July 2014 - dovecot - dovecot.org

[Dovecot] dovecot: disable ssl compression
by Andreas Schulze 04 Jul '14

04 Jul '14

Hello, Our "it-security" department asked me about Qualys warnings like -> SSL/TLS Compression Algorithm Information Leakage Vulnerability As far as I learned it's compression inside ssl. postfix-2.11 knows 'tls_ssl_options = no_compression' ( see http://www.postfix.org/postconf.5.html#tls_ssl_options ) is the something comparable in dovecot too? Looks like most extensions in ssl exist only to be disabled :-/ Thanks Andreas

7 15

number of users
by ihab 04 Jul '14

04 Jul '14

Hello, i using roundcube with dovecot, i have a question if there is possible to know the number of users that using the mail system (in other word the online users) . thanks, best regards, ihab :) -- View this message in context: http://dovecot.2317879.n4.nabble.com/number-of-users-tp48701.html Sent from the Dovecot mailing list archive at Nabble.com.

4 3

mixing Maildir and mdbox
by gustavo panizzo <gfa> 04 Jul '14

04 Jul '14

Hello i'm in the process to architect a new email system. i plan to use dovecot 2.2.9 (debian's wheezy). i would like to use maildir for 2 folders on each account (spam and no-spam) and the rest of the folders stored on mdbox. this should be opaque to my users. the reason for this, is i want to be able to train my anti-spam tools, but they read maildir or mbox, they don't read mdbox or dbox. but i want the other folders as mdbox (performance, backups, alternate storage) is there any way?, i prefer if is configurable in advance for all accounts but i could live with something that is done after account is created thanks! -- 1AE0 322E B8F7 4717 BDEA BF1D 44BB 1BA7 9F6C 6333

1 0

stripping extension from domain name
by Jerry 03 Jul '14

03 Jul '14

Thu, 3 Jul 2014 06:29:06 -0400 I know that the "%d" parameter is for the domain. Is there any way to use just the domain name sans its extension. EXAMPLE: example.com ==> example Also, I have a lot of logging going on in my dovecot log file. I want to limit it to just the barest amount, such as indicting what mail box mail was delivered to. Authentication errors, etcetera should only be shown if an error occurs. Is this possible? Thanks! -- Jerry

2 1

ACL configuration migration from Dovecot 2.1.17 to 2.2.13
by Iavor Stoev 03 Jul '14

03 Jul '14

Hello, I'm preparing migration to the latest Dovecot version 2.2.13 from the previous stable branch 2.1.17 which is deployed on my servers. With version 2.1.17 I use global acl dir to prevent all mail users to delete their INBOX.Junk Mail folder, which is part from our spam protection system. My current config is: cat /etc/dovecot/acls/INBOX.Junk\ Mail owner lrwstiae With version 2.2.13, the global acl dir support is disabled (with the above config, the imap server shows no folders at all) so I must use global acl file. The problem is that the "INBOX.Junk Mail" folder contains space character and I tried to escape it with "",'',/ and enclose the whole name with "" & '' without success. If I change the acl config to INBOX.Mail it works OK. The syntax of my global acl file is: cat /etc/dovecot/acls INBOX.Junk Mail owner lrwstiae The error is: Error: Global ACL file /etc/dovecot/acls line 1: Unknown ID 'Mail' Please advise Iavor Stoev Project Manager // Head of System & Network Administration Department

2 1

[Dovecot] fts_lucene - hiding lucene-indexes folder?
by Nicholas Riley 03 Jul '14

03 Jul '14

Hi, Is there any way to hide this folder from IMAP clients? I can see it is not runtime configurable and just #defined as LUCENE_INDEX_DIR_NAME in fts-backend-lucene.c. -- Nicholas Riley <njriley(a)illinois.edu>

5 8

BUG: Mail folder with space in its name is not supported in the global acl file
by Iavor Stoev 03 Jul '14

03 Jul '14

Hello, I use Dovecot 2.2.13 The syntax of my global acl file is: cat /etc/dovecot/acls INBOX.Junk Mail owner lrwstiae The error is: Error: Global ACL file /etc/dovecot/acls line 1: Unknown ID 'Mail' I tried to escape it with "",'',/ and enclose the whole name with "" & '' without success If I change the rule to: INBOX.JunkMail owner lrwstiae or INBOX.Junk?Mail owner lrwstiae The acl works fine. Please advise how to apply the acl rule for the folder with a space in its name? Thank you Iavor Stoev Project Manager // Head of System & Network Administration Department

2 1

Bug/feature: mail fs pollution on IMAP select namespace/{non-existent}
by Peter Benko 03 Jul '14

