- dovecot - dovecot.org

[Dovecot] Debugging IMAP ACLs
by Kerem Erciyes 06 Oct '09

06 Oct '09

Hello, I upgraded my server to 1.2.4 and now I'm trying to implement ACL support to use with Bynari Insight Connector. Starting out with the wiki page on shared namespaces from http://wiki.dovecot.org/SharedMailboxes/Shared I tried to implement shared mailbox support so that my customers can enjoy more exhange-like qualities with outlook. However I am not sure if the ACLs or Shared Namespaces are really working. I sure would like some help debugging ACL requests by clients, and the configuration I did. Thanks, Kerem Here is the run down of my configuration, if I have screwed up somewhere. *dovecot -n* # 1.2.4: /usr/local/etc/dovecot.conf # OS: FreeBSD 6.2-STABLE i386 base_dir: /var/run/dovecot/ log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot-debug.log protocols: imap imaps pop3 pop3s disable_plaintext_auth: no login_dir: /var/run/dovecot//login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_greeting: Kupyazilim IMAPS/POP3S Server - Dovecot ready. verbose_proctitle: yes first_valid_uid: 100 first_valid_gid: 6 mail_privileged_group: mail mail_location: mbox:~/mail/:INBOX=/usr/home/vmail/%d/%u mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): outlook-idle delay-newmail tb-extra-mailbox-sep imap_client_workarounds(imap): outlook-idle delay-newmail tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: shared separator: / prefix: shared/%%u/ location: mbox:/usr/home/vmail/%d/%u:INDEX=/usr/home/vmail/shared/%%u list: children lda: postmaster_address: postmaster(a)kupyazilim.com.tr mail_plugins: quota log_path: /var/log/dovecot-deliver.log info_log_path: /var/log/dovecot-deliver.log auth default: mechanisms: plain login user: nobody passdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: prefetch socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: mail master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: mail plugin: acl_shared_dict: proxy::acl dict: quota: maildir:storage=10240:messages=1000 trash: /usr/local/etc/trash.conf acl: mysql:/usr/local/etc/dovecot-dict-sql.conf * cat /usr/local/etc/dovecot-acl.conf * # mail_location copied from dovecot.conf for reference only # # mail_location: mbox:~/mail/:INBOX=/usr/home/vmail/%d/%u # note: it is %d/%u here but only %u in dovecot-sql.conf # You need to create also a private namespace: namespace private { separator = / prefix = #location defaults to mail_location. inbox = yes } namespace shared { separator = / prefix = shared/%%u/ #location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u location = mbox:/usr/home/vmail/%d/%u:INDEX=/usr/home/vmail/shared/%%u subscriptions = no list = children } # Set ACL to SQL Server and Reference sql-dictionary # Table implemented in mysql:/postfix/user_shares plugin { acl_shared_dict = proxy::acl } dict { acl = mysql:/usr/local/etc/dovecot-dict-sql.conf } *cat /usr/local/etc/dovecot-dict-sql.conf * map { pattern = shared/shared-boxes/user/$to/$from table = user_shares value_field = dummy fields { from_user = $from to_user = $to } } -- Kerem Erciyes Sistem Danismani http://proje.keremerciyes.com kerem.erciyes(a)gmail.com +90 532 737 05 83

