- dovecot - dovecot.org

[Dovecot] Anyone using dovecot obox?
by list＠airstreamcomm.net 14 Jan '13

14 Jan '13

Just looking for some input from other users of the obox (object storage) backend from dovecot.fi. - What challenges/problem were you trying to overcome/solve by using obox? - What kind of architecture did you deploy using obox? (e.g. distributed object storage for performance, or distributed for availability, geographic distribution of email services, etc.) - What complexities, single points of failure, documentation omissions can you highlight having deployed the obox storage architecture? - Did the obox backend support your email services as well as you expected or more? - How was your interaction with Doveoct.fi? Thanks in advance.

2 1

[Dovecot] Installing Dovecot on Gentoo
by Christian Rößner 14 Jan '13

14 Jan '13

Hi, I have an already working dovecot server on Ubuntu 10.04 with self-created packages version 2.1.13. This setup is working prefect. Now that I do not wish to continue using Ubuntu (to much work for Upgrading), I decided to switch to Gentoo, as I had made best experiences in the past… I have installed Dovecot on Gentoo and I copied over all my configs and certs and stuff. Also created a user vmail with identical uid/gid and also checked all permissions for the certificate stuff. Dovecot starts. I also can connect to it. But when trying to login, I get errors: ------------------------------------------------------- telnet localhost 143 Trying ::1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5 AUTH=DIGEST-MD5 AUTH=NTLM] Dovecot ready. . login croessner <hiddenpw> . NO [UNAVAILABLE] Temporary authentication failure. [mx0:2013-01-13 14:24:02] ------------------------------------------------------- In the logs it looks like this: ------------------------------------------------------- Jan 13 15:22:30 mx0 dovecot: master: Dovecot v2.1.13 starting up (core dumps disabled) Jan 13 15:23:11 mx0 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jan 13 15:23:11 mx0 dovecot: auth: Debug: passwd-file /etc/dovecot/master-users: Read 1 users in 0 secs Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_extended_operation_s Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_extended_operation Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_send_initial_request Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_new_connection 1 1 0 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_int_open_connection Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_connect_to_host: TCP db.roessner-net.de:389 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_new_socket: 17 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_prepare_socket: 17 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_connect_to_host: Trying 193.239.107.37:389 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_pvt_connect: fd: 17 tm: -1 async: 0 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_open_defconn: successful Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_send_server_request Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_result ld 0x35d6dd481c0 msgid 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: wait4msg ld 0x35d6dd481c0 msgid 1 (infinite timeout) Jan 13 15:23:11 mx0 dovecot: auth: Error: wait4msg continue ld 0x35d6dd481c0 msgid 1 all 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: ** ld 0x35d6dd481c0 Connections: Jan 13 15:23:11 mx0 dovecot: auth: Error: * host: db.roessner-net.de port: 389 (default) Jan 13 15:23:11 mx0 dovecot: auth: Error: refcnt: 2 status: Connected Jan 13 15:23:11 mx0 dovecot: auth: Error: last used: Sun Jan 13 15:23:11 2013 Jan 13 15:23:11 mx0 dovecot: auth: Error: Jan 13 15:23:11 mx0 dovecot: auth: Error: Jan 13 15:23:11 mx0 dovecot: auth: Error: ** ld 0x35d6dd481c0 Outstanding Requests: Jan 13 15:23:11 mx0 dovecot: auth: Error: * msgid 1, origid 1, status InProgress Jan 13 15:23:11 mx0 dovecot: auth: Error: outstanding referrals 0, parent count 0 Jan 13 15:23:11 mx0 dovecot: auth: Error: ld 0x35d6dd481c0 request count 1 (abandoned 0) Jan 13 15:23:11 mx0 dovecot: auth: Error: ** ld 0x35d6dd481c0 Response Queue: Jan 13 15:23:11 mx0 dovecot: auth: Error: Empty Jan 13 15:23:11 mx0 dovecot: auth: Error: ld 0x35d6dd481c0 response count 0 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_chkResponseList ld 0x35d6dd481c0 msgid 1 all 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_chkResponseList returns ld 0x35d6dd481c0 NULL Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_int_select Jan 13 15:23:11 mx0 dovecot: auth: Error: read1msg: ld 0x35d6dd481c0 msgid 1 all 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: read1msg: ld 0x35d6dd481c0 msgid 1 message type extended-result Jan 13 15:23:11 mx0 dovecot: auth: Error: read1msg: ld 0x35d6dd481c0 0 new referrals Jan 13 15:23:11 mx0 dovecot: auth: Error: read1msg: mark request completed, ld 0x35d6dd481c0 msgid 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: request done: ld 0x35d6dd481c0 msgid 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: res_errno: 0, res_error: <>, res_matched: <> Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_free_request (origid 1, msgid 1) Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_parse_extended_result Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_parse_result Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_msgfree Jan 13 15:23:11 mx0 dovecot: auth: Error: TLS: could not use key file `/etc/ssl/private/mx0.roessner-net.de.key.pem'. Jan 