February 2015 - dovecot

Re: /etc/ssl/certs/dovecot.pem erased by OpenSuse's update mechanism
by dovecot＠lists.killian.com 16 Feb '15

16 Feb '15

Thanks for the note. I had never seen anything in the postfix and apache documentation that the CRLs could be intermingled with the CRTs in the CRT file. The documentation for those programs suggests putting the CRLs in a separate file (e.g. apache SSLCARevocationFile) or doesn't talk about putting CRLs in with the certs (e.g. postfix smtpd_tls_cert_file). If it works to put them all in one file for those programs, that's good to know. On 2015/2/16 07:23, Reindl Harald wrote: > > Am 16.02.2015 um 15:53 schrieb dovecot(a)lists.killian.com: >> Why not /etc/dovecot/private? That's where I put my dovecot certs. Dovecot's needs are a bit different from other software, and so it is unclear whether the files won't be unique to it. For example, I haven't seen the following before I read it on the Dovecot wiki: >> >> "The CA file should contain the certificate(s) followed by the matching CRL(s). Note that the CRLs are required to exist. For a multi-level CA place the certificates in this order: >> >> Issuing CA cert >> Issuing CA CRL >> Intermediate CA cert >> Intermediate CA CRL >> Root CA cert >> Root CA CRL" > > that is how you can and should build your PEM files for *every* SSL aware software, Apache and Postfix are happy with exactly that format > > i go even so far and include the CDHE and DHE params there which means in case of a recent httpd you can make DHE compatible which most clients even if your RSA certificate is 4096 Bit (read the hint about 2.4.7 or later at http://httpd.apache.org/docs/2.4/mod/mod_ssl.html#sslcertificatefile if you want to know why) > > there is also no need to place that certs below /etc/dovecot at all nor have them readable for anybody but root, we have our wildcard certificate on a unique location synced to all servers offering SSL and again Dovecot, Postfix and Apache are happy to read the PEM root-only PEM files at startup and that's it

2 1

Migrate from Courier to Dovecot - shared folders - can't subscribe
by Никита Борисенков 16 Feb '15

