- dovecot - dovecot.org

[Dovecot] TLS with autosigned certs
by Antonio Perez-Aranda 16 Feb '11

16 Feb '11

Is normal this info/error with autosigned certs? Feb 14 20:25:47 pop3-login: Info: Disconnected (no auth attempts):ip=[127.0.0.1], port=[51243], protocol=pop3, TLS handshaking: SSL_accept() failed: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca: SSL alert number 48 I set on config a specific certs for pop3 protocol including key, cert and ca, protocol pop3 { ssl_cert = </etc/ssl/pop3d.cert ssl_key = </etc/ssl/pop3d.key ssl_ca = </etc/ssl/ca.pem } If I check as true confirmed on Thunderbird client, then, the error is no reported any more. -- Antonio Pérez-Aranda Alcaide aperezaranda(a)yaco.es Yaco Sistemas S.L. http://www.yaco.es/ C/ Rioja 5, 41001 Sevilla Teléfono +34 954 50 00 57 Fax +34 954 50 09 29

3 3

[Dovecot] test emails did not arrive at SMTP server : after dovecot installation
by sunhux G 16 Feb '11

16 Feb '11

Just set up postfix & it's running on my RHES 4.2 box. Immediately after postfix is up, I test sending emails from a permitted domain (ahhh, on this postfix server's domain firewall, we even have a firewall rule which permits Tcp25 from those few sending domains' SMTP servers) using an email client to sender_id@[IP_address_of_the_postfix_server] & the /var/log/maillog on the postfix server indicated the email arrives at the postfix server (with some errors though) : # grep recipient_id /var/log/maillog* maillog:Feb 15 11:41:52 hostname postfix/smtpd[6891]: NOQUEUE: reject: RCPT from gate1.mds.com.sg[203.126.130.157]: 554 5.7.1 <recipient_id(a)[202.6.163.31]>: Relay access denied; from=<prvs=020cae8c4=recipient_id(a)mds.com.sg> to=<recipient_id(a)[202.6.163.31]> proto=ESMTP helo=<gate1.mds.com.sg> maillog:Feb 15 13:43:20 hostname sendmail[7688]: NOQUEUE: SYSERR(recipient_id): can not chdir(/var/spool/mqueue/): Permission denied Then I installed dovecot rpm on my RHES box : uninstall it as it's an old version & reinstall with a newer version & start up dovecot as well. I did not test sending to sender_id@domain_name at that time because the domain I purchased from a domain provider/registrar has yet to be registered in our ISP's DNS. Subsequently I registered the following A, MX & NS records with our ISP : A: myportaltech.com. IN A 202.6.163.31 A: smtp.myportaltech.com. IN A 202.6.163.31 PTR: 31.163.6.202.in-addr.arpa. IN PTR smtp.myportaltech.com. MX: myportaltech.com. IN MX 10 smtp.myportaltech.com. NS: myportaltech.com. IN NS ns1.businessexprezz.com. NS: myportaltech.com. IN NS ns2.businessexprezz.com. The above myportaltech is just a fictitious name of my domain but I can provide the actual domain name if needed. After the above records have been propagated to all other DNSes, I test sending email from the same permitted domain, this time using domain name & the email never arrives & I did not receive a 'bounced mail' notification too. Then I test sending from the same domain to recipient_id(a)[202.6.163.31] & this time round, the test email never show up in /var/log/maillog* anymore. The network/security guys confirmed that the firewall logs did not show any denied SMTP records. So how do I go about troubleshooting this? Is this a DNS record entries issue, firewall/network issue, related to dovecot or something within my postfix server? Thanks Sun

2 1

[Dovecot] Dovecot can't start with error pop3-login & imap-login not supported protocol family
by sunhux G 16 Feb '11

