October 2012 - dovecot

[Dovecot] Overlapping userdb/passdbs
by James Devine 29 Oct '12

29 Oct '12

I have an ldap server for which each entry includes the email address and the username portion of the email address for authentication. Authentication works by username if the username is unique among all the entries. I need to now add some users which must authenticate even if the username is not unique. I figured one way to do this would be to add a second user/pass db which puts further restrictions on the ldap query to make it unique for those users. This doesn't seem to work however as if the user is found in the first ldap query but the password does not match it does not try the second. I would use the password as part of the query but this setup requires me to allow the client to hash the password. Is there a way to do this? Or maybe I am approaching the problem wrong.

2 1

[Dovecot] dovecot lda - Permission denied
by tony.blue.mailinglist＠gmx.de 29 Oct '12

29 Oct '12

Hallo, please excuse my bad english. But I am not a native speaker. I changed my cyrus to dovecot (alltogehter: fetchmail - procmail - exim4 - dovecot). But I get (I think from /usr/lib/dovecot/deliver) the following error-message in my syslog: ... Oct 25 23:37:13 gustav dovecot: lda: Error: userdb lookup: connect(/var/run/dovecot/auth-userdb) failed: Permission denied (euid=501(andy) egid=100(users) missing +w perm: /var/run/dovecot/auth-userdb, dir owned by 0:0 mode=0755) ... Oct 25 23:37:14 gustav dovecot: lda: Error: userdb lookup: connect(/var/run/dovecot/auth-userdb) failed: Permission denied (euid=500(tony) egid=100(users) missing +w perm: /var/run/dovecot/auth-userdb, dir owned by 0:0 mode=0755) ... Dovecot is installed as !include auth-passwdfile.conf.ext. For all users there is a entry in der /etc/dovecot/users. Usaly the user rights are set to 600. I tryed 755, but I get the same errormessage. ... service auth { unix_listener auth-userdb { mode = 0755 user = mailstore group = mailstore } ... If I try "ls /var/run/dovecot/auth-userdb -la" - i get: srwxr-xr-x 1 mailstore mailstore 0 Okt 25 23:36 /var/run/dovecot/auth-userdb How can I solve this problem? Tony

2 1

[Dovecot] Can Dovecot authenticate against an external email server?
by Marc Perkel 29 Oct '12

29 Oct '12

Just wondering if anyone has done this. I have a spam filtering service where I am now storing spam for users I filter for. It's a filter and forward service so I don't control the recipient's email server. What I would like to do somehow is have the user enter their email address and password and then look up their POP/IMAP server from a database and try to authenticate from it. If sucessful then the user will be able to access their stored spam using Dovecot and Squirrelmail. Any suggestions? Thanks in advance

2 1

[Dovecot] Dovecot sends BYE while fetching X-GM-MSGID
by Loshkovskyi Andrii 29 Oct '12

29 Oct '12

Hello everyone, While using the following set of commands, I am having the error as below: FETCH 7 (X-GM-MSGID) A15 FETCH 7 (X-GM-MSGID) A15 BAD Error in IMAP command FETCH: Unknown parameter X-GM-MSGID Can I somehow disable such errors so that Dovecot won't send BYE on X-GM-MSGID but just proceed with following emails? -- My configuration is below: [root@server ~]# cat /etc/issue CentOS release 6.3 (Final) [root@server ~]# dovecot --version 2.0.9 [root@server ~]# dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-220.17.1.el6.centos.plus.i686 i686 CentOS release 6.3 (Final) ext4 auth_debug = yes auth_mechanisms = plain login cram-md5 auth_verbose = yes default_client_limit = 10000 default_process_limit = 300 disable_plaintext_auth = no listen = * mail_location = maildir:/var/spool/mail/%d/%n/Maildir mbox_write_locks = fcntl passdb { args = scheme=SSHA512 username_format=%u /etc/dovecot/users driver = passwd-file } service imap-login { service_count = 0 vsz_limit = 128 M } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } Thank you for any help.

