- dovecot - dovecot.org

[Dovecot] IMAP Timeout Leak
by qmail＠top-consulting.net 08 Dec '10

08 Dec '10

My Dovecot config is as follows: # 1.2.14: /usr/local/etc/dovecot.conf # OS: FreeBSD 6.3-RELEASE i386 protocols: imap pop3 imaps pop3s listen(default): *:143 listen(imap): *:143 listen(pop3): *:110 ssl_listen(default): *:993 ssl_listen(imap): *:993 ssl_listen(pop3): *:995 ssl_ca_file: /usr/local/certs/gd_bundle.crt ssl_cert_file: /usr/local/certs/imap.crt ssl_key_file: /usr/local/certs/rsa.imap.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_greeting: MAIL ready. login_processes_count: 50 login_max_processes_count: 500 max_mail_processes: 798 mail_max_userip_connections(default): 100 mail_max_userip_connections(imap): 100 mail_max_userip_connections(pop3): 10 verbose_proctitle: yes first_valid_uid: 89 first_valid_gid: 89 mail_privileged_group: mail mail_uid: 89 mail_gid: 89 mail_location: maildir:~/Maildir mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes lock_method: dotlock mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota fts fts_solr antispam virtual acl imap_acl mail_plugins(imap): quota imap_quota fts fts_solr antispam virtual acl imap_acl mail_plugins(pop3): virtual mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: . inbox: yes list: yes subscriptions: yes namespace: type: private separator: . prefix: INBOX. hidden: yes list: no subscriptions: yes namespace: type: private separator: . prefix: Labels. location: virtual:~/Maildir/Labels:INDEX=MEMORY list: yes subscriptions: yes namespace: type: shared separator: . prefix: shared.%%n. location: maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u list: children lda: sendmail_path: /usr/sbin/sendmail auth default: mechanisms: plain login digest-md5 cram-md5 username_format: %Lu verbose: yes passdb: driver: vpopmail args: webmail=192.168.1.4 userdb: driver: vpopmail args: quota_template=quota_rule=*:backend=%q socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: vpopmail plugin: fts: solr fts_solr: break-imap-search url=http://192.168.1.4:8983/solr/ quota: maildir quota_rule: ?:storage=0 antispam_signature: X-DSPAM-Signature antispam_trash: trash;Trash;Deleted Items antispam_spam: Spam antispam_dspam_binary: /usr/local/bin/dspam antispam_dspam_args: --client;--user;vpopmail acl: vfile acl_shared_dict: proxy::acl dict: acl: mysql:/usr/local/etc/dovecot-dict-sql.conf and I see the following error in the logs: Timeout leak: 0x80ff950 Running it through gdb, I get this: (gdb) x 0x80ff950 0x80ff950 <client_dict_timeout>: 0x53e58955 Is it a problem with the ACL plugin ?

2 1

[Dovecot] imap/pop proxy and filter
by Mike Korizek 07 Dec '10

07 Dec '10

Hi I use dovecot as imap/pop proxy. Is it possible to filter the messages before they get delivered to the client? Thanks for any hint how to achieve this. Mike

2 3

[Dovecot] proxy and gpg processing
by Mike 07 Dec '10

07 Dec '10

Hi I have dovecot running as pure proxy for accessing imap and pop mailboxes on other servers. How can I do the following scenario: When a client user reads a gpg signed or gpg encrypted email through the proxy, can I verify/decrypt the email before it gets delivered to the client user? Ideally I would like to write a perl program which processes the email within the proxy before it gets delivered to the user. With Sieve I can not do this, is there another way to achieve this? Thanks for any hint. Mike

1 0

Re: [Dovecot] imap/pop proxy and filter
by Mike Korizek 07 Dec '10

07 Dec '10

On 12/07/2010 12:18 AM, Paul Cartwright wrote: > On 12/06/2010 06:04 PM, Mike Korizek wrote: >> I use dovecot as imap/pop proxy. >> Is it possible to filter the messages before they get delivered to the >> client? >> > > http://wiki.dovecot.org/LDA/Sieve My understanding was, that Sieve requires LDA but I do not have local mailboxes as I only use the imap/pop proxy functionality. Can I use Sieve for mail filtering despite I do not have local mailboxes? Thanks, Mike

