- dovecot - dovecot.org

[Dovecot] Dovecot mirror down?
by Jim Knuth 18 Mar '11

18 Mar '11

Hello, http://xi.rename-it.nl/debian/ down? Does somebody know why? -- Mit freundlichen Grüßen, Jim Knuth P.S.: Bitte senden Sie KEINE HTML-Mails! ##### Zufallszitat: Lache nie über die Dummheit der anderen. Sie kann deine Chance sein. [Churchill]

3 7

Re: [Dovecot] Problem with expire plugin and expunge
by Christoph Pleger 18 Mar '11

18 Mar '11

Hello, > > Big surprise: Something bad must have happened after the messages were > > deleted from Trash; now all messages are zero days old. > > Are you using maildir? Did you run with those patches + mail_debug=yes? Today, the daily cronjob expired some messages. I have attached the output of the job. It seems that the error occurs not when expunging, but when deleting the first message after expunging. Before deleting a message, "doveadm search" showed me messages that were between zero and four days old, but directly after deleting a message, all messages were zero days old. Here is my log entry from when I deleted that message: Mar 18 09:50:28 joseph dovecot: imap(christoph): Debug: expire: Saving first message to Trash, updating timestamp to 1300438228 Regards Christoph

1 0

[Dovecot] Problem with recompiling sieve scripts after migrating to Dovecot 2.0 from 1.2
by Andrés Yacopino 18 Mar '11

18 Mar '11

I saw this in log file of dovecot: Error: sieve: binary save: failed to create temporary file: open(/usr/local/etc/sieve/after/after.dovecot.svbin.acamail.acasalud.com.ar.13528.) failed: Permission denied (euid=40(vmail) egid=41(vmail) missing +w perm: /usr/local/etc/sieve/after, euid is not dir owner) acamail dovecot: lda(xxxxx@xxxxxx): Error: sieve: the lda sieve plugin does not have permission to save global sieve script binaries; global sieve scripts like /usr/local/etc/sieve/after/after.dovecot.sieve need to be pre-compiled using the sievec tool So i tried to recompile script using sievec like: sievec /usr/lcaol/etc/sieve/after/after.dovecot.sieve but i get: sievec(root): Error: user root: Initialization failed: Initializing mail storage from mail_location setting failed: stat(/root/Maildir) failed: Permission denied (euid=40(vmail) egid=41(vmail) missing +x perm: /root, euid is not dir owner) sievec(root): Fatal: Invalid user settings. Refer to server log for more information. What i must do to resolve this? My dovecot configuration is: # 2.0.11: /usr/local/etc/dovecot/dovecot.conf # OS: Linux xxxxxx auth_master_user_separator = * auth_username_format = %Lu disable_plaintext_auth = no first_valid_gid = 40 first_valid_uid = 40 mail_gid = vmail mail_location = maildir:~/Maildir mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /usr/local/etc/passwd.masterusers driver = passwd-file master = yes } passdb { args = /usr/local/etc/dovecot-ldap.conf driver = ldap } plugin/quota = maildir plugin/quota_rule = *:storage=614400 plugin/quota_rule2 = Trash:storage=+61440 plugin/sieve_after = /usr/local/etc/sieve/after/after.dovecot.sieve plugin/sieve_before = /usr/local/etc/sieve/before/spam.dovecot.sieve protocols = imap pop3 sieve service auth { unix_listener auth-master { group = vmail mode = 0600 user = vmail } user = root } ssl_cert = </usr/local/etc/ssl/certs/dovecot.pem ssl_key = </usr/local/etc/ssl/private/dovecot.pem userdb { args = /usr/local/etc/dovecot-ldap.conf driver = ldap } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } protocol lda { auth_socket_path = /usr/local/var/run/dovecot/auth-master lda_mailbox_autocreate = yes mail_plugins = quota sieve postmaster_address = postmaster@xxxxxx sendmail_path = /usr/lib/sendmail Thanks a lot, -- Andrés Fernando Yacopino

