- dovecot - dovecot.org

Re: [Dovecot] ZFS Filesystem Quota under Solaris 10 and Sparc
by Roger Fujii 17 Jun '11

17 Jun '11

*Jürgen Obermann wrote:* > Since we upgraded last year to Solaris 10 with zfs filesystems on our > Sparc server still using a similar setup with separate filesystems for > home directories and inboxes we have no working quota plugin anymore. > Currently we use dovecot 2.0.13. > > Are there any plans or whishes to get the filesystem quota code > working again under zfs and Solaris? > How are you setting up the zfs quotas? The original zfs implementation didn't have user quotas. You could only add quotas to individual file systems as a whole. They apparently added it into the source base in 2009: http://blogs.oracle.com/chrisg/entry/user_and_group_quotas_for but I'm not sure when/if it made it to production. My sol10u8 * (10/09) has it in the man page, but I know some things in the man page isn't in s10 (like sharesmb), so, as they say, ymmv. The current doc for user quotas are here: http://download.oracle.com/docs/cd/E19253-01/819-5461/gazud/index.html If you don't want to use the filesystem quotas, you have to change your rules/configuration to match what dovecot has. See doc/wiki/Quota.Configuration.txt. Hope this helps. -r

1 0

[Dovecot] quota_rule beeing ignored and set to system soft! quota
by Leon Meßner 16 Jun '11

16 Jun '11

Hi, originating from the same Problem Edgar Fuß described here [1] about "Zero-sized Maildir files and index corruption on over-quota" i setup quota = fs:user quotas with a quota_rule set to 1.5G to prevent getting those zero sized mail files. What happens now is that when the user is over system soft quota (1G) mails stop beeing delivered. Jun 16 19:05:45 mail dovecot: deliver(elont1): msgid=<20110616185545.05ab0f56@x201t>: save failed to INBOX: Quota exceeded (mailbox for user is full) This is bad as users get notified per mail by a script about beeing over quota (this mail is now beeing deferred). If i don't set a quota_rule i still get 0byte files (quota is ignored). If i set a higher than system quota quota_rule it still uses the system soft quota. I have a seconary mailserver which already uses dovecot 2.x but i can't test the feature there as it's running inside a jail and thus has no access to quota. I would like to keep this machine on 1.2.16 for now. dovecot -n output is below. thanks, Leon [1] http://www.dovecot.org/list/dovecot/2010-October/053554.html 19:20_root@mail:/usr/local/etc# dovecot -n # 1.2.16: /usr/local/etc/dovecot.conf # OS: FreeBSD 7.3-RELEASE-p2 amd64 log_path: /var/log/dovecot.log protocols: imaps pop3s managesieve listen: mail.physik-pool.tu-berlin.de ssl_cert_file: /etc/private/mail.physik.tu-berlin.de.pem ssl_key_file: /etc/private/physik.tu-berlin.de_privatekey.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_executable(managesieve): /usr/local/libexec/dovecot/managesieve-login login_processes_count: 6 login_max_processes_count: 512 verbose_proctitle: yes first_valid_uid: 200 mail_privileged_group: mail mail_location: maildir:~/maildir mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_executable(managesieve): /usr/local/libexec/dovecot/managesieve mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 mail_plugin_dir(managesieve): /usr/local/lib/dovecot/managesieve imap_client_workarounds(default): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): imap_client_workarounds(managesieve): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh pop3_client_workarounds(managesieve): namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: mail/ location: mbox:~/mail list: yes subscriptions: yes lda: postmaster_address: postmaster(a)physik.tu-berlin.de log_path: info_log_path: mail_plugins: sieve quota quota_full_tempfail: yes sendmail_path: /usr/sbin/sendmail auth default: mechanisms: gssapi plain login krb5_keytab: /etc/mail.krb5.keytab gssapi_hostname: mail.physik-pool.tu-berlin.de worker_max_count: 120 passdb: driver: pam args: session=yes failure_show_msg=yes max_requests=100 userdb: driver: passwd args: blocking=yes plugin: sieve: ~/.dovecot.sieve sieve_dir: ~/.sieve quota_rule: *:storage=15728640 quota: fs:user

