- dovecot - dovecot.org

[Dovecot] Postfix SASL Auth
by siefke＠email.de 27 Sep '10

27 Sep '10

Hello, i use Postfix (2.7.1) and Dovecot (1.2.14) on my FreeBSD Server. I use Postfixadmin and Virtuell User. The login going without problems, but the SASL Auth want not work. Have someone a Idea? Regards Silvio #postconf -a dovecot # postconf -n alias_maps = hash:/etc/aliases allow_percent_hack = no biff = no command_directory = /usr/sbin config_directory = /etc/postfix content_filter = amavisfeed:[127.0.0.1]:10024 daemon_directory = /usr/libexec/postfix data_directory = /var/db/postfix disable_vrfy_command = yes home_mailbox = Maildir/ html_directory = /usr/share/doc/postfix mail_owner = postfix mailbox_size_limit = 102400000 mailq_path = /usr/bin/mailq manpage_directory = /usr/share/man masquerade_exceptions = root message_size_limit = 20480000 mydestination = $myhostname, localhost mydomain = silviosiefke.de myhostname = hetzner.silviosiefke.de mynetworks = 127.0.0.0/8 newaliases_path = /usr/bin/newaliases queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix recipient_delimiter = + sample_directory = /etc/postfix sendmail_path = /usr/sbin/sendmail setgid_group = maildrop smtp_tls_note_starttls_offer = yes smtp_use_tls = no smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unknown_reverse_client_hostname, permit smtpd_data_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_pipelining, permit smtpd_delay_reject = yes smtpd_helo_required = yes smtpd_helo_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_invalid_helo_hostname, reject_non_fqdn_helo_hostname, permit smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_recipient, reject_unknown_recipient_domain, reject_unauth_destination, reject_rbl_client bl.spamcop.net, reject_rbl_client sbl-xbl.spamhaus.org, permit smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot smtpd_sender_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_sender, reject_unknown_sender_domain, permit smtpd_tls_cert_file = /etc/postfix/ssl/smtp.pem smtpd_tls_key_file = /etc/postfix/ssl/smtp.pem smtpd_tls_loglevel = 1 smtpd_tls_received_header = yes smtpd_tls_session_cache_timeout = 3600s smtpd_use_tls = no soft_bounce = yes tls_random_source = dev:/dev/urandom unknown_local_recipient_reject_code = 550 virtual_alias_maps = proxy:mysql:/etc/postfix/mysql/mysql_virtual_alias_maps.cf virtual_gid_maps = static:125 virtual_mailbox_base = /home/vmail virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql/mysql_virtual_domains_maps.cf virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql/mysql_virtual_mailbox_maps.cf virtual_minimum_uid = 125 virtual_transport = virtual virtual_uid_maps = static:125 <dovecot.conf> base_dir = /var/run/dovecot/ protocols = imap imaps pop3s disable_plaintext_auth = no log_timestamp = "%Y-%m-%d %H:%M:%S " mail_debug = yes mail_location = maildir:/home/vmail/%d/%n mail_access_groups = mail first_valid_uid = 125 first_valid_gid = 125 log_path = /var/log/dovecot/dovecot.log info_log_path = /var/log/dovecot/dovecot-info.log ssl = yes ssl_cert_file = /etc/postfix/ssl/mail_silviosiefke_de.crt ssl_key_file = /etc/postfix/ssl/mail_silviosiefke_de.key protocol imap { } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } protocol lda { postmaster_address = hostmaster at silviosiefke.de } auth default { mechanisms = digest-md5 plain login passdb sql { args = /usr/local/etc/dovecot-db.conf } userdb sql { args = /usr/local/etc/dovecot-db.conf } user = root socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = postfix #group = vmail } client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } } driver = mysql connect = dbname=postifx user= host=localhost password= default_pass_scheme = MD5-CRYPT password_query = SELECT password FROM mailbox WHERE username = '%u' user_query = SELECT maildir, 125 AS uid, 125 AS gid FROM mailbox WHERE username = '%u' Logeintrag: Sep 25 23:23:55 hetzner postfix/smtpd[86111]: connect from unknown Sep 25 23:23:57 hetzner postfix/smtpd[86111]: warning: unknown: SASL PLAIN authentication failed: Sep 25 23:23:59 hetzner postfix/smtpd[86111]: warning: unknown: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 25 23:24:01 hetzner postfix/smtpd[86111]: disconnect from unknown

