- dovecot - dovecot.org

[Dovecot] INBOX permissios woes
by Josep L. Guallar-Esteve 29 Oct '12

29 Oct '12

Hello, I have a dovecot system that uses winbind authentication against Active Directory. I set it up by following the directions in the wiki. That works great. When a new user receives an email, the inbox is created with permissions 600 (rw- --- --) and ownership user:mail , even though I did chmod 02770 /var/spool/mail. And then, when dovecot tries to access the inbox, it throws the error: Oct 29 13:47:59 imap-login: Info: Login: user=<user1>, method=PLAIN, rip=10.0.0.6, lip=10.0.0.26, mpid=29047, secured Oct 29 13:47:59 imap(user1): Error: stat(/var/mail/user1) failed: Permission denied Oct 29 13:47:59 imap(user1): Error: stat(/var/mail/user1) failed: Permission denied Accessing users' Sent, Trash, creating new folders.... all that works fine. I've been looking at the documentation, reading the wiki, searching on google, asking on IRC. If you have any hint or documentation that I've must have overlooked, please let me know. Here's my dovecot information: [josep@testmail ]$ dovecot --version 2.0.9 [josep@testmail ]$ dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.11.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) auth_mechanisms = plain ntlm login auth_use_winbind = yes auth_username_format = %Lu base_dir = /var/run/dovecot/ debug_log_path = /var/log/dovecot-debug.log listen = * log_path = /var/log/dovecot.log mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_privileged_group = mail mbox_write_locks = fcntl passdb { driver = pam } protocols = imap service auth { unix_listener auth-userdb { mode = 0600 } } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = uid=503 gid=503 home=/home/vmail/%u driver = static } userdb { driver = passwd } [josep@testmail ]$ Thank you in advance, Josep This transmission is intended for the use of the entity or individual to which or whom it is addressed. The transmission or any documents accompanying the transmission may contain confidential information. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or action taken in reliance on the contents of the transmission or the documents is strictly prohibited. If you have received this confidential transmission in error, please destroy it and any accompanying documents and notify the sender immediately. Thank you.

1 0

[Dovecot] [dovecot} Invalid mailbox name.
by Alexander Weber 29 Oct '12

29 Oct '12

Hi, I've got some trouble here.. i created some sieve rules, but the debug log says that there is a invalid mailbox name error: msgid=<*>: failed to store into mailbox '/home/shared/.automail.Bugtracker/': Invalid mailbox name. ~/.dovecot.sieve if address :is "to" "mantis-admin@<*>" { fileinto "/home/shared/.automail.Bugtracker/"; } here's my doveconf -n output # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-32-generic x86_64 Ubuntu 12.04.1 LTS base_dir = /var/run/dovecot/ disable_plaintext_auth = no hostname = * mail_debug = yes mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { list = yes location = maildir:/home/shared:CONTROL=~/.Maildir/control/Shared:INDEX=~/.Maildir/index/Shared prefix = shared/ separator = / subscriptions = yes type = public } namespace { inbox = yes location = prefix = separator = / type = private } passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve zlib_save = gz zlib_save_level = 6 } postmaster_address = postmaster@* protocols = imap sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imaps { port = 993 ssl = yes } } ssl_ca = </etc/ssl/* ssl_cert = </etc/ssl/* ssl_cipher_list = HIGH:MEDIUM:+TLSv1:!SSLv2:+SSLv3 ssl_key = </etc/ssl/* userdb { driver = passwd } userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } protocol imaps { imap_client_workarounds = delay-newmail mail_max_userip_connections = 10 } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } protocol imap { mail_plugins = " zlib, acl, imap_zlib" } any idea? Mit freundlichen Gruessen / best regards papaya Software GmbH i.A. Alexander Weber -- papaya Software GmbH | Im MediaPark 5 | 50670 Koeln | Germany Tel./Ph.: +49-221-5743-8070 | Fax: +49-221-5743-8099 mailto:weber@papaya-cms.com | http://www.papaya-cms.com/ -- Geschaeftsfuehrer: Andreas Jacobi, André Schnitzler, Daniel Schäfer Sitz& Registergericht: Koeln | HRB 60030 | USt.-Id.-Nr.: DE 255642963 --

