January 2017 - dovecot

tlsv1 alert unknown ca: SSL alert number 48
by Maurizio Caloro 30 Jan '17

30 Jan '17

Hello together Please i'am new to this list, i have already installed Postfix and Dovecot last version from Internet but i have the porblem that the mail do not arive, and with me Cert, i have read on the Dovecot site, but i don't have me found me solutions to fix this. "tlsv1 alert unknown ca: SSL alert number 48" Jan 28 22:42:44 dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=192.168.1.16, lip=192.168.1.3, TLS: SSL_read() failed: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca: SSL alert number 48, session= # dovecot --version 2.2.27 (c0f36b0) i think that the settings about Cert are done, but if connecting with Thunderbird i will become this error "tlsv1 alert unknown ca: SSL alert number 48" Please you can point me to the right direction, so i can run this Mailserver on me RaspverryPi. Regards Mauri -- "10-ssl.conf" i have editing and Dovecot and Postfix reloaded without problems. # SSL/TLS support: yes, no, required. <doc/wiki/SSL.txt> ssl = yes ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem ssl_ca = </etc/ssl/private/cert.pem root@raspberrypi: # cat /var/log/mail.log Jan 28 22:50:08 raspberrypi postfix/smtp[1889]: 9CF1E63F53: to=<mauric(a)gmx.ch>, relay=mx01.emig.gmx.net[212.227.17.5]:25, delay=193476, delays=193476/0.03/0.17/0, dsn=4.0.0, status=deferred (host mx01.emig.gmx.net[212.227.17.5] refused to talk to me: 554-gmx.net (mxgmx109) Nemesis ESMTP Service not available 554-No SMTP service 554-IP address is black listed. 554 For explanation visit http://postmaster.gmx.com/en/error-messages?ip=151.248.162.33&c=bl) Jan 28 22:55:08 raspberrypi postfix/qmgr[940]: 7740F63E0F: from=<joe(a)caloro.ch>, size=575, nrcpt=1 (queue active) Jan 28 22:55:08 raspberrypi postfix/qmgr[940]: 98D5D63E0E: from=<joe(a)caloro.ch>, size=578, nrcpt=1 (queue active) Jan 28 22:55:08 raspberrypi postfix/qmgr[940]: 9946863E0D: from=<joe(a)caloro.ch>, size=550, nrcpt=1 (queue active) Jan 28 22:55:08 raspberrypi postfix/smtp[1926]: 7740F63E0F: host mx01.emig.gmx.net[212.227.17.5] refused to talk to me: 554-gmx.net (mxgmx113) Nemesis ESMTP Service not available 554-No SMTP service 554-IP address is black listed. 554 For explanation visit http://postmaster.gmx.com/en/error-messages?ip=151.248.162.33&c=bl Jan 28 22:55:08 raspberrypi postfix/smtp[1926]: 7740F63E0F: to=<mauric(a)gmx.ch>, relay=mx00.emig.gmx.net[212.227.15.9]:25, delay=298205, delays=298205/0.03/0.18/0, dsn=4.0.0, status=deferred (host mx00.emig.gmx.net[212.227.15.9] refused to talk to me: 554-gmx.net (mxgmx006) Nemesis ESMTP Service not available 554-No SMTP service 554-IP address is black listed. 554 For explanation visit http://postmaster.gmx.com/en/error-messages?ip=151.248.162.33&c=bl) Jan 28 22:55:38 raspberrypi postfix/smtp[1927]: connect to caloro.ch[158.181.112.49]:25: Connection timed out Jan 28 22:55:38 raspberrypi postfix/smtp[1927]: 98D5D63E0E: to=<joe(a)caloro.ch>, relay=none, delay=298271, delays=298241/0.03/30/0, dsn=4.4.1, status=deferred (connect to caloro.ch[158.181.112.49]:25: Connection timed out) Jan 28 22:55:38 raspberrypi postfix/smtp[1928]: connect to caloro.ch[158.181.112.49]:25: Connection timed out Jan 28 22:55:38 raspberrypi postfix/smtp[1928]: 9946863E0D: to=<joe(a)caloro.ch>, relay=none, delay=298375, delays=298345/0.04/30/0, dsn=4.4.1, status=deferred (connect to caloro.ch[158.181.112.49]:25: Connection timed out) Jan 28 23:00:08 raspberrypi postfix/qmgr[940]: 54EA064AF4: from=<>, size=2460, nrcpt=1 (queue active) Jan 28 23:00:08 raspberrypi postfix/qmgr[940]: 1D29F5F03D: from=<>, size=2471, nrcpt=1 (queue active) Jan 28 23:00:08 raspberrypi postfix/qmgr[940]: 86D2B63F5A: from=<joe(a)caloro.ch>, size=581, nrcpt=1 (queue active) Jan 28 23:00:38 raspberrypi postfix/smtp[2011]: connect to caloro.ch[158.181.112.49]:25: Connection timed out Jan 28 23:00:38 raspberrypi postfix/smtp[2013]: connect to caloro.ch[158.181.112.49]:25: Connection timed out Jan 28 23:00:38 raspberrypi postfix/smtp[2012]: connect to caloro.ch[158.181.112.49]:25: Connection timed out Jan 28 23:00:38 raspberrypi postfix/smtp[2011]: 54EA064AF4: to=<joe(a)caloro.ch>, relay=none, delay=4596, delays=4566/0.03/30/0, dsn=4.4.1, status=deferred (connect to caloro.ch[158.181.112.49]:25: Connection timed out) Jan 28 23:00:38 raspberrypi postfix/smtp[2013]: 86D2B63F5A: to=<joe(a)caloro.ch>, relay=none, delay=4586, delays=4556/0.04/30/0, dsn=4.4.1, status=deferred (connect to caloro.ch[158.181.112.49]:25: Connection timed out) Jan 28 23:00:38 