- dovecot - dovecot.org

Help to setup a Unix socket based authentication server for dovecot in Python
by Sherin A 15 Aug '21

15 Aug '21

Hi, I am building a custom server platform in which dovecot is used for imap/pop . But the default authentication mechanism is not suitable for me becuase each domain will have different system users and different location for mail storage . So I need to create a custom authentication mechanism using python . There is an option to use Key-value authentication (dict) database via socket as per https://doc.dovecot.org/configuration_manual/authentication/dict/#complete-… The above documentation link have a sample perl script too to send authentication to uri = proxy:/var/run/auth_proxy_dovecot/socket:somewhere So my question is how the inputs are send to the socket file ? in which format ? How the result return ? and in which format ? Let us say I can create a python socket program that can listen to /var/run/auth_proxy_dovecot/socket for getting the inputs from dovecot , but what is the format Is it like the following AUTH PLAIN USER test(a)myemail.com PASS mypassword I looked into the documentation and developer documentation, I am unable to see how dovecot send the data , I can see a sample perl for answering dict lookups. Any one have a python alternative for it. ? -- *Sherin Abdulkhareem* Chairman & Managing Director email Email sherin(a)sherin.in <mailto:sherin@sherin.in> mobile Mobile (+91)9496533234 office Office (+91)4716007799 *Syslint Technologies India Private Limited* First Floor,Asiatic Business Center Kazhakkootam, Trivandrum PIN-695582 India Facebook <https://facebook.com/sherin.co.in> LinkedIn <https://linkedin.com/in/sherina> Google+ <https://plus.google.com/+sherinAbdulkhareem> sherin.in <http://sherin.in>

2 1

Sieve Rule help
by Jorge Bastos 15 Aug '21

15 Aug '21

Howdy, I have an user with the rule below. Since it's discarding the match first, should it be stop there and don't redirect it to the next rule? Thanks in advanced, ### require ["date","relational","vacation"]; # rule:[xxx] if header :contains "from" "icnf.pt" { discard; } # rule:[redir] if true { redirect "jorge(a)myemail.pt"; stop; } ###

