- dovecot - dovecot.org

19 Sep '24

sieve-test(1164123): Fatal: Couldn't drop privileges: User is missing UID (see mail_uid setting) I don't get what this is about. Users are not missing an UID and how is it related with testing sieve scripts?

2 1

sieve: Terminated with non-zero exit code 2
by Marc 18 Sep '24

18 Sep '24

What could this be, I am not even having an exit code 2 in my sieve plugin. If I cat a message via cli I am getting exit code 0. ps where are stderr messages logged of the plugin?

1 1

Re: Dovecot v2.3.21.1 released
by Aleksandr Mezin 17 Sep '24

17 Sep '24

Hello. https://www.dovecot.org/download/ still points to v2.3.21 as the latest stable release (not 2.3.21.1)

2 1

Correct permissions for global sieve scripts
by Richard 16 Sep '24

16 Sep '24

Hi there, I've set up dovecot via global sieve scripts to send mails that a user manually moved to their junk directory to rspamd to learn them as spam (and learn messages as ham if they are moved out of it). I thought I had it all properly set up, but I'm now again seeing log messages like this: Sep 15 13:01:00 dovecot[523226]: imap(username)<823661><4+8RXyYi2L9/AAAB>: Error: sieve: failed to execute to program `rspamd-learn-spam.sh': refer to server log for more information. [2024-09-15 13:01:00] Sep 15 13:01:00 dovecot[523226]: imap(username)<823661><4+8RXyYi2L9/AAAB>: Error: sieve: Execution of script /etc/dovecot/sieve/global/learn-spam.sieve failed The content of learn-spam.sieve is this: require ["vnd.dovecot.pipe", "copy", "imapsieve"]; pipe :copy "rspamd-learn-spam.sh"; And the content of rspamd-learn-spam.sh is this: #!/bin/sh exec /usr/bin/rspamc learn_spam All the necessary files are located in /etc/dovecot/sieve/global and are owned by dovecot:dovecot with rw, r, r permissions. Also, I have compiled the .sieve files with sievec, the resulting .svbin files have the same permissions and ownership. What am I doing wrong? I don't see any further "server log" that will tell me more information. I'm using dovecot 2.3.19.1 (9b53102964) on Debian 12.7 Best Richard

4 11

Allowing parallel read-only requests via doveadm http api
by Kevin Kelker 16 Sep '24

16 Sep '24

Hi, is there any chance to open the doveadm http api to handle more than one client at a time if the requests are read-only commands that have no risk of breaking something when they run simultaneously? We have a scenario of using it only for getQuota to visualize a live-status of the mailbox usage but every once in a while, there are more than one parallel requests for that that are then getting tcp connection resets. As far as I've seen it in https://dovecot.org/mailman3/archives/list/dovecot@dovecot.org/thread/PYMMJ… spawning another doveadm http api service with another port wouldn't do the trick. If that's not possible, wouldn't be a failure code as a response a more clean approach than just refusing the connection at all? Right now, it's getting logged on the dovecot backend as "doveadm server can handle only a single client" but the requesting client gets a connection reset instead of a json-type response with a failure code. Best Kevin

2 1

Selectively query folders for new emails
by Habakuk Tibatong 12 Sep '24

12 Sep '24

Hi folks, I have two questions: - Is it possible to exclude folders from being queried for new emails? I have many folders in my maildir, each of which has many sub-folders, with many sub-sub-folders. My Thunderbird logs in and then queries one folder after the other and this takes a very long time. However, there are only 5 folders into which I automatically sort emails with sieve, and I would like to query only these 5 folders. The other folders are folders into which I sort emails manually. It makes no sense to query them. How could I achieve this? - How can I exclude folders from being displayed in the subscribe window, i.e. that these folders exist, e.g. they are available but cannot be subscribed to, and therefore cannot be displayed in the email client? I plan to introduce a all-times "non-deletable" spam folder, which contains a copy of all spam emails that this user received and which I use to teach spamassassin, without the user being able to see, empty or delete this folder, and without him being able to infect himself with potentially infected emails.

3 3

Dovecot v2.3.21.1 released
by Aki Tuomi 07 Sep '24

07 Sep '24

Hi all, we are releasing a CVE patch release 2.3.21.1. https://dovecot.org/releases/2.3/dovecot-2.3.21.1.tar.gz https://dovecot.org/releases/2.3/dovecot-2.3.21.1.tar.gz.sig Binary packages in https://repo.dovecot.org/ Docker images in https://hub.docker.com/r/dovecot/dovecot Kind regards, Aki Tuomi Open-Xchange oy --- - CVE-2024-23184: A large number of address headers in email resulted in excessive CPU usage. - CVE-2024-23185: Abnormally large email headers are now truncated or discarded, with a limit of 10MB on a single header and 50MB for all the headers of all the parts of an email. - oauth2: Dovecot would send client_id and client_secret as POST parameters to introspection server. These need to be optionally in Basic auth instead as required by OIDC specification. - oauth2: JWT key type check was too strict. - oauth2: JWT token audience was not validated against client_id as required by OIDC specification. - oauth2: XOAUTH2 and OAUTHBEARER mechanisms were not giving out protocol specific error message on all errors. This broke OIDC discovery. - oauth2: JWT aud validation was not performed if aud was missing from token, but was configured on Dovecot.

5 9

~/mail/.imap
by graeme.dovecot＠vetterlein.com 05 Sep '24

05 Sep '24

the box that runs my mailsever just reported disk > 80% full , so looking to tidy up. I note: sudo du -d2 -k -x /home/graeme/mail | sort -n ... ... 66788 /home/graeme/mail/.imap/spam 198328 /home/graeme/mail/.imap 1564680 /home/graeme/mail/2023 4009336 /home/graeme/mail Now in .imap I have directories dating back to 2013 .... the corresponding mail folders have long since moved to backup. What would be the effect of deleting EVERYTHING in .imap.... will it just get recreated as needed? or do I need to take care and only remove stuff I know is no longer used?

1 0

Can I delete duplicate messages under Maildir on the server?
by MI 05 Sep '24

05 Sep '24

After a client misconfiguration, many messages have been deleted. I restored them from backups, but now there are many duplicates. I can identify them on the server, and delete them. But do I need to also delete the dovecot.index files and/or other dovecot* files in the affected folders, or will these be automatically updated? (My Dovecot version is 2.3.13, so I guess I should not use doveadm deduplicate which would risk deleting non-duplicate messages, according to the "doveadm-deduplicate deletes non-duplicates" thread here?)

1 0

Re: Dovecot authentication hangs when ldap_start_tls_s() fails for invalid certificate
by Aki Tuomi 04 Sep '24

04 Sep '24

> On 19/11/2020 12:55 sebastiano degan <sebastiano.degan(a)frigoveneta.it> wrote: > > > On a Debian10 I've installed postfix 3.4.14 and dovecot 2.3.4.1. > I've configured multiple passdb sources and I expect that if one fails > the other ones are tested. > This is usually the case, except when the failure is due to an invalid > certificate from the ldap server. > In that case all authentication attempts from that moment on will fail. Hi! Can you try with latest CE release from https://repo.dovecot.org/ Regards, Aki

2 1