13 15:23:11 mx0 dovecot: auth: Error: TLS: error:0200100D:system library:fopen:Permission denied bss_file.c:398 Jan 13 15:23:11 mx0 dovecot: auth: Error: TLS: error:20074002:BIO routines:FILE_CTRL:system lib bss_file.c:400 Jan 13 15:23:11 mx0 dovecot: auth: Error: TLS: error:140B0002:SSL routines:SSL_CTX_use_PrivateKey_file:system lib ssl_rsa.c:648 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_err2string Jan 13 15:23:11 mx0 dovecot: auth: Error: LDAP: ldap_start_tls_s() failed: Connect error Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_extended_operation_s Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_extended_operation Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_send_initial_request Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_send_server_request Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_result ld 0x35d6dd481c0 msgid 2 Jan 13 15:23:11 mx0 dovecot: auth: Error: wait4msg ld 0x35d6dd481c0 msgid 2 (infinite timeout) Jan 13 15:23:11 mx0 dovecot: auth: Error: wait4msg continue ld 0x35d6dd481c0 msgid 2 all 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: ** ld 0x35d6dd481c0 Connections: Jan 13 15:23:11 mx0 dovecot: auth: Error: * host: db.roessner-net.de port: 389 (default) Jan 13 15:23:11 mx0 dovecot: auth: Error: refcnt: 2 status: Connected Jan 13 15:23:11 mx0 dovecot: auth: Error: last used: Sun Jan 13 15:23:11 2013 Jan 13 15:23:11 mx0 dovecot: auth: Error: Jan 13 15:23:11 mx0 dovecot: auth: Error: Jan 13 15:23:11 mx0 dovecot: auth: Error: ** ld 0x35d6dd481c0 Outstanding Requests: Jan 13 15:23:11 mx0 dovecot: auth: Error: * msgid 2, origid 2, status InProgress Jan 13 15:23:11 mx0 dovecot: auth: Error: outstanding referrals 0, parent count 0 Jan 13 15:23:11 mx0 dovecot: auth: Error: ld 0x35d6dd481c0 request count 1 (abandoned 0) Jan 13 15:23:11 mx0 dovecot: auth: Error: ** ld 0x35d6dd481c0 Response Queue: Jan 13 15:23:11 mx0 dovecot: auth: Error: Empty Jan 13 15:23:11 mx0 dovecot: auth: Error: ld 0x35d6dd481c0 response count 0 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_chkResponseList ld 0x35d6dd481c0 msgid 2 all 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_chkResponseList returns ld 0x35d6dd481c0 NULL Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_int_select Jan 13 15:23:11 mx0 dovecot: auth: Error: read1msg: ld 0x35d6dd481c0 msgid 2 all 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_err2string Jan 13 15:23:11 mx0 dovecot: auth: Error: LDAP: ldap_start_tls_s() failed: Can't contact LDAP server Jan 13 15:23:11 mx0 dovecot: auth: Debug: auth client connected (pid=24045) Jan 13 15:24:00 mx0 dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured#011session=YAanRyzTOAAAAAAAAAAAAAAAAAAAAAAB#011lip=::1#011rip=::1#011lport=143#011rport=59960#011resp=<hidden> Jan 13 15:24:00 mx0 dovecot: auth: Error: ldap_extended_operation_s Jan 13 15:24:00 mx0 dovecot: auth: Error: ldap_extended_operation Jan 13 15:24:00 mx0 dovecot: auth: Error: ldap_send_initial_request Jan 13 15:24:00 mx0 dovecot: auth: Error: ldap_send_server_request Jan 13 15:24:00 mx0 dovecot: auth: Error: ldap_err2string Jan 13 15:24:00 mx0 dovecot: auth: Error: LDAP: ldap_start_tls_s() failed: Can't contact LDAP server Jan 13 15:24:02 mx0 dovecot: auth: Debug: client passdb out: FAIL#0111#011user=croessner#011temp Jan 13 15:26:11 mx0 dovecot: imap-login: Disconnected: Inactivity (auth failed, 1 attempts in 131 secs): user=<croessner>, method=PLAIN, rip=::1, lip=::1, secured, session=<YAanRyzTOAAAAAAAAAAAAAAAAAAAAAAB> Jan 13 15:27:11 mx0 dovecot: auth: Error: ldap_unbind Jan 13 15:27:11 mx0 dovecot: auth: Error: ldap_free_request (origid 2, msgid 2) Jan 13 15:27:11 mx0 dovecot: auth: Error: ldap_free_connection 1 1 Jan 13 15:27:11 mx0 dovecot: auth: Error: ldap_free_connection: actually freed ------------------------------------------------------- I checked if Dovecot would even try to access the key: ------------------------------------------------------- inotifywait -m -r --format '%:e %f' /etc/ssl Setting up watches. Beware: since -r was given, this may take a while! Watches established. OPEN mail.roessner-net.de.pem ACCESS mail.roessner-net.de.pem CLOSE_NOWRITE:CLOSE mail.roessner-net.de.pem OPEN mail.roessner-net.de.key.pem ACCESS mail.roessner-net.de.key.pem CLOSE_NOWRITE:CLOSE mail.roessner-net.de.key.pem OPEN SSL123_CA_Bundle.pem ACCESS SSL123_CA_Bundle.pem CLOSE_NOWRITE:CLOSE SSL123_CA_Bundle.pem OPEN mail.roessner-net.de.pem ACCESS mail.roessner-net.de.pem ACCESS mail.roessner-net.de.pem ACCESS mail.roessner-net.de.pem ACCESS mail.roessner-net.de.pem ACCESS mail.roessner-net.de.pem CLOSE_NOWRITE:CLOSE mail.roessner-net.de.pem OPEN mail.roessner-net.de.key.pem ACCESS mail.roessner-net.de.key.pem ACCESS mail.roessner-net.de.key.pem CLOSE_NOWRITE:CLOSE mail.roessner-net.de.key.pem OPEN SSL123_CA_Bundle.pem ACCESS SSL123_CA_Bundle.pem ACCESS SSL123_CA_Bundle.pem ACCESS SSL123_CA_Bundle.pem ACCESS SSL123_CA_Bundle.pem CLOSE_NOWRITE:CLOSE SSL123_CA_Bundle.pem OPEN ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt CLOSE_NOWRITE:CLOSE ca-certificates.crt OPEN mx0.roessner-net.de.pem ACCESS mx0.roessner-net.de.pem CLOSE_NOWRITE:CLOSE mx0.roessner-net.de.pem OPEN openssl.cnf ACCESS openssl.cnf ACCESS openssl.cnf ACCESS openssl.cnf CLOSE_NOWRITE:CLOSE openssl.cnf OPEN openssl.cnf ACCESS openssl.cnf ACCESS openssl.cnf ACCESS openssl.cnf CLOSE_NOWRITE:CLOSE openssl.cnf ------------------------------------------------------- I can not find any line talking about mx0.roessner-net.de.key.pem. The