- dovecot - dovecot.org

[Dovecot] Dovecot allows creation of folders outside of a user's directory
by Christoph Bußenius 05 Apr '12

05 Apr '12

Hi, in our dovecot 2.0 setup with shared folders, users can make dovecot create directories outside their mail directory. Which is a bit scary imho. The following command: . create inbox.shared.abc123 or even . create "inbox.shared.strange &ANY- characters" -- even though it will fail with a "permission denied" error -- will create a directory like "/mail/users/strange &ANY- characters". That directory will only contain a subdirectory "Maildir" and therein dovecot-acl-list. I think basically the reason for this behaviour is that Dovecot checks whether the directory has enough ACLs for the user to access it, and auto-creates the directory in the process. Is there way to avoid this auto-creation - or maybe a way to make Dovecot check whether the directory name is an existing username? Here's a config to reproduce this: # 2.0.19: /usr/local/dovecot/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-35-server x86_64 Ubuntu 10.04.4 LTS auth_username_format = %Ln disable_plaintext_auth = no mail_gid = vmail mail_home = /mail/users/%u mail_location = maildir:~/Maildir mail_plugins = " acl" mail_uid = vmail maildir_very_dirty_syncs = yes namespace default { inbox = yes location = prefix = INBOX. separator = . type = private } namespace sharedns { inbox = no list = children location = maildir:/mail/users/%%u/Maildir prefix = INBOX.shared.%%u. separator = . subscriptions = no type = shared } passdb { args = /usr/local/dovecot/etc/dovecot/users driver = passwd-file } plugin { acl = vfile:/usr/local/dovecot/etc/dovecot/global-acls:cache_secs=300 acl_shared_dict = file:/mail/vmail/shared-mailboxes.db } service auth { unix_listener auth-userdb { group = vmail mode = 0660 } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem syslog_facility = local6 userdb { args = /usr/local/dovecot/etc/dovecot/users driver = passwd-file } protocol lmtp { mail_plugins = " sieve" } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_plugins = " acl imap_acl" } Content of the "users" file looks like this: user1:{plain}(hidden):::user1:/mail/users/user1:: user2:{plain}(hidden):::user2:/mail/users/user2:: testuser:{plain}(hidden):::testuser:/mail/users/testuser:: Cheers, Christoph -- Christoph Bußenius Rechnerbetriebsgruppe der Fakultäten Informatik und Mathematik Technische Universität München +49 89-289-18519 <> Raum 00.05.055 <> Boltzmannstr. 3 <> Garching

2 2

[Dovecot] problem to configuration dovecot and postfix
by Akihiko Sato 05 Apr '12