2 3

Undefined symbols (macOS Big Sur Intel) during compiling
by Beosdoc 13 Aug '21

13 Aug '21

Hi, I’m trying to compile Dovecot 2.3.15 on a Intel Mac with Big Sur and Xcode 12.5.1 with command line. I’ve compiled openSSL -1.1.1k in its own directory and pointed dovecot to use that directory. I’m getting undefined symbols during the linking (see below). I’ve been trying to figure out what’s missing but not having any luck Here’s the configure: CPPFLAGS="-I/Library/MWSrvrSrvcs/openssl/include" LDFLAGS="-L/Library/MWSrvrSrvcs/openssl/lib" ./configure --prefix=/Library/MWSrvrSrvcs/dovecot --with-ssl=openssl --with-gnu-ld --with-pgsql=auto --with-mysql=auto --with-sqlite=auto --with-gssapi=yes --with-ldap=auto --with-solr=no --with-libwrap=auto --with-ioloop=no --with-bzlib --with-zlib --with-notify=no --without-shared-libs --sysconfdir=/Library/MWSrvrSrvcs/Mail/Config --datadir=/Library/MWSrvrSrvcs/Mail/Data Here’s where it errors out: /bin/sh ../../libtool --tag=CC --mode=link gcc -std=gnu99 -g -O2 -fstack-protector-strong -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -Wno-duplicate-decl-specifier -Wstrict-aliasing=2 -module -avoid-version -L/Library/MWSrvrSrvcs/openssl/lib -o libssl_iostream_openssl.la -rpath /Library/MWSrvrSrvcs/dovecot/lib/dovecot dovecot-openssl-common.lo iostream-openssl.lo iostream-openssl-common.lo iostream-openssl-context.lo istream-openssl.lo ostream-openssl.lo -lssl -lcrypto libtool: link: gcc -o .libs/libssl_iostream_openssl.so -bundle .libs/dovecot-openssl-common.o .libs/iostream-openssl.o .libs/iostream-openssl-common.o .libs/iostream-openssl-context.o .libs/istream-openssl.o .libs/ostream-openssl.o -L/Library/MWSrvrSrvcs/openssl/lib -lssl -lcrypto -g -O2 -fstack-protector-strong Undefined symbols for architecture x86_64: "_buffer_append", referenced from: _openssl_iostream_error in iostream-openssl-common.o _o_stream_ssl_sendv in ostream-openssl.o "_buffer_create_dynamic", referenced from: _o_stream_ssl_sendv in ostream-openssl.o "_buffer_delete", referenced from: _o_stream_ssl_flush_buffer in ostream-openssl.o "_buffer_free", referenced from: _o_stream_ssl_destroy in ostream-openssl.o "_buffer_get_writable_size", referenced from: _o_stream_ssl_sendv in ostream-openssl.o _o_stream_ssl_get_buffer_avail_size in ostream-openssl.o "_default_pool", referenced from: _openssl_iostream_set_error in iostream-openssl.o _openssl_iostream_bio_sync in iostream-openssl.o _openssl_iostream_handle_error in iostream-openssl.o _openssl_iostream_create in iostream-openssl.o _openssl_iostream_handshake in iostream-openssl.o _openssl_iostream_set_log_prefix in iostream-openssl.o _openssl_iostream_free in iostream-openssl.o ... "_i_debug", referenced from: _openssl_iostream_set_error in iostream-openssl.o _openssl_iostream_handle_error in iostream-openssl.o _openssl_iostream_handshake in iostream-openssl.o _openssl_info_callback in iostream-openssl.o _openssl_iostream_verify_client_cert in iostream-openssl.o _ssl_iostream_context_init_common in iostream-openssl-context.o _ssl_servername_callback in iostream-openssl-context.o ... "_i_error", referenced from: _openssl_iostream_bio_sync in iostream-openssl.o _ssl_tmp_dh_callback in iostream-openssl-context.o "_i_fatal", referenced from: _ssl_iostream_openssl_init in iostream-openssl.o _ssl_iostream_context_init_common in iostream-openssl-context.o _ssl_ctx_use_certificate_chain in iostream-openssl-context.o "_i_fatal_status", referenced from: _dovecot_openssl_malloc in dovecot-openssl-common.o _dovecot_openssl_realloc in dovecot-openssl-common.o _openssl_iostream_error in iostream-openssl-common.o "_i_info", referenced from: _openssl_iostream_verify_client_cert in iostream-openssl.o "_i_panic", referenced from: _dovecot_openssl_common_global_unref in dovecot-openssl-common.o _openssl_iostream_shutdown in iostream-openssl.o _openssl_iostream_bio_sync in