May 2013 - dovecot - dovecot.org

[Dovecot] system account delivery userdb authentication
by Yann Shukor 29 May '13

29 May '13

Hi I have a remaining issue with a mail server setup. Composed of Postfix and Dovecot it is is a 'local' mail server At first I relied upon Mysql to store the various parameters, and then switched to a flat file approach I also initially set the server up to handle virtual users, but then I realized that it was destined to manage local system accounts only. So I reconfigured it accordingly Relying on system accounts for authentication means that the domain name component is absent from the username (as opposed to virtual user identifiers) This caused me some difficulty at first with roundcube, but I was able to get around it through a manual adjustment in Mysql The remaining aspect that isn't working is the delivery of emails. The entry in master.cf for dovecot looks looks this: dovecot unix - n n - - pipe flags=DRhu user=mail:mail argv=/usr/lib/dovecot/deli ver -d ${recipient} The problem is that the recipient equates to the users email address, which can't in fact be used for authentication purposes with system accounts. I then tried replacing recipient with user: dovecot unix - n n - - pipe flags=DRhu user=mail:mail argv=/usr/lib/dovecot/deliver -d ${user} There seems to be a rights issue because I get the following error: dovecot Fatal: setgid(100(users)) failed with euid=8(mail), gid=8(mail), egid=8(mail): Operation not permitted Any ideas ? thanks yann # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 6.0.7 ext4 log_timestamp: %d-%m-%Y %H:%M:%S protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/ssl/certs/postfix.pem ssl_key_file: /etc/ssl/private/postfix.key login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_privileged_group: mail mail_location: maildir:/var/mail/%u mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 lda: auth_socket_path: /var/run/dovecot/auth-master postmaster_address: postmaster(a)holinice.com mail_plugins: sieve log_path: syslog_facility: mail auth default: mechanisms: plain login verbose: yes passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: mail group: mail

2 1

[Dovecot] dovecot + virtio (9p2000.L) = errors
by epek＠gmx.net 28 May '13

28 May '13

Hi! I hope someone knows more about the issues I've encountered in: Setup: I am running dovecot 2.1.7 on Debian Wheezy in a virtual machine (kvm-style qemu-kvm: host: ubuntu 13.04/1.4.0-dfsg-1expubuntu). The mail storage is a directory on the host machine mounted via virtfs (9p2000.L) on the guest. Furthermore ISPConfig is involved in that setup, but that should not make any significant difference at that point. Problem resolved: The problem is, that similar to nfs mmap() and dotlocking seem to fail - the mmap issue could be resolved by adding: mmap_disable=yes to dovecot.conf Problem remaining: Still the following errors remain, despite dotlock_use_excl=no May 27 12:54:51 host dovecot: imap(test@mydomain): Error: fstat(/var/vmail/mydomain/test/.quotausage.lock) failed: No such file or directory May 27 12:54:51 host dovecot: imap(test@mydomain): Error: file dict commit: file_dotlock_open(/var/vmail/mydomain/test/.quotausage) failed: No such file or directory May 27 12:54:51 host dovecot: imap(test@mydomain): Error: fstat(/var/vmail/mydomain/test/Maildir/dovecot-uidlist.lock) failed: No such file or directory May 27 12:54:51 host dovecot: imap(test@mydomain): Error: fstat(/var/vmail/mydomain/test/Maildir/dovecot-uidlist.lock) failed: No such file or directory May 27 12:54:51 host dovecot: imap(test@mydomain): Error: fstat(/var/vmail/mydomain/test/Maildir/dovecot-uidlist.lock) failed: No such file or directory May 27 12:54:51 host dovecot: imap(test@mydomain): Error: fstat(/var/vmail/mydomain/test/Maildir/dovecot-uidlist.lock) failed: No such file or directory May 27 12:54:51 host dovecot: imap(test@mydomain): Error: fstat(/var/vmail/mydomain/test/Maildir/dovecot-uidlist.lock) failed: No such file or directory May 27 12:54:51 host dovecot: imap(test@mydomain): Error: fstat(/var/vmail/mydomain/test/Maildir/dovecot-uidlist.lock) failed: No such file or directory May 27 12:54:52 host dovecot: imap(test@mydomain): Error: fstat(/var/vmail/mydomain/test/Maildir/dovecot-uidlist.lock) failed: No such file or directory May 27 12:54:52 host dovecot: imap(test@mydomain): Error: file_dotlock_create(/var/vmail/mydomain/test/Maildir/dovecot-uidlist) failed: No such file or directory May 27 12:54:52 host dovecot: imap(test@mydomain): Error: fstat(/var/vmail/mydomain/test/Maildir/dovecot-uidlist.lock) failed: No such file or directory May 27 12:54:52 host dovecot: imap(test@mydomain): Error: fstat(/var/vmail/mydomain/test/Maildir/dovecot-uidlist.lock) failed: No such file or directory May 27 12:54:52 host dovecot: imap(test@mydomain): Error: file_dotlock_create(/var/vmail/mydomain/test/Maildir/dovecot-uidlist) failed: No such file or directory The "failed" files are existing on that path - permissions for the configured "vmail" user and group exist (0600). I'd be greatful for any hint on how to resolve that issue - Thanks in advance! Regards Erich

