- dovecot - dovecot.org

[Dovecot] Dsync Permissions Issue
by Asai 16 Sep '11

16 Sep '11

Greetings, I recently upgraded Dovecot from 1.2 to 2.0.14, for purposes of using Dsync to migrate emails from one server to another. I'm using MySQL for authentication. However I get this error message when I try to run Dsync, and after looking around for an answer, I'm at a bit of a loss: [root@triata ~]# dsync -v -u asai(a)globalchangemusic.org backup ssh -p22222 vmail(a)xx.xxx.xx.xxx dsync -u asai(a)globalchangemusic.org vmail(a)xx.xxx.xx.xxx's password: dsync(vmail): Error: userdb lookup: connect(/var/run/dovecot/auth-userdb) failed: Permission denied (euid=1001(vmail) egid=1001(vmail) missing +r perm: /var/run/dovecot/auth-userdb, euid is not dir owner) dsync(vmail): Fatal: User lookup failed: Internal error occurred. Refer to server log for more information. dsync-local(asai(a)globalchangemusic.org): Error: read() from worker server failed: EOF Config as follows: [root@triata ~]# doveconf -n # 2.0.14: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-92.1.10.el5.xs5.0.0.39xen x86_64 CentOS release 5 (Final) ext3 auth_mechanisms = plain login mail_home = /vmail/%d/%n/home mail_location = maildir:/vmail/%d/%n managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = prefix = separator = / type = private } passdb { args = /etc/dovecot-mysql.conf driver = sql } plugin { sieve = /vmail/%d/%n/sievescript } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = vmail mode = 0660 user = vmail } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } user = root } ssl_cert = </etc/ssl/triata.globalchangemultimedia.net/mailserver/smtpd.pem ssl_key = </etc/ssl/triata.globalchangemultimedia.net/mailserver/smtpd.pem userdb { driver = passwd } userdb { args = /etc/dovecot-mysql.conf driver = sql } protocol lda { hostname = triata.globalchangemultimedia.net mail_plugin_dir = /usr/lib64/dovecot/ mail_plugins = sieve postmaster_address = postmaster(a)globalchangemultimedia.net } --

2 2

[Dovecot] unexpected LSUB / LIST (SUBSCRIBED) output Re: Panic: file mailbox-list-subscriptions.c: line 66 (mailbox_list_subscription_fill_one): assertion failed: (ns!= NULL && (ns->flags & NAMESPACE_FLAG_AUTOCREATED) != 0)
by Lutz Preßler 16 Sep '11

16 Sep '11

On Thu, 15 Sep 2011, Timo Sirainen wrote: > On Wed, 2011-09-14 at 12:10 +0200, Lutz Preßler wrote: > > imap(2717, testuser): Panic: file mailbox-list-subscriptions.c: line > > 66 (mailbox_list_subscription_fill_one): assertion failed: (ns!= NULL > > && (ns->flags & NAMESPACE_FLAG_AUTOCREATED) != 0) > > > Fixed: http://hg.dovecot.org/dovecot-2.1/rev/309a707c22c0 No assertion anymore. 0 login testuser password [...] 0 list "" "*" * LIST (\HasChildren) "." "INBOX" * LIST (\HasNoChildren) "." "INBOX.test" * LIST (\Noselect \HasChildren) "." "INBOX.shared.user1" * LIST (\HasNoChildren) "." "INBOX.virtual" * LIST (\HasNoChildren) "." "INBOX.shared.user1.in2007" 0 OK List completed. 0 lsub "" "*" * LSUB (\Noselect) "." "INBOX.shared.user1" 0 OK Lsub completed. 0 list (subscribed) "" "*" * LIST (\NonExistent) "." "INBOX.shared.user1" 0 OK List completed. >>> ~testuser/Maildir/subscription is empty here 0 subscribe INBOX.shared.user1.in2007 0 OK Subscribe completed. 0 lsub "" "*" * LSUB (\Noselect) "." "INBOX.shared.user1" * LSUB () "." "INBOX.shared.user1.in2007" 0 OK Lsub completed. 0 list (subscribed) "" "*" * LIST (\NonExistent) "." "INBOX.shared.user1" * LIST (\Subscribed) "." "INBOX.shared.user1.in2007" 0 OK List completed. >>> ~testuser/Maildir/subscription now contains "shared.user1.in2007" Is this "INBOX.shared.user1" LSUB/LIST output correct? Lutz

