- dovecot - dovecot.org

[Dovecot] different certificates on different services ?
by ckubu 24 Oct '10

24 Oct '10

Hi, on dovecot 2.0.x, is it possible to serve different certificates on different services (pops,imaps) with one dovecot instance ? regards, Christoph Kuchenbuch

1 1

[Dovecot] dovecot-antispam-1.3 multiple plugin load
by Antonio Perez-Aranda 24 Oct '10

24 Oct '10

Hi all, I have running dovecot-1.2.15 and I try whith dovecot-antispam-1.3 and 1.2-* if it's running for me. I use mailtrain backend to call a script when I move a mail to a specific folder. Then, I set allow_append_to_spam: yes At .config for Make dovecot-antispam. I set the plugin's name to: PLUGINNAME=isspam An then, I have another copy of the sources and .config with plugin's name set to: PLUGINNAME=nospam With this. If I put on dovecot.conf protocol imap { ... mail_plugins = isspam nospam ... } When I try to login, the connection is aborted and dovecot connection die with coredump Are there are any people with similar settings ? (doble instance of antispam plugin)

2 3

[Dovecot] dovecot-antispam-plugin problem
by Lars Stavholm 24 Oct '10

24 Oct '10

Hi All, anyone been able to use the dovecot-antispam-plugin from http://hg.dovecot.org with dovecot-2.0.x? Any input appreciated R /Lars Stavholm

3 3

[Dovecot] [stava@telcotec.se: [stava: antispam problem]]
by Lars Stavholm 24 Oct '10

24 Oct '10

Hi All, I've built the dovecot-antispam-plugin from hg.dovecot.org and installed it. I've turned on debugging with "mail_debug = yes" in dovecot.conf and restarted dovecot. However, the antispam plugin module gets loaded by dovecot, but then nothing, i.e. when moving mail from Inbox to Spam and vice versa, I see nothing. How do I get debug messages from the dovecot-antispam-plugin? There's a few i_debug() statements in there (and I added a few myself), but I don't see any of these messages. # dovecot -n # 2.0.6: /etc/dovecot/dovecot.conf # OS: Linux 2.6.34.7-0.4-desktop x86_64 openSUSE 11.3 (x86_64) auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_username_format = %Lu auth_verbose = yes base_dir = /var/run/dovecot disable_plaintext_auth = no dotlock_use_excl = yes listen = * mail_access_groups = mail mail_debug = yes mail_full_filesystem_access = yes mail_location = maildir:~/Mail:LAYOUT=fs mail_plugins = autocreate quota zlib managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /etc/dovecot/ldap.conf driver = ldap } plugin { antispam_backend = dspam antispam_dspam_binary = /usr/sbin/dspam antispam_signature = X-DSPAM-Signature antispam_spam = Spam antispam_trash = Trash autocreate = Spam autocreate2 = Sent autocreate3 = Trash autosubscribe = Spam autosubscribe2 = Sent autosubscribe3 = Trash quota = fs:disk quota quota2 = fs:user quota } protocols = imap ssl = no userdb { args = /etc/dovecot/ldap.conf driver = ldap } verbose_ssl = yes protocol imap { mail_plugins = autocreate quota zlib imap_quota imap_zlib antispam } Any help appreciated /Lars Stavholm

