October 2012 - dovecot

[Dovecot] lmtp proxy logging
by Jack Bates 18 Oct '12

18 Oct '12

The logging on lmtp and lmtp proxy is pretty limited from what I can see. It seems to handle errors, Connect, Disconnect, and in the case of lmtp delivery, it logs where an email is saved to. The lmtp may be enough, "connect, saved user, saved user..., disconnect", but I was curious if it is worth while to add more info logging for the proxy, primarily which recipients are sent to which proxy. I was thinking of local patching it, but I'll generate up something more inline with official code if it is desired. My thought is to show 1 entry for each recipient, and the destination server chosen. If I recall correctly, the proxy code doesn't actually listen in on the conversation, so logging results would probably complicate the code. Jack

4 8

[Dovecot] CAS Authentication
by b m 18 Oct '12

18 Oct '12

Hi.I'm very sorry for the repost but I forgot the subject. So, I'm using dovecot 2.0.18 and I'm trying to authenticate through a CAS server (until now authentication was through MS Active Directory). I could not find anywhere some examples, so here is what i have done so far. -install phpcas and pam_cas -edit /etc/pam.d/dovecot auth sufficient /lib/security/pam_cas.so -simap://webmail.mydomain.com -f /etc/pam_cas.conf -edit /etc.pam_cas.conf host mycas.mydomain.com port 443 uriValidate /cas/proxyValidate ssl on proxy ??????????????????????? trusted_ca /etc/cert/certificate.pem debug on - and finally dovecot.conf which I'm sure is complety wrong userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } passdb { driver = pam args = cache_key=%u dovecot } What I get in log is Oct 15 15:39:58 auth-worker: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Oct 15 15:39:58 auth-worker: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Oct 15 15:39:58 auth-worker: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Oct 15 15:39:58 auth-worker: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so Oct 15 15:39:58 auth-worker: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Oct 15 15:39:58 auth-worker: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Oct 15 15:39:58 auth-worker: Debug: pam(user,127.0.0.1): lookup service=dovecot Oct 15 15:39:58 auth-worker: Debug: pam(user,127.0.0.1): #1/1 style=1 msg=Password: Oct 15 15:39:58 auth-worker: Info: pam(user,127.0.0.1): pam_authenticate() failed: Permission denied Oct 15 15:40:00 auth: Debug: client out: FAIL 1 user=user Oct 15 15:40:00 imap-login: Info: Aborted login (auth failed, 1 attempts): user=<user>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Oct 15 15:40:00 auth: Debug: auth client connected (pid=9019) Any ideas? Thanks.

3 5

[Dovecot] Problem with process_limit
by FABIO FERRARI 18 Oct '12

18 Oct '12

Hello, i have a problem with the process_limit configuration. Occasionally, it happens that the dovecot.log shows this line: master: Warning: service(imap): process_limit reached, client connections are being dropped So I checked, the process number, with the command: ps auxwww | grep imap | grep -v login | wc -l and it shows 1024. Then, i edited the file /etc/dovecot/conf.d/10-master.conf and set the line process_limit = 1500 I checked if the dovecot had accepted the change with the command doveconf -n | grep process_limit and it shows process_limit = 1500 But it is dropping the connections when they reach 1024 anyway, the configuration parameter is totally ignored. Can anyone help? Am I editing the right parameter? thanks in advance Fabio Ferrari P.S. The version of the dovecot is dovecot-2.0.1-1_118.el5 on Red Hat Enterprise Linux Server release 5.8 (Tikanga).

3 3

[Dovecot] real_rip variable addition for dovecot 2.1.10
by Jack Bates 18 Oct '12

18 Oct '12

Timo, Please check the code. I didn't add it, but a real_lip might be useful for some people as well. Also, I notice that pop3-proxy is doing a different xsession than the imap proxy. Is there an xsession standard that is different between the two, or just an oversight in the code? Both send the remote address/port, but only imap proxy sends the local address/port. This patch declares long variable %{real_rip} so that a backend server can declare a different login_log_format_elements login_log_format_elements = user=<%u> method=%m rip=%r lip=%l pip=%{real_rip} mpid=%e %c This is primarily useful for backend servers to log both the rip, lip, and in case of xsession, the real rip. I haven't done extensive testing yet, but as long as nothing does anything weird elsewhere in the code, it should be good. http://www.brightok.net/jbates/dovecot-2.1.10-real-ip.patch dovecot: pop3-login: Login: user=<test>, method=PLAIN, rip=192.168.1.5, lip=::1, pip=::1, mpid=8665, secured Jack Bates

