- dovecot - dovecot.org

[Dovecot] issues migration from dovecot 1.2 to version 2
by Rajesh M 21 Mar '12

21 Mar '12

hi my system is a centos 5 with qmailtoaster i migrated my email server with around 5000 users from dovecot version 1.2 to version 2 i have two separate 2 tb hdd's storing webmail data of these users. the load on the server goes very high over 100 during peak load times and the imap connections get dropped frequently, webmail becomes very slow. however pop3 download works ok in the dovecot log file i get errors as such Warning: Maildir /homebackup/domains/xxxx/xxxx/Maildir/.ALL_INBOX MAIL: Synchronization took 71 seconds (20 new msgs, 0 flag change attempts, 0 expunge attempts) i had configured dovecot 1.2 using source but i had installed version 2 using qmailtoaster rpm i am a bit confused as to what settings are to be done for a very busy server note that the cpu system usage and ram usage are less but IO wait goes to around 80-90 percent can you please guide me or post some dovecot version 2 config file settings that are relevant to a busy server. rajesh

2 1

[Dovecot] mdbox and pop3 locking
by Ken A 21 Mar '12

21 Mar '12

With mdbox, what does dovecot lock when "pop3_lock_session(pop3): yes"? Specifically, I'm wondering if Dovecot LDA is able to deliver mail when a session is locked, if using mdbox, or if it will tempfail until the session is unlocked? Thanks, Ken -- Ken Anderson Pacific Internet - http://www.pacific.net

3 2

[Dovecot] auth tcp socket, Authentication client gave a PID 7542 of existing connection
by Alex Ha 21 Mar '12

21 Mar '12

Hi Dovecot-list! My setup consists of a dovecot server with lmtp delivery and 3 postfix mta servers in front. Previously the mtas authenticated (SASL) through the courier-authdaemond software to our mysql database. To get support for more password formats i migrated to dovecot for SASL authentification. Our postfix mtas connect to dovecot through a tcp-socket smtpd_sasl_auth_enable = yes smtpd_sasl_type = dovecot smtpd_sasl_path = inet:10.11.100.230:12345 smtpd_sasl_security_options = noanonymous smtpd_sasl_authenticated_header = yes smtpd_sasl_local_domain = broken_sasl_auth_clients = yes 10.11.100.230 is our dovecot server. Please look at the attached doveconf.log to see my auth service configuration. I did the configuration according to the postfix SASL README. http://www.postfix.org/SASL_README.html#server_dovecot I tested the setup and everything worked fine but after 2 days i noticed these error messages in my mail.log: dovecot: auth: Error: BUG: Authentication client gave a PID 7542 of existing connection and also these messages from postfix: SASL LOGIN authentication failed: Connection lost to authentication server I get the dovecot error message about 3000 times a day and postfix message about 270 times. Please see my attached mail.log for a detailed trace. Thank you for your help :) Alex

3 6

[Dovecot] ssl_cert_username_field and subjectAltName?
by Nicolas KOWALSKI 20 Mar '12

20 Mar '12

Hello, Does dovecot support the subject Alternative Name email value [1] as ssl_cert_username_field? If so, how should it be specified in the configuration? Thanks. [1] http://www.openssl.org/docs/apps/x509v3_config.html#Subject_Alternative_Nam… -- Nicolas