raspberrypi postfix/smtp[2012]: 1D29F5F03D: to=<joe(a)caloro.ch>, relay=none, delay=350945, delays=350915/0.03/30/0, dsn=4.4.1, status=deferred (connect to caloro.ch[158.181.112.49]:25: Connection timed out) Jan 28 23:05:08 raspberrypi postfix/qmgr[940]: E3C3C5DA02: from=<joe(a)caloro.ch>, size=576, nrcpt=1 (queue active) Jan 28 23:05:08 raspberrypi postfix/error[2058]: E3C3C5DA02: to=<joe(a)caloro.ch>, relay=none, delay=21492, delays=21492/0.03/0/0.02, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to caloro.ch[158.181.112.49]:25: Connection timed out) Jan 28 23:10:08 raspberrypi postfix/qmgr[940]: BEB535F03F: from=<>, size=2870, nrcpt=1 (queue active) root@raspberrypi: # doveconf -N # 2.2.27 (c0f36b0): /usr/local/etc/dovecot/dovecot.conf # OS: Linux 4.4.41-v7+ armv7l Debian 8.0 auth_mechanisms = plain disable_plaintext_auth = yes listen = *, :: mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_privileged_group = mail namespace { inbox = yes location = mailbox { special_use = \Drafts name = Drafts } mailbox { special_use = \Junk name = Junk } mailbox { special_use = \Sent name = Sent } mailbox { special_use = \Sent name = Sent Messages } mailbox { special_use = \Trash name = Trash } prefix = name = inbox } passdb { driver = pam name = } passdb { args = scheme=CRYPT username_format=%u /usr/local/etc/dovecot/users driver = passwd-file name = } protocols = imap pop3 service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service { unix_listener { mode = 0666 path = /var/spool/postfix/private/auth } unix_listener { group = postfix mode = 0666 user = postfix path = auth-userdb } name = auth } service config { name = config } service dict-async { name = dict-async } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap-hibernate { name = imap-hibernate } service imap { name = imap-login } service imap-urlauth { name = imap-urlauth-login } service imap-urlauth-worker { name = imap-urlauth-worker } service token-login/imap-urlauth { name = imap-urlauth } service imap-master { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator-doveadm { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } ssl = yes ssl_ca = </etc/ssl/private/cert.pem ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = # hidden, use -P to show it userdb { driver = passwd name = } userdb { args = username_format=%u /usr/local/etc/dovecot/users driver = passwd-file name = } protocol lmtp { service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict-async { name = dict-async } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap-hibernate { name = imap-hibernate } service imap { name = imap-login } service imap-urlauth { name = imap-urlauth-login } service imap-urlauth-worker { name = imap-urlauth-worker } service token-login/imap-urlauth { name = imap-urlauth } service imap-master { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator-doveadm { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } } protocol lda { service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict-async { name = dict-async } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap-hibernate { name = imap-hibernate } service imap { name = imap-login } service imap-urlauth { name = imap-urlauth-login } service imap-urlauth-worker { name = imap-urlauth-worker } service token-login/imap-urlauth { name = imap-urlauth } service imap-master { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator-doveadm { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } } protocol imap { service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict-async { name = dict-async } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap-hibernate { name = imap-hibernate } service imap { name = imap-login } service imap-urlauth { name = imap-urlauth-login } service imap-urlauth-worker { name = imap-urlauth-worker } service token-login/imap-urlauth { name = imap-urlauth } service imap-master { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator-doveadm { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } } protocol pop3 { service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict-async { name = dict-async } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap-hibernate { name = imap-hibernate } service imap { name = imap-login } service imap-urlauth { name = imap-urlauth-login } service imap-urlauth-worker { name = imap-urlauth-worker } service token-login/imap-urlauth { name = imap-urlauth } service imap-master { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator-doveadm { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } }

3 2

FTS: how to remove from Solr index deleted mailbox?
by Alessio Cecchi 30 Jan '17

30 Jan '17

Hi, I'm running Dovecot with FTS and Apache Solr as backend. What is the command or the query to remove from Solr a deleted user/mailbox? Thanks -- Alessio Cecchi Postmaster AT http://www.qboxmail.it http://www.linkedin.com/in/alessice

2 1

Sharing between domains?
by dovecot＠avv.solutions 30 Jan '17

30 Jan '17

Hello Community, I am facing the following question: how is it possible to share malboxes between domains? Example: - 2 domains present on the same dovecot: domA and domB - userA@domA - userB@domB userA@domA wants to share his mailbox to userB@domB (again same server)? Thank you for your help. Greetz

2 2

Crash in 2.2.27 while moving a mail
by Sven Strickroth 29 Jan '17

29 Jan '17

Hi, I just noticed a crash in Dovecot (2.2.27) on Debian with the Debian version 1:2.2.27-2~bpo8+1: Jan 28 07:50:42 srv1 dovecot: imap(yyy(a)xxx.de): Panic: file mail-storage.c: line 2170 (mailbox_save_context_reset): assertion failed: (ctx->copying_via_save) Jan 28 07:50:42 srv1 dovecot: imap(yyy(a)xxx.de): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x97d8e) [0x7f3e7fab8d8e] -> /usr/lib/dovecot/libdovecot.so.0(+0x97e7c) [0x7f3e7fab8e7c] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f3e7fa4f52e] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x421b8) [0x7f3e7fd881b8] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_save_cancel+0x76) [0x7f3e7fd8b4b6] -> /usr/lib/dovecot/modules/lib01_acl_plugin.so(+0xe1b2) [0x7f3e7f2691b2] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x45913) [0x7f3e7fd8b913] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_move+0x29) [0x7f3e7fd8bb29] -> dovecot/imap [yyy(a)xxx.de 8x.1xx.1x.xx8 UID MOVE](+0xf955) [0x562ff2225955] -> dovecot/imap [yyy(a)xxx.de 8x.1xx.1x.xx8 UID MOVE](command_exec+0xa6) [0x562ff2232296] -> dovecot/imap [yyy(a)xxx.de 8x.1xx.1x.xx8 UID MOVE](+0x1a602) [0x562ff2230602] -> dovecot/imap [yyy(a)xxx.de 8x.1xx.1x.xx8 UID MOVE](+0x1a690) [0x562ff2230690] -> dovecot/imap [yyy(a)xxx.de 8x.1xx.1x.xx8 UID MOVE](client_handle_input+0x195) [0x562ff2230a55] -> dovecot/imap [yyy(a)xxx.de 8x.1xx.1x.xx8 UID MOVE](client_input+0x85) [0x562ff2230f65] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x52) [0x7f3e7facd8f2] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x10a) [0x7f3e7facef4a] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x3c) [0x7f3e7facd98c] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f3e7facdb38] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f3e7fa55a03] -> dovecot/imap [yyy(a)xxx.de 8x.1xx.1x.xx8 UID MOVE](main+0x322) [0x562ff2223c32] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f3e7f697b45] -> dovecot/imap [yyy(a)xxx.de 8x.1xx.1x.xx8 UID MOVE](+0xddaf) [0x562ff2223daf] Jan 28 07:50:42 srv1 dovecot: imap(yyy(a)xxx.de): Fatal: master: service(imap): child 5772 killed with signal 6 (core dumps disabled) I'm using mdbox and I assume the user wanted to move a mail from the personal mailstore to a shared mailbox (shared by another user). doveconf -n: # 2.2.27 (c0f36b0): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.16 (fed8554) # OS: Linux 4.8.0-0.bpo.2-amd64 x86_64 Debian 8.7 auth_mechanisms = plain login auth_verbose = yes default_client_limit = 2100 default_process_limit = 350 default_vsz_limit = 512 M dict { acldict = mysql:/etc/dovecot/dovecot-dict-user_shares.conf quotadict = mysql:/etc/dovecot/dovecot-dict-quota.conf } first_valid_uid = 999 imap_client_workarounds = delay-newmail last_valid_uid = 999 lmtp_save_to_detail_mailbox = yes log_timestamp = "%Y-%m-%d %H:%M:%S " mail_gid = 8 mail_location = mdbox:~/mdbox mail_plugins = quota zlib acl mail_privileged_group = mail mail_shared_explicit_inbox = yes mail_uid = 999 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto envelope encoded-character subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapflags namespace { list = children location = mdbox:%%h/mdbox prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes list = yes location = mailbox Archiv { special_use = \Archive } mailbox Archive { special_use = \Archive } mailbox Archives { special_use = \Archive } mailbox Deleted { special_use = \Trash } mailbox "Deleted Items" { special_use = \Trash } mailbox "Deleted Messages" { special_use = \Trash } mailbox Drafts { special_use = \Drafts } mailbox Entw&APw-rfe { special_use = \Drafts } mailbox Entwurf { special_use = \Drafts } mailbox Gel&APY-scht { special_use = \Trash } mailbox "Gel&APY-schte Elemente" { special_use = \Trash } mailbox "Gel&APY-schte Objekte" { special_use = \Trash } mailbox Gesendet { special_use = \Sent } mailbox "Gesendete Elemente" { special_use = \Sent } mailbox "Gesendete Objekte" { special_use = \Sent } mailbox Junk { special_use = \Junk } mailbox Papierkorb { special_use = \Trash } mailbox SPAM { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Items" { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / subscriptions = yes type = private } passdb { args = /etc/dovecot/sql.conf driver = sql } plugin { acl = vfile acl_anyone = allow acl_shared_dict = proxy::acldict quota = dict:user::proxy::quotadict quota_exceeded_message = </etc/dovecot/overquota.txt quota_grace = 0 quota_rule2 = Trash:bytes=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u recipient_delimiter = + sieve = file:~/sieve;active=~/.dovecot.sieve sieve_extensions = -vacation +imapflags -reject zlib_save = gz } pop3_client_workarounds = outlook-no-nuls postmaster_address = postmaster(a)xxx.de protocols = " imap lmtp sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = mail mode = 0660 user = postfix } unix_listener auth-userdb { group = mail mode = 0660 user = vmail } } service dict { unix_listener dict { group = mail mode = 0660 user = vmail } } service imap-login { inet_listener imap { address = 127.0.0.1 } } service pop3-login { inet_listener pop3 { port = 0 } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = vmail } ssl_cert = </etc/ssl/certs/srv1.xxx.de.pem ssl_dh_parameters_length = 2048 ssl_key = # hidden, use -P to show it ssl_options = no_compression ssl_protocols = !SSLv2 !SSLv3 ssl_require_crl = no userdb { driver = prefetch } userdb { args = /etc/dovecot/sql.conf driver = sql } verbose_proctitle = yes protocol lmtp { mail_plugins = quota zlib acl sieve } protocol imap { mail_max_userip_connections = 25 mail_plugins = quota zlib acl imap_quota imap_acl imap_zlib } Please let me know if you need more information. -- Best regards, Sven Strickroth PGP key id F5A9D4C4 @ any key-server