16 Feb '11

I've done the installation (rpm downloaded from the RHES4 link given by Oli below) but dovecot won't start, it gave the error pop3-login & imap-login not supported by protocol. I'm sure with a much older version (in my previous post) of dovecot, I'm able to start up dovecot & it did not give this error. Thought dovecot is suppose to come with pop3 & imap? # rpm -Uvh --force mysqlclient14-4.1.22-1.el4s1.1.i386.rpm warning: mysqlclient14-4.1.22-1.el4s1.1.i386.rpm: V3 DSA signature: NOKEY, key ID 443e1821 Preparing... ########################################### [100%] 1:mysqlclient14 ########################################### [100%] /sbin/ldconfig: /usr/lib/libcpqlsptransport.so.0 is not a symbolic link [root@tmp]# rpm -qa | grep -i mysql mysql-4.1.12-3.RHEL4.1 perl-DBD-MySQL-2.9004-3.1 php-mysql-4.3.9-3.8 mysql-server-4.1.12-3.RHEL4.1 mysqlclient14-4.1.22-1.el4s1.1 <== it's there now [root@tmp]# rpm -i ./dovecot-2.0.9-1_125.el4.i386.rpm warning: only V3 signatures can be verified, skipping V4 signature warning: only V3 signatures can be verified, skipping V4 signature [root@tmp]# cd /etc [root@etc]# ls -ld rc*/*dove* lrwxrwxrwx 1 root root 17 Feb 16 11:37 rc0.d/K01dovecot -> ../init.d/dovecot lrwxrwxrwx 1 root root 17 Feb 16 11:37 rc1.d/K01dovecot -> ../init.d/dovecot lrwxrwxrwx 1 root root 17 Feb 16 11:37 rc2.d/K01dovecot -> ../init.d/dovecot lrwxrwxrwx 1 root root 17 Feb 16 11:37 rc3.d/K01dovecot -> ../init.d/dovecot lrwxrwxrwx 1 root root 17 Feb 16 11:37 rc4.d/K01dovecot -> ../init.d/dovecot lrwxrwxrwx 1 root root 17 Feb 16 11:37 rc5.d/K01dovecot -> ../init.d/dovecot lrwxrwxrwx 1 root root 17 Feb 16 11:37 rc6.d/K01dovecot -> ../init.d/dovecot [root@nspplss2 etc]# ls -ld rc*/S*dove* ls: rc*/S*dove*: No such file or directory [root@nspplss2 etc]# pwd /etc [root@etc]# ls rc*/*postf* rc0.d/K30postfix rc2.d/S80postfix rc4.d/S80postfix rc6.d/K30postfix rc1.d/K30postfix rc3.d/S99postfixstart rc5.d/S80postfix [root@etc]# ln -s /etc/init.d/dovecot /etc/rc3.d/S70dovecot [root@etc]# ln -s /etc/init.d/dovecot /etc/rc5.d/S70dovecot [root@]# init.d/dovecot start Starting Dovecot Imap: Error: socket() failed: Address family not supported by protocol Error: service(pop3-login): listen(::, 110) failed: Address family not supported by protocol Error: socket() failed: Address family not supported by protocol Error: service(pop3-login): listen(::, 995) failed: Address family not supported by protocol Error: socket() failed: Address family not supported by protocol Error: service(imap-login): listen(::, 143) failed: Address family not supported by protocol Error: socket() failed: Address family not supported by protocol Error: service(imap-login): listen(::, 993) failed: Address family not supported by protocol Fatal: Failed to start listeners [FAILED] [root@etc]# telnet localhost 110 Trying 127.0.0.1... telnet: connect to address 127.0.0.1: Connection refused telnet: Unable to connect to remote host: Connection refused [root@etc]# rpm -qa | grep dove dovecot-2.0.9-1_125.el4 [root@etc]# chkconfig --list | grep pop3 [root@etc]# chkconfig --list | grep imap On Tue, Feb 15, 2011 at 8:39 PM, Oli Schacher <dovecot(a)lists.wgwh.ch> wrote: > On Tue, 15 Feb 2011 18:00:53 +0800 > sunhux G <sunhux(a)gmail.com> wrote: > > > I'm on RHES 4.x > > > > I downloaded 2 dovecot RPM packages from > > http://packages.sw.be/dovecot/ > > > > dovecot-1.0.13-1.el4.rfx.i386.rpm 13-Nov-2010 22:15 1.8M > > RHEL4 and CentOS-4 x86 32bit > > and > > dovecot-0.99.13-1.2.el4.test.i386.rpm 21-Feb-2005 16:57 693K > > RHEL4 and CentOS-4 x86 32bit > > > > [...] > >Q1: > >Is the test version rpm of dovecot reliable? It's only half the size > >of the other rpm (that I was not able to install) > > 0.9 / 1.0 : These versions are way out of date and you will probably > have a hard time getting support. I suggest you try the current > versions from atrpms.net We have been using the 2.0 RHEL5 packages by > Axel Thimm for quite some time now and they work flawlessly. > > Link for RHEL4 packages: http://packages.atrpms.net/dist/el4/dovecot/ > > Maybe this fixes Q2 as well ;-) > > Q3: You'll find lots of examples / tutorials in the dovecot wiki : > http://wiki2.dovecot.org/#HOWTOs.2C_examples_and_tutorials > > HTH > > Oli >