file exists and has proper permissions: ------------------------------------------------------- l /etc/ssl/private/ total 16 drwxr-s---+ 2 root ssl-cert 4096 Jan 12 19:29 ./ drwxr-xr-x 8 root root 4096 Jan 13 15:26 ../ -rw-r--r-- 1 root root 0 Dec 10 18:14 .keep_dev-libs_openssl-0 -r--r----- 1 root ssl-cert 1679 Jan 12 17:23 mail.roessner-net.de.key.pem -r--r-----+ 1 root ssl-cert 887 Jan 12 17:14 mx0.roessner-net.de.key.pem getfacl /etc/ssl/private/ /etc/ssl/private/mx0.roessner-net.de.key.pem getfacl: Removing leading '/' from absolute path names # file: etc/ssl/private/ # owner: root # group: ssl-cert # flags: -s- user::rwx user:amavis:r-x group::--- mask::r-x other::--- # file: etc/ssl/private/mx0.roessner-net.de.key.pem # owner: root # group: ssl-cert user::r-- user:amavis:r-x #effective:r-- group::r-- mask::r-- other::--- ------------------------------------------------------- Here is my doveconf -n: ------------------------------------------------------- # 2.1.13: /etc/dovecot/dovecot.conf # OS: Linux 3.7.0-hardened x86_64 Gentoo Base System release 2.1 auth_debug = yes auth_master_user_separator = * auth_mechanisms = plain login cram-md5 digest-md5 ntlm auth_verbose = yes hostname = mail.roessner-net.de lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_access_groups = vmail mail_attachment_dir = /var/mail/virtual/copymail/attachments mail_debug = yes mail_gid = vmail mail_location = mdbox:~/mdbox mail_plugins = autocreate quota acl fts fts_solr zlib mail_privileged_group = mail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mdbox_rotate_size = 128 M namespace { list = children location = mdbox:%%h/mdbox prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox "Deleted Messages" { special_use = \Trash } mailbox Drafts { special_use = \Drafts } mailbox Junk-E-Mail { special_use = \Junk } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } mailbox junkmail { special_use = \Junk } prefix = separator = / type = private } passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = file:/var/mail/virtual/shared-mailboxes.db autocreate = Trash autocreate2 = Sent autocreate3 = Drafts autocreate4 = junkmail autosubscribe = Trash autosubscribe2 = Sent autosubscribe3 = Drafts autosubscribe4 = junkmail fts = solr fts_solr = break-imap-search url=http://localhost:8080/solr/ quota = dict:User quota::file:%h/mdbox/dovecot-quota quota_rule = *:storage=300M:messages=20000 quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve zlib_save = gz zlib_save_level = 6 } protocols = imap pop3 lmtp sieve service auth-worker { extra_groups = ssl-cert unix_listener auth-worker { mode = 0600 user = vmail } user = vmail } service auth { extra_groups = ssl-cert unix_listener auth-userdb { mode = 0600 user = vmail } user = vmail } service dict { unix_listener dict { mode = 0600 user = vmail } } service lmtp { unix_listener /var/spool/postfix/private/lmtp-dovecot { group = postfix mode = 0666 user = postfix } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } ssl_ca = </etc/ssl/certs/SSL123_CA_Bundle.pem ssl_cert = </etc/ssl/certs/mail.roessner-net.de.pem ssl_key = </etc/ssl/private/mail.roessner-net.de.key.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes verbose_ssl = yes protocol lmtp { mail_plugins = autocreate quota acl fts fts_solr zlib sieve } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags mail_max_userip_connections = 50 mail_plugins = autocreate quota acl fts fts_solr zlib imap_quota imap_acl imap_zlib } ------------------------------------------------------- LDAP looks like this: ------------------------------------------------------- uris = ldap://db.roessner-net.de/ ldap://roessner1.roessner-net.de/ sasl_bind = yes sasl_mech = EXTERNAL tls = yes tls_ca_cert_file = /etc/ssl/certs/ca-certificates.crt tls_cert_file = /etc/ssl/certs/mx0.roessner-net.de.pem tls_key_file = /etc/ssl/private/mx0.roessner-net.de.key.pem tls_require_cert = hard debug_level = 7 base = ou=people,ou=it,dc=roessner-net,dc=de user_attrs = rnsMSQuota=quota_rule=*:storage=%$,rnsMSMailboxHome=home user_filter = (&(objectClass=rnsMSDovecotAccount)(|(rnsMSRecipientAddress=%u)(uniqueIdentifier=%u))) pass_attrs = rnsMSDeliverToAddress=user,userPassword=password pass_filter = (&(objectClass=rnsMSDovecotAccount)(|(rnsMSRecipientAddress=%u)(uniqueIdentifier=%u))(rnsMSEnableDovecot=TRUE)) iterate_attrs = rnsMSDovecotUser=user iterate_filter = (objectClass=rnsMSDovecotAccount) default_pass_scheme = PLAIN ------------------------------------------------------- Some portage information ------------------------------------------------------- [ebuild R ] net-nds/openldap-2.4.30 USE="berkdb crypt ipv6 minimal sasl ssl syslog tcpd -cxx -debug -experimental -gnutls -icu -iodbc -kerberos -odbc -overlays -perl -samba (-selinux) -slp -smbkrb5passwd" 0 kB [ebuild R ] dev-libs/cyrus-sasl-2.1.25-r3:2 USE="berkdb gdbm ldapdb openldap pam ssl urandom -authdaemond -java -kerberos -mysql -postgres -sample -sqlite -srp -static-libs" 0 kB [ebuild R ~] net-mail/dovecot-2.1.13::croessner USE="bzip2 caps imapc ipv6 ldap maildir managesieve mbox mdbox pam pop3c sdbox sieve solr sqlite ssl suid zlib -cydir -doc -kerberos -lucene -mysql -postgres (-selinux) -static-libs -vpopmail" 0 kB ------------------------------------------------------- As you can see, I have spent some time on this without luck and currently I have no idea, what the problem is. Any ideas on that? Thanks in advance -Christian Rößner -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Joerg Heidrich