3 2

[Dovecot] Meaning of mail_max_userip_connections?
by Harald Strack 27 Sep '10

27 Sep '10

Hi, I set mail_max_userip_connections in our IMAP configuration to mail_max_userip_connections = 10 to allow users 10 parallel connections. It seems that this also limits the amount of parallel connections from one IP but different users?! Our users mostly accessing the IMAP server by a webmailer or proxies. Thus, all users (>10000) come from only 5 different IP. However, I got a lot of complaints about denied connections after setting mail_max_userip_connections = 10. Am I right with the meaning of this parameter? Thanks in advance Harry

3 7

[Dovecot] Error: Opening INBOX failed: Mailbox doesn't exist: INBOX
by Christian Felsing 26 Sep '10

26 Sep '10

Hello, there is one user which has a "Error: Opening INBOX failed: Mailbox doesn't exist: INBOX" problem: doveadm mailbox status -u user(a)foo.local -t all \* doveadm(user(a)foo.local): Error: Opening INBOX failed: Mailbox doesn't exist: INBOX doveadm(user(a)foo.local): Error: Opening mailbox INBOX failed: Mailbox doesn't exist: INBOX doveadm -v force-resync -u user(a)foo.local INBOX doveadm(user(a)foo.local): Error: Opening INBOX failed: Mailbox doesn't exist: INBOX doveadm(user(a)foo.local): Error: Opening mailbox INBOX failed: Mailbox doesn't exist: INBOX doveadm mailbox list -u user(a)foo.local Archiv Old Gesendete Objekte INBOX INBOX.old INBOX.ix INBOX.ct INBOX.telepolis INBOX.bild INBOX.fotos.highres INBOX.computerbild Junk-E-Mail Trash Gesendet System has several hundred users, but this is the only user on which that happens. Users client is Microsoft Outlook 2003, but there are more users which are using Microsoft Outlook 2003. dovecot -n (some parts masked with *** for privacy reasons): # 2.0.3: /opt/dovecot/etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-amd64 x86_64 Debian 5.0.6 xfs auth_master_user_separator = * auth_mechanisms = plain login auth_realms = *** auth_username_format = %Lu disable_plaintext_auth = no first_valid_uid = 124 last_valid_uid = 124 listen = [::], * log_timestamp = %Y-%m-%d %H:%M:%S login_greeting = imap4/pop3 ready. mail_location = maildir:/mail/%d/%u/Maildir mail_privileged_group = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date imapflags notify passdb { args = *** driver = passwd-file master = yes } passdb { args = /opt/dovecot/etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { quota = maildir:User quota quota_rule = *:storage=500M quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +imapflags +notify } protocols = imap pop3 sieve lmtp service auth { client_limit = 8000 unix_listener /var/run/dovecot/auth-master { group = vmail mode = 0660 user = vmail } unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = vmail } service imap-login { process_limit = 1024 } service imap-postlogin { executable = script-login /opt/dovecot-cf/lastlogin.sh user = cadm } service imap { executable = imap imap-postlogin } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service managesieve-login { inet_listener sieve-obsolete { port = 2000 } inet_listener sieve { port = 4190 } process_limit = 1024 } service pop3-login { process_limit = 1024 } service pop3-postlogin { executable = script-login /opt/dovecot-tools/lastlogin.sh user = cadm } service pop3 { executable = pop3 pop3-postlogin } service quota-warning { executable = script /opt/dovecot-tools/quota-warning.sh user = vmail } ssl_ca = </opt/dovecot/etc/cacert.pem ssl_cert = </opt/apache/apache/conf/ssl/cert.crt ssl_cipher_list = HIGH:MEDIUM:!SSLv2:!ADH:!aNULL:!eNULL:!NULL ssl_key = </opt/apache/apache/conf/ssl/cert.key userdb { args = /opt/dovecot/etc/dovecot/dovecot-ldap.conf driver = ldap } protocol lmtp { mail_plugins = quota sieve } protocol sieve { managesieve_logout_format = bytes ( in=%i : out=%o ) } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } protocol lda { auth_socket_path = /var/run/dovecot/auth-master hostname = mail.foo.local lda_mailbox_autocreate = yes mail_plugin_dir = /opt/dovecot/lib/dovecot/lda mail_plugins = $mail_plugins sieve postmaster_address = postmaster(a)foo.local sendmail_path = /usr/lib/sendmail } dovecot-ldap.conf omitted, because auth works flawless. Homedir etc. looks like other users homedirs: tsnetMailHomeDir: /mail/foo.local/user(a)foo.local tsnetMailMessageStore: /mail/foo.local/user(a)foo.local/Maildir As temporary workaround user set a sieve rule to forward mail to other account. This Sieve script works. Is there a way to fix that w/o deleting that mailbox ? Christian

