- dovecot - dovecot.org

[Dovecot] LDA dovecot with Postfix not workin :-(
by Thorsten Reiser 20 Feb '09

20 Feb '09

Hi, tried to use postfix with virtual users and dovecot imaps/imap pop3/pop3s workin fine lokal smtp too, but a remote host is not able to send mail Debian Etch uname -a Linux mail 2.6.18-6-xen-amd64 #virtual user vmail:x:5000:8::/home/vmail:/bin/sh #master.cf added dovecot unix - n n - - pipe flags=DRhu user=vmail:mail argv=/usr/lib/dovecot/deliver -d ${recipient} #/var/log/mail.info Feb 19 12:37:51 mail postfix/master[6082]: daemon started -- version 2.3.8, configuration /etc/postfix Feb 19 12:37:58 mail postfix/smtpd[6106]: connect from XXX [XXX] Feb 19 12:37:58 mail postfix/smtpd[6106]: 9D150107C3C4: client=XXX [XXX], sasl_method=LOGIN, sasl_username=username(a)email.com thats all ...... here are my logs telnet localhost 25 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. 220 localhost ESMTP Postfix (Debian/GNU) ehlo localhost.com 250-localhost 250-PIPELINING 250-SIZE 10240000 250-VRFY 250-ETRN 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 DSN AUTH PLAIN aW5mb0BseC1ob3N0aW5nLmRlAGluZm9AbHgtaG9zdGluZy5kZQB0ZXN0 235 2.0.0 Authentication successful #master.cf added dovecot unix - n n - - pipe flags=DRhu user=vmail:mail argv=/usr/lib/dovecot/deliver -d ${recipient} #postconf -n alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no broken_sasl_auth_clients = yes config_directory = /etc/postfix debug_peer_level = 10 debug_peer_list = 127.0.0.1 inet_interfaces = all mailbox_size_limit = 0 mydestination = mail.server.de, mail, localhost.localdomain, localhost myhostname = localhost mynetworks = 127.0.0.0/8 myorigin = /etc/mailname recipient_delimiter = + smtp_tls_note_starttls_offer = yes smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache smtp_use_tls = yes smtpd_banner = Mail ESMTP smtpd_helo_required = no smtpd_helo_restrictions = permit_mynetworks, reject_invalid_hostname, permit smtpd_recipient_restrictions = reject_unauth_pipelining, permit_sasl_authenticated, permit_mynetworks, reject_non_fqdn_recipient, reject_unknown_recipient_domain, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot smtpd_sender_restrictions = permit_sasl_authenticated, reject_non_fqdn_sender, reject_unknown_sender_domain smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem smtpd_tls_auth_only = no smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key smtpd_tls_loglevel = 1 smtpd_tls_received_header = yes smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache smtpd_tls_session_cache_timeout = 3600s smtpd_use_tls = yes tls_random_source = dev:/dev/urandom unknown_local_recipient_reject_code = 550 virtual_gid_maps = static:8 virtual_mailbox_base = /home/vmail virtual_mailbox_domains = /etc/postfix/vhosts.txt virtual_mailbox_maps = hash:/etc/postfix/vmailbox virtual_minimum_uid = 100 virtual_transport = dovecot virtual_uid_maps = static:5000 #dovecot -n # /etc/dovecot/dovecot.conf log_path: /var/log/dovecot.info info_log_path: /var/log/dovecot.info log_timestamp: %d-%m-%Y %H:%M:%S protocols: imap pop3 imaps pop3s listen(default): *:10143 listen(imap): *:10143 listen(pop3): * disable_plaintext_auth: no verbose_ssl: yes login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_greeting: Mail POP3/IMAP verbose_proctitle: yes first_valid_uid: 5000 last_valid_uid: 5000 first_valid_gid: 8 last_valid_gid: 8 mail_privileged_group: mail mail_location: maildir:/home/vmail/%d/%n mail_debug: yes mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 imap_client_workarounds(default): delay-newmail netscape-eoh outlook-idle imap_client_workarounds(imap): delay-newmail netscape-eoh outlook-idle imap_client_workarounds(pop3): outlook-idle pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd-file args: /etc/dovecot/userdb userdb: driver: passwd-file args: /etc/dovecot/userdb socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 438 user: vmail group: mail

