- dovecot - dovecot.org

[Dovecot] can't deliver with Kerberos username
by Nikolay Shopik 16 Aug '09

16 Aug '09

I've been trying to use Kerberos and PLAIN text file for authentication. I've setup deliver in postfix master.cf and make sure correct username are expanded but deliver is always told me "user unknown". I can logon into mailbox using Kerberos w/o problems and can send emails. Looks like Dovecot lookup up passwd files and not finding users which are in Kerberos realm. # 1.0.15: /etc/dovecot/dovecot.conf log_path: /var/log/dovecot.log protocols: imap ssl_cert_file: /etc/postfix/new_chained.crt ssl_key_file: /etc/postfix/mail.pem login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login login_greeting_capability: yes mail_location: maildir:/var/mail/store/%u dotlock_use_excl: yes maildir_copy_with_hardlinks: yes auth default: mechanisms: PLAIN CRAM-MD5 GSSAPI passdb: driver: passwd-file args: /etc/dovecot/passwd userdb: driver: static args: uid=vmail gid=vmail home=/var/mail/store/%u socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 438 user: root group: root plugin: sieve: /var/mail/store/%u/sieve

3 7

[Dovecot] Listing shared mailboxes with a domainpart
by Mathias Tausig 15 Aug '09

15 Aug '09

Hy! I am currently configuring a new mailserver using postfix and dovecot 1.2.1. The filesystem strucutre in my spool directory is user1/ user2/ domain/info/ domain/office/ user1 and unser2 are ordinary users mailboxes, the latter two contain the virtual mailboxes for info@domain and office@domain as created by postfix. I want these virtual mailboxes (all of them are in maildir format) to be shared to certain real users. I configured a shared namespace: namespace shared { separator = / prefix = shared/%%d/%%n/ location = maildir:/var/spool/vmaildir/%%d/%%n/ #I tried ths as well # prefix = shared/%%u/ # location = maildir:/var/spool/vmaildir/%%u/ hidden = no subscriptions = no list = yes inbox = no } Then I configured a dictionary to list the folders, as described in the wiki: plugin { acl_shared_dict = proxy::acl } dict { acl = mysql:/etc/dovecot/dovecot-dict-sql.conf } where /etc/dovecot/dovecot-dict-sql.conf holds map { pattern = shared/shared-boxes/user/$to/$from table = virtual_user_shares value_field = dummy fields { from_user = $from to_user = $to } } The database table consists of +-------------+------------+-------+ | from_user | to_user | dummy | +-------------+------------+-------+ | info@domain | user1 | 1 | +-------------+------------+-------+ But when I login as user1 I can neither see nor subscribe to the info@domain mailbox. In the "flat" case (sharing the user2 mailbox to user1), this setup works. I am pretty clueless how to go on. cheers Mathias

2 3

[Dovecot] Operation not permitted
by André Labuschagné 15 Aug '09

15 Aug '09

Hi all, Slowly but surely moving forward, I hope... I get the following error (in the maillog file) after I've installed Managesieve: *Aug 13 10:13:52 li73-31 dovecot: deliver(andre at paranoidandroid.co.za): Fatal: setgid(501(paranoidandroid)) failed with euid=104(vmail), gid=106(vmail), egid=106(vmail): Operation not permitted* /Does anybody know what this means and how to fix it?/ Don't know if it has anything to do with sieve (I've changed the /usr/etc/dovecot.conf file from mail_plugins = cmusieve to mail_plugins = sieve) My config is below: dovecot config: ---------------------- # 1.2.1: /usr/etc/dovecot.conf # OS: Linux 2.6.18.8-x86_64-linode1 x86_64 CentOS release 5.3 (Final) protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/pki/paranoidandroidCA/server.crt ssl_key_file: /etc/pki/paranoidandroidCA/server.key login_dir: /usr/var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 auth default: mechanisms: plain login cram-md5 ntlm passdb: driver: sql args: /etc/dovecot/dovecot_sql_passdb.conf userdb: driver: sql args: /etc/dovecot/dovecot_sql_userdb.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /usr/var/run/dovecot/auth-master mode: 384 user: vmail postfix config: -------------------- alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix data_directory = /var/lib/postfix debug_peer_level = 2 header_checks = regexp:/etc/postfix/header_checks html_directory = no inet_interfaces = all local_recipient_maps = $alias_maps $virtual_mailbox_maps unix:passwd.byname mail_owner = postfix mailq_path = /usr/bin/mailq manpage_directory = /usr/local/man mydestination = localhost mydomain = paranoidandroid.co.za myhostname = mail.paranoidandroid.co.za mynetworks_style = host myorigin = $myhostname newaliases_path = /usr/bin/newaliases queue_directory = /var/spool/postfix readme_directory = no sample_directory = /etc/postfix sendmail_path = /usr/sbin/sendmail setgid_group = postdrop smtpd_recipient_limit = 500 smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot unknown_local_recipient_reject_code = 550 virtual_alias_maps = proxy:mysql:/etc/postfix/sql/mysql_virtual_alias_maps.cf virtual_mailbox_base = / virtual_mailbox_domains = proxy:mysql:/etc/postfix/sql/mysql_virtual_domains_maps.cf virtual_mailbox_maps = proxy:mysql:/etc/postfix/sql/mysql_virtual_mailbox_maps.cf virtual_transport = dovecot master.cf: ------------- pickup fifo n - n 60 1 pickup cleanup unix n - n - 0 cleanup qmgr fifo n - n 300 1 qmgr #qmgr fifo n - n 300 1 oqmgr tlsmgr unix - - n 1000? 1 tlsmgr rewrite unix - - n - - trivial-rewrite bounce unix - - n - 0 bounce defer unix - - n - 0 bounce trace unix - - n - 0 bounce verify unix - - n - 1 verify flush unix n - n 1000? 0 flush proxymap unix - - n - - proxymap proxywrite unix - - n - 1 proxymap smtp unix - - n - - smtp relay unix - - n - - smtp -o smtp_fallback_relay= showq unix n - n - - showq error unix - - n - - error retry unix - - n - - error discard unix - - n - - discard local unix - n n - - local virtual unix - n n - - virtual lmtp unix - - n - - lmtp anvil unix - - n - 1 anvil scache unix - - n - 1 scache dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -d ${recipient}

