January 2014 - dovecot

[Dovecot] mail check
by Paolo 20 Jan '14

20 Jan '14

Is there some simple script that parsing the dovecot.info.log can give me a list of the mail checks for a user (better if reports also the type (POP/IMAP), and result of the sessions (Ok/Fail/Error/...))? Regards, Paolo

2 2

[Dovecot] auth_default_realm, pam_krb5, gssapi
by Sergey Urushkin 20 Jan '14

20 Jan '14

Hi, Just writing here my note about auth_default_realm, pam_krb5 and gssapi. It seems that 'pam' passdb and 'gssapi' auth_mechanism doesn't honor 'auth_default_realm' setting, at least in several setups I deal with. Here is a part of the config: passdb { args = max_requests=100 cache_key=%u%r dovecot driver = pam } auth_default_realm = REALM.COM auth_mechanisms = plain login apop gssapi auth_username_format = %Uu The problem is that pam_krb5 strips default realm from username (by default), even if auth_default_realm is specified and even if user logs in as 'user1(a)realm.com' (with domain part). A part of auth.log: mail auth: pam_krb5(dovecot:auth): user USER1 authenticated as USER1(a)REALM.COM The same for GSSAPI auth, if specified authorization name doesn't contain domain part. A part of mail.log: mail dovecot: imap-login: Login: user=<USER1>, method=GSSAPI, rip=172.16.0.1, lip=192.168.1.1, mpid=5828, TLS, session=<bpzvRmDwPACsFwCX> For several reasons I do need username inside dovecot to contain domain part. So, I found a solution to this problem - modifying /etc/krb5.conf this way: [libdefaults] default_realm = REALM.COM [realms] REALM.COM = { auth_to_local = RULE:[1:$1@$0] } This will add realm part to the local username despite using default realm. Maybe it's better to put this example to the wiki? Tested with ubuntu 12.04 and dovecot 2.2.10, mit kerberos 1.10, amd64. Taking the opportunity, I'd like to ask, is there a way to make usernames case insensitive while using GSSAPI. The case: klist shows: Principal: user1(a)REALM.COM username in thunderbird 'uSer1(a)REALM.COM'. Dovecot gives me this message (I use auth_username_format=%Uu for pam_krb5 to be able to login with lowercase realm): dovecot: auth: gssapi(USER1(a)REALM.COM,172.16.0.1,<IIgwMGbw3ACsFgA4>): User not authorized to log in as USER1(a)REALM.COM As I know kerberos usernames are case insensitive (user part), at least kinit and windows against AD works that way. Seems that k5credentials passdb extra field will not help here too. Does anyone have an idea? Thanks. -- Best regards, Sergey Urushkin

1 0

[Dovecot] New document on troubleshooting Dovecot IMAP
by Steve Litt 20 Jan '14

20 Jan '14

Hi all, Check out my new document on troubleshooting Dovecot IMAP: http://www.troubleshooters.com/emailtech/imap_troubleshooting.htm Thank you to all those, on this mailing list and on the #dovecot IRC channel, for helping me with this. Thanks, SteveT Steve Litt * http://www.troubleshooters.com/ Troubleshooting Training * Human Performance

2 1

[Dovecot] Shared Folters with LDA/Sieve
by Dieter Knopf 19 Jan '14

19 Jan '14

Hello, i'm searching for a way to use Shared mailboxes with Sieve Filtering. I need global email addresses like: info(a)foo.tld contact(a)foo.tld help(a)foo.tld Every address with own Sieve-rules for filtering and sorting of incoming mails. Now every user needs access to this folders, but how? How should i create the "global" addresses? I already found http://wiki2.dovecot.org/SharedMailboxes/Public , but that's just a public namespace. Is there any FAQ available for this? Thank you very much Dieter

4 4

[Dovecot] Dovecot - not pulling pop3s email from virtual mbox
by Ganesh Hariharan 18 Jan '14