2 1

Re: [Dovecot] dovecot LDA: "temporary failure"
by David Koski 18 Mar '11

18 Mar '11

Forget it. I must have been crosseyed. Someone had put the log file in a non-standard place /home/vmail/dovecot-deliver.log. It told all. A plugin cmusieve was not found, possibly depreciated? I learned how to make the deliver command line work. ;) Sorry, David Koski dkoski(a)sutinen.com > Additional information: > > I created a script to get the return code from deliver: > > 1 #!/bin/bash > 2 > 3 cat "cur/1300037582.P7332Q0M221160.brusco-mail:2,S" | > /usr/lib/dovecot/deliver -f dkoski(a)somedomain.com -d > dkoski(a)domainhidden.com 4 > 5 case $? in > 6 0) echo "0" > 7 ;; > 8 64) echo "64" > 9 ;; > 10 67) echo "67" > 11 ;; > 12 78) echo "78" > 13 ;; > 14 77) echo "77" > 15 ;; > 16 75) echo "75" > 17 ;; > 18 *) echo "unknown" > 19 esac > 20 > > The file it is cat'ing is a valid email in an Maildir/cur file. It returns > 75 (EX_TEMP_FAIL) every time, even run as root. The logs reveal: > > /var/log/dovecot/lda-deliver: > > 2011-03-17 23:35:39 deliver(dkoski(a)somedomain2.com): Info: Loading modules > from directory: /usr/lib/dovecot/modules/lda > > /var/log/dovecot/deliver.info: > (nothing) > > /var/log/dovecot/deliver.err: > (nothing) > > I tried the script on another machine with Dovecot 1.0.15-2.3+lenny1 with > success if I run as root. > > Regards, > David Koski > dkoski(a)sutinen.com > > > This really has me stumped and desperate. I upgraded Debian from 5... > > <snip>

