February 2016 - dovecot

Disable Client Certificate Authentication for Unencrypted Connections?
by Haravikk 02 Feb '16

02 Feb '16

I’m using dovecot to provide encrypted IMAP e-mail support for remote clients and it’s working great. However, I also need to set up a webmail front-end (Roundcube), which I’m hoping to have use unencrypted IMAP on port 143 (as only port 993 is available externally). The problem I’m running into is that I want to require client certificate authentication on port 993, but dovecot is apparently requiring a certificate on all connections, which is preventing Roundcube from connecting. Since dovecot is also providing authentication to postfix I’ve already created an exemption from the client certificate requirement for SMTP connections by doing the following: protocol !smtp { ssl_ca = </path/to/ca.pem ssl_verify_client_cert = yes auth_ssl_require_client_cert = yes } However, I’m not sure how to do the same thing for unencrypted IMAP connections. Is there a way that I can enable client certificate support for only IMAP port 993, leaving port 143 to handle regular unencrypted IMAP with a username and password? I’ve already added the local network to the trusted networks list, so that Roundcube can use plaintext authentication, can I limit client certificate support in a similar way? Thanks, Haravikk

3 7

Autosubscribe but not autocreate?
by azurit＠pobox.sk 02 Feb '16

02 Feb '16

Hi, is it possible to set a mailbox to autosubscribe IF it exists but NOT autocreate if it doesn't exists? We are having problems with users and Spam folders which are not subscribed so users doesn't see e-mails which are saved there. On the other hand, we don't want to recreate Spam folders which were deleted by users (some of them don't want to filter spam so they deleted Spam folder and spam is saved into INBOX). Or is it somehow possible to subscribe to a folder while creating e-mail account (i'm trying to save its name to 'subscriptions' file but it doesn't work)? Thnak you. azur

1 0

Mail User Agent?
by absolutely_free＠libero.it 02 Feb '16

02 Feb '16

Hi,is there a way to log which MUA is being used from an user? # dovecot --version2.0.9 Thank you

4 4

Re: Mail User Agent?
by Joseph Tam 02 Feb '16

02 Feb '16

Axel Luttgens writes: >> Le 1 f?vr. 2016 ? 17:50, absolutely_free(a)libero.it a ?crit : >> >> Hi,is there a way to log which MUA is being used from an user? >> # dovecot --version2.0.9 >> Thank you > > Unless I missed some recent changes, neither POP nor IMAP protocols > make provisions for having the client to send such info. > > As a result, dovecot does not have that info. I regularly get such info in my logs e.g. Feb 1 14:10:45 server dovecot: imap(user): ID sent: name=iPhone Mail, version=12F70, os=iOS, os-version=8.3 (12F70) Only for IMAP (ID extension?). Joseph Tam <jtam.home(a)gmail.com>

2 1

Can you "doveadm search" with mailbox location instead of a user (-u option)?
by Christian Rohmann 02 Feb '16

02 Feb '16

Hey dovecot-users! doveadm import offers to use i.e. a maildir as source and then import into a users mailbox referenced via "-u" option. If one wants to import only certain emails from the source a search-query can be given as well. I was wondering if doveadm search also does offer to search a mailbox referenced by filesystem path i.e. doveadm search maildir:/srv/mailboxes/example.com/mailbox123 NEW Maybe a fixed mailbox location via "-o mailbox_location=maildir:/srv/mailboxes/example.com/mailbox123" does work, but then it's rather a side effect as one needs to define a user via "-u" parameter anyways. Regards Christian

2 2

ACL and LDAP
by Chris 01 Feb '16

01 Feb '16

Dear All, is it possible to store ACLs in LDAP? Does anyone happen to have a script that syncs ACLs read from LDAP with Dovecot? - Chris