16 Feb '15

Hello, I try to migrate from Courier to Dovecot and i have a trouble with shared folders. Shared mailbox is visible in list, but i can't subscribe to it. user - bna(a)test.sunlink.ru shared folder - mail-rack(a)test.sunlink.ru Here is a raw log: LOGIN-AND-FIND-SUBSCRIBED-IN: 2 namespace 3 ENABLE CONDSTORE 4 ID ("name" "Thunderbird" "version" "31.4.0") 5 list (subscribed) "" "INBOX.*" 6 list (subscribed) "" "shared.*" 7 list "" "INBOX" 8 select "INBOX" (CONDSTORE) 9 myrights "INBOX" 10 getacl "INBOX" 11 getquotaroot "INBOX" 12 UID fetch 33:* (FLAGS) 13 IDLE DONE 14 list (subscribed) "" "INBOX.*" 15 list "" "INBOX.%" 16 list "" "INBOX.%.%" 17 list (subscribed) "" "shared.*" 18 list "" "shared.%" 19 list "" "shared.%.%" 20 IDLE DONE 21 list "" "shared.shared/%" 22 list "" "shared.shared/%/%" 23 IDLE DONE 24 list "" "shared.mail-rack.%" 25 list "" "shared.mail-rack.%.%" 26 IDLE DONE 27 close 28 logout LOGIN-AND-FIND-SUBSCRIBED-OUT: 1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE NOTIFY QUOTA ACL RIGHTS=texk] Logged in * NAMESPACE (("INBOX." ".")) (("shared." ".")) NIL 2 OK Namespace completed. * ENABLED CONDSTORE 3 OK Enabled. * ID ("name" "Dovecot") 4 OK ID completed. * LIST (\Subscribed) "." INBOX.Archives * LIST (\Subscribed) "." INBOX.Drafts * LIST (\Subscribed) "." INBOX.Junk * LIST (\Subscribed) "." INBOX.Sent * LIST (\Subscribed) "." INBOX.Trash * LIST (\Subscribed) "." INBOX.INBOX.1 * LIST (\Subscribed) "." INBOX.1 5 OK List completed. 6 OK List completed. * LIST (\HasChildren) "." INBOX 7 OK List completed. * FLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk $Forwarded Junk) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk $Forwarded Junk \*)] Flags permitted. * 24 EXISTS * 0 RECENT * OK [UIDVALIDITY 1423308312] UIDs valid * OK [UIDNEXT 39] Predicted next UID * OK [HIGHESTMODSEQ 675] Highest 8 OK [READ-WRITE] Select completed (0.000 secs). * MYRIGHTS INBOX lrwstipekxacd 9 OK Myrights completed. * ACL INBOX bna(a)test.sunlink.ru lrwstipekxacd 10 OK Getacl completed. * QUOTAROOT INBOX "User quota" * QUOTA "User quota" (STORAGE 79458 512000) 11 OK Getquotaroot completed. * 24 FETCH (UID 32 FLAGS (\Seen NonJunk)) 12 OK Fetch completed. + idling 13 OK Idle completed. * LIST (\Subscribed) "." INBOX.Archives * LIST (\Subscribed) "." INBOX.Drafts * LIST (\Subscribed) "." INBOX.Junk * LIST (\Subscribed) "." INBOX.Sent * LIST (\Subscribed) "." INBOX.Trash * LIST (\Subscribed) "." INBOX.INBOX.1 * LIST (\Subscribed) "." INBOX.1 14 OK List completed. * LIST (\HasNoChildren \UnMarked) "." INBOX.1 * LIST (\HasNoChildren \UnMarked \Sent) "." INBOX.Sent * LIST (\HasNoChildren \UnMarked \Junk) "." INBOX.Junk * LIST (\HasNoChildren \UnMarked \Drafts) "." INBOX.Drafts * LIST (\HasNoChildren \UnMarked) "." INBOX.Archives * LIST (\HasNoChildren \Trash) "." INBOX.Trash 15 OK List completed. * LIST (\HasNoChildren \UnMarked) "." INBOX.INBOX.1 16 OK List completed. 17 OK List completed. * LIST (\HasChildren) "." shared.mail-rack 18 OK List completed. * LIST (\HasNoChildren \UnMarked) "." shared.mail-rack.Trash 19 OK List completed. + idling 20 OK Idle completed. 21 OK List completed. 22 OK List completed. + idling 23 OK Idle completed. * LIST (\HasNoChildren \UnMarked) "." shared.mail-rack.Trash 24 OK List completed. 25 OK List completed. + idling 26 OK Idle completed. 27 OK Close completed. * BYE Logging out 28 OK Logout completed. SUBSCRIBE-IN: 2 ENABLE CONDSTORE 3 ID ("name" "Thunderbird" "version" "31.4.0") 4 subscribe "shared.mail-rack" 5 list (subscribed) "" "INBOX.*" 6 list (subscribed) "" "shared.*" 7 list "" "INBOX" 8 logout SUBSCRIBE-OUT: 1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE NOTIFY QUOTA ACL RIGHTS=texk] Logged in * ENABLED CONDSTORE 2 OK Enabled. * ID ("name" "Dovecot") 3 OK ID completed. 4 NO [CANNOT] This namespace has no subscriptions * LIST (\Subscribed) "." INBOX.Archives * LIST (\Subscribed) "." INBOX.Drafts * LIST (\Subscribed) "." INBOX.Junk * LIST (\Subscribed) "." INBOX.Sent * LIST (\Subscribed) "." INBOX.Trash * LIST (\Subscribed) "." INBOX.INBOX.1 * LIST (\Subscribed) "." INBOX.1 5 OK List completed. 6 OK List completed. * LIST (\HasChildren) "." INBOX 7 OK List completed. * BYE Logging out 8 OK Logout completed. As I understood from documentation if "shared." namespace have "subscription = no" then there shall be a parent namespace to match, before "shared.". But i have inbox namespace with prefix "INBOX." Where I was mistaken in a configuration? $ dovecot -n # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-xen-686 i686 Debian 7.8 xfs auth_mechanisms = plain login auth_verbose = yes dict { quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no first_valid_gid = 8 first_valid_uid = 8 info_log_path = /var/log/dovecot.log lda_mailbox_autocreate = yes listen = 172.27.65.34, 87.244.0.24 log_path = /var/log/dovecot.error.log mail_debug = yes mail_gid = mail mail_location = maildir:/var/virtmail/%d/%n mail_plugins = acl quota mail_uid = mail mailbox_list_index = yes maildir_very_dirty_syncs = yes namespace { hidden = no ignore_on_failure = yes list = children location = maildir:/var/virtmail/%%d/%%n prefix = shared.%%n. separator = . subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX. separator = . } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_defaults_from_inbox = yes acl_shared_dict = file:/var/virtmail/%d/shared-mailboxes.db antispam_allow_append_to_spam = no antispam_backend = pipe antispam_pipe_program = /root/sa-learn-pipe.sh antispam_pipe_program_notspam_arg = --ham antispam_pipe_program_spam_arg = --spam antispam_spam = Junk;Spam;SPAM antispam_trash = Trash antispam_unsure = Unsure quota = dict:User quota::proxy::quota quota_grace = 10%% quota_rule = *:storage=300M quota_rule2 = INBOX.Trash:storage=+100M quota_rule3 = INBOX.Sent:storage=+50M quota_rule4 = INBOX.SPAM:ignore quota_rule5 = INBOX.Junk:ignore quota_warning = storage=95%% quota-warning 95 %u sieve = ~/.dovecot.sieve sieve_after = /etc/dovecot/sieve/after sieve_before = /etc/dovecot/sieve/before sieve_dir = ~/sieve } protocols = " imap lmtp" service auth { unix_listener auth-client { mode = 0660 user = Debian-exim } } service dict { unix_listener dict { group = mail mode = 0600 user = mail } } service quota-warning { executable = script /root/quota-warning.sh unix_listener quota-warning { user = mail } } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = acl quota sieve } protocol imap { mail_plugins = acl quota imap_acl imap_quota mail_log notify antispam } protocol lda { mail_plugins = acl quota sieve } /var/log/dovecot.log Feb 13 18:21:06 imap-login: Info: Login: user=<bna(a)test.sunlink.ru>, method=PLAIN, rip=87.244.6.122, lip=87.244.0.24, mpid=28110, session=<rYcXyfkOEQBX9AZ6> Feb 