05 Apr '12

Hi, I'm having a problem with dovecot and postfix. I'm using a dovecot version 2.0.13. Postfix (Version: 2.8.5) config is changed according to the http://wiki2.dovecot.org/LDA/Postfix: I have thought to build a virtual user and virtual mailbox, and use the functionality of the Sieve. However, when the test set, the mail not received the mailbox. Record that there was a "temporary failure" in the log of Postfix. It delivered and to change the "virtual" to "dovecot", I think that's a matter of dovecot. To ensure that mail is delivered as intended, will How do I? Can anyone give me a hint what to do? # doveconf -n: # 2.0.13: /etc/dovecot/dovecot.conf # OS: Linux 3.0.0-12-server x86_64 Ubuntu 11.10 ext4 auth_debug = yes auth_debug_passwords = yes auth_verbose = yes disable_plaintext_auth = no info_log_path = /var/log/dovecot-info.log lda_mailbox_autosubscribe = yes listen = * log_path = /var/log/dovecot.log mail_debug = yes mail_location = maildir:/var/mail/vhosts/%d/%n managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables bo dy enotify environment mailbox date namespace { inbox = yes list = yes location = prefix = INBOX/ separator = / subscriptions = yes type = private } namespace { hidden = no list = yes location = maildir:/var/mail/shared/:INDEX=/var/mail/vhosts/%d/%n/shared/:CONTROL=/var/mail/vhosts/%d/%n/shared/ prefix = &UXFnCQ-/ separator = / subscriptions = yes type = public } passdb { args = /etc/auth/passwd.main driver = passwd-file } passdb { args = username_format=%n /etc/auth/%d/passwd driver = passwd-file } passdb { driver = pam } plugin { sieve = /var/mail/vhosts/%d/%n/_dovecot.sieve sieve_dir = /var/mail/vhosts/%d/%n/sieve/ } postmaster_address = postmaster(a)dom3.gs3 protocols = imap sieve service auth { user = root } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } userdb { args = /etc/auth/passwd.main driver = passwd-file } userdb { args = username_format=%n /etc/auth/%d/passwd driver = passwd-file } userdb { driver = passwd } protocol imap { mail_plugins = autocreate } protocol lda { mail_plugins = " sieve" } # postconf -n: alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no broken_sasl_auth_clients = yes config_directory = /etc/postfix default_transport = error home_mailbox = Maildir/ inet_interfaces = all inet_protocols = all mailbox_command = /usr/lib/dovecot/deliver -c /etc/dovecot/conf.d/01-mail-stack-delivery.conf -m "${EXTENSION}" mailbox_size_limit = 1300000000 message_size_limit = 130000000 mydestination = qbu.example.com, qbu, localhost.localdomain, localhost myhostname = qbu mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 myorigin = /etc/mailname readme_directory = no recipient_delimiter = + relay_transport = error relayhost = smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtp_use_tls = yes smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu) smtpd_recipient_restrictions = reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_unauth_pipelining, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = yes smtpd_sasl_local_domain = $myhostname smtpd_sasl_path = private/dovecot-auth smtpd_sasl_security_options = noanonymous smtpd_sasl_type = dovecot smtpd_sender_restrictions = reject_unknown_sender_domain smtpd_tls_auth_only = yes smtpd_tls_cert_file = /etc/ssl/certs/ssl-mail.pem smtpd_tls_key_file = /etc/ssl/private/ssl-mail.key smtpd_tls_mandatory_ciphers = medium smtpd_tls_mandatory_protocols = SSLv3, TLSv1 smtpd_tls_received_header = yes smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_use_tls = yes tls_random_source = dev:/dev/urandom virtual_alias_maps = hash:/etc/postfix/virtual virtual_gid_maps = static:5000 virtual_mailbox_base = /var/mail/vhosts virtual_mailbox_domains = hash:/etc/postfix/vmaildomains virtual_mailbox_limit = 1300000000 virtual_mailbox_maps = hash:/etc/postfix/vmailbox virtual_minimum_uid = 100 virtual_transport = dovecot virtual_uid_maps = static:5000 /etc/postfix/master.cf: + dovecot unix - n n - - pipe + flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/dovecot-lda -f ${sender} -d ${recipient} /var/log/mail.log: Apr 5 16:38:36 qbu postfix/pickup[25470]: BDC3221212: uid=0 from=<root> Apr 5 16:38:36 qbu postfix/cleanup[25500]: BDC3221212: message-id=<20120405073836.BDC3221212@qbu> Apr 5 16:38:36 qbu postfix/qmgr[25471]: BDC3221212: from=<root(a)qbu.example.com>, size=230, nrcpt=1 (queue active) Apr 5 16:38:36 qbu postfix/pipe[25502]: BDC3221212: to=<a(a)example.com>, relay=dovecot, delay=0.04, delays=0.02/0/0/0.02, dsn=4.3.0, status=deferred (temporary failure) Regards, Akihiko

3 5

[Dovecot] Dovecot upgrade from 1.2.x to 2.0.x: roundcube/squirrelmail sent folder doesn't work any more
by Gerhard Wiesinger 05 Apr '12

