- dovecot - dovecot.org

[Dovecot] Problems with Dovecot 1.1.16 and MS A.D.
by Vinicius Abrahao 07 Sep '09

07 Sep '09

Hello dear fellows, I'm trying to integrate my dovecot (version 1.1.16) but it's not working anyway. The test that I'm doing is simple: # telnet mail.unimetro.net 110 Trying 192.168.20.4... Connected to mail.unimetro.net. Escape character is '^]'. +OK Unimetro Mailserver Ready. user bindmail +OK pass xxxxxxx123 Connection closed by foreign host. At /var/log/dovecot.log I see these lines: dovecot: Aug 12 14:55:43 Info: dovecot v1.1.16 starting up dovecot: Aug 12 14:59:46 Error: auth(default): re_encode_request new request is: dovecot: Aug 12 14:59:46 Error: auth(default): re_encode_request new request is: dovecot: Aug 12 14:59:46 Error: auth(default): re_encode_request new request is: dovecot: Aug 12 15:02:46 Info: pop3-login: Disconnected: Inactivity (auth failed, 1 attempts): method=PLAIN, rip=192.168.20.4, lip=192.168.20.4, secured dovecot: Aug 12 15:06:57 Error: auth(default): ldap(postmaster): Connection appears to be hanging, reconnecting dovecot: Aug 12 15:06:57 Error: auth(default): re_encode_request new request is: dovecot: Aug 12 15:06:57 Error: auth(default): re_encode_request new request is: dovecot: Aug 12 15:06:57 Error: auth(default): re_encode_request new request is: dovecot: Aug 12 15:06:57 Error: auth(default): ldap(postmaster): Connection appears to be hanging, reconnecting dovecot: Aug 12 15:06:57 Error: auth(default): re_encode_request new request is: dovecot: Aug 12 15:06:57 Error: auth(default): re_encode_request new request is: dovecot: Aug 12 15:06:57 Error: auth(default): re_encode_request new request is: dovecot: Aug 12 15:06:57 Error: auth(default): ldap(bindmail,192.168.20.4): ldap_search((&(ObjectClass=person)(sAMAccountName=bindmail)(memberOf=CN=UMAMAIL,OU=Groups,DC=unimetro,DC=net))) failed: Operations error dovecot: Aug 12 15:06:57 Error: auth(default): re_encode_request new request is: dovecot: Aug 12 15:06:57 Error: auth(default): re_encode_request new request is: dovecot: Aug 12 15:06:57 Error: auth(default): re_encode_request new request is: Some times, with the same test these lines appears: dovecot: Aug 11 10:31:04 Error: auth(default): re_encode_request new request is: dovecot: Aug 11 10:31:04 Error: auth(default): re_encode_request new request is: dovecot: Aug 11 10:31:04 Error: auth(default): ldap(bindmail,192.168.20.4): ldap_search((&(ObjectClass=person)(sAMAccountName=bindmail) (memberOf=CN=UMAMAIL,OU=Groups,DC=unimetro,DC=net))) failed: Operations error dovecot: Aug 11 10:31:04 Error: auth(default): re_encode_request new request is: dovecot: Aug 11 10:31:04 Error: auth(default): re_encode_request new request is: dovecot: Aug 11 10:31:04 Error: auth(default): re_encode_request new request is: dovecot: Aug 11 10:31:06 Info: pop3-login: Disconnected (auth failed, 1 attempts): user=<bindmail>, method=PLAIN, rip=192.168.20.4, lip=192.168.20.4, secured dovecot: Aug 11 10:34:10 Info: pop3-login: Disconnected: Inactivity (auth failed, 1 attempts): user=<bindmail>, method=PLAIN, rip=192.168.20.4, lip=192.168.20.4, secured dovecot: Aug 11 10:35:17 Panic: auth(default): file aqueue.c: line 69 (aqueue_delete): assertion failed: (n < count) dovecot: Aug 11 10:35:17 Error: child 1579 (auth) killed with signal 6 (core not dumped) dovecot: Aug 11 10:38:17 Info: pop3-login: Disconnected: Inactivity (auth failed, 1 attempts): method=PLAIN, rip=192.168.20.4, lip=192.168.20.4, secured dovecot: Aug 11 10:50:32 Error: auth(default): ber_get_next failed. dovecot: Aug 11 10:50:32 Error: auth(default): LDAP: Connection lost to LDAP server, reconnecting dovecot: Aug 11 10:54:53 Error: auth(default): re_encode_request new request is: dovecot: Aug 11 10:54:53 Error: auth(default): re_encode_request new request is: dovecot: Aug 11 10:54:53 Error: auth(default): re_encode_request new request is: Attached are my confs. I'm running at a FreeBSD 7.2 BOX. # pkg_info | egrep "dovecot|postfix|ldap" apr-ipv6-gdbm-db42-ldap-mysql-pgsql-1.3.8.1.3.9 Apache Portability Library dovecot-1.1.16 Secure and compact IMAP and POP3 servers dovecot-sieve-1.1.6 A Sieve plugin for the Dovecot 'deliver' LDA openldap-client-2.4.17 Open source LDAP client implementation postfix-2.6.2_1,1 A secure alternative to widely-used Sendmail And I have success using ldapsearch to access the MS A.D with: /usr/local/bin/ldapsearch -v -x -h 192.168.20.3 -D "CN=bindmail,CN=Users,DC=unimetro,DC=net" -w xxxxx123 -b "dc=unimetro, dc=net" Thanks for your time! Best regards, Vinícius Schmidt