13 18:21:06 script-login: Debug: Added userdb setting: plugin/quota_rule=*:bytes=500M Feb 13 18:21:06 imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules Feb 13 18:21:06 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so Feb 13 18:21:06 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib02_imap_acl_plugin.so Feb 13 18:21:06 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so Feb 13 18:21:06 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so Feb 13 18:21:06 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib15_notify_plugin.so Feb 13 18:21:06 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_mail_log_plugin.so Feb 13 18:21:06 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib90_antispam_plugin.so Feb 13 18:21:06 imap: Debug: Added userdb setting: plugin/quota_rule=*:bytes=500M Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: Effective uid=8, gid=8, home=/var/virtmail/test.sunlink.ru/bna Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: Quota root: name=User quota backend=dict args=:proxy::quota Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=* bytes=524288000 messages=0 Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.Trash bytes=+104857600 messages=0 Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.Sent bytes=+52428800 messages=0 Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.SPAM ignored Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.Junk ignored Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: Quota warning: bytes=498073600 (95%) messages=0 reverse=no command=quota-warning 95 bna(a)test.sunlink.ru Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: Quota grace: root=User quota bytes=52428800 (10%) Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: dict quota: user=bna(a)test.sunlink.ru, uri=proxy::quota, noenforcing=0 Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: Namespace inbox: type=private, prefix=INBOX., sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/var/virtmail/test.sunlink.ru/bna Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: maildir++: root=/var/virtmail/test.sunlink.ru/bna, index=, indexpvt=, control=, inbox=/var/virtmail/test.sunlink.ru/bna, alt= Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: acl: initializing backend with data: vfile Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: acl: acl username = bna(a)test.sunlink.ru Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: acl: owner = 1 Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: acl vfile: Global ACLs disabled Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: Namespace : type=shared, prefix=shared.%n., sep=., inbox=no, hidden=no, list=children, subscriptions=no location=maildir:/var/virtmail/%d/%n Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: shared: root=/var/run/dovecot, index=, indexpvt=, control=, inbox=, alt= Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: acl: initializing backend with data: vfile Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: acl: acl username = bna(a)test.sunlink.ru Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: acl: owner = 0 Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: acl vfile: Global ACLs disabled Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none Feb 13 18:21:06 imap(bna(a)test.sunlink.ru): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.Archives/dovecot-acl not found Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.Drafts/dovecot-acl not found Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.Junk/dovecot-acl not found Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.Sent/dovecot-acl not found Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.Trash/dovecot-acl not found Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.INBOX.1/dovecot-acl not found Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.1/dovecot-acl not found Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: Quota root: name=User quota backend=dict args=:proxy::quota Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=* bytes=524288000 messages=0 Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.Trash bytes=+104857600 messages=0 Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.Sent bytes=+52428800 messages=0 Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.SPAM ignored Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.Junk ignored Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: Quota warning: bytes=498073600 (95%) messages=0 reverse=no command=quota-warning 95 mail-rack(a)test.sunlink.ru Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: Quota grace: root=User quota bytes=52428800 (10%) Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: dict quota: user=mail-rack(a)test.sunlink.ru, uri=proxy::quota, noenforcing=0 Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: maildir++: root=/var/virtmail/test.sunlink.ru/mail-rack, index=, indexpvt=, control=, inbox=/var/virtmail/test.sunlink.ru/mail-rack, alt= Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl: initializing backend with data: vfile Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl: acl username = mail-rack(a)test.sunlink.ru Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl: owner = 1 Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl vfile: Global ACLs disabled Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: maildir++: root=/var/virtmail/test.sunlink.ru/mail-rack, index=, indexpvt=, control=, inbox=/var/virtmail/test.sunlink.ru/mail-rack, alt= Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl: initializing backend with data: vfile Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl: acl username = bna(a)test.sunlink.ru Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl: owner = 0 Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl vfile: Global ACLs disabled Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl vfile: reading file /var/virtmail/test.sunlink.ru/mail-rack/dovecot-acl Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: Namespace shared.mail-rack.: Using permissions from /var/virtmail/test.sunlink.ru/mail-rack: mode=0700 gid=default Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/dovecot-acl not found Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: Namespace INBOX.: Using permissions from /var/virtmail/test.sunlink.ru/bna: mode=0700 gid=default Feb 13 18:21:07 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/dovecot-acl not found Feb 13 18:21:08 imap(bna(a)test.sunlink.ru): Debug: Namespace shared.: Using permissions from : mode=0700 gid=default Feb 13 18:21:08 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/mail-rack/.Trash/dovecot-acl