1 0

[Dovecot] put users's mailbox in read only mode
by Frank Bonnet 28 May '13

28 May '13

Hello For internal purpose I need to put some users's mailboxes and IMAP folders in read only mode during few days. We use MBOX format and UNIX real users mode ( FreeBSD 9.1 ) thanks for any info

2 1

[Dovecot] UIDLs problem on migration to dovecot
by Oscar A. Jara 27 May '13

27 May '13

Hello list, I'm about to migrate from Courier 4.6 (POP and IMAP) to Dovecot 1.2. I am currently trying to match UIDLs of both servers to avoid redownload of mails but I could not success. I've already configured dovecot POP3 to format UIDLs like this: pop3_uidl_format = UID%u-%v I also executed the script 'courier-dovecot-migrate.pl' to do the migration in a couple of test accounts but the IDs don't match for all mails and the script didn't report any errors. I have production courier pop3 server running on port 110 and the new dovecot server running on another port. Here I paste some of the missmatches in one of the test accounts: 8827 UID9060-1259354075 | 8827 UID9041-1259354075 8828 UID9061-1259354075 | 8828 UID9023-1259354075 8829 UID9062-1259354075 | 8829 UID9067-1259354075 8830 UID9063-1259354075 | 8830 UID9064-1259354075 8831 UID9064-1259354075 | 8831 UID9043-1259354075 8832 UID9065-1259354075 | 8832 UID9061-1259354075 8833 UID9066-1259354075 | 8833 UID9025-1259354075 8834 UID9067-1259354075 | 8834 UID9047-1259354075 One thing that I don't know if is important is that I am using dovecot-lda since long ago, not courier lda. I don't know what I am missing here and I would appreciate some help. Thank you. __________ Information from ESET Mail Security, version of virus signature database 8381 (20130527) __________ The message was checked by ESET Mail Security. http://www.eset.com

1 0

[Dovecot] Problem with dsync replication : mails are not deleted correctly
by Nicolas ROCHE 27 May '13

27 May '13

Hello, I would like to configure a postfix / dovecot cluster based on ssh / dsync replication. I have two linux serveurs (Oracle RHEL 5 86_64) and I install both sides dovecot (V2.2.2+), postfix (2.10.0) and mysql (Ver 14.12 Distrib 5.0.77). I configured these servers in order to make them replicate, and I created some virtual users. I use some java code in order to send mail (with SMTP) and to get mail (with POP3). When the java code get a mail, it deletes it from mailbox (the flag "DELETED" is set to true). When I send a mail on server A, I can see the mail replicated on both servers A and B : a file containing the message data exists in /home/vmail/test03/new/ in both sides. When I get the mail from server A with my java POP3 client, all is OK : the mail is deleted on both servers A and B (no more file in /home/vmail/test03/new/). The problem is when I send a mail on server A and I get it from server B : I can get the mail, but the mail is not deleted from server B, and neither from server A. When I try a second time to get the mail on server B, then all becomes OK : the mail is deleted on both server A and B. I can reproduce the problem every time. Is it a known bug or not ? If yes, is there a patch ? If no, may the problem come from my config ? Regards, Nicolas. [root@int-proxy1 dovecot-2.2.2-p1]# doveconf -n # 2.2.2: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.el5xen x86_64 Red Hat Enterprise Linux Server release 5.5 (Tikanga) ext3 disable_plaintext_auth = no hostname = int-proxy1 mail_location = maildir:/home/vmail/%u mail_plugins = acl quota notify replication mail_privileged_group = mail mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf driver = sql } plugin { mail_replica = remote:vmail@int-proxy2 replication_full_sync_interval = 1 hours } pop3_uidl_format = %g postmaster_address = postmaster(a)mail.fluid-e.int service aggregator { fifo_listener replication-notify-fifo { mode = 0666 user = vmail } unix_listener replication-notify { mode = 0666 user = vmail } } service auth-worker { user = root } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { mode = 0666 user = vmail } user = root } service config { unix_listener config { user = vmail } } service doveadm { user = vmail } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0666 user = postfix } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service replicator { process_min_avail = 1 } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem submission_host = int-proxy1:25 userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { mail_plugins = acl quota imap_acl imap_quota mail_log notify }