2 3

[Dovecot] unwanted maildir directory
by Mike Abbott 26 Sep '10

26 Sep '10

Dovecot-2.0.3 reported: Error: Maildir: Found unwanted directory /path/to/mail/user/cur/:2,FST, but rmdir() failed: Directory not empty and sure enough, this directory really does exist and contain a valid message file: # cd /path/to/mail/user/cur/ # ls -lR total 384 drwx------ 8 vmail vmail 272 Sep 24 09:06 . drwx------ 13 vmail vmail 442 Sep 24 09:06 .. -rw------- 5 vmail vmail 41045 Sep 24 08:44 1285336100.M879758P1166.my.mail.server,S=41045,W=41755:2,RST -rw------- 5 vmail vmail 41045 Sep 24 08:44 1285336100.M910424P1166.my.mail.server,S=41045,W=41755:2,RST -rw------- 5 vmail vmail 41045 Sep 24 08:44 1285336337.M656599P1166.my.mail.server,S=41045,W=41755:2,ST -rw------- 5 vmail vmail 41045 Sep 24 08:44 1285336355.M88818P1164.my.mail.server,S=41045,W=41755:2,FS -rw------- 1 vmail vmail 14953 Sep 24 09:00 1285336838.M483116P5720.my.mail.server,S=14953,W=15225:2, drwx------ 3 vmail vmail 102 Sep 24 09:00 :2,FST ./:2,FST: total 88 drwx------ 3 vmail vmail 102 Sep 24 09:00 . drwx------ 8 vmail vmail 272 Sep 24 09:06 .. -rw------- 5 vmail vmail 41045 Sep 24 08:44 1285335855.M242128P1165.my.mail.server,S=41045,W=41755 # Dovecot must have created this non-Maildir++-ish directory, but why, why in cur/ not tmp/, and why didn't it clean it up? (Not the "Directory not empty" error specifically; I mean in the larger sense.)

2 19

[Dovecot] inbox doesn't exist, and quota calculation error
by Mike Abbott 26 Sep '10

26 Sep '10

Perhaps related to the other errors I just reported, I also see a few of these in the dovecot-2.0.3 logs: lda(pid 8212 user user3): Error: Opening INBOX failed: Mailbox doesn't exist: INBOX lda(pid 8212 user user3): msgid=<201009240906510365.1gj1fpfhrhhm9@mail>: save failed to INBOX: Mailbox doesn't exist: INBOX lda(pid 8212 user user3): Error: BUG: Saving failed to unknown storage and some clients report receiving this IMAP error: tag NO Mailbox doesn't exist: INBOX although in general mail delivery and IMAP work, and these users' Maildir++ directories do exist and look OK. This error did not occur for the user1 or user2 in the other report. And here's a third kind of error: imap(pid 5722 user user4): Error: stat(/path/to/mail/user4/tmp/ͼ) failed: No such file or directory imap(pid 5722 user user4): Error: Internal quota calculation error That path looks like a memory munge.

