- dovecot - dovecot.org

[Dovecot] SSL Bug
by Matthew Sackman 25 May '10

25 May '10

Hi, After many hours of testing, I've finally tracked down the issue I have been having with dovecot's SSL support. The problem is that the SSL certs result in "TLS handshaking: SSL_accept() syscall failed: Connection reset by peer" errors *if the certificate granted is not granted for client use*. For servers, I normally generate SSL certificates specifically for servers: [ server_ca_extensions ] basicConstraints = CA:false keyUsage = keyEncipherment extendedKeyUsage = 1.3.6.1.5.5.7.3.1 If you just do that, then the SSL certificate doesn't work in dovecot (it will work fine in Apache, or Postfix etc etc). You also need the certificate to be valide for client side work: [ client_and_server_ca_extensions ] basicConstraints = CA:false keyUsage = digitalSignature, keyEncipherment extendedKeyUsage = 1.3.6.1.5.5.7.3.2, 1.3.6.1.5.5.7.3.1 I believe this is a fault with Dovecot. This is with the Debian package for Dovecot 1.2.11 (Version: 1:1.2.11-1). The default self-signed certificate the Debian post-install script generates pops out a certificate that is valid for everything, which is why it works by default out of the box. Matthew

2 1

[Dovecot] Plugin to encrypt mailboxes ?
by Frank Bonnet 25 May '10

25 May '10

Hello Is there a possibility for my users to encrypt their mailboxes through Dovecot ? They haven't direct access to the server, IMAP & IMAPS only. We use Thunderbird as client and mailboxes are in MBOX format Dovecot is running on a FreeBSD 7.2 server. Thanks a lot

2 1

[Dovecot] save failed to INBOX: Internal error occurred.
by Jarrod Neven 25 May '10