2 1

[Dovecot] avoiding DoS
by David Halik 07 Sep '09

07 Sep '09

Hi, I was just looking for some advice on avoiding getting DoS'd from brute force log in attempts. We came in this morning to find that one of our Solaris 9 dovecot severs had wedged overnight due to a brute force connection attempt to pop3 from Brasil. In the span of about 15 seconds we received 342 connection auth attempts from the same IP: Sep 3 00:10:51 xxxxx dovecot: [ID 583609 mail.info] auth(default): new auth connection: pid=16862 Sep 3 00:10:51 xxxxx dovecot: [ID 583609 mail.info] auth(default): new auth connection: pid=16863 Sep 3 00:10:51 xxxxx dovecot: [ID 583609 mail.info] pop3-login: Login failed: Plaintext authentication disabled: rip=189.99.178.15, lip=xxxxx Sep 3 00:10:51 xxxxx dovecot: [ID 583609 mail.info] pop3-login: Aborted login (tried to use disabled plaintext auth): rip=189.99.178.15, lip=xxxxx Dovecot finally wedged silently and without complaint, becoming completely unresponsive. I had to kill -9 it this morning in order to restart the service. Once possibility I considered was that the dovecot user process limit was reached, but this is set to 1024, and I didn't see any errors or warnings anywhere in the logs. login_max_processes_count = 256 max_mail_processes = 1024 With the above I would think it would have been able to handle it gracefully, but apparently it did not. ulimit -n 2048 is also set on dovecot startup for the fd limit. Any suggestions on what I could tweak to prevent this from happening in the future? dovecot -n output: Note I upgraded to 1.2.4 this morning while it was already down. We were running either 1.2.0 or 1.2.1 last night, sorry didn't think to check first. ;) bash-2.05# ulimit -n 2048; dovecot -n # 1.2.4: /usr/local/etc/dovecot.conf # OS: SunOS 5.9 sun4u protocols: imap imaps pop3 pop3s ssl_cert_file: /usr/local/ssl/certs/nbcs.key+crt.pem ssl_key_file: /usr/local/ssl/certs/nbcs.key+crt.pem login_dir: /usr/local/var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_max_processes_count: 256 max_mail_processes: 1024 mail_location: maildir:~/Maildir:INDEX=/toolbox/nqu%h/dovecot:CONTROL=/toolbox/nqu%h/dovecot mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota fts fts_squat mail_plugins(imap): quota imap_quota fts fts_squat mail_plugins(pop3): quota mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): UID%u-%v namespace: type: private separator: . prefix: INBOX. inbox: yes list: yes subscriptions: yes lda: postmaster_address: postmaster(a)jla.rutgers.edu auth default: verbose: yes debug: yes passdb: driver: pam args: * userdb: driver: passwd plugin: quota: fs fts: squat fts_squat: partial=4 full=4 -- ================================ David Halik System Administrator OIT-CSS Rutgers University dhalik(a)jla.rutgers.edu ================================

