April 2016 - dovecot - dovecot.org

v2.2.23 released
by Timo Sirainen 13 Apr '16

13 Apr '16

http://dovecot.org/releases/2.2/dovecot-2.2.23.tar.gz http://dovecot.org/releases/2.2/dovecot-2.2.23.tar.gz.sig This is a bugfix-only release with various important fixes on top of v2.2.22. - Various fixes to doveadm. Especially running commands via doveadm-server was broken. - director: Fixed user weakness getting stuck in some situations - director: Fixed a situation where directors keep re-sending different states to each others and never becoming synced. - director: Fixed assert-crash related to a slow "user killed" reply - Fixed assert-crash related to istream-concat, which could have been triggered at least by a Sieve script.

6 6

speedup doveadm
by Chris 13 Apr '16

13 Apr '16

All, I've to set ACLs in public namespace for more than 5000 folders. That takes some hours. I'm calling doveadm by a perl script. Is there any way to speedup doveadm? Is it possible to set ACLs for multiple folders or users in a single call? - Chris

1 0

Problem setting owner
by Luca Bertoncello 13 Apr '16

13 Apr '16

Hi list! I have a Dovecot 2.2.9 installed from Ubuntu-Repository. It uses LDAP to authenticate against an Active Directory controller. The authentication works, but it tries always to use the UID of the user for the mailbox... I already added: mail_uid = 1005 mail_gid = 8 in 10-mail.conf and: user_attrs = \ =user=exim, \ =uid=1005, \ =gid=8, \ =quota_rule=*:bytes=%{ldap:quotaBytes}, \ =home=/home/mailboxes/%{ldap:sAMAccountName}/Maildir, \ =mail=maildir:/home/mailboxes/%{ldap:sAMAccountName}/Maildir in the dovecot-ldap.conf.ext, but it seems to ignore them... Could someone help me? Thanks Luca Bertoncello (lucabert(a)lucabert.de)

2 1

fts-lucene with virtual folders
by Dmitry Nezhevenko 13 Apr '16

13 Apr '16

Hi, It looks like I've found something strange. It looks like dovecot updates fts-lucene index every time I'm opening virtual folder that contains FTS query: indexer-worker(dion): Warning: fts-lucene: Settings have changed, rebuilding index for mailbox dovecot-virtual is pretty simple: archive/INBOX BODY "test" first of all, I'm trying to perform FTS in archive/INBOX itself, then I'm trying to open virtual folder. both default namespace and 'archive' are private namespaces with mdbox storage. plugin { fts = lucene fts_lucene = whitespace_chars=@. fts_autoindex = no } Any suggestions? -- WBR, Dmitry

1 3

dlopen() failed: /usr/lib/dovecot/modules/dict/libdict_ldap.so: undefined symbol: ldap_search_star
by M. Koehler 13 Apr '16

13 Apr '16

Hi, I´m using dovecot on debian jessie from the xi-rename-it repo (deb http://xi.rename-it.nl/debian/ stable-auto/dovecot-2.2 main). After upgrading to 2.2.23 I´ve got the following error for example if I delete a message: *Apr 13 15:14:10 mail dovecot: dict(18884): Error: Couldn't load plugin /usr/lib/dovecot/modules/dict/libdict_ldap.so: dlopen() failed: /usr/lib/dovecot/modules/dict/libdict_ldap.so: undefined symbol: ldap_search_start * But I can´t find any ldap settings in my config (doveconf -a). Are any changes that I overlook? Thanks, Michael

2 1

v2.3 development tree forked in git
by Timo Sirainen 13 Apr '16

13 Apr '16

The git master branch starts tracking Dovecot v2.3 development from now on. There are soon going to be several API changes there that might break plugins. If you wish to keep tracking latest v2.2.x development instead, switch to master-2.2 branch. The nightly releases at http://dovecot.org/nightly/ will also track v2.3 tree.