4 6

[Dovecot] configuration still not working
by Averlon 12 Jan '13

12 Jan '13

Hi, I would very much appreciate some help since I get one step ahead and two backwardswith my installation. I am using usernames not (not) in the form of user(a)domain.tld. Simply a string. The error I get. +++ Jan 12 08:36:31 f42252se dovecot: pop3(avadmin(a)av.loc): Error: user avadmin(a)av.loc: Initialization failed: Initializing mail s?lo c ?torage from mail_location setting failed: Ambiguous mail location setting, don't know what to do with it: /home/vmail/avadmin/? Ja?Maildir/ (try prefixing it with mbox: or maildir:) ?id )=?Jan 12 08:36:31 f42252se dovecot: pop3(avadmin(a)av.loc): Error: Invalid user settings. Refer to server log for more information? Ja?. +++ I guess it must have to do something with permissions. Butwhere and which. My config: +++ # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-35-generic x86_64 Ubuntu 12.04.1 LTS auth_debug = yes auth_mechanisms = plain login cram-md5 auth_username_format = %Lu hostname = mail.av.loc mail_gid = vmail mail_location = maildir:~/Maildir mail_privileged_group = vmail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0600 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem syslog_facility = avdove userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lda { sendmail_path = /usr/sbin/sendmail } +++ Please give me ahint! -- Signatur Averlon info Mit freundlichen Grüßen / Kind Regards Karl-Heinz Fischbach

2 2

[Dovecot] dovecot and cacti (snmp ?)
by mancyborg＠gmail.com 10 Jan '13

10 Jan '13

Hi All, I've put online a postfix+dovecot+mysql+roundcube server that will grow till serving around 1500 accounts. I've installed the usual cacti graphs, plus the beautiful percona suite for mysql's cacti plus some graphs for iops and iostat. I was lurking around for the best solution to graph dovecot usage, the most detailed possible, in order to prevent and foresee problems. I'm finding sparse results, I'm not sure which one is the most current / complete. Do you have any suggestions ? Thank you very much for supporting, regards and have a nice day, Mike