2 2

[Dovecot] minimize mbox mdbox fragmentation
by Stan Hoeppner 22 Oct '10

22 Oct '10

Hi Timo, Any chance the mbox/mdbox writer code could be modified to do physical preallocation on files to help avoid file(system) fragmentation? Constantly appending a file is the prime recipe for causing fragmentation, and mbox is notorious for this--not a fault of Dovecot but the nature of the mbox beast. Obviously maildir doesn't have such a problem, but some (many?) of us still prefer mbox for many reasons, fast full body search being one, portability being another. mdbox file fragmentation could benefit from such a change as well. I was having a discussion on the XFS list about this, trying to tweak XFS mount options to mitigate the fragmentation effects. Alas, there is no way to do this purely at the filesystem level. From Dave Chinner, one of the lead XFS devs: "What you want is _physical_ preallocation, not speculative preallocation. i.e. look up XFS_IOC_RESVSP or FIEMAP so your application does _permanent_ preallocate past EOF. Alternatively, the filesystem will avoid the truncation on close() if the file has the APPEND attribute set and the application is writing via O_APPEND... The filesystem cannot do everything for you. Sometimes the application has to help...." How great would the effort need to be to implement something like this? Would the return on investment be sufficient to justify doing this, in your eyes? -- Stan

6 15

[Dovecot] Correct permissions for base_dir??
by Odhiambo Washington 21 Oct '10

21 Oct '10

I am having problems with dovecot regarding base_dir: I have :: base_dir = /opt/dovecot2/var/run/ For some reason, I have to set permissions to(chmod -R 1777 /opt/dovecot2/var/) for dovecot to run properly, but when I start dovecot, I see this: [root@gw] /opt/dovecot2/etc/dovecot# less /var/log/dovecot/dovecot.log Oct 21 16:15:27 master: Warning: Killed with signal 15 (by pid=72634 uid=0 code=kill) Oct 21 16:15:27 master: Warning: Corrected permissions for login directory /opt/dovecot2/var/run/login Oct 21 16:15:27 master: Warning: Corrected permissions for empty directory /opt/dovecot2/var/run/empty Oct 21 16:15:27 master: Info: Dovecot v2.0.5 (38e726a2b3b9) starting up Now, when I send a test mail: [root@gw] /usr/home/wash# less /var/log/dovecot/dovecot.log Oct 21 16:15:27 master: Warning: Killed with signal 15 (by pid=72634 uid=0 code=kill) Oct 21 16:15:27 master: Warning: Corrected permissions for login directory /opt/dovecot2/var/run/login Oct 21 16:15:27 master: Warning: Corrected permissions for empty directory /opt/dovecot2/var/run/empty Oct 21 16:15:27 master: Info: Dovecot v2.0.5 (38e726a2b3b9) starting up Oct 21 16:33:18 lda: Debug: Loading modules from directory: /opt/dovecot2/lib/dovecot Oct 21 16:33:18 lda: Debug: Module loaded: /opt/dovecot2/lib/dovecot/lib10_quota_plugin.so Oct 21 16:33:18 lda: Error: userdb lookup: connect(/opt/dovecot2/var/run/auth-userdb) failed: Permission denied (euid=26(mailnull) egid=26(mailnull) missing +r perm: /opt/dovecot2/var/run/auth-userdb, euid is not dir owner) Oct 21 16:33:18 lda: Fatal: Internal error occurred. Refer to server log for more information. My doveconf -n output: # OS: FreeBSD 8.1-RELEASE amd64 auth_cache_negative_ttl = 1 days auth_cache_size = 10 M auth_mechanisms = plain digest-md5 auth_socket_path = /opt/dovecot2/var/run/auth-userdb auth_verbose = yes base_dir = /opt/dovecot2/var/run/ default_login_user = dovecot disable_plaintext_auth = no first_valid_gid = 26 first_valid_uid = 26 log_path = /var/log/dovecot/dovecot.log login_greeting = Dovecot-2.0-sis ready. mail_attachment_dir = ~/mdbox/attachments mail_debug = yes mail_location = mdbox:~/mdbox mail_plugins = quota mail_privileged_group = mailnull passdb { args = /opt/dovecot2/etc/dovecot/dovecot-sql.conf driver = sql } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size } postmaster_address = postmaster(a)thisuglytest.name service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } service_count = 1 } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 } } ssl_cert = </etc/ssl/dovecot/cert.pem ssl_key = </etc/ssl/dovecot/key.pem userdb { args = /opt/dovecot2/etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_plugins = quota } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } And my full doveconf output is at: http://bit.ly/c6vLNw I am not sure what I am getting wrong, really. Thanking everyone in advance. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Damn!!

