- dovecot - dovecot.org

[Dovecot] reload without shutting imap connections down
by Hajo Locke 16 Jul '13

16 Jul '13

Hello, we have some problems with users who report connectionproblems to dovecot sometimes. According to the logs there are dovecot reloads at this times. Seems that a reload also causes dovecot to shut all imapconnections down: Jul 16 13:31:40 myhostname dovecot: master: Warning: SIGHUP received - reloading configuration Jul 16 13:31:40 myhostname dovecot: imap: Server shutting down. bytes=251/675 I tried to reload by initscript or sending -HUP manually to pid, dovecot is shutting down imapconnections and i think this is the reason for users to report this problems with some clients. This seems to be new with versions 2.x, i have some old 1.2.x dovecots running and cant find "Server shutting down" in their logs after reload. I have still potential to reduce reloads, but cant avoid them completely. Is there a workaround? Thanks, Hajo

4 6

[Dovecot] Difference between using auth_realms and setting up virtual mailboxes in postfix?
by Gab IIpop 16 Jul '13

16 Jul '13

Hi, there is a possibility in the future that I might have to support multiple domain names(but using the same IP address). Postfix has something called 'virtual mailboxes' to help handle this. But I also noticed that dovecot has a setting "auth_realms" where I can specify domains separated by a space. What is the relationship between the two?

2 1

[Dovecot] mail not reject when the mailbox is full (Dovecot-LDAP-Imap_quota)
by Victor Oñate 16 Jul '13

16 Jul '13

Hello List. Currently I have configured the share of users through the LDAP query as shown #dovecot.conf protocol imap { mail_plugins = quota imap_quota } plugin { quota = dirsize } userdb ldap { args = /etc/dovecot/dovecot-ldap.conf } #dovecot-ldap.conf auth_bind = yes ldap_version = 3 base = dc=XXX,dc=YY,dc=ZZ deref = never scope = subtree user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid,mail=Maildir,mailQuotaSize=quota_rule=*:storage=%$ user_filter = (&(objectClass=posixAccount)(uid=%u)) pass_attrs = uid=user,userPassword=password,homeDirectory=userdb_home,uidNumber=userdb_uid,gidNumber=userdb_gid pass_filter = (&(objectClass=posixAccount)(uid=%u)) Additionally in thunderbird customers have the plug so they can see the share. This works perfect! However, when the mailbox exceeds 100% users continue to receive mail which makes the risk set allocated disk space, the idea is that when full the mail reject with a message "mailbox XXX full" . As always appreciate the ideas. Victor Oñate

4 4

[Dovecot] Proxying improvements in v2.1.2
by Timo Sirainen 16 Jul '13

16 Jul '13

I just committed a couple of features that will make life easier for some types of proxying setups: 1. IMAP proxying has already for a while supported sending local/remote IP/port to backend server, which can use it for logging and other purposes. I've now implemented this for POP3 as well, although only the remote IP/port is forwarded, not local IP/port. I implemented this also for LMTP in v2.2 tree, but haven't bothered to backport that change. Both POP3 and LMTP uses XCLIENT command that is compatible to Postfix's (XCLIENT ADDR=1.2.3.4 PORT=110). 2. proxy_maybe=yes + host=host.example.com actually works now. As long as host.example.com DNS lookup returns one IP that belongs to the current server the proxying is skipped. 3. auth_proxy_self = 1.2.3.4 setting means that if proxy_maybe=yes and host=1.2.3.4 then Dovecot assumes that this is a local login and won't proxy it, even if 1.2.3.4 isn't the actual local IP. This can be helpful if the host field contains load balancer's IP address instead of the server's. You can add more than one IP (space separated) and of course everything related to this works just as well with hostnames as with IPs (even when hostname expands to multiple IPs).

2 2

[Dovecot] Sieve vacation variables reference
by Simon 16 Jul '13

16 Jul '13

Hi There. We are using dovecot v2.2.4 with pigeonhole 0.4.1 (both compiled from source) Centos 6.4. Sorry for the dumb question in advance if I'm just missing an obvious link somewhere (also if I've got the terminology all wrong!), but could someone point me to the reference list for "vacation", e.g.: vacation :days :subject :addresses :from is there a definitive list of things like "days", "subject" etc? Thanks Simon

2 2

[Dovecot] Sieve scripts in mysql?
by Simon 16 Jul '13

16 Jul '13

Hi There. We are using dovecot v2.2.4 with pigeonhole 0.4.1 (both compiled from source) Centos 6.4. We are storing our virtual user config in mysql. At the moment we are storing our sieve script configs in mysql and then running a script to write these out to a file.. But I'm wondering if there a way to store sieve scripts in mysql? Many thanks! Simon

