- dovecot - dovecot.org

Multiple email clients not in sync
by Marc Perkel 09 Jul '14

09 Jul '14

Hello everyone, I'm not sure if this is an issue with dovecot or my various email clients, or my settings. I'm running 2.2.13 and I have Thunderbird on my desktop and K@mail on my android phone. In theory if I delete email on one it should delete it on the other. It does delete it on the server - but the other client isn't always "aware" of it. Same thing sometimes with read messages. I read on one device but the other didn't know it's read unless I shut down and restart the app. Not knowing the details of how this all works I'm assuming there is some form of notification that goes on in the background so as to let other clients know what other clients do so they can sync up. And that where my setup isn't working consistently. Maybe my expectations are just too high? Maybe I don't have things set up correctly? What am I missing? Thanks in advance.

2 4

Problem with virtual mailbox when using K9 mail (android)
by Henrik Kjölhede 08 Jul '14

08 Jul '14

Hi! I've managed to setup a virtual mailbox that shows all unread or flagged mail from a selection of IMAP folders. This works great with Roundcube, which I use as webmail client. However, using K9 mail on my android phone, a mail that is opened seems to be immediately marked as read, and any flagging I do doesn't take. Presumably this is because it can't be reached any longer in the virtual folder. I tried adding the recent flag to the virtual search line, but that doesn't make any difference. I haven't been able to locate any information about anyone else experiencing this problem, so I was hoping that someone here could help. I realise that this is not exactly a "dovecot problem", but perhaps someone here has found a solution that they are willing to share. The search line in dovecot-virtual is currently "OR RECENT (OR UNSEEN FLAGGED). Regards

1 0

Limit confusion
by Micah Anderson 08 Jul '14

08 Jul '14

Hi, On one of my dovecot servers, i've got a limit problem... and I'm a little confused about which knobs I should adjust to solve it. I've been getting both of these: Error: net_connect_unix(imap) failed: Resource temporarily unavailable - http://wiki2.dovecot.org/SocketUnavailableess This one caused me to go read that wiki page, but none of those seem to apply to me: . i'm running 2.2.9 . i dont have service imap { client_limit }, although I do have service auth ( client_limit = 1024 } . my dovecot/auth process shows: dovecot/auth [91 wait, 0 passdb, 0 userdb] . it doesn't appear the master process is using very much cpu (in fact the system is mostly low load in general) . I have service_count = 0 set for imap-login for the 'high performance mode' dovecot: master: Warning: service(imap): process_limit (2560) reached, client connections are being dropped The second is because I have process_limit of 2560 for the imap service... I can raise that to 4096, but I suspect there are other limits I need to juggle? Thanks a lot for any suggestions! I have ulimit -n 2048 set for the dovecot processes (in /etc/default/dovecot) and the following is my dovecot -n: # 2.2.9: /etc/dovecot/dovecot.conf auth_verbose = yes default_process_limit = 256 default_vsz_limit = 512 M dict { expire = mysql:/etc/dovecot/dovecot-dict-sql.conf quota = mysql:/etc/dovecot/dovecot-dict-sql.conf } disable_plaintext_auth = no first_valid_gid = 8 first_valid_uid = 8 last_valid_gid = 8 last_valid_uid = 8 listen = * login_greeting = howdy, ready. mail_location = mdbox:~/mdbox:INDEX=/srv/dovecot_indexes/%d/%1n/%n mail_plugins = expire quota zlib maildir_very_dirty_syncs = yes namespace { inbox = yes location = prefix = separator = . } namespace { alias_for = hidden = yes inbox = no list = no location = prefix = INBOX. separator = . } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { antispam_allow_append_to_spam = yes antispam_backend = pipe antispam_debug_target = syslog antispam_pipe_program = /usr/local/bin/train_spam antispam_pipe_program_args = -d;10.0.1.109 antispam_pipe_program_notspam_arg = ham antispam_pipe_program_spam_arg = spam antispam_pipe_tmpdir = /var/tmp antispam_signature = X-Spam-Flag antispam_signature_missing = error antispam_spam_pattern_ignorecase = SPAM antispam_trash_pattern = trash;Trash;Deleted * expire = Trash expire2 = Trash/* expire3 = Spam expire_dict = proxy::expire quota = dict:Your mail quota::proxy::quota quota_rule = *:bytes=100663296 quota_rule2 = Trash:bytes=+20%% quota_rule3 = Spam:bytes=+10%% quota_rule4 = INBOX.Trash:bytes=+20%% quota_rule5 = INBOX.Spam:bytes=+10%% sieve = ~/.dovecot.sieve sieve_after = /var/lib/dovecot/sieve/after.sieve sieve_before = /var/lib/dovecot/sieve/default.sieve sieve_dir = ~/sieve zlib_save = gz zlib_save_level = 6 } protocols = " imap pop3" service anvil { unix_listener anvil { group = dovecot mode = 0660 user = root } } service auth { client_limit = 1024 unix_listener auth-userdb { group = mail mode = 0600 user = mail } } service dict { unix_listener dict { group = mail mode = 0600 user = mail } } service imap-login { process_min_avail = 10 service_count = 0 vsz_limit = 512 M } service imap-postlogin { executable = script-login /usr/local/sbin/postlogin_imap } service imap { executable = imap imap-postlogin process_limit = 4096 } service pop3-login { process_min_avail = 10 service_count = 0 vsz_limit = 512 M } service pop3-postlogin { executable = script-login /usr/local/sbin/postlogin_pop } service pop3 { executable = pop3 pop3-postlogin } service stats { fifo_listener stats-mail { mode = 0600 user = mail } } ssl_cert = </etc/certs/wildcard/cert.pem ssl_cipher_list = HIGH:-ADH:-aNULL ssl_key = </etc/certs/wildcard/key.pem userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } verbose_proctitle = yes protocol lda { mail_plugins = expire quota zlib sieve plugin { quota_exceeded_message = Sorry, your message cannot be delivered to that person because their mailbox is full. If you can contact them another way, you may wish to tell them of this problem. quota_rule7 = INBOX:bytes=+10%% } } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_max_userip_connections = 10 mail_plugins = expire quota zlib imap_quota imap_zlib antispam plugin { quota_exceeded_message = You are over quota. To avoid losing mail, immediately empty your Trash and Sent folders and delete emails with large attachments. } } protocol pop3 { mail_plugins = expire quota zlib pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %g }