4 3

[Dovecot] assertion failed while using sieve
by Maciej Uhlig 07 Sep '09

07 Sep '09

Hi, there is a line in TODO: "- sieve-cmu.c crash: i_assert(buf->used - 1 == part->body_size.physical_size); ". Yes, we've really seen this crash. Therefore we upgraded to dovecot-1.2.3 with dovecot-1.2-sieve-0.1.11 in order to use sieve plugin (i.e. not cmu-sieve). We use Solaris 10 on Sun servers, we don't use NFS. However, unfortunately, dovecot with sieve crashes too. Here is dovecot log excerpt: 2009-09-01T02:40:57+02:00 prac/prac dovecot: [ID 583609 mail.crit] deliver(id@domain): Panic: file ext-body-common.c: line 149: assertion failed: (buf->used - 1 == part->body_size.physical_size) 2009-09-01T02:40:57+02:00 prac/prac dovecot: [ID 583609 mail.crit] deliver(id@domain): Panic: file ext-body-common.c: line 149: assertion failed: (buf->used - 1 == part->body_size.physical_size) 2009-09-01T02:40:57+02:00 prac/prac dovecot: [ID 583609 mail.error] deliver(id@domain): Raw backtrace: 0xbd27c -> 0xfead33b0 -> 0xfead358c -> 0xfead396c -> 0xfead4a78 -> 0xfeaa19dc -> 0xfeaa1abc -> 0xfeaa1c38 -> 0xfeabf22c -> 0xfeabf520 -> 0xfea90b20 -> 0xfea91048 -> 0xfea91404 -> 0x26e58 -> 0x23778 Now, some background. We use a sieve script with >>require "body"<<. This script compiles correctly and more, it works correctly while named as >>id(a)domain.sieve<< or >>id(a)domain.svbin". Nevertheless while the very same script is defined in plugin section of dovecot conf as "sieve = script" or "sieve_before = script" or "sieve_after = script" then dovecot crashes. I consider it as an important hint for problem resolution. Moreover, not every mail is affected, but we didn't investigate which mails are correctly saved to inbox and which crash. The effect is, we're not able to implement global sieve policies which is bad because we really need them :-). We'd than be happy to test fixes, if any. Best regards, MU

2 4

[Dovecot] dovecot-auth segfault with vpopmail 5.5.0 on amd64
by Lawrence 07 Sep '09