2 4

[Dovecot] Overlapping userdb/passdbs
by James Devine 29 Oct '12

29 Oct '12

I have an ldap server for which each entry includes the email address and the username portion of the email address for authentication. Authentication works by username if the username is unique among all the entries. I need to now add some users which must authenticate even if the username is not unique. I figured one way to do this would be to add a second user/pass db which puts further restrictions on the ldap query to make it unique for those users. This doesn't seem to work however as if the user is found in the first ldap query but the password does not match it does not try the second. I would use the password as part of the query but this setup requires me to allow the client to hash the password. Is there a way to do this? Or maybe I am approaching the problem wrong.

2 1

[Dovecot] dovecot lda - Permission denied
by tony.blue.mailinglist＠gmx.de 29 Oct '12

29 Oct '12

Hallo, please excuse my bad english. But I am not a native speaker. I changed my cyrus to dovecot (alltogehter: fetchmail - procmail - exim4 - dovecot). But I get (I think from /usr/lib/dovecot/deliver) the following error-message in my syslog: ... Oct 25 23:37:13 gustav dovecot: lda: Error: userdb lookup: connect(/var/run/dovecot/auth-userdb) failed: Permission denied (euid=501(andy) egid=100(users) missing +w perm: /var/run/dovecot/auth-userdb, dir owned by 0:0 mode=0755) ... Oct 25 23:37:14 gustav dovecot: lda: Error: userdb lookup: connect(/var/run/dovecot/auth-userdb) failed: Permission denied (euid=500(tony) egid=100(users) missing +w perm: /var/run/dovecot/auth-userdb, dir owned by 0:0 mode=0755) ... Dovecot is installed as !include auth-passwdfile.conf.ext. For all users there is a entry in der /etc/dovecot/users. Usaly the user rights are set to 600. I tryed 755, but I get the same errormessage. ... service auth { unix_listener auth-userdb { mode = 0755 user = mailstore group = mailstore } ... If I try "ls /var/run/dovecot/auth-userdb -la" - i get: srwxr-xr-x 1 mailstore mailstore 0 Okt 25 23:36 /var/run/dovecot/auth-userdb How can I solve this problem? Tony

2 1

[Dovecot] Can Dovecot authenticate against an external email server?
by Marc Perkel 29 Oct '12

29 Oct '12

Just wondering if anyone has done this. I have a spam filtering service where I am now storing spam for users I filter for. It's a filter and forward service so I don't control the recipient's email server. What I would like to do somehow is have the user enter their email address and password and then look up their POP/IMAP server from a database and try to authenticate from it. If sucessful then the user will be able to access their stored spam using Dovecot and Squirrelmail. Any suggestions? Thanks in advance

2 1

[Dovecot] Dovecot sends BYE while fetching X-GM-MSGID
by Loshkovskyi Andrii 29 Oct '12

29 Oct '12

Hello everyone, While using the following set of commands, I am having the error as below: FETCH 7 (X-GM-MSGID) A15 FETCH 7 (X-GM-MSGID) A15 BAD Error in IMAP command FETCH: Unknown parameter X-GM-MSGID Can I somehow disable such errors so that Dovecot won't send BYE on X-GM-MSGID but just proceed with following emails? -- My configuration is below: [root@server ~]# cat /etc/issue CentOS release 6.3 (Final) [root@server ~]# dovecot --version 2.0.9 [root@server ~]# dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-220.17.1.el6.centos.plus.i686 i686 CentOS release 6.3 (Final) ext4 auth_debug = yes auth_mechanisms = plain login cram-md5 auth_verbose = yes default_client_limit = 10000 default_process_limit = 300 disable_plaintext_auth = no listen = * mail_location = maildir:/var/spool/mail/%d/%n/Maildir mbox_write_locks = fcntl passdb { args = scheme=SSHA512 username_format=%u /etc/dovecot/users driver = passwd-file } service imap-login { service_count = 0 vsz_limit = 128 M } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } Thank you for any help.