2 2

[Dovecot] v1.2 can't set ACL to empty string
by Sascha Wilde 20 Feb '09

20 Feb '09

Hi *, according to RfC4314 the rights argument to the setacl command might be an empty string ("zero right characters"): The third argument is a string containing an optional plus ("+") or minus ("-") prefix, followed by zero or more rights characters. existing clients (horde in particular) actually use this to remove all rights from an user. Currently dovecot 1.2 does not accept an empty rights string as argument to setacl. Bernhard Herzog will look into this. cheers sascha -- Sascha Wilde OpenPGP key: 4BB86568 http://www.intevation.de/~wilde/ http://www.intevation.de/ Intevation GmbH, Neuer Graben 17, 49074 Osnabrück; AG Osnabrück, HR B 18998 Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

3 2

[Dovecot] over quota + antispam crash
by Stéphane Cottin 20 Feb '09

20 Feb '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I am using dovecot 1.1.11 , quota, imap_quota & antispam plugins. Dovecot crashes when saving a message to the Sent maildir and the account is over quota. gdb trace attached. Stéphane Cottin -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkmcQ1IACgkQNgQUYqHIqqsHYgCfdhLHt1KRQeoEOC5ddgFbD2mh 8UMAoIgXbD3ACqcKcftxUHeoPsgByp83 =V6Ch -----END PGP SIGNATURE----- GNU gdb 6.4.90-debian Copyright (C) 2006 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "x86_64-linux-gnu"...Using host libthread_db library "/lib/libthread_db.so.1". Attaching to program: /usr/lib/dovecot/imap, process 8619 Reading symbols from /lib/libdl.so.2...done. Loaded symbols for /lib/libdl.so.2 Reading symbols from /lib/libc.so.6...done. Loaded symbols for /lib/libc.so.6 Reading symbols from /lib/ld-linux-x86-64.so.2...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Reading symbols from /usr/lib/dovecot/modules/imap/lib10_quota_plugin.so...done. Loaded symbols for /usr/lib/dovecot/modules/imap/lib10_quota_plugin.so Reading symbols from /usr/lib/dovecot/modules/imap/lib11_imap_quota_plugin.so...done. Loaded symbols for /usr/lib/dovecot/modules/imap/lib11_imap_quota_plugin.so Reading symbols from /usr/lib/dovecot/modules/imap/lib90_antispam_plugin.so...done. Loaded symbols for /usr/lib/dovecot/modules/imap/lib90_antispam_plugin.so 0x00002af01c9af9ac in epoll_wait () from /lib/libc.so.6 (gdb) Signal Stop Print Pass to program Description SIGPIPE No Yes Yes Broken pipe (gdb) Signal Stop Print Pass to program Description SIGALRM No No Yes Alarm clock (gdb) Signal Stop Print Pass to program Description SIG32 No Yes Yes Real-time event 32 (gdb) Continuing. Program received signal SIGSEGV, Segmentation fault. 