2 2

fts_autoindex - index-worker problem
by Masaki Nemoto 01 Feb '16

01 Feb '16

dovecot-2.2.21 問い合わせ fts_autoindex - index-worker problem Hello List, I installed dovecot-2.2.21 on CentOS 6.7. I use ldap for userdb to separate an e-mail address and the user. Index to apache solr failed in fts_authindex when I received an email after setting. The error message is "indexer-worker: Error: User 0029(a)09.jp lookup failed: Unknown user" Is there any solution? This is current conf -------------------------------------------- # cat /etc/dovecot/conf.d/auth-ldap.conf.ext userdb { driver = ldap default_fields = uid=dovecot gid=dovecot home=/var/dovecot/%Ld/%Ln args = /etc/dovecot/dovecot-ldap.conf.ext } -------------------------------------------- # cat /etc/dovecot/dovecot-ldap.conf.ext hosts = ldap01 auth_bind = no ldap_version = 3 base = "" user_attrs = mailRoutingAddress=user, storeQuotaBytes=quota_rule=*:bytes=%$ user_filter = (&(objectClass=inetLocalMailRecipient)(mailLocalAddress=%u)) -------------------------------------------- # cat /etc/dovecot/conf.d/90-plugin.conf plugin { fts = solr fts_solr = url=http://10.129.78.21:8983/solr/%Ld/ fts_autoindex = yes } -------------------------------------------- This is test user infomation -------------------------------------------- # ldapsearch -h ldap01 -x -b "" mailLocalAddress=gk12k_0029(a)08wt09.jp mailRoutingAddress mailLocalAddress -LLL dn: uid=gk12k_0029,dc=08wt09,dc=jp mailRoutingAddress: 0029(a)09.jp mailLocalAddress: gk12k_0029(a)08wt09.jp -------------------------------------------- dovecot log of the problem ------------------ Jan 31 01:19:51 store01 dovecot: lmtp(24252): Connect from 10.129.75.77 Jan 31 01:19:51 store01 dovecot: lmtp(0029(a)09.jp): copy from <lmtp DATA>: box=INBOX, uid=40, msgid=<foobar>, size=377 Jan 31 01:19:51 store01 dovecot: lmtp(0029(a)09.jp): pdn7JafirFa8XgAAbv3f4A: from=hogehoge(a)example.jp, to=gk12k_0029(a)08wt09.jp, vsize=388, msgid=<foobar>, saved mail to INBOX Jan 31 01:19:51 store01 dovecot: lmtp(24252): Disconnect from 10.129.75.77: Successful quit Jan 31 01:19:51 store01 dovecot: indexer-worker: Error: User 0029(a)09.jp lookup failed: Unknown user openldap log ------------------ Jan 31 01:19:51 ldap01 slapd[21617]: conn=1291 op=1 SRCH base="" scope=2 deref=0 filter="(&(objectClass=inetLocalMailRecipient)(mailLocalAddress=gk12k_0029(a)08wt09.jp))" Jan 31 01:19:51 ldap01 slapd[21617]: conn=1291 op=1 SRCH attr=mailRoutingAddress storeQuotaBytes Jan 31 01:19:51 ldap01 slapd[21617]: conn=1291 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Jan 31 01:19:51 ldap01 slapd[21617]: conn=1292 fd=19 ACCEPT from IP=10.129.78.22:58335 (IP=0.0.0.0:389) Jan 31 01:19:51 ldap01 slapd[21617]: conn=1292 op=0 BIND dn="" method=128 Jan 31 01:19:51 ldap01 slapd[21617]: conn=1292 op=0 RESULT tag=97 err=0 text= Jan 31 01:19:51 ldap01 slapd[21617]: conn=1292 op=1 SRCH base="" scope=2 deref=0 filter="(mailRoutingAddress=0029(a)09.jp)" Jan 31 01:19:51 ldap01 slapd[21617]: conn=1292 op=1 SRCH attr=modifyTimestamp Jan 31 01:19:51 ldap01 slapd[21617]: conn=1292 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Jan 31 01:19:51 ldap01 slapd[21617]: conn=1292 op=2 SRCH base="uid=gk12k_0029,dc=08wt09,dc=jp" scope=0 deref=0 filter="(objectClass=*)" Jan 31 01:19:51 ldap01 slapd[21617]: conn=1292 op=2 SRCH attr=storeSieveScript Jan 31 01:19:51 ldap01 slapd[21617]: conn=1292 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text= Jan 31 01:19:51 ldap01 slapd[21617]: conn=1292 op=3 UNBIND Jan 31 01:19:51 ldap01 slapd[21617]: conn=1292 fd=19 closed Jan 31 01:19:51 ldap01 slapd[21617]: conn=1291 op=2 SRCH base="" scope=2 deref=0 filter="(&(objectClass=inetLocalMailRecipient)(mailLocalAddress=0029(a)09.jp))" Jan 31 01:19:51 ldap01 slapd[21617]: conn=1291 op=2 SRCH attr=mailRoutingAddress storeQuotaBytes Jan 31 01:19:51 ldap01 slapd[21617]: conn=1291 op=2 SEARCH RESULT tag=101 err=0 nentries=0 text= ------------------------------------------- Log when I deleted "fts_autoindex = yes" ------------------------------------------- Jan 31 01:18:12 store01 dovecot: lmtp(24232): Connect from 10.129.75.77 Jan 31 01:18:13 store01 dovecot: lmtp(0029(a)09.jp): copy from <lmtp DATA>: box=INBOX, uid=39, msgid=<foobar>, size=377 Jan 31 01:18:13 store01 dovecot: lmtp(0029(a)09.jp): 10FxNETirFaoXgAAbv3f4A: from=hogehoge(a)example.jp, to=gk12k_0029(a)08wt09.jp, vsize=388, msgid=<foobar>, saved mail to INBOX Jan 31 01:18:13 store01 dovecot: lmtp(24232): Disconnect from 10.129.75.77: Successful quit ------------------------------------------- Jan 31 01:18:12 ldap01 slapd[21617]: conn=1289 op=1 SRCH base="" scope=2 deref=0 filter="(&(objectClass=inetLocalMailRecipient)(mailLocalAddress=gk12k_0029(a)08wt09.jp))" Jan 31 01:18:12 ldap01 slapd[21617]: conn=1289 op=1 SRCH attr=mailRoutingAddress storeQuotaBytes Jan 31 01:18:12 ldap01 slapd[21617]: conn=1289 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Jan 31 01:18:12 ldap01 slapd[21617]: conn=1290 fd=19 ACCEPT from IP=10.129.78.22:58332 (IP=0.0.0.0:389) Jan 31 01:18:12 ldap01 slapd[21617]: conn=1290 op=0 BIND dn="" method=128 Jan 31 01:18:12 ldap01 slapd[21617]: conn=1290 op=0 RESULT tag=97 err=0 text= Jan 31 01:18:12 ldap01 slapd[21617]: conn=1290 op=1 SRCH base="" scope=2 deref=0 filter="(mailRoutingAddress=0029(a)09.jp)" Jan 31 01:18:12 ldap01 slapd[21617]: conn=1290 op=1 SRCH attr=modifyTimestamp Jan 31 01:18:12 ldap01 slapd[21617]: conn=1290 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Jan 31 01:18:12 ldap01 slapd[21617]: conn=1290 op=2 SRCH base="uid=gk12k_0029,dc=08wt09,dc=jp" scope=0 deref=0 filter="(objectClass=*)" Jan 31 01:18:12 ldap01 slapd[21617]: conn=1290 op=2 SRCH attr=storeSieveScript Jan 31 01:18:12 ldap01 slapd[21617]: conn=1290 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text= Jan 31 01:18:12 ldap01 slapd[21617]: conn=1290 op=3 UNBIND Jan 31 01:18:12 ldap01 slapd[21617]: conn=1290 fd=19 closed ------------------------------------------- -- Masaki