3 6

[Dovecot] issues with ACL and Public Namespaces
by Anton Dollmaier 06 Oct '09

06 Oct '09

Hi all, after configuring dovecot to serve private and Public Namespaces per domain with ACLs per shared folder, everything worked great: In every shared folder I created a "dovecot-acl"-file with the permissions of every user: > user=user5(a)example.com > user=user6(a)example.com lrwstiea The subscriptions are handled with "subscriptions=no", so every local User can subscribe to shared folders as he likes. As the shared folders are managed via webinterface, the cronjob creating and deleting the folders also changes the subscriptions of every user, adding or removing the public folders as permissions are granted. RoundCube Webmail, Thunderbird and Outlook have no problems accessing and using the public folders, but a customer has problems with his Mac: In Apple Mail the folders are not visible, even when subscriptions are previously set in another mailclient. In RoundCube, I spottet another issue: subscribed public folders are usable in the "Mail"-area, but no public folder is listed in the "Folder"-settings - not even the already subscribed ones. Setting "list=yes" to the public namespace, RC lists only the prefix "shared" as a folder, but no subfolders - "list=children" shows no folder at all. As I checked the rawlog and debug-infos with "mail_debug=yes", I saw the possible cause for my problems: When checking the Folder Subscriptions in RoundCube, Dovecot tries to find an ACL file for the public folders, but does not check the public folders, but in the private Maildir: > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Loading modules from directory: /usr/lib/dovecot/modules/imap > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib01_acl_plugin.so > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib10_quota_plugin.so > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib11_imap_quota_plugin.so > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib20_autocreate_plugin.so > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib20_expire_plugin.so > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Effective uid=249, gid=249, home=/var/mail/vmail/example.com/user6/ > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl: No acl_shared_dict setting - shared mailbox listing is disabled > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Quota root: name=INBOX backend=dict args=:proxy::quotadict > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Quota rule: root=INBOX mailbox=* bytes=52428800 messages=0 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Quota rule: root=INBOX mailbox=Trash bytes=62914560 messages=0 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Quota warning: bytes=49807360 (95%) messages=0 command=/usr/local/bin/quota-warning.sh 95 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Quota warning: bytes=41943040 (80%) messages=0 command=/usr/local/bin/quota-warning.sh 80 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Quota root: name=shared backend=dict args=example.com:ns=shared.:proxy::quotadict > Oct 6 15:24:16 ipx02 dovecot: imap-login: Login: user=<user6(a)example.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Quota rule: root=shared mailbox=* bytes=524288000 messages=0 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): expire: pattern=Trash type=expunge secs=604800 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): expire: pattern=Spam type=expunge secs=2592000 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): dict quota: user=user6(a)example.com, uri=proxy::quotadict, noenforcing=0 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): dict quota: user=example.com, uri=proxy::quotadict, noenforcing=0 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Namespace: type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): maildir: data=~/Maildir > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): maildir++: root=/var/mail/vmail/example.com/user6//Maildir, index=, control=, inbox=/var/mail/vmail/example.com/user6//Maildir > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl: initializing backend with data: vfile > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl: acl username = user6(a)example.com > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl: owner = 1 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: Global ACL directory: (null) > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Namespace: type=public, prefix=shared., sep=., inbox=no, hidden=no, list=yes, subscriptions=no > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): maildir: data=/var/mail/vmail/example.com/shared:INDEX=~/shared > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): maildir++: root=/var/mail/vmail/example.com/shared, index=/var/mail/vmail/example.com/user6//shared, control=, inbox= > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl: initializing backend with data: vfile > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl: acl username = user6(a)example.com > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl: owner = 0 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: Global ACL directory: (null) > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Namespace : Using permissions from /var/mail/vmail/example.com/user6//Maildir: mode=0700 gid=-1 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: file /var/mail/vmail/example.com/user6//Maildir/.Sent/dovecot-acl not found > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: file /var/mail/vmail/example.com/user6//Maildir/.Spam/dovecot-acl not found > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: file /var/mail/vmail/example.com/user6//Maildir/.Trash/dovecot-acl not found > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: reading file /var/mail/vmail/example.com/user6//Maildir/dovecot-acl > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: file /var/mail/vmail/example.com/user6//Maildir/.shared.Transfer/dovecot-acl not found > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: file /var/mail/vmail/example.com/user6//Maildir/.shared.Transfer.Test1/dovecot-acl not found > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Disconnected: Logged out bytes=73/819 (last three lines are important) When checking the Folder itself, Dovecot checks in the IMHO correct folder: > Oct 6 15:25:02 ipx02 dovecot: imap-login: Login: user=<user6(a)example.