0x00002af01cd36a63 in antispam_save_init (t=0x5fe0c0, flags=MAIL_SEEN, keywords=0x0, received_date=-1, timezone_offset=0, from_envelope=0x0, input=0x601390, dest_mail=0x6014f8, ctx_r=0x5d92f0) at antispam-storage-1.1.c:170 170 (*ctx_r)->dest_mail = dest_mail; (gdb) #0 0x00002af01cd36a63 in antispam_save_init (t=0x5fe0c0, flags=MAIL_SEEN, keywords=0x0, received_date=-1, timezone_offset=0, from_envelope=0x0, input=0x601390, dest_mail=0x6014f8, ctx_r=0x5d92f0) at antispam-storage-1.1.c:170 ast = (struct antispam_internal_context *) 0x5fea60 asbox = (struct antispam_mailbox *) 0x5dff20 ret = -1 #1 0x0000000000457ce5 in mailbox_save_init (t=0x605cfa, flags=481489778, keywords=0x0, received_date=0, timezone_offset=1818845549, from_envelope=0x7265737520726f66 <Address 0x7265737520726f66 out of bounds>, input=0x601390, dest_mail=0x0, ctx_r=0x5d92f0) at mail-storage.c:728 No locals. #2 0x0000000000416289 in cmd_append_continue_parsing (cmd=0x5d9238) at cmd-append.c:330 uid2 = <value optimized out> msg = <value optimized out> sync_flags = <value optimized out> imap_flags = <value optimized out> uid_validity = <value optimized out> uid1 = <value optimized out> client = (struct client *) 0x5d8ec0 ctx = (struct cmd_append_context *) 0x5d92b0 args = (const struct imap_arg *) 0x5febb0 flags_list = <value optimized out> flags = MAIL_SEEN keywords_list = (const char * const *) 0x0 keywords = (struct mail_keywords *) 0x0 internal_date_str = 0x0 internal_date = -1 ret = <value optimized out> timezone_offset = 0 nonsync = true __PRETTY_FUNCTION__ = "cmd_append_continue_parsing" #3 0x0000000000416492 in cmd_append (cmd=0x5d9238) at cmd-append.c:502 storage = (struct mail_storage *) 0x5d87e8 box = <value optimized out> client = (struct client *) 0x5d8ec0 ctx = (struct cmd_append_context *) 0x5d92b0 mailbox = 0x5dd410 "Sent" #4 0x000000000041b45c in client_command_input (cmd=0x5d9238) at client.c:580 client = (struct client *) 0x5d8ec0 command = <value optimized out> __PRETTY_FUNCTION__ = "client_command_input" #5 0x000000000041b512 in client_command_input (cmd=0x5d9238) at client.c:629 client = (struct client *) 0x5d8ec0 command = (struct command *) 0x0 __PRETTY_FUNCTION__ = "client_command_input" #6 0x000000000041bccf in client_handle_input (client=0x5d8ec0) at client.c:670 _data_stack_cur_id = 3 ret = <value optimized out> remove_io = <value optimized out> handled_commands = false #7 0x000000000041bef3 in client_input (client=0x5d8ec0) at client.c:725 cmd = <value optimized out> output = (struct ostream *) 0x5d9158 bytes = 488 __PRETTY_FUNCTION__ = "client_input" #8 0x000000000048ce48 in io_loop_handler_run (ioloop=<value optimized out>) at ioloop-epoll.c:203 ctx = <value optimized out> event = (const struct epoll_event *) 0x5d4fa0 list = (struct io_list *) 0x5d7c80 io = (struct io_file *) 0x5d7c40 tv = {tv_sec = 1799, tv_usec = 900117} events_count = <value optimized out> t_id = 2 msecs = <value optimized out> ret = 1 i = 0 call = <value optimized out> #9 0x000000000048bd1d in io_loop_run (ioloop=0x5d4d40) at ioloop.c:336 No locals. #10 0x0000000000423441 in main (argc=<value optimized out>, argv=0x0, envp=0x7fff8e3dbb58) at main.c:293 No locals. (gdb) Detaching from program: /usr/lib/dovecot/imap, process 8619