1 0

[Dovecot] imap limits please ?
by Spyros Tsiolis 06 Dec '10

06 Dec '10

Hello, Finally managed to sync an outlook client to dovecot. Looks like it's working. Questions though ; : What are the limits? Number of Folders ? Number of mails per folder ? E.g. for a client of mine, I know that she uses about 5Gb of data at the moment (and counting). Now, this same outlook client consists of the following : 1. about thirty (30) folders ranging from 1000 messages per folder to 100 messages per folder 2. A "Sent Items" folder with about 4,000 messages (and counting) 3. A "Deleted Items" folder with about 5,500 messages (and counting) System, now, is a CentOS 5.5 32-bit on an hp/compaq dl360 (G3) with RAID1 76,3Gb Disks UW320 and four (4Gb) of RAM Output of "dovecot -n" : ------------------------------------------------------------ # 1.2.16: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.17.4.el5 i686 CentOS release 5.5 (Final) ext3 base_dir: /var/run/dovecot/ log_path: /var/log/dovecot/dovecot.log info_log_path: /var/log/dovecot/dovecot-info.log ssl_parameters_regenerate: 48 verbose_ssl: yes login_dir: /var/run/dovecot//login login_executable: /usr/local/dovecot/libexec/dovecot/imap-login login_greeting: * Dovecot ready * login_max_processes_count: 32 mail_location: maildir:/var/MailRoot/domains/%d/%n/Maildir mail_plugins: zlib auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd-file args: /etc/dovecot/passwd passdb: driver: pam userdb: driver: static args: uid=vmail gid=vmail home=/home/vmail/%u userdb: driver: passwd ------------------------------------------------------------ Any answer would be greatly appreciated since I am trying to know the systems' limits. Thank you kindly all, spyros ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

2 1

[Dovecot] CentOS 5 + selinux
by Marcelo Roccasalva 06 Dec '10

06 Dec '10

I've just installed CentOS 5.5 and dovecot 2.0.7. Out of the box, it worked ok with local user accounts. Then I enable selinux and I could no loger login to imap server. I can deal with that via a local policy. But I found dovecot tried to open /etc/shadow: type=AVC msg=audit(1291490764.101:670): avc: denied { read } for pid=16130 comm="auth" name="shadow" dev=md2 ino=96335 scontext=user_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file type=AVC msg=audit(1291500097.318:818): avc: denied { getattr } for pid=17350 comm="auth" path="/etc/shadow" dev=md2 ino=95396 scontext=user_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file even it is configured for pam passdb: # dovecot -n # 2.0.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.26.1.el5 x86_64 CentOS release 5.5 (Final) mbox_write_locks = fcntl passdb { driver = pam } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } I straced the process and it efectively tries to open /etc/shadow. I don't want to disable selinux but I'm not happy letting dovecot read my /etc/shadow. Is there a guide to selinux and dovecot? -- Marcelo "¿No será acaso que ésta vida moderna está teniendo más de moderna que de vida?" (Mafalda)

2 1

[Dovecot] 1.2.15 - segfault if host field attribute not present in ldap. (proxy)
by Mohit Chawla 06 Dec '10

06 Dec '10

In case this is relevant: kernel: [17549.714369] imap-login[11704]: segfault at 0 ip b75c3d23 sp bf888178 error 4 in libc-2.11.2.so[b7551000+140000] If no host field attribute is present in ldap (like mailHost for qmail-ldap), and we are trying to use proxy, then dovecot segfaults. If more information's needed, let me know. Also, somewhat unrelated, but maybe the wiki needs to be edited since using a template as =proxy_maybe=y works, while in wiki its kinda opposite. I don't know of specifics, but should I try using a recent release ?