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Loading modules from directory: /usr/lib/dovecot/modules/imap > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib01_acl_plugin.so > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib10_quota_plugin.so > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib11_imap_quota_plugin.so > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib20_autocreate_plugin.so > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib20_expire_plugin.so > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Effective uid=249, gid=249, home=/var/mail/vmail/example.com/user6/ > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl: No acl_shared_dict setting - shared mailbox listing is disabled > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Quota root: name=INBOX backend=dict args=:proxy::quotadict > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Quota rule: root=INBOX mailbox=* bytes=52428800 messages=0 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Quota rule: root=INBOX mailbox=Trash bytes=62914560 messages=0 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Quota warning: bytes=49807360 (95%) messages=0 command=/usr/local/bin/quota-warning.sh 95 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Quota warning: bytes=41943040 (80%) messages=0 command=/usr/local/bin/quota-warning.sh 80 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Quota root: name=shared backend=dict args=example.com:ns=shared.:proxy::quotadict > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Quota rule: root=shared mailbox=* bytes=524288000 messages=0 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): expire: pattern=Trash type=expunge secs=604800 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): expire: pattern=Spam type=expunge secs=2592000 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): dict quota: user=user6(a)example.com, uri=proxy::quotadict, noenforcing=0 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): dict quota: user=example.com, uri=proxy::quotadict, noenforcing=0 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Namespace: type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): maildir: data=~/Maildir > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): maildir++: root=/var/mail/vmail/example.com/user6//Maildir, index=, control=, inbox=/var/mail/vmail/example.com/user6//Maildir > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl: initializing backend with data: vfile > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl: acl username = user6(a)example.com > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl: owner = 1 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: Global ACL directory: (null) > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Namespace: type=public, prefix=shared., sep=., inbox=no, hidden=no, list=yes, subscriptions=no > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): maildir: data=/var/mail/vmail/example.com/shared:INDEX=~/shared > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): maildir++: root=/var/mail/vmail/example.com/shared, index=/var/mail/vmail/example.com/user6//shared, control=, inbox= > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl: initializing backend with data: vfile > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl: acl username = user6(a)example.com > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl: owner = 0 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: Global ACL directory: (null) > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Namespace : Using permissions from /var/mail/vmail/example.com/user6//Maildir: mode=0700 gid=-1 > Oct 6 15:25:03 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: reading file /var/mail/vmail/example.com/shared/.Transfer.Test1/dovecot-acl > Oct 6 15:25:03 ipx02 dovecot: IMAP(user6(a)example.com): expire: No expiring in mailbox: shared.Transfer.Test1 > Oct 6 15:25:03 ipx02 dovecot: IMAP(user6(a)example.com): Disconnected: Logged out bytes=85/743 (last four lines are important) Is this a possible bug related to ACL and Public Namespaces, or do I have to create the public folders also in the local Maildir and symlink the dovecot-acl to the public folder? With the symlinks in place (per Folder), dovecot finds the ACL-files and lists the folders also in RoundCube's "Folder"-pane and Apple Mail finds the public folders too. Upgrading to 1.2.5 failed so far, as my build-server has problems with automake, have to look into this too. Thanks in advance! best regards, Anton Dollmaier Output of dovecot -n: > # 1.2.3: /etc/dovecot/dovecot.conf > # OS: Linux 2.6.18-6-686 i686 Debian 5.0.3 > log_timestamp: %Y-%m-%d %H:%M:%S > protocols: imap imaps pop3s pop3 > listen: *, [::] > ssl_cert_file: /etc/dovecot/dovecot.pem > ssl_key_file: /etc/dovecot/dovecot.pem > disable_plaintext_auth: no > login_dir: /var/run/dovecot/login > login_executable(default): /usr/lib/dovecot/imap-login > login_executable(imap): /usr/lib/dovecot/imap-login > login_executable(pop3): /usr/lib/dovecot/pop3-login > mail_max_userip_connections(default): 25 > mail_max_userip_connections(imap): 25 > mail_max_userip_connections(pop3): 10 > first_valid_uid: 249 > mail_access_groups: poponly > mail_privileged_group: poponly > mail_location: maildir:~/Maildir > mail_debug: yes > mail_executable(default): /usr/lib/dovecot/rawlog /usr/lib/dovecot/imap > mail_executable(imap): /usr/lib/dovecot/rawlog /usr/lib/dovecot/imap > mail_executable(pop3): /usr/lib/dovecot/pop3 > mail_plugins(default): quota imap_quota acl autocreate expire > mail_plugins(imap): quota imap_quota acl autocreate expire > mail_plugins(pop3): quota expire > mail_plugin_dir(defamiult): /usr/lib/dovecot/modules/imap > mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap > mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 > imap_client_workarounds(default): netscape-eoh > imap_client_workarounds(imap): netscape-eoh > imap_client_workarounds(pop3): > pop3_client_workarounds(default): > pop3_client_workarounds(imap): > pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh > namespace: > type: private > separator: . > inbox: yes > list: yes > subscriptions: yes > namespace: > type: public > separator: . > prefix: shared. > location: maildir:/var/mail/vmail/%d/shared:INDEX=~/shared > list: yes > lda: > postmaster_address: postmaster(a)server.example.com > mail_plugins: quota expire > quota_full_tempfail: yes > auth_socket_path: /var/run/dovecot/auth-master > log_path: /var/log/dovecot-deliver.log > info_log_path: /var/log/dovecot-deliver.log > sieve_global_dir: /etc/dovecot/sieve/ > sieve_global_path: /etc/dovecot/default.sieve > auth default: > mechanisms: plain login > passdb: > driver: sql > args: /etc/dovecot/dovecot-sql.conf > passdb: > driver: sql > args: /etc/dovecot/dovecot-sql-master.conf > userdb: > driver: sql > args: /etc/dovecot/dovecot-sql.conf > socket: > type: listen > client: > path: /var/spool/postfix/private/auth > mode: 432 > user: postfix > group: postfix > master: > path: /var/run/dovecot/auth-master > mode: 432 > user: vmail > group: vmail > plugin: > quota: dict:INBOX::proxy::quotadict > quota2: dict:shared:%d:ns=shared.:proxy::quotadict > quota_rule: *:storage=50M:messages=1000 > quota_rule2: Trash:storage=50M:messages=100 > quota2_rule: *:storage=100M:messages=1000 > quota_warning: storage=95%% /usr/local/bin/quota-warning.sh 95 > quota_warning2: storage=80%% /usr/local/bin/quota-warning.sh 80 > acl: vfile > expire: Trash 7 Spam 30 > expire_dict: proxy::expire > autocreate: Trash > autocreate2: Spam > autocreate3: Sent > autosubscribe: Trash > autosubscribe2: Spam > autosubscribe3: Sent > dict: > quotadict: mysql:/etc/dovecot/dovecot-dict-quota.conf > expire: mysql:/etc/dovecot/dovecot-dict-expire.conf

