January 2013 - dovecot

[Dovecot] Dovecot SASL Client support?
by Charles Marcus 14 Jan '13

14 Jan '13

Hi all, I seem to recall mention of SASL client support either being added, but can't remember for sure. The wiki says nothing about Client support (now, or in the future)... http://wiki2.dovecot.org/Sasl So - is there support for it now? If not, is it planned for anytime soon? Thanks, -- Best regards, Charles

10 19

[Dovecot] load sbub-mailbox
by mourik jan heupink 14 Jan '13

14 Jan '13

Hi, We're about to migrate to dovecot (2.1.7 on wheezy), and I have a question about mail migration. Our 'old' imap mailserver will remain available, and has the same usernames/passwords as our future dovecot mailserver. The question: Is there an easy way to make the old mailboxes available under a subfolder (for example 'oldmail') in the mailboxes on the new mailserver? A bit like mounting an old homedirectory under an 'oldfiles' directory on a new fileserver. This way our users could access/migrate whatever folders they choose themselves, and we would not have migrate all messages to dovecot using scripts like imapcopy, etc. Perhaps using the proxy functionality..? Hope I make myself clear...? Regards, Mourik Jan

2 7

[Dovecot] bug report: auth via dict
by ForestYang 14 Jan '13

14 Jan '13

hi all, I was testing dovecot server , auth via redis. first I follow http://master.wiki2.dovecot.org/AuthDatabase/Dict but auth always fail, last , I found value { "uid": 123, "gid": 123, "home": "/home/username" } was wrong, the uid and gid must as string , not number. { "uid": "123", "gid": "123", "home": "/home/username" } was worked. it's hard to find the problem :( pls notice that. -- View this message in context: http://dovecot.2317879.n4.nabble.com/bug-report-auth-via-dict-tp39685.html Sent from the Dovecot mailing list archive at Nabble.com.

2 1

[Dovecot] I can not receive any mail
by Felix Rubio Dalmau 14 Jan '13

14 Jan '13

Hi everybody I'm trying to set-up an IMAPS mail server using dovecot (version 2.1.7) with virtual email accounts for my family. I have already ran through the mysql phase of the virtual email configuration (and I'm quite confident it works well, because I can send mails from the server using postfix to gmail, e.g.). However, I am stucked configuring dovecot. I don't know why is it not running properly. The symptoms are: a) When I connect by using my mail client (kmail), I don't get any error. b) When I ask kmail to check what authentication services are supported by the server, I see that it is able to connect to te server by looking to the server log. c) However, Inbox folder does never show up :S d) When I send any mail from gmail to my server, It is always refused under the reason that there is not such user in the machine (I am sure it is), and nothing shows up in the server log. Here is my configuration, just in case somebody can give it a look to help me figure out what's going on :S Thank you very much in advance. # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.6.9-1 x86_64 Debian 6.0.6 ext4 auth_cache_size = 1 M auth_debug = yes auth_mechanisms = plain login auth_verbose = yes auth_worker_max_count = 2 base_dir = /var/run/dovecot/ listen = * log_timestamp = "%Y-%m-%d %H:%M:%S " login_greeting = Dovecot ready. mail_debug = yes mail_location = maildir:/home/vmail/%d/%n/Maildir mail_privileged_group = vmail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)mysite.org protocols = " imap" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imaps { port = 993 ssl = yes } process_min_avail = 0 service_count = 1 } service imap { process_limit = 5 } ssl = required ssl_cert = </etc/postfix/ssl/cert.pem ssl_key = </etc/postfix/ssl/cert.key userdb { args = uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes driver = static } verbose_ssl = yes protocol lda { mail_plugins = sieve } -- Felix Rubio Dalmau

2 1

[Dovecot] E-mail not being processed into Dovecot folders
by stalker 14 Jan '13

14 Jan '13

I have a new CentOS 6 server running Dovecot 2.0.9 It has current patches from CentOS. Pasted below are the version and output from dovecot -n When I run mail -s "test" username test <ctrl-D> mail is written to /var/spool/mail/username and not to /home/username/Maildir/ The user's client software, Thunderbird, logs in but since mail is not written to Maildir it thinks there is nothing (see paste below from /var/log/maillog) How do I get sendmail or what ever MTA processes mail to write to Maildir rather than /var/spool/sendmail? [root@info2 Maildir]# dovecot --version 2.0.9 [root@info2 Maildir]# dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.19.1.el6.i686 i686 CentOS release 6.3 (Final) disable_plaintext_auth = no mail_debug = yes mail_location = maildir:~/Maildir mbox_write_locks = fcntl passdb { driver = pam } protocols = pop3 ssl = no ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol pop3 { pop3_uidl_format = %v.%u } Jan 10 08:11:13 info2 dovecot: pop3-login: Login: user=<username>, method=PLAIN, rip=192.168.55.50, lip=192.168.55.8, mpid=30560 Jan 10 08:11:13 info2 dovecot: pop3(username): Debug: Effective uid=503, gid=503, home=/home/username Jan 10 08:11:13 info2 dovecot: pop3(username): Debug: maildir++: root=/home/username/Maildir, index=, control=, inbox=/home/username/Maildir Jan 10 08:11:13 info2 dovecot: pop3(username): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0