1 0

Dovecot ignores existing mailboxes and creates its own
by Martin Vegter 08 Jul '14

08 Jul '14

Hello, I have Postfix with Maildir format. User's emails are being delivered into $HOME/mail/inbox Apart from ~/mail/inbox, there are the usual folders: $HOME/mail/archive $HOME/mail/drafts $HOME/mail/inbox $HOME/mail/trash Now I have installed dovecot, and set mail_location = maildir:~/mail:LAYOUT=fs additionally, I have defined mailboxes as follows: namespace inbox { mailbox drafts { special_use = \Drafts } mailbox sent { special_use = \Sent } mailbox trash { special_use = \Trash } } The problem I am having is following: 1) dovecot ignores the folders (drafts, sent, trash) and creates its own folders begining with capiotal letter: Drafts Sent Trash 2) dovecot ignores ~/mail/inbox and instead creates ~/mail/cur ~/mail/new ~/mail/tmp can somebody please advise how to tell dovecot, to use my existing folder structure, ie: ~/mail/inbox/{cur,new,tmp} ~/mail/drafts/{cur,new,tmp} ~/mail/sent/{cur,new,tmp} ~/mail/trash/{cur,new,tmp} any advice would be much appreciated thanks, Martin

1 0

Dovecot not changing SSL key and certificate as in config file
by Mitchell McMillan 08 Jul '14

08 Jul '14

I am trying to use my (decrypted) SSL key and certificate in Dovecot. I have changed /etc/dovecot/conf.d/10-ssl.conf like so: ssl_cert = </etc/ssl/private/ssl-chain-mail-mydomain.com.pem ssl_key = </etc/ssl/private/ssl-key-decrypted-mail-mydomain.com.key However, after running service dovecot restart, dovecot -n still says that the files /etc/dovecot/dovecot.pem and /etc/dovecot/private/dovecot.pem are being used. I am using dovecot 2.2.9, any help would be greatly appreciated.