2 1

[Dovecot] Auth caching and password changes
by Angel L. Mateo 29 Oct '12

29 Oct '12

Hello, In my system I have configured auth caching. The problem I have is that whenever a user changes his password, he/she can't login to dovecot after a while and the scenarios described at http://wiki2.dovecot.org/Authentication/Caching are not applied. I have tried also with "doveadm auth cache flush <login>", but it didn't work. He also could to login again if he waits for a time or if I run "doveadm auth cache flush" in the server, flushing all auth information from cache. I have attached the log I had when I changed my password (and suffered the problem). I have attached my doveconf -n too. -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

2 2

[Dovecot] trash plugin not doing it's job
by Jan-Frode Myklebust 29 Oct '12

29 Oct '12

I enabled the trash plugin yesterday, adding "trash" to mail_plugins, and configuring the plugin setting "trash = /etc/dovecot/dovecot-trash.conf.ext". But I still see users with lots of files in INBOX.Trash getting bounced because of quota exceeded: postfix/lmtp[26273]:: C89F490061: to=<XXXXXXXXXXXXX(a)example.no>, relay=loadbalancers.example.net[192.168.42.15]:24, delay=1.2, delays=0.61/0.02/0/0.54, dsn=5.2.2, status=bounced (host loadbalancers.example.net[192.168.42.15] said: 552 5.2.2 <XXXXXXXXXXXXd(a)example.no> Quota exceeded (mailbox for user is full) (in reply to end of DATA command)) dovecot:: lmtp(19730, XXXXXXX(a)example.no) Error: BErxFCyrf1ASTQAAWNPRnw: sieve: msgid=<e33d481dc9d9442fa79f55e45a516c82@BizWizard>: failed to store into mailbox 'INBOX': Quota exceeded (mailbox for user is full) $ sudo doveadm quota get -u XXXXXXXX(a)example.no Quota name Type Value Limit % UserQuota STORAGE 1048559 1048576 99 UserQuota MESSAGE 4487 - 0 Postfix if delivering via LMTP trough dovecot director. Anybody see anything obvious in my config: ------------------------------------------------------------ # 2.0.14: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.26.1.el5 x86_64 Red Hat Enterprise Linux Server release 5.5 (Tikanga) auth_cache_size = 100 M auth_verbose = yes auth_verbose_passwords = sha1 disable_plaintext_auth = no login_trusted_networks = 192.168.0.0/16 109.247.114.192/27 mail_gid = 3000 mail_home = /srv/mailstore/%256LRHu/%Ld/%Ln mail_location = maildir:~/:INDEX=/indexes/%1u/%1.1u/%u mail_max_userip_connections = 20 c = quota zlib trash mail_uid = 3000 maildir_stat_dirs = yes maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mmap_disable = yes namespace { inbox = yes location = prefix = INBOX. separator = . type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { quota = dict:UserQuota::file:%h/dovecot-quota sieve = /sieve/%1Lu/%1.1Lu/%Lu/.dovecot.sieve sieve_before = /etc/dovecot/sieve/dovecot.sieve sieve_dir = /sieve/%1Lu/%1.1Lu/%Lu sieve_max_script_size = 1M trash = /etc/dovecot/dovecot-trash.conf.ext zlib_save = gz zlib_save_level = 6 } postmaster_address = postmaster(a)example.net protocols = imap pop3 lmtp sieve service auth-worker { user = $default_internal_user } service auth { client_limit = 4521 unix_listener auth-userdb { group = mode = 0600 user = atmail } } service imap-login { inet_listener imap { address = * port = 143 } process_min_avail = 4 service_count = 0 vsz_limit = 1 G } service imap-postlogin { executable = script-login /usr/local/sbin/imap-postlogin.sh } service imap { executable = imap imap-postlogin process_limit = 2048 } service lmtp { client_limit = 1 inet_listener lmtp { address = * port = 24 } process_limit = 25 process_min_avail = 10 } service managesieve-login { inet_listener sieve { address = * port = 4190 } service_count = 1 } service pop3-login { inet_listener pop3 { address = * port = 110 } process_min_avail = 4 service_count = 0 vsz_limit = 1 G } service pop3-postlogin { executable = script-login /usr/local/sbin/pop3-postlogin.sh } service pop3 { executable = pop3 pop3-postlogin process_limit = 2048 } ssl = no userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = quota zlib trash sieve } protocol imap { imap_client_workarounds = delay-newmail mail_plugins = quota zlib trash imap_quota } protocol pop3 { mail_plugins = quota zlib trash pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = UID%u-%v } protocol sieve { managesieve_logout_format = bytes=%i/%o } ------------------------------------------------------------ and my trash config: $ cat /etc/dovecot/dovecot-trash.conf.ext # Spam mailbox is emptied before Trash 1 INBOX.Spam # Trash mailbox is emptied before Sent 2 INBOX.Trash Global sieve script: $ cat /etc/dovecot/sieve/dovecot.sieve require ["comparator-i;ascii-numeric","relational","fileinto","mailbox"]; if allof ( not header :matches "x-spam-score" "-*", header :value "ge" :comparator "i;ascii-numeric" "x-spam-score" "10" ) { discard; stop; } elsif allof ( not header :matches "x-spam-score" "-*", header :value "ge" :comparator "i;ascii-numeric" "x-spam-score" "6" ) { fileinto :create "INBOX.Spam"; } -jf