1 0

could not receive mails from dovecot pop3
by baskar anand 27 Jan '17

27 Jan '17

Hi Greetings. I have windows server2012R2  and installed Hypervisor  I have installed Ubuntu 16.04 server edition in Virtual machine(hyper-v 2012r2)  Postfix and dovecot are running  dovecot version :2.2.22 (fe789dz)  Able to send mail is ok. mail received in /var/mail/%u  could not receive mail from client Thunderbird.  the only changed option is disable_plaintext_auth = no  Never touched any other option. Ubuntu server ip : 192.168.1.250  (firewall in inactive)client ip : 192.168.1.1 (thunderbird is running in widows server (ip:192.168.1.1)let know how to save the output of dovecot -n from Ubuntu server machineThunder bird settings are: Thankyou.Baskaranand

2 1

Re: dsync dovecot / Failed connection refused
by Thierry 26 Jan '17

26 Jan '17

Hi, Means that the Dovecot (server1) doesn't "communicate" with the Dovecot (server2) ... They both are on the same subnet ... ... Le jeudi 26 janvier 2017 à 20:07:58, vous écriviez : > This means for me, the rule has never touched any packages. > On 01/26/2017 07:02 PM, Thierry wrote: >> 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:4711 -- Cordialement, Thierry e-mail : lenaigst(a)maelenn.org