2 1

[Dovecot] Auth caching and password changes
by Angel L. Mateo 29 Oct '12

29 Oct '12

Hello, In my system I have configured auth caching. The problem I have is that whenever a user changes his password, he/she can't login to dovecot after a while and the scenarios described at http://wiki2.dovecot.org/Authentication/Caching are not applied. I have tried also with "doveadm auth cache flush <login>", but it didn't work. He also could to login again if he waits for a time or if I run "doveadm auth cache flush" in the server, flushing all auth information from cache. I have attached the log I had when I changed my password (and suffered the problem). I have attached my doveconf -n too. -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

2 2

[Dovecot] trash plugin not doing it's job
by Jan-Frode Myklebust 29 Oct '12

29 Oct '12

I enabled the trash plugin yesterday, adding "trash" to mail_plugins, and configuring the plugin setting "trash = /etc/dovecot/dovecot-trash.conf.ext". But I still see users with lots of files in INBOX.Trash getting bounced because of quota exceeded: postfix/lmtp[26273]:: C89F490061: to=<XXXXXXXXXXXXX(a)example.no>, relay=loadbalancers.example.net[192.168.42.15]:24, delay=1.2, delays=0.61/0.02/0/0.54, dsn=5.2.2, status=bounced (host loadbalancers.example.net[192.168.42.15] said: 552 5.2.2 <XXXXXXXXXXXXd(a)example.no> Quota exceeded (mailbox for user is full) (in reply to end of DATA command)) dovecot:: lmtp(19730, XXXXXXX(a)example.no) Error: BErxFCyrf1ASTQAAWNPRnw: sieve: msgid=<e33d481dc9d9442fa79f55e45a516c82@BizWizard>: failed to store into mailbox 'INBOX': Quota exceeded (mailbox for user is full) $ sudo doveadm quota get -u XXXXXXXX(a)example.no Quota name Type Value Limit % UserQuota STORAGE 1048559 1048576 99 UserQuota MESSAGE 4487 - 0 Postfix if delivering via LMTP trough dovecot director. Anybody see anything obvious in my config: ------------------------------------------------------------ # 2.0.14: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.26.1.el5 x86_64 Red Hat Enterprise Linux Server release 5.5 (Tikanga) auth_cache_size = 100 M auth_verbose = yes auth_verbose_passwords = sha1 disable_plaintext_auth = no login_trusted_networks = 192.168.0.0/16 109.247.114.192/27 mail_gid = 3000 mail_home = /srv/mailstore/%256LRHu/%Ld/%Ln mail_location = maildir:~/:INDEX=/indexes/%1u/%1.1u/%u mail_max_userip_connections = 20 c = quota zlib trash mail_uid = 3000 maildir_stat_dirs = yes maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mmap_disable = yes namespace { inbox = yes location = prefix = INBOX. separator = . type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { quota = dict:UserQuota::file:%h/dovecot-quota sieve = /sieve/%1Lu/%1.1Lu/%Lu/.dovecot.sieve sieve_before = /etc/dovecot/sieve/dovecot.sieve sieve_dir = /sieve/%1Lu/%1.1Lu/%Lu sieve_max_script_size = 1M trash = /etc/dovecot/dovecot-trash.conf.ext zlib_save = gz zlib_save_level = 6 } postmaster_address = postmaster(a)example.net protocols = imap pop3 lmtp sieve service auth-worker { user = $default_internal_user } service auth { client_limit = 4521 unix_listener auth-userdb { group = mode = 0600 user = atmail } } service imap-login { inet_listener imap { address = * port = 143 } process_min_avail = 4 service_count = 0 vsz_limit = 1 G } service imap-postlogin { executable = script-login /usr/local/sbin/imap-postlogin.sh } service imap { executable = imap imap-postlogin process_limit = 2048 } service lmtp { client_limit = 1 inet_listener lmtp { address = * port = 24 } process_limit = 25 process_min_avail = 10 } service managesieve-login { inet_listener sieve { address = * port = 4190 } service_count = 1 } service pop3-login { inet_listener pop3 { address = * port = 110 } process_min_avail = 4 service_count = 0 vsz_limit = 1 G } service pop3-postlogin { executable = script-login /usr/local/sbin/pop3-postlogin.sh } service pop3 { executable = pop3 pop3-postlogin process_limit = 2048 } ssl = no userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = quota zlib trash sieve } protocol imap { imap_client_workarounds = delay-newmail mail_plugins = quota zlib trash imap_quota } protocol pop3 { mail_plugins = quota zlib trash pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = UID%u-%v } protocol sieve { managesieve_logout_format = bytes=%i/%o } ------------------------------------------------------------ and my trash config: $ cat /etc/dovecot/dovecot-trash.conf.ext # Spam mailbox is emptied before Trash 1 INBOX.Spam # Trash mailbox is emptied before Sent 2 INBOX.Trash Global sieve script: $ cat /etc/dovecot/sieve/dovecot.sieve require ["comparator-i;ascii-numeric","relational","fileinto","mailbox"]; if allof ( not header :matches "x-spam-score" "-*", header :value "ge" :comparator "i;ascii-numeric" "x-spam-score" "10" ) { discard; stop; } elsif allof ( not header :matches "x-spam-score" "-*", header :value "ge" :comparator "i;ascii-numeric" "x-spam-score" "6" ) { fileinto :create "INBOX.Spam"; } -jf