1 1

[Dovecot] bug uni_utf8_str_is_valid(vname)
by Jernej Porenta 20 Mar '12

20 Mar '12

Heya, We are expiriencing issues with dovecot 2.1.1 on Linux with weird filenames in home directory of username. We are using mbox IMAP folders, with no special changes (mail_location = mbox:~/:INBOX=%h/.mailbox). Mar 6 13:37:17 machine dovecot: imap(username): Panic: file mail-storage.c: line 628 (mailbox_alloc): assertion failed: (uni_utf8_str_is_valid(vname)) Mar 6 13:37:17 machine dovecot: imap(username): Error: Raw backtrace: /opt/dovecot-2.1.1/lib/dovecot/libdovecot.so.0 [0x2ba41cb79450] -> /opt/dovecot-2.1.1/lib/dovecot/libdovecot.so.0 [0x2ba41cb794a6] -> /opt/dovecot-2.1.1/lib/dovecot/libdovecot.so.0 [0x2ba41cb78963] -> /opt/dovecot-2.1.1/lib/dovecot/libdovecot-storage.so.0 [0x2ba41c87ebd5] -> /opt/dovecot-2.1.1/lib/dovecot/libdovecot-storage.so.0 [0x2ba41c88c12c] -> /opt/dovecot-2.1.1/lib/dovecot/libdovecot-storage.so.0(fs_list_iter_next+0x1b4) [0x2ba41c88c494] -> /opt/dovecot-2.1.1/lib/dovecot/libdovecot-storage.so.0 [0x2ba41c885342] -> /opt/dovecot-2.1.1/lib/dovecot/libdovecot-storage.so.0(mailbox_list_iter_next+0x234) [0x2ba41c885604] -> dovecot/imap [0x40b2d1] -> dovecot/imap(cmd_list_full+0x520) [0x40c1f0] -> dovecot/imap(cmd_list+0xb) [0x40c3eb] -> dovecot/imap(command_exec+0x37) [0x410427] -> dovecot/imap [0x40f4cd] -> dovecot/imap [0x40f582] -> dovecot/imap(client_handle_input+0x3f) [0x40f6cf] -> dovecot/imap(client_input+0x62) [0x410052] -> /opt/dovecot Mar 6 13:37:17 machine dovecot: imap(username): Fatal: master: service(imap): child 20873 killed with signal 6 (core dumps disabled) The bug is reproducible by using home folder structure available from: http://bit.ly/x8pTXS AFAIK, the problem lies in processing the file list of home folder, which can contain filenames that do not have proper UTF-8 encoding of filenames, which causes dovecot to crash. On the other hand, UTF-8 filenames created on the system by hand (using touch), are not displayed in IMAP LIST command (sample is included in the folder structure; single letter file). Cheers, Jernej

2 7

[Dovecot] Antispam plugin not compatible with Dovecot 2.1
by interfaSys sàrl 20 Mar '12

20 Mar '12

Here is what I get when I try to compile the antispam plugin agaisnt Dovecot 2.1 ************** mailbox.c: In function 'antispam_save_begin': mailbox.c:138:12: error: 'struct mail_save_context' has no member named 'copying' mailbox.c: In function 'antispam_save_finish': mailbox.c:174:12: error: 'struct mail_save_context' has no member named 'copying' Failed to compile mailbox.c (plugin)! gmake[3]: *** [mailbox.plugin.o] Error 1 ************** The other objects compile fine. Cheers, Olivier

4 5

[Dovecot] dovecot, sieve and vacation
by Cedric Jeanneret 20 Mar '12

20 Mar '12

Hi there ! Have a small problem with sieve and vacation: it seems to descard the vacation filter I created instead of sending back an email: Mar 20 11:56:28 hostname dovecot: deliver(virtual_user): sieve: msgid=unspecified: discarding vacation response for message implicitly delivered to <virtual_user@hostname> after searching a bit on the net, I stumbled on another (old) thread: http://www.mail-archive.com/dovecot@dovecot.org/msg25955.html I'm not really sure it's the same problem, as I'm sending the mail from another host (via telnet, for testing purpose). Other sieve rules (such as flagging, moving and so on) work fine. Only vacation is crapy. Here's the roundcube generated rule: require ["vacation"]; if true { vacation :days 2 "on holidays!"; } Any help welcome :) Cheers, C. Informations: # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-6-pve i686 Debian 6.0.4 simfs log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps pop3s managesieve listen(default): * listen(imap): * listen(pop3): * listen(managesieve): localhost:2000 ssl_cipher_list: ALL:!LOW:!SSLv2 login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login first_valid_uid: 8 mail_privileged_group: mail mail_uid: mail mail_gid: mail mail_location: maildir:/var/local/vmail/%n mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve managesieve_logout_format(default): bytes=%i/%o managesieve_logout_format(imap): bytes=%i/%o managesieve_logout_format(pop3): bytes=%i/%o managesieve_logout_format(managesieve): bytes ( in=%i : out=%o ) lda: postmaster_address: foo(a)bar.com mail_plugins: sieve auth default: mechanisms: plain login user: mail passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf.ext userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf.ext socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: mail master: path: /var/run/dovecot/auth-master mode: 432 user: postfix group: mail plugin: home: /var/local/vmail/%u sieve: /var/local/vmail/%n/.dovecot.sieve sieve_dir: /var/local/vmail/%n/sieve sieve_extensions: +notify +imapflags