2 1

[Dovecot] Anyone using dovecot obox?
by list＠airstreamcomm.net 14 Jan '13

14 Jan '13

Just looking for some input from other users of the obox (object storage) backend from dovecot.fi. - What challenges/problem were you trying to overcome/solve by using obox? - What kind of architecture did you deploy using obox? (e.g. distributed object storage for performance, or distributed for availability, geographic distribution of email services, etc.) - What complexities, single points of failure, documentation omissions can you highlight having deployed the obox storage architecture? - Did the obox backend support your email services as well as you expected or more? - How was your interaction with Doveoct.fi? Thanks in advance.

2 1

[Dovecot] Installing Dovecot on Gentoo
by Christian Rößner 14 Jan '13

14 Jan '13

Hi, I have an already working dovecot server on Ubuntu 10.04 with self-created packages version 2.1.13. This setup is working prefect. Now that I do not wish to continue using Ubuntu (to much work for Upgrading), I decided to switch to Gentoo, as I had made best experiences in the past… I have installed Dovecot on Gentoo and I copied over all my configs and certs and stuff. Also created a user vmail with identical uid/gid and also checked all permissions for the certificate stuff. Dovecot starts. I also can connect to it. But when trying to login, I get errors: ------------------------------------------------------- telnet localhost 143 Trying ::1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5 AUTH=DIGEST-MD5 AUTH=NTLM] Dovecot ready. . login croessner <hiddenpw> . NO [UNAVAILABLE] Temporary authentication failure. [mx0:2013-01-13 14:24:02] ------------------------------------------------------- In the logs it looks like this: ------------------------------------------------------- Jan 13 15:22:30 mx0 dovecot: master: Dovecot v2.1.13 starting up (core dumps disabled) Jan 13 15:23:11 mx0 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jan 13 15:23:11 mx0 dovecot: auth: Debug: passwd-file /etc/dovecot/master-users: Read 1 users in 0 secs Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_extended_operation_s Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_extended_operation Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_send_initial_request Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_new_connection 1 1 0 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_int_open_connection Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_connect_to_host: TCP db.roessner-net.de:389 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_new_socket: 17 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_prepare_socket: 17 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_connect_to_host: Trying 193.239.107.37:389 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_pvt_connect: fd: 17 tm: -1 async: 0 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_open_defconn: successful Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_send_server_request Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_result ld 0x35d6dd481c0 msgid 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: wait4msg ld 0x35d6dd481c0 msgid 1 (infinite timeout) Jan 13 15:23:11 mx0 dovecot: auth: Error: wait4msg continue ld 0x35d6dd481c0 msgid 1 all 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: ** ld 0x35d6dd481c0 Connections: Jan 13 15:23:11 mx0 dovecot: auth: Error: * host: db.roessner-net.de port: 389 (default) Jan 13 15:23:11 mx0 dovecot: auth: Error: refcnt: 2 status: Connected Jan 13 15:23:11 mx0 dovecot: auth: Error: last used: Sun Jan 13 15:23:11 2013 Jan 13 15:23:11 mx0 dovecot: auth: Error: Jan 13 15:23:11 mx0 dovecot: auth: Error: Jan 13 15:23:11 mx0 dovecot: auth: Error: ** ld 0x35d6dd481c0 Outstanding Requests: Jan 13 15:23:11 mx0 dovecot: auth: Error: * msgid 1, origid 1, status InProgress Jan 13 15:23:11 mx0 dovecot: auth: Error: outstanding referrals 0, parent count 0 Jan 13 15:23:11 mx0 dovecot: auth: Error: ld 0x35d6dd481c0 request count 1 (abandoned 0) Jan 13 15:23:11 mx0 dovecot: auth: Error: ** ld 0x35d6dd481c0 Response Queue: Jan 