1 0

[Dovecot] Global ACLs
by Daniel L. Miller 16 Jun '11

16 Jun '11

If I have: plugin { acl = vfile:/usr/local/etc/dovecot/global-acls:cache_secs=300 } And then a file /usr/local/etc/dovecot/global-acls/.DEFAULT with owner lrwstipekxa user=dmiller lrwstipekxa Does that give me unconditional access to all mailboxes? -- Daniel

1 0

[Dovecot] Removal of mailist duplicates?
by Peter Bell 16 Jun '11

16 Jun '11

I am using mpop to fetch mail from my service provider (who use dovecot). I use dovecot to hold all my mail on a local slackware server, with sieve filters, based on 'List-Id', directing mailist postings to their own folders. I use thunderbird to read my mail on an ubuntu desktop. When I receive a reply to a posting I make to a mailist (such as this one), replies I receive are usually sent to me with cc to the list. I would expect, then, to receive the message twice - once in my personal mailbox, and once to the mailist folder. However, this doesn't happen - I only see the posting in the mailist folder. Can anyone tell me at which stage in the process the other message is being supressed? -- ------------------------------------------------------------------- Peter Bell Mob: +63 (0) 9287 340 343 Tagum City, Philippines. Tel: +63 (0) 84 400 5085 email/msn: peter(a)bellfamily.org.uk Tel: +44 (0) 118 331 0000

4 6

[Dovecot] limiting number of login attempts from same ip
by Jürgen Obermann 16 Jun '11

16 Jun '11

Hello, is it possible to limit the number of pop3 (or imap) login attempts from one IP with dovecot to stop attackers? We recently had an attack from one IP-address lasting 50 minutes that tried 50000 pop3-logins with guessed users and passwords. I know about Fail2Ban but really would prefer an easy to configure solution inside of dovecot. Dovecot has this anvil daemon, can it be used for that purpose? We use dovcot version 2.0.12 under Solaris 10, the pop3-login part of the configuration looking like that: service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 110 ssl = no } inet_listener pop3s { address = port = 995 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 64 M } Thanks, Jürgen -- Hochschulrechenzentrum der | Mail: Juergen.Obermann(a)hrz.uni-giessen.de Justus-Liebig-Universitaet | WWW: http://www.uni-giessen.de/obermann/ Heinrich-Buff-Ring 44 | Tel: 0641-99-13054 (0641-99-13001) D-35392 Giessen, Germany | Fax: 0641-99-13009