3 3

[Dovecot] Configuring Dovecot & Snarf plugin for the first time
by Jeffrey Ross 29 Oct '12

29 Oct '12

I've been using uw-imap for some time on my linux system and have been running into issues with it so I've decided to move to Dovecote, so far it seems to have solved the issues I've been having however I need/want to move the incoming emails out of /var/spool/mail/{user} in the same (or similar fashion) that uw-imap did, and I found the snarf plugin. However whenever I enable the snarf plugin using the example on the wiki page my email is not loaded and when I remove my configuration for snarf my email re-appears. Based upon what I can tell the snarf plugin is either not loading (but I see it listed in the logs) or simply not working (which is probably because its not configured properly). The system is Fedora 16 (x86_64), the MTA is Exim, and Dovecot is 2.0.21 (version supplied with Fedora). I know I'm making a newbie mistake. Any guidance would be appreciated. Thanks, Jeff dovecot -n provides the following: [root@xyzzy conf.d]# more /tmp/dovecot.changes # 2.0.21: /etc/dovecot/dovecot.conf # OS: Linux 3.4.11-1.fc16.x86_64 x86_64 Fedora release 16 (Verne) mail_debug = yes mail_location = mbox:~/mail:INBOX=~/mbox mail_plugins = " zlib" mbox_write_locks = fcntl namespace default { inbox = yes location = prefix = separator = / } namespace snarf { hidden = yes list = no location = mbox:/run/dovecot/empty:INBOX=/var/spool/mail/%u prefix = /snarf separator = / } passdb { driver = pam } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename snarf = = /snarf/INBOX } service imap-login { inet_listener imap { address = localhost } } service pop3-login { inet_listener pop3 { address = localhost } } ssl_cert = </etc/pki/tls/certs/XYZZY.pem ssl_key = </etc/pki/tls/certs/XYZZY.pem userdb { driver = passwd } protocol imap { mail_plugins = " zlib imap_zlib snarf" } and the logs (in debug) show the following: Oct 20 21:29:45 xyzzy dovecot: imap-login: Login: user=<jeff>, method=PLAIN, rip=98.109.156.118, lip=132.238.254.34, mpid=19627, TLS Oct 20 21:29:45 xyzzy dovecot: imap: Debug: Loading modules from directory: /usr/lib64/dovecot Oct 20 21:29:45 xyzzy dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib05_snarf_plugin.so Oct 20 21:29:45 xyzzy dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib20_zlib_plugin.so Oct 20 21:29:45 xyzzy dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib30_imap_zlib_plugin.so Oct 20 21:29:45 xyzzy dovecot: imap(jeff): Debug: Effective uid=500, gid=500, home=/home/jeff Oct 20 21:29:45 xyzzy dovecot: imap(jeff): Debug: Namespace default: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:~/mail:INBOX=~/mbox Oct 20 21:29:45 xyzzy dovecot: imap(jeff): Debug: fs: root=/home/jeff/mail, index=, control=, inbox=/home/jeff/mbox, alt= Oct 20 21:29:45 xyzzy dovecot: imap(jeff): Debug: Namespace snarf: type=private, prefix=/snarf, sep=/, inbox=no, hidden=yes, list=no, subscriptions=yes location=mbox:/run/dovecot/empty:INBOX=/var/spool/mail/jeff Oct 20 21:29:45 xyzzy dovecot: imap(jeff): Debug: fs: root=/run/dovecot/empty, index=, control=, inbox=/var/spool/mail/jeff, alt= Oct 20 21:29:46 xyzzy dovecot: imap-login: Login: user=<jeff>, method=PLAIN, rip=98.109.156.118, lip=132.238.254.34, mpid=19629, TLS Oct 20 21:29:46 xyzzy dovecot: imap: Debug: Loading modules from directory: /usr/lib64/dovecot Oct 20 21:29:46 xyzzy dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib05_snarf_plugin.so Oct 20 21:29:46 xyzzy dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib20_zlib_plugin.so Oct 20 21:29:46 xyzzy dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib30_imap_zlib_plugin.so Oct 20 21:29:46 xyzzy dovecot: imap(jeff): Debug: Effective uid=500, gid=500, home=/home/jeff Oct 20 21:29:46 xyzzy dovecot: imap(jeff): Debug: Namespace default: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:~/mail:INBOX=~/mbox Oct 20 21:29:46 xyzzy dovecot: imap(jeff): Debug: fs: root=/home/jeff/mail, index=, control=, inbox=/home/jeff/mbox, alt= Oct 20 21:29:46 xyzzy dovecot: imap(jeff): Debug: Namespace snarf: type=private, prefix=/snarf, sep=/, inbox=no, hidden=yes, list=no, subscriptions=yes location=mbox:/run/dovecot/empty:INBOX=/var/spool/mail/jeff Oct 20 21:29:46 xyzzy dovecot: imap(jeff): Debug: fs: root=/run/dovecot/empty, index=, control=, inbox=/var/spool/mail/jeff, alt=