1 1

[Dovecot] Services not starting in 2.1 (or 2.2)
by Tommy Wareing 16 Jul '13

16 Jul '13

I'm trying to install Dovecot onto my QNAP NAS. I apologise for this! It means I'm not working in a normal environment, and don't (necessarily) have the normal range of tools available (or the most up to date version of those tools). It seems that 2.0.21 works (at least, as far as I've tested), but 2.1.17 and 2.2.4 won't start up their child services. I've got the source code for all three from http://www.dovecot.org/download.html, and, for experimental purposes, I'm configuring with: ./configure --prefix=/opt The configure script ends by reporting: Install prefix . : /opt File offsets ... : 64bit I/O polling .... : epoll I/O notifys .... : inotify SSL ............ : yes (OpenSSL) GSSAPI ......... : no passdbs ........ : static passwd passwd-file shadow checkpassword : -pam -bsdauth -sia -ldap -sql -vpopmail userdbs ........ : static prefetch passwd passwd-file checkpassword nss : -ldap -sql -vpopmail SQL drivers .... : : -pgsql -mysql -sqlite The dovecot.conf I'm using, at the moment, is the absolute minimal to fire things up: protocols = imap listen = * ssl_cert = </opt/etc/ssl/certs/dovecot.pem ssl_key = </opt/etc/ssl/private/dovecot.pem dovecot -n is happy, and reports those four lines back to me. When I start this up, I get, in /var/log/messages file: Jul 10 10:09:28 QNAP mail.info dovecot: master: Dovecot v2.0.21 starting up (core dumps disabled) and ps shows: [admin@qnap dovecot]# ps -ef | grep dovecot admin 11478 1 0 10:09 ? 00:00:00 /opt/sbin/dovecot dovecot 11479 11478 0 10:09 ? 00:00:00 dovecot/anvil admin 11480 11478 0 10:09 ? 00:00:00 dovecot/log admin 11482 11478 0 10:09 ? 00:00:00 dovecot/config admin 11525 455 0 10:10 pts/5 00:00:00 grep dovecot All is right with the world! Well, until I try to use dovecot properly, at which point I'll need a full configuration. But it's alright so far! :) However, if I go through the same routine with Dovecot 2.1.17, I get the appropriate message in messages: Jul 10 10:12:45 QNAP mail.info dovecot: master: Dovecot v2.1.17 starting up (core dumps disabled) But this time, ps shows: [admin@qnap dovecot-2.1.17]# ps -ef | grep dovecot admin 15259 1 0 10:12 ? 00:00:00 /opt/sbin/dovecot admin 15294 455 0 10:12 pts/5 00:00:00 grep dovecot and the child services don't seem to have started. This is born out by the fact that no network connections work: they stall, and then eventually time out (telnet localhost 143 produces no output at all, until I disconnect it). Even dovecot stop has trouble, taking several seconds before it returns me to the prompt, and *not* killing the existing process. dovecot -n is still happy however (and in a full configuration, components which don't require the services seem to work properly, such as dovecot-lda, if it doesn't require auth). I'm not sure that I need those newer versions of dovecot, so I'll get back to version 2.0 for now. But I'd certainly like the option, and imagine that somebody else might care as to what the problem is! -- Tommy Wareing

4 8

[Dovecot] trying to configre dovecot
by Gene Heskett 15 Jul '13

15 Jul '13

Hi all; Thinking I'd like to have a bit of security, I followed the example for dovecot from allgoodthings.org Guessing between the lines I made a few substitutions to localize it for me, but when I run the line to dump the configs, the output is very short because I do not have the *.pem files. Where can a usable set of these ssl 'keyfiles' be obtained? Cheers, Gene -- "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." -Ed Howdershelt (Author) My web page: <http://coyoteden.dyndns-free.com:85/gene> is up! My views <http://www.armchairpatriot.com/What%20Has%20America%20Become.shtml> Gee, I feel kind of LIGHT in the head now, knowing I can't make my satellite dish PAYMENTS! A pen in the hand of this president is far more dangerous than 200 million guns in the hands of law-abiding citizens.

3 6

[Dovecot] User login for SMTP but not for IMAP/POP?
by Martin 15 Jul '13

15 Jul '13

Hello everybody, I have a question, though I'm not sure if it's a matter of dovecot or postfix. Or if it's even possible to do at all. If I understand it correctly, SMTP authentification is done via SASL. When a user wants to login Postfix queries an external user database (dovecot). Therefore the SMTP-users are identical to the IMAP/POP-users. I want to achieve the following: I want some user credentials (username&password) for a user that is able to login via SMTP, but who doesn't have a mailbox and therefore shouldn't be able to login via IMAP/POP. Is this even possible? How can it be achieved? Or: does this behaviour have a special name, which I can google for? Regards, Martin

2 1

[Dovecot] login_trusted_networks from webmail ?
by Jan-Frode Myklebust 15 Jul '13

15 Jul '13

I'd like to get the IP-address of the webmail-klient logged in my maillog (for being compliant with coming data retention policies). I've noticed that with login_trusted_networks pointing at my dovecot directors, we get rip=client-ip logged on the backends. How is the proxy providing this to the dovecot backends? Anybody know what magic we need to implement in our webmail-solution to be able to forward the webmail-client-ip and have it logged as rip= in dovecot? I belive it will be enough to have it logged as rip= on the directors, maybe not needed to be forwarded all the way to the backends (but that would be nice as well). -jf

3 7