- dovecot - dovecot.org

Re: [Dovecot] IMAP STARTTLS Problem
by Patrick Ben Koetter 06 May '12

06 May '12

* markus(a)opsys.de <markus(a)opsys.de>: > Am 05.05.2012 22:44, schrieb Patrick Ben Koetter: > >* Markus Fritz <markus.fritz(a)opsys.de>: > >>Am 05.05.2012 21:06, schrieb Markus Fritz: > >Assuming your server cert is located in > >/etc/ssl/certs/ca-certificates.crt try > >this on your server: > > > >openssl s_client -starttls imap -CAfile > >/etc/ssl/certs/ca-certificates.crt -connect localhost:143 > > > >Use "2 logout" to get out of the session. > > > >If it works, try the same from your client host. > > > >Does it work both times? > > yes: > > Verify return code: 0 (ok) > --- > . OK Capability completed. > > it works. But I cannot login with Thunderbird. I imported the cert > in Thunderbird, too. IIRC it is not enough to import the cert. You also need to set a policy i.e. allow the cert to be used for e-mail. p@rick -- state of mind () http://www.state-of-mind.de Franziskanerstraße 15 Telefon +49 89 3090 4664 81669 München Telefax +49 89 3090 4666 Amtsgericht München Partnerschaftsregister PR 563

1 0

[Dovecot] HG 3d8a25a4394d Patch breaks UserDB Lookups
by Thomas Leuxner 06 May '12

06 May '12

Patch http://hg.dovecot.org/dovecot-2.1/rev/3d8a25a4394d breaks auth May 5 09:01:52 spectre dovecot: lmtp(24442): Connect from local May 5 09:01:52 spectre dovecot: lmtp(24442): Error: userdb lookup(tlx(a)leuxner.net): Disconnected unexpectedly May 5 09:01:52 spectre dovecot: auth: Fatal: master: service(auth): child 24443 killed with signal 11 (core not dumped) May 5 09:01:52 spectre dovecot: lmtp(24442): Disconnect from local: Client quit (in reset) Regards Thomas

2 2

[Dovecot] IMAP STARTTLS Problem
by Markus Fritz 05 May '12

05 May '12

Hello, I have this problem: May 5 21:02:35 opsys dovecot: imap-login: Disconnected (no auth attempts): rip=84.150.52.31, lip=78.46.216.126 Connecting via Thunderbird to STARTTLS won't work, but with a website from the same server it works for tls://opsys.de. So why is the port closed for external ip's? IPTABLES entry for imap is this: fail2ban-dovecot-pop3imap tcp -- anywhere anywhere multiport dports pop3,pop3s,imap2,imaps Key files are correct TLS is working from localhost. System is Debian squeeze -- Markus Fritz Administration opsys.de

3 4

[Dovecot] Corrupted mdbox file
by Daniel L. Miller 05 May '12

05 May '12

With an error like this: doveadm(dmiller(a)amfes.com): Error: Corrupted dbox file /var/mail/amfes.com/dmiller/mdbox/storage/m.20 (around offset=74408): Unexpected EOF while reading metadata header What can be done? -- Daniel

2 1

[Dovecot] Dovecot/doveadm crash
by Daniel L. Miller 05 May '12

05 May '12

Having a problem with a mailbox. I've been trying to rebuild - but doveadm force-resync crashes. This is mdbox with sis. doveadm purge -u dmiller(a)amfes.com doveadm(dmiller(a)amfes.com): Panic: file istream.c: line 466 (i_stream_grow_buffer): assertion failed: (stream->max_buffer_size > 0) doveadm(dmiller(a)amfes.com): Error: Raw backtrace: /usr/local/lib/dovecot/libdovecot.so.0(+0x4167a) [0x7fb73465467a] -> /usr/local/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x32) [0x7fb734654762] -> /usr/local/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fb73462c2a0] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x4949b) [0x7fb73465c49b] -> /usr/local/lib/dovecot/libdovecot.so.0(i_stream_get_buffer_space+0x82) [0x7fb73465c522] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x4b1c8) [0x7fb73465e1c8] -> /usr/local/lib/dovecot/libdovecot.so.0(i_stream_read+0x69) [0x7fb73465bb69] -> /usr/local/lib/dovecot/libdovecot.so.0(i_stream_read_next_line+0x1d) [0x7fb73465c04d] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(mdbox_purge+0x921) [0x7fb7348d7d71] -> doveadm() [0x40e1e6] -> doveadm() [0x40e018] -> doveadm() [0x40ea83] -> doveadm(doveadm_mail_try_run+0x141) [0x40eef1] -> doveadm(main+0x3c1) [0x415911] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xff) [0x7fb73429deff] -> doveadm() [0x40de39] -- Daniel

2 2

[Dovecot] per user sieve after filters
by Andre Rodier 05 May '12

05 May '12

Hello, Thanks for dovecot, as it's still the best mail server. I'd like to use per users sieve_after scripts. Can I put in my dovecot config file, something like that: sieve_after = %h/Mails/Sieve/After/ It would be very useful for me, as I'd like to add vacation script to be executed from this place. Kind regards, André.