2 2

Re: [Dovecot] Segfault in libdovecot-sieve
by Jerry 21 Oct '10

21 Oct '10

On Thu, 21 Oct 2010 18:20:51 +0200 fakessh(a)fakessh.eu articulated: > it is the webmail problem or postfix problem Or something else; or not! -- Jerry ✌ Dovecot.user(a)seibercom.net Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the Reply-To header. __________________________________________________________________ A: Because it fouls the order in which people normally read text. Q: Why is top-posting such a bad thing? A: Top-posting. Q: What is the most annoying thing on usenet and in e-mail? TOPIC: Posting Etiquette

1 0

[Dovecot] Question about Client Certificates
by William Gallafent 21 Oct '10

21 Oct '10

Hi, I have a simple dovecot installation, version 1.2.12 of ubuntu 10.10. I also have a straightforward newbie question! I've hunted in the wiki and on the wider web, but not yet found a solution. Current status: I have successfully configured imap with tls, accessed on port 993, and for security require a valid client certificate to be presented, using ssl_require_client_cert and ssl_verify_client_cert. This is all working fine! Now I want to add a SquirrelMail service to the same server. This will connect using IMAP over port 143, without TLS. My question is: how do I achieve this! At the moment, I simply get the following in the logs: Aborted login (cert required, client didn't start TLS): method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured If I comment out the "ssl_require_client_cert = yes" in the auth default section, SquirrelMail then works fine … but I can also connect remotely without presenting a valid certificate, which is no good! At the moment I have a single auth section in dovecot.conf, the "auth default { ... }" section. I wondered if I need a second section, which does not have the ssl requirement inside it. Is that right? If so, how do I link one auth section to the imaps service, and the other to the imap service (listening only on localhost)? In other words, I want "ssl_require_client_cert = yes" for remote connections (on port 993), but "ssl_require_client_cert = no" for local connections using non-tls imap on port 143. Is this possible? Hope that late-night explanation makes sense, and hope somebody can point me in the right direction, thanks in advance! -- Bill Gallafent.

3 3

[Dovecot] bug with null pointer
by Tobias Daucher 21 Oct '10

21 Oct '10

Hi, we found a serious bug while testing our migration scripts. in Solaris (or other system 5) the user variable is not always set. Dsync is not very happy about that and crashes with an segmentation fault. After hours of debugging and TWOE simple lines # USER=$LOGNAME # export USER the problem was solved! The null pointer was found - so i will go home now an drink a bottle of "Erdinger"... hope this hint helps for development - and we hope that we don't find more of these bugs :) bye Tobi -- Dr. Nagler & Company GmbH Hauptstraße 9 92253 Schnaittenbach Tel : 09622-7197-38 Fax : 09622-7197-50 Web : http://www.nagler-company.com E-Mail : tobias.daucher(a)nagler-company.com Hauptsitz: Schnaittenbach Handelregister: Amberg HRB 4653 Gerichtsstand: Amberg Steuernummer: 201/118/51825 USt.-ID-Nummer: DE 273143997 Geschäftsführer: Dr. Martin Nagler, Dr. Dr. Karl-Kuno Kunze

2 1

[Dovecot] allow_nets and local sockets
by Oliver Eales 21 Oct '10

21 Oct '10

Hello, i am running dovevot 2.0.5 using ldap authentication with the allow_nets paramter to limit access to some local networks. The problem is, when i want to use the local lmtp socket from postfix *virtual_transport = lmtp:unix:private/dovecot-lmtp * i get the follwing error: *Oct 21 15:48:03 auth: Info: passdb(username): allow_nets check failed: Remote IP not known *When using the TCP socket with postfix *virtual_transport = lmtp:localhost:30025 *it is working. (i have 127.0.0.0/8 in the allow_nets list) Is there a way, other than using two different config sets to get this working together ? Something like disabling the address lookup on local passdb sockets ? Regards, Oliver

2 1