2 1

[Dovecot] unknown users
by Averlon 10 Jan '13

10 Jan '13

Hi, can anyone tell me where these "unknown users" come from. As far as I see the fact, dovecot is asked by postfix to look for the password of the recipient-user (why ever). +++ Jan 7 19:43:09 f42252se postfix/smtpd[14625]: initializing the server-side TLS engine Jan 7 19:43:09 f42252se postfix/tlsmgr[14627]: open smtpd TLS cache btree:/var/lib/postfix/smtpd_scache Jan 7 19:43:09 f42252se postfix/tlsmgr[14627]: tlsmgr_cache_run_event: start TLS smtpd session cache cleanup Jan 7 19:43:09 f42252se postfix/smtpd[14625]: connect from f42252ud.averlon.loc[192.168.110.165] Jan 7 19:43:09 f42252se postfix/smtpd[14625]: setting up TLS connection from f42252ud.averlon.loc[192.168.110.165] Jan 7 19:43:09 f42252se postfix/smtpd[14625]: f42252ud.averlon.loc[192.168.110.165]: TLS cipher list "aNULL:-aNULL:ALL:+RC4:@STRENGTH" Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:before/accept initialization Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 read client hello A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write server hello A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write certificate A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write key exchange A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write server done A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 flush data Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 read client key exchange A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 read finished A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write session ticket A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write change cipher spec A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write finished A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 flush data Jan 7 19:43:09 f42252se postfix/smtpd[14625]: Anonymous TLS connection established from f42252ud.averlon.loc[192.168.110.165]: TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits) Jan 7 19:43:09 f42252se dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Jan 7 19:43:09 f42252se dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libauthdb_ldap.so Jan 7 19:43:09 f42252se dovecot: auth: Debug: auth client connected (pid=14625) Jan 7 19:43:09 f42252se dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=smtp#011nologin#011lip=192.168.110.150#011rip=192.168.110.165#011secured#011resp=<hidden> Jan 7 19:43:09 f42252se dovecot: auth: Debug: ldap(avadmin,192.168.110.165): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=avadmin)) fields=uid,userPassword Jan 7 19:43:09 f42252se dovecot: auth: Debug: ldap(avadmin,192.168.110.165): result: uid(user)=avadmin userPassword(password)=<hidden> Jan 7 19:43:09 f42252se dovecot: auth: Debug: client out: OK#0111#011user=avadmin Jan 7 19:43:09 f42252se postfix/smtpd[14625]: 9A86C30007C: client=f42252ud.averlon.loc[192.168.110.165], sasl_method=PLAIN, sasl_username=avadmin Jan 7 19:43:09 f42252se postfix/cleanup[14631]: 9A86C30007C: message-id=<50EB173B.5090109(a)av.loc> Jan 7 19:43:09 f42252se postfix/qmgr[14561]: 9A86C30007C: from=<avadmin(a)av.loc>, size=1227, nrcpt=1 (queue active) Jan 7 19:43:09 f42252se postfix/smtpd[14625]: disconnect from f42252ud.averlon.loc[192.168.110.165] Jan 7 19:43:11 f42252se postfix/pickup[14560]: BE0AC30007F: uid=5002 from=<avadmin(a)av.loc> Jan 7 19:43:11 f42252se postfix/cleanup[14631]: BE0AC30007F: message-id=<50EB173B.5090109(a)av.loc> Jan 7 19:43:11 f42252se postfix/qmgr[14561]: BE0AC30007F: from=<avadmin(a)av.loc>, size=1534, nrcpt=1 (queue active) Jan 7 19:43:11 f42252se postfix/pipe[14632]: 9A86C30007C: to=<redmine(a)averlon.loc>, relay=spamassassin, delay=2.2, delays=0.05/0/0/2.1, dsn=2.0.0, status=sent (delivered via spamassassin service) Jan 7 19:43:11 f42252se postfix/qmgr[14561]: 9A86C30007C: removed Jan 7 19:43:11 f42252se dovecot: auth: Debug: master in: USER#0111#011redmine(a)averlon.loc#011service=lda Jan 7 19:43:11 f42252se dovecot: auth: Debug: ldap(redmine(a)averlon.loc): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=redmine(a)averlon.loc)) fields=uid,userPassword Jan 7 19:43:11 f42252se dovecot: auth: ldap(redmine(a)averlon.loc): *unknown user* Jan 7 19:43:11 f42252se dovecot: auth: Debug: master out: NOTFOUND#0111 Jan 7 19:43:11 f42252se postfix/pipe[14637]: BE0AC30007F: to=<redmine(a)averlon.loc>, relay=dovecot, delay=0.02, delays=0/0/0/0.01, dsn=5.1.1, status=bounced (user unknown) Jan 7 19:43:11 f42252se postfix/cleanup[14631]: C279030007E: message-id=<20130107184311.C279030007E(a)mail.av.loc> Jan 7 19:43:11 f42252se postfix/qmgr[14561]: C279030007E: from=<>, size=3182, nrcpt=1 (queue active) Jan 7 19:43:11 f42252se postfix/bounce[14639]: BE0AC30007F: sender non-delivery notification: C279030007E Jan 7 19:43:11 f42252se postfix/qmgr[14561]: BE0AC30007F: removed Jan 7 19:43:11 f42252se dovecot: auth: Debug: master in: USER#0111#011avadmin(a)av.loc#011service=lda