iostream-openssl.o _openssl_iostream_handle_error in iostream-openssl.o _openssl_iostream_create in iostream-openssl.o _openssl_iostream_unref in iostream-openssl.o _openssl_iostream_handshake in iostream-openssl.o ... "_i_strdup", referenced from: _openssl_iostream_set_error in iostream-openssl.o _openssl_iostream_bio_sync in iostream-openssl.o _openssl_iostream_handle_error in iostream-openssl.o _openssl_iostream_create in iostream-openssl.o _openssl_iostream_handshake in iostream-openssl.o _openssl_iostream_set_log_prefix in iostream-openssl.o _openssl_iostream_verify_client_cert in iostream-openssl.o ... "_i_strdup_printf", referenced from: _openssl_iostream_create in iostream-openssl.o "_i_stream_alloc", referenced from: _i_stream_ssl_read in istream-openssl.o "_i_stream_close", referenced from: _openssl_iostream_shutdown in iostream-openssl.o _openssl_iostream_handshake in iostream-openssl.o _i_stream_ssl_close in istream-openssl.o "_i_stream_create", referenced from: _openssl_i_stream_create_ssl in istream-openssl.o (maybe you meant: _openssl_i_stream_create_ssl) "_i_stream_free_buffer", referenced from: _i_stream_ssl_destroy in istream-openssl.o "_i_stream_get_data", referenced from: _openssl_iostream_bio_sync in iostream-openssl.o "_i_stream_get_data_size", referenced from: _openssl_iostream_bio_sync in iostream-openssl.o _i_stream_ssl_read in istream-openssl.o "_i_stream_get_error", referenced from: _openssl_iostream_bio_sync in iostream-openssl.o "_i_stream_get_fd", referenced from: _openssl_i_stream_create_ssl in istream-openssl.o "_i_stream_get_name", referenced from: _openssl_iostream_create in iostream-openssl.o "_i_stream_get_root_io", referenced from: _openssl_iostream_create in iostream-openssl.o "_i_stream_read_data", referenced from: _openssl_iostream_bio_sync in iostream-openssl.o "_i_stream_ref", referenced from: _openssl_o_stream_create_ssl in ostream-openssl.o "_i_stream_set_input_pending", referenced from: _openssl_iostream_bio_sync in iostream-openssl.o "_i_stream_set_name", referenced from: _openssl_iostream_create in iostream-openssl.o "_i_stream_skip", referenced from: _openssl_iostream_bio_sync in iostream-openssl.o "_i_stream_try_alloc", referenced from: _i_stream_ssl_read in istream-openssl.o "_i_stream_unref", referenced from: _openssl_iostream_free in iostream-openssl.o _o_stream_ssl_destroy in ostream-openssl.o "_i_strocpy", referenced from: _pem_password_callback in iostream-openssl-context.o "_io_stream_set_error", referenced from: _i_stream_ssl_read in istream-openssl.o _o_stream_ssl_flush in ostream-openssl.o _o_stream_ssl_flush_buffer in ostream-openssl.o "_iostream_ssl_module_init", referenced from: _ssl_iostream_openssl_init in iostream-openssl.o "_o_stream_close", referenced from: _openssl_iostream_shutdown in iostream-openssl.o _openssl_iostream_handshake in iostream-openssl.o _o_stream_ssl_close in ostream-openssl.o "_o_stream_cork", referenced from: _openssl_iostream_bio_sync in iostream-openssl.o "_o_stream_create", referenced from: _openssl_o_stream_create_ssl in ostream-openssl.o (maybe you meant: _openssl_o_stream_create_ssl) "_o_stream_flush", referenced from: _openssl_iostream_shutdown in iostream-openssl.o _openssl_iostream_handshake in iostream-openssl.o _plain_flush_callback in ostream-openssl.o "_o_stream_get_buffer_avail_size", referenced from: _openssl_iostream_bio_sync in iostream-openssl.o "_o_stream_get_buffer_used_size", referenced from: _o_stream_ssl_flush in ostream-openssl.o _o_stream_ssl_get_buffer_used_size in ostream-openssl.o "_o_stream_get_error", referenced from: _openssl_iostream_bio_sync in iostream-openssl.o "_o_stream_get_fd", referenced from: _openssl_o_stream_create_ssl in ostream-openssl.o "_o_stream_get_name", referenced from: _openssl_iostream_create in iostream-openssl.o "_o_stream_ref", referenced from: _plain_flush_callback in ostream-openssl.o "_o_stream_send", referenced from: _openssl_iostream_bio_sync in iostream-openssl.o "_o_stream_set_flush_callback", referenced from: _openssl_o_stream_create_ssl in ostream-openssl.o "_o_stream_set_flush_pending", referenced from: _openssl_iostream_bio_sync in iostream-openssl.o _o_stream_ssl_sendv in ostream-openssl.o _o_stream_ssl_flush in ostream-openssl.o _o_stream_ssl_flush_pending in ostream-openssl.o _plain_flush_callback in ostream-openssl.o "_o_stream_set_max_buffer_size", referenced from: _o_stream_ssl_set_max_buffer_size in ostream-openssl.o "_o_stream_set_name", referenced from: _openssl_iostream_create in iostream-openssl.o "_o_stream_set_no_error_handling", referenced from: _openssl_iostream_create in iostream-openssl.o "_o_stream_switch_ioloop_to", referenced from: _o_stream_ssl_switch_ioloop_to in ostream-openssl.o "_o_stream_uncork", referenced from: _openssl_iostream_bio_sync in iostream-openssl.o _openssl_iostream_create in iostream-openssl.o "_o_stream_unref", referenced from: _openssl_iostream_free in iostream-openssl.o _plain_flush_callback in ostream-openssl.o "_pool_alloconly_create", referenced from: _ssl_iostream_context_init_common in iostream-openssl-context.o "_safe_memset", referenced from: _openssl_iostream_load_key in iostream-openssl-context.o "_ssl_iostream_check_cert_validity", referenced from: _openssl_iostream_handshake in iostream-openssl.o "_ssl_iostream_context_ref", referenced from: _openssl_iostream_create in iostream-openssl.o _openssl_iostream_change_context in iostream-openssl.o "_ssl_iostream_context_unref", referenced from: _openssl_iostream_change_context in iostream-openssl.o _openssl_iostream_free in iostream-openssl.o _openssl_iostream_context_init_client in iostream-openssl-context.o _openssl_iostream_context_init_server in iostream-openssl-context.o "_ssl_iostream_handshake", referenced from: _openssl_iostream_shutdown in iostream-openssl.o _openssl_iostream_more in iostream-openssl.o "_ssl_iostream_has_valid_client_cert", referenced from: _openssl_iostream_cert_match_name in iostream-openssl.o _openssl_iostream_get_peer_name in iostream-openssl.o "_ssl_iostream_settings_init_from", referenced from: _ssl_iostream_context_init_common in iostream-openssl-context.o "_ssl_iostream_unref", referenced from: _openssl_iostream_destroy in iostream-openssl.o _i_stream_ssl_destroy in istream-openssl.o _o_stream_ssl_destroy in ostream-openssl.o "_str_c", referenced from: _openssl_iostream_error in iostream-openssl-common.o "_str_printfa", referenced from: _openssl_iostream_error in iostream-openssl-common.o "_t_malloc0", referenced from: _openssl_iostream_get_peer_name in iostream-openssl.o _openssl_iostream_error in iostream-openssl-common.o "_t_str_new", referenced from: _openssl_iostream_error in iostream-openssl-common.o "_t_strconcat", referenced from: _openssl_iostream_create in iostream-openssl.o "_t_strdup_noconst", referenced from: _openssl_iostream_use_certificate in iostream-openssl.o _openssl_iostream_load_key in iostream-openssl-context.o _ssl_iostream_context_init_common in iostream-openssl-context.o _ssl_ctx_use_certificate_chain in iostream-openssl-context.o "_t_strdup_printf", referenced from: _dovecot_openssl_common_global_set_engine in dovecot-openssl-common.o _openssl_iostream_handle_error in iostream-openssl.o _openssl_iostream_create in iostream-openssl.o _openssl_iostream_get_security_string in iostream-openssl.o _openssl_iostream_use_certificate in iostream-openssl.o _openssl_iostream_verify_client_cert in iostream-openssl.o _openssl_cert_match_name in iostream-openssl-common.o ... ld: symbol(s) not found for architecture arm64 clang: error: linker command failed with exit code 1 (use -v to see invocation) make[3]: *** [libssl_iostream_openssl.la] Error 1 make[2]: *** [all-recursive] Error 1 make[1]: *** [all-recursive] Error 1 make: *** [all] Error 2 Thanks Mitch