not found Feb 13 18:21:13 imap-login: Info: Login: user=<bna(a)test.sunlink.ru>, method=PLAIN, rip=87.244.6.122, lip=87.244.0.24, mpid=28114, session=<j+Z5yfkOEgBX9AZ6> Feb 13 18:21:13 script-login: Debug: Added userdb setting: plugin/quota_rule=*:bytes=500M Feb 13 18:21:13 imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules Feb 13 18:21:13 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so Feb 13 18:21:13 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib02_imap_acl_plugin.so Feb 13 18:21:13 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so Feb 13 18:21:13 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so Feb 13 18:21:13 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib15_notify_plugin.so Feb 13 18:21:13 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_mail_log_plugin.so Feb 13 18:21:13 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib90_antispam_plugin.so Feb 13 18:21:13 imap: Debug: Added userdb setting: plugin/quota_rule=*:bytes=500M Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Effective uid=8, gid=8, home=/var/virtmail/test.sunlink.ru/bna Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota root: name=User quota backend=dict args=:proxy::quota Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=* bytes=524288000 messages=0 Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.Trash bytes=+104857600 messages=0 Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.Sent bytes=+52428800 messages=0 Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.SPAM ignored Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.Junk ignored Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota warning: bytes=498073600 (95%) messages=0 reverse=no command=quota-warning 95 bna(a)test.sunlink.ru Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota grace: root=User quota bytes=52428800 (10%) Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: dict quota: user=bna(a)test.sunlink.ru, uri=proxy::quota, noenforcing=0 Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Namespace inbox: type=private, prefix=INBOX., sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/var/virtmail/test.sunlink.ru/bna Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: maildir++: root=/var/virtmail/test.sunlink.ru/bna, index=, indexpvt=, control=, inbox=/var/virtmail/test.sunlink.ru/bna, alt= Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl: initializing backend with data: vfile Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl: acl username = bna(a)test.sunlink.ru Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl: owner = 1 Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl vfile: Global ACLs disabled Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Namespace : type=shared, prefix=shared.%n., sep=., inbox=no, hidden=no, list=children, subscriptions=no location=maildir:/var/virtmail/%d/%n Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: shared: root=/var/run/dovecot, index=, indexpvt=, control=, inbox=, alt= Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl: initializing backend with data: vfile Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl: acl username = bna(a)test.sunlink.ru Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl: owner = 0 Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl vfile: Global ACLs disabled Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota root: name=User quota backend=dict args=:proxy::quota Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=* bytes=524288000 messages=0 Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.Trash bytes=+104857600 messages=0 Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.Sent bytes=+52428800 messages=0 Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.SPAM ignored Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota rule: root=User quota mailbox=INBOX.Junk ignored Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota warning: bytes=498073600 (95%) messages=0 reverse=no command=quota-warning 95 mail-rack(a)test.sunlink.ru Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Quota grace: root=User quota bytes=52428800 (10%) Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: dict quota: user=mail-rack(a)test.sunlink.ru, uri=proxy::quota, noenforcing=0 Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: maildir++: root=/var/virtmail/test.sunlink.ru/mail-rack, index=, indexpvt=, control=, inbox=/var/virtmail/test.sunlink.ru/mail-rack, alt= Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl: initializing backend with data: vfile Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl: acl username = mail-rack(a)test.sunlink.ru Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl: owner = 1 Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl vfile: Global ACLs disabled Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: maildir++: root=/var/virtmail/test.sunlink.ru/mail-rack, index=, indexpvt=, control=, inbox=/var/virtmail/test.sunlink.ru/mail-rack, alt= Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl: initializing backend with data: vfile Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl: acl username = bna(a)test.sunlink.ru Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl: owner = 0 Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl vfile: Global ACLs disabled Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl vfile: reading file /var/virtmail/test.sunlink.ru/mail-rack/dovecot-acl Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.Archives/dovecot-acl not found Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.Drafts/dovecot-acl not found Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.Junk/dovecot-acl not found Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.Sent/dovecot-acl not found Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.Trash/dovecot-acl not found Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.INBOX.1/dovecot-acl not found Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/.1/dovecot-acl not found Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Namespace shared.mail-rack.: Using permissions from /var/virtmail/test.sunlink.ru/mail-rack: mode=0700 gid=default Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: acl vfile: file /var/virtmail/test.sunlink.ru/bna/dovecot-acl not found Feb 13 18:21:13 imap(bna(a)test.sunlink.ru): Debug: Namespace INBOX.: Using permissions from /var/virtmail/test.sunlink.ru/bna: mode=0700 gid=default Feb 13 18:21:16 imap(bna(a)test.sunlink.ru): Info: Disconnected: Logged out in=196 out=921 Feb 13 18:21:16 imap(bna(a)test.sunlink.ru): Info: Disconnected: Logged out in=664 out=2824