2 3

[Dovecot] v1.2.6 released
by Timo Sirainen 06 Oct '09

06 Oct '09

http://dovecot.org/releases/1.2/dovecot-1.2.6.tar.gz http://dovecot.org/releases/1.2/dovecot-1.2.6.tar.gz.sig A couple of random things: - I decided to start using "hg sign" to gpg sign all releases in mercurial repository. - v2.0.alpha1 will hopefully be released in a week or two. Changes since 1.2.5: * Upgraded to Unicode 5.2.0 + Added authtest utility for doing passdb and userdb lookups. + login: ssl_security string now also shows the used compression. - quota: Don't crash with non-Maildir++ quota backend. - imap proxy: Fixed crashing with some specific password characters. - dovecot --exec-mail was broken. - Avoid assert-crashing when two processes try to create index at the same time.

2 1

[Dovecot] Proxy setup & upgrade from 1.0.3 to 1.1.7
by Adrian Wojcicki | Unternehmensberatung Wojcicki 06 Oct '09

06 Oct '09

Hi guys! I hope somebody can help me with my problem: We have a server running dovecot and proxying IMAPS connections to our internal network. This worked so far very good until we upgraded the server to a new SUSE Linux version and with it dovecot from version 1.0.3 to 1.1.7. My guess is that something changed in the way dovecot reads the user file as the configuration stayed the same: dovecot.conf: base_dir = /var/run/dovecot/ protocols = imaps disable_plaintext_auth = yes ssl_cert_file = /<pathtocertificate> ssl_key_file = /<pathtocertificate> ssl_disable = no ssl_listen = 80.149.64.98:993 log_path = /var/log/dovecot.log login_dir = /var/run/dovecot/login login_process_per_connection = yes login_processes_count = 3 login_greeting = main.xbdx.de IMAP What can we do for you? imap_client_workarounds = tb-extra-mailbox-sep mail_debug = no auth_debug = yes auth_cache_size = 4096 auth_cache_ttl = 7200 auth_worker_max_count = 30 auth default { userdb static { args = uid=5000 gid=5000 } passdb { driver = passwd-file args = /etc/dovecot/dovecot.passdb } socket listen { client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } mechanisms = plain login user = root count = 1 } dovecot.passdb: testuser1:::::::host=<internalip> port=143 nodelay=y nologin=y proxy=y testuser2:::::::host=<internalip> port=143 nodelay=y nologin=y proxy=y dovecot.log: dovecot: Oct 06 10:37:26 Info: Dovecot v1.1.7 starting up dovecot: Oct 06 10:37:26 Info: auth(default): passwd-file /etc/dovecot/dovecot.passdb: Read 2 users dovecot: Oct 06 10:37:27 Info: auth(default): new auth connection: pid=8135 dovecot: Oct 06 10:37:27 Info: auth(default): new auth connection: pid=8136 dovecot: Oct 06 10:37:27 Info: auth(default): new auth connection: pid=8137 dovecot: Oct 06 10:37:39 Info: auth(default): new auth connection: pid=8139 dovecot: Oct 06 10:37:39 Info: auth(default): client in: AUTH 1 PLAIN service=imap secured lip=80.149.64.98 rip=217.91.33.32 lport=993 rport=61752 resp=<hidden> dovecot: Oct 06 10:37:39 Info: auth(default): cache(adrian.wojcicki,217.91.33.32): miss dovecot: Oct 06 10:37:39 Info: auth(default): passwd-file(testuser1,217.91.33.32): lookup: user=testuser1 file=/etc/dovecot/dovecot.passdb dovecot: Oct 06 10:37:39 Info: auth(default): passwd-file(testuser1,217.91.33.32): Password mismatch dovecot: Oct 06 10:37:41 Info: auth(default): client out: FAIL 1 user=testuser1 host=<internalip> port=143 nologin proxy pass=<hidden> dovecot: Oct 06 10:37:41 Info: imap-login: Aborted login (auth failed, 1 attempts): user=<testuser1>, method=PLAIN, rip=217.91.33.32, lip=80.149.64.98, TLS Thanks! Adrian