2 1

[Dovecot] Shared folder not listing
by Tom Clark 16 Sep '11

16 Sep '11

Hi Timo, I've got a weird problem on our dovecot. We're trying to setup private shared folder access. I have 2 users. tom(a)mailbox.com and system(a)mailbox.com. I have set the ACL's on all the folders (and subfolders) on system(a)mailbox.com. However, I'm not getting any of them listed when I check tom(a)mailbox.com <mailto:tom@mailbox.com's> 's IMAP folders. Our configuration is below (we're migrating from Courier hence the INBOX.): In 10-mail.conf: namespace { type = private prefix = INBOX. separator = . inbox = yes list = yes hidden = yes } namespace { type = shared separator = . prefix = INBOX.Shared.%%u location = maildir:%%h/Maildir:INDEX=~/Maildir/Shared/%%u subscriptions = no list = children } mail_plugins = acl protocol imap { mail_plugins = $mail_plugins imap_acl } In 90-acl.conf: plugin { #acl = vfile:/etc/dovecot/acls:cache_secs=300 acl = vfile } # To let users LIST mailboxes shared by other users, Dovecot needs a # shared mailbox dictionary. For example: plugin { acl_shared_dict = file:/var/vpopmail/domains/%d/shared-mailboxes } Have I missed anthing!?!? Thanks in advance! Tom

3 4

Re: [Dovecot] dovecot Digest, Vol 101, Issue 26
by Alan Brown 15 Sep '11

15 Sep '11

> From: Timo Sirainen <tss(a)iki.fi> > Subject: Re: [Dovecot] general advice sought > Message-ID: <1315830847.7326.48.camel@hurina> > Content-Type: text/plain; charset="ISO-8859-15" > > On Mon, 2011-09-12 at 13:11 +0100, Alan Brown wrote: >> I'd like to hear the thoughts of list members on which type of storage >> method seems "best" for inboxes and for folders. >> >> The filesystem is GFS2 and for various reasons I can't change it. > .. >> If I migrate to other formats (eg mdbox), then it needs to be able to be >> done on the fly. (Taking the mailservers down for a day won't go down >> well, even an hour raises howls). > > Have you had any trouble with Dovecot's index files in your current > setup? Any errors at all? Zero. The issues which have arisen are: 1: Really slow access to messages in large folders (GFS2 issue) 2: Users trashing their inbox then demanding we drop everything to restore "all my important mail" > If not, I'd think mdbox will work fine. You > can do it incrementally per-user (and you really should try it first > with only a few users). http://wiki2.dovecot.org/Tools/Dsync explains > how to do it on the fly. I thought so too, just wanted to hear opinions on doing it vs other approaches. :)

1 0

[Dovecot] Warning: Subscriptions file .. Removing invalid entry:
by Jan-Frode Myklebust 15 Sep '11

15 Sep '11

One of our dovecot-servers (v2.0.14) got a bit too busy last evening: Sep 13 20:39:18 popimap1 dovecot: master: Warning: service(pop3-login): process_limit reached, client connections are being dropped then logged a few: Sep 13 20:39:20 popimap1 dovecot: pop3(XXXXXXXXX(a)YYYYY.YY): Warning: I/O leak: 0x3829233d20 (10) Sep 13 20:39:20 popimap1 dovecot: pop3(XXXXXXXXX(a)YYYYY.YY): Warning: Timeout leak: 0x3829233ce0 Sep 13 20:39:20 popimap1 dovecot: pop3(ZZZZZ.ZZZZZ(a)ZZZZZZ.ZZ): Warning: I/O leak: 0x3829233d20 (10) Sep 13 20:39:20 popimap1 dovecot: pop3(ZZZZZ.ZZZZZ(a)ZZZZZZ.ZZ): Warning: Timeout leak: 0x3829233ce0 Sep 13 20:39:20 popimap1 dovecot: pop3(YYYYYYY(a)YYYY.YYY): Warning: I/O leak: 0x3829233d20 (10) Sep 13 20:39:20 popimap1 dovecot: pop3(YYYYYYY(a)YYYY.YYY): Warning: Timeout leak: 0x3829233ce0 Sep 13 20:39:20 popimap1 dovecot: pop3-postlogin: Error: Fatal: fd_send() failed: Broken pipe Sep 13 20:39:20 popimap1 dovecot: pop3-postlogin: Error: Fatal: fd_send() failed: Broken pipe and: Error: net_connect_unix(/var/run/dovecot/pop3-postlogin) failed: Resource temporarily unavailable but what has me a bit worried is these: imap(user(a)xxx.xxx): Warning: Subscriptions file /path/to/user(a)xxx.xxx/subscriptions: Removing invalid entry: .Sent imap(user(a)xxx.xxx): Warning: Subscriptions file /path/to/user(a)xxx.xxx/subscriptions: Removing invalid entry: .Spam imap(user(a)xxx.xxx): Warning: Subscriptions file /path/to/user(a)xxx.xxx/subscriptions: Removing invalid entry: .Drafts imap(user(a)xxx.xxx): Warning: Subscriptions file /path/to/user(a)xxx.xxx/subscriptions: Removing invalid entry: .Trash which happened for a two users during this high load periode. Looking at their mail directory I can't see why these should be invalid? They're there, has sane permissions and contains messages.. -jf