1 0

[Dovecot] dovecot LDA: "temporary failure"
by David Koski 18 Mar '11

18 Mar '11

This really has me stumped and desperate. I upgraded Debian from 5 to 6 (squeeze) and now Dovecot LDA fails. I have checked permissions and the usual. Postfix SMTP, Dovecot POP3 and Dovecot IMAP work. Having to upgrade MySQL from 5.0 to 5.1 made me question that. Logging is of little help. I have turned on logging for LDA to a separate file. When I try to run the deliver command it returns nothing and appears to do nothing: ~$ cat /etc/hosts | /usr/lib/dovecot/deliver -f root@localhost -d dkoski(a)[domainhidden].com $ ..but then I don't know what to expect. The log files are owned by dovecot. I tried chmod'ing them to 777 in desperation. This was working before the upgrade to 1.2.15-4 from 1.0.15-2.3+lenny1. Postfix reports this stuff: Mar 17 22:37:38 host-mail postfix/smtpd[22160]: connect from mail.kosmosisland.com[63.228.175.169] Mar 17 22:37:39 host-mail postfix/smtpd[22160]: 9D80C12AF610: client=mail.kosmosisland.com[63.228.175.169] Mar 17 22:37:39 host-mail postfix/cleanup[22163]: 9D80C12AF610: message-id=<201103172237.29223.dkoski(a)[another-domainhidden].com> Mar 17 22:37:39 host-mail postfix/qmgr[21877]: 9D80C12AF610: from=<dkoski(a)[another-domainhidden].com>, size=1257, nrcpt=1 (queue active) Mar 17 22:37:39 host-mail postfix/smtpd[22160]: disconnect from mail.kosmosisland.com[63.228.175.169] Mar 17 22:37:42 host-mail postfix/smtpd[22168]: connect from localhost[127.0.0.1] Mar 17 22:37:42 host-mail postfix/smtpd[22168]: 480D912AF612: client=mail.kosmosisland.com[63.228.175.169] Mar 17 22:37:42 host-mail postfix/cleanup[22163]: 480D912AF612: message-id=<201103172237.29223.dkoski(a)[another-domainhidden].com> Mar 17 22:37:42 host-mail postfix/qmgr[21877]: 480D912AF612: from=<dkoski(a)[another-domainhidden].com>, size=1873, nrcpt=1 (queue active) Mar 17 22:37:42 host-mail postfix/smtpd[22168]: disconnect from localhost[127.0.0.1] Mar 17 22:37:42 host-mail postfix/pipe[22169]: 480D912AF612: to=<dkoski(a)[domainhidden].com>, relay=dovecot, delay=0.04, delays=0.02/0.01/0/0.01, dsn=4.3.0, status=deferred (temporary failure) Mar 17 22:37:42 host-mail postfix/smtp[22164]: 9D80C12AF610: to=<dkoski(a)[domainhidden].com>, relay=127.0.0.1[127.0.0.1]:10024, delay=3.4, delays=0.84/0.01/0/2.5, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=11197-13, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 480D912AF612) Mar 17 22:37:42 host-mail postfix/qmgr[21877]: 9D80C12AF610: removed And /var/log/dovecot/deliver.info: 2011-03-17 22:43:43 auth(default): Info: new auth connection: pid=22232 2011-03-17 22:43:59 auth-worker(default): Info: sql(dkoski(a)[domainhidden].com,127.0.0.1): query: SELECT email as user, password FROM view_users WHERE email='dkoski(a)[domainhidden].com'; 2011-03-17 22:43:59 auth(default): Info: client out: OK 1 user=dkoski(a)[domainhidden].com 2011-03-17 22:43:59 auth(default): Info: master in: REQUEST 73 22061 1 2011-03-17 22:43:59 auth(default): Info: master out: USER 73 dkoski(a)[domainhidden].com uid=5000 gid=5000 home=/home/vmail/[domainhidden].com/dkoski 2011-03-17 22:44:00 auth(default): Info: new auth connection: pid=22234 I tried reinstalling the package dovecot-common. I downloaded it on another machine and compared the md5sum. # postconf -n alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no config_directory = /etc/postfix content_filter = smtp-amavis:[127.0.0.1]:10024 delay_warning_time = 1h inet_interfaces = all mailbox_size_limit = 0 mydestination = backup.host.localnet, backup.localnet, localhost.localnet, localhost myhostname = mail.[domainhidden].com mynetworks = 192.168.1.0/24, 127.0.0.1 myorigin = /etc/mailname recipient_delimiter = + relayhost = smtp_tls_session_cache_database = btree:${queue_directory}/cache/smtp_scache smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_pipelining, reject_non_fqdn_recipient, reject_unknown_recipient_domain, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot smtpd_sender_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unknown_reverse_client_hostname, reject_non_fqdn_sender, reject_unknown_sender_domain, reject_rbl_client b.barracudacentral.org, reject_rbl_client zen.spamhaus.org, reject_rbl_client cbl.abuseat.org, reject_rbl_client dnsbl.njabl.org, reject_rbl_client combined.njabl.org, reject_rbl_client bl.spamcop.net, reject_rbl_client spamguard.leadmon.net, reject_rbl_client korea.services.net, reject_rbl_client spamsources.fabel.dk, reject_rhsbl_sender rhsbl.ahbl.org smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key smtpd_tls_session_cache_database = btree:${queue_directory}/cache/smtpd_scache smtpd_use_tls = yes virtual_alias_maps = mysql:/etc/postfix/mysql-virtual-alias-maps.cf,mysql:/etc/postfix/mysql-email2email.cf virtual_gid_maps = static:5000 virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual-mailbox-domains.cf virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual-mailbox-maps.cf virtual_transport = dovecot virtual_uid_maps = static:5000 From master.cf: dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -d ${recipient} # dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 6.0 ext3 log_path: /var/log/dovecot/deliver.err info_log_path: /var/log/dovecot/deliver.info log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap pop3 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_privileged_group: mail mail_location: maildir:/home/vmail/%d/%n/Maildir mail_debug: yes mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 lda: log_path: /var/log/dovecot/lda-deliver.err info_log_path: /var/log/dovecot/lda-deliver.info log_path: /home/vmail/dovecot-deliver.log auth_socket_path: /var/run/dovecot/auth-master postmaster_address: info(a)[another-domainhidden].com mail_plugins: cmusieve global_script_path: /home/vmail/globalsieverc auth default: mechanisms: plain login verbose: yes debug: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: static args: uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail Regards, David Koski david(a)kosmosisland.com

2 2

Re: [Dovecot] segmentation fault with doveadm search
by Timo Sirainen 17 Mar '11

17 Mar '11

On Thu, 2011-03-17 at 17:54 +0100, Nick Rosier wrote: > Hope this is better: > > #1 0x000000080231ab21 in fts_build_deinit (_ctx=0x801ea2640) at > fts-storage.c:551 Yes, much better. Easy fix: http://hg.dovecot.org/dovecot-2.0/rev/3d48418b0501

