- dovecot - dovecot.org

Director to keep redirecting users to the same server even it is down
by abdelhaq.jalboush＠gmail.com 28 Nov '24

28 Nov '24

Hello, why the director always proxying IMAP connections to the same backend even if it is down? Also the director is showing the node as up although I have stopped the dovecot service on it: doveadm director status mail server ip tag vhosts state state changed users Node1 100 up - 2 Node2 100 up - 3 on the director here is: doveconf -n # 2.3.21 (47349e2482): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.21 (f6cd4b8e) # OS: Linux 6.8.0-1018-aws x86_64 Ubuntu 24.04.1 LTS # Hostname: auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_socket_path = director-userdb auth_verbose = yes director_mail_servers = Node1 Node2 director_servers = dir1 dir2 info_log_path = /var/log/dovecot.log listen = * lmtp_proxy = yes log_path = /var/log/dovecot.log mail_gid = vmail mail_privileged_group = mail mail_uid = vmail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-openldap-proxy.conf.ext default_fields = proxy=y driver = ldap } protocols = imap pop3 lmtp service auth { inet_listener { port = 12345 } } service director { fifo_listener login/proxy-notify { mode = 0600 user = $default_login_user } inet_listener { port = 9090 } unix_listener director-admin { mode = 0600 } unix_listener director-userdb { mode = 0600 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director inet_listener imap { port = 0 } inet_listener imaps { port = 993 ssl = yes } } service ipc { unix_listener ipc { user = dovecot } } service lmtp { inet_listener lmtp { port = 24 } } service pop3-login { executable = pop3-login director inet_listener pop3 { port = 0 } inet_listener pop3s { port = 995 ssl = yes } } service submission-login { inet_listener submission { port = 587 } } ssl_cert = </etc/dovecot/ssl/fullchain.pem ssl_client_ca_dir = /etc/ssl/certs ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it protocol lmtp { auth_socket_path = director-userdb }

3 2

bug? dsync extremely much slower on forward than reverse direction
by Bjørnar Ness 27 Nov '24

27 Nov '24

I have been experimenting with dsync lately, and to my surprise I found that dsync in forward direction is extremely slow compared for reverse (-R) direction for the exact same data, disk caches flushed both times. I have created a docker-compose setup to prove my findings. Am I missing something here, or is this a bug? link to tests: https://github.com/bjne/dovecot-dsync-benchmark -- Bj(/)rnar

2 2

lda_original_recipient_header for LMTP?
by dovecot＠ptld.com 26 Nov '24

26 Nov '24

How to get the X-Original-To: header added for LMTP? I tried adding: lda_original_recipient_header = X-Original-To But that didn't add the header for mail over LMTP. I couldn't find anything else in the docs.

