- dovecot - dovecot.org

Re: [Dovecot] Solaris hardware crypto engines
by Damon Atkins 22 Nov '11

22 Nov '11

Here are some blogs on the topic. http://wikis.sun.com/display/CryptoPerf/Using+the+UltraSPARC+cryptographic+… Solaris 10 # /usr/sfw/bin/openssl engine -c -t # cc -fast*-I /usr/sfw/include -L /usr/sfw/lib -lcrypto* aes_test.c -o aes_test.out http://blogs.oracle.com/DanX/entry/sparc_t4_openssl_engine http://blogs.oracle.com/DanX/entry/where_s_the_crypto_libraries http://blogs.oracle.com/DanX/entry/solaris_x86_aesni_openssl_engine http://blogs.oracle.com/chichang1/entry/rsa_performance_of_sun_fire Here is some info from my intel box Solaris 11 # /usr/bin/openssl engine -c -t (aesni) Intel AES-NI engine (no-aesni) % no-aesni means no aes H/W acceleration [ available ] (dynamic) Dynamic engine loading support [ unavailable ] (pkcs11) PKCS #11 engine support [RSA, DSA, DH, RAND, DSA] [ available ] $ isainfo -v # My cpu does not have 'aes' support 64-bit amd64 applications cx16 sse3 sse2 sse fxsr mmx cmov amd_sysc cx8 tsc fpu 32-bit i386 applications ahf cx16 sse3 sse2 sse fxsr mmx cmov sep cx8 tsc fpu # ldd /opt/dovecot/libexec/dovecot/ssl-build-param **** libssl.so.1.0.0 => /lib/libssl.so.1.0.0 *** *** libcrypto.so.1.0.0 => /lib/libcrypto.so.1.0.0* *** libc.so.1 => /lib/libc.so.1 libnsl.so.1 => /lib/libnsl.so.1 libsocket.so.1 => /lib/libsocket.so.1 librt.so.1 => /lib/librt.so.1 libsendfile.so.1 => /lib/libsendfile.so.1 libmp.so.2 => /lib/libmp.so.2 libmd.so.1 => /lib/libmd.so.1 libm.so.2 => /lib/libm.so.2 ./configure --prefix=/opt/dovecot --with-ldap=yes --with-gssapi --with-ssldir=/etc/openssl Install prefix . : /opt/dovecot File offsets ... : 64bit I/O polling .... : poll I/O notifys .... : none SSL ............ : yes (OpenSSL) GSSAPI ......... : yes passdbs ........ : passwd passwd-file shadow pam checkpassword ldap : -bsdauth -sia -sql -vpopmail userdbs ........ : static prefetch passwd passwd-file checkpassword ldap : -sql -vpopmail -nss SQL drivers .... : : -pgsql -mysql -sqlite Note Under OpenSolaris I did the following: CPPFLAGS=-I/usr/sfw/include LDFLAGS=-R/usr/sfw/lib ./configure --prefix=/opt/dovecot --with-ldap=yes --with-gssapi --with-ssldir=/etc/openssl (most likely Solaris 10 is the same as above, openssl may look old but I believe it is patched with compatible *fixes* from current openssl so application do not break. Apparently it took 5mths to update Solaris 11 to OpenSSL 1.0 and test everything) Cheers Damon.

1 0

[Dovecot] Dovecot Log analysis
by Thomas Hummel 21 Nov '11

21 Nov '11

Hello, Before writing them myself, I'd like to figure out if some tools exist (anvil ? ...) and how to use them to extract from dovecot logs things like who is doing what and how hard or how fast in order to do some rate limiting. For instance, I'd like to be able to identify, slow or block users who . read or write to much / slice of time . login/logout too often / slice of time Note : I'm still using the 1.2.x branch. Thanks -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Groupe Exploitation et Infrastructure

2 1

[Dovecot] Dovecot performance issues with many writes
by Andy Robbins 21 Nov '11

21 Nov '11

We are currently experiencing performance issue with our Dovecot system which we believe is caused by excessive writes to the dovecot files. The confusing thing is that we are seeing more writes than reads on our Dovecot volume when you would assume that most of the IO should be reads from customers checking their mail. We're seeing reads vs. writes similar to the following: # iostat -d 5 -x Device: rrqm/s wrqm/s r/s w/s rsec/s wsec/s avgrq-sz avgqu-sz await svctm %util dm-4 0.00 0.00 485.80 865.80 3886.40 6926.40 8.00 28.69 19.63 0.70 94.00 drbd0 0.00 0.00 485.80 865.80 3886.40 6926.40 8.00 111.42 94.44 0.74 99.60 We can't figure out why we would be seeing twice as many writes as we are reads. Could this have something to do with the index files? Appreciate any assistance on this issue.