05 Apr '12

Hello, After upgrading from 1.2.x to 2.0.x I'm having problems using sent folder in Webmail applications like roundcube mail and squirrelmail. Relevant config dovecot.conf: mail_location = mbox:~:INBOX=/var/mail/%u Different LIST behaviour from rawlog: 1.2.x: with Prefix ~/Mail A002 LIST "" "~/Mail/sent" * LIST (\NoInferiors \UnMarked) "/" "~/Mail/sent" A002 OK List completed. 2.0.x: with Prefix ~/Mail A0003 LIST "" ~/Mail/sent A0003 OK List completed.: Configured prefix for private spaces in roundcube mail is ~/Mail . Roundcube Webmail application checks for existence of the folder but dovecot doesn't return anything in 2.x.latest. Is this by design? Any ideas to fix it by configuration? (I tried prefix Mail/ in roundcube mail without success) Thunderbird works well. Thnx. Ciao, Gerhard

2 4

[Dovecot] Modifying LDAP search results for user_attrs
by Patrick Ben Koetter 05 Apr '12

05 Apr '12

I need to authenticate users via LDAP either by mailaddress or login name. In both cases the mailbox location is /src/mail/%d/%n. I can easily deduct that path from the mailaddress, but not so from the login name. Can I get the mail address as part of fetching user_attrs and modify it on the fly? Something along the lines of this: user_attrs = mail:/srv/mail/%d/%n=home,uidNumber=uid,gidNumber=gid Or would I be able to modify this with a post-login script? p@rick -- state of mind () Digitale Kommunikation http://www.state-of-mind.de Franziskanerstraße 15 Telefon +49 89 3090 4664 81669 München Telefax +49 89 3090 4666 Amtsgericht München Partnerschaftsregister PR 563

3 2

[Dovecot] Backtrace on mdbox index
by Francisco Wagner C. Freire 04 Apr '12

04 Apr '12

Hello, I current using dovecot with mdbox and on one account i get this error: doveadm(user@domain): Panic: file mail-index-sync-ext.c: line 209 (sync_ext_reorder): assertion failed: (offset < (uint16_t)-1) doveadm(user@domain): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x3fd8a) [0x7fae684fdd8a] -> /usr/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x32) [0x7fae684fde72] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7fae684d719f] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x9bdc3) [0x7fae68c1edc3] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_sync_ext_intro+0x1e6) [0x7fae68c1fa76] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_sync_record+0x49f) [0x7fae68c21a3f] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_sync_map+0x234) [0x7fae68c225a4] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_map+0x86) [0x7fae68c13cd6] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x8b609) [0x7fae68c0e609] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_open+0x210) [0x7fae68c0eaa0] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x591c6) [0x7fae68bdc1c6] -> /usr/lib/dovecot/libdovecot-storage.so.0(mdbox_map_get_zero_ref_files+0x2d) [0x7fae68bdcd6d] -> /usr/lib/dovecot/libdovecot-storage.so.0(mdbox_purge+0xbc) [0x7fae68bde7ac] -> doveadm() [0x40a135] -> doveadm() [0x40a813] -> doveadm(doveadm_mail_single_user+0x61) [0x40a8d1] -> doveadm() [0x40aafd] -> doveadm(doveadm_mail_try_run+0x141) [0x40af11] -> doveadm(main+0x381) [0x4109c1] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7fae67d6ec8d] -> doveadm() [0x409ff9] Aborted All doveadm commands fail on thie error, index / force-resync / search / fetch etc. Any help?

3 6

[Dovecot] imapsync, namespaces and Dovecot 2.x
by Aleix Dorca 04 Apr '12

04 Apr '12

Hi people, I recently tried to migrate from Exchange using imapsync. It didn't work because it complained that dovecot had no namespace capablity. After looking through Dovecot's config files I found that namespaces could be defined, but if you did not a 'private' default one was created. In the 2.x wiki documentation (http://wiki2.dovecot.org/Migration) it says nothing about Namespaces. I don't know if I have to create one or not. If I add the parameters --sep2 . --prefix2 '' to imapsync then it works fine. I'm proxying using dovecot as frontend and backend, version 2.0.18 (The one that comes with Debian Wheezy). Any thoughts, please? Thanks, Aleix.