3 4

Preventing clients from trying to create folders under inbox
by Bryan K. Walton 13 Aug '21

13 Aug '21

Our Dovecot installation is configured as such: mail_location = mbox:/var/vmail/%u:DIRNAME=.mboxdata:INBOX=/var/vmail/%u/INBOX:INDEX=/var/vmail/indexes/%u This allows us to continue using mbox formatted files, storing those mbox data files in a file called .mboxdata. This allows our users to create folders and subfolders. The only exception to this is our inboxes, which are more traditional mbox files. However, we have some Outlook users that insist on trying to create subfolders of their inbox. This doesn't work, since the inbox is a file. But Outlook still does it and it causes sync issues, as there is now a subfolder under the user's inbox, but that subfolder is ONLY present in Outlook (it isn't present on the server). Is there anything that we can configure so that Dovecot instructs Outlook that it cannot attempt to create subfolders under the inbox, but allow subfolders elsewhere? Thanks! Bryan

2 1

Re: Help to setup a Unix socket based authentication server for dovecot in Python
by dovecot＠ptld.com 13 Aug '21

13 Aug '21

> So this is a single system user with single email, there are a > number of system users and email accounts, I don't need to use SQL or > LDAP or another password file. I can write python script to analyze > the logins and the mail folders including quota and send to socket file > , But how the formats as dict ? How the user input ( email/password > ) send to that unix socket ? I mean the format The documentation > doesn't say anything about it. https://doc.dovecot.org/configuration_manual/authentication/dict/ There is an example script done in perl at the bottom of the page. Maybe it can give you hints as to the format needed for a python script. On the same page it also says: When given a proxy URL the Dict backend speaks a simple protocol over a UNIX socket. The protocol is defined in src/lib-dict/dict-client.h https://github.com/dovecot/core/blob/master/src/lib-dict/dict-client.h

1 0

Help to setup a Unix socket based authentication server for dovecot in Python
by Sherin A 13 Aug '21

13 Aug '21

Hi, I am building a custom server platform in which dovecot is used for imap/pop . But the default authentication mechanism is not suitable for me becuase each domain will have different system users and different location for mail storage . So I need to create a custom authentication mechanism using python . There is an option to use Key-value authentication (dict) database via socket as per https://doc.dovecot.org/configuration_manual/authentication/dict/#complete-… The above documentation link have a sample perl script too to send authentication to uri = proxy:/var/run/auth_proxy_dovecot/socket:somewhere So my question is how the inputs are send to the socket file ? in which format ? How the result return ? and in which format ? Let us say I can create a python socket program that can listen to /var/run/auth_proxy_dovecot/socket for getting the inputs from dovecot , but what is the format Is it like the following AUTH PLAIN USER test(a)myemail.com PASS mypassword I looked into the documentation and developer documentation, I am unable to see how dovecot send the data , I can see a sample perl for answering dict lookups. Any one have a python alternative for it. ? -- *Sherin Abdulkhareem* Chairman & Managing Director email Email sherin(a)sherin.in <mailto:sherin@sherin.in> mobile Mobile (+91)9496533234 office Office (+91)4716007799 *Syslint Technologies India Private Limited* First Floor,Asiatic Business Center Kazhakkootam, Trivandrum PIN-695582 India Facebook <https://facebook.com/sherin.co.in> LinkedIn <https://linkedin.com/in/sherina> Google+ <https://plus.google.com/+sherinAbdulkhareem> sherin.in <http://sherin.in>

2 1

Sharing or not sharing the INBOX
by Stephane Magnier 13 Aug '21

13 Aug '21

Hi, I am using Dovecot and Sendmail ( as lmtp server ) I would like to consider having some users using there emails and having their "private Ibox" ( I would say as a normal use ) and some users sharing their Inbox 1) Should I consider using and configure 2 different email servers ? ( one sharing the inbox of any users, the other one, not sharing the inbox...) or I can have this config with the same email server ? 2) if so, how to tell Dovecot to get for user1 and user2 the same Inbox and (user3 and user4) Not sharing their inbox ? - ... like private emails and a tech support, which should share the same folder 3) or Can I say : User1 -> User 4 have private emails Inbox.. but user3 and user4 are also sharing the same folder /var/spool/mail/support/ for example I should admit that I don't know where to go :-( Thanks for your help