2 8

[Dovecot] Problem with ACLs
by Micha Krause 06 Dec '10

06 Dec '10

Hi, i want to use unix groups in my ACLs. http://wiki2.dovecot.org/ACL says, I can do that with a post-login script (http://wiki2.dovecot.org/PostLoginScripting) I have verified, that the script is running, and that ACL_GROUPS is correct. But I still can't access the Mailbox. Logfile says: Dec 3 11:19:35 mailint1 dovecot: imap(micha): Debug: acl vfile: reading file /var/mail/mailboxes/shared/mails/server-root/dovecot-acl Dec 3 11:19:35 mailint1 dovecot: imap(micha): Debug: acl vfile: reading file /var/mail/mailboxes/shared/mails/dovecot-acl Im using: dovecot 2.0.7 (5e82c5b1b4a9) Micha Krause

2 2

[Dovecot] Internal Error form delivery from LDAP lookup.
by Jorgen Lundman 06 Dec '10

06 Dec '10

Solaris-x86-10u8 Dovecot-1.2.7 Large mail setup, with quite a few MX servers working well. Generally everything is super. But every now and then, we get "bouts of bad weather" - which only lasts a short time, and curiously nearly always occur when mail is sent to customer mailing lists. I suspect mostly because of that 1 message has multiple recipients within the same domain. Perhaps. Delivery setup as: main.cf: virtual_transport = dovecot dovecot_destination_recipient_limit = 1 dovecot_destination_concurrency_limit=300 master.cf: dovecot unix - n n - 70 pipe flags=DRhu user=dovecot:dovecot argv=/usr/local/libexec/dovecot/deliver -f ${sender} -d ${recipient} Errors look something like: example.com Dec 06 08:46:25 deliver(rbc-005(a)example.com): Info: msgid=<A22A602A940A45A49EA2C4CC53D27655(a)UQC.local>: saved mail to INBOX Dec 06 08:46:25 deliver(rbc-002(a)example.com): Info: msgid=<A22A602A940A45A49EA2C4CC53D27655(a)UQC.local>: saved mail to INBOX Dec 06 08:46:28 deliver(rbc-004(a)example.com): Error: userdb lookup(rbc-004(a)example.com) failed: Internal failure Dec 06 08:46:28 deliver(rbc-011(a)example.com): Error: userdb lookup(rbc-011(a)example.com) failed: Internal failure Dec 06 08:46:28 deliver(rbc-013(a)example.com): Error: userdb lookup(rbc-013(a)example.com) failed: Internal failure Dec 06 08:46:28 deliver(rbc-006(a)example.com): Error: userdb lookup(rbc-006(a)example.com) failed: Internal failure Later on, when it retries, everything goes according to plan and delivery is achieved. Now this is actually due to slapd saying: Dec 6 08:46:25 vmx15.unix slapd[3958]: [ID 763815 local4.debug] connection_input: conn=72057 deferring operation: too many executing And since it happens most frequently with mailing-lists, or mails with many recipients, I would guess it is due to a large number of lookups happening in a very short time. Since dovecot_destination_recipient_limit=1, I believe 'deliver' is only ever called with just one recipient for "-d", and 'deliver' probably-does-not (?) query LDAP for any of the other "To:" addresses in the message body. Is that the case? Secondary, the dovecot-ldap.conf for dovecot-auth has: hosts = 127.0.0.1 172.20.12.33 172.20.12.23 172.20.12.113 So even though localhost's slapd was busy at the time, the other three hosts were definitely not. Is LDAP fail-over ... failing... in this case? How many concurrent queries does dovecot-auth perform? Any way to tweak this value? Admittedly, postfix/dovecot does handle this situation correctly, as 'temporary failure' and mail delivery is merely delayed. But at the same time, it *could* be something with an easy fix as well. Thoughts? Lund -- Jorgen Lundman | <lundman(a)lundman.net> Unix Administrator | +81 (0)3 -5456-2687 ext 1017 (work) Shibuya-ku, Tokyo | +81 (0)90-5578-8500 (cell) Japan | +81 (0)3 -3375-1767 (home)

2 6

Re: [Dovecot] Doveadm import emails
by Timo Sirainen 06 Dec '10

06 Dec '10

On 5.12.2010, at 14.47, Alex Baule wrote: > I have a maildir with 6800 emails and i try to import this to 1000 users. > The import begins well, but in the user 150 the script stop because doveadm > say the directory have wrong file permissions, but the script dont change > notthing and the permissions its ok. What exactly is the error message? Is it always the same specific user, or if you reorder users is it always the 150th?

1 0