2 3

[Dovecot] password_query, user_query and unrelated userid and emails
by Axel Luttgens 26 Sep '10

26 Sep '10

Let's say one has a SQL table with following fields for John Doe: login: u0007 password: {SHA1}... mailhome: /path/to/joeshome email: john.doe(a)example.com To log in, for internal policy reasons, John MUST make use of his userid "u0007". So, in the password_query, one would need something like: ... WHERE login = '%u' ... On the other hand, for receiving mail thru say, LMTP, one would need something like this in the user_query: ... WHERE email = '%Lu' ... With such a simplistic setup, this works fine: $ doveadm auth u0007 Password: passdb: u0007 auth succeeded but this one obviously fails: $ doveadm user u0007 userdb lookup: user u0007 doesn't exist and one has to do: $ doveadm user john.doe(a)example.com userdb: john.doe(a)example.com home : /path/to/joeshome I can't manage to devise a way to systematically refer to users thru their login, nor to avoid such messages: prefetch(u0007): passdb didn't return userd entries, trying the next userdb There sure must be a way thru adequate "SELECT ... AS ..." clauses. Could someone show me the light? Many, many TIA, Axel

2 1

[Dovecot] Settings for unlimited quota for some mailboxes
by Patrick Westenberg 26 Sep '10

26 Sep '10

Hello, I´m using Dovecot 2.0.1 with quota support (quota and imap_quota) which works perfect. However, I´d like to give some mailboxes unlimited quota. What quota setting (in the backend (SLQ)) is needed to tell Dovecot as LDA that the mailbox has unlimited quota? 0 or NULL or -1 or something else? Regards Patrick

2 1

[Dovecot] mdbox
by Daniel L. Miller 25 Sep '10

25 Sep '10

Reviewing some mailing list archives and the wiki, I still don't have a real clear picture of why I'd want to use mdbox. What I've taken from the info I've reviewed says mdbox is more complicated (than sdbox), has greater potential for breakage (simply because it's more complex), and has a theoretical performance impact depending on the exact filesystem/hardware used. Was that an accurate summary? Is mdbox something that was desired to solve a particular problem? -- Daniel

2 2

Re: [Dovecot] doveadm-expunge debug message clarifications
by LEVAI Daniel 25 Sep '10

25 Sep '10

> On Tue, 2010-09-21 at 15:09 +0200, LEVAI Daniel wrote: [...] > > doveadm(root): Debug: expire: Searching only users listed in expire database [...] > logging that. I fixed in hg so that it now instead logs: > expire: Iterating only a single user, ignoring expire database Great! > > If I don't specify a user with '-u', then nothing gets expunged, so it > > doesn't get the list of users from the expire database. > If you don't use -u or -A then it tries to access the current system > user's mails. Aha! > > doveadm(<user>): Error: net_connect_unix(/var/dovecot//dict) failed: > > Permission denied > I improved this error message now in hg to show what user doesn't have > access. Great! > > # ls -la /var/dovecot/dict > > srw------- 1 root wheel 0 Sep 21 09:47:00 2010 /var/dovecot/dict= > > .. > > What is trying to use that socket when I'm expunging mails? Am I > > supposed to grant my internal_user some privileges to that socket? > > While I got that error message, the expunge has succeeded. > doveadm tries to access the expire database via the dict socket. You > didn't really give enough information about what user you're running > doveadm as or if you're using system or virtual users or.. Sorry. I'm running that doveadm command as root, with the -u <user> parameter, where <user> is a virtual user. Anyway, I've just read the wiki2 again, and noted that I don't really need the expire plugin, because it is only needed for the -A option. If I specify the -u parameter, it doesn't utilize the plugin. So I'm now using only the doveadm expunge -u ... command, which now gives me this output: # /usr/local/bin/doveadm -D expunge -u <user> mailbox sa.* SAVEDBEFORE 1d doveadm(root): Debug: Loading modules from directory: /usr/local/lib/dovecot doveadm(root): Debug: Module loaded: /usr/local/lib/dovecot/lib10_quota_plugin.so doveadm(root): Debug: Loading modules from directory: /usr/local/lib/dovecot/doveadm doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: Cannot load specified object ^^^ I'm curious about this error message. Is it safe to ignore this? doveadm(root): Debug: Module loaded: /usr/local/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so doveadm(<user>): Debug: expunge: box=sa.spam uid=6435 doveadm(<user>): Debug: expunge: box=sa.spam uid=6436 doveadm(<user>): Debug: expunge: box=sa.spam uid=6437 doveadm(<user>): Debug: expunge: box=sa.spam uid=6438 The only thing I've changed in the config is that I've removed the expire plugin from the $mail_plugins variable. Thanks, Daniel -- LÉVAI Dániel PGP key ID = 0x83B63A8F Key fingerprint = DBEC C66B A47A DFA2 792D 650C C69B BE4C 83B6 3A8F