1 0

dovecot 2.2.15 script_after not executed
by Florin Portase 16 Feb '15

16 Feb '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello guys, I'm having troubles making "script_after" to exec sieve scripts:: So: plugin { quota = maildir quota_rule2 = INBOX.Trash:ignore quota_rule3 = INBOX.Sent:ignore sieve = ~/Maildir/sieve/dovecot1.sieve sieve_before = /etc/dovecot/sieve/global.sieve sieve_after = ~/Maildir/sieve/01_vacation.sieve sieve_dir = ~/Maildir/sieve sieve_global_dir = /etc/dovecot/sieve/ sieve_quota_max_scripts = 50 expire = INBOX.Trash expire2 = INBOX.Spam expire3 = INBOX.Junk zlib_save = bz2 } ll /home/vpopmail/domains/medianetork.ro/portase.florin/Maildir/sieve/ total 28 - -rw-------. 1 vpopmail vchkpw 912 Feb 11 19:15 01_vacation.sieve - -rw-------. 1 vpopmail vchkpw 212 Feb 11 19:13 01_vacation.svbin drwx------. 2 vpopmail vchkpw 4096 Feb 11 00:02 after lrwxrwxrwx. 1 vpopmail vchkpw 13 Feb 11 19:15 dovecot1.sieve -> filters.sieve - -rw-------. 1 vpopmail vchkpw 878 Feb 11 19:16 dovecot1.svbin - -rw-------. 1 vpopmail vchkpw 1268 Feb 11 18:48 filters.sieve - -rw-------. 1 vpopmail vchkpw 932 Feb 11 18:55 new.sieve drwx------. 2 vpopmail vchkpw 4096 Feb 11 19:15 tmp And here is the debug output: Feb 11 19:16:09 lda(portase.florin(a)medianetork.ro): Debug: sieve: file script: Opened script `01_vacation' from `/home/vpopmail/domains/medianetork.ro/portase.florin/Maildir/sieve/01_vacation.sieve' Feb 11 19:16:09 lda(portase.florin(a)medianetork.ro): Debug: sieve: executed after user's Sieve script(3): /home/vpopmail/domains/medianetork.ro/portase.florin/Maildir/sieve/01_vacation.sieve Feb 11 19:16:09 lda(portase.florin(a)medianetork.ro): Debug: sieve: Opening script 1 of 3 from `/etc/dovecot/sieve/global.sieve' Feb 11 19:16:09 lda(portase.florin(a)medianetork.ro): Debug: sieve: Loading script /etc/dovecot/sieve/global.sieve Feb 11 19:16:09 lda(portase.florin(a)medianetork.ro): Debug: sieve: Script binary /etc/dovecot/sieve/global.svbin successfully loaded Feb 11 19:16:09 lda(portase.florin(a)medianetork.ro): Debug: sieve: binary save: not saving binary /etc/dovecot/sieve/global.svbin, because it is already stored Feb 11 19:16:09 lda(portase.florin(a)medianetork.ro): Debug: sieve: Executing script from `/etc/dovecot/sieve/global.svbin' Feb 11 19:16:09 lda(portase.florin(a)medianetork.ro): Debug: sieve: Opening script 2 of 3 from `/home/vpopmail/domains/medianetork.ro/portase.florin/Maildir/sieve/dovecot1.sieve;name=filters' Feb 11 19:16:09 lda(portase.florin(a)medianetork.ro): Debug: sieve: Loading script /home/vpopmail/domains/medianetork.ro/portase.florin/Maildir/sieve/dovecot1.sieve;name=filters Feb 11 19:16:09 lda(portase.florin(a)medianetork.ro): Debug: sieve: Script binary /home/vpopmail/domains/medianetork.ro/portase.florin/Maildir/sieve/dovecot1.svbin is not up-to-date Feb 11 19:16:09 lda(portase.florin(a)medianetork.ro): Debug: sieve: Script `filters' from /home/vpopmail/domains/medianetork.ro/portase.florin/Maildir/sieve/dovecot1.sieve;name=filters successfully compiled Feb 11 19:16:09 lda(portase.florin(a)medianetork.ro): Debug: sieve: Executing script from `/home/vpopmail/domains/medianetork.ro/portase.florin/Maildir/sieve/dovecot1.sieve;name=filters' Feb 11 19:16:10 lda(portase.florin(a)medianetork.ro): Info: sieve: msgid=<CAAa=MneAO6+wwLh3M8nz1z6Mi2Ae2aDMdrSakJA_-PYCwCvbCA(a)mail.gmail.com>: stored mail into mailbox 'INBOX.Gmail' If I change symlink from dovecot1.sieve -> filters.sieve to dovecot1.sieve -> 01_vacation.sieve vacation filter is working I think I miss something, but have no clue what's wrong. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJU26DNAAoJECEzxtLP+204zckH/R05yYi2iLFrXpYgNE0noyDu f1sAXPHk1UC75Wz0FMLRP/QR4K4ocF4TnZAC8a0e0rLdwILZ2ys7LUL1GkF5D/m6 MLotbZh01pWaI4+C7I6Nw0GeCMBYC1VFFrh/fxVcijdICA5H6v6VmiZs7/AyWq/3 OcmzHeLD0MgHcU7l2zD7MFszYnUTGaJoqztYMzz9Mzzgff7Gw4RioJTh3PDCu/Wp gAXPcX0/8fssSRBnmsIKs7bzUxhsXnFwisq+d6xYa4O/2tG1vU1YmmsGGj9YGIAR x5wKyCcPAeOWnZZ0rLvweVs+KMr91Dl4czteMsV71ZxNzMpLIUXdtrqAGYrHeZU= =PIJn -----END PGP SIGNATURE-----