3 3

[Dovecot] Configuring Dovecot & Snarf plugin for the first time
by Jeffrey Ross 29 Oct '12

29 Oct '12

I've been using uw-imap for some time on my linux system and have been running into issues with it so I've decided to move to Dovecote, so far it seems to have solved the issues I've been having however I need/want to move the incoming emails out of /var/spool/mail/{user} in the same (or similar fashion) that uw-imap did, and I found the snarf plugin. However whenever I enable the snarf plugin using the example on the wiki page my email is not loaded and when I remove my configuration for snarf my email re-appears. Based upon what I can tell the snarf plugin is either not loading (but I see it listed in the logs) or simply not working (which is probably because its not configured properly). The system is Fedora 16 (x86_64), the MTA is Exim, and Dovecot is 2.0.21 (version supplied with Fedora). I know I'm making a newbie mistake. Any guidance would be appreciated. Thanks, Jeff dovecot -n provides the following: [root@xyzzy conf.d]# more /tmp/dovecot.changes # 2.0.21: /etc/dovecot/dovecot.conf # OS: Linux 3.4.11-1.fc16.x86_64 x86_64 Fedora release 16 (Verne) mail_debug = yes mail_location = mbox:~/mail:INBOX=~/mbox mail_plugins = " zlib" mbox_write_locks = fcntl namespace default { inbox = yes location = prefix = separator = / } namespace snarf { hidden = yes list = no location = mbox:/run/dovecot/empty:INBOX=/var/spool/mail/%u prefix = /snarf separator = / } passdb { driver = pam } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename snarf = = /snarf/INBOX } service imap-login { inet_listener imap { address = localhost } } service pop3-login { inet_listener pop3 { address = localhost } } ssl_cert = </etc/pki/tls/certs/XYZZY.pem ssl_key = </etc/pki/tls/certs/XYZZY.pem userdb { driver = passwd } protocol imap { mail_plugins = " zlib imap_zlib snarf" } and the logs (in debug) show the following: Oct 20 21:29:45 xyzzy dovecot: imap-login: Login: user=<jeff>, method=PLAIN, rip=98.109.156.118, lip=132.238.254.34, mpid=19627, TLS Oct 20 21:29:45 xyzzy dovecot: imap: Debug: Loading modules from directory: /usr/lib64/dovecot Oct 20 21:29:45 xyzzy dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib05_snarf_plugin.so Oct 20 21:29:45 xyzzy dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib20_zlib_plugin.so Oct 20 21:29:45 xyzzy dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib30_imap_zlib_plugin.so Oct 20 21:29:45 xyzzy dovecot: imap(jeff): Debug: Effective uid=500, gid=500, home=/home/jeff Oct 20 21:29:45 xyzzy dovecot: imap(jeff): Debug: Namespace default: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:~/mail:INBOX=~/mbox Oct 20 21:29:45 xyzzy dovecot: imap(jeff): Debug: fs: root=/home/jeff/mail, index=, control=, inbox=/home/jeff/mbox, alt= Oct 20 21:29:45 xyzzy dovecot: imap(jeff): Debug: Namespace snarf: type=private, prefix=/snarf, sep=/, inbox=no, hidden=yes, list=no, subscriptions=yes location=mbox:/run/dovecot/empty:INBOX=/var/spool/mail/jeff Oct 20 21:29:45 xyzzy dovecot: imap(jeff): Debug: fs: root=/run/dovecot/empty, index=, control=, inbox=/var/spool/mail/jeff, alt= Oct 20 21:29:46 xyzzy dovecot: imap-login: Login: user=<jeff>, method=PLAIN, rip=98.109.156.118, lip=132.238.254.34, mpid=19629, TLS Oct 20 21:29:46 xyzzy dovecot: imap: Debug: Loading modules from directory: /usr/lib64/dovecot Oct 20 21:29:46 xyzzy dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib05_snarf_plugin.so Oct 20 21:29:46 xyzzy dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib20_zlib_plugin.so Oct 20 21:29:46 xyzzy dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib30_imap_zlib_plugin.so Oct 20 21:29:46 xyzzy dovecot: imap(jeff): Debug: Effective uid=500, gid=500, home=/home/jeff Oct 20 21:29:46 xyzzy dovecot: imap(jeff): Debug: Namespace default: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:~/mail:INBOX=~/mbox Oct 20 21:29:46 xyzzy dovecot: imap(jeff): Debug: fs: root=/home/jeff/mail, index=, control=, inbox=/home/jeff/mbox, alt= Oct 20 21:29:46 xyzzy dovecot: imap(jeff): Debug: Namespace snarf: type=private, prefix=/snarf, sep=/, inbox=no, hidden=yes, list=no, subscriptions=yes location=mbox:/run/dovecot/empty:INBOX=/var/spool/mail/jeff Oct 20 21:29:46 xyzzy dovecot: imap(jeff): Debug: fs: root=/run/dovecot/empty, index=, control=, inbox=/var/spool/mail/jeff, alt=