25 May '10

OS: CentOS release 5.4 (Final) Postfix: postfix-2.5.1-1.mysql.sasl2.vda.rhel5 Postfixadmin: 2.3 Dovecot: 1.2.11 Squirrelmai: 1.4.20 Configuration based on http://wiki.dovecot.org/HowTo/DovecotLDAPostfixAdminMySQL which I have updated a few time ;) Using postfixadmin I have create a virtual domain and created testing users (test1 test6). With Squirrelmail these users can login but issues arise when composing an email to any destination every time. Squirrlemail responds with: ERROR: Bad or malformed request. Server responded: Error in IMAP command FROM: Unknown command. Log file shows: 2010-05-25 17:42:20 ²imap-login: Info: Login: user=<test3(a)corp.letsengage.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured ³2010-05-25 17:42:20 ²IMAP(test3(a)corp.letsengage.com): Info: Namespace : Using permissions from /var/vmail/corp.letsengage.com/test3: mode=0700 gid=-1 ³2010-05-25 17:42:20 ²IMAP(test3(a)corp.letsengage.com): Info: Disconnected: Logged out bytes=79/681 ³2010-05-25 17:42:34 ²IMAP(test3(a)corp.letsengage.com): Info: Effective uid=101, gid=12, home=/var/vmail/corp.letsengage.com/test3 ³2010-05-25 17:42:34 ²IMAP(test3(a)corp.letsengage.com): Info: maildir: data=/var/vmail/corp.letsengage.com/test3 ³2010-05-25 17:42:34 ²IMAP(test3(a)corp.letsengage.com): Info: maildir++: root=/var/vmail/corp.letsengage.com/test3, index=, control=, inbox=/var/vmail/corp.letsengage.com/test3 ³2010-05-25 17:42:34 ²imap-login: Info: Login: user=<test3(a)corp.letsengage.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured ³2010-05-25 17:42:34 ²IMAP(test3(a)corp.letsengage.com): Info: Namespace : Using permissions from /var/vmail/corp.letsengage.com/test3: mode=0700 gid=-1 ³2010-05-25 17:42:34 ²IMAP(test3(a)corp.letsengage.com): Info: Disconnected: Logged out bytes=79/681 ³2010-05-25 17:43:32 ²deliver(test3(a)corp.letsengage.com): Info: auth input: uid=101 ³2010-05-25 17:43:32 ²deliver(test3(a)corp.letsengage.com): Info: auth input: gid=12 ³2010-05-25 17:43:32 ²deliver(test3(a)corp.letsengage.com): Info: auth input: home=/var/vmail/corp.letsengage.com/test3 ³2010-05-25 17:43:32 ²deliver(test3(a)corp.letsengage.com): Info: maildir: data=/var/vmail/corp.letsengage.com/test3 ³2010-05-25 17:43:32 ²deliver(test3(a)corp.letsengage.com): Info: maildir++: root=/var/vmail/corp.letsengage.com/test3, index=, control=, inbox=/var/vmail/corp.letsengage.com/test3 ³2010-05-25 17:43:32 ²deliver(test2(a)corp.letsengage.com): Info: auth input: uid=101 ³2010-05-25 17:43:32 ²deliver(test2(a)corp.letsengage.com): Info: auth input: gid=12 ³2010-05-25 17:43:32 ²deliver(test2(a)corp.letsengage.com): Info: auth input: home=/var/vmail/corp.letsengage.com/test2 ³2010-05-25 17:43:32 ²deliver(test2(a)corp.letsengage.com): Info: maildir: data=/var/vmail/corp.letsengage.com/test2 ³2010-05-25 17:43:32 ²deliver(test2(a)corp.letsengage.com): Info: maildir++: root=/var/vmail/corp.letsengage.com/test2, index=, control=, inbox=/var/vmail/corp.letsengage.com/test2 ³2010-05-25 17:43:32 ²deliver(test3(a)corp.letsengage.com): Info: Namespace : Using permissions from /var/vmail/corp.letsengage.com/test3: mode=0700 gid=-1 ³2010-05-25 17:43:32 ²deliver(test3(a)corp.letsengage.com): Error: open(/var/vmail/corp.letsengage.com/test3/tmp/1274773412.M416972P6942./root) failed: No such file or directory ³2010-05-25 17:43:32 ²deliver(test3(a)corp.letsengage.com): Info: msgid=<20100525062437.BA0EC5D806B(a)CORP.LETSENGAGE.COM>: save failed to INBOX: Internal error occurred. Refer to server log for more information. [2010-05-25 17:43:32] ³2010-05-25 17:43:32 ²deliver(test2(a)corp.letsengage.com): Info: Namespace : Using permissions from /var/vmail/corp.letsengage.com/test2: mode=0766 gid=-1 ³2010-05-25 17:43:32 ²deliver(test2(a)corp.letsengage.com): Error: open(/var/vmail/corp.letsengage.com/test2/tmp/1274773412.M420197P6943./root) failed: No such file or directory ³2010-05-25 17:43:32 ²deliver(test2(a)corp.letsengage.com): Info: msgid=<d6669a63009a904eaf4d268b3a1c9598.squirrel(a)dkpadmmail1.corp.letsengage .com>: save failed to INBOX: Internal error occurred. Refer to server log for more information. [2010-05-25 17:43:32] # dovecot -n # 1.2.11: /etc/dovecot.conf # OS: Linux 2.6.18-164.15.1.el5 x86_64 CentOS release 5.4 (Final) ext3 base_dir: /var/run/dovecot/ log_path: /var/log/dovecot/dovecot.log log_timestamp: ³%Y-%m-%d %H:%M:%S ² protocols: imap pop3 listen(default): *:143 listen(imap): *:143 listen(pop3): *:110 verbose_ssl: yes login_dir: /var/run/dovecot//login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login verbose_proctitle: yes first_valid_uid: 101 last_valid_uid: 101 mail_location: maildir:/var/vmail/%d/%n mail_debug: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 mail_log_max_lines_per_sec: 900 lda: postmaster_address: postmaster(a)corp.letsengage.com sendmail_path: /usr/lib/sendmail auth_socket_path: /var/run/dovecot/auth-master auth default: user: nobody passdb: driver: sql args: /etc/dovecot-mysql.conf userdb: driver: static args: uid=101 gid=12 home=/var/vmail/%d/%n socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: mail plugin: quota: maildir:storage=10240:messages=1000 acl: vfile:/etc/dovecot/acls trash: /etc/dovecot/trash.conf #grep -v '^ *$#.*$\?$' /etc/dovecot-mysql.conf driver = mysql connect = host=localhost dbname=postfix user=postfix password=##REMOVED## default_pass_scheme = PLAIN password_query = SELECT password FROM mailbox WHERE username = '%u'

2 1

[Dovecot] Panic: file mail-index-sync-ext.c: line 212 (sync_ext_reorder): assertion failed: (offset < (uint16_t)-1)
by Sandro Tosi 25 May '10