3 6

[Dovecot] Upgrading 1.2 to 2.x
by Simon B 27 May '13

27 May '13

Hi In an unscheduled maintenance window next week, I will have the opportunity to upgrade to 2.x should I wish to do and provided I can get it working on stage first. My questions: I've seen a lot on the list about the rock-solidness of 1.2 but also some people saying that some versions of 2.x better than others. Is there a recommended version - I don't need bleeding edge, I'd prefer stability, or one most of you can agree on? What am I missing by not upgrading? A few months ago I tried to convert a Dovecot 1.2 config into 2.1 and wasn't very successful. Any tips on how to go about it? Thanks. Simon

2 2

[Dovecot] mixing virtual and system users
by Julien Beauviala 27 May '13

27 May '13

Hello all, I'm setting up a small mail server for aprox 20 users, and I'm trying to keep it really simple so I went the virtual users as text file way, following this page : http://lukas-schulze.de/2012/02/setup-postfix-and-dovecot-on-debian-squeeze… It seemed to work fine except for the 'system' users, and I am stumped by this. Basically the config does not 'see' /etc/aliases, so mail to root or mailman are 'Recipient address rejected: User unknown'. I've added the backup pam as explained by the following page* and tried many permutations in /etc/postfix/main.cf but still not good, systems users are rejected. Obviously something is amiss. * http://wiki2.dovecot.org/Authentication/MultipleDatabases If someone could point me in the right direction, that would be great. The system is debian 6, details of the configuration below. dovecot -n : ------------ # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.7 ext3 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/ssl/certs/postfix.pem ssl_key_file: /etc/ssl/private/postfix.key login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login first_valid_uid: 5000 last_valid_uid: 5000 first_valid_gid: 5000 last_valid_gid: 5000 mail_privileged_group: vmail mail_location: maildir:/var/vmail/%d/%n/Maildir mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 lda: auth_socket_path: /var/run/dovecot/auth-master postmaster_address: postmaster(a)example.net mail_plugins: sieve log_path: auth default: mechanisms: plain login verbose: yes passdb: driver: pam passdb: driver: passwd-file args: scheme=CRAM-MD5 /etc/dovecot/users.conf userdb: driver: static args: uid=5000 gid=5000 home=/var/vmail/%d/%n allow_all_users=yes userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail postconf -n : ------------- alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no broken_sasl_auth_clients = yes config_directory = /etc/postfix debug_peer_level = 2 inet_interfaces = all mailbox_size_limit = 0 mydestination = localhost mydomain = example.net myhostname = osiris.example.net mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 myorigin = $mydomain queue_directory = /var/spool/postfix recipient_delimiter = + relayhost = show_user_unknown_table_name = no smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt smtp_tls_note_starttls_offer = yes smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtp_use_tls = yes smtpd_banner = $myhostname ESMTP $mail_name smtpd_helo_required = yes smtpd_helo_restrictions = reject_invalid_helo_hostname smtpd_recipient_restrictions = reject_unknown_recipient_domain, reject_unauth_pipelining, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = $myhostname smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous smtpd_sasl_tls_security_options = $smtpd_sasl_security_options smtpd_sasl_type = dovecot smtpd_tls_CAfile = /etc/ssl/certs/ca-certificates.crt smtpd_tls_cert_file = /etc/ssl/certs/postfix.pem smtpd_tls_key_file = /etc/ssl/private/postfix.key smtpd_tls_loglevel = 1 smtpd_tls_received_header = yes smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_tls_session_cache_timeout = 3600s smtpd_use_tls = yes tls_random_source = dev:/dev/urandom virtual_alias_maps = hash:/etc/postfix/virtual_alias_maps virtual_gid_maps = static:5000 virtual_mailbox_base = /var/vmail virtual_mailbox_domains = hash:/etc/postfix/virtual_mailbox_domains virtual_mailbox_maps = hash:/etc/postfix/virtual_mailbox_maps virtual_minimum_uid = 100 virtual_transport = dovecot virtual_uid_maps = static:5000 /etc/postfix/virtual_mailbox_domains : -------------------------------------- @example.net OK @osiris.example.net OK /etc/postfix/virtual_mailbox_maps : ----------------------------------- elisabethp(a)example.net example.net/elisabethp /etc/postfix/virtual_alias_maps : --------------------------------- elisabeth(a)example.net elisabethp(a)example.net j.