1 0

dsync dovecot / Failed connection refused
by Thierry 26 Jan '17

26 Jan '17

Dear all, I am using VMWare and I have cloned my emails server. Now I do have two identicals servers, both running the same version of dovecot (2.2.13) and imap. Let's call them: server1.domain.ltd and server2.domain.ltd. I would like to sync both server using dsync. Dovecot is working well except concerning the sync. dsync config server1.domain.ltd # Enable the replication plugin globally mail_plugins = $mail_plugins notify replication # The mail processes need to have access to the replication-notify fifo and socket. service aggregator { fifo_listener replication-notify-fifo { user = vmail mode = 0666 } unix_listener replication-notify { user = vmail mode = 0666 } } # Enable doveadm replicator commands service replicator { unix_listener replicator-doveadm { mode = 0666 } } # Create a listener for doveadm-server service doveadm { user = vmail inet_listener { port = 12345 } } # configure how many dsyncs can be run in parallel (10 by default) replication_max_conns = 10 # tell doveadm client to use this port by default doveadm_port = 4711 #Both the client and the server also need to have a shared secret doveadm_password = {SHA512-CRYPT}$6$rou.................... # use tcp:hostname as the dsync target plugin { #mail_replica = tcp:server2.domain.ltd # use doveadm_port mail_replica = tcp:server2.domain.ltd:12345 # use port 12345 explicitly } service config { unix_listener config { user = vmail } } *************************************************************************************** dsync config server2.domain.ltd # Enable the replication plugin globally mail_plugins = $mail_plugins notify replication # The mail processes need to have access to the replication-notify fifo and socket. service aggregator { fifo_listener replication-notify-fifo { user = vmail mode = 0666 } unix_listener replication-notify { user = vmail mode = 0666 } } # Enable doveadm replicator commands service replicator { unix_listener replicator-doveadm { mode = 0666 } } # Create a listener for doveadm-server service doveadm { user = vmail inet_listener { port = 12345 } } # configure how many dsyncs can be run in parallel (10 by default) replication_max_conns = 10 # tell doveadm client to use this port by default doveadm_port = 4711 #Both the client and the server also need to have a shared secret doveadm_password = {SHA512-CRYPT}$6$ro............. # use tcp:hostname as the dsync target plugin { #mail_replica = tcp:server1.domain.ltd # use doveadm_port mail_replica = tcp:server1.domain.ltd:12345 # use port 12345 explicitly } service config { unix_listener config { user = vmail } } To test both port I have open on my both servers port 12345 and 4711 : Iptables server1: ACCEPT tcp -- anywhere anywhere tcp dpt:4711 ACCEPT tcp -- anywhere anywhere tcp dpt:12345 Iptables server2: ACCEPT tcp -- anywhere anywhere tcp dpt:4711 ACCEPT tcp -- anywhere anywhere tcp dpt:12345 doveadm replicator status '*' username priority fast sync full sync failed user1(a)domain.ltd none 00:01:21 11:25:40 y user3(a)domain.ltd none 07:31:16 11:25:41 - user2(a)domain.ltd none 00:01:21 11:25:40 y user4(a)domain.ltd none 11:25:41 11:25:41 - user5(a)domain.ltd none 02:17:03 11:25:41 - user6(a)domain.ltd none 11:25:40 11:25:40 - user4(a)domain.ltd none 00:00:51 11:25:40 y When doing, from server1: "doveadm sync -u user1(a)domain.ltd remote:server2.domain.ltd" doveadm(user1(a)domain.ltd): Error: userdb lookup: connect(/var/run/dovecot/auth-userdb) failed: Connection refused doveadm(user1(a)domain.ltd): Fatal: /var/run/dovecot/auth-userdb: passdb lookup failed (to see if user is proxied, because doveadm_port is set) dsync-local(user1(a)domain.ltd): Error: read(server2.domain.ltd) failed: EOF (version not received) Thx for your help. -- Cordialement, Thierry e-mail : lenaigst(a)maelenn.org PGP Key: 0xB7E3B9CD

2 6

Benchmarking auth
by micah anderson 25 Jan '17

25 Jan '17

Hello, I'm attempting to use imaptest to test auths/sec on my imap server, to simulate the number I'm getting now on a new server. Based on my readings of dovecot stats outputs, my current machine is doing somewhere between 11.6 and 196 logins/sec at its busiest, and I want to make sure the new server can handle that amount. With imaptest I attempt to simulate this by just simulating login/logout speed, but I'm not sure I understand the results and where things are being blocked. For testing purposes, I set: mail_max_userip_connections = 6000 mail_max_userip_connections = 6000 auth_worker_max_count = 240 If you have some additional suggestions for what I can also tweak here to improve this, I would like to know. I then ran imaptest with: imaptest clients=196 user=test pass=testpw host=127.0.0.1 port=14300 - select=0 seed=123 secs=300 It doesn't seem like I can simulate *only* authentications/logins. I have to pair them with logouts. It makes me wonder how I can simulate the amount of load on my current live system on this system. How do I read the output? I don't really understand what is being shown here: Logi Logo 100% 100% 0 0 100/100 [51%] does this mean that it tried 100 logins and 100 logouts and 51% succeeded? What are the first two columns? 7 7 104/121 [61%] 6 6 131/139 [70%] 3 3 137/148 (84 stalled >3s) [75%] 84 stalled for more than 3 seconds, how does this relate to the other values presented? 5 5 155/163 (79 stalled >3s) [83%] 1 1 166/166 (107 stalled >3s) [84%] 2 2 168/172 (128 stalled >3s) [87%] 6 5 179/190 (140 stalled >3s) [96%] 22 22 182/196 (136 stalled >3s) 4 3 195/196 (133 stalled >3s) 5845 129 ms/cmd avg I really wonder if these first two columns are ms/cmds? It then continues: Logi Logo 100% 100% 10 11 195/196 (131 stalled >3s) 7 8 194/196 (150 stalled >3s) 3 3 194/196 (171 stalled >3s) 10 9 192/196 (166 stalled >3s) 22 22 182/196 (156 stalled >3s) 8 9 193/196 (153 stalled >3s) - 2 stalled for 16 secs in command: 1 LOGIN "test" "testpw" - 7 stalled for 16 secs in command: 1 LOGIN "test" "testpw" - 8 stalled for 16 secs in command: 1 LOGIN "test" "testpw" - 9 stalled for 16 secs in command: 1 LOGIN "test" "testpw" - 11 stalled for 16 secs in command: 1 LOGIN "test" "testpw" - 12 stalled for 16 secs in command: 1 LOGIN "test" "testpw" - 14 stalled for 16 secs in command: 1 LOGIN "test" "testpw" - 22 stalled for 16 secs in command: 1 LOGIN "test" "testpw" - 25 stalled for 16 secs in command: 1 LOGIN "test" "testpw" ... it starts to build up like this, until I hit control-c twice: - 100 stalled for 17 secs in command: 1 LOGIN "test" "testpw" ^CInfo: Received second SIGINT - stopping immediately 11347 118 ms/cmd avg Totals: Logi Logo 100% 100% 130 134 What are these totals? Thanks! micah