3 6

Re: script-login help
by Jorge Bastos 14 Feb '15

14 Feb '15

Hi andre Well thats the thing. Im still on 2.2.23 as i use debian sid. Anyway i dont see any info on how to get the login ip or protocol. Is is possible?André Peters <andre.peters(a)debinux.de> wrote:Hi, I just want to remind you of this plugin: http://wiki2.dovecot.org/Plugins/LastLogin - maybe an option? André Am 14.02.2015 um 00:49 schrieb Jorge Bastos: > Hi, > > > > I'm trying to execute a bash script to update the last login, IP, and > protocol on the user's record, but I'm not being able 'cause I think this is > only for 2.2.24+ > > > > http://dovecot.org/pipermail/dovecot/2014-January/094610.html > > > > I'm on 2.2.23, any change/example to make it work here? > > > > Thanks in advanced, > > Jorge Bastos >

1 0

Re: script-login help
by André Peters 14 Feb '15

14 Feb '15

Hi, I just want to remind you of this plugin: http://wiki2.dovecot.org/Plugins/LastLogin - maybe an option? André Am 14.02.2015 um 00:49 schrieb Jorge Bastos: > Hi, > > > > I'm trying to execute a bash script to update the last login, IP, and > protocol on the user's record, but I'm not being able 'cause I think this is > only for 2.2.24+ > > > > http://dovecot.org/pipermail/dovecot/2014-January/094610.html > > > > I'm on 2.2.23, any change/example to make it work here? > > > > Thanks in advanced, > > Jorge Bastos >

1 0

script-login help
by Jorge Bastos 14 Feb '15

14 Feb '15

Hi, I'm trying to execute a bash script to update the last login, IP, and protocol on the user's record, but I'm not being able 'cause I think this is only for 2.2.24+ http://dovecot.org/pipermail/dovecot/2014-January/094610.html I'm on 2.2.23, any change/example to make it work here? Thanks in advanced, Jorge Bastos

1 0

curious when certain patches might become part of a release
by Benjamin Connelly 13 Feb '15

13 Feb '15

We ran in to this same problem others discussed in this thread: http://dovecot.org/list/dovecot/2014-November/098927.html and have also applied the patches (31262a892ba7 and 80ed82a93c1a) and it seems to have stopped the panics. We usually just use the FreeBSD ports tree to install software, so I'm looking forward to the time when we can go back to that. Will those patches be part of the next release? Benjamin

3 5

doveadm deduplicate commands
by Kevin Laurie 13 Feb '15

13 Feb '15

Hello, I just migrated my emails from gmail using getmail. In the process I got some emails that have been doubled or tripled How do I run the doveadm command to delete copies of same emails? I tried running the following:- doveadm deduplicate -u user(a)domain.net inbox but I get error:- doveadm(root): Fatal: Unknown argument INBOX Could someone share some way to automatically remove duplicated messages? Thanks Kevin