25 May '10

Hello, we are using dovecot v1.2.10 on debian stable (lenny) systems with mailboxes on NFS, and we are facing this quite ugly crash: 2010-04-27 10:59:06 IMAP(<mailbox>): Panic: file mail-index-sync-ext.c: line 212 (sync_ext_reorder): assertion failed: (offset < (uint16_t)-1) 2010-04-27 10:59:06 dovecot: Error: child 2429 (imap) killed with signal 6 (core dumps disabled) 2010-04-27 10:59:06 IMAP(<mailbox>): Error: Raw backtrace: imap [0x80f2ea1] -> imap [0x80f2f22] -> imap [0x80f2879] -> imap [0x80df6ad] -> imap(mail_index_sync_ext_intro+0x25b) [0x80e043b] -> imap(mail_index_sync_record+0x164) [0x80ce8e4] -> imap(mail_index_sync_map+0x2c3) [0x80cf6d3] -> imap(mail_index_map+0x465) [0x80c47f5] -> imap [0x80c1053] -> imap(mail_index_open+0x24f) [0x80c150f] -> imap(index_storage_mailbox_open+0x72) [0x80acbb2] -> imap(index_storage_mailbox_init+0x132) [0x80acf72] -> imap [0x80847f8] -> imap [0x8084a9d] -> imap(mailbox_open+0x69) [0x80b71b9] -> imap(cmd_select_full+0x1dd) [0x806503d] -> imap(cmd_select+0x19) [0x8065999] -> imap [0x8067c7c] -> imap [0x8067d19] -> imap(client_handle_input+0x2d) [0x8067e8d] -> imap(client_input+0x5f) [0x80687ef] -> imap(io_loop_handler_run+0xe0) [0x80fbc50] -> imap(io_loop_run+0x20) [0x80fb0c0] -> imap(main+0x5ea) [0x80712fa] -> /lib/i686/cmov/libc.so.6(__libc_start_main+0xe5) [0xb7dbf455] -> imap [0x8060361] the only solution we have found is to delete the dovecot.index* files, and let dovecot regenerate them at the next access. could you please give it a look? Thanks in advance, Sandro

4 11

[Dovecot] How to restart DOVECOT without rebooting
by Alexander 25 May '10

25 May '10

Hi, How can one reload Dovecot without rebooting? Alexander

5 4

[Dovecot] dovecot/deliver ... Can't open log file /var/log/dovecot/error.log: Permission denied
by Phil Howard 24 May '10

24 May '10

I'm getting this ... May 10 12:45:01 eth0 postfix/local[3416]: A788D685F7: to=< xxxxxxxx(a)xxxxxxxx.net>, relay=local, delay=13, delays=13/0/0/0.03, dsn=4.3.0, status=deferred (temporary failure. Command output: Can't open log file /var/log/dovecot/error.log: Permission denied ) So I'm looking at http://wiki.dovecot.org/LDA to see what I can do about it. I would have hoped some comments in the example config file would have mentioned this and suggested a default practice solution. Is this something few people or many people encounter (among those using dovecot/deliver from Postfix)? If I do as the wiki describes and make separate log files for dovecot/deliver to use, do I just make them owned by Postfix? It would seem to me a different directory might be more helpful (absent log files could be created by having the directory permissions. I'm also thinking in terms of log rotations, too ... and I prefer to do log rotations by date stamping rather than pushing sequence numbers (the legacy log rotation). Any chance there are %-style variables I can use in log file/path names to make log files automatically named by the date (and maybe time) ... kind of like in a shell script I would do: `date +/path/to/tree/%Y/%m/%d.log` or such.

11 44

[Dovecot] Thunderbird very slow startup, 1.2.11, mbox, postfix local delivery to /var/mail
by Stan Hoeppner 22 May '10

22 May '10

I've Google'd to exhaustion and can't seem to find an answer to my problem. I'm not sure if the problem is TBird 3 or my Dovecot setup. The basic problem is that when I launch TBird and it grabs messages upon startup, it takes forever to supposedly pull them down. Once it's got them they sort relatively quickly into the proper IMAP (dovecot) folders. I don't use sieve yet; I sort with TBird rules. I don't sync messages for offline use. The only thing TB stores locally is the index cache, which I deleted and had TB rebuild once, which didn't help. All that did was waste more time, as I've got 40,000 messages in my IMAP folders which had to be re-indexed by TB. (I save all list mail for future searching). As an example of this problem, I'd not checked my email for just over day, had ~300 messages waiting in /var/mail/stan. TBird starts pulling them from dovecot and says in the status bar "downloading x of ~300". As I watch the count tick up +10 at a whack, the TB process is pegged at 100%, there is zero network activity, and the imap process on the server shows zero cpu use. It took over 60 seconds to "pull" the messages, after which TB sorted them. During the apparent sorting process, there is quite a bit of network activity and the imap process on the server is relatively busy. I say "pull" in quotes because the entire time TB is saying it's pulling more messages there is no network activity. The client and server are plugged into the same 100BaseT FDX switch (FDX verified), and the server has zero load. I know TBird isn't the greatest IMAP client around, but I think taking over 60 seconds just to download ~300 messages is way too damn long given the hardware resources, network, and load on the client and server machines. TB basically seems to be pulling, or dovecot serving, only about 5 messages/sec over 100Mb ethernet, which is abysmal performance given neither the server nor client have any load. The messages are mostly list mail which are at max a few kilobytes each. I'm leaning toward a problem with TBird but I've been unable to find a bug report that covers this, nor a forum post anywhere, etc. The closest I've found for "slow startup" are recommendations to compact folders. I have no local folders to compact. I delete immediately and expunge on exit. Anyone have any ideas? Other than switching to LDA+sieve and have TB check the IMAP folders for new mail? -- Stan