2 2

[Dovecot] How to calculate auth_cache_size ?
by Frank Bonnet 06 Oct '09

06 Oct '09

Hello Is there a way to calculate this parameter for my site which has approx 4000 users authenticating thru NIS ? Thanks a lot

2 1

[Dovecot] Delivery failure about update to 1.2.4 (Debian)
by William Witteman 06 Oct '09

06 Oct '09

Version: 1.2.4 Config: # 1.2.4: /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-686 i686 Debian squeeze/sid ext3 log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot-info.log log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s ssl_ca_file: /etc/ssl/certs/gd_intermediate_bundle2.crt ssl_cert_file: /etc/ssl/certs/theta.crt ssl_key_file: /etc/ssl/private/theta.key ssl_key_password: obfuscated disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_location: maildir:/home/vmail/%d/%n mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 lda: log_path: /home/vmail/dovecot-deliver.log auth_socket_path: /var/run/dovecot/auth-master postmaster_address: obfuscated mail_plugins: cmusieve global_script_path: /home/vmail/globalsieverc auth default: mechanisms: plain login digest-md5 user: vmail debug: yes passdb: driver: passwd-file args: /etc/dovecot/passwd userdb: driver: static args: uid=5000 gid=5000 home=/home/vmail/%d/%n socket: type: listen client: path: /var/run/dovecot/auth-client mode: 438 master: path: /var/run/dovecot/auth-master mode: 384 user: vmail I recently updated Debian (testing). Now, no mail is getting from postfix to dovecot, but postfix didn't get upgraded. dovecot seems happy (after I fixed the "ssl = yes" change (speaking of which, that line is not in the dovecot -n output)), but postfix is unable to deliver email to it. Here is a sample mail.log entry: Oct 5 14:47:07 theta postfix/pipe[30972]: 451873B5B8: to=<obfuscated>, relay=dovecot, delay=168521, delays=168521/0.01/0/0.02, dsn=4.3.0, status=deferred (temporary failure) I cannot seem to figure out what changed and why things are now broken. Can anyone help? Thanks. -- yours, William

3 8

[Dovecot] Apple mail troubles
by Frank Bonnet 06 Oct '09

06 Oct '09

Hello I have an Apple computer user who has great problems using IMAP and Dovecot. Some same messages seems to stay in two or more folders and are impossible to erase from the Apple mail client Anyone has that kind of troubles ? Thanks