Jan 7 19:43:11 f42252se dovecot: auth: Debug: ldap(avadmin(a)av.loc): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=avadmin(a)av.loc)) fields=uid,userPassword Jan 7 19:43:11 f42252se dovecot: auth: ldap(avadmin(a)av.loc): *unknown user* Jan 7 19:43:11 f42252se dovecot: auth: Debug: master out: NOTFOUND#0111 Jan 7 19:43:11 f42252se postfix/pipe[14637]: C279030007E: to=<avadmin(a)av.loc>, relay=dovecot, delay=0.01, delays=0/0/0/0.01, dsn=5.1.1, status=bounced (user unknown) Jan 7 19:43:11 f42252se postfix/qmgr[14561]: C279030007E: removed Jan 7 19:43:21 f42252se dovecot: auth: Debug: auth client connected (pid=14644) Jan 7 19:43:21 f42252se dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=pop3#011secured#011lip=192.168.110.150#011rip=192.168.110.165#011lport=995#011rport=43070 Jan 7 19:43:21 f42252se dovecot: auth: Debug: client out: CONT#0111#011 Jan 7 19:43:21 f42252se dovecot: auth: Debug: client in: CONT<hidden> Jan 7 19:43:21 f42252se dovecot: auth: Debug: ldap(qx42252006,192.168.110.165): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=qx42252006)) fields=uid,userPassword Jan 7 19:43:21 f42252se dovecot: auth: Debug: ldap(qx42252006,192.168.110.165): result: uid(user)=qx42252006 userPassword(password)=<hidden> Jan 7 19:43:21 f42252se dovecot: auth: Debug: client out: OK#0111#011user=qx42252006 Jan 7 19:43:21 f42252se dovecot: auth: Debug: master in: REQUEST#0113145334785#01114644#0111#0115f6241afb0ff05d6b901a9a1edd65840 Jan 7 19:43:21 f42252se dovecot: auth: Debug: master out: USER#0113145334785#011qx42252006#011uid=5000#011gid=5000#011home=/home/vmail/qx42252006 Jan 7 19:43:21 f42252se dovecot: pop3-login: Login: user=<qx42252006>, method=PLAIN, rip=192.168.110.165, lip=192.168.110.150, mpid=14646, TLS Jan 7 19:43:21 f42252se dovecot: pop3(qx42252006): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 7 19:43:27 f42252se dovecot: auth: Debug: auth client connected (pid=14649) Jan 7 19:43:28 f42252se dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=pop3#011secured#011lip=192.168.110.150#011rip=192.168.110.165#011lport=995#011rport=43071 Jan 7 19:43:28 f42252se dovecot: auth: Debug: client out: CONT#0111#011 Jan 7 19:43:28 f42252se dovecot: auth: Debug: client in: CONT<hidden> Jan 7 19:43:28 f42252se dovecot: auth: Debug: ldap(avadmin,192.168.110.165): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=avadmin)) fields=uid,userPassword Jan 7 19:43:28 f42252se dovecot: auth: Debug: ldap(avadmin,192.168.110.165): result: uid(user)=avadmin userPassword(password)=<hidden> Jan 7 19:43:28 f42252se dovecot: auth: Debug: client out: OK#0111#011user=avadmin Jan 7 19:43:28 f42252se dovecot: auth: Debug: master in: REQUEST#0113661234177#01114649#0111#011abd1ac9fcd3ced2d9b01e090f3703ac0 Jan 7 19:43:28 f42252se dovecot: auth: Debug: master out: USER#0113661234177#011avadmin#011uid=5000#011gid=5000#011home=/home/vmail/avadmin Jan 7 19:43:28 f42252se dovecot: pop3-login: Login: user=<avadmin>, method=PLAIN, rip=192.168.110.165, lip=192.168.110.150, mpid=14650, TLS Jan 7 19:43:28 f42252se dovecot: pop3(avadmin): Disconnected: Logged out top=0/0, retr=0/0, del=0/2, size=4872 Jan 7 19:44:31 f42252se dovecot: auth: Debug: auth client connected (pid=14694) Jan 7 19:44:31 f42252se dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=pop3#011secured#011lip=192.168.110.150#011rip=192.168.110.165#011lport=995#011rport=43073 Jan 7 19:44:31 f42252se dovecot: auth: Debug: client out: CONT#0111#011 Jan 7 19:44:31 f42252se dovecot: auth: Debug: client in: CONT<hidden> Jan 7 19:44:31 f42252se dovecot: auth: Debug: ldap(qx42252008,192.168.110.165): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=qx42252008)) fields=uid,userPassword Jan 7 19:44:31 f42252se dovecot: auth: Debug: ldap(qx42252008,192.168.110.165): result: uid(user)=qx42252008 userPassword(password)=<hidden> Jan 7 19:44:31 f42252se dovecot: auth: Debug: client out: OK#0111#011user=qx42252008 Jan 7 19:44:31 f42252se dovecot: auth: Debug: master in: REQUEST#011251920385#01114694#0111#011db7eed58edf0149fd176446b57c20a33 Jan 7 19:44:31 f42252se dovecot: auth: Debug: master out: USER#011251920385#011qx42252008#011uid=5000#011gid=5000#011home=/home/vmail/qx42252008 Jan 7 19:44:31 f42252se dovecot: pop3-login: Login: user=<qx42252008>, method=PLAIN, rip=192.168.110.165, lip=192.168.110.150, mpid=14698, TLS +++ Tell me what you need as additional info. Thanks for help -- Signatur Averlon info Mit freundlichen Grüßen / Kind Regards Karl-Heinz Fischbach Skype: khfischbach jabber: averlon(a)jabber.org Blog: averlon.posterous.com Signatur: Diese e-mail ist unter Umständen signiert. Die Signatur entspricht dem Deutschen Signaturgesetz und entsprechenden europäischen Regelungen. Important Note: This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information. If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of it is strictly prohibited. Please inform us immediately and destroy the original transmittal.