18 Jan '14

Hi All, I am bit strugging to get this work, and bit perplexed to set the right configuration to get this work, btw: I am using passdb without any DB based auth. the latest logs after debug mode setting is below Jan 16 09:27:04 ns dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/auth/libdriver_sqlite.so Jan 16 09:27:04 ns dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/auth/libmech_gssapi.so Jan 16 09:27:04 ns dovecot: auth: Error: passwd-file /etc/dovecot/users: User info(a)ghhdomain.com has invalid GID '/var/spool/mail/ghhdomain/info/' Jan 16 09:27:04 ns dovecot: auth: Debug: passwd-file /etc/dovecot/users: Read 0 users Jan 16 09:27:04 ns dovecot: auth: Fatal: No passdbs specified in configuration file. CRAM-MD5 mechanism needs one Jan 16 09:27:04 ns dovecot: master: Error: service(auth): command startup failed, throttling Please see my configs 10-mail.conf mail_location = maildir:/var/spool/mail/%d/%n 10-ssl.conf # SSL/TLS support: yes, no, required. <doc/wiki/SSL.txt> ssl = yes ssl_cert = </etc/postfix/newcert.pem ssl_key = </etc/postfix/newkey.pem auth-system.conf.ext #passdb { #driver = passwd-file #args = scheme=cram-md5 username_format=%u /etc/dovecot/passwd #} userdb { driver = passwd-file args = username_format=%u /etc/dovecot/users } auth-passwdfile.conf.ext passdb { driver = passwd-file args = scheme=CRYPT username_format=%u /etc/dovecot/users } users file look like this info(a)ghhdomain.com: {CRAM-MD5}e02d374fde0dc75a17a557039a3a5338c7743304777dccd376f332bee68d2cf6:503:503 I created using doveadm pw , and pasted the output to the above file Please let me know what went wrong, and what I need to do now... thanks G. userdb { driver = passwd-file args = username_format=%u /etc/dovecot/users I have made a mess of these configuration after many tries.. yet not sure what is the simple steps to make it work

2 7

[Dovecot] Sizing MTA servers
by Murray Trainer 18 Jan '14

18 Jan '14

Hi All, This is probably a bit off-topic but does anyone have any idea about sizing MTA servers. We have about 200,000 emails/hr incoming and outgoing. I am intending using Exim and Spamassassin on each MTA. How many servers using recent hardware would I need to cope with this mail throughput? What is more important on the servers, CPU or RAM? Should I have mail going both directions on each server or dedicate a pair each for incoming and outgoing mail> Thanks for any feedback. Murray

5 5

[Dovecot] doveconf base_dir
by Andreas Schulze 18 Jan '14

18 Jan '14

Hello, today I run the command "doveadm auth cache flush" for the first time. # doveadm auth cache flush doveadm(root): Error: userdb lookup: connect(/var/run/dovecotauth-master) failed: No such file or directory 0 cache entries flushed # base_dir was the only item contain 'run' and it did not end with a / So I tried to set base_dir to /var/run/dovecot/ and could now rerun "doveadm auth cache flush" without problems. I compile dovecot from source and found --with-rundir=/var/run/dovecot as an option to configure. I changed to /var/run/dovecot/, recompile and removed the base_dir setting in dovecot.conf again. Now "doveadm auth cache flush" work out of the box. doveconf -d base_dir is var/run/dovecot/. Finaly I compiled dovecot with --localstatedir=/var and removed --with-rundir from configure. The resulting package had again base_dir = /var/run/dovecot so "doveadm auth cache flush" don't work. looks like somewhere the missing / should be added in case base_dir has no trailing / without special configuration. Andreas

1 0

[Dovecot] imap abort after upgrade from 2.2.4 to 2.2.7
by morrison 17 Jan '14

17 Jan '14

Hi, I used to use dovecot 2.2.4. I saw lots of warnings saying 'Extension header update points outside header size'. I upgraded to dovecot 2.2.7, based on the discussion in mail list. Now, I see lots of imap aborts around: src/lib-index/mail-index-transaction-export.c:203: i_assert(u32.offset + u32.size <= ext_hdr_size); I also noticed, in some mailbox, imap process kept abort until all index files in the mailbox were manually deleted. Did someone run into the same problem and any solution to this? Thanks,

4 4

[Dovecot] Dovecot IMAP proxy for gmail IMAP server
by CM Reddy 17 Jan '14

17 Jan '14

Hi All, I am experimenting to use Dovecot as an IMAP proxy to GMAIL server. I would like configure my localhost as an Dovecot IMAP proxy and trying to access my GMAIL using the Thunderbird email client. Please share the steps to configure and access my mails from GMAIL server. - Thanks CM Reddy

2 1

[Dovecot] Use dovecot for enterprise
by ♥ NiNJA ♂ 17 Jan '14

17 Jan '14

Hi guys I like to know is it possible to create Unlimited number of email accounts with Unlimited Storage in each email ? Does anybody do it ? Does dovecot good enough for having more than millions of users ? Thanks :-)

3 2