1 1

dovecot 2.3.16 fail one test on s390x, alpine linux
by Milan P. Stanić 13 Aug '21

13 Aug '21

Hi, I'm trying to upgrade dovecot from version 2.3.15 to 2.3.16 for alpine linux. Build and 'make check' pass on all alpine architectures except on s390x which is big-endian while all other are little-endian. here is the part from CI build log which fails: ------------ mail cache size corruption ........................................... : ok 0 / 10 tests failed test-mail-cache-fields.c:50: Assert failed: cache_field.last_used == priv->field.last_used && cache_field.decision == priv->field.decision test-mail-cache-fields.c:65: Assert failed: cache_field.last_used == priv->field.last_used && cache_field.decision == priv->field.decision test-mail-cache-fields.c:94: Assert failed: cache_field.last_used == priv->field.last_used && cache_field.decision == priv->field.decision mail cache fields read-write ......................................... : FAILED 1 / 1 tests failed make[3]: *** [Makefile:1279: check-local] Error 1 make[3]: Leaving directory '/builds/alpine/aports/main/dovecot/src/dovecot-2.3.16/src/lib-index' make[2]: *** [Makefile:1049: check-am] Error 2 make[2]: Target 'check' not remade because of errors. make[2]: Leaving directory '/builds/alpine/aports/main/dovecot/src/dovecot-2.3.16/src/lib-index' Making check in lib-storage ------------ Full log is here: https://gitlab.alpinelinux.org/alpine/aports/-/jobs/459182/raw -- Kind regards

3 8

Dovecot (>= 2.3.15) is not properly replicating Expunge commands running in a containerised environment
by A. Schulze 12 Aug '21