2 2

[Dovecot] doveadm user -f index
by Micah Anderson 04 Apr '12

04 Apr '12

I've configured my mail_location to have a different location for performance reasons so they aren't in the same location as the mail_location. The 'doveadm user -f home' is useful to find where a user's home directory is for various scripting purposes, but I can't seem to find a way to determine the location of the user's indexes. I can do something with the output of dovecot -a to find the mail_location and then look for a configured INDEX, but then I don't have a good way of translating the %d/%1n/%n type string formatters into their values for a user. thanks for any suggestions! micah --

2 1

[Dovecot] Dovecot and scalable database storage
by list＠airstreamcomm.net 04 Apr '12

04 Apr '12

I saw some interesting mails from TImo back in 2009 talking about the idea of using something like Cassandra db or similar as a storage platform for both email and index/logs. I was wondering if this has been discussed since then, and if there are any plans to support something like this in the future? I have been playing with Cassandra and found that their RackAwareStrategy gives you the ability to replicate writes to as many nodes as you would like, but more importantly what nodes and one of those nodes could be defined by what rack it lives in or what data center it lives in. This means multiple sites high available storage clusters, seemingly a system that dovecot could benefit from in terms of performance and redundancy and simplicity. Any takers?

2 1

[Dovecot] ldap userdb warning in v2.1.1
by Nikolaos Milas 04 Apr '12

04 Apr '12

Hi, I've upgraded from 2.0.13 to 2.1.1 and when I started the service, I got the following warning: Mar 21 10:07:23 imapserver dovecot: master: Dovecot v2.1.1 starting up (core dumps disabled) Mar 21 10:08:17 imapserverdovecot: auth: Warning: ldap: Ignoring changed user_attrs in /etc/dovecot/dovecot-passdb-ldap.conf, because userdb ldap not used. (If this is intentional, set userdb_warning_disable=yes) I didn't see such warnings in 2.0.13. I guess I should/could remove the "user_attrs" line from dovecot-passdb-ldap.conf because it's not needed? (I could also set "userdb_warning_disable=yes" as advised, but I'm trying to figure out what's the real cause of the warning.) The config follows below. Thanks, Nick ============================================================= protocols = imap pop3 mail_location = maildir:~/Maildir/ mail_gid = 502 mail_uid = 502 auth_mechanisms = plain login auth_username_format = %Lu auth_verbose = yes disable_plaintext_auth = no mail_plugins = quota protocol imap { imap_client_workarounds = "delay-newmail " mail_plugins = quota imap_quota } protocol pop3 { mail_max_userip_connections = 3 mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } protocol lda { auth_socket_path = /var/run/dovecot/auth-master info_log_path = log_path = mail_plugins = quota postmaster_address = sysadmin(a)example.com sendmail_path = /usr/lib/sendmail } userdb { args = /etc/dovecot/dovecot-usrdb-ldap.conf driver = ldap } passdb { args = /etc/dovecot/dovecot-passdb-ldap.conf driver = ldap } plugin { quota = maildir:User quota quota_rule = *:storage=4G quota_rule2 = Trash:storage=+3%% quota_warning = storage=75%% quota-warning 75 %u quota_warning2 = storage=90%% quota-warning 90 %u } service quota-warning { executable = script /opt/mail1.sh user = vmail unix_listener quota-warning { user = vmail } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = vmail mode = 0660 user = vmail } user = root } service imap-login { service_count = 1 vsz_limit = 64 M } service pop3-login { service_count = 1 vsz_limit = 64 M } ssl_ca = </etc/pki/tls/certs/chain-650.pem ssl_cert = </etc/pki/tls/certs/cert-650.pem ssl_key = </etc/pki/tls/private/key-650.pem syslog_facility = local1 ============================================================= and dovecot-usrdb-ldap.conf is identical to dovecot-passdb-ldap.conf: ============================================================= hosts = localhost tls = no base = ou=people, dc=example, dc=com scope = onelevel ldap_version = 3 dn = uid=authenticate,ou=System,dc=example,dc=com dnpass = secret auth_bind = yes user_filter = (uid=%u) pass_filter = (uid=%u) pass_attrs = uid=user,userPassword=password auth_bind_userdn = uid=%u,ou=people,dc=example,dc=com user_attrs = roomNumber=quota_rule=*:bytes=%$,uid=home=/home/vmail/%u iterate_filter = (objectClass=*) =============================================================