07 Sep '09

Seeing dovecot-auth segfault on amd64 dovecot is 1.2.4 pertinent details below: ldd /usr/local/libexec/dovecot/dovecot-auth linux-vdso.so.1 => (0x00007fffef1fe000) libcrypt.so.1 => /lib/libcrypt.so.1 (0x00007fe8e6bae000) libvpopmail.so => /usr/lib/libvpopmail.so (0x00007fe8e6986000) libdl.so.2 => /lib/libdl.so.2 (0x00007fe8e6782000) librt.so.1 => /lib/librt.so.1 (0x00007fe8e657a000) libc.so.6 => /lib/libc.so.6 (0x00007fe8e6229000) /lib64/ld-linux-x86-64.so.2 (0x00007fe8e6de6000) libpthread.so.0 => /lib/libpthread.so.0 (0x00007fe8e600e000) dovecot -n # 1.2.4: /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-1-amd64 x86_64 Debian squeeze/sid base_dir: /var/run/dovecot log_path: /var/log/dovecot.log listen: 127.0.0.1:143 ssl_listen: *:993 ssl_cert_file: /var/qmail/control/servercert.pem ssl_key_file: /var/qmail/control/clientcert.pem disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login login_greeting: Computer Solutions IMAP Server login_max_connections: 4096 mail_max_userip_connections: 50 first_valid_uid: 89 first_valid_gid: 89 mail_debug: yes mail_drop_priv_before_exec: yes mail_plugins: quota imap_quota imap_client_workarounds: outlook-idle namespace: type: private prefix: INBOX. inbox: yes list: yes subscriptions: yes auth default: user: vpopmail passdb: driver: vpopmail userdb: driver: vpopmail plugin: quota: maildir this is the strace 16:59:30.529067 epoll_wait(7, {}, 7, 1788) = 0 16:59:32.317110 epoll_wait(7, {{EPOLLIN, {u32=17196288, u64=17196288}}}, 7, 5000) = 1 16:59:34.777612 read(8, "AUTH\t1\tPLAIN\tservice=imap\tsecured"..., 4074) = 134 16:59:34.777750 --- SIGSEGV (Segmentation fault) @ 0 (0) --- and from a core dump gdb /usr/local/libexec/dovecot/dovecot-auth ./core GNU gdb (GDB) 6.8.50.20090628-cvs-debian Copyright (C) 2009 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html > This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... warning: Can't read pathname for load map: Input/output error. Reading symbols from /lib/libcrypt.so.1...done. Loaded symbols for /lib/libcrypt.so.1 Reading symbols from /usr/lib/libvpopmail.so...done. Loaded symbols for /usr/lib/libvpopmail.so Reading symbols from /lib/libdl.so.2...done. Loaded symbols for /lib/libdl.so.2 Reading symbols from /lib/librt.so.1...done. Loaded symbols for /lib/librt.so.1 Reading symbols from /lib/libc.so.6...done. Loaded symbols for /lib/libc.so.6 Reading symbols from /lib64/ld-linux-x86-64.so.2...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Reading symbols from /lib/libpthread.so.0...done. Loaded symbols for /lib/libpthread.so.0 Reading symbols from /lib/libnss_compat.so.2...done. Loaded symbols for /lib/libnss_compat.so.2 Reading symbols from /lib/libnsl.so.1...done. Loaded symbols for /lib/libnsl.so.1 Reading symbols from /lib/libnss_nis.so.2...done. Loaded symbols for /lib/libnss_nis.so.2 Reading symbols from /lib/libnss_files.so.2...done. Loaded symbols for /lib/libnss_files.so.2 Core was generated by `dovecot-auth'. Program terminated with signal 11, Segmentation fault. #0 0x0000000000000000 in ?? () (gdb) (gdb) bt full #0 0x0000000000000000 in ?? () No symbol table info available. #1 0x000000000041eb2d in vpopmail_lookup_vqp (request=0x1ae6548, vpop_user=0x7fff7a044830 "lawrence", vpop_domain=0x7fff7a0447d0 "shanghaiguide.com") at userdb-vpopmail.c:43 vpw = <value optimized out> #2 0x000000000041c9c6 in vpopmail_password_lookup (auth_request=0x7fff7a044830, cleartext=false, result_r=0x7fff7a0448d4) at passdb-vpopmail.c:65 vpop_user = "lawrence", '\0' <repeats 72 times> vpop_domain = "shanghaiguide.com", '\0' <repeats 63 times> vpw = <value optimized out> password = <value optimized out> #3 0x000000000041cc0d in vpopmail_verify_plain (request=0x7fff7a044830, password=0x1ad1278 "123", callback=0x412390 <auth_request_verify_plain_callback>) at passdb-vpopmail.c:119 result = <value optimized out> scheme = <value optimized out> tmp_pass = <value optimized out> crypted_pass = <value optimized out> ret = <value optimized out> #4 0x000000000041221d in auth_request_verify_plain (request=0x1ae6548, password=0x1ad1278 "123", callback=0x41ab00 <plain_verify_callback>) at auth-request.c:507 passdb = 0x1ad9a10 result = <value optimized out> cache_key = <value optimized out> __PRETTY_FUNCTION__ = "auth_request_verify_plain" #5 0x000000000041726e in mech_plain_auth_continue (request=0x1ae6548, data=0x1ad1250 "", data_size=<value optimized out>) at mech-plain.c:58 authid = 0x1ad1250 "" authenid = 0x1ad1251 "lawrence(a)shanghaiguide.com" error = <value optimized out> pass = 0x1ad1278 "123" i = <value optimized out> count = <value optimized out> #6 0x0000000000412c12 in auth_request_handler_auth_begin (handler=0x1ae18a8, args=<value optimized out>) at auth-request- handler.c:388 mech = <value optimized out> request = 0x1ae6548 list = 0x1ad1110 name = <value optimized out> arg = 0x1ad1218 "P\22\255\1" initial_resp = 0x1ad109c "AGxhd3JlbmNlQHNoYW5naGFpZ3VpZGUuY29tADEyMw==" initial_resp_len = 4428754 id = <value optimized out> buf = 0x1ad1218 #7 0x000000000040e2d6 in auth_client_handle_line (conn=0x1ae01f0) at auth-client-connection.c:174 No locals. #8 auth_client_input (conn=0x1ae01f0) at auth-client-connection.c:250 ---Type <return> to continue, or q <return> to quit--- _data_stack_cur_id = 3 line = 0x1ae0866 "AUTH\t1\tPLAIN\tservice=imap\tsecured \tlip = 127.0.0.1 \trip = 127.0.0.1 \tlport =993\trport=42735\tresp=AGxhd3JlbmNlQHNoYW5naGFpZ3VpZGUuY29tADEyMw==" ret = 2 #9 0x0000000000429e8b in io_loop_handler_run (ioloop=<value optimized out>) at ioloop-epoll.c:208 ctx = 0x1ad9fe0 event = 0x1adca40 list = 0x1ae0500 io = 0x1ae04c0 tv = {tv_sec = 4, tv_usec = 999952} t_id = 2 msecs = <value optimized out> ret = 1 call = <value optimized out> #10 0x0000000000429318 in io_loop_run (ioloop=0x1ad9350) at ioloop.c:335 No locals. #11 0x0000000000416aae in main (argc=<value optimized out>, argv=<value optimized out>) at main.c:347 foreground = false