12 Aug '21

Hello *, migrating a mailbox setup for several tens of thousands of customers to Docker containers running on Debian VMs, we are currently observing Expunge commands not being replicated properly between two Dovecot containers. Delivering a new message into someones' inbox is replicated instantly via dsync (using TLS). However, expunging a message from the very same inbox via > doveadm expunge -u [users' email address] mailbox '*' header Message-ID [MID of the message in question] is not replicated, since a > doveadm fetch -u [users' email address] text header Message-ID [MID of the message in question] still returns the mail on the replica. Sometimes, a > doveadm replicator replicate [users' email address] fixes this, but mostly, it does not. While doing all of this, these messages are logged by Dovecot: > doveadm: Info: copy from INBOX: box=INBOX, uid=13, msgid=<[MID of the message in question]>, size=1793 > doveadm: Info: expunge: box=INBOX, uid=12, msgid=<[MID of the message in question]>, size=1793 > doveadm: Error: dsync(x): I/O has stalled, no activity for 600 seconds (last sent=handshake, last recv=handshake) > doveadm: Error: Timeout during state=slave_recv_last_common > doveadm: Error: dsync(x): I/O has stalled, no activity for 600 seconds (last sent=mailbox_delete, last recv=mailbox_delete) > doveadm: Error: Timeout during state=slave_recv_mailbox > doveadm: Error: dsync(SSL x): I/O has stalled, no activity for 600 seconds (version not received) > doveadm: Error: Timeout during state=slave_recv_handshake Unfortunately, these errors do not seem to be reproducible very well - the underlying behaviour however is. Setting > replication_sync_timeout = 2s , as mentioned in https://doc.dovecot.org/settings/plugin/replication-plugin/ (the "s" seems to be bogus, though, as Dovecot complains about an invalid timeframe given) results in these messages: > doveadm(x): Error: doveadm client disconnected before handshake: Connection closed > replicator: Panic: data stack: Out of memory when allocating 268435496 bytes > replicator: Error: Raw backtrace: /usr/local/lib/dovecot/libdovecot.so.0(backtrace_append+0x3d) [0x7ff8f55343dd] -> /usr/local/lib/dovecot/libdovecot.so.0(backtrace_get+0x1e) [0x7ff8f55344fe] -> /usr/local/lib/dovecot/libdovecot.so.0(+0xfcc6b) [0x7ff8f5540c6b] -> /usr/local/lib/dovecot/libdovecot.so.0(+0xfcd01) [0x7ff8f5540d01] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x533e7) [0x7ff8f54973e7] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x52dcb) [0x7ff8f5496dcb] -> /usr/local/lib/dovecot/libdovecot.so.0(+0xf6625) [0x7ff8f553a625] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x11c248) [0x7ff8f5560248] -> /usr/local/lib/dovecot/libdovecot.so.0(+0xf2655) [0x7ff8f5536655] -> /usr/local/lib/dovecot/libdovecot.so.0(buffer_write+0x67) [0x7ff8f5536867] -> dovecot/replicator(replicator_queue_push+0xe9) [0x5619b1b81a39] -> dovecot/replicator(+0x61f8) [0x5619b1b811f8] -> dovecot/replicator(+0x58ef) [0x5619b1b808ef] -> dovecot/replicator(+0x5ab2) [0x5619b1b80ab2] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x69) [0x7ff8f5556b99] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x131) [0x7ff8f5558101] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x4c) [0x7ff8f5556c3c] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_run+0x40) [0x7ff8f5556db0] -> /usr/local/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7ff8f54cb7b3] -> dovecot/replicator(main+0x18f) [0x5619b1b7fc4f] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xeb) [0x7ff8f52a309b] -> dovecot/replicator(_start+0x2a) [0x5619b1b7fd0a] > replicator: Fatal: master: service(replicator): child 175 killed with signal 6 (core not dumped - https://dovecot.org/bugreport.html#coredumps - set /proc/sys/fs/suid_dumpable to 2) Not having observed this behaviour on physical or virtual Linux machines, we are pretty much out of ideas on what to do. https://dovecot.org/pipermail/dovecot/2019-November/117467.html sounds like being a related issue. Thank you in advance for any hints and replies. root@x:/# doveconf -n # 2.3.15 (0503334ab1): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.5.15 (e6a84e31) # OS: Linux 4.9.0-16-amd64 x86_64 Debian 10.10 # Hostname: x auth_cache_negative_ttl = 1 mins auth_cache_size = 10 k auth_master_user_separator = "#" auth_mechanisms = plain login auth_verbose_passwords = sha1 doveadm_password = # hidden, use -P to show it doveadm_port = 12345 first_valid_uid = 8 imap_hibernate_timeout = 1 mins imap_id_log = * lmtp_save_to_detail_mailbox = yes log_path = /dev/stderr log_timestamp = login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c session=<%{session}> %k mail_access_groups = dovecot mail_attribute_dict = file:%h/Maildir/dovecot-attributes mail_gid = mail mail_location = maildir:~/Maildir/ mail_plugins = acl quota mail_log notify replication mail_uid = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vacation-seconds passdb { args = /etc/dovecot/conf.d/ldap-searches/ldap.conf driver = ldap } plugin { acl = vfile acl_defaults_from_inbox = yes acl_shared_dict = file:/data/acl_shared_dict/acl_shared_dict mail_replica = tcps:x sieve_extensions = +vacation-seconds sieve_vacation_min_period = 1m } pop3_uidl_format = %f postmaster_address = x protocols = imap lmtp pop3 sieve replication_dsync_parameters = -d -N -l 60 -U service aggregator { fifo_listener replication-notify-fifo { group = mail mode = 0666 user = mail } unix_listener replication-notify { group = mail mode = 0666 user = mail } } service auth-worker { user = $default_internal_user } service auth { unix_listener /socket/dovecot/x/sasl-server { group = postfix mode = 0660 user = postfix } } service doveadm { inet_listener { port = 12345 ssl = yes } } service imap-hibernate { unix_listener imap-hibernate { user = mail } } service imap { unix_listener imap-master { group = dovecot mode = 0660 } } service lmtp { inet_listener { port = 24 ssl = yes } unix_listener /socket/dovecot/x/lmtp-server { mode = 0600 user = postfix } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { group = mail mode = 0600 user = mail } } ssl_cert = </acme/live/x/cert+intermediate.pem ssl_cipher_list = ECDHE+AESGCM:ECDHE+CHACHA20 ssl_client_ca_dir = /etc/ssl/certs/ ssl_client_cert = </acme/live/x/cert+intermediate.pem ssl_client_key = # hidden, use -P to show it ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it ssl_options = no_ticket ssl_prefer_server_ciphers = yes userdb { driver = prefetch } userdb { args = /etc/dovecot/conf.d/ldap-searches/ldap.conf driver = ldap } userdb { args = /etc/dovecot/conf.d/ldap-searches/ldap-catchall.conf driver = ldap } verbose_proctitle = yes protocol imap { imap_metadata = yes mail_plugins = acl quota mail_log notify replication fts fts_squat imap_acl imap_quota mail_log notify } protocol lmtp { mail_plugins = acl quota mail_log notify replication sieve notify mail_log ssl = required ssl_ca = </etc/ssl/certs/ca-certificates.crt ssl_min_protocol = TLSv1.3 ssl_verify_client_cert = yes }