13 15:23:11 mx0 dovecot: auth: Error: Empty Jan 13 15:23:11 mx0 dovecot: auth: Error: ld 0x35d6dd481c0 response count 0 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_chkResponseList ld 0x35d6dd481c0 msgid 1 all 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_chkResponseList returns ld 0x35d6dd481c0 NULL Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_int_select Jan 13 15:23:11 mx0 dovecot: auth: Error: read1msg: ld 0x35d6dd481c0 msgid 1 all 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: read1msg: ld 0x35d6dd481c0 msgid 1 message type extended-result Jan 13 15:23:11 mx0 dovecot: auth: Error: read1msg: ld 0x35d6dd481c0 0 new referrals Jan 13 15:23:11 mx0 dovecot: auth: Error: read1msg: mark request completed, ld 0x35d6dd481c0 msgid 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: request done: ld 0x35d6dd481c0 msgid 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: res_errno: 0, res_error: <>, res_matched: <> Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_free_request (origid 1, msgid 1) Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_parse_extended_result Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_parse_result Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_msgfree Jan 13 15:23:11 mx0 dovecot: auth: Error: TLS: could not use key file `/etc/ssl/private/mx0.roessner-net.de.key.pem'. Jan 13 15:23:11 mx0 dovecot: auth: Error: TLS: error:0200100D:system library:fopen:Permission denied bss_file.c:398 Jan 13 15:23:11 mx0 dovecot: auth: Error: TLS: error:20074002:BIO routines:FILE_CTRL:system lib bss_file.c:400 Jan 13 15:23:11 mx0 dovecot: auth: Error: TLS: error:140B0002:SSL routines:SSL_CTX_use_PrivateKey_file:system lib ssl_rsa.c:648 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_err2string Jan 13 15:23:11 mx0 dovecot: auth: Error: LDAP: ldap_start_tls_s() failed: Connect error Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_extended_operation_s Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_extended_operation Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_send_initial_request Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_send_server_request Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_result ld 0x35d6dd481c0 msgid 2 Jan 13 15:23:11 mx0 dovecot: auth: Error: wait4msg ld 0x35d6dd481c0 msgid 2 (infinite timeout) Jan 13 15:23:11 mx0 dovecot: auth: Error: wait4msg continue ld 0x35d6dd481c0 msgid 2 all 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: ** ld 0x35d6dd481c0 Connections: Jan 13 15:23:11 mx0 dovecot: auth: Error: * host: db.roessner-net.de port: 389 (default) Jan 13 15:23:11 mx0 dovecot: auth: Error: refcnt: 2 status: Connected Jan 13 15:23:11 mx0 dovecot: auth: Error: last used: Sun Jan 13 15:23:11 2013 Jan 13 15:23:11 mx0 dovecot: auth: Error: Jan 13 15:23:11 mx0 dovecot: auth: Error: Jan 13 15:23:11 mx0 dovecot: auth: Error: ** ld 0x35d6dd481c0 Outstanding Requests: Jan 13 15:23:11 mx0 dovecot: auth: Error: * msgid 2, origid 2, status InProgress Jan 13 15:23:11 mx0 dovecot: auth: Error: outstanding referrals 0, parent count 0 Jan 13 15:23:11 mx0 dovecot: auth: Error: ld 0x35d6dd481c0 request count 1 (abandoned 0) Jan 13 15:23:11 mx0 dovecot: auth: Error: ** ld 0x35d6dd481c0 Response Queue: Jan 13 15:23:11 mx0 dovecot: auth: Error: Empty Jan 13 15:23:11 mx0 dovecot: auth: Error: ld 0x35d6dd481c0 response count 0 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_chkResponseList ld 0x35d6dd481c0 msgid 2 all 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_chkResponseList returns ld 0x35d6dd481c0 NULL Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_int_select Jan 13 15:23:11 mx0 dovecot: auth: Error: read1msg: ld 0x35d6dd481c0 msgid 2 all 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_err2string Jan 13 15:23:11 mx0 dovecot: auth: Error: LDAP: ldap_start_tls_s() failed: Can't contact LDAP server Jan 13 15:23:11 mx0 dovecot: auth: Debug: auth client connected (pid=24045) Jan 13 15:24:00 mx0 dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured#011session=YAanRyzTOAAAAAAAAAAAAAAAAAAAAAAB#011lip=::1#011rip=::1#011lport=143#011rport=59960#011resp=<hidden> Jan 