2 2

basic configuratio error
by soko.tica 01 Feb '16

01 Feb '16

Hello list, After many hours I still fail to configure properly dovecot as the LDA with opensmtpd, for system users only. I don't want pop at all, jus lmtp and imap, but still haven't stripped it. Here is the info, thanks in advance for your response: ===== # doveconf -n # 2.2.14: /etc/dovecot/dovecot.conf # OS: OpenBSD 5.6 i386 auth_verbose = yes auth_verbose_passwords = yes disable_plaintext_auth = no first_valid_uid = 1000 hostname = imap.home.lan imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lda_original_recipient_header = X-Original-To mail_debug = yes mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate mbox_write_locks = fcntl mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = bsdauth } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh postmaster_address = postmaster(a)mileva.home.lan protocols = imap pop3 lmtp sieve service auth-worker { user = root } service auth { unix_listener auth-userdb { group = _dovenull mode = 0666 user = _dovenull } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 0 service_count = 1 } service imap { process_limit = 1024 } service lmtp { unix_listener lmtp { mode = 0666 } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl_cert = </etc/ssl/dovecotcert.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } verbose_ssl = yes protocol lmtp { mail_plugins = } protocol lda { mail_plugins = } # /usr/local/sbin/dovecot -F Oct 28 13:00:01 mileva newsyslog[1110]: logfile turned over Oct 28 14:30:46 mileva dovecot: master: Dovecot v2.2.14 starting up for imap, pop3, lmtp, sieve Oct 28 14:30:46 mileva dovecot: master: Error: service(aggregator): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(pop3): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: open(/var/dovecot/login-master-notifya57a2b8821460734) failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(pop3-login): safe_mkstemp(/var/dovecot/login-master-notify) failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(log): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(lmtp): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(ipc): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(indexer-worker): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(indexer): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(imap): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(imap-urlauth-worker): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(imap-urlauth): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: open(/var/dovecot/login-master-notify5dd2a3a0591effcc) failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(imap-urlauth-login): safe_mkstemp(/var/dovecot/login-master-notify) failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: open(/var/dovecot/login-master-notify152a1bb891f6f764) failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(imap-login): safe_mkstemp(/var/dovecot/login-master-notify) failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(doveadm): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(dns_client): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(director): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(dict): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(config): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(auth): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(auth-worker): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(anvil): command startup failed, throttling for 2 secs Oct 28 14:30:56 mileva dovecot: master: Error: service(ssl-params): command startup failed, throttling for 2 secs [snipped 18 pages of /var/log/maillog] Oct 28 20:47:44 mileva dovecot: master: Dovecot v2.2.14 starting up for imap, pop3, lmtp, sieve Oct 28 20:47:44 mileva dovecot: master: Error: service(aggregator): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(pop3): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: open(/var/dovecot/login-master-notifydd522320d99e7f4c) failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(pop3-login): safe_mkstemp(/var/dovecot/login-master-notify) failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(log): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(lmtp): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(ipc): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(indexer-worker): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(indexer): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(imap): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(imap-urlauth-worker): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(imap-urlauth): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: open(/var/dovecot/login-master-notify95aa9b38117677e4) failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(imap-urlauth-login): safe_mkstemp(/var/dovecot/login-master-notify) failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: open(/var/dovecot/login-master-notify4d021350494e6f7c) failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(imap-login): safe_mkstemp(/var/dovecot/login-master-notify) failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(doveadm): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(dns_client): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(director): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(dict): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(config): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(auth): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(auth-worker): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(anvil): command startup failed, throttling for 2 secs Oct 28 20:47:46 mileva dovecot: master: Warning: Killed with signal 2 (by pid=0 uid=0 code=kill) Oct 28 20:47:46 mileva dovecot: master: Error: open(/var/dovecot/.temp.mileva.home.lan.17422.055a8b6881266714) failed: Too many open files Oct 28 20:47:46 mileva dovecot: master: Error: file_dotlock_open(/var/dovecot/instances) failed: Too many open files Oct 28 20:47:46 mileva dovecot: master: Error: service(ssl-params): command startup failed, throttling for 2 secs # /usr/sbin/smtpd -n configuration OK

2 3