7 8

[Dovecot] Dovecot And ThunderBird
by Михаил Захаренко 05 Oct '09

05 Oct '09

Hello All! i`m using Dovecot 1.2.4 and Thunderbird 2.0.0.23 (Ubuntu) Trouble with shared folder and marks. For example: 1. first user set flag "important", other users can see it - all ok. 2. first user unset flag "important", other users see it yet, it`s don`t change. But with asterisk (\Flagged) all OK. Please help find - who are wrong? ThunderBird or dovecot? my conf: # 1.2.4: /etc/dovecot/dovecot.conf # OS: Linux 2.6.28-hardened-r9 i686 Gentoo Base System release 1.12.11.1 reiserfs log_path: /var/log/dovecot_err.log info_log_path: /var/log/dovecot_info.log protocols: imap pop3 imaps pop3s managesieve ssl_cert_file: /etc/dovecot/ssl/mail.proton-sss.ru.pem ssl_key_file: /etc/dovecot/ssl/mail.proton-sss.ru.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_executable(managesieve): /usr/libexec/dovecot/managesieve-login mail_location: maildir:/home/%u/.maildir mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_executable(managesieve): /usr/libexec/dovecot/managesieve mail_plugins(default): acl imap_acl mail_plugins(imap): acl imap_acl mail_plugins(pop3): mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/managesieve namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: shared separator: / prefix: shared/%%u/ location: maildir:%%h/.maildir/:INDEX=%h/.maildir/shared/%%u list: children lda: postmaster_address: postmaster(a)example.com mail_plugins: acl mail_plugin_dir: /usr/lib/dovecot/lda auth default: passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 group: mail master: path: /var/run/dovecot/auth-master mode: 432 user: mail group: users plugin: acl: vfile acl_shared_dict: file:/var/lib/dovecot/shared-mailboxes sieve: ~/.dovecot.sieve sieve_dir: ~/sieve dict: expire: db:/var/lib/dovecot/expire.db file dovecot-shared in shared maildir presents, and flag \Seen are private. -- С уважением Системный администратор ООО НПП "СПЕЦСТРОЙ-СВЯЗЬ" Захаренко Михаил тел. +78634 311562 доб. 478

2 3

[Dovecot] Dovecot fails when vpopmail is enabled
by Sherin George 05 Oct '09

05 Oct '09

Hello Friends, ===================================================== -bash-3.2# dovecot --version 1.2.5 -bash-3.2# dovecot -n # 1.2.5: /usr/local/etc/dovecot.conf # OS: Linux 2.6.18-128.4.1.el5xen x86_64 CentOS release 5.2 (Final) login_dir: /usr/local/var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login lda: postmaster_address: postmaster(a)example.com auth default: passdb: driver: pam userdb: driver: passwd ===================================================== I am trying to enable vpomail support in dovecot. I modified default dovecot conf file as given below. =============================================== -bash-3.2# diff /etc/dovecot.conf /etc/dovecot.conf.original 691c691 < auth_cache_size = 1000 --- > #auth_cache_size = 0 886c886 < passdb vpopmail { --- > #passdb vpopmail { 888,890c888,890 < args = cache_key=%u%s * < } < --- > #args = > #} > =============================================== I am not able to run dovecot after this. ========================================= -bash-3.2# /etc/init.d/dovecot restart Stopping Dovecot Imap: [FAILED] Starting Dovecot Imap: [ OK ] -bash-3.2# /etc/init.d/dovecot restart Stopping Dovecot Imap: [FAILED] Starting Dovecot Imap: [ OK ] -bash-3.2# /etc/init.d/dovecot restart Stopping Dovecot Imap: [FAILED] Starting Dovecot Imap: [ OK ] -bash-3.2# ========================================= Could some one please help me to find what went wrong. -- Thanks, Sherin

2 2

[Dovecot] dovecot 1.0.15 upgrading to dovecot 1.1.x or 1.2.x, and POP3 UIDL issue
by Ariel Biener 05 Oct '09

05 Oct '09

Hi, We're upgrading a cluster of servers from v1.0.15 to v1.1.x or v1.2.x. It appears that the UIDL generation mechanism has changed, and thus we'll be getting POP3 dups with users that leave mail on server (which is a nasty practice, I know). From checking the sources, and performing a number of controlled tests in various scenarios, here is the outcome: upgrade from 1.0.15 to 1.1.x (latest), UIDLs change (no change to the mail backend, that is, mbox) However, the interesting part is that if for example I read a mailbox for the first time with the 1.1.x version, and then I migrate the mailbox to a different server, running 1.1.x or 1.2.x, with Maildir or mailbox the UIDL does *NOT* change. We do not have X-UIDL headers in the mailboxes. I did every possible permutation of these tests. It appears that the way UIDLs are created in 1.0.x is different than what is used in 1.1.x and 1.2.x. (I am not talking about the format, we're using the same format in both, that is, UW compatible). Since we're a largish site (university), and we have some >60k accounts, even the smallest percentage of users who use POP3 and "leave mail on server" is a large number of angry staff members landing on our helpdesk, which is the reason why we're not migrating. Has anyone ever ported the UIDL generation algorithm from 1.0.x to 1.1.x/1.2.x to maintain compatibility ? Is there some other option that I am missing ? --Ariel

2 2