3 4

[Dovecot] Autocreate plugin
by Harry Lachanas 20 Feb '09

20 Feb '09

I've tried to use the autocreate plugin in order to autosubscribe users to public namespaces. namespace public { prefix = Public2/ separator = / location = maildir:/var/Public2:INDEX=~/Maildir/p-idx:CONTROL=~/Maildir/p-crtl hidden=no subscriptions=no inbox = no list=no } with plugin { autocreate = Spam autosubscribe = Spam autosubscribe1 = Public2/News autosubscribe2 = Public2/Shorewall } the plugin works alright with the Spam maildir, but not with the namespaces. Is this possible ??? Thanks Harry.

1 1

[Dovecot] deliver: Panic: file sieve-cmu.c: line 90 (unfold_header): assertion failed: (str[i] == ' ' || str[i] == '\t')
by Anton Yuzhaninov 19 Feb '09

19 Feb '09

I use dovecot-1.1.10 and dovecot-sieve-1.1.6 /usr/local/libexec/dovecot/deliver coredups several times per day with bt like this: (gdb) bt #0 0x0000000800a3a91c in kill () at kill.S:2 #1 0x0000000800a3a88a in __raise (s=6) at /usr/src/lib/libc/gen/raise.c:46 #2 0x0000000800a38f83 in abort () at /usr/src/lib/libc/stdlib/abort.c:65 #3 0x00000000004a7de5 in default_fatal_finish (type=LOG_TYPE_PANIC, status=0) at failures.c:151 #4 0x00000000004a8777 in i_syslog_fatal_handler (type=Could not find the frame base for "i_syslog_fatal_handler". ) at failures.c:309 #5 0x00000000004a80ca in i_panic (format=Could not find the frame base for "i_panic". ) at failures.c:198 #6 0x0000000800e0b265 in unfold_header ( str=0x800c55a40 "\"firm ru\nÐ\217Ð\201Ð±ÐŒÂ¬Â® Ñ\236Ò\220Ð\216Â¬Â Ð±Ð²Ò\220Ð°Ð³\" <our_email@ example.ru>") at sieve-cmu.c:90 #7 0x0000000800e0b381 in unfold_multiline_headers (headers=0x800c55a30) at sieve-cmu.c:119 #8 0x0000000800e0b406 in getheader (v=0x7fffffffeab0, phead=0x800c5a160 "to", body=0x7fffffffc048) at sieve-cmu.c:132 #9 0x0000000800e1affc in eval_bc_test (interp=0x800c2d380, body_cache=0x0, m=0x7fffffffeab0, bc=0x800c5a000, ip=0x7fffffffc300) at bc_eval.c:541 #10 0x0000000800e1ac96 in eval_bc_test (interp=0x800c2d380, body_cache=0x0, m=0x7fffffffeab0, bc=0x800c5a000, ip=0x7fffffffd8e4) at bc_eval.c:445 #11 0x0000000800e1c131 in sieve_eval_bc (exe=0x800c240b0, is_incl=0, i=0x800c2d380, body_cache=0x0, sc=0x7fffffffeb60, m=0x7fffffffeab0, imapflags=0x7fffffffda20, actions=0x800c660f0, notify_list=0x800c13a40, errmsg=0x7fffffffda38) at bc_eval.c:1009 #12 0x0000000800e23ece in sieve_execute_bytecode (exe=0x800c240b0, interp=0x800c2d380, script_context=0x7fffffffeb60, message_context=0x7fffffffeab0) at script.c:868 #13 0x0000000800e0dee4 in cmu_sieve_run (namespaces=0x800c0b848, storage_r=0x7fffffffec98, mail=0x800c1d848, script_path=0x800c02d28 "/home/public/.dovecot.sieve", destaddr=0x7fffffffef3e "user_xxxxx", username=0x800c1ce35 "user_xxxxx", mailbox=0x4c581c "INBOX") at sieve-cmu.c:1038 #14 0x0000000800e0ae6d in cmusieve_deliver_mail (namespaces=0x800c0b848, storage_r=0x7fffffffec98, mail=0x800c1d848, destaddr=0x7fffffffef3e "user_xxxxx", mailbox=0x4c581c "INBOX") at cmusieve-plugin.c:81 #15 0x0000000000417d7f in main (argc=3, argv=0x7fffffffedc8) at deliver.c:1084 I log messages: deliver(user_xxxxx): Panic: file sieve-cmu.c: line 90 (unfold_header): assertion failed: (str[i] == ' ' || str[i] == '\t') -- Anton Yuzhaninov

2 2

[Dovecot] Effects of going read-only on dovecot & pop/imap clients
by Mark Zealey 19 Feb '09

