November 2024 - dovecot

sharing sso between regular mail client and web applications
by Marc 20 Nov '24

20 Nov '24

I am testing a bit with sso with keycloak, I was wondering if/how it is possible that your logged in session between eg Thunderbird and dovecot can be used as a single sign on in webapplications. So as long as you have an active session with dovecot you can access all your web applications without the need to login.

2 1

Fatal: sql proxy::sqlite-proxy: Can't open configuration file
by Matt 14 Nov '24

14 Nov '24

Hi, I'm running into a problem where I'm not sure anymore if it's possible to proxy to an SQLite database file using a dict for authentication. The docs are unclear about it and I thought it was not possible as it's not a connection for SQLite but a file-read where the documentation shows different. ov 14 13:57:52 auth: Debug: Loading modules from directory: /usr/lib/dovecot/auth Nov 14 13:57:52 auth: Debug: Module loaded: /usr/lib/dovecot/auth/lib20_auth_var_expand_crypt.so Nov 14 13:57:52 master: Error: service(auth): command startup failed, throttling for 4.000 secs Nov 14 13:57:52 auth: Debug: Module loaded: /usr/lib/dovecot/auth/libdriver_sqlite.so Nov 14 13:57:52 auth: Fatal: sql proxy::sqlite-proxy: Can't open configuration file proxy::sqlite-proxy: No such file or directory doveconf -n does show me the dict being loaded, the file exists as well but it still says not found. dict { sqlite-proxy = sqlite:/etc/dovecot/conf.d/dicts/sqlite/sqlite-connection.conf.ext } What am I missing here ? Thanks, Matt

2 4

openid / roundcube example
by Marc 14 Nov '24

14 Nov '24

Does anyone have a current config example using openid and with roundcube. I like to add this next to 'regular' logins'. I was able to login once but know I am getting these in the logs " No requests to service for this peer (1 connections exist, 0 pending)" I have added the 2 passdb with links to dovecot-oauth2.token.conf.ext from this manual[1], but it is not really clear if I need these and can just add a config file with openid_configuration_url [1] https://doc.dovecot.org/2.3/configuration_manual/authentication/oauth2/

1 3

2.3.21.1 and oauth
by v＠minakov.pro 14 Nov '24

14 Nov '24

Hello! I'm using dovecot with keycloak for oauth authentication. My config is: client_id = dovecot client_secret = MY_SECRET introspection_url = https://MY_KEYCLOAK/realms/master/protocol/openid-connect/token/introspect introspection_mode = post pass_attrs = pass=%{oauth2:access_token} Everything worked great on version 2.3.20. After upgrading to version 2.3.21.1 oauth stopped working with errors: auth: Debug: http-client: conn [::1]:443 [1]: Got 401 response for request [Req1: POST https://MY_KEYCLOAK/realms/master/protocol/openid-connect/token/introspect] Unauthorized (took 5 ms + >Aug 16 00:23:58 auth: Error: oauth2(MY_EMAIL,127.0.0.1,<HADwdb8f+PN/AAAB>): oauth2 failed: Introspection failed: No username returned I tried all combination of configurations, debugging and versions of keycloak. Seems something was broken in this version of dovecot.

3 3

Locking box for backups
by Steve Atkins 12 Nov '24

12 Nov '24

I’m running 2.3.19.1 on a system that isn’t set up to support filesystem snapshots. So I’d like to back up my mdbox mailboxes at a filesystem level (with rsync, or something equivalent). I’m assuming that to get a consistent backup I should lock the mailbox while I copy it. How should I acquire a (write) lock on an mdbox mailbox? Cheers, Steve

2 1

auto clear trash
by Hua Young 12 Nov '24

12 Nov '24

Hello where can I setup dovecot to auto clear trash periodically? for example, I want the messages in trash folder to be kept up to 20 days. Thanks.

5 5

replication and backup
by Philippe 12 Nov '24

12 Nov '24

Hi all & thanks Aki for adding me to the list. First of all, I'm not a dovecot user yet. For several years now I use cyrus imapd and never saw the urge to switch, until I recently lost random mails from my mailbox which were neither temporally connected nor related in some other way. Fortunately, I had a rolling replication which never expunges, so I was able to restore them. While circumventing some pitfalls during the restore, I learned that the backup and restore procedure cyrus imapd offers is deprecated and will be removed. Now I ponder whether or not I should switch the mda. Does dovecot offer the following? - setting up a rolling replication which replicates every action made to the mailbox (flags, mark as deleted, relocations, etc.) to a different server (one way only) - NOT expunging the emails that have been marked as deleted on the slave server or expunging only manually - restoring selected emails from the slave directly to the master The slave server doesn't need to be accessible via imap, I'd be happy to search for some header data (subject, recipient, sender, date, ...) and restore the email by command line using its uuid or message-id or something like that. Browsing the documentation I found "doveadm-backup" which is using "dsync", but I'm not sure whether or not it fits my requirements. I'd love to hear your opinions. Kind regards, Philippe

3 5

SMTPUTF8 in dovecot lmtp - current status
by Kamil Jońca 12 Nov '24

12 Nov '24

About a year ago I asked about SMTPUTF8 in dovecot-lmtp, and then dovecod did not handle it. Is that changed? KJ -- http://wolnelektury.pl/wesprzyj/teraz/ A bore is someone who persists in holding his own views after we have enlightened him with ours.

3 2

Re: What is the appropriate action for out of memory error for exceeding vsz_limit in my situation?
by Adrian C. 10 Nov '24

10 Nov '24

On Fri, 8 Nov 2024, Marc wrote: > How much does it cost to upgrade to more memory? I have a server with 4G RAM is affordable. But if you do colocation and have to rent remote PoP hands to insert the RAM their hourly rate could be hundreds of dollars. If you're renting the entire server you have to ask your service provider for a quote to provision more RAM.

1 0

Proper configuration of fts-xapian for dovecot
by Torge Riedel 10 Nov '24

10 Nov '24

Dears, I recently installed the package dovecot-fts-xapian on my Ubuntu 22.04 VM, where dovecot 2.3.16 is installed. I enabled the plugins mail_plugins = $mail_plugins fts fts_xapian plugin { ### # fts fts = xapian fts_xapian = partial=3 full=20 fts_autoindex = yes fts_enforced = yes #fts_autoindex_exclude = \Trash # Index attachements fts_decoder = decode2text } I skip to show the "service indexer-worker" and "decode2text" for the moment. After restarting dovecot I ran doveadm index -A \* which ran without any issues. But for the moment I am faced with two issues I am unable to solve on my own and also didn't found a solution on the internet: 1. The indexer created a new directory "xapian-indexes" in the user's mail folder (where also "INBOX", "Drafts", "Sent", ... exists), with the result that you can see this folder in Thunderbird and GMail Android App. How to hide / disable the folder to mail programs, IMHO no mail program should have access to it. 2. When listing the capabilities of my mail server I get "CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SPECIAL-USE LITERAL+ AUTH=PLAIN AUTH=LOGIN" and it seems to lack the FTS capability(s). Am I right? And should dovecot set the capabality on its own or is something missing in the config? If you need more info, just let me know please. Thanks and kind regards Torge

3 4