXXXXXXXXXXXXXXXX/XXX) failed: Too many levels of symbolic links David Egbert Paperclip Systems, LLC --- This message, its contents, and attachments are confidential and are only authorized for the intended recipient. Disclosure, re-distribution, or use of said information is strictly prohibited, and may be excluded from disclosure by applicable law. If you are not the intended recipient, or their intermediary, please notify the sender and delete this message.

2 6