2 2

[Dovecot] local delivery agent
by legionaer85 07 Sep '09

07 Sep '09

Hey, i've got a problem with my lda and exim, probably i assume that it's dovecot. I think that, because i get an error in exim: T=dovecot_delivery: Child process of dovecot_delivery transport returned 67 (could mean user nonexistent) from command: /usr/lib/dovecot/deliver in exim i use /usr/lib/dovecot/deliver -d <name>@<domain>.<tld> -f <name>@<domain>.<tld> So, i tried to focus the error and thought there is not the right argument for delivery. But i couldn't get any hints about the arguments for the deliver agent. Exim gives me a complete string which is 'name(a)domain.ltd' Now my question. How parses the deliver agent this string? Splits it into variables? If yes... to which ones? name and domain? Thanks a lot for any answers. =>dovecot --version 1.0.rc15 ------ =>dovecot -n # /etc/dovecot/dovecot.conf log_path: /var/log/dovecot/main.log info_log_path: /var/log/dovecot/info.log log_timestamp: %Y-%m-%d %H:%M:%S ssl_cert_file: /etc/ssl/certs/ssl_cert.crt ssl_key_file: /etc/ssl/certs/ssl.key login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login login_user: vmail login_greeting: <servername> Mailserver ready. verbose_proctitle: yes first_valid_uid: 8 last_valid_uid: 8 mail_privileged_group: mail mail_location: dbox:/var/spool/mail/%d/%n mail_debug: yes auth default: user: mail passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: prefetch socket: type: listen client: path: /var/run/dovecot/auth-client mode: 384 user: mail group: mail master: path: /var/run/dovecot/auth-master mode: 384 user: mail group: mail --------- =>grep -v '^ *$#.*$\?$' /etc/dovecot/dovecot-sql.conf driver = mysql connect = host=<host> dbname=<dbname> user=<user> password=<pass> default_pass_scheme = PLAIN password_query = SELECT password, '/var/mail/%d/%n' AS userdb_home, 'mail' AS userdb_uid, 'mail' AS userdb_gid FROM user WHERE username = '%n' AND domain = '%d' AND IMAP_allowed = 'YES' user_query = SELECT username, uid, gid FROM user WHERE username = '%n' AND domain = '%d' --------- in the db i have the user table columns: username, domain, password