2 1

[Dovecot] NFS mount permissions
by Patrick Westenberg 26 May '13

26 May '13

Hi everyone, I would like to move my mails from ocfs2 to an NFS share. As the mountpoint and all folders and files belong to nobody/nogroup, dovecot is only able to access the mails if I give full access to "others". I don't like that. How do you NFS-using guys solve this problem? Regards Patrick

3 4

[Dovecot] Problems with Apple Mail: Enter Password for Account "..."
by Frank Röhm 26 May '13

26 May '13

Hello I have on Ubuntu 12.04 a postfix 2.9.3-2 mailserver with dovecot 2.0.19 I get email from my pc (thunderbird), my smartphone (k9mail) and my MacBook (Apple Mail 4.6 - 1085 on Mac OS 10.6.8) all with IMAP and SSL. All is working normally but sometimes I get an error message from my MacBook, which is irritating. It says this (more or less): "Enter Password for Account "..." The IMAP-Server "..." rejected the password for user "..." Enter your password again or cancel. ... o Remember this password in my keychain" The password was NOT wrong, but anyway, if reenter it, Apple Mail won't accept it, the message will come again and again. I guess that dovecot blocks apple mail maybe because the other two clients try to login at the same time? Is there any setting where I could adjust this blocking (if it is blocking) in dovecot? Only if this really is the reason. The issue is coming not regularily but when it comes, often for half an hour I cannot check mails for this account (other accounts on apple mail won't be touched). If I restart Apple Mail, the problem could be fixed, but maybe not. In the logfiles of Dovecot I don't find anything about this. Thank you and kind regards frank

4 4

Re: [Dovecot] Dovecot mysql replication
by Alex Crow 26 May '13

26 May '13

Hi, Balls, the silly script (written in largely incomprehensible perl by a predecessor of mine) is supposed to catch mailing lists, and HR won't let us have it auto-terminate or update... :-( Thanks for giving me an another few hours work :-) Alex On 24/05/13 08:54, Edwardo Garcia wrote: > Alex, you on long vacation? > > Hi, I am on leave, returning on Thursday 9th May If your query is > urgent, please raise contact the team onitdept(a)integrafin.co.uk > <mailto:itdept@integrafin.co.uk>. Regards Alex > > > On Fri, May 24, 2013 at 5:48 PM, Alex Crow <acrow(a)integrafin.co.uk > <mailto:acrow@integrafin.co.uk>> wrote: > > On 24/05/13 08:45, Edwardo Garcia wrote: > > Halo, > > (First time posting, please forgive English is not native) > > Change from Courier to Dovecot 2.1.16 > > Having two server. > > Having mysql on thiz two server, one master, one slave. > > What we wish is slave Dovecot only ask slave mysql, unless > slave mysql not > work when then ask master, we have Postfix do thiz fallover > good, but > Dovecot talk to slave and master no mater what, we think thiz > defeat > fallover as we not want this aktion, but aktion like Postfix. > > The problemo is can not find Dovecot option for thiz in > wiki2.dovecot.org <http://wiki2.dovecot.org>, > is possible? > > > You could set up MySQL in Dual Master mode instead.... > > Alex > > > > -- > This message has been scanned for viruses and > dangerous content by *MailScanner* <http://www.mailscanner.info/>, and is > believed to be clean.

1 0