- dovecot - dovecot.org

[Dovecot] LDAPS fault tolerance not working with dovecot
by Nikita Koshikov 10 Feb '11

10 Feb '11

Hello list, In my dovecot-ldap.ext I have: uris = ldaps://host1 ldaps://host2 ldaps://host2 Today host1 hangs and new connections can't be established with mail server. Connected users worked fine (auth_cache_size = 5 k auth_cache_ttl = 15 mins). At this time - host2 and host3 are working fine, but switching to them was not happen. Why ? In logs I got: Feb 09 10:20:36 imap-login: Error: Timeout waiting for handshake from auth server. my pid=29932, input bytes=0 Feb 09 10:20:36 imap-login: Error: Timeout waiting for handshake from auth server. my pid=29867, input bytes=0 Feb 09 10:20:37 imap-login: Error: auth: connect(login) failed: Resource temporarily unavailable Feb 09 10:20:37 imap-login: Error: auth: connect(login) failed: Resource temporarily unavailable Feb 09 10:20:39 imap-login: Error: Timeout waiting for handshake from auth server. my pid=29943, input bytes=0 Feb 09 10:20:40 imap-login: Error: auth: connect(login) failed: Resource temporarily unavailable I also tried to set: hosts = host1:636 host2:636 host3:636 But with above config error log fulls with messages: Feb 09 10:44:57 auth: Error: LDAP: Connection lost to LDAP server, reconnecting And none of servers accepted ldaps connection. Is someone has a success make ldaps fault tolerance ?

2 2

[Dovecot] POP Log entries
by Ralf Hildebrandt 10 Feb '11

10 Feb '11

Disconnected: Logged out top=0/0, retr=0/0, del=0/3239, size=511881537 Disconnected: Logged out top=0/0, retr=2/316038, del=0/3238, size=511876309 What do the numbers mean? Especially since there are two numbers for each category... -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

2 1

[Dovecot] Error message with static userdb
by Carsten Laun-De Lellis 10 Feb '11

10 Feb '11

Hi all I am trying to migrate to dovecot 2.0.9 Dovecot starts without warnings but when I try to connect with a client I always got this error message in the log file: Feb 10 12:57:36 v37143 dovecot: master: Dovecot v2.0.9 starting up (core dumps disabled) Feb 10 12:57:56 v37143 dovecot: auth: Fatal: static userdb: Empty key (=) Feb 10 12:57:56 v37143 dovecot: master: Error: service(auth): command startup failed, throttling Feb 10 12:58:31 v37143 dovecot: imap-login: Error: Timeout waiting for handshake from auth server. my pid=17537, input bytes=0 Feb 10 12:58:56 v37143 dovecot: auth: Fatal: static userdb: Empty key (=) Feb 10 12:58:56 v37143 dovecot: master: Error: service(auth): command startup failed, throttling Feb 10 12:59:26 v37143 dovecot: imap-login: Error: Timeout waiting for handshake from auth server. my pid=17537, input bytes=0 Feb 10 12:59:26 v37143 dovecot: imap-login: Disconnected (no auth attempts): rip=217.91.177.10, lip=89.202.2.143 This is the output of dovecot n: # 2.0.9: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-028stab070.14 x86_64 Ubuntu 10.04.1 LTS reiserfs auth_mechanisms = plain login disable_plaintext_auth = no hostname = v37143.1blu.de mail_location = maildir:/vmail/%d/%n managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = maildir:/vmail/%d/%n prefix = separator = / type = private } passdb { args = /scripts/sql/dovecot/user_auth.sql driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_dir = /var/lib/dovecot/sieve/global sieve_global_path = /var/lib/dovecot/sieve/default.sieve } postmaster_address = root(a)delellis.net protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0660 user = vmail } } ssl_cert = </certs/mail/mailpublic.pem ssl_key = </certs/mail/mailkey.pem userdb { args = uid=vmail gid=vmail home=/var/vmail/%d/%n allow_all_users = yes driver = static } protocol lda { mail_plugins = " sieve" } Any ideas ? Mit freundlichem Gruß Carsten Laun-De Lellis Dipl.-Ing. Elektrotechnik Certified Information Systems Auditor (CISA) Hauptstrasse 13 D-67705 Trippstadt Phone: +49 (6306) 992140 Mobile: +49 (151) 27530865 email: <mailto:carsten.laun-delellis@delellis.net> carsten.laun-delellis(a)delellis.net