2 2

[Dovecot] Dsync Dovecot
by Jitendra Bhaskar 20 Mar '12

20 Mar '12

Hey Frnds, Could you tell me about the error : # dsync -Dv -u jitendra.b(a)example.com mirror jitendra.b(a)example.com doveadm(root): Debug: Loading modules from directory: /usr/local/lib/dovecot/doveadm doveadm(root): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_lookup (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_zlib_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_zlib_plugin.so: undefined symbol: i_stream_create_deflate (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_list_backend (this is usually intentional, so just ignore this message) doveadm(jitendra.b(a)example.com): Debug: Effective uid=3846, gid=3846, home=/home/example1.com/jitendra.b doveadm(jitendra.b(a)example.com): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:/home/ example.com/jitendra.b/mail:INBOX=/var/spool/example.com/jitendra.b doveadm(jitendra.b(a)example.com): Debug: fs: root=/home/ example.com/jitendra.b/mail, index=, control=, inbox=/var/spool/ example.com/jitendra.b, alt= dsync-local(jitendra.b(a)example.com): Debug: Namespace : Using permissions from /home/example.com/jitendra.b/mail: mode=0777 gid=-1 doveadm(jitendra.b): Fatal: User doesn't exist dsync-local(jitendra.b(a)example.com): Error: read() from worker server failed: EOF -- * Thanks & Regards * *Jitendra Kumar Bhaskar* Cell:- +91 7306311531 +91 8102997821

2 1

[Dovecot] Dovecot with postfix setup
by evolution age 20 Mar '12

20 Mar '12

Hey frnds, Could you suggest me any ebook or documentation for the setup of dovecot with postfix on centos 5.7 . I need it. -- Warm Regards Jitendra Kumar Bhaskar cell :- +91-8886742555

3 2

[Dovecot] IMAP and POP3 per SSL
by Lamprecht, Andreas 20 Mar '12

20 Mar '12

Hi! I'm new to this list and i could not find a way to search through the already posted articles, so please forgive me if this subject has been discussed before. Our security scanner stumbled over the IMAPs server i've set up recently using dovecot on a RedHat Enterprise 64bit Server. The security scanner found an error regarding a new SSL security leak named "BEAST". The exact error number is CVE-2011-3389. Details can be found here: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3389 "The internet" has some workarounds for this problem. For example, in Apache webserver, you need to set SSLHonorCipherOrder On in apache config. This results in the following C-Code being executed: SSL_CTX_set_options(ctx, SSL_OP_CIPHER_SERVER_PREFERENCE); This setting tells OpenSSL not to honor the Ciper Order sent from the client, but prefer it's own configured set of CipherSuites. According to Qualis SSL Labs ( https://www.ssllabs.com/ssldb/index.html ), a webserver configured with this setting is not affected by that BEAST security leak. Is there a way to implement such a setting into Dovecot, too? I have created a very quick and dirty solution to avoid being listed on our internal security problem's list. This patch is for dovecot 2.0.9 which is included in Redhat Enterprise Linux 6.2: *** src/login-common/ssl-proxy-openssl.c 2010-12-30 10:42:54.000000000 +0100 --- src/login-common/ssl-proxy-openssl.c_1 2012-03-20 09:48:28.359508087 +0100 *************** *** 924,930 **** X509_STORE *store; STACK_OF(X509_NAME) *xnames = NULL; ! SSL_CTX_set_options(ssl_ctx, SSL_OP_ALL | SSL_OP_NO_SSLv2); if (*set->ssl_ca != '\0') { /* set trusted CA certs */ store = SSL_CTX_get_cert_store(ssl_ctx); --- 924,930 ---- X509_STORE *store; STACK_OF(X509_NAME) *xnames = NULL; ! SSL_CTX_set_options(ssl_ctx, SSL_OP_ALL | SSL_OP_NO_SSLv2 | SSL_OP_CIPHER_SERVER_PREFERENCE ); if (*set->ssl_ca != '\0') { /* set trusted CA certs */ store = SSL_CTX_get_cert_store(ssl_ctx); Of course there should be a way to switch this setting on or off, but my C programming skills are rather basic ... So, maybe you have the time to look over it and implement a final solution for the BEAST problem. Greetings Andreas lamprecht

2 2