2 3

[Dovecot] Difference between Indexing and Rescan in FTS
by Fred Kilbourn 18 Oct '12

18 Oct '12

I've had squat running on dovecot 2.0 and have been updating all users mailbox indexes nighty via cron with this command: doveadm -v search -A text xyzzyx I've just updated to 2.1 and I'm migrating to lucene indexes, but reading the documentation I'm having a hard time understanding the semantic differences between indexing and rescanning. If I were to continue to run an all user all mailbox index every night, would that be appropriate? Would running this every night avoid the need to ever rescan? Should I run rescan instead of index? Should I run both rescan and index? In which order? Best Regards, FredK

3 5

[Dovecot] Per user quotas
by David Travers 18 Oct '12

18 Oct '12

Hi All, I keep going round in circles with this. I have quotas up and running but would like to add a couple of per user exceptions but can't figure out how to do it! I am using Open Xchange community edition on top of dovecot and tha tis showing the 200MB limit, if I change it in the dovecot.conf the change is reflected in open xchange, but can't figure out how to change for 1 user. I believe I need to add to a passwd file, but I have added to that and nothing has changed. # dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 6.0.5 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/ssl/certs/postfix.pem ssl_key_file: /etc/ssl/private/postfix.key login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_privileged_group: mail mail_location: maildir:~/mail:LAYOUT=fs:INBOX=~/mail/ mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 lda: mail_plugins: quota auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix plugin: quota: maildir:user quota quota_rule: *:storage=200M quota_rule2: Trash:storage=10%% quota_rule2: SPAM:ignore quota_warning: storage=95%% /usr/local/bin/quota-warning.sh 95 quota_warning2: storage=80%% /usr/local/bin/quota-warning.sh 80 quota_exceeded_message: Quota exceeded, Please delete some emails Any help gratefully received Dave _________________________________________ This email has been scanned for malicious content. _________________________________________

3 4

[Dovecot] Dsync clustering
by list＠airstreamcomm.net 18 Oct '12

18 Oct '12

I have not seen mention of using dsync for clustering Dovecot in some time on the mailing list, but I believe Timo was going to write a wiki page when v2.2 became more mature. Does this documentation exist yet, or are there any resources on what dsync replication is capable of at this point (looking on the wiki and google didn't reveal much)? Thank in advance.

2 1

Re: [Dovecot] Disconnected for inactivity time.
by Joseph Tam 18 Oct '12

18 Oct '12

Robert JR writes: > After 10 mins of unactivity of pop3 , dovecot disconnect the user (-ERR > Disconnected for inactivity.) > > What is the option in the config file which control the unactivity > logout time ? becuase i want to decrease the inactivity time > > To 5 mins instead of 10 mins Looks like it's set in the source code pop3-client.c:#define CLIENT_IDLE_TIMEOUT_MSECS (10*60*1000) but the output of # doveconf -a ... service pop3 { ... idle_kill = 0 ... } maybe points to the config that overrides this. Easy enough to test. It's non-RFC compliant as one poster points out, so unless you got a good reason to do this like lots of zombie pop3 processes, leave it alone. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Dovecot sieve and duplicate email subjects
by Benjamin Thomas 17 Oct '12

17 Oct '12

Hi, I'm running a small email server with the help of iRedMail. I can manage sieve scripts from the Rouncube web interface or manually inside the user's personal sieve folder. I have an email account setup to receive automated tasks. Some of these "alerts" occur too often and they have the same subject line, but different senders. This is the rule I am currently using: ##CODE START## # rule:[AutoAlerts] if anyof ( header :matches "Subject" "AutoAlert Type1*", header :matches "Subject" "AutoAlert Type2*", header :matches "Subject" "AutoAlert Type3*" ) { fileinto "INBOX.AutoAlerts"; stop; } ##CODE END## I was wondering if it's possible to gracefully handle duplicate subjects lines (within a given time frame) with sieve filters ? Ideally, I would like the first email of the day with subject ""AutoAlert Type1..." to get moved to the subfolder given above. Subsequent "duplicate" emails would then go into a "duplicate" subfolder. Is this possible with sieve filters ? I could not find anything striking me as obvious while reading the page http://wiki.dovecot.org/LDA/Sieve. Thanks very much for your input.

2 3

[Dovecot] Disconnected for inactivity time.
by Robert JR 17 Oct '12

17 Oct '12

Hello, After 10 mins of unactivity of pop3 , dovecot disconnect the user (-ERR Disconnected for inactivity.) What is the option in the config file which control the unactivity logout time ? becuase i want to decrease the inactivity time To 5 mins instead of 10 mins Please advise Robert JR

2 1