2 2

[Dovecot] [Off Topic] - Any backup solutions ?
by Spyros Tsiolis 16 Feb '11

16 Feb '11

Hello kind people, OK, I know this is not for this list; However, reading all these mails on the topic of filesystems, I thought that it's a good place to ask about backup software on linux. Here's what I have. It's an HP 230 Ultrium LTO 1 SCSI backup mechanism (tape streamer to be exact). I'm supposed to hook it up today with an adaptec AHA-2940 controller to a gigabyte mainboard running Ubuntu Server 10.04. Does anyone have a config close to this one ? What kind of software would you chaps recommend ? dd ? Bacula ?? Other ?? This mechanism is supposed to grab backups from the same machine running it (the tape streamer), which is an ubuntu server version 10.04 with three SATA disks and maybe some stuff remotely (through the local network that is), from a couple of windows 7 / windows xp machines. Also 100Gb on every tape is not going to be enough and it looks like I will have to swap tapes during the process. Thank you all for your time and patience, Best Regards, spyros ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

1 0

[Dovecot] help with dovecot installation dependencies
by sunhux G 15 Feb '11

15 Feb '11

I'm on RHES 4.x I downloaded 2 dovecot RPM packages from http://packages.sw.be/dovecot/ dovecot-1.0.13-1.el4.rfx.i386.rpm 13-Nov-2010 22:15 1.8M RHEL4 and CentOS-4 x86 32bit and dovecot-0.99.13-1.2.el4.test.i386.rpm 21-Feb-2005 16:57 693K RHEL4 and CentOS-4 x86 32bit The first rpm fails with error below : # rpm -i ./dovecot-1.0.13-1.el4.rfx.i386.rpm warning: ./dovecot-1.0.13-1.el4.rfx.i386.rpm: V3 DSA signature: NOKEY, key ID 6b8d79e6 error: Failed dependencies: libmysqlclient.so.14(libmysqlclient_14) is needed by dovecot-1.0.13-1.el4.rfx.i386 I have a hard time trying to locate an rpm that contains libmysqlclient.so.14 & have no luck : # rpm -i ./mysql-libs-5.1.42-4.el6.i686.rpm warning: ./mysql-libs-5.1.42-4.el6.i686.rpm: V3 RSA/MD5 signature: NOKEY, key ID f21541eb error: Failed dependencies: libcrypto.so.10 is needed by mysql-libs-5.1.42-4.el6.i686 libssl.so.10 is needed by mysql-libs-5.1.42-4.el6.i686 rpmlib(FileDigests) <= 4.6.0-1 is needed by mysql-libs-5.1.42-4.el6.i686 rtld(GNU_HASH) is needed by mysql-libs-5.1.42-4.el6.i686 rpmlib(PayloadIsXz) <= 5.2-1 is needed by mysql-libs-5.1.42-4.el6.i686 Then I installed the 2nd dovecot rpm successfully but its filename indicated it's a "test" version : # rpm -i ./dovecot-0.99.13-1.2.el4.test.i386.rpm warning: ./dovecot-0.99.13-1.2.el4.test.i386.rpm: V3 DSA signature: NOKEY, key ID 6b8d79e6 # /etc/init.d/dovecot start Starting IMAP daemon (dovecot): [ OK ] Q1: Is the test version rpm of dovecot reliable? It's only half the size of the other rpm (that I was not able to install) Q2: Kindly assist me to resolve the 1st rpm issue : let me know where I can download the dependencies etc Q3: Lastly, kindly point me to a simple doc that tells me how to do basic setup of dovecot & create simple mailbox accounts. I'm a complete newbie to dovecot & postfix. Have some Linux know-how

2 3

[Dovecot] Recover a deleted message in MDBOX format ?
by Frank Bonnet 15 Feb '11

15 Feb '11

Hello Every night a backup of all mailboxes is performed to a NFS mounted partition All our mailboxes are now in MDBOX format. I wonder how it would be possible to recover one email accidentally deleted by a user ? It was easy in MBOX format to extract and save it using mutt ( as root ) from the backuped mbox then re-copy it to the user's mbox. Of course I should access to the backup mailboxes space using thunderbird but doing this I need to know every users's passwords, that is unacceptable. for security and privacy reasons. Let users access to the backup space is not possible of course. Is there a tool ? Thanks

1 1

[Dovecot] FreeBSD tuning for a dovecot + postfix server ?
by Frank Bonnet 14 Feb '11