10 14

[Dovecot] dovecot-managesieve
by Richard Gliebe 16 Jun '11

16 Jun '11

Hi all, I have to implement a Out of Office Tool on our dovecot IMAP Server. Recently I updated dovecot-1.0.7-7.el5 to dovecot-1.1.20-1_98.el5 on our CentOS release 5.6 (Final) box via "yum update" # cat /etc/yum.conf .... [atrpms] name=Fedora Core $releasever - $basearch - ATrpms baseurl=http://dl.atrpms.net/el$releasever-$basearch/atrpms/stable gpgkey=http://ATrpms.net/RPM-GPG-KEY.atrpms gpgcheck=1 # .... After it, I installed dovecot-managesieve-0.11.12-0_5.1.el5 via yum install. These are my sieve settings in /etc/dovecot.conf: ....... version_ignore=yes # Log file to use for error messages, instead of sending them to syslog. # /dev/stderr can be used to log into stderr. log_path = /var/log/dovecot.log # Protocols we want to be serving: imap imaps pop3 pop3s managesieve # If you only want to use dovecot-auth, you can set this to "none". #protocols = imap imaps pop3 pop3s protocols = imaps pop3s pop3 managesieve mail_debug=yes protocol managesieve { # Specify an alternative address:port the daemon must listen on # (default: *:2000) #listen = localhost:2000 managesieve_logout_format = bytes ( in=%i : out=%o ) # Duplicated from plugin section sieve=~/.dovecot.sieve sieve_storage=~/sieve } plugin { # Settings for the Sieve plugin sieve=~/.dovecot.sieve sieve_dir=~/sieve } ...... After restarting dovecot, I'm getting the following errors in dovecot.log: dovecot: Jun 10 08:50:14 Info: dovecot v1.1.20 starting up (core dumps disabled) dovecot: Jun 10 08:50:16 Error: login: Login request missing a file descriptor dovecot: Jun 10 08:50:16 Error: Temporary failure in creating login processes, slowing down for now dovecot: Jun 10 08:50:16 Warning: managesieve-login: managesieve-login: capability string is empty. dovecot: Jun 10 08:50:16 Error: login: Login request missing a file descriptor dovecot: Jun 10 08:50:16 Warning: managesieve-login: managesieve-login: capability string is empty. dovecot: Jun 10 08:50:16 Error: login: Login request missing a file descriptor dovecot: Jun 10 08:50:16 Warning: managesieve-login: managesieve-login: capability string is empty. dovecot: Jun 10 08:50:16 Info: Created login processes successfully, unstalling dovecot: Jun 10 08:50:17 Error: login: Login request missing a file descriptor dovecot: Jun 10 08:50:17 Error: Temporary failure in creating login processes, slowing down for now Don't know, whats going on ..... next problem. I can't login with our Thunderbird Clients to our IMAP/sieve Server (Port 2000) to edit Sieve Filters. Authentication is set to: use IMAP Username and password Port 2000 ist listening: # netstat -an | grep 2000 tcp 0 0 0.0.0.0:2000 0.0.0.0:* LISTEN tcp 0 0 192.168.1.6:2000 192.168.1.8:2882 ESTABLISHED tcp 0 0 :::2000 :::* LISTEN Out of Office: I found a plugin for our thunderbird clients: http://www.trustedbird.org/tb/Out_of_Office is this the right one? many many hints are welcome ;-) Richard

2 2

[Dovecot] URLAUTH-patch, BSD specific?
by Peter Mogensen 15 Jun '11

15 Jun '11

Hi, I notice that the Apple patched branch of Dovecot 2.0 with URLAUTH fails to compile on Linux. The file src/plugins/urlauth/urlauth-keys.c uses open(2) with O_EXLOCK, which to my knowledge is BSD specific. Is that a known problem? /Peter

2 1

[Dovecot] ZFS Filesystem Quota under Solaris 10 and Sparc
by Jürgen Obermann 15 Jun '11

15 Jun '11

Hallo. Filesystem quotas used to work well under Solaris 9 and ufs filesystems on the Sparc platform even with two rules for the folders in the users home directories /home/group/user and the separate filesystem /var/mail holding the inboxes: plugin { quota = fs:Home-Verzeichnis:noenforcing quota2 = fs:INBOX:noenforcing:mount=/var/mail } Since we upgraded last year to Solaris 10 with zfs filesystems on our Sparc server still using a similar setup with separate filesystems for home directories and inboxes we have no working quota plugin anymore. Currently we use dovecot 2.0.13. Are there any plans or whishes to get the filesystem quota code working again under zfs and Solaris? Best whishes, Jürgen -- Hochschulrechenzentrum der | Mail: Juergen.Obermann(a)hrz.uni-giessen.de Justus-Liebig-Universitaet | WWW: http://www.uni-giessen.de/obermann/ Heinrich-Buff-Ring 44 | Tel: 0641-99-13054 (0641-99-13001) D-35392 Giessen, Germany | Fax: 0641-99-13009