2 3

[Dovecot] Released Sieve v0.1.10 for Dovecot v1.2.2
by Stephan Bosch 15 Aug '09

15 Aug '09

Hello Dovecot users, In the last week two nasty bugs were found in the new Sieve implementation. Primarily, the include extension did not work when a compiled binary was loaded from disk. This is something that is still not tested by the test suite, giving this bug the opportunity to slip through. Also, the value matching implementation would sometimes cause a assertion failure. Other than that, various small bugs were fixed. On the more positive side, I have implemented support for the new mailbox extension (RFC 5490), which provides the means to test whether a mailbox exists. Also, it adds the :create argument to the fileinto command, which makes sure that the target folder is created before saving is attempted. Of course, this is only useful when deliver is used with the -n option. There wasn't a great need for this extension, but I could use it in the test suite and it was almost trivial to implement. In other news, I have further developed the sieve-filter command line tool. It is getting closer to a usable state, being able to filter a large number of messages in an existing mailbox, but its use is currently still very much discouraged as it tends to be very good at eating mailboxes when the user is less attentive. It needs more command line configuration options, a simulation mode to perform a dry run, and a man page that describes its use and its dangers. Changelog for Sieve v0.1.10: * Changed action execution of fileinto and keep. These changes depend on API additions in Dovecot, making this release depend on Dovecot v1.2.2 or newer. * Further developed the sieve-filter command line tool. This required a few changes to the action execution of the Sieve engine. The tool was successfully tested on folders with a few 100k spam messages. However, the commandline options are still incomplete, a man page is missing and it needs much more testing before I can recommend anyone to use this tool. + Added support for the mailbox extension. This allows checking whether a mailbox exists using the mailboxexists command and it adds the :create argument to the fileinto command to create the mailbox when it is missing. The :create feature is useless unless the Deliver LDA is run with the -n option. + Improved the testsuite with tests for message delivery. Messages stored using keep and fileinto can be fed back into the Sieve engine for verification. This includes testing of applied IMAP flags. + Updated the man pages with the new method of specifying the supported extensions using + and - (for the -x parameter of the sieve tools) + Further developed the deprecated notify extension. A dummy for the denotify command exists, meaning that its use does not cause an error anymore. - Fixed a bug in the derivation of the binary path from the script path. A bare filename would yield a path relative to root. - Fixed a bug in the value matching code. The context data now uses a proper pool in stead of the data stack. Bug reported by Jan Sechser. - Fixed assertion fail in the include extension caused by missing initialization upon binary load. This bug surfaces only for stored binaries. Bug reported by Tom Hendrikx. - Fixed include error message for failed :global include. It mentioned the wrong config parameter. - Fixed broken wiki reference in an error message of the plugin about the 'sieve' setting. - Fixed behavior of fileinto when delivering into a namespace prefix. Previous fix used the wrong storage. The release is available as follows: http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-sieve-0.1.10.tar.gz http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-sieve-0.1.10.tar.gz.sig Have fun testing the new releases and don't hesitate to notify me when there are problems. Please include your configuration, the involved Sieve scripts and an example message in any bug or problem report when possible, so that I can easily reproduce the issue. Regards, -- Stephan Bosch stephan(a)rename-it.nl

3 8

Re: [Dovecot] Redirecting mail gives 'mail forwarding loop' to the sender - calling for sieve help
by Andrés Yacopino 15 Aug '09