14 Feb '11

Hello I've googled around to tune a bit my mailhub ( AMD64 FreeBSD 8.1, 12 Gb RAM, 2 Tb raid5 disks , ~4000 mailboxes unix users ) but I am a bit confused, All my clients use thunderbird as MUA ( IMAP, IMAPS ) to connect to the mailhub no direct access to the machine. Any of you guys has some pointer to give ? thanks a lot

2 1

[Dovecot] NoSQL Storage Backend
by Marten Lehmann 14 Feb '11

14 Feb '11

Hello, I found a posting on the mailing list from 2008 "Adding new storage backend to Dovecot" while searching for POP3 and IMAP servers, that allow to use a NoSQL backend rather than a traditional file system. The problem with traditional filesystems is, that they are very limited. You cannot easily extend it, even with RAID 10 all messages may be lost due to a RAID controller failure and just-in-time backups of a heavy loaded system with consistently changing messages folders are virtually impossible. Modern object stores like Scality, CouchDB or MongoDB can be very handy, as they easily allow to keep an arbitrary amount of copies of each message on different servers, you can simply add a storage node and new storage is immediately available and mailboxes aren't bound to a certain server any longer, but messages are evenly distributed across all storage nodes, thus distributing load as well. Since the original posting was dated 2008 I was in good hope, that someone worked on that already, but at least in dovecot-2.0.9/src/lib-storage I couldn't find anything relating to NoSQL message stores. Isn't this option of big interest for every bigger mailbox provider? How hard would it be to develop? Would it be possible to get this developed on a paid basis by the dovecot core team? Kind regards Marten

10 11

[Dovecot] Dsync parallel conversion warning
by Frank Bonnet 14 Feb '11

14 Feb '11

Hello When I run multiple dsync processes in parallel I sometime get this warning message (xxxxxxxx): Warning: Transaction log file /user/xxxxxxxx/mail/.imap/INBOX/dovecot.index.log was locked for xxx seconds "xxx seconds" is variable Is it a problem or just a real warning ? Thanks

2 4

Re: [Dovecot] critical feature from version 1 not migrated to version 2 = authentication configuration database per IP
by DaLiV＠apollo.lv 14 Feb '11

14 Feb '11

Timo Sirainen wrote: >> - another way (possible that will be more easiest, and good enough for >> advanced configurations) = single variable that may be set in block >> of exact ip listener configuration , as for provided before example >> may set variable "auth_db_suffix" = string("dc=domain1,dc=tld") for >> definition "local mail.domain1.tld" and that variable are inserted in >> auth block via variable inserting mechanism ... >> > Again not possible, because config parsing is done much earlier. > think for realization can take idea from that patch : --------------------------------- --- src/auth/auth-request.c.orig 2010-12-30 11:42:54.000000000 +0200 --- src/auth/auth-request.c.orig 2010-12-30 11:42:54.000000000 +0200 @@ -1547,6 +1547,7 @@ auth_request_get_var_expand_table(const { '\0', NULL, "login_user" }, { '\0', NULL, "login_username" }, { '\0', NULL, "login_domain" }, + { 'x', NULL, NULL }, { '\0', NULL, NULL } }; struct var_expand_table *tab; @@ -1600,6 +1601,15 @@ auth_request_get_var_expand_table(const auth_request); } } + const char *lip2user[][2] = {{"127.0.0.3","dc=domain1,dc=tld1"},{"127.0.0.1","localhost"},{"127.0.0.2","dc=domain2,dc=tld2"}}; + int arrsize=sizeof( lip2user ) / sizeof( lip2user[0]); + tab[18].value = ""; // default expanded to - emty string + int i; + for(i=0;i<arrsize;i++) { + if (strcmp(net_ip2addr(&auth_request->local_ip),(lip2user[i][0]))==0) { + tab[18].value = lip2user[i][1]; + } + } return tab; } --------------------------------- and there need only possibility to define pairs in config file for lip2user array initialization - then macro/variable %x will be available for substitution in all modules - as for ldap , as for filename-based parameters. in exaple patch created static table to match lip to suffix 127.0.0.3 = "dc=domain1,dc=tld1" 127.0.0.1 = "localhost" 127.0.0.2 = "dc=domain2,dc=tld2" how to initialize arrays from config - i'm was not explored for currently used coding structures may create this array more complex = not as simple pair - but as for selective conversion: %x1 lip to text1, %x2 lip to text2, %x3 lip to text3 ... - then diffirent advanced configurations will be possible ...

1 0