1 0

[Dovecot] Per-user "Seen" flags on public folder
by Torsten Harenberg 15 Jun '11

15 Jun '11

Dear all, sorry to bother the list again, I have a small configuration issue again with public (shared) folders. These folders should have per-user Seen flags, so I configured: namespace { type = public separator = . prefix = public. location = maildir:/var/mail/public:INDEX=%u/public subscriptions = no list = children } But this only seems to work with my account (presumably as I was the first one who touched the folder), all other users cannot change the "Seen" flags My home dir is set to /home/mail/harenber and there is a: mail# ls -l total 1162 -rwxrwxrwx 1 10001 wheel 4016 Jun 9 13:27 dovecot.index -rwxrwxrwx 1 10001 wheel 1125376 Jun 14 11:26 dovecot.index.cache -rwxrwxrwx 1 10001 wheel 2140 Jun 9 13:40 dovecot.index.log -rwxrwxrwx 1 10044 wheel 33792 Jun 9 13:28 dovecot.index.log.2 mail# pwd /home/mail/harenber/harenber/public/.fb8 (don't know why my username appears twice). which looks the same on some other account: mail# ls -l total 1380 -rw-rw-rw- 1 10002 wheel 4016 Jun 9 19:40 dovecot.index -rw-rw-rw- 1 10002 wheel 1364992 Jun 10 10:54 dovecot.index.cache -rwxrwxrwx 1 10114 wheel 16072 Jun 10 10:54 dovecot.index.log mail# pwd /home/mail/sandhoff/sandhoff/public/.fb8 The public folder looks like this: mail# pwd /var/mail/public/.fb8 mail# ls -l total 52 drwxrwxrwx 2 root wheel 512 Jun 9 13:05 cur -rwxrwxrwx 1 root wheel 54 Jun 9 13:11 dovecot-acl -rwxrwxrwx 1 root wheel 97 Jun 9 13:05 dovecot-keywords -rw-rw-rw- 1 10001 wheel 18513 Jun 9 13:27 dovecot-uidlist drwxrwxrwx 2 root wheel 23552 Jun 9 13:05 new -rwxrwxrwx 1 root wheel 0 Jun 9 13:05 subscriptions drwxrwxrwx 2 root wheel 512 Jun 9 13:05 tmp Does anybody see what I did (again) wrong? (doveconf -n at the end, as allways) Thanks Torsten -- <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> <> <> <> Dr. Torsten Harenberg harenberg(a)physik.uni-wuppertal.de <> <> Bergische Universitaet <> <> FB C - Physik Tel.: +49 (0)202 439-3521 <> <> Gaussstr. 20 Fax : +49 (0)202 439-2811 <> <> 42097 Wuppertal <> <> <> <><><><><><><>< Of course it runs NetBSD http://www.netbsd.org ><> mail# doveconf -n # 2.0.13: /usr/pkg/etc/dovecot/dovecot.conf # OS: NetBSD 5.1 amd64 ffs auth_debug = yes auth_verbose = yes base_dir = /var/run/dovecot/ mail_debug = yes mail_gid = 6 mail_location = maildir:/var/mail/user/%u/Maildir mail_plugins = acl managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = prefix = separator = . type = private } namespace { list = children location = maildir:/var/mail/public:INDEX=%u/public prefix = public. separator = . subscriptions = no type = public } passdb { args = /usr/pkg/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = dovecot user = dovecot } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl_ca = </etc/certificates/chain.pem ssl_cert = </etc/certificates/mail.physik.uni-wuppertal.de.crt ssl_key = </etc/certificates/mail.physik.uni-wuppertal.de.key userdb { args = /usr/pkg/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = sieve } protocol lda { mail_plugins = sieve } protocol imap { mail_plugins = acl imap_acl } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole }

1 1

[Dovecot] doveadm who: Please Headline to STDout, not to STDERR
by Denny Schierz 15 Jun '11

15 Jun '11

hi, I've created a small script to get a sum from the users and sessions (table username and table "#"), but it is annoying that the headline "username # proto (pids) (ips)" goes to STDERR, but the normal output to STDOUT. It would be nice, if both goes to the same STD :-) cu denny

2 1