7 24

Re: [Dovecot] dovecot from debian lenny-backports does not accept connections
by Stan Hoeppner 22 May '10

22 May '10

Joelly Alexander put forth on 5/15/2010 4:22 AM: > the server and the client are on the same layer2 network and there is no > hard- or software or anything else installed on the server what prevents > traffic between them; > i just figured out that it has to do with the nfs portion; > while incoming mails have no problems and are delivered correct into the > maildir on the nfs, it does not work when the client want to connect to > the maildir; > when i copy content from nfs-storage to the local harddisk it works; Read these below, and post back if that doesn't help. Please remember to reply to the list next time, not to individuals. I'm not an NFS guru, and those who are didn't see your reply. http://wiki.dovecot.org/MailLocation/SharedDisk http://wiki.dovecot.org/NFS -- Stan > storage are two debian lenny systems with rhcs, nfs-export configured: > <nfsexport name="nfs-storage"/> > <nfsclient name="nfs_fcamx1" allow_recover="1" > path="/storage/fca-mailstore" target="fcamx1" > options="rw,no_root_squash,no_all_squash"/> > <nfsclient name="nfs_fcamx2" allow_recover="1" > path="/storage/fca-mailstore" target="fcamx2" > options="rw,no_root_squash,no_all_squash"/> > > mountpoint on fcamx-servers: > 192.168.100.20:/storage/fca-mailstore on /var/vmail type nfs > (rw,rsize=8192,wsize=8192,timeo=14,intr,tcp,addr=192.168.100.20) > > dovecot is configured with this parameters: > fcamx1:/etc/dovecot# dovecot -n > # 1.2.11: /etc/dovecot/dovecot.conf > # OS: Linux 2.6.32-bpo.4-686 i686 Debian 5.0.4 nfs > log_path: /var/log/dovecot/dovecot-errors.log > info_log_path: /var/log/dovecot/dovecot-info.log > log_timestamp: %Y-%m-%d %H:%M:%S > protocols: imap imaps pop3 pop3s > ssl_cert_file: /etc/ssl/certs/dovecot-cert.pem > ssl_key_file: /etc/ssl/private/dovecot-key.pem > verbose_ssl: yes > login_dir: /var/run/dovecot/login > login_executable(default): /usr/lib/dovecot/imap-login > login_executable(imap): /usr/lib/dovecot/imap-login > login_executable(pop3): /usr/lib/dovecot/pop3-login > login_greeting: hey dude, do you have an account? > verbose_proctitle: yes > first_valid_uid: 150 > last_valid_uid: 150 > mail_privileged_group: mail > mail_location: maildir:/var/vmail/%d/%u > mail_debug: yes > mmap_disable: yes > mail_nfs_storage: yes > mail_nfs_index: yes > lock_method: fnctl > mbox_write_locks: fcntl dotlock > mail_executable(default): /usr/lib/dovecot/imap > mail_executable(imap): /usr/lib/dovecot/imap > mail_executable(pop3): /usr/lib/dovecot/pop3 > mail_plugins(default): quota imap_quota > mail_plugins(imap): quota imap_quota > mail_plugins(pop3): quota > mail_plugin_dir(default): /usr/lib/dovecot/modules/imap > mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap > mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 > imap_client_workarounds(default): outlook-idle delay-newmail > imap_client_workarounds(imap): outlook-idle delay-newmail > imap_client_workarounds(pop3): > pop3_client_workarounds(default): > pop3_client_workarounds(imap): > pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh > lda: > postmaster_address: postmaster(a)mydomain.tld > mail_plugins: sieve quota > global_script_path: /var/vmail/globalsieverc > log_path: /var/log/dovecot/dovecot-deliver.log > info_log_path: /var/log/dovecot/dovecot-deliver-info.log > auth default: > mechanisms: plain login > user: nobody > verbose: yes > debug: yes > debug_passwords: yes > passdb: > driver: sql > args: /etc/dovecot/dovecot-sql.conf > userdb: > driver: prefetch > userdb: > driver: passwd > userdb: > driver: sql > args: /etc/dovecot/dovecot-sql.conf > socket: > type: listen > client: > path: /var/spool/postfix/private/auth > mode: 432 > user: postfix > group: mail > master: > path: /var/run/dovecot/auth-master > mode: 432 > user: vmail > group: mail > plugin: > quota: maildir:storage=102400 > sieve: ~/.dovecot.sieve > sieve_dir: ~/sieve > fcamx1:/etc/dovecot#