1 1

Panic: lib-sql: Too many bind args
by Joseph D Wagner 12 Aug '21

12 Aug '21

From /etc/dovecot/dovecot.conf: mail_attribute_dict = proxy::attr dict { attr = pgsql:/etc/dovecot/dovecot-attr-sql.conf.ext } From /etc/dovecot/dovecot-attr-sql.conf.ext: map { pattern = $key table = attributes fields { attr_name = $key } username_field = username value_field = attr_value } From /var/log/maillog: dovecot[51153]: dict(51395): Panic: lib-sql: Too many bind args (2) for statement: SELECT attr_name FROM attributes WHERE attr_name LIKE AND username = ? dovecot[51153]: dict(51395): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0xf8cab) [0x7f4c92274cab] -> /usr/lib64/dovecot/libdovecot.so.0(+0xf8d47) [0x7f4c92274d47] -> /usr/lib64/dovecot/libdovecot.so.0(+0x55c1d) [0x7f4c921d1c1d] -> dovecot/dict(+0x649a) [0x55921892349a] -> dovecot/dict(sql_statement_query+0x3e) [0x55921892a14e] -> dovecot/dict(+0xa296) [0x559218927296] -> /usr/lib64/dovecot/libdovecot.so.0(dict_iterate+0x23) [0x7f4c92238a23] -> dovecot/dict(+0x7860) [0x559218924860] -> dovecot/dict(+0x808c) [0x55921892508c] -> dovecot/dict(+0x8200) [0x559218925200] -> dovecot/dict(dict_command_input+0xee) [0x55921892534e] -> dovecot/dict(+0x6b9b) [0x559218923b9b] -> /usr/lib64/dovecot/libdovecot.so.0(connection_input_default+0x1b2) [0x7f4c9226fd42] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x73) [0x7f4c9228c413] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x135) [0x7f4c9228dac5] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x50) [0x7f4c9228c4c0] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x48) [0x7f4c9228c628] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x17) [0x7f4c92203fd7] -> dovecot/dict(main+0x185) [0x559218923895] -> /lib64/libc.so.6(__libc_start_main+0xf3) [0x7f4c91dda493] -> dovecot/dict(_start+0x2e) [0x5592189238ee] Joseph D Wagner

2 3