1 0

Apparent Maildir permission issue
by Mark Foley 25 Jan '17

25 Jan '17

I've just upgraded from Slackware 14.1 to 14.2. I've not done anything with dovecot -- it's the same version that was running before the upgrade. However, now I'm getting a permission error: /var/log/maillog: Jan 16 13:09:44 mail dovecot: imap(mark): Error: opendir(/home/HPRS/mark/Maildir) failed: Permission denied (euid=3000026(HPRS\mark) egid=100(users) missing +r perm: /home/HPRS/mark/Maildir, conflicting dir uid=10001(HPRS\mark)) Jan 16 13:09:44 mail last message repeated 4 times Jan 16 13:09:44 mail dovecot: imap(mark): Error: stat(/home/HPRS/mark/Maildir/.Trash) failed: Permission denied (euid=3000026(HPRS\mark) egid=100(users) missing +x perm: /home/HPRS/mark/Maildir, conflicting dir uid=10001(HPRS\mark)) Jan 16 13:09:44 mail dovecot: imap(mark): Error: stat(/home/HPRS/mark/Maildir/tmp) failed: Permission denied (euid=3000026(HPRS\mark) egid=100(users) missing +x perm: /home/HPRS/mark/Maildir, conflicting dir uid=10001(HPRS\mark)) Jan 16 13:09:44 mail dovecot: imap(mark): Error: opendir(/home/HPRS/mark/Maildir) failed: Permission denied (euid=3000026(HPRS\mark) egid=100(users) missing +r perm: /home/HPRS/mark/Maildir, conflicting dir uid=10001(HPRS\mark)) Jan 16 13:09:45 mail last message repeated 11 times Permission on that folder are: $ ls -ld /home/HPRS/mark/Maildir drwx------ 17 HPRS\mark domusers 4096 Dec 7 23:07 /home/HPRS/mark/Maildir/ Permissions are unchanged since before the backup. What do I do to fix this? THX --Mark

5 9

Timing information for passdb/userdb lookups
by Marcus Rückert 25 Jan '17

25 Jan '17

Hi, it would be nice to have an option to enable logging for timings without having to go with auth_verbose/auth_debug. If you try to track down if a slowdown for logging in comes from e.g. running out of login workers or if your auth backend is slow it would really help to get just a one line message per userdb/passdb with the timing for this lookup. something like: imap-login(<username>): userdb ldap lookup time 0.4s imap-login(<username>): passdb ldap lookup time 0.2s or even merging into one: imap-login(<username>): userdb ldap lookup time 0.4s passdb ldap lookup time 0.2s darix -- openSUSE - SUSE Linux is my linux openSUSE is good for you www.opensuse.org

1 0