13 15:24:00 mx0 dovecot: auth: Error: ldap_extended_operation_s Jan 13 15:24:00 mx0 dovecot: auth: Error: ldap_extended_operation Jan 13 15:24:00 mx0 dovecot: auth: Error: ldap_send_initial_request Jan 13 15:24:00 mx0 dovecot: auth: Error: ldap_send_server_request Jan 13 15:24:00 mx0 dovecot: auth: Error: ldap_err2string Jan 13 15:24:00 mx0 dovecot: auth: Error: LDAP: ldap_start_tls_s() failed: Can't contact LDAP server Jan 13 15:24:02 mx0 dovecot: auth: Debug: client passdb out: FAIL#0111#011user=croessner#011temp Jan 13 15:26:11 mx0 dovecot: imap-login: Disconnected: Inactivity (auth failed, 1 attempts in 131 secs): user=<croessner>, method=PLAIN, rip=::1, lip=::1, secured, session=<YAanRyzTOAAAAAAAAAAAAAAAAAAAAAAB> Jan 13 15:27:11 mx0 dovecot: auth: Error: ldap_unbind Jan 13 15:27:11 mx0 dovecot: auth: Error: ldap_free_request (origid 2, msgid 2) Jan 13 15:27:11 mx0 dovecot: auth: Error: ldap_free_connection 1 1 Jan 13 15:27:11 mx0 dovecot: auth: Error: ldap_free_connection: actually freed ------------------------------------------------------- I checked if Dovecot would even try to access the key: ------------------------------------------------------- inotifywait -m -r --format '%:e %f' /etc/ssl Setting up watches. Beware: since -r was given, this may take a while! Watches established. OPEN mail.roessner-net.de.pem ACCESS mail.roessner-net.de.pem CLOSE_NOWRITE:CLOSE mail.roessner-net.de.pem OPEN mail.roessner-net.de.key.pem ACCESS mail.roessner-net.de.key.pem CLOSE_NOWRITE:CLOSE mail.roessner-net.de.key.pem OPEN SSL123_CA_Bundle.pem ACCESS SSL123_CA_Bundle.pem CLOSE_NOWRITE:CLOSE SSL123_CA_Bundle.pem OPEN mail.roessner-net.de.pem ACCESS mail.roessner-net.de.pem ACCESS mail.roessner-net.de.pem ACCESS mail.roessner-net.de.pem ACCESS mail.roessner-net.de.pem ACCESS mail.roessner-net.de.pem CLOSE_NOWRITE:CLOSE mail.roessner-net.de.pem OPEN mail.roessner-net.de.key.pem ACCESS mail.roessner-net.de.key.pem ACCESS mail.roessner-net.de.key.pem CLOSE_NOWRITE:CLOSE mail.roessner-net.de.key.pem OPEN SSL123_CA_Bundle.pem ACCESS SSL123_CA_Bundle.pem ACCESS SSL123_CA_Bundle.pem ACCESS SSL123_CA_Bundle.pem ACCESS SSL123_CA_Bundle.pem CLOSE_NOWRITE:CLOSE SSL123_CA_Bundle.pem OPEN ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt CLOSE_NOWRITE:CLOSE ca-certificates.crt OPEN mx0.roessner-net.de.pem ACCESS mx0.roessner-net.de.pem CLOSE_NOWRITE:CLOSE mx0.roessner-net.de.pem OPEN openssl.cnf ACCESS openssl.cnf ACCESS openssl.cnf ACCESS openssl.cnf CLOSE_NOWRITE:CLOSE openssl.cnf OPEN openssl.cnf ACCESS openssl.cnf ACCESS openssl.cnf ACCESS openssl.cnf CLOSE_NOWRITE:CLOSE openssl.cnf ------------------------------------------------------- I can not find any line talking about mx0.roessner-net.de.key.pem. The file exists and has proper permissions: ------------------------------------------------------- l /etc/ssl/private/ total 16 drwxr-s---+ 2 root ssl-cert 4096 Jan 12 19:29 ./ drwxr-xr-x 8 root root 4096 Jan 13 15:26 ../ -rw-r--r-- 1 root root 0 Dec 10 18:14 .keep_dev-libs_openssl-0 -r--r----- 1 root ssl-cert 1679 Jan 12 17:23 mail.roessner-net.de.key.pem -r--r-----+ 1 root ssl-cert 887 Jan 12 17:14 mx0.roessner-net.de.key.pem getfacl /etc/ssl/private/ /etc/ssl/private/mx0.roessner-net.de.key.pem getfacl: Removing leading '/' from absolute path names # file: etc/ssl/private/ # owner: root # group: ssl-cert # flags: -s- user::rwx user:amavis:r-x group::--- mask::r-x other::--- # file: etc/ssl/private/mx0.roessner-net.de.key.pem # owner: root # group: ssl-cert user::r-- user:amavis:r-x #effective:r-- group::r-- mask::r-- other::--- ------------------------------------------------------- Here is my doveconf -n: ------------------------------------------------------- # 2.1.13: /etc/dovecot/dovecot.conf # OS: Linux 3.7.0-hardened x86_64 Gentoo Base System release 2.1 auth_debug = yes auth_master_user_separator = * auth_mechanisms = plain login cram-md5 digest-md5 ntlm auth_verbose = yes hostname = mail.roessner-net.de lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_access_groups = vmail mail_attachment_dir = /var/mail/virtual/copymail/attachments mail_debug = yes mail_gid = vmail mail_location = mdbox:~/mdbox mail_plugins = autocreate quota acl fts fts_solr zlib mail_privileged_group = mail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mdbox_rotate_size = 128 M namespace { list = children location = mdbox:%%h/mdbox prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox "Deleted Messages" { special_use = \Trash } mailbox Drafts { special_use = \Drafts } mailbox Junk-E-Mail { special_use = \Junk } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } mailbox junkmail { special_use = \Junk } prefix = separator = / type = private } passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = file:/var/mail/virtual/shared-mailboxes.db autocreate = Trash autocreate2 = Sent autocreate3 = Drafts autocreate4 = junkmail autosubscribe = Trash autosubscribe2 = Sent autosubscribe3 = Drafts autosubscribe4 = junkmail fts = solr fts_solr = break-imap-search url=http://localhost:8080/solr/ quota = dict:User quota::file:%h/mdbox/dovecot-quota quota_rule = *:storage=300M:messages=20000 quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve zlib_save = gz zlib_save_level = 6 } protocols = imap pop3 lmtp sieve service auth-worker { extra_groups = ssl-cert unix_listener auth-worker { mode = 0600 user = vmail } user = vmail } service auth { extra_groups = ssl-cert unix_listener auth-userdb { mode = 0600 user = vmail } user = vmail } service dict { unix_listener dict { mode = 0600 user = vmail } } service lmtp { unix_listener /var/spool/postfix/private/lmtp-dovecot { group = postfix mode = 0666 user = postfix } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } ssl_ca = </etc/ssl/certs/SSL123_CA_Bundle.pem ssl_cert = </etc/ssl/certs/mail.roessner-net.de.pem ssl_key = </etc/ssl/private/mail.roessner-net.de.key.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes verbose_ssl = yes protocol lmtp { mail_plugins = autocreate quota acl fts fts_solr zlib sieve } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags mail_max_userip_connections = 50 mail_plugins = autocreate quota acl fts fts_solr zlib imap_quota imap_acl imap_zlib } ------------------------------------------------------- LDAP looks like this: ------------------------------------------------------- uris = ldap://db.roessner-net.de/ ldap://roessner1.roessner-net.de/ sasl_bind = yes sasl_mech = EXTERNAL tls = yes tls_ca_cert_file = /etc/ssl/certs/ca-certificates.crt tls_cert_file = /etc/ssl/certs/mx0.roessner-net.de.pem tls_key_file = /etc/ssl/private/mx0.roessner-net.de.key.pem tls_require_cert = hard debug_level = 7 base = ou=people,ou=it,dc=roessner-net,dc=de user_attrs = rnsMSQuota=quota_rule=*:storage=%$,rnsMSMailboxHome=home user_filter = (&(objectClass=rnsMSDovecotAccount)(|(rnsMSRecipientAddress=%u)(uniqueIdentifier=%u))) pass_attrs = rnsMSDeliverToAddress=user,userPassword=password pass_filter = (&(objectClass=rnsMSDovecotAccount)(|(rnsMSRecipientAddress=%u)(uniqueIdentifier=%u))(rnsMSEnableDovecot=TRUE)) iterate_attrs = rnsMSDovecotUser=user iterate_filter = (objectClass=rnsMSDovecotAccount) default_pass_scheme = PLAIN ------------------------------------------------------- Some portage information ------------------------------------------------------- [ebuild R ] net-nds/openldap-2.4.30 USE="berkdb crypt ipv6 minimal sasl ssl syslog tcpd -cxx -debug -experimental -gnutls -icu -iodbc -kerberos -odbc -overlays -perl -samba (-selinux) -slp -smbkrb5passwd" 0 kB [ebuild R ] dev-libs/cyrus-sasl-2.1.25-r3:2 USE="berkdb gdbm ldapdb openldap pam ssl urandom -authdaemond -java -kerberos -mysql -postgres -sample -sqlite -srp -static-libs" 0 kB [ebuild R ~] net-mail/dovecot-2.1.13::croessner USE="bzip2 caps imapc ipv6 ldap maildir managesieve mbox mdbox pam pop3c sdbox sieve solr sqlite ssl suid zlib -cydir -doc -kerberos -lucene -mysql -postgres (-selinux) -static-libs -vpopmail" 0 kB ------------------------------------------------------- As you can see, I have spent some time on this without luck and currently I have no idea, what the problem is. Any ideas on that? Thanks in advance -Christian Rößner -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Joerg Heidrich