4 9

[Dovecot] quota and postfix virtual users
by gbotero＠emailforall.no-ip.org 22 May '10

22 May '10

hi everyone i have a mailserver working with postfix 2.5.1 vda and virtual user with mysql and dovecot, everything is working fine but i want to offer quota and i have a problem with that because the quota in roundcube appear but calculate is wrong i need to delete the maildirsize file to force to recalculate, what can i do??? in my dovecot i have imap{ quota imap_quota, in plugins section i have quota=maildir and trough the file dovecot-sql.conf i have the select expression concat(...... as quota_rule, thanks a lot, PD. sorry for my english im from south of colombia - south america

2 1

[Dovecot] sshfs and outlok express imap directory problem.
by ringo tr 22 May '10

22 May '10

I mounted vpopmail/domains in sshfs. root@192.168.239.205:/mnt/disk-b/domains on /mnt/domains type fuse.sshfs (rw,nos uid,nodev,max_read=65536,allow_other) I used qmail+dovecot+vpopmail+mysql dovecot-2.0.beta4. I mounted sshfs with vpopmail/domains directory. my /usr/local/etc/dovecot/conf.d/mail.conf file mmap_disable = yes dotlock_use_excl = yes mail_nfs_storage = yes mail_nfs_index = yes lock_method = fcntl first_valid_uid = 89 first_valid_gid = 89 ----- Outlook Express with sending mail and receving mail success but mail drop imap folder change problem. cbumail1:~# ls -al /home/vpopmail/domains/yvz.cbu.edu.tr/yavuz/Maildir/ total 72 drwx------ 1 vpopmail vchkpw 4096 2010-05-08 01:00 . drwx------ 1 vpopmail vchkpw 4096 2010-04-27 21:22 .. drwx------ 1 vpopmail vchkpw 4096 2010-05-08 01:00 cur -rw------- 1 vpopmail vchkpw 18432 2010-05-08 01:00 dovecot.index.cache -rw------- 1 vpopmail vchkpw 968 2010-05-08 01:00 dovecot.index.log -rw------- 1 vpopmail vchkpw 96 2010-05-07 18:20 dovecot.mailbox.log -rw------- 1 vpopmail vchkpw 328 2010-05-08 01:00 dovecot-uidlist -rw------- 1 vpopmail vchkpw 8 2010-05-07 22:44 dovecot-uidvalidity -r--r--r-- 1 vpopmail vchkpw 0 2010-05-07 18:20 dovecot-uidvalidity.4be42fa9 drwx------ 1 vpopmail vchkpw 4096 2010-05-08 01:09 .G&APY-nderilmi&AV8- &ANYBHw-eler drwx------ 1 vpopmail vchkpw 4096 2010-05-08 01:00 new -rw------- 1 vpopmail vchkpw 54 2010-05-07 18:20 subscriptions drwx------ 1 vpopmail vchkpw 4096 2010-05-07 22:44 .Taslaklar drwxrwxrwx 1 vpopmail vchkpw 4096 2010-05-08 01:00 tmp drwx------ 1 vpopmail vchkpw 4096 2010-05-07 22:44 .zako Outlook Express mail mouse moving drag/drop process and fault message : SERVERBUG] Internal error occurred. Refer to server log for more information. [2010-05-08 01:25:57] and /var/log/mail.err output. May 8 01:25:57 cbumail1 dovecot: imap(yavuz(a)yvz.cbu.edu.tr): link(/home/vpopmail/domains/yvz.cbu.edu.tr/yavuz/Maildir/cur/1273050327.14629.cbumail1,S=1385:2,S, /home/vpopmail/domains/yvz.cbu.edu.tr/yavuz/Maildir/.zako/tmp/1273050327.14629.cbumail1,S=1385) failed: Function not implemented please help ? _________________________________________________________________ Windows Live Hotmail: Arkadaşlarınız Facebook'taki güncellemelerinizi doğrudan Hotmail®'den alır. http://www.microsoft.com/windows/windowslive/see-it-in-action/social-networ…

3 2