3 2

[Dovecot] Dovecot Erros in Logs
by David Cunningham 07 Sep '09

07 Sep '09

I got lots of errors that look like this: Error: write(dnotify pipe) failed: Bad file descriptor I am running dovecot-1.2.4-0_99 on RHEL4 dovecot -n: # 1.2.4: /etc/dovecot.conf # OS: Linux 2.6.9-89.0.3.ELsmp x86_64 Red Hat Enterprise Linux AS release 4 (Nahant Update 8) ext3 log_path: /var/log/dovecot info_log_path: /var/log/dovecot-info login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_process_per_connection: no login_process_size: 1024 login_processes_count: 6 login_max_processes_count: 1024 login_max_connections: 1024 max_mail_processes: 50000 verbose_proctitle: yes first_valid_uid: 50 mail_uid: 93 mail_gid: 12 mail_location: maildir:/var/spool/maildirs/%d/%n/Maildir mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_process_size: 1024 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 namespace: type: private prefix: INBOX. inbox: yes list: yes subscriptions: yes lda: postmaster_address: postmaster(a)example.com auth default: cache_ttl: 43200 cache_negative_ttl: 0 verbose: yes passdb: driver: ldap args: /etc/dovecot-ldap.conf plugin: quota: maildir Any suggestions? Dave

2 4

[Dovecot] IMAP Directory Issues (brand new install)
by Jesse Vollmar 07 Sep '09

07 Sep '09

Hi, I just installed dovecot 1.1.11 and am having some issues. Mail appears to be delivered to the Maildirs just fine, but when a client (Thunderbird) tries to retrieve them I get this: dovecot: IMAP(info(a)aedisit.com): maildir_file_do(/var/mail/ > aedisit.com/info/cur/1251566335.V14I27a91M380600.kim) Filename keeps > changing After turning on mail debug mode, I get this: Aug 29 13:41:48 kim dovecot: IMAP(vollmarj(a)aedisit.com): maildir: > data=/var/mail/ > aedisit.com/vollmarj:INDEX=/var/dovecot/indexes/aedisit.com/vollmarj Aug 29 13:41:48 kim dovecot: IMAP(vollmarj(a)aedisit.com): maildir++: > root=/var/mail/aedisit.com/vollmarj, index=/var/dovecot/indexes/ > aedisit.com/vollmarj, control=, inbox=/var/mail/aedisit.com/vollmarj Here is my dovecot -n output: # 1.1.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.28-15-server x86_64 Ubuntu 9.04 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_privileged_group: mail mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 auth default: passdb: driver: pam userdb: driver: passwd

2 2

[Dovecot] setting up both system password users AND virtual users
by Markus Bonet 07 Sep '09

07 Sep '09

Hi, I want to pick up this discussion. I am trying to achieve the same, but I am using Maildir instead. Here's the (relevent part of the) config file as configured by the recent suggestion: # We're using Maildir format mail_location = maildir:~/Maildir # Authentication configuration: auth_verbose = yes auth default { mechanisms = plain userdb passwd { } userdb static { args = uid=vmail gid=vmail home=/daten/mailusers/%u } passdb passwd-file { args = /etc/dovecot/passwd } } But when I try to login in to a system's user mailbox, it'll be rejected as unknown in my Dovecot's passwd file. I am converting from courier-imap, so I am kind of new to Dovecot. Markus