4 6

[Dovecot] configuration still not working
by Averlon 12 Jan '13

12 Jan '13

Hi, I would very much appreciate some help since I get one step ahead and two backwardswith my installation. I am using usernames not (not) in the form of user(a)domain.tld. Simply a string. The error I get. +++ Jan 12 08:36:31 f42252se dovecot: pop3(avadmin(a)av.loc): Error: user avadmin(a)av.loc: Initialization failed: Initializing mail s?lo c ?torage from mail_location setting failed: Ambiguous mail location setting, don't know what to do with it: /home/vmail/avadmin/? Ja?Maildir/ (try prefixing it with mbox: or maildir:) ?id )=?Jan 12 08:36:31 f42252se dovecot: pop3(avadmin(a)av.loc): Error: Invalid user settings. Refer to server log for more information? Ja?. +++ I guess it must have to do something with permissions. Butwhere and which. My config: +++ # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-35-generic x86_64 Ubuntu 12.04.1 LTS auth_debug = yes auth_mechanisms = plain login cram-md5 auth_username_format = %Lu hostname = mail.av.loc mail_gid = vmail mail_location = maildir:~/Maildir mail_privileged_group = vmail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0600 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem syslog_facility = avdove userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lda { sendmail_path = /usr/sbin/sendmail } +++ Please give me ahint! -- Signatur Averlon info Mit freundlichen Grüßen / Kind Regards Karl-Heinz Fischbach

2 2

[Dovecot] dovecot and cacti (snmp ?)
by mancyborg＠gmail.com 10 Jan '13

10 Jan '13

Hi All, I've put online a postfix+dovecot+mysql+roundcube server that will grow till serving around 1500 accounts. I've installed the usual cacti graphs, plus the beautiful percona suite for mysql's cacti plus some graphs for iops and iostat. I was lurking around for the best solution to graph dovecot usage, the most detailed possible, in order to prevent and foresee problems. I'm finding sparse results, I'm not sure which one is the most current / complete. Do you have any suggestions ? Thank you very much for supporting, regards and have a nice day, Mike