2 1

Problem with Quota notification script
by Deeztek Support 25 Nov '24

25 Nov '24

Hello, Trying to get the following quota notification script to work with Dovecot 2.3.21.1: #!/bin/sh PERCENT=$1 USERNAME=$2 cat << EOF | /usr/lib/dovecot/dovecot-lda -d $USER -o "plugin/quota=count:User quota::noenforcing" From: postmaster(a)deeztek.com Subject: quota warning Your mailbox is now $PERCENT% full. EOF However running it produces the following error: lda: Fatal: Unknown argument: plugin/quota=count:User quota::noenforcing Below are my dovecot.conf settings: # Pigeonhole version 0.5.21.1 (49005e73) # OS: Linux 5.4.0-192-generic x86_64 Debian 11.10 # Hostname: be9f67c4e17e debug_log_path = /dev/stdout dict { quotadict = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } first_valid_uid = 1000 info_log_path = /dev/stdout last_valid_uid = 1000 listen = * log_path = /dev/stdout mail_debug = yes mail_gid = 1000 mail_home = /srv/mail/%d/%n mail_location = maildir:~/ mail_plugins = " quota zlib mail_crypt" mail_privileged_group = mail mail_uid = 1000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace { inbox = yes location = mailbox Archive { auto = subscribe special_use = \Archive } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { mail_crypt_curve = prime256v1 mail_crypt_global_private_key = # hidden, use -P to show it mail_crypt_global_public_key = # hidden, use -P to show it mail_crypt_save_version = 2 quota = dict:User quota::proxy::quotadict quota_rule2 = Trash:storage=+10%% quota_warning = storage=100%% quota-warning +100 %u quota_warning2 = storage=95%% quota-warning +95 %u quota_warning3 = storage=80%% quota-warning +80 %u quota_warning4 = -storage=100%% quota-warning -100 %u sieve = /srv/mail/sieve/%u.sieve zlib_save = lz4 } protocols = imap pop3 submission sieve lmtp service auth { inet_listener auth-inet { port = 9587 } } service dict { unix_listener dict { group = vmail mode = 0660 user = vmail } user = root } service imap-login { client_limit = 1000 process_min_avail = 1 service_count = 0 } service lmtp { inet_listener { port = 24 } } service managesieve-login { client_limit = 1000 process_min_avail = 1 service_count = 0 } service pop3-login { client_limit = 1000 process_min_avail = 1 service_count = 0 } service quota-warning { executable = script /scripts/quota-warning.sh unix_listener quota-warning { group = vmail mode = 0660 user = vmail } user = vmail } service submission-login { client_limit = 1000 process_min_avail = 1 service_count = 0 } ssl_cert = </certs/fullchain.pem ssl_cipher_list = ALL:!ADH:!LOW:!SSLv2:!SSLv3:!EXP:!aNULL:!eNULL:!3DES:!MD5:!PSK:!DSS:!RC4:!SEED:!IDEA:+HIGH:+MEDIUM ssl_key = # hidden, use -P to show it ssl_options = no_compression no_ticket ssl_prefer_server_ciphers = yes userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol imap { imap_metadata = yes mail_plugins = " quota zlib mail_crypt imap_quota zlib" } protocol lmtp { mail_plugins = quota sieve } protocol sieve { managesieve_logout_format = bytes=%i/%o } protocol pop3 { mail_plugins = " quota zlib mail_crypt mail_crypt" pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } Thanks

1 0

Extended LIST not working
by tim＠linux-daus.de 25 Nov '24

25 Nov '24

Hi, i try to use extended LIST command but it doesn't work out. I wonder if there is any option necessary to enable it or some option that prevent using extended LIST commands (for example Courier compatible namespace config). I didn't find anything in the documentation. Did anyone notice a similar behavior? curl -u $IMAPUSER:$IMAPPW imaps://... -X 'STATUS INBOX (MESSAGES UNSEEN)' * STATUS INBOX (MESSAGES 105 UNSEEN 79) curl -u $IMAPUSER:$IMAPPW imaps://... -X 'LIST "" "INBOX" RETURN (STATUS (MESSAGES UNSEEN))' * LIST () "." INBOX Best regards, Tim

2 2

Authentication hangs on before SSL initialization
by Matt 22 Nov '24

22 Nov '24

I'm running into below probem; my ath is stuck on initializing SSL. Certificates are fine, cert-chain is tested and auth no further errors are shown. Comparing to the default configuration from the docs it's pretty the same and up-to-date so I'm curious what cloud cause this. Also CHMOD on files has been checked. Nov 21 02:50:29 auth: Debug: Loading modules from directory: /usr/lib/dovecot/auth Nov 21 02:50:29 auth: Debug: Module loaded: /usr/lib/dovecot/auth/lib20_auth_var_expand_crypt.so Nov 21 02:50:29 auth: Debug: Module loaded: /usr/lib/dovecot/auth/libdriver_sqlite.so Nov 21 02:50:29 auth: Debug: Read auth token secret from /run/dovecot/auth-token-secret.dat Nov 21 02:50:29 auth: Debug: auth client connected (pid=477) Nov 21 02:50:29 imap-login: Debug: SSL: where=0x10, ret=1: before SSL initialization Nov 21 02:50:29 imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Nov 21 02:50:29 imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization Maybe someone has a suggestion... Thanks!