2 1

[Dovecot] LDA without lookup as non-root?
by E.B. 29 Oct '12

29 Oct '12

Hello, I'm having some problems getting LDA to work without userdb lookups and have a few related questions. This system has all users in MySQL, each user with unique UID/GID, no local users at all. Installation is from apt-get. 1) If LDA is invoked without lookups, is it correct to assume that the "service auth" and "service auth-worker" can be completely removed from dovecot master configuration? (I have tried commenting them out and logging into IMAP, which seems to work, not sure if anyone else needs the auth service) 2) If LDA is invoked without lookups, will I be unable to use Dovecot quota plugin? Does it need to have a user lookup to get quota info? (haven't added quota support, need to take this one step at a time) 3) The interesting part -- I am invoking LDA from Maildrop. See: http://thread.gmane.org/gmane.mail.imap.dovecot/65473 So when invoked, Maildrop has already dropped to the destination UID/GID and the needed paths are available in the environment. However, using as many permutations of calling LDA as I can think of (based on http://wiki2.dovecot.org/LDA ), I always get this: (command line usage error. Command output: lda: Fatal: Couldn't lookup our username (uid=2500) ) The UID is correct for the target user. If I add "-d $LOGNAME" to my LDA callout, I get permission denied on the userdb lookup, which I guess is another issue to work out if I want to go with lookups. But right now I am trying not to. Why does LDA seem to try for a lookup even when I follow the wiki instructions how to call it without a lookup? 3.5) Related question, my users have separate homedir and maildir, both paths are looked up by Maildrop. I think I need to call LDA with "HOME=$DEFAULT dovecot-lda -f $FROM". Is this correct?

2 3