- dovecot - dovecot.org

[Dovecot] Simple patch
by David 23 Feb '07

23 Feb '07

Inline below is a simple patch that drops the root capabilities that aren't needed (inspired by a similar patch against the mpm_itk project!). Possibly it is a little too restrictive, extras can be added to suidcaps, but on platforms that support capabilities this will prevent things such as kernel module loading. Needed on linux is libcap, available in most distros. Note that this patch doesn't require libcap, or add an option, but if it is installed then it will take advantage of it. I don't have any other platforms to test on. The patch compiles fine but I haven't managed to test it yet. My autoconf experience is zero, so I hope that HAVE_LIBCAP is actually getting defined. Comments appreciated, I'll test it thoroughly later when I get some free time (and, if it works, remove the test message!). David --- configure.in 2007-02-22 21:50:07.000000000 +0000 +++ configure.in 2007-02-23 17:52:16.000000000 +0000 @@ -382,6 +382,17 @@ ]) ]) +AC_CHECK_FUNC(cap_init, [], [ + AC_CHECK_LIB(cap, cap_init, [ + have_libcap=yes + LIBS="$LIBS -lcap" + ]) +]) + +if test "$have_libcap" = "yes"; then + AC_DEFINE(HAVE_LIBCAP,, libcap is installed for cap_init()) +fi + AC_CHECK_FUNC(fdatasync, [ have_fdatasync=yes ], [ --- src/master/main.c 2007-01-27 01:44:25.000000000 +0000 +++ src/master/main.c 2007-02-23 16:13:39.000000000 +0000 @@ -24,6 +24,9 @@ #include <syslog.h> #include <sys/stat.h> #include <sys/wait.h> +#ifdef HAVE_LIBCAP +#include <sys/capability.h> +#endif const char *process_names[PROCESS_TYPE_MAX] = { "unknown", @@ -36,6 +39,15 @@ "dict" }; +/* the capabilities that we *need* in order to operate */ +#ifdef HAVE_LIBCAP +cap_t caps; +cap_value_t suidcaps[] = { + CAP_SETUID, + CAP_NET_BIND_SERVICE +}; +#endif + static const char *configfile = SYSCONFDIR "/" PACKAGE ".conf"; static const char *env_tz; @@ -583,6 +595,18 @@ if (log_error) i_fatal("This is Dovecot's error log"); + i_info("test message, monkeys"); + /* drop capabilities that we don't need, be very restrictive */ +#ifdef HAVE_LIBCAP + i_info("Found capability support, dropping unnecessary root priviledges"); + caps = cap_init(); + cap_clear(caps); + cap_set_flag(caps, CAP_PERMITTED, sizeof(suidcaps)/sizeof(cap_value_t), suidcaps, CAP_SET); + cap_set_flag(caps, CAP_EFFECTIVE, sizeof(suidcaps)/sizeof(cap_value_t), suidcaps, CAP_SET); + cap_set_proc(caps); + cap_free(caps); +#endif + lib_signals_init(); lib_signals_set_handler(SIGINT, TRUE, sig_die, NULL); lib_signals_set_handler(SIGTERM, TRUE, sig_die, NULL);

1 0

[Dovecot] Migration from courierpop3d (younger versions)
by Christian Skarby 23 Feb '07

23 Feb '07

Dear list, I am looking for a way to set up dovecot as a successor for courier pop3d, however I am looking for a way to preserve the UIDLs. Any progress on this? I can help out writing a converter if I know where the appropriate specs are. References: [1] http://www.dovecot.org/list/dovecot/2006-April/012727.html [2] http://wiki.dovecot.org/Migration#head-a43de1ba365baeb73f6c83702e4f14788041… -- Yours, Christian Skarby Interhost ANS

1 0

[Dovecot] quota warning
by Nicolas Boullis 23 Feb '07

23 Feb '07

Hi, Is there a way with dovecot to warn users who are close to reach their quota? Although I never used it, I think cyrus supports something like that by droping a warning message into the INBOX when delivering a message that brings the total size over a certain percentage. Would it be feasible to implement something like that with an extra plugin or by changing the quota plugin? Cheers, Nicolas

11 22

[Dovecot] rc19 - (_view_lookup_uid_range): assertion failed
by Dean Manners 23 Feb '07