2 1

[Dovecot] Unconfigured dictionary name 'quotadict'
by Simone Caruso 17 Mar '11

17 Mar '11

Currently i'm migrating an existing dovecot 1.2 server to dovecot 2.0.11, once configured the 2.0 server works, auth works... but i get these messages in mail.log: dict: Error: dict client: Unconfigured dictionary name 'quotadict' Mar 17 16:46:14 penny dovecot: imap(mailbox(a)example.com): Error: write(/var/run/dovecot/dict) failed: Broken pipe Mar 17 16:46:38 penny dovecot: dict: Error: dict client: Unconfigured dictionary name 'quotadict' Mar 17 16:46:38 penny dovecot: imap(mailbox(a)example.com): Error: read(/var/run/dovecot/dict) failed: Remote disconnected My quota configuration is the following (as wiki says): service dict { unix_listener dict { mode = 0600 user = vmail } } plugin { quota = dict:User quota::proxy::quotadict quota_rule2 = Trash:storage=+55M } dict { quota = mysql:/etc/dovecot/dovecot-dict-sql.conf } dovect-dict-sql.conf: connect = host=localhost dbname=ketna user=***** password=***** map { pattern = priv/quota/storage table = imap_quota username_field = email value_field = current } map { pattern = priv/quota/messages table = imap_quota username_field = email value_field = messages } Someone can tell me where's my fault? (Attached my "dovecot -n" output.) Thanks! -- Simone Caruso

2 2

[Dovecot] Migrating to mdbox
by Chris Wilson 17 Mar '11

17 Mar '11

Hi all, I think it would be a good idea for me to move from mbox to mdbox, as I have 57,000 messages in my inbox, and clients hang for a minute whenever they request a CHECK, or Dovecot feels the need to run one itself. Looking at past threads: http://www.mail-archive.com/dovecot@dovecot.org/msg35212.html http://comments.gmane.org/gmane.mail.imap.dovecot/53936 it seems that the safest way is to run: sudo dsync -v -u chris backup mdbox:/home/chris/mdbox eliminate any errors that it reports, test the new mdbox access temporarily, and then switch my config in Dovecot. Ideally I'd like to do that just for me, without disrupting other users of this server (that I help to admin). This error occurs every time I run dsync, and I understand it, so I've elided it: dsync(chris): Error: open() failed with mbox file /home/chris/mail/admin: Permission denied dsync(chris): Error: Failed to sync mailbox admin: Internal error occurred. Refer to server log for more information. [2011-03-09 15:50:10] dsync(chris): Info: spam: highest_modseq changed: 2 != 3 I don't understand the following errors from dsync (2.0.9): chris@one-mail(~)$ sudo dsync -v -u chris backup mdbox:/home/chris/mdbox dsync(chris): Error: Next message unexpectedly corrupted in mbox file /home/chris/mail/spam at 404513741 dsync(chris): Warning: Transaction log file /home/chris/mail/.imap/spam/dovecot.index.log was locked for 252 seconds dsync(chris): Info: spam: only in source dsync(chris): Info: temp: only in source dsync(chris): Info: Sent: only in source dsync(chris): Info: addressbook: only in source dsync(chris): Info: sent-mail-sep-2008: only in source dsync(chris): Info: sent-mail-oct-2010: only in source dsync(chris): Info: INBOX.Sent: only in source dsync(chris): Info: sent-mail: only in source dsync(chris): Info: INBOX.Trash: only in source chris@one-mail(~)$ sudo dsync -v -u chris backup mdbox:/home/chris/mdbox dsync(chris): Info: spam: only in source dsync(chris): Info: spam: only in dest dsync(chris): Error: Failed to sync mailbox spam: Mailbox doesn't exist: spam dsync(chris): Error: msg iteration failed: Couldn't open mailbox 407c272bc369304dbc210000d6a93087 dsync(chris): Error: Trying to open a non-listed mailbox with guid=407c272bc369304dbc210000d6a93087 dsync(chris): Error: msg iteration failed: Couldn't open mailbox 407c272bc369304dbc210000d6a93087 dsync(chris): Error: Trying to open a non-listed mailbox with guid=407c272bc369304dbc210000d6a93087 dsync(chris): Error: Failed to sync mailbox spam: Mailbox doesn't exist: spam Note: how is it possible for the same folder to be "only in source" and "only in dest"? chris@one-mail(~)$ sudo dsync -v -u chris backup mdbox:/home/chris/mdbox dsync(chris): Info: spam: highest_modseq changed: 2 != 3 dsync(chris): Info: sent-mail: uidnext changed: 378 != 375 chris@one-mail(~)$ sudo dsync -v -u chris backup mdbox:/home/chris/mdbox dsync(chris): Info: spam: highest_modseq changed: 2 != 3 Now the latter is all I get whenever I run dsync. Is it broken? Cheers, Chris. -- Aptivate | http://www.aptivate.org | Phone: +44 1223 760887 The Humanitarian Centre, Fenner's, Gresham Road, Cambridge CB1 2ES Aptivate is a not-for-profit company registered in England and Wales with company number 04980791.