5 9

[Dovecot] problems with sieve
by Carsten Laun-De Lellis 10 Jan '13

10 Jan '13

Hi all I am running a simple mail server on ubuntu 12.04LTS with postfix 2.9.3 and dovecot 2.1.10. Since this morning sieve doesn't work anymore. I changed the sieve script forth and back but sieve is not working. I also replaced the sieve file with the backup, but no success. But I can't any error messages in the log files indicating any problem with sieve. The only thing I found is: Jan 10 00:03:26 vmd187 dovecot: lda(carsten.delellis(a)delellis.net): sieve: msgid=<12155505.mmailer335539222(a)fritz.box>: stored mail into mailbox 'Fritz!Box' -- with working sieve Jan 10 13:52:29 vmd187 dovecot: lda(carsten.delellis(a)delellis.net): msgid=<1898328495.2554803.1357821905269.JavaMail.app(a)ela4-app2316.prod>: saved mail to INBOX -- with sieve not working As you can see that after dovecot: lda(carsten.delellis(a)delellis.net): the sieve tag is missing. I have also attached my settings from 90-sieve.conf from dovecot configuration. ## ## Settings for the Sieve interpreter ## # Do not forget to enable the Sieve plugin in 15-lda.conf and 20-lmtp.conf # by adding it to the respective mail_plugins= settings. plugin { # The path to the user's main active script. # sieve = ~/.dovecot.sieve sieve = /vmail/%d/%n/dovecot.sieve # A path to a global sieve script file, which gets executed ONLY # if user's private Sieve script doesn't exist. Be sure to # pre-compile this script manually using the sievec command line # tool. sieve_global_path = /var/lib/dovecot/sieve/default.sieve # Directory for :personal include scripts for the include extension. # sieve_dir = ~/sieve sieve_dir = /vmail/%d/%n # Directory for :global include scripts for the include extension. sieve_global_dir = /var/lib/dovecot/sieve # Which Sieve language extensions are available to users. By default, # all supported extensions are available, except for deprecated # extensions or those that are still under development. Some system # administrators may want to disable certain Sieve extensions or # enable those that are not available by default. This setting can # use '+' and '-' to specify differences relative to the default. # For example `sieve_extensions = +imapflags' will enable the # deprecated imapflags extension in addition to all extensions # enabled by default. #sieve_extensions = +notify +imapflags # The separator that is expected between the :user and :detail # address parts introduced by the subaddress extension. This may # also be a sequence of characters (e.g. '--'). The current # implementation looks for the separator from the left of the # localpart and uses the first one encountered. The :user part is # left of the separator and the :detail part is right. This setting # is also used by Dovecot's LMTP service. recipient_delimiter = + # The maximum size of a Sieve script. The compiler will refuse to # compile any script larger than this limit. #sieve_max_script_size = 1M # The maximum number of actions that can be performed during a single # script execution. #sieve_max_actions = 32 # The maximum number of redirect actions that can be performed during # a single script execution. #sieve_max_redirects = 4 # The maximum number of personal Sieve scripts a single user can have. # (Currently only relevant for ManageSieve) #sieve_quota_max_scripts = 0 # The maximum amount of disk storage a single user's scripts may occupy. # (Currently only relevant for ManageSieve) #sieve_quota_max_storage = 0 } And also you can see that sieve is listening on port 4190 and managesieve on 2000 > lsof -i :4190 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME dovecot 2503 root 15u IPv4 14101 0t0 TCP *:sieve (LISTEN) dovecot 2503 root 16u IPv6 14102 0t0 TCP *:sieve (LISTEN) lsof -i :2000 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME dovecot 2503 root 17u IPv4 14103 0t0 TCP *:cisco-sccp (LISTEN) dovecot 2503 root 18u IPv6 14104 0t0 TCP *:cisco-sccp (LISTEN) I would appreciate any hints. Regards, Carsten Laun-De Lellis Hauptstrasse 13 D-67705 Trippstadt Phone: +49 6306 992140 Fax: +49 6306 992142 Mobile: +49 151 27530865 email: carsten.delellis(a)delellis.net http://www.linkedin.com/in/carstenlaundelellis