03 Jul '14

Hi all, I have noticed a strange behavior with dovecot (tested with 2.2.13). I use shared folders to share mailboxes between users. I have a namespace called "Accounts" that hosts the shared folder for the users (prefix Accounts/%%n/). However, When I issue an IMAP select command on a random non-existent mailbox name under "Accounts", dovecot auto-creates it and pollutes my mail root directory: Python test code snippet: imapConn=imaplib.IMAP4_SSL(serverIP, serverPort) imapConn.login(serverLogin, serverPass) print imapConn.select("Accounts/NonExistentMailbox") imapConn.logout() Resulting in this: drwxr-x--- 1 vmail vmail 4096 Jun 12 10:00 _attachments_ >>> drwx------ 1 vmail vmail 4096 Jun 24 14:27 NonExistentMailbox <<< drwxr-x--- 1 vmail vmail 4096 Jun 24 00:54 user1 drwxr-x--- 1 vmail vmail 4096 Jun 24 01:24 user2 ... -rwxr-x--- 1 vmail vmail 72 Jun 24 14:27 shared-mailboxes.db ls -l NonExistentMailbox/ -rw------- 1 vmail vmail 0 Jun 24 14:27 dovecot-acl-list drwx------ 1 vmail vmail 4096 Jun 24 14:27 mailboxes <<< (empty) I attached a debug log and and my sanitized dovecot config. Please help! Is this a bug or a feature? I assume it might even cause more serious problems e.g., if I would select "Accounts/_attachments_" or something similar... I noticed this behavior with the latest Thunderbird client when I tried to subscribe to shared folders and it started to pollute my mail dirs (which signals that Thunderbird might be also buggy as it should not select non-existent folders under "Accounts"). I just reproduced it for simplicity with the above python script. Best regards, Peter debug log --------- Jun 24 14:27:51 efi-backup dovecot: imap-login: Login: user=<user2(a)domain.com>, method=PLAIN, rip=192.168.1.1, lip=192.168.1.3, mpid=10787, TLS, session=<t36aFpT8ggDAqAEB> Jun 24 14:27:51 efi-backup dovecot: imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules Jun 24 14:27:51 efi-backup dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so Jun 24 14:27:51 efi-backup dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib02_imap_acl_plugin.so Jun 24 14:27:51 efi-backup dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_zlib_plugin.so Jun 24 14:27:51 efi-backup dovecot: imap: Debug: Added userdb setting: plugin/master_user=user2(a)domain.com Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: Effective uid=5000, gid=5000, home=/mail/mailboxes/domain.com/user2 Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mdbox:~ Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: fs: root=/mail/mailboxes/domain.com/user2, index=, indexpvt=, control=, inbox=, alt= Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl: initializing backend with data: vfile Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl: acl username = user2(a)domain.com Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl: owner = 1 Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl vfile: Global ACLs disabled Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: Namespace : type=shared, prefix=Accounts/%n/, sep=/, inbox=no, hidden=no, list=children, subscriptions=no location=mdbox:/mail/mailboxes/%d/%n:INDEX=/mail/mailboxes/%d/%n:INDEXPVT=/… Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: shared: root=/var/run/dovecot, index=, indexpvt=, control=, inbox=, alt= Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl: initializing backend with data: vfile Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl: acl username = user2(a)domain.com Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl: owner = 0 Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl vfile: Global ACLs disabled Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: fs: root=/mail/mailboxes/domain.com/NonExistentMailbox, index=, indexpvt=/mail/mailboxes/domain.com/user2/indexpvt-accounts/NonExistentMail…, control=, inbox=, alt= Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: Namespace : /mail/mailboxes/domain.com/NonExistentMailbox doesn't exist yet, using default permissions Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: Namespace : Using permissions from /mail/mailboxes/domain.com/NonExistentMailbox: mode=0700 gid=default Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl: initializing backend with data: vfile Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl: acl username = user2(a)domain.com Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl: owner = 0 Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl vfile: Global ACLs disabled Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: fs: root=/mail/mailboxes/domain.com/NonExistentMailbox, index=, indexpvt=/mail/mailboxes/domain.com/user2/indexpvt-accounts/NonExistentMail…, control=, inbox=, alt= Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl: initializing backend with data: vfile Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl: acl username = user2(a)domain.com Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl: owner = 0 Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl vfile: Global ACLs disabled Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl vfile: file /mail/mailboxes/domain.com/NonExistentMailbox/mailboxes/INBOX/dbox-Mails/dovecot-acl not found Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: Namespace Accounts/NonExistentMailbox/: Using permissions from /mail/mailboxes/domain.com/NonExistentMailbox: mode=0700 gid=default Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl vfile: file /mail/mailboxes/domain.com/NonExistentMailbox/mailboxes/INBOX/dbox-Mails/dovecot-acl not found Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Disconnected: Logged out in=56 out=481 doveconf -n ----------- # 2.2.13 (38cd37cea8b1): /etc/dovecot/dovecot.conf auth_master_user_separator = * auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = plain hostname = mail.domain.com listen = * login_greeting = $hostname IMAP server mail_attachment_dir = /mail/mailboxes/%d/_attachments_ mail_attachment_fs = sis-queue /mail/mailboxes/%d/_attachments_/queue:posix mail_attachment_min_size = 16 k mail_debug = yes mail_location = mdbox:~ mail_plugins = " zlib acl" mdbox_rotate_interval = 5 days mdbox_rotate_size = 5 M namespace { inbox = yes location = prefix = separator = / type = private } namespace { list = children location = mdbox:/mail/mailboxes/%%d/%%n:INDEX=/mail/mailboxes/%%d/%%n:INDEXPVT=/mail/mailboxes/%d/%n/indexpvt-accounts/%%n prefix = Accounts/%%n/ separator = / subscriptions = no type = shared } passdb { args = /mail/config/dovecot/passwd driver = passwd-file } passdb { args = /mail/config/dovecot/passwd-master driver = passwd-file master = yes pass = yes } plugin { acl = vfile acl_defaults_from_inbox = yes acl_shared_dict = file:/mail/mailboxes/%d/shared-mailboxes.db zlib_save = gz zlib_save_level = 6 } postmaster_address = postmaster(a)domain.com protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { port = 993 ssl = yes } } ssl = required ssl_cert = </mail/config/public-address-cert.pem ssl_key = </mail/config/public-address-key.pem syslog_facility = local6 userdb { args = uid=vmail gid=vmail master_user=%u home=/mail/mailboxes/%d/%n driver = static } protocol imap { mail_plugins = " zlib acl imap_acl" } remote 192.168.0.0/16/16 { ssl_cert = </mail/config/private-address-cert.pem ssl_key = </mail/config/private-address-key.pem }