3 6

Dovecot FTS Sor Error
by Kevin Laurie 13 Feb '15

13 Feb '15

Hi, I have been trying to get fts solr to work for a while. Keep getting the error below(was wondering if this was schema related?) root@mail:/var/log# doveadm index -u user(a)domain.net inbox doveadm(thai(a)sicl.net): Error: fts_solr: Indexing failed: Server Error Below is from the apache solr output log:- Appreciate if someone can confirm the cause of this error. Thanks Kevin 2/13/2015, 11:30:53 PM ERROR SolrCore org.apache.solr.common.SolrException: Exception writing document id 1/3765be2ea8594f54780e00003555fc1a/useri(a)domain.net to the index; possible analysis error. org.apache.solr.common.SolrException: Exception writing document id 1/3765be2ea8594f54780e00003555fc1a/ochi(a)sicl.net to the index; possible analysis error. at org.apache.solr.update.DirectUpdateHandler2.addDoc(DirectUpdateHandler2.java:168) at org.apache.solr.update.processor.RunUpdateProcessor.processAdd(RunUpdateProcessorFactory.java:69) at org.apache.solr.update.processor.UpdateRequestProcessor.processAdd(UpdateRequestProcessor.java:51) at org.apache.solr.update.processor.DistributedUpdateProcessor.doLocalAdd(DistributedUpdateProcessor.java:926) at org.apache.solr.update.processor.DistributedUpdateProcessor.versionAdd(DistributedUpdateProcessor.java:1080) at org.apache.solr.update.processor.DistributedUpdateProcessor.processAdd(DistributedUpdateProcessor.java:692) at org.apache.solr.update.processor.LogUpdateProcessor.processAdd(LogUpdateProcessorFactory.java:100) at org.apache.solr.handler.loader.XMLLoader.processUpdate(XMLLoader.java:247) at org.apache.solr.handler.loader.XMLLoader.load(XMLLoader.java:174) at org.apache.solr.handler.UpdateRequestHandler$1.load(UpdateRequestHandler.java:99) at org.apache.solr.handler.ContentStreamHandlerBase.handleRequestBody(ContentStreamHandlerBase.java:74) at org.apache.solr.handler.RequestHandlerBase.handleRequest(RequestHandlerBase.java:135) at org.apache.solr.core.SolrCore.execute(SolrCore.java:1967) at org.apache.solr.servlet.SolrDispatchFilter.execute(SolrDispatchFilter.java:777) at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:418) at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:207) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1419) at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:455) at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:137) at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:557) at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:231) at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1075) at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:384) at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:193) at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1009) at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:135) at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:255) at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:154) at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:116) at org.eclipse.jetty.server.Server.handle(Server.java:368) at org.eclipse.jetty.server.AbstractHttpConnection.handleRequest(AbstractHttpConnection.java:489) at org.eclipse.jetty.server.BlockingHttpConnection.handleRequest(BlockingHttpConnection.java:53) at org.eclipse.jetty.server.AbstractHttpConnection.content(AbstractHttpConnection.java:953) at org.eclipse.jetty.server.AbstractHttpConnection$RequestHandler.content(AbstractHttpConnection.java:1014) at org.eclipse.jetty.http.HttpParser.parseNext(HttpParser.java:953) at org.eclipse.jetty.http.HttpParser.parseAvailable(HttpParser.java:240) at org.eclipse.jetty.server.BlockingHttpConnection.handle(BlockingHttpConnection.java:72) at org.eclipse.jetty.server.bio.SocketConnector$ConnectorEndPoint.run(SocketConnector.java:264) at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:608) at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:543) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.lucene.store.AlreadyClosedException: this IndexWriter is closed at org.apache.lucene.index.IndexWriter.ensureOpen(IndexWriter.java:698) at org.apache.lucene.index.IndexWriter.ensureOpen(IndexWriter.java:712) at org.apache.lucene.index.IndexWriter.updateDocument(IndexWriter.java:1507) at org.apache.solr.update.DirectUpdateHandler2.addDoc0(DirectUpdateHandler2.java:240) at org.apache.solr.update.DirectUpdateHandler2.addDoc(DirectUpdateHandler2.java:164) ... 40 more Caused by: java.lang.OutOfMemoryError: Java heap space at org.apache.lucene.index.FreqProxTermsWriterPerField$FreqProxPostingsArray.<init>(FreqProxTermsWriterPerField.java:210) at org.apache.lucene.index.FreqProxTermsWriterPerField$FreqProxPostingsArray.newInstance(FreqProxTermsWriterPerField.java:230) at org.apache.lucene.index.ParallelPostingsArray.grow(ParallelPostingsArray.java:48) at org.apache.lucene.index.TermsHashPerField$PostingsBytesStartArray.grow(TermsHashPerField.java:252) at org.apache.lucene.util.BytesRefHash.add(BytesRefHash.java:292) at org.apache.lucene.index.TermsHashPerField.add(TermsHashPerField.java:151) at org.apache.lucene.index.DefaultIndexingChain$PerField.invert(DefaultIndexingChain.java:659) at org.apache.lucene.index.DefaultIndexingChain.processField(DefaultIndexingChain.java:359) at org.apache.lucene.index.DefaultIndexingChain.processDocument(DefaultIndexingChain.java:318) at org.apache.lucene.index.DocumentsWriterPerThread.updateDocument(DocumentsWriterPerThread.java:239) at org.apache.lucene.index.DocumentsWriter.updateDocument(DocumentsWriter.java:454) at org.apache.lucene.index.IndexWriter.updateDocument(IndexWriter.java:1511) at org.apache.solr.update.DirectUpdateHandler2.addDoc0(DirectUpdateHandler2.java:240) at org.apache.solr.update.DirectUpdateHandler2.addDoc(DirectUpdateHandler2.java:164) at org.apache.solr.update.processor.RunUpdateProcessor.processAdd(RunUpdateProcessorFactory.java:69) at org.apache.solr.update.processor.UpdateRequestProcessor.processAdd(UpdateRequestProcessor.java:51) at org.apache.solr.update.processor.DistributedUpdateProcessor.doLocalAdd(DistributedUpdateProcessor.java:926) at org.apache.solr.update.processor.DistributedUpdateProcessor.versionAdd(DistributedUpdateProcessor.java:1080) at org.apache.solr.update.processor.DistributedUpdateProcessor.processAdd(DistributedUpdateProcessor.java:692) at org.apache.solr.update.processor.LogUpdateProcessor.processAdd(LogUpdateProcessorFactory.java:100) at org.apache.solr.handler.loader.XMLLoader.processUpdate(XMLLoader.java:247) at org.apache.solr.handler.loader.XMLLoader.load(XMLLoader.java:174) at org.apache.solr.handler.UpdateRequestHandler$1.load(UpdateRequestHandler.java:99) at org.apache.solr.handler.ContentStreamHandlerBase.handleRequestBody(ContentStreamHandlerBase.java:74) at org.apache.solr.handler.RequestHandlerBase.handleRequest(RequestHandlerBase.java:135) at org.apache.solr.core.SolrCore.execute(SolrCore.java:1967) at org.apache.solr.servlet.SolrDispatchFilter.execute(SolrDispatchFilter.java:777) at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:418) at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:207) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1419) at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:455) at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:137)

1 0

[SOLVED] Thunderbird client certification validation fails with same profile but changed IMAP server software (Re: It works for two SMTP servers and cyrus-imap, why not Dovecot?)
by Daniel Dickinson 13 Feb '15