2 1

[Dovecot] Confused about "Authentication Mechanism" and "Password Schemes"
by Thomas Pries 10 Jan '13

10 Jan '13

Hi, I am currently setting up a Mailserver and decided to use Dovecot as IMAP/POP3-Server. I read the wiki an thought about how to transmit and store the passwords (I want to use a MySQL-database). I want to use encrypted transmission and encrypted storage. The wiki says: "If you want to use only one non-plaintext mechanism, you can store the passwords using the mechanism's own password scheme. " Ok, one secure mechanism is acceptable in my scenario and the wiki gives a list of supported authentication mechanisms and a list of supported password schemes. But I am missing the relation between the two lists, which mechanism expects which storage scheme? Did I overlooked any easy answer (other then "read the RFCs"). Best Regards Thomas

2 1

[Dovecot] v2.2.beta1 released
by Timo Sirainen 10 Jan '13

10 Jan '13

http://dovecot.org/releases/2.2/beta/dovecot-2.2.beta1.tar.gz http://dovecot.org/releases/2.2/beta/dovecot-2.2.beta1.tar.gz.sig Lots of fixes since 2.2.alpha1, especially related to dsync. Also dsync now supports syncing private message flags when INDEXPVT is used. Here's again the list of all the major changes in v2.2: * When creating home directories, the permissions are copied from the parent directory if it has setgid-bit set. For full details, see http://wiki2.dovecot.org/SharedMailboxes/Permissions * "doveadm auth" command was renamed to "doveadm auth test" * IMAP: ID command now advertises server name as Dovecot by default. It was already trivial to guess this from command replies. * dovecot.index.cache files can be safely accessed only by v2.1.11+. Older versions may think they're corrupted and delete them. + Implemented IMAP MOVE and BINARY extensions + Implemented IMAP CATENATE, URLAUTH and URLAUTH=BINARY extensions (by Stephan Bosch). + Implemented IMAP NOTIFY extension. Requires mailbox_list_index=yes to be enabled. + Redesigned and rewritten dsync. The new design makes the syncing faster, more reliable and more featureful. The new dsync protocol isn't backwards compatible with old dsync versions (but is designed to be forwards compatible with future versions). + All mailbox formats now support per-user message flags for shared mailboxes by using a private index. It can be enabled by adding :INDEXPVT=<path> to mail location. This should be used instead of :INDEX also for Maildir/mbox to improve performance. + Improved mailbox list indexes. They should be usable now, although still disabled by default. + Added LAYOUT=index. The mailbox directories are created using their GUIDs in the filesystem, while the actual GUID <-> name mapping exists only in the index. + LMTP proxy: Implemented XCLIENT extension for passing remote IP address through proxy.

2 4

[Dovecot] Mark Crispin - RIP
by Robert Moskowitz 09 Jan '13

09 Jan '13

'Father' of the IMAP protocol. Died Dec 28. http://en.wikipedia.org/wiki/Mark_Crispin Had a TOPS-20 in his basement that did a great job of keeping the house warm in the cool months (I remember one BAR bof where he extoled the benefits of this form of home heating).

3 2

[Dovecot] Squat FTS plugin not kicking in
by Frerich Raabe 09 Jan '13

09 Jan '13

Hi, I'm running Dovecot 2.1.12 on FreeBSD. I configured Dovecot to use the Squat plugin to provide faster full-text searches. The output of 'dovecot -n' is attached to this mail. However, I just noticed that this plugin doesn't seem to kick in. A raw telnet session seems to confirm this: [..] . SEARCH BODY abcdefg * OK Searched 57% of the mailbox, ETA 0:06 * SEARCH 3425 6254 14710 . OK Search completed (17.262 secs). . SEARCH BODY abcdefg * OK Searched 63% of the mailbox, ETA 0:05 * SEARCH 3425 6254 14710 . OK Search completed (18.651 secs). [..] A SEARCH BODY command doesn't create the dovecot.index.search or dovecot.index.search.uids files mentioned on http://wiki2.dovecot.org/Plugins/FTS/Squat . Also, two subsequent SEARCH BODY invocations don't seem to be any different as far as search time goes. I checked the logs but couldn't see anything which is related, except: Jan 8 21:36:10 imap2 dovecot: indexer-worker(frerich): Indexed 0 messages in INBOX Does anybody have some idea how to get more logging out of index-worker, or whether there's a flaw in my configuration? -- Frerich Raabe - raabe(a)froglogic.com www.froglogic.com - Multi-Platform GUI Testing

1 1