2 1

[Dovecot] unknown users
by Averlon 10 Jan '13

10 Jan '13

Hi, can anyone tell me where these "unknown users" come from. As far as I see the fact, dovecot is asked by postfix to look for the password of the recipient-user (why ever). +++ Jan 7 19:43:09 f42252se postfix/smtpd[14625]: initializing the server-side TLS engine Jan 7 19:43:09 f42252se postfix/tlsmgr[14627]: open smtpd TLS cache btree:/var/lib/postfix/smtpd_scache Jan 7 19:43:09 f42252se postfix/tlsmgr[14627]: tlsmgr_cache_run_event: start TLS smtpd session cache cleanup Jan 7 19:43:09 f42252se postfix/smtpd[14625]: connect from f42252ud.averlon.loc[192.168.110.165] Jan 7 19:43:09 f42252se postfix/smtpd[14625]: setting up TLS connection from f42252ud.averlon.loc[192.168.110.165] Jan 7 19:43:09 f42252se postfix/smtpd[14625]: f42252ud.averlon.loc[192.168.110.165]: TLS cipher list "aNULL:-aNULL:ALL:+RC4:@STRENGTH" Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:before/accept initialization Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 read client hello A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write server hello A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write certificate A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write key exchange A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write server done A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 flush data Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 read client key exchange A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 read finished A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write session ticket A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write change cipher spec A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write finished A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 flush data Jan 7 19:43:09 f42252se postfix/smtpd[14625]: Anonymous TLS connection established from f42252ud.averlon.loc[192.168.110.165]: TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits) Jan 7 19:43:09 f42252se dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Jan 7 19:43:09 f42252se dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libauthdb_ldap.so Jan 7 19:43:09 f42252se dovecot: auth: Debug: auth client connected (pid=14625) Jan 7 19:43:09 f42252se dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=smtp#011nologin#011lip=192.168.110.150#011rip=192.168.110.165#011secured#011resp=<hidden> Jan 7 19:43:09 f42252se dovecot: auth: Debug: ldap(avadmin,192.168.110.165): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=avadmin)) fields=uid,userPassword Jan 7 19:43:09 f42252se dovecot: auth: Debug: ldap(avadmin,192.168.110.165): result: uid(user)=avadmin userPassword(password)=<hidden> Jan 7 19:43:09 f42252se dovecot: auth: Debug: client out: OK#0111#011user=avadmin Jan 7 19:43:09 f42252se postfix/smtpd[14625]: 9A86C30007C: client=f42252ud.averlon.loc[192.168.110.165], sasl_method=PLAIN, sasl_username=avadmin Jan 7 19:43:09 f42252se postfix/cleanup[14631]: 9A86C30007C: message-id=<50EB173B.5090109(a)av.loc> Jan 7 19:43:09 f42252se postfix/qmgr[14561]: 9A86C30007C: from=<avadmin(a)av.loc>, size=1227, nrcpt=1 (queue active) Jan 7 19:43:09 f42252se postfix/smtpd[14625]: disconnect from f42252ud.averlon.loc[192.168.110.165] Jan 7 19:43:11 f42252se postfix/pickup[14560]: BE0AC30007F: uid=5002 from=<avadmin(a)av.loc> Jan 7 19:43:11 f42252se postfix/cleanup[14631]: BE0AC30007F: message-id=<50EB173B.5090109(a)av.loc> Jan 7 19:43:11 f42252se postfix/qmgr[14561]: BE0AC30007F: from=<avadmin(a)av.loc>, size=1534, nrcpt=1 (queue active) Jan 7 19:43:11 f42252se postfix/pipe[14632]: 9A86C30007C: to=<redmine(a)averlon.loc>, relay=spamassassin, delay=2.2, delays=0.05/0/0/2.1, dsn=2.0.0, status=sent (delivered via spamassassin service) Jan 7 19:43:11 f42252se postfix/qmgr[14561]: 9A86C30007C: removed Jan 7 19:43:11 f42252se dovecot: auth: Debug: master in: USER#0111#011redmine(a)averlon.loc#011service=lda Jan 7 19:43:11 f42252se dovecot: auth: Debug: ldap(redmine(a)averlon.loc): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=redmine(a)averlon.loc)) fields=uid,userPassword Jan 7 19:43:11 f42252se dovecot: auth: ldap(redmine(a)averlon.loc): *unknown user* Jan 7 19:43:11 f42252se dovecot: auth: Debug: master out: NOTFOUND#0111 Jan 7 19:43:11 f42252se postfix/pipe[14637]: BE0AC30007F: to=<redmine(a)averlon.loc>, relay=dovecot, delay=0.02, delays=0/0/0/0.01, dsn=5.1.1, status=bounced (user unknown) Jan 7 19:43:11 f42252se postfix/cleanup[14631]: C279030007E: message-id=<20130107184311.C279030007E(a)mail.av.loc> Jan 7 19:43:11 f42252se postfix/qmgr[14561]: C279030007E: from=<>, size=3182, nrcpt=1 (queue active) Jan 7 19:43:11 f42252se postfix/bounce[14639]: BE0AC30007F: sender non-delivery notification: C279030007E Jan 7 19:43:11 f42252se postfix/qmgr[14561]: BE0AC30007F: removed Jan 7 19:43:11 f42252se dovecot: auth: Debug: master in: USER#0111#011avadmin(a)av.loc#011service=lda