2 1

[Dovecot] LDA without lookup as non-root?
by E.B. 29 Oct '12

29 Oct '12

Hello, I'm having some problems getting LDA to work without userdb lookups and have a few related questions. This system has all users in MySQL, each user with unique UID/GID, no local users at all. Installation is from apt-get. 1) If LDA is invoked without lookups, is it correct to assume that the "service auth" and "service auth-worker" can be completely removed from dovecot master configuration? (I have tried commenting them out and logging into IMAP, which seems to work, not sure if anyone else needs the auth service) 2) If LDA is invoked without lookups, will I be unable to use Dovecot quota plugin? Does it need to have a user lookup to get quota info? (haven't added quota support, need to take this one step at a time) 3) The interesting part -- I am invoking LDA from Maildrop. See: http://thread.gmane.org/gmane.mail.imap.dovecot/65473 So when invoked, Maildrop has already dropped to the destination UID/GID and the needed paths are available in the environment. However, using as many permutations of calling LDA as I can think of (based on http://wiki2.dovecot.org/LDA ), I always get this: (command line usage error. Command output: lda: Fatal: Couldn't lookup our username (uid=2500) ) The UID is correct for the target user. If I add "-d $LOGNAME" to my LDA callout, I get permission denied on the userdb lookup, which I guess is another issue to work out if I want to go with lookups. But right now I am trying not to. Why does LDA seem to try for a lookup even when I follow the wiki instructions how to call it without a lookup? 3.5) Related question, my users have separate homedir and maildir, both paths are looked up by Maildrop. I think I need to call LDA with "HOME=$DEFAULT dovecot-lda -f $FROM". Is this correct?