2 3

[Dovecot] multiple "imapc namespaces" Re: imapc and imap_acl
by Lutz Preßler 15 Sep '11

15 Sep '11

On Tue, 13 Sep 2011, Lutz Preßler wrote: > On Di, 13 Sep 2011, Timo Sirainen wrote: > > mail_location = imapc:~/imapc > Oh, had not realized that a path argument is possible for imapc:. There are > even index file then... What about taking imapc parameters/credentials optionally from a file in this directory (like dovecot-virtual)? Lutz

2 1

[Dovecot] LDA panics without sieve script
by Jürgen Obermann 15 Sep '11

15 Sep '11

The dovecot lda panics with "Trying to sync mailbox INBOX with open transactions" if a user has no sieve script defined. Debugging shows: Sep 14 19:49:26 server dovecot: [ID 583609 local0.debug] lda(userxx): Debug: sieve: user's script path /home/grp/userxx/.dovecot.sieve doesn't exist (using global script path in stead) Sep 14 19:49:26 server dovecot: [ID 583609 local0.debug] lda(userxx): Debug: sieve: user has no valid personal script Sep 14 19:49:26 server dovecot: [ID 583609 local0.debug] lda(userxx): Debug: sieve: no scripts to execute: reverting to default delivery. Sep 14 19:49:26 server dovecot: [ID 583609 local0.crit] lda(userxx): Panic: Trying to sync mailbox INBOX with open transactions Sep 14 19:49:26 server dovecot: [ID 583609 local0.error] lda(userxx): Error: Raw backtrace: 0xff1cc2ac -> 0xff1cbb70 -> 0xff2a6474 -> 0xff2a668c -> 0xff2fa444 -> 0xff2a63c8 -> 0xff2668ec -> 0xff266f74 -> 0xff26741c -> 0x12720 -> 0x11948 I then did create an empty sieve script file with touch /home/grp/userxx/.dovecot.sieve and after that lda worked: Sep 14 19:50:55 server dovecot: [ID 583609 local0.debug] lda(userxx): Debug: sieve: using sieve path for user's script: /home/grp/userxx/.dovecot.sieve Sep 14 19:50:55 server dovecot: [ID 583609 local0.debug] lda(userxx): Debug: sieve: opening script /home/grp/userxx/.dovecot.sieve Sep 14 19:50:55 server dovecot: [ID 583609 local0.debug] lda(userxx): Debug: sieve: script /home/grp/userxx/.dovecot.sieve successfully compiled Sep 14 19:50:55 server dovecot: [ID 583609 local0.debug] lda(userxx): Debug: sieve: executing script from /home/grp/userxx/.dovecot.sieve Sep 14 19:50:56 server dovecot: [ID 583609 local0.info] lda(userxx): save: box=INBOX, uid=6, msgid=<201109141750.p8EHotbE015854(a)server.hrz.uni-giessen.de>, size=1035 Sep 14 19:50:56 server dovecot: [ID 583609 local0.debug] lda(userxx): Debug: box=/var/mail/userxx mount=/var/mail match=yes Sep 14 19:50:56 server dovecot: [ID 583609 local0.info] lda(userxx): sieve: msgid=<201109141750.p8EHotbE015854(a)server.hrz.uni-giessen.de>: stored mail into mailbox 'INBOX' I think the lda worked in previous releases without a sieve script file in the users home directory. dovecot -n output is: # 2.0.14: /opt/local/etc/dovecot/dovecot.conf # OS: SunOS 5.10 sun4v auth_debug = yes auth_debug_passwords = yes auth_verbose = yes disable_plaintext_auth = no listen = server.hrz.uni-giessen.de localhost mail_debug = yes mail_fsync = always mail_location = mbox:~/Mail:INBOX=/var/mail/%u mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = mail_log notify quota mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes namespace { inbox = yes location = prefix = separator = / type = private } namespace { hidden = yes list = no location = prefix = Mail/ separator = / subscriptions = yes type = private } passdb { driver = pam } passdb { args = /opt/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { autocreate = Trash autocreate2 = caughtspam autocreate3 = Sent autosubscribe = Trash autosubscribe2 = caughtspam autosubscribe3 = Sent mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = fs:Home-Verzeichnis:noenforcing quota2 = fs:INBOX:noenforcing:mount=/var/mail sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)hrz.uni-giessen.de protocols = imap pop3 lmtp sieve sendmail_path = /usr/lib/sendmail service auth { client_limit = 11120 } service imap-login { process_min_avail = 16 service_count = 0 vsz_limit = 640 M } service imap { process_limit = 4096 vsz_limit = 1 G } ssl_cert = </etc/ssl/server.crt ssl_key = </etc/ssl/server.key syslog_facility = local0 userdb { driver = passwd } version_ignore = yes protocol lda { info_log_path = log_path = mail_plugins = mail_log notify quota sieve } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_max_userip_connections = 20 mail_plugins = mail_log notify quota autocreate imap_quota } protocol lmtp { mail_plugins = mail_log notify quota sieve } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xv%08Xu } -- Hochschulrechenzentrum der | Mail: Juergen.Obermann(a)hrz.uni-giessen.de Justus-Liebig-Universitaet | WWW: http://www.uni-giessen.de/obermann/ Heinrich-Buff-Ring 44 | Tel: 0641-99-13054 (0641-99-13001) D-35392 Giessen, Germany | Fax: 0641-99-13009