19 Feb '09

Hi all, We need to set our filestore to read-only for quite a while, and I want to mitigate the effects for our clients. First issue; dovecot. If we just change the nfs mounts to read-only, dovecot complains: 2009-02-19T14:03:19+00:00 mail2 dovecot: pop3-login: Login: user=<test2(a)markandruth.co.uk>, method=PLAIN, rip=10.15.10.95, lip=10.15.10.102:11002 2009-02-19T14:03:19+00:00 mail2 dovecot: POP3(test2(a)markandruth.co.uk): open() failed with file /var/spool/mail/supplier_2/ma/rk/an/markandruth.co.uk/te/st/2_/test2/Mai ldir/dovecot.index.log: Read-only file system 2009-02-19T14:03:19+00:00 mail2 dovecot: POP3(test2(a)markandruth.co.uk): open(/var/spool/mail/supplier_2/ma/rk/an/markandruth.co.uk/te/st/2_/test 2/Maildir/dovecot-uidlist.lock) failed: Read-only file system 2009-02-19T14:03:19+00:00 mail2 dovecot: POP3(test2(a)markandruth.co.uk): file_dotlock_create(/var/spool/mail/supplier_2/ma/rk/an/markandruth.co.u k/te/st/2_/test2/Maildir/dovecot-uidlist) failed: Read-only file system 2009-02-19T14:03:19+00:00 mail2 dovecot: POP3(test2(a)markandruth.co.uk): Couldn't init INBOX: Internal error occurred. Refer to server log for more information. [2009-02-19 14:03:19] 2009-02-19T14:03:19+00:00 mail2 dovecot: POP3(test2(a)markandruth.co.uk): Mailbox init failed bytes=0/95, top=0/0, retr=0/0, del=0/0, size=0 Even when I use :INDEX=MEMORY, it's still complaining about creating .lock's or uidlist files and just issuing internal errors. Is there any way to make dovecot just do as much as it can under the circumstances ie allow read access to mails? Also, has anyone got experience of how clients handle mailboxes being read-only? My guess is that pop clients would probably break and download the same messages over and over? Thanks, Mark -- Mark Zealey -- Shared Hosting Team Leader Product Development * Webfusion 123-reg.co.uk, webfusion.co.uk, donhost.co.uk, supanames.co.uk This mail is subject to http://www.gxn.net/disclaimer

2 3

[Dovecot] UNSUBSCRIBE
by Eric B. Schorvitz, Ph.D. 19 Feb '09

19 Feb '09

2 1

[Dovecot] limiting authentication failures
by Eric B. Schorvitz, Ph.D. 19 Feb '09

19 Feb '09

In my log files I occasionally get a huge number of Dovecot authentication failures (see clip below). I wanted to know if there's a way to limit the number of times an IP address can attempt to authenticate, if there's a way to have a timeout between attempted authentications, or if there is a way to limit authentication attempts by a specific username within a certain period of time. My current solution is to permanently block the specific IP, an IP range, or an entire country from accessing my server AFTER I notice the huge number of authentication failures. This is too ad-hoc a process and was hoping dovecot has something more proactive built in. Thank you in advance for spending time considering this inquiry, Eric --------------------- pam_unix Begin ------------------------ dovecot: Authentication Failures: rhost=::ffff:200.111.39.219 : 764 Time(s) root: 25 Time(s) mysql: 6 Time(s) smmsp: 6 Time(s) --SNIP-- Unknown Entries: check pass; user unknown: 764 Time(s) ---------------------- pam_unix End ------------------------- --------------------- Connections (secure-log) Begin ------------------------ **Unmatched Entries** dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user info dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user info dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user info dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user info --SNIP--

2 1

[Dovecot] sieve filters
by Ian P. Christian 19 Feb '09

19 Feb '09

Hi all, I'm trying to figure out a way of filtering mail from a commercial anti-spam platform. Unfortunately you need to compare part of one header against part of another header. I figured I could solve this using sieve variables and pattern matching, however I'm having little luck and don't know how to debug sieve issues. # example headers: must compare 0.00799 against 1:0000 (the 2nd number in the 2nd header) # X-pstn-levels: (S: 0.00799/98.42547 CV:99.9000 FC:95.5390 LC:95.5390 R:95.9108 P:95.9108 M:97.0282 C:98.6951 ) # X-pstn-settings: 3 (1.0000:1.0000) s cv gt3 gt2 gt1 r p m c if header :matches "X-pstn-levels" "(S: */*" { set "score" "${1}"; if header :matches "X-pstn-settings" " ? (*:*) *" { fileinto "somewhere"; } } The first if appears to match, as if I move the fileinto up there it works - however it doesn't work as it shown here. Can anyone suggest why? Can I achieve what I'm trying to do with sieve? How can I go about debugging scripts? Thanks, Ian

2 2

[Dovecot] kerberos trying to obtain credentials for wrong machine
by Nikolay Shopik 19 Feb '09

19 Feb '09

Hi, I'm currently trying to configure Dovecot to use kerberos. My KDC is Windows 2003 and I successful generated keytab file for Dovecot machine. Problem is when I'm trying to use GSSAPI it told me Obtaining credentials for imap@debian5 - and of course this fails because debian5 isn't KDC, it should look for imap/debian5.inblock.local(a)INBLOCK.LOCAL. What I'm missing?

2 1