5 10

[Dovecot] uid=error
by Paresh Chalke 21 Nov '11

21 Nov '11

Hi Timo, We are facing this issue on our mail server 1. Two email id's are mapped to a same account 2. If I send a mail to both the account simultaneously i get below error "Nov 21 12:13:37 blade8 dovecot: lda(kapil.gupta(a)qlc.in): save: box=INBOX, uid=error, msgid=<1321857820.4ec9f31ce638c(a)SwiftMailer.generated>, size=10921" 3. Due to this the mail is delivered only to 1 email id. 4. I am loosing all my mails. Kindly help in the same ASAP. Regards, Paresh Chalke

3 3

[Dovecot] Question about imaps
by jgiles＠cybermesa.com 21 Nov '11

21 Nov '11

Hi List! Had a questions about imap vs. imaps. I read the ssl article at http://wiki2.dovecot.org/SSL and from what I am reading, imaps is no longer needed as imap with initiate SSL/TLS on its own if STARTTLS is started and I have disable_plaintext_auth=yes and ssl=required settings. I do have SSL up and working, and can connect using imap (143) to my server without issue, but was not able to connect using imaps (993) using Kmail as my client. I Was getting a client error stating that the authentication failed using my password. However, there was nothing in the mail.err or mail.log file even when I enable debugging. If I specify imaps as my only protocol, then dovecot fails to even start without any error loging at all. As I stated, imap works just fine. So, is imaps deprecated as mentioned in the article and imaps no longer needed? I am running Dovecot 2.0.13 on an Ubuntu 11.10 64bit server. This server is simply an imap serer and not a MTA (No postfix or sendmail installed.) Thanks! Joe

4 4

[Dovecot] Iterate over domain
by Francisco Wagner C. Freire 21 Nov '11

21 Nov '11

Hello, We need to use doveadm commands on all accounts of a single domain, for now i need to query the database using scripts and for each one user, run doveadm. I can use iterate but, only for all server accounts, have any way to use doveadm iterate over a single domain? Thanks

2 1

[Dovecot] issues with 2.1b1 on OS X
by metro_domain_admin＠fastmail.fm 21 Nov '11

21 Nov '11

Two issues came up for me when building 2.1beta1 on OS X (10.5.8 on PPC). The first was already mentioned in an earlier thread by a BSD user (http://dovecot.org/list/dovecot/2011-September/061201.html) I just wanted to point out that the error is still occurring in spite of a new test for GNU ld in the configure script. I needed to remove "-no-undefined" specifically: #NOPLUGIN_LDFLAGS="-no-undefined" if test "$with_gnu_ld" = yes; then NOPLUGIN_LDFLAGS="$NOPLUGIN_LDFLAGS -Wl,--as-needed" fi More important, Dovecot aborts on launch with the following error: Nov 19 10:23:52 kerio2 dovecot[33553]: master: Fatal: kevent(EV_ADD, READ, 16) failed: Invalid argument I configured using the same args as I had used successfully on 2.0.15: --with-gssapi --with-ldap --with-sql --prefix=/opt/dovecot-2.X.X. I also tried an exact copy of my known-good config from 2.0.15, to no avail. Thanks, Tony

2 2

Re: [Dovecot] Mail_quota plugin and LDAP on Dovecot 1.2
by Victor 21 Nov '11

21 Nov '11

Thank a lot, your were completely in the truth Victor Onate

1 0

[Dovecot] Using google 2 step authentication
by Davide Cavion 20 Nov '11

20 Nov '11

Google authenticator has a PAM interface: http://code.google.com/p/google-authenticator/wiki/PamModuleInstructions Have someone tried implementing it onto Dovecot? It would be really great if you consider your emails important!

2 2

[Dovecot] Released Pigeonhole v0.2.5 for Dovecot v2.0.16
by Stephan Bosch 19 Nov '11

19 Nov '11

Hello Dovecot users, Before I move active development of Pigeonhole to Dovecot v2.1, I first release all the pending bug fixes and small improvements. Changelog v0.2.5: + Sieve vacation extension: made discard message for implicit delivery more verbose - The sieve-test tool: mixed up original and final envelope recipient in implementation of command line arguments. - Sieve vacation extension: resolved FIXME regarding the use of variables in the :handle argument. Variables are now handled correctly. - Sieve body extension: fixed handling of :content "message/rfc822". This now yields the headers of the embedded message as required by the specification. Handling of :content "multipart" remains to be fixed. - LDA Sieve plugin: fixed problem with recipient_delimiter configuration. Now it falls back to global recipient_delimiter setting if plugin/recipient_delimiter is not set. The release is available as follows: http://www.rename-it.nl/dovecot/2.0/dovecot-2.0-pigeonhole-0.2.5.tar.gz http://www.rename-it.nl/dovecot/2.0/dovecot-2.0-pigeonhole-0.2.5.tar.gz.sig Refer to http://pigeonhole.dovecot.org and the Dovecot v2.0 wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0