2 1

[Dovecot] IMAP activity after disconnect
by Charles Sprickman 07 Sep '09

07 Sep '09

Howdy, I'm running Dovecot 1.1.16 on a staging server to do some testing before building a new server and moving a bunch of qmail/vpopmail/courier accounts over. I wanted to test the migration of courier accounts to dovecot with a few clients, so I copied over a few large accounts. All went well with a small account (100+ messages) when accessing the account via POP - no re-downloads after adjusting the uidl format. IMAP looks good as well after running the conversion script and setting the namespace properly. However, one thing I copied over without paying much attention was a non-quota'd spam box that has literally not been checked in at least a year: [root@nac /var/vmail/xxx.com/spork/Maildir/.Spam]# ls new/| wc -l 70501 Mail.app valiantly tried to sync this, but when I realized just how huge this was, I took the account offline and quit the app. However it seems like Dovecot is still busy doing something in that mailbox: lsof: no pwd entry for UID 5000 imap 27515 5000 7uW VREG 0,95 3372 2968764 /jails/nac.xxx.com/var/vmail/xxx.com/spork/Maildir/.Spam/dovecot.index.log lsof: no pwd entry for UID 5000 imap 27515 5000 8u VREG 0,95 488 3007349 /jails/nac.xxx.com/var/vmail/xxx.com/spork/Maildir/.Spam/dovecot.index lsof: no pwd entry for UID 5000 imap 27515 5000 9u VREG 0,95 25195 27064933 /jails/nac.xxx.com/var/vmail/xxx.com/spork/Maildir/.Spam/dovecot-uidlist lsof: no pwd entry for UID 5000 imap 27515 5000 10r VDIR 0,95 15171072 2968758 /jails/nac.xxx.com/var/vmail/xxx.com/spork/Maildir/.Spam/new My guess is it's trying to build an index. This process is chewing up 100% of whatever cpu it lands on. Is this expected behavior (not the huge cpu usage, but the imap server continuing to work on the box after the client has logged out)? Are there any config settings I've missed to sort of put a cap on how much cpu/time dovecot will spend on a task like this? So far this has been running for about 20 minutes. I'm going to kill it and manually delete the spam since I'm not familiar enough with gdb to dig in and see just what it's doing (although my guess is indexing). On the upside, I have some serious spam magnet addresses in this test domain, so now I've got a great platform to test my amavis/postfix/policy skills. :) Thanks, Charles ___ Charles Sprickman NetEng/SysAdmin Bway.net - New York's Best Internet - www.bway.net spork(a)bway.net - 212.655.9344

2 1

Re: [Dovecot] Dovecot and LDAP-Quotas
by south africa 07 Sep '09

07 Sep '09

> It says nothing about LDAP here, which means that unless you filtered > out some lines it's not using LDAP at all for anything. What does your > dovecot -n output show now? dovecot -n # 1.2.3: /etc/dovecot.conf # OS: Linux 2.6.18-128.4.1.el5 x86_64 CentOS release 5.3 (Final) ext3 log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot.log protocols: pop3 pop3s imap imaps listen(default): 123.456.789.71 listen(imap): 123.456.789.71 listen(pop3): 123.456.789.72 ssl_listen(default): ssl_listen(imap): ssl_listen(pop3): 123.456.789.72:995 ssl_ca_file: /etc/pki/dovecot/certs/pop_core_uk/trustcenter_intermediate.crt ssl_cert_file: /etc/pki/dovecot/certs/pop_core_uk/server.crt ssl_key_file: /etc/pki/dovecot/private/pop_core_uk/server.key login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_location: maildir:/home/vmail/%Lu/Maildir/ mail_debug: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh lda: debug: yes postmaster_address: postmster(a)core.uk hostname: smtp.core.uk mail_plugins: quota quota_full_tempfail: yes log_path: /var/log/dovecot-deliver.log log_timestamp: %b %d %H:%M:%S rejection_reason: Ihre Nachricht an <%t> wurde automatisiert abgewiesen:%n%r auth default: mechanisms: plain login username_translation: @_._ verbose: yes debug: yes debug_passwords: yes passdb: driver: ldap args: /etc/dovecot-ldap.conf userdb: driver: static args: uid=500 gid=500 home=/home/vmail/%Lu allow_all_users=yes userdb: driver: ldap args: /etc/dovecot-ldap-userdb.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: postfix plugin: quota: maildir:User quota quota_rule: *:storage=8M quota_warning: storage=90%% /usr/local/bin/quota-warning.sh 90 quota_warning2: storage=75%% /usr/local/bin/quota-warning.sh 75 ------------------------------------------------------------------ dovecot-ldap.conf hosts = 123.456.789.123 123.456.789.124 base = OU=one,OU=two,OU=London,OU=GB,OU=User Accounts,DC=three,DC=core,DC=uk ldap_version = 3 auth_bind = yes auth_bind_userdn = %u(a)three.core.uk user_filter = (&(objectClass=person)(cn=%u)) user_attrs = description=quota_rule=*:storage=%$M ------------------------------------------------------------------ dovecot-ldap-userdb.conf is a symbolic link on dovecot-ldap.conf _____________________________________________________________ Get your FREE TheDoghouseMail email address at http://www.thedoghousemail.com

2 1