Jan 7 19:43:11 f42252se dovecot: auth: Debug: ldap(avadmin(a)av.loc): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=avadmin(a)av.loc)) fields=uid,userPassword Jan 7 19:43:11 f42252se dovecot: auth: ldap(avadmin(a)av.loc): *unknown user* Jan 7 19:43:11 f42252se dovecot: auth: Debug: master out: NOTFOUND#0111 Jan 7 19:43:11 f42252se postfix/pipe[14637]: C279030007E: to=<avadmin(a)av.loc>, relay=dovecot, delay=0.01, delays=0/0/0/0.01, dsn=5.1.1, status=bounced (user unknown) Jan 7 19:43:11 f42252se postfix/qmgr[14561]: C279030007E: removed Jan 7 19:43:21 f42252se dovecot: auth: Debug: auth client connected (pid=14644) Jan 7 19:43:21 f42252se dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=pop3#011secured#011lip=192.168.110.150#011rip=192.168.110.165#011lport=995#011rport=43070 Jan 7 19:43:21 f42252se dovecot: auth: Debug: client out: CONT#0111#011 Jan 7 19:43:21 f42252se dovecot: auth: Debug: client in: CONT<hidden> Jan 7 19:43:21 f42252se dovecot: auth: Debug: ldap(qx42252006,192.168.110.165): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=qx42252006)) fields=uid,userPassword Jan 7 19:43:21 f42252se dovecot: auth: Debug: ldap(qx42252006,192.168.110.165): result: uid(user)=qx42252006 userPassword(password)=<hidden> Jan 7 19:43:21 f42252se dovecot: auth: Debug: client out: OK#0111#011user=qx42252006 Jan 7 19:43:21 f42252se dovecot: auth: Debug: master in: REQUEST#0113145334785#01114644#0111#0115f6241afb0ff05d6b901a9a1edd65840 Jan 7 19:43:21 f42252se dovecot: auth: Debug: master out: USER#0113145334785#011qx42252006#011uid=5000#011gid=5000#011home=/home/vmail/qx42252006 Jan 7 19:43:21 f42252se dovecot: pop3-login: Login: user=<qx42252006>, method=PLAIN, rip=192.168.110.165, lip=192.168.110.150, mpid=14646, TLS Jan 7 19:43:21 f42252se dovecot: pop3(qx42252006): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 7 19:43:27 f42252se dovecot: auth: Debug: auth client connected (pid=14649) Jan 7 19:43:28 f42252se dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=pop3#011secured#011lip=192.168.110.150#011rip=192.168.110.165#011lport=995#011rport=43071 Jan 7 19:43:28 f42252se dovecot: auth: Debug: client out: CONT#0111#011 Jan 7 19:43:28 f42252se dovecot: auth: Debug: client in: CONT<hidden> Jan 7 19:43:28 f42252se dovecot: auth: Debug: ldap(avadmin,192.168.110.165): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=avadmin)) fields=uid,userPassword Jan 7 19:43:28 f42252se dovecot: auth: Debug: ldap(avadmin,192.168.110.165): result: uid(user)=avadmin userPassword(password)=<hidden> Jan 7 19:43:28 f42252se dovecot: auth: Debug: client out: OK#0111#011user=avadmin Jan 7 19:43:28 f42252se dovecot: auth: Debug: master in: REQUEST#0113661234177#01114649#0111#011abd1ac9fcd3ced2d9b01e090f3703ac0 Jan 7 19:43:28 f42252se dovecot: auth: Debug: master out: USER#0113661234177#011avadmin#011uid=5000#011gid=5000#011home=/home/vmail/avadmin Jan 7 19:43:28 f42252se dovecot: pop3-login: Login: user=<avadmin>, method=PLAIN, rip=192.168.110.165, lip=192.168.110.150, mpid=14650, TLS Jan 7 19:43:28 f42252se dovecot: pop3(avadmin): Disconnected: Logged out top=0/0, retr=0/0, del=0/2, size=4872 Jan 7 19:44:31 f42252se dovecot: auth: Debug: auth client connected (pid=14694) Jan 7 19:44:31 f42252se dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=pop3#011secured#011lip=192.168.110.150#011rip=192.168.110.165#011lport=995#011rport=43073 Jan 7 19:44:31 f42252se dovecot: auth: Debug: client out: CONT#0111#011 Jan 7 19:44:31 f42252se dovecot: auth: Debug: client in: CONT<hidden> Jan 7 19:44:31 f42252se dovecot: auth: Debug: ldap(qx42252008,192.168.110.165): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=qx42252008)) fields=uid,userPassword Jan 7 19:44:31 f42252se dovecot: auth: Debug: ldap(qx42252008,192.168.110.165): result: uid(user)=qx42252008 userPassword(password)=<hidden> Jan 7 19:44:31 f42252se dovecot: auth: Debug: client out: OK#0111#011user=qx42252008 Jan 7 19:44:31 f42252se dovecot: auth: Debug: master in: REQUEST#011251920385#01114694#0111#011db7eed58edf0149fd176446b57c20a33 Jan 7 19:44:31 f42252se dovecot: auth: Debug: master out: USER#011251920385#011qx42252008#011uid=5000#011gid=5000#011home=/home/vmail/qx42252008 Jan 7 19:44:31 f42252se dovecot: pop3-login: Login: user=<qx42252008>, method=PLAIN, rip=192.168.110.165, lip=192.168.110.150, mpid=14698, TLS +++ Tell me what you need as additional info. Thanks for help -- Signatur Averlon info Mit freundlichen Grüßen / Kind Regards Karl-Heinz Fischbach Skype: khfischbach jabber: averlon(a)jabber.org Blog: averlon.posterous.com Signatur: Diese e-mail ist unter Umständen signiert. Die Signatur entspricht dem Deutschen Signaturgesetz und entsprechenden europäischen Regelungen. Important Note: This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information. If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of it is strictly prohibited. Please inform us immediately and destroy the original transmittal.

5 9