2 2

[Dovecot] dovecot 2.0.19 Panic: file mail-index-sync-ext.c: line 209 (sync_ext_reorder): assertion failed: (offset < (uint16_t)-1)
by Jim Lawson 04 Apr '12

04 Apr '12

Had a user who couldn't access his INBOX: > Mar 21 09:21:17 penguina dovecot: imap([USER]): Panic: file > mail-index-sync-ext.c: line 209 (sync_ext_reorder): assertion fai > led: (offset < (uint16_t)-1) > Mar 21 09:21:17 penguina dovecot: imap([USER]): Error: Raw backtrace: > /usr/lib/dovecot/libdovecot.so.0 [0x342683c660] -> /usr > /lib/dovecot/libdovecot.so.0 [0x342683c6b6] -> > /usr/lib/dovecot/libdovecot.so.0 [0x342683bb73] -> > /usr/lib/dovecot/libdovecot > -storage.so.0 [0x3426c966a8] -> > /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_sync_ext_intro+0x240) > [0x3426c979c0] -> / > usr/lib/dovecot/libdovecot-storage.so.0(mail_index_sync_record+0x401) > [0x3426c99151] -> /usr/lib/dovecot/libdovecot-storage.s > o.0(mail_index_sync_map+0x245) [0x3426c99c55] -> > /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_map+0x71b) > [0x3426c8afbb > ] -> /usr/lib/dovecot/libdovecot-storage.so.0 [0x3426c85d8b] -> > /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_open+0x1c > e) [0x3426c8617e] -> > /usr/lib/dovecot/libdovecot-storage.so.0(index_storage_mailbox_open+0xb5) > [0x3426c4d865] -> /usr/lib/dov > ecot/libdovecot-storage.so.0 [0x3426c75eab] -> > /usr/lib/dovecot/libdovecot-storage.so.0 [0x3426c31006] -> > dovecot/imap [hdtod > d 10.245.30.58 SELECT](cmd_ Stack trace made it look like it was the INBOX, so I deleted the index files for his INBOX and everything was OK. doveconf -n: > # OS: Linux 2.6.18-274.18.1.el5 x86_64 Red Hat Enterprise Linux Server > release 5.8 (Tikanga) > auth_gssapi_hostname = penguina.uvm.edu > auth_krb5_keytab = /etc/krb5.keytab.dovecot > auth_master_user_separator = * > auth_mechanisms = plain login gssapi > base_dir = /var/run/dovecot/ > default_process_limit = 250 > first_valid_uid = 50 > lock_method = flock > login_trusted_networks = [REDACTED] > mail_location = mbox:~/mail:INBOX=/var/spool/mail/%1u/%1.1u/%u > mail_max_lock_timeout = 30 secs > mail_max_userip_connections = 100 > mbox_read_locks = flock > mbox_write_locks = flock > mmap_disable = yes > namespace { > inbox = yes > location = > prefix = > separator = / > type = private > } > namespace { > hidden = yes > list = no > location = > prefix = mail/ > separator = / > type = private > } > namespace { > hidden = yes > list = no > location = > prefix = ~/mail/ > separator = / > type = private > } > namespace { > hidden = yes > list = no > location = > prefix = ~%u/mail/ > separator = / > type = private > } > passdb { > args = /etc/dovecot/passwd.masterusers > driver = passwd-file > master = yes > } > passdb { > driver = pam > } > service imap { > process_limit = 4096 > } > service lmtp { > client_limit = 1 > inet_listener lmtp { > port = 24 > } > } > ssl_cert = <[REDACTED] > ssl_key = < [REDACTED] > userdb { > driver = passwd > } > verbose_proctitle = yes Any questions/suggestions welcome. Jim

2 3