2 1

[Dovecot] IMAP subfolders and MDBOX
by Frank Bonnet 10 Feb '11

10 Feb '11

Hello We actually use MBOX format on our mailhub but this does not permit to create IMAP subfolders. Many users are asking me fot this feature and I agree with them of course. My problem is to choose the format that will permit imap subfolders creation. Maildir is not my favorite format and I wonder about MDBOX. Does it permit imap subfolders creation ? It is possible to convert from MBOX to MDBOX in one shot ? Is it stable / mature enoug for a production server ( 4000 users ) ? Thank you

3 5

[Dovecot] /var/mail/<user> and mail group privileges
by Michal Hlavinka 10 Feb '11

10 Feb '11

Hi Timo, I'm facing problem with mail group privileges (again), because I've heard a few complains. I was looking at old emails and list archives, but still does not know the answer. In default (fedora/rhel) setup mail group and 0660 privileges are used. This means that when mail_location = mbox:~/mail:INBOX=/var/mail/%u is used, dovecot fails with first (and only first) attempt to select inbox (imap) or login (pop3). Shouldn't mkdir and chown make together a transaction? When it fails just for first time, it confuses some admins (this is the reason why I'm getting complains (bug reports) just because missing/wrong configuration). I think it a) should work even for first connection (ignore chown failure) or b)it should not work for following connection, so the behavior should be more consistent. Also it seems unclear what configuration option is required for making this work in new dovecot versions where configuration is split to mail_privileged_group and mail_access_groups. I see that after reading documentation in 10-mail.conf, some admins expects mail_privileged_group to be enough while mail_access_group is required to prevent fchown failure. Would it be possible to explicitly mention in the config file what option is required? I can add patch with this to our rpm, but we always prefer to be as close to the upstream as possible. Thanks Michal

2 4

[Dovecot] LDAP quota groups
by ian+dovecot＠comtek.co.uk 10 Feb '11

10 Feb '11

Is there any way to have a per-LDAP-group quota? The OpenLDAP folk's suggestions are to hack the source for an overlay (ideal, but it looks somewhat involved) or to do it at the application (Dovecot). I've added an LDAP userattr 'quotaMegaBytes' which is great for allowing me to override the server's default quota on a per-user basis, but ideally I'd be able to override the quota only for people who are member of a certain LDAP group. Perhaps I could override it for IMAP sessions with a postlogin script, but I can't see any way to apply it to deliver. Thanks for any suggestions, Ian

1 0

[Dovecot] Access rights after dsync
by Joan Moreau 10 Feb '11

10 Feb '11

Hi, It looks like the access rights are not correctly preserved after a dsync I have rwXr-X-- from my original folder (which is right) I have rwXrwXrwX in the "mirrored" fodler (which is very wrong) Not sure what cause this, but it looks like a bug Best, jm

2 1

[Dovecot] Dovecot 2.0.7 doesn't disassociate STDERR when it daemonizes.
by Virgil Champlin 10 Feb '11

10 Feb '11

At least it appears that way on my FreeBSD 8.1 system. This is probably unnoticeable in regular use but I happen to use CFengine(v2) for system configuration & monitoring. If it notices dovecot not running it tries to start it and hangs. I believe cfengine (cfagent) has created a pipe to monitor the start commmand's stderr and is waiting for this pipe to close. This never happens because the pipe has been inherited by dovecot which, in version 2, doesn't release stderr as part of its daemonization. Although cfengine could be more defensive, I believe dovecot should be disassociating from the inherited stderr. Looking at master/main.c, I see stdin, stdout & stderr being set to /dev/null in main() if they are inherited unassigned: do { null_fd = open("/dev/null", O_WRONLY); if (null_fd == -1) i_fatal("Can't open /dev/null: %m"); fd_close_on_exec(null_fd, TRUE); } while (null_fd <= STDERR_FILENO); But stderr is missing when a later dup2() is used to release any inherited values not covered by the above: if (dup2(null_fd, STDIN_FILENO) < 0 || dup2(null_fd, STDOUT_FILENO) < 0) i_fatal("dup2(null_fd) failed: %m"); Adding a dup2 for stderr to the above statement works in my simple test case but I'm unsure if there are other issues which may require delaying it. Dovecot 1.2.16 approaches this a little differently & does slightly delay the stderr dup2. The appended diff (v2.0.7) works for me but a more informed opinion might have a better suggestion. Thank you very much for your time. I just started using Dovecot and really like it. -virgil --- main.c.orig 2010-11-04 11:58:48.000000000 -0700 +++ main.c 2011-01-05 18:11:45.000000000 -0800 @@ -717,7 +717,8 @@ } if (dup2(null_fd, STDIN_FILENO) < 0 || - dup2(null_fd, STDOUT_FILENO) < 0) + dup2(null_fd, STDOUT_FILENO) < 0 || + dup2(null_fd, STDERR_FILENO) < 0) i_fatal("dup2(null_fd) failed: %m"); pidfile_path = -=-=-=-=-=-=-=-=-=-=-