23 Feb '07

Apologies if this is an <=rc19 thing, but am waiting for rc24 to come into Debian unstable/testing before upgrading. After purging ~10 messages from INBOX the index's appeared to go into a broken state. Mail client (Outlook express) reported "unable to read message flags". Logged messages: Feb 23 17:34:58 mailget01 dovecot: IMAP(drawkcab(a)drawkcab.com): file mail-index-view.c: line 386 (_view_lookup_ui d_range): assertion failed: (*last_seq_r >= *first_seq_r) Feb 23 17:34:58 mailget01 dovecot: IMAP(drawkcab(a)drawkcab.com): Raw backtrace: imap [0x80b46eb] -> imap [0x80b413 9] -> imap [0x809c6c8] -> imap(mail_index_lookup_uid_range+0x2b) [0x809cd5b] -> imap(index_storage_get_uids+0x36) [0x8086936] -> imap(mailbox_get_uids+0x2b) [0x80a674b] -> imap [0x805f9b8] -> imap(imap_search_get_arg+0x76) [0x 8060786] -> imap(cmd_fetch+0xa5) [0x8057ed5] -> imap(cmd_uid+0x52) [0x805ad02] -> imap [0x805b8c5] -> imap [0x805 b83b] -> imap(_client_input+0x6d) [0x805b9ad] -> imap(io_loop_handler_run+0x118) [0x80baa88] -> imap(io_loop_run+ 0x28) [0x80b9f08] -> imap(main+0x69) [0x8063e89] -> /lib/tls/libc.so.6(__libc_start_main+0xf4) [0xb7e53974] -> im ap [0x8056731] Feb 23 17:34:59 mailget01 dovecot: child 24629 (imap) killed with signal 6 Feb 23 17:35:10 mailget01 dovecot: IMAP(drawkcab(a)drawkcab.com): file mail-index-view.c: line 386 (_view_lookup_ui d_range): assertion failed: (*last_seq_r >= *first_seq_r) Feb 23 17:35:10 mailget01 dovecot: IMAP(drawkcab(a)drawkcab.com): Raw backtrace: imap [0x80b46eb] -> imap [0x80b413 9] -> imap [0x809c6c8] -> imap(mail_index_lookup_uid_range+0x2b) [0x809cd5b] -> imap(index_storage_get_uids+0x36) [0x8086936] -> imap(mailbox_get_uids+0x2b) [0x80a674b] -> imap [0x805f9b8] -> imap(imap_search_get_arg+0x76) [0x 8060786] -> imap(cmd_fetch+0xa5) [0x8057ed5] -> imap(cmd_uid+0x52) [0x805ad02] -> imap [0x805b8c5] -> imap [0x805 b83b] -> imap(_client_input+0x6d) [0x805b9ad] -> imap(io_loop_handler_run+0x118) [0x80baa88] -> imap(io_loop_run+ 0x28) [0x80b9f08] -> imap(main+0x69) [0x8063e89] -> /lib/tls/libc.so.6(__libc_start_main+0xf4) [0xb7e88974] -> im ap [0x8056731] Feb 23 17:35:10 mailget01 dovecot: child 24662 (imap) killed with signal 6 rm /userdirectory/dovecot* resolved it. If its worth investigating the dovecot* files copied to: http://www.drawkcab.com/dumpyard/dovecot-files.tar Regards __________________________________________ Dean Manners

2 1

[Dovecot] Final LDAP issues
by Joseba Torre 23 Feb '07

23 Feb '07

Hi all, I'm in my final steps with my testing server using rc23 in a x86 RHEL4 machine. Everything is working quite well, but still are some LDAP related issues I'd like to clarify: - I'm using auth_bind and auth_bind_userdn. So pass_filter isn't used, and pass_attrs are never searched. Is this true or am I missing something? - Is there a choice for the userdb bind/queries to be done using the user supplied dn -the one used for passdb-? I would like to access some non-public attributes, but I've had no luck until now. If I use the same dovecot-ldap.conf for userdb and passdb, i have a single connection to the LDAP server, but once the auth bind is successful, an anonymous bind occurs. If I use two separate files for userdb and passdb, i have two connections to the LDAP server, the second one being always anonimous. For me, the perfect state would be: - bind using the user supplied dn - if successfull, search for pass_attrs, where some user_attrs may be prefetched - unbind - userdb only binds if some needed attrs haven't been already fetched. If so, there's a choice to use the user supplied dn for the bind/search. Is this possible now? Would it be in the future? Thanks in advance. -- Joseba Torre. CIDIR Bizkaia.

3 5

[Dovecot] Strange new mail count
by Brian Taber 23 Feb '07

23 Feb '07

I am having a slight issue with new message count... for some reason, dovecot reports I have some strange number of new messages, even though there are no new messages... If I click on a few of the folders, the new message count seams to correct itself... Any way to solve this?

3 4

[Dovecot] out-of-tree plugins and installed header files
by Timo Sirainen 22 Feb '07

22 Feb '07

I added --with-headers configure option now to CVS (not enabled by default). It makes Dovecot install all the useful .h files so that it's possible to compile out-of-tree plugins without having compiled Dovecot sources. I'd hope that binary package builders add a new dovecot-dev package which contains the headers (and $libdir/dovecot- config). I also updated dovecot-sieve so that it compiles against only the header files, except then sievec and sieved binaries aren't compiled (because they require liblib.a).