13 Feb '15

In hopes that searching may turn up the solution for others: The reason client certificate validation was failing in Thunderbird when it had previously succeeded with other servers (both IMAP and SMTP) is precisely that: the client and profile where the same ones used to connect to the server who's hostname hadn't changed, and email addresses and usernames were the same, and Thunderbird can't handle that. Keeping your existing Thunderbird profile when switching the IMAP server software running on the hosting server doesn't work even if you change all the configs that should matter (rename old accounts out of the way, replace the server they are supposed to be contacting with blank, and so on) and create new accounts within the same profile. The workaround for this bug in Thunderbird is to move the old profile out of the way and start fresh. The apparent cause of failure (invalid cert messages and other messages that make it look like it's a configuration or certificate/CA file issue) actually has nothing to do with the actual issue and is a major red herring. Sorry for the noise, back to regular scheduled program... Regards, Daniel On 2015-02-12 6:29 AM, Daniel Curran-Dickinson wrote: > Ok, the patch doesn't actually fix the bug. It appeared to do so in > that after running the server with the patch applied client certificate > validation succeeded, however, it appears this bug is actually > intermittent as, even with the patched package, the server is now > complaining that the client has not provided a valid SSL certificate. > > This is definitely not true as the certificates, and in general > verification of the same client-side certificates work, even with the > same Thunderbird client, with postfix, exim, and cyrus-imapd. > > In short dovecot has some bug that causes verification of certificates > presented by the client to fail, however the bug is not easy to debug as > sometimes config changes work, but later, running the same config, > things fail again. > > There appears to be some sort of caching even across client and server > restarts that is coming into play and confusing the issue. > > Anyone know of SSL caching issues with Window 8.1, particular > Thunderbird on that platform? > > Also why is this bug only affecting dovecot? There is some strangeness > going on here, and, from web searching for the same issue, it appears > others have run into the same issue and had no success in resolving it, > despite also doing everything according to documentation. > > With dovecot 2.2.9 from Ubuntu (i.e. not patched version): > The relevant config bits from dovecot -n are: > > auth_mechanisms = login plain digest-md5 cram-md5 > auth_ssl_require_client_cert = yes > ssl = required > ssl_ca = </path/to/ca.pem > ssl_cert = </path/to/cert.pem > ssl_key = </path/to/key.pem > ssl_protocols = !SSLv2 !SSLv3 > ssl_require_crl = no (yes or no makes no difference) > ssl_verify_client_cert = yes > > Oddly this doesn't appear in dovecot -n, though set > > disable_plaintext_auth = yes > > Client fails whether configured for encrypted passwords or not > Client fails whether using ssl = yes (imaps) on 993 or STARTTLS on 143 > > And yes I have followed the correct ordering of the CA followed by CRL > (and tried without CRL as well). > > In addition I have tried CA + intermediate and CA + crl + intermediate + > crl for startssl.com certificates as well as the above test with > self-signed CA (root CA + crl or just root CA). > > I have also just confirmed (by connecting and sending mail on port 587 > with STARTTLS and SSL required, with client certificate validation > required by postfix) that using the same certificate, same client, same > mail server, that SMTP AUTH + verification of client certificates succeeds. > > Since I've had the same client using the same certificates work with all > three of postfix (SMTP), exim (SMTP), and cyrus-imapd (IMAP), there is > not doubt that there is an issue with dovecot's handling of this scenario. > > I know I'm harping on this 'it works elsewhere' theme, but this bug has > been ignored for ages because of the assumption that user is doing > something wrong, and that is simply not the case, or if it is, dovecot > is very, very bad at indicating what the actual problem is. > > Line-ending are *nix line endings. > > Anything else that you want to suggest along with how to make dovecot > report what the actual problem is if there is some other magic formulae > to invoke? > > If I've missed something it's by no means obvious or explained clearly > anywhere. > > Regards, > > Daniel > > On 2015-02-11 2:33 AM, Daniel Dickinson wrote: >> Hi all, >> >> As I reported earlier (with a typo in the work [BUG]) client >> certification validation *does not* work even if you do everything >> exactly according to all documentation and attempts at helpful advice. >> >> I have seen this issue with both startssl.com and self-signed >> certificates, and based on what I've seen from searching the web, this >> is a problem that has gotten little attention because most people don't >> bother, but are more than willing to give out useless advice on how to >> make it work. >> >> Furthermore the issue does NOT occur with the cyrus-imap mail server, so >> it is definitely a server-side issue. >> >> The actual issue is that the code for calling OpenSSL that constructs >> the client certificate validation is in fact WRONG. >> >> I don't have a perfect patch as I was mostly interested in getting it >> working for my needs and didn't bother with constructing the list of CA >> names to send to the client, preferring to let OpenSSL handle all that >> sort of thing. >> >> What it comes down to is that the code, which probably worked at one >> point, was not correctly updated at some point and since then client >> side certificate validation has been BROKEN. >> >> I have patched against 2.2.9, however I have seen this problem in the >> versions in both Debian Wheezy and Debian Jessie as well. >> >> As you will see from the patch (which is an attachment as people tend to >> complain that patches get mangled when you inline them, and even if I >> have a good client I've gotten heck because the receiver didn't. >> >> Regards, >> >> Daniel >> >

1 0