2 1

[Dovecot] login_trusted_networks (v2.0.8)
by Don Buchholz 10 Feb '11

10 Feb '11

I just spent a bit puzzling over "login_trusted_networks". My problem was using "10.1.2/24" instead of "10.1.2.0/24". Here are some things I looked for during troubleshooting that didn't pan out: (1) No messages printed to syslog. (2) Search for "login_trusted_networks" on the Wiki (wiki2) failed. (3) Comments in example config file didn't specify expected format. Anyway, it works now. <shrug> - Don =================== 'doveconf -n' (redacted): > *[root@postal ~]# **doveconf -n* > # 2.0.8: /etc/dovecot/dovecot.conf > # OS: Linux 2.6.9-67.0.1.ELsmp i686 Red Hat Enterprise Linux WS > release 4 (Nahant Update 6) ext3 > auth_username_format = %Lu > auth_verbose = yes > auth_verbose_passwords = sha1 > login_log_format_elements = user=<%u> service=%Us method=%m rip=%r > lip=%l mpid=%e %c > login_trusted_networks = xx.xx.x.0/24 xx.xx.xx.0/23 > mail_location = maildir:/Virtual_Users/%u/Mail > passdb { > driver = pam > } > passdb { > args = scheme=CRYPT username_format=%u /etc/dovecot/users > driver = passwd-file > } > ssl_ca = </etc/dovecot/ssl/iMove_2011_CAcert.pem > ssl_cert = </etc/dovecot/ssl/postal_cert.pem > ssl_key = </etc/dovecot/ssl/postal_key+req.pem > ssl_key_password = ******** > ssl_parameters_regenerate = 12 > userdb { > driver = passwd > } > userdb { > args = username_format=%u /etc/dovecot/users > driver = passwd-file > } > verbose_proctitle = yes > protocol imap { > ssl_cert = </etc/dovecot/ssl/imap_cert.pem > ssl_key = </etc/dovecot/ssl/imap_key+req.pem > ssl_key_password = </etc/dovecot/ssl/imap.pw > } > protocol pop3 { > ssl_cert = </etc/dovecot/ssl/pop3_cert.pem > ssl_key = </etc/dovecot/ssl/pop3_key+req.pem > ssl_key_password = </etc/dovecot/ssl/pop3.pw > } > *[root@postal ~]#*

2 1

[Dovecot] Error: FETCH [1] for mailbox badbox UID 1 got too little data: 2 vs 4
by Chris Wilson 10 Feb '11

10 Feb '11

Hi all, I can send myself a test message that causes Dovecot to crash when I open it in Alpine, with the following error: Jan 12 14:52:52 one-mail dovecot: imap(chris): Error: FETCH [1] for mailbox badbox UID 1 got too little data: 2 vs 4 Jan 12 14:52:52 one-mail dovecot: imap(chris): Error: Corrupted index cache file /home/chris/mail/.imap/badbox/dovecot.index.cache: Broken MIME parts for mail UID 1 Jan 12 14:52:52 one-mail dovecot: imap(chris): Disconnected: FETCH failed bytes=485/1394 I can do this as follows: $ touch ~/mail/badbox $ echo test | /usr/libexec/dovecot/dovecot-lda -m badbox $ cat ~/mail/badbox >From MAILER-DAEMON Wed Jan 12 14:52:29 2011 test X-IMAPbase: 1294843949 0000000001 X-UID: 1 Status: X-Keywords: Content-Length: 1 And then when I try to open badbox in Alpine (over IMAP), and then open this email, I get the error above, and the connection is aborted. I expect that the "test" line is not a valid header, but dovecot should not crash when opening it. Cheers, Chris. -- Aptivate | http://www.aptivate.org | Phone: +44 1223 760887 The Humanitarian Centre, Fenner's, Gresham Road, Cambridge CB1 2ES Aptivate is a not-for-profit company registered in England and Wales with company number 04980791.

2 1