15 Aug '09

Yes, the configuration seems odd or interesting as you said. The idea behind this is: - Before scripts will be use for filtering spam, when they have SPAM header. Not problem at it. - User scripts will be used for vacation messages. These are created with Squirrelmail and avelsize plugin (user interaction) - After scripts will be used for doing redirections, such as forwarding mail to a blackberry account(not problem at it) or forwarding to another user account (in the same domain, the problem is here). The reason not to put the redirections or forwarding in users scripts is to avoid users deleting redirections and have in one file all the redirections. I also try to use redirections from avelsieve plugin (0.9.9.9) and it works the forwarding but it didn't work the keep command, the mail is forwarded but the user doesn't have a copy of it. I will investigate your advice for envelope or try to use user's scripts. I didn't know about original headers, if this in RFC sieve documents? Thanks Timo and thanks Stephan for the tips. Greetings, Andrés. Andrés Yacopino. Dpto Sistemas AcaSalud

1 0

[Dovecot] SIS Implementation
by Daniel L. Miller 14 Aug '09

14 Aug '09

What would be involved in implementing SIS within Dovecot? A new or modified mailbox format? -- Daniel

6 16

[Dovecot] listescape + shared folders with fully qualified user names
by Markus Petri 14 Aug '09

14 Aug '09

Hi, the listescape plugin seems to take its job a little bit too serious. Dovecot version: 1.2.3 + patch 9b62aa2132de Without listescape: 2 list "" "*" * LIST (\HasNoChildren) "/" "INBOX" * LIST (\Noselect \HasChildren) "/" "#Users/test1(a)merry.dovecot" * LIST (\HasNoChildren) "/" "#Users/test1(a)merry.dovecot/Shared" 2 OK List completed. With listescape: It escapes the dot in the domain part of the user. 2 list "" "*" * LIST (\HasNoChildren) "/" "INBOX" * LIST (\Noselect \HasChildren) "/" "#Users/test1(a)merry.dovecot" * LIST (\HasNoChildren) "/" "#Users/test1@merry/dovecot/Shared" 2 OK List completed. Regards, Markus

2 8

[Dovecot] Redirecting mail gives 'mail forwarding loop' to the sender - calling for sieve help
by Andrés Yacopino 14 Aug '09

14 Aug '09

Greetings, i am testing: - dovecot-1.2-sieve-0.1.11 - dovecot 1.2.3 - dovecot-1.2-managesieve-0.11.8 (with patch) I am trying to use sieve_after to execute some redirection of mails. I have put in the after script: require "include"; require "fileinto"; if header :contains ["To","Cc"] "userA(a)acasalud.com.ar" { keep; redirect "userB(a)acasalud.com.ar"; } The redirection works but the sender user (userA) get the following error: This is the mail system at host acamail.acasalud.com.ar. I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's attached below. The mail system <userB(a)acasalud.com.ar <http://10.11.0.21/webmail/src/compose.php?send_to=ayacopino%40acasalud.com.…>>: mail forwarding loop for userB(a)acasalud.com.ar <http://10.11.0.21/webmail/src/compose.php?send_to=ayacopino%40acasalud.com.…> Could somebody can help me. Thanks, -- Andrés Fernando Yacopino

5 9

[Dovecot] dovecot 1.0.7: how to create translated imap folders?
by zbiggy 14 Aug '09

14 Aug '09

Hello, I would like to have Polish imap folders' names in dovecot instead of English. How I can do this with dovecot? Change table of folders: INBOX -> Otrzymane Sent -> Wyslane Drafts -> Robocze Trash -> Kosz Then I would like to display them using SquirrelMail. My configuration: mail_location = maildir:/var/spool/mail/users/%u:INDEX=/var/spool/mail/indexes/%u:INBOX=/var/spool/mail/postfix/%u have a nice day, Zbigniew

3 2

[Dovecot] Very long establishment time for secondary connections
by Jeff Mitchell 14 Aug '09

14 Aug '09

Hello, I'm currently on Dovecot 1.1.17 and I have a user that runs into a problem quite a lot. She's using Thunderbird on a Mac. When she sends mail, Thunderbird is set up to save sent mail to her Sent folder. Often (usually when she has not sent another mail for a long while) when she sends mail, Thunderbird sits there saying "Copying message to Sent folder" for about thirty seconds. My best guess, after looking at dovecot messages in syslog related to her login, is that Thunderbird is using a secondary imap process to do this copying and this connection times out due to inactivity, so that when she sends mail it has to reestablish itself. For some reason this reestablishment seems to take a very long time, even though her initial login/connection when she opens Thunderbird is very fast. I looked for a way to increase the inactivity time in dovecot.conf but didn't see one. I don't know of any other user that has this problem, which makes me suspicious of her client rather than Dovecot. Pretty much everyone is using Thunderbird, although she's the only one using it on a Mac. Is it possible/likely that it takes so long because for some reason Thunderbird on a Mac doesn't notice that the second connection has died and is taking a long time trying to use the first invalid connection before reestablishment? Or is it likely that this is a Dovecot problem and I simply haven't figured out what's going on, yet? All help very much appreciated. Thanks, Jeff

2 1