1 0

[Dovecot] Mixing POP and IMAP
by Dominic Lepiane 22 Feb '07

22 Feb '07

Hi, I run a small site, about a dozen users, and many of the users POP their mail. I have just installed Squirrelmail which uses IMAP. Has anyone had any significant problems with mixing POP and IMAP for mail retreival? Your feedback is greatly apprecianted, -- Dominic Lepiane The IRMACS Centre Simon Fraser University

5 4

[Dovecot] Crash: index-mail.c: line 790
by Bill Boebel 22 Feb '07

22 Feb '07

Here is the first crash I've seen with the current CVS... Feb 19 00:45:52 mail35a dovecot: IMAP(mnash(a)stest1.com): Corrupted transaction log file /var/index//data1/mail/st/stest1.com/mn/mnash//.Trash/dovecot.index.log: Append with UID 5736, but next_uid = 5744 Feb 19 00:45:55 mail35a dovecot: IMAP(mnash(a)stest1.com): Corrupted transaction log file /var/index//data1/mail/st/stest1.com/mn/mnash//.Trash/dovecot.index.log: Append with UID 5737, but next_uid = 5744 Feb 19 00:46:34 mail35a dovecot: IMAP(mnash(a)stest1.com): file index-mail.c: line 790: unreached Feb 19 00:46:34 mail35a dovecot: IMAP(mnash(a)stest1.com): Raw backtrace: imap [0x8091552] -> imap [0x80910cf] -> imap [0x806c891] -> imap(mail_set_seq+0x10) [0x8084ce0] -> imap(index_storage_search_next+0x3b) [0x806f28b] -> imap(mailbox_search_next+0x14) [0x8085ae4] -> imap(imap_expunge+0x8a) [0x805b3e6] -> imap(cmd_expunge+0x61) [0x8056e69] -> imap [0x805a51e] -> imap [0x805a498] -> imap(_client_input+0x5a) [0x805a5e6] -> imap(io_loop_handler_run+0x10c) [0x80965fc] -> imap(io_loop_run+0x25) [0x8095a75] -> imap(main+0x6b) [0x80614f7] -> /lib/tls/libc.so.6(__libc_start_main+0xda) [0xd9478a] -> imap(setuid+0xa1) [0x8055825] Feb 19 00:46:34 mail35a dovecot: child 23564 (imap) killed with signal 6 Feb 19 00:46:38 mail35a dovecot: IMAP(mnash(a)stest1.com): fscking index file /var/index//data1/mail/st/stest1.com/mn/mnash//.Trash/dovecot.index Feb 19 00:46:38 mail35a dovecot: IMAP(mnash(a)stest1.com): Fixed index file /var/index//data1/mail/st/stest1.com/mn/mnash//.Trash/dovecot.index: first_recent_uid_lowwater 5744 -> 5738

2 1

[Dovecot] 1.0.rc23 released
by Timo Sirainen 22 Feb '07

22 Feb '07

http://dovecot.org/releases/dovecot-1.0.rc23.tar.gz http://dovecot.org/releases/dovecot-1.0.rc23.tar.gz.sig Documentation is probably the only important thing left before v1.0. * deliver doesn't ever exit with Dovecot's internal exit codes anymore. All its internal exit codes are changed to EX_TEMPFAIL. * mbox: X-Delivery-ID header is now dropped when saving mails. * mbox: If pop3_uidl_format=%m, we generate a unique X-Delivery-ID header when saving mails to make sure the UIDL is unique. + PAM: blocking=yes in args uses an alternative way to do PAM checks. Try it if you're having problems with PAM. + userdb passwd: blocking=yes in args makes the userdb lookups be done in auth worker processes. Set it if you're doing remote NSS lookups (eg. nss_ldap problems are fixed by this). + If PAM child process hasn't responded in two minutes, send KILL signal to it (only with blocking=no) - IMAP: APPEND ate all CPU while waiting for more data from the client (broken in rc22) - mbox: Broken X-UID headers assert-crashed sometimes - mbox: When saving a message to an empty mbox file it got an UID which immediately got incremented. - mbox: Fixed some wrong "uid-last unexpectedly lost" errors. - auth cache: In some situations we crashed if passdb had extra_fields. - auth cache: Special extra_fields weren't saved to auth cache. For example allow_nets restrictions were ignored for cached entries. - A lot of initial login processes could cause auth socket errors in log file at startup, if dovecot-auth started slowly. Now the login processes are started only after dovecot-auth has finished initializing itself. - imap/pop3 proxy: Don't crash if the remote server disconnects before we're logged in. - deliver: Don't bother trying to save the mail twice into the default mailbox (eg. if it's over quota). - mmap_disable=yes + non-Linux was really slow with large dovecot.index.cache files - MySQL couldn't be used as a masterdb - Trash plugin was more or less broken - imap/pop3 couldn't load plugins if they chrooted - imap/pop3-login process could crash in some conditions - checkpassword-reply crashed if USER/HOME wasn't set

4 8