2 3

[Dovecot] Dovecot quota postgres dictionary problems
by tmihalicek 29 Oct '12

29 Oct '12

I have a strange errors in .err log file, but the postgres seem to be filling with quota changes, i will also put configs in Oct 19 09:23:52 mailstore-node-01 dovecot: imap(test(a)example.net): Error: read(/var/run/dovecot/dict) failed: Timeout after 30 seconds Oct 19 09:24:22 mailstore-node-01 dovecot: imap(test(a)example.net): Error: read(/var/run/dovecot/dict) failed: Timeout after 30 seconds Oct 19 09:23:21 mailstore-node-01 dovecot: imap(test(a)example.net): Panic: file dict-client.c: line 270 (client_dict_finish_transaction): assertion failed: (dict->async_commits > 0) Oct 19 09:23:21 mailstore-node-01 dovecot: imap(test(a)example.net): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x484ea) [0x7fbed405d4ea] -> /usr/lib/dovecot/libdovecot.so.0(+0x48536) [0x7fbed405d536] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7fbed4030eaf] -> /usr/lib/dovecot/libdovecot.so.0(+0x22337) [0x7fbed4037337] -> /usr/lib/dovecot/libdovecot.so.0(+0x2236b) [0x7fbed403736b] -> /usr/lib/dovecot/libdovecot.so.0(+0x22e78) [0x7fbed4037e78] -> /usr/lib/dovecot/modules/lib10_quota_plugin.so(+0x8a3f) [0x7fbed2c76a3f] -> /usr/lib/dovecot/modules/lib10_quota_plugin.so(quota_get_resource+0x72) [0x7fbed2c73262] -> /usr/lib/dovecot/modules/lib10_quota_plugin.so(quota_transaction_commit+0x1e7) [0x7fbed2c738d7] -> /usr/lib/dovecot/modules/lib10_quota_plugin.so(+0xb39f) [0x7fbed2c7939f] -> /usr/lib/dovecot/modules/lib10_quota_plugin.so(+0xb4f4) [0x7fbed2c794f4] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_deinit+0x2a) [0x7fbed432396a] -> dovecot/imap [test(a)example.net 10.84.34.2 expunge](imap_sync_deinit+0x4d) [0x418edd] -> dovecot/imap [test(a)example.net 10.84.34.2 expunge]() [0x41918c] -> dovecot/imap [test(a)example.net 10.84.34.2 expunge](cmd_sync_delayed+0x1f5) [0x4195b5] -> dovecot/imap [test(a)example.net 10.84.34.2 expunge](client_handle_input+0x1fd) [0x41127d] -> dovecot/imap [test(a)example.net 10.84.34.2 expunge](client_input+0x5f) [0x411adf] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7fbed40696c6] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9f) [0x7fbed406a6ff] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7fbed4069668] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fbed4055043] -> dovecot/imap [test(a)example.net 10.84.34.2 expunge](main+0x2a4) [0x419d24] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7fbed3cd1c8d] -> dovecot/imap [test(a)example.net 10.84.34.2 expunge]() [0x409059] doveconf.txt <http://dovecot.2317879.n4.nabble.com/file/n38234/doveconf.txt> dovecot-dict-sql.conf.ext <http://dovecot.2317879.n4.nabble.com/file/n38234/dovecot-dict-sql.conf.ext> -- View this message in context: http://dovecot.2317879.n4.nabble.com/Dovecot-quota-postgres-dictionary-prob… Sent from the Dovecot mailing list archive at Nabble.com.

2 1

[Dovecot] mail open slowly
by Bernics Gábor | Penta Unió Zrt. 29 Oct '12

29 Oct '12

Hello, I have a dovecot IMAP server (relative small hardware: HP Microserver with 6 Gbyte RAM, linux soft RAID1 with 2x 7200 SATA disk) with 100 Gbyte maildirs. Server works fine but sometimes I can open mails slowly (5-10 sec), typical with new mails. It's intresting when I open an another old mail (with 0 sec wait), after new mail open quickly. Is it dovecot mail indexes or I/O problem? Load and CPU use is small typical 0.10, 10%, I see small IO wait. Debian 6.0, Dovecot 1.2.15, fsync and nmap is disable Best Regards, Gabor

3 5