2 1

Dsync replication one-way
by Muriel 03 Jul '14

03 Jul '14

Hi all, I know that I can do a backup using doveadm: doveadm backup -u user ssh backup.server doveadm dsync-server -u user But it's possible to use replicator service to do the same job? Or dsync with replicator can only be used in a two-way environment? Thanks, Muriel

2 1

IMAP sessions quit when calling MYRIGHTS on shared namespace
by Franz Knipp 03 Jul '14

03 Jul '14

Hi, the IMAP connection is dropped, when I call MYRIGHTS on the root of my shared folders. Using the configuration below, the shared folders are located in shared/%%U/ # telnet localhost imap Trying ::1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN] Dovecot ready. . LOGIN XXXXXXX xxxx . OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE QUOTA ACL RIGHTS=texk] Logged in . MYRIGHTS shared Connection closed by foreign host. I'd expect some kind of error message instead of dropping the connection. Kind regards, Franz # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.18.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_master_user_separator = * auth_verbose = yes debug_log_path = /var/log/dovecot_debug.log default_client_limit = 3500 disable_plaintext_auth = no import_environment = TZ DOVECOT_HOSTNAME lmtp_rcpt_check_quota = yes mail_gid = vmail mail_location = mdbox:~/mail mail_plugins = acl quota zlib mail_log notify mail_uid = vmail managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body environment mailbox date ihave duplicate vacation-seconds imapflags notify mbox_write_locks = fcntl namespace { list = children location = mdbox:%%h/mail prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace { hidden = yes list = no location = pop3c: prefix = POP3-MIGRATION-NS/ } namespace inbox { inbox = yes location = mailbox Drafts { auto = no special_use = \Drafts } mailbox Sent { auto = no special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = no special_use = \Trash } prefix = INBOX/ separator = / subscriptions = yes } namespace parent { hidden = yes list = no location = prefix = separator = / subscriptions = yes } passdb { args = /etc/dovecot/passwd.masterusers driver = passwd-file master = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = file:/var/spool/imap/dovecot-shared-mailboxes mail_log_events = delete undelete expunge copy save mailbox_create mailbox_delete mailbox_rename pop3_migration_mailbox = POP3-MIGRATION-NS/INBOX quota = dict:user::file:%h/mail/dovecot-quota quota_exceeded_message = Empfaenger Postfach ist voll (Mailbox Quota Exceeded) quota_grace = 50M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/sieve/active sieve_before = /etc/dovecot/sieve_before/movespamfolder.sieve sieve_dir = ~/sieve sieve_extensions = +notify -enotify +imapflags +vacation-seconds sieve_max_actions = 1000 sieve_max_redirects = 1000 sieve_vacation_max_period = 0 sieve_vacation_min_period = 0 zlib_save = gz zlib_save_level = 6 } pop3_no_flag_updates = yes pop3_uidl_format = %v.%u pop3c_host = pop3.example.com pop3c_master_user = master pop3c_password = secret protocols = imap pop3 lmtp sieve service anvil { unix_listener anvil-auth-penalty { mode = 00 } } service auth { unix_listener auth-userdb { mode = 0777 } } service imap-login { process_limit = 3000 process_min_avail = 16 service_count = 0 } service imap { process_limit = 10240 } service lmtp { inet_listener lmtp { port = 26 } } service managesieve-login { inet_listener sieve_deprecated { port = 2000 } } service pop3-login { service_count = 0 } service pop3 { process_limit = 10240 } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem syslog_facility = local0 userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = acl quota zlib mail_log notify sieve } protocol doveadm { mail_plugins = acl quota zlib mail_log notify pop3_migration } protocol lda { mail_plugins = acl quota zlib mail_log notify sieve } protocol imap { mail_max_userip_connections = 3789 mail_plugins = acl quota zlib mail_log notify imap_acl imap_quota } -- Franz Knipp, +43 664 3980169 qnipp GmbH, Hauptstraße 54, 7064 Oslip, Österreich http://qnipp.com http://qnipp.com/qnipp.vcf

3 3