2 2

[Dovecot] doveadm quota recalc don't work
by Thiago Henrique 25 Sep '10

25 Sep '10

Hello, I'm testing Dovecot 2.0. I plan to use Dovecot 2.0 with thousands of domains per server. My user base is under virtual MySQL. When I run `quota doveadm recalc`, Dovecot sets quota to zero: ################################################################################ root@server:# doveadm -v quota get -u username Quota name Type Value Limit % User quota STORAGE 1166 1048576 0 User quota MESSAGE 1 - 0 root@server:# doveadm -v quota recalc -u username root@server:# doveadm -v quota get -u username Quota name Type Value Limit % User quota STORAGE 0 1048576 0 User quota MESSAGE 0 - 0 ################################################################################ My `dovecot -n` : ################################################################################ root@box5:/home/thiagoh# cat a # 2.0.3 (02a9cf90ad02): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-24-server x86_64 Ubuntu 10.04.1 LTS ext4 auth_debug = yes auth_debug_passwords = yes auth_master_user_separator = * auth_mechanisms = plain login auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@= auth_username_translation = @= auth_verbose = yes auth_verbose_passwords = plain auth_worker_max_count = 10 disable_plaintext_auth = no listen = server.com login_greeting = Dovecot ready! mail_debug = yes mail_gid = dovemail mail_location = mdbox:/home/%u mail_plugins = $mail_plugins quota mail_uid = dovemail managesieve_sieve_capability = fileinto reject envelope vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include imapflags notify mmap_disable = yes passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } passdb { args = /etc/dovecot/dovecot-sql-master.conf.ext driver = sql master = yes pass = yes } plugin { autocreate = SPAM autosubscribe = SPAM quota = maildir:User quota quota_rule = *:storage=1GB sieve = /var/lib/imap/sieve/%2.256RHu/%u/phpscript.script sieve_dir = /var/lib/imap/sieve/%2.256RHu/%u sieve_extensions = comparator-i;ascii-numeric copy envelope fileinto imapflags include notify regex reject relational subaddress vacation sieve_max_script_size = 512KB sieve_quota_max_scripts = 2 } protocols = imap pop3 lmtp sieve service auth-worker { user = $default_internal_user } service auth { process_limit = 1 process_min_avail = 1 } service imap-login { inet_listener imap { address = server.com port = 143 } } service imap { process_limit = 1024 process_min_avail = 10 } service lmtp { inet_listener { address = server.com port = 2003 } process_limit = 256 process_min_avail = 10 } service managesieve-login { inet_listener sieve { address = server.com port = 4190 } inet_listener sieve_deprecated { address = server.com port = 2000 } } service managesieve { process_limit = 20 process_min_avail = 10 } service pop3-login { inet_listener pop3 { address = server.com port = 110 } } service pop3 { process_limit = 256 process_min_avail = 10 } ssl = no userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol imap { imap_idle_notify_interval = 120 s imap_max_line_length = 65536 mail_max_userip_connections = 10 mail_plugins = $mail_plugins quota imap_quota autocreate } protocol lmtp { mail_plugins = $mail_plugins sieve quota autocreate } protocol sieve { mail_plugins = $mail_plugins sieve managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_line_length = 65536 managesieve_sieve_capability = comparator-i;ascii-numeric copy envelope fileinto imapflags include notify regex reject relational subaddress vacation } protocol pop3 { mail_plugins = $mail_plugins quota autocreate } ################################################################################ I use 'mdbox' as mailbox format, but my quota backend is 'maildir'. Is there a problem? Thank you in advance. Best Regards -- []'s Thiago Henrique Network Administration Digirati Networks K8 Networks

2 1