2 1

Warning: Global setting won't change the setting inside an earlier filter
by Oliver Riesen-Mallmann 13 Apr '16

13 Apr '16

Hi, I'm using the Dovecot Prebuilt Binary: deb http://xi.rename-it.nl/debian/ stable-auto/dovecot-2.2 main I configured multiple SSL certificates with client TLS SNI (see http://wiki2.dovecot.org/SSL/DovecotConfiguration) Since my last update I get some warnings: doveconf: Warning: /etc/dovecot/conf.d/10-ssl.conf line 12: Global setting ssl_cert won't change the setting inside an earlier filter at /etc/dovecot/conf.d/10-ssl-langzeittest.de.conf line 4 doveconf: Warning: /etc/dovecot/conf.d/10-ssl.conf line 13: Global setting ssl_key won't change the setting inside an earlier filter at /etc/dovecot/conf.d/10-ssl-langzeittest.de.conf line 5 doveconf: Warning: /etc/dovecot/conf.d/10-ssl.conf line 12: Global setting ssl_cert won't change the setting inside an earlier filter at /etc/dovecot/conf.d/10-ssl-langzeittest.de.conf line 4 doveconf: Warning: /etc/dovecot/conf.d/10-ssl.conf line 13: Global setting ssl_key won't change the setting inside an earlier filter at /etc/dovecot/conf.d/10-ssl-langzeittest.de.conf line 5 The reason is this commit: doveconf: Log a warning if a global setting is updated after it was a… …lready set inside a filter https://github.com/dovecot/core/commit/87404eae4581d7ef834f490507503e59a500… My configuration is (shorted): # dovecot -n # 2.2.devel (87404ea): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.devel (215349a) # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.10 [...] ssl_cert = </etc/letsencrypt/live/v083.violet.fastwebserver.de/fullchain.pem [...] ssl_key = </etc/letsencrypt/live/v083.violet.fastwebserver.de/privkey.pem [...] local_name imap.langzeittest.de { ssl_cert = </etc/letsencrypt/live/fahrerlager.langzeittest.de/fullchain.pem ssl_key = </etc/letsencrypt/live/fahrerlager.langzeittest.de/privkey.pem } local_name mail.langzeittest.de { ssl_cert = </etc/letsencrypt/live/fahrerlager.langzeittest.de/fullchain.pem ssl_key = </etc/letsencrypt/live/fahrerlager.langzeittest.de/privkey.pem } I understand, that the warning is correct. I configured ssl_cert and ssl_key both, globally (like a default) and in some local_name filters. I tried already to move the global configuration of ssl_cert and ssl_key in an own local_name filter. It didn't work. No login possible: dovecot: master: Dovecot v2.2.devel (87404ea) starting up for imap (core dumps disabled) dovecot: imap-login: Error: SSL: Stacked error: error:0906D06C:PEM routines:PEM_read_bio:no start line: Expecting: ANY PRIVATE KEY dovecot: imap-login: Fatal: Couldn't parse private ssl_key: Address family not supported by protocol How is the correct configuration in this scenario? Regards Oliver

2 2

Different usernames for different login method
by Luca Bertoncello 13 Apr '16

13 Apr '16

Hi again! With Dovecot 2.2.9 authenticating against the Active Directory I have following problem: - if I login using LOGIN, PLAIN or CRAM, the username is REALM\login (in my case: CCH\lucabert) - if I login using GSSAPI, the username is just login (in my case: lucabert) this makes the access to the mailbox very difficult, since I don't what can I write in mail_location... If I login with LOGIN, I can write: maildir:/home/mailboxes/%4.u/Maildir but of course it does not work if I login using GSSAPI... The mailboxes have just the login (in my case: lucabert). Can someone explain me why %u is different and how can I solve my problem? Thanks a lot Luca Bertoncello (lucabert(a)lucabert.de)

2 2

Slow reading of large dovecot-uidlist files
by Bostjan Skufca 13 Apr '16

13 Apr '16

Hi there, (context: I was optimizing Roundcube mailbox list server response, and in that 300-400ms response time, around 170ms is spent on single fgets() call which is waiting IMAP repsonse to "SELECT MyMailbox" command) I straced dovecot and of the whole request/response process, around 30ms is spent for everything else, and overwhelming majority of time (150-170ms) is spent for reading dovecot-uidlist file for given mailbox. I skimmed over src/lib-storage/index/maildir/maildir-uidlist.c and src/src/lib/istream.c, but I am out of ideas on how to optimize mentioned file reading elegantly to make it faster. Is there any way to cache parsed content of uidlist file(s) or some other obvious quicktrick I am missing to speed this process up? Does anyone have any other ideas, how to speed this up? b.

5 9

Dsync Header Hashing
by Richard Laager 13 Apr '16

13 Apr '16

Is there any way to disable the header hashing in dsync? I'm doing a one-time migration to Dovecot using imapc. The FETCHes for Date & Message-ID take a non-trivial amount of time and it's not clear to me if they have a function for a one-time migration. -- Richard

2 5