3 2

[Dovecot] Maildir "locking"
by Attila Nagy 15 Sep '11

15 Sep '11

Hello, I'm looking for the alternative of qmail's chmod -t (sticky bit on the maildir root) for Dovecot. What I'm trying to achieve with this lock: - Dovecot lmtp should give back a temporary error (so the email will be deferred and re-delivered later) - all other Dovecot daemons (pop, imap) should work as usual, but should not alter maildir contents (they can modify their own files, like indexes, logs etc) What is the best way to do this? If there is no such thing currently, would it be hard to implement the sticky bit checking on the root? Thanks,

2 6

[Dovecot] imapc vs auth-userdb security
by Lutz Preßler 15 Sep '11

15 Sep '11

Hello, with imapc settings coming from userdb (individual configuration necessary) there exists a security problem if access to auth-userdb socket is given to normal (shell) users: testuser@host:~$ doveadm user user1 userdb: lpmail uid : 1000 gid : 1111 home : /home/user1 namespace : gmail namespace/gmail/list: yes namespace/gmail/subscriptions: no namespace/gmail/separator: . namespace/gmail/prefix: INBOX.gmail. namespace/gmail/location: imapc:~/Maildir/gmail imapc_host: imap.gmail.com imapc_user: someuser(a)gmail.com imapc_password: cleartextpassword! imapc_ssl : imaps imapc_ssl_ca_dir: /etc/ssl/certs imapc_port: 993 Lutz

2 3

[Dovecot] Which dovecot-antispam with dovecot 2?
by Svoop 14 Sep '11

14 Sep '11

Hi I'm a little confused as there are two repos for the dovecot-antispam plugin. Eugene's hg repo is explicitly labeled "for Dovecot 2", but the Johannes' git repo has commits later in date: hg: http://wiki2.dovecot.org/Plugins/Antispam git: http://git.sipsolutions.net/?p=dovecot-antispam.git I guess the unrelease hg code ist the one for Dovecot 2, but what is Eugene's 1.4 code for? Thanks!

2 1