2 3

Dovecot Director Proxy (Error: lmtp-server: conn Failed to initialize user: Namespace '': Mail storage autodetection failed with home=(not set))
by abdelhaq.jalboush＠gmail.com 20 Nov '24

20 Nov '24

dovecot --version 2.3.21 (47349e2482) I have Postfix and two dovecot directors I am trying to setup them as proxy in front of two dovecot backends, I am using openldap, when I set passdb { driver = static args = proxy=y nopassword=y } it is working fine. but If I try to authenticate on the proxy I get this error: lmtp(22086): Error: lmtp-server: conn [3]: rcpt : Failed to initialize user: Namespace '': Mail storage autodetection failed with home=(not set) here is my openldap file /etc/dovecot/dovecot-openldap-proxy.conf.ext: uris = ldaps:// dn = CN=,OU=,DC=,dc= dnpass = debug_level = 0 auth_bind = yes ldap_version = 3 base = OU=,DC=,dc= scope = subtree user_attrs = mail=user pass_attrs = userPassword=password pass_filter = (&(objectClass=person)(mail=%u)) dovecot -n on the director side: # 2.3.21 (47349e2482): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.21 (f6cd4b8e) # OS: Linux 6.8.0-1018-aws x86_64 Ubuntu 24.04.1 LTS # Hostname: stg-vm-dir01 auth_debug = yes auth_mechanisms = plain login auth_socket_path = director-userdb auth_verbose = yes director_mail_servers = 10.100.10.15 10.100.15.16 director_servers = 10.100.15.201 10.100.15.202 info_log_path = /var/log/dovecot.log listen = * lmtp_proxy = yes log_path = /var/log/dovecot.log mail_gid = vmail mail_privileged_group = mail mail_uid = vmail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-openldap-proxy.conf.ext driver = ldap } protocols = imap pop3 lmtp service director { fifo_listener login/proxy-notify { mode = 0600 user = $default_login_user } inet_listener { port = 9090 } unix_listener director-admin { mode = 0600 } unix_listener director-userdb { mode = 0600 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director inet_listener imap { port = 0 } inet_listener imaps { port = 993 ssl = yes } } service ipc { unix_listener ipc { user = dovecot } } service lmtp { inet_listener lmtp { port = 24 } } service pop3-login { executable = pop3-login director inet_listener pop3 { port = 0 } inet_listener pop3s { port = 995 ssl = yes } } service submission-login { inet_listener submission { port = 587 } } ssl_cert = </etc/dovecot/ssl/fullchain.pem ssl_client_ca_dir = /etc/ssl/certs ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it protocol lmtp { auth_socket_path = director-userdb }

2 4

sharing sso between regular mail client and web applications
by Marc 20 Nov '24

20 Nov '24

I am testing a bit with sso with keycloak, I was wondering if/how it is possible that your logged in session between eg Thunderbird and dovecot can be used as a single sign on in webapplications. So as long as you have an active session with dovecot you can access all your web applications without the need to login.

2 1

Fatal: sql proxy::sqlite-proxy: Can't open configuration file
by Matt 14 Nov '24

14 Nov '24

Hi, I'm running into a problem where I'm not sure anymore if it's possible to proxy to an SQLite database file using a dict for authentication. The docs are unclear about it and I thought it was not possible as it's not a connection for SQLite but a file-read where the documentation shows different. ov 14 13:57:52 auth: Debug: Loading modules from directory: /usr/lib/dovecot/auth Nov 14 13:57:52 auth: Debug: Module loaded: /usr/lib/dovecot/auth/lib20_auth_var_expand_crypt.so Nov 14 13:57:52 master: Error: service(auth): command startup failed, throttling for 4.000 secs Nov 14 13:57:52 auth: Debug: Module loaded: /usr/lib/dovecot/auth/libdriver_sqlite.so Nov 14 13:57:52 auth: Fatal: sql proxy::sqlite-proxy: Can't open configuration file proxy::sqlite-proxy: No such file or directory doveconf -n does show me the dict being loaded, the file exists as well but it still says not found. dict { sqlite-proxy = sqlite:/etc/dovecot/conf.d/dicts/sqlite/sqlite-connection.conf.ext } What am I missing here ? Thanks, Matt

2 4

openid / roundcube example
by Marc 14 Nov '24

14 Nov '24

Does anyone have a current config example using openid and with roundcube. I like to add this next to 'regular' logins'. I was able to login once but know I am getting these in the logs " No requests to service for this peer (1 connections exist, 0 pending)" I have added the 2 passdb with links to dovecot-oauth2.token.conf.ext from this manual[1], but it is not really clear if I need these and can just add a config file with openid_configuration_url [1] https://doc.dovecot.org/2.3/configuration_manual/authentication/oauth2/

1 3