3 12

[Dovecot] SSL Compatibility? SNI vs SAN (Subject Alternative Names) and multiple domains
by Thomas Harold 17 Mar '11

17 Mar '11

Getting ready to redo our mail server setup and I'm trying to wrap my head around the ins and outs and pratfalls involved in SSL, multiple domains, and Dovecot. I've taken a look at: http://wiki2.dovecot.org/SSL/DovecotConfiguration My basic understanding at this point is that: - With SSL for IMAP/POP3, it is limited to one certificate per IP address, because the SSL process starts as soon as the client opens the socket to the IP address. In order to support multiple domains / server names, you have to rely on SAN (Subject Alternative Names) in the server's SSL certificate. - If I use STARTTLS for IMAP/POP3 and Dovecot 2.x, then the SNI process will allow the client to specify that they want to talk to mail server XYZ and Dovecot will hand the correct certificate to the client. However, a lot of devices don't support SNI yet so this is fraught with peril and incompatibilities. So it seems like if I have fewer IP addresses then mail server names, I should stick with a single SSL cert and use SANs. (Wildcard certs are not an option due to the top level domain being different.) How big of an issue is a cert with half a dozen or a dozen SANs attached? Do most mail clients handle that sort of certificate properly in order to access their mailboxes? Reference links: http://www.digicert.com/subject-alternative-name-compatibility.htm

7 8

[Dovecot] problems with public (sub)folders
by frederik.schmid＠gmx.net 17 Mar '11

17 Mar '11

Hi, i am trying to share a maildir++ mailbox to other users but i can only subscribe to the root directory. The subfolders of the public mailbox do not appear in the exported list. Does anyone has an idea how i can share the subfolders too without creating symlinks for every single folder? Best, Frederik >>>>> ls -lA /var/mail/public .user01 -> /var/mail/user01/Maildir >>>>> ls -A /var/mail/user01/Maildir/ (shortened) .Drafts,.Templates,.Sent,.Trash,.Spam new,cur,tmp dovecot.* .subfolder .subfolder.test1 .subfolder.test1.xyz .subfolder.test2 .subfolder.test3 >>>>> doveconf -n # 2.0.11 (2cb0fb910441): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0 auth_master_user_separator = * auth_username_format = %Ln auth_verbose = yes base_dir = /var/run/dovecot/ disable_plaintext_auth = no first_valid_gid = 100 first_valid_uid = 1000 hostname = xxx last_valid_gid = 50000 last_valid_uid = 50000 listen = * log_path = /var/log/dovecot.log mail_debug = yes mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = prefix = separator = . type = private } namespace { hidden = yes inbox = no list = no location = prefix = INBOX. separator = . type = private } namespace { hidden = no inbox = no list = children location = maildir:/var/mail/public prefix = public. separator = . subscriptions = no type = public } passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin/autocreate = Trash plugin/autocreate2 = Spam plugin/autocreate3 = Sent plugin/autocreate4 = Drafts plugin/autocreate5 = Templates plugin/autocreate6 = Spam plugin/autosubscribe = Trash plugin/autosubscribe2 = Spam plugin/autosubscribe3 = Sent plugin/autosubscribe4 = Drafts plugin/autosubscribe5 = Templates plugin/autosubscribe6 = Spam plugin/sieve = ~/.main.sieve plugin/sieve_before = /etc/dovecot/sieve/move-spam.sieve plugin/sieve_dir = ~/sieve postmaster_address = postmaster@xxx protocols = imap lmtp sieve service anvil { client_limit = 2048 } service imap-login { client_limit = 1024 inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_limit = 1024 process_min_avail = 16 } service lmtp { inet_listener lmtp { address = * port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl = required ssl_cert = </etc/dovecot/cert/xxx ssl_key = </etc/dovecot/cert/xxx userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes protocol lmtp { mail_plugins = " sieve" } protocol lda { mail_plugins = " sieve" } protocol imap { mail_max_userip_connections = 100 mail_plugins = " autocreate" } -- GMX DSL Doppel-Flat ab 19,99 Euro/mtl.! Jetzt mit gratis Handy-Flat! http://portal.gmx.net/de/go/dsl

2 1