2 3

[Dovecot] Shared INBOX change in v2.1.6?
by Timo Sirainen 04 May '12

04 May '12

Previously Dovecot has shown shared INBOX like: * LIST (\HasChildren) "/" "shared/tss2" * LIST (\HasNoChildren) "/" "shared/tss2/INBOX" * LIST (\HasNoChildren) "/" "shared/tss2/foo" The last change in hg makes it return simply (same as with Cyrus): * LIST (\HasChildren) "/" "shared/tss2" * LIST (\HasNoChildren) "/" "shared/tss2/foo" This behavior could be made optional, but does anyone actually want it to work the old way (and why)? I'd rather not add an option that isn't useful to anyone. I think older Dovecot versions have allowed opening both shared/tss2 and shared/tss2/INBOX, but at least in v2.1 that code was broken. With the last change it's still possible to open both of them, the shared/tss2/INBOX just isn't visible in LIST output.

4 4

[Dovecot] dovecot sasl with postfix: SASL LOGIN authentication failed: Connection lost to authentication server
by David Jonas 04 May '12

04 May '12

When using dovecot (2.1.5) sasl with postfix (2.8.4) behind nginx smtp proxy I am seeing a ton of errors of the form: postfix/smtpd[7731]: warning: unknown[192.168.0.6]: SASL LOGIN authentication failed: Connection lost to authentication server Nothing is printed by dovecot in the logs regarding the error. It seems that dovecot just hung up on postfix. (side note: no, can't use xclient in nginx/postfix. But perhaps soon.) After much digging I thought I solved it with: login_trusted_networks = 172.20.20.0/24 mail_max_userip_connections = 0 This seems safe enough because dovecot is only providing sasl to postfix, no connections to the outside world. But the error is still happening. # doveadm penalty IP penalty last_penalty last_update 172.20.20.61 1 2012-04-30 19:15:56 19:15:56 strace on the anvil process shows a lot of GETs and INCs: 18:54:06 read(14, "PENALTY-GET\t172.20.20.61\n", 397) = 25 <0.000016> 18:54:06 write(14, "1 1335837245\n", 13) = 13 <0.000029> A two minute survey showed penalty distribution: 0: 60% 1: 15% 2: 18% 3: 8% Finally I just disabled penalties with the info from http://www.dovecot.org/list/dovecot/2011-December/062631.html and that seemed to do it. Is there a better way? This took me a long time to run down so I tried to make this message detailed enough that others with similar problems will stumble upon it.

2 1

[Dovecot] doveadm mailbox: rc=0 on error
by Andreas Schulze 04 May '12

04 May '12

Hi all, I use "doveadm mailbox mutf7 -7 $folder" to convert imap foldernames to UTF-8. If $foldername is not mUTF-7 encoded, doveadm returns "doveadm(root): Error: Mailbox name not valid mUTF-7: $folder" This errormessage is printed on stderr but the returncode of doveadm is zero. I tested with dovecot-2.0.* and dovecot-2.1.* # all right: $ doveadm mailbox mutf7 -7 'gr&APw-n'; echo $? grün 0 # also all right, no mUTF-7 encoded folder: $ doveadm mailbox mutf7 -7 'gruen'; echo $? gruen 0 # wrong $ doveadm mailbox mutf7 -7 'grün'; echo $? doveadm(root): Error: Mailbox name not valid mUTF-7: grün 0 Would be nice if doveadm exit with an errorcode != 0 in that case. Andreas -- Andreas Schulze Internetdienste | P252 DATEV eG 90329 Nürnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196 E-Mail info @datev.de | Internet www.datev.de Sitz: 90429 Nürnberg, Paumgartnerstr. 6-14 | Registergericht Nürnberg, GenReg Nr.70 Vorstand Prof. Dieter Kempf (Vorsitzender) Dipl.-Kfm. Wolfgang Stegmann (stellvertretender Vorsitzender) Dipl.-Kfm. Michael Leistenschneider Dipl.-Kfm. Dr. Robert Mayr Jörg Rabe v. Pappenheim Dipl.-Vw. Eckhard Schwarzer Vorsitzender des Aufsichtsrates: Reinhard Verholen

2 1

[Dovecot] Strange behaviour for sieve_before
by Simone Caruso 04 May '12

04 May '12

Hi all, i moved from dovecot 2.0.15 (lda) to 2.1.5 with lmtp transport, all works well with the same configuration directives. But sieve_before stopped working with mail_debug=no. The weird thing is that, with mail_debug=yes the sieve_before script starts working. Any idea? Thanks (my conf attacched, for the new install i used prebuild packages) -- Simone Caruso IT Consultant +39 349 65 90 805

2 2