3 2

Dovecot Auth Tries Spam
by Silvio Siefke 08 Jul '14

08 Jul '14

Hello, i more and more become this messages in logs: Jul 6 20:43:56 ks3374456 dovecot: auth: Error: passwd-file(jean(a)proxy.silviosiefke.com,213.130.118.102): stat(/var/vmail/auth.d/proxy.silviosiefke.com/passwd) failed: No such file or directory Jul 6 21:35:32 ks3374456 dovecot: auth: Error: passwd-file(jennifer(a)proxy.silviosiefke.com,41.160.109.28): stat(/var/vmail/auth.d/proxy.silviosiefke.com/passwd) failed: No such file or directory Jul 6 21:35:38 ks3374456 dovecot: auth: Error: passwd-file(jennifer(a)proxy.silviosiefke.com,41.160.109.28): stat(/var/vmail/auth.d/proxy.silviosiefke.com/passwd) failed: No such file or directory Jul 6 21:35:44 ks3374456 dovecot: auth: Error: passwd-file(jennifer(a)proxy.silviosiefke.com,41.160.109.28): stat(/var/vmail/auth.d/proxy.silviosiefke.com/passwd) failed: No such file or directory Jul 6 22:27:13 ks3374456 dovecot: auth: Error: passwd-file(jack(a)proxy.silviosiefke.com,203.113.206.105): stat(/var/vmail/auth.d/proxy.silviosiefke.com/passwd) failed: No such file or directory Jul 6 22:27:20 ks3374456 dovecot: auth: Error: passwd-file(jack(a)proxy.silviosiefke.com,203.113.206.105): stat(/var/vmail/auth.d/proxy.silviosiefke.com/passwd) failed: No such file or directory Jul 6 22:27:26 ks3374456 dovecot: auth: Error: passwd-file(jack(a)proxy.silviosiefke.com,203.113.206.105): stat(/var/vmail/auth.d/proxy.silviosiefke.com/passwd) failed: No such file or directory Jul 6 22:36:49 ks3374456 dovecot: auth: Error: passwd-file(eric(a)proxy.silviosiefke.com,41.21.178.38): stat(/var/vmail/auth.d/proxy.silviosiefke.com/passwd) failed: No such file or directory I understand not, because i have set dovecot so it launched only on my vpn ips. Give there a way to underbind this tries? I have installed fail2ban. Maybe im stupid, because this help not or i has set wrong entrys. <dovecot> service imap-login { inet_listener imap { address = 10.8.0.1 port = 12520 } inet_listener imaps { address = 10.8.0.1 port = 12550 } } </dovecot> <fail2ban> [dovecot] enabled = true filter = dovecot action = iptables-multiport[name=dovecot, port="pop3,pop3s,imap,imaps,submission,465,sieve", protocol=tcp] logpath = /var/log/mail.log [dovecot-auth] enabled = true filter = dovecot action = iptables-multiport[name=dovecot-auth, port="12520,12550,submission,465,sieve", protocol=tcp] logpath = /var/log/mail.log </fail2ban> Thanks for help & Nice day Silvio

3 2

doveadm quota recalc -A
by ML mail 08 Jul '14

08 Jul '14

Hello, It looks like my iteration SQL query (iterate_query) does not work as when I try to run "doveadm quota recalc -A" I get the following error: $ sudo -u vmail doveadm quota recalc -A doveadm(nobody): Error: user nobody: Mail access for users with UID 65534 not permitted (see first_valid_uid in config file, uid from userdb lookup). doveadm(nobody): Error: User init failed My iterate_query is quite simple: iterate_query = SELECT username FROM mailbox So from the output I really don't understand why it looks up the user "nobody". I don't have any user "nobody" in my mailbox SQL table. Anyone has an idea? Regards ML

1 0

Redis sentinel support in dict
by Lazy 08 Jul '14

08 Jul '14

Redis sentinel ( http://redis.io/topics/sentinel ) is a service that monitors and manages redis master slave replication. Using sentinel you can easily create a redis ha cluster. You can connect to a sentiniel and subscribe to certain events then in case of an failover update the redis address to new master etc. I think this is better suited to be used with dict proxy. Do You think it can be implemented without changes to dovecot core ? -- Michal Grzedzicki

1 0

dovecot 2.2.13 core dump (signal 11)
by Tom Lieuallen 08 Jul '14

08 Jul '14

We just upgraded from 2.1.16 to 2.2.13. One user is experiencing problems when using the shared namespace. Specifically it happens when opening/reading a message and when deleting messages. These functions work for other users. So far, this appears to be only affecting one user. The shared folder is a local ext4 file system and utilizes acls # 2.2.13: /private/dovecot/etc/dovecot/dovecot.conf doveconf: Warning: service auth { client_limit=1000 } is lower than required under max. load (15360) doveconf: Warning: service anvil { client_limit=1000 } is lower than required under max. load (10243) # OS: Linux 2.6.32-358.11.1.el6.x86_64 x86_64 Red Hat Enterprise Linux Server release 6.5 (Santiago) default_process_limit = 5120 first_valid_uid = 100 listen = * mail_location = mbox:~/mail:INBOX=/var/mail/%u:INDEX=/a2/imap-index/%u mail_plugins = quota acl namespace { hidden = yes inbox = no list = children location = maildir:/a1/dove-shared:INDEX=/a2/imap-index/dove-shared/%u prefix = sharedimap/ separator = / type = shared } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /private/dovecot/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } passdb { args = scheme=CRYPT username_format=%u /private/dovecot/etc/passwd driver = passwd-file } plugin { acl = vfile quota = fs:INBOX:mount=/a1 quota2 = fs:Home quota:mount=%h } protocols = imap lmtp service imap-login { service_count = 1 } service imap { process_limit = 2048 } ssl_cert = </private/ssl/certs/mail.engr.oregonstate.edu.pem ssl_key = </private/ssl/certs/mail.engr.oregonstate.edu.pem userdb { args = /private/dovecot/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } userdb { args = username_format=%u /private/dovecot/etc/passwd driver = passwd-file } protocol imap { mail_max_userip_connections = 20 } Here's the backtrace in gdb. Core was generated by `dovecot/imap'. Program terminated with signal 11, Segmentation fault. #0 acl_mailbox_right_lookup (box=0x12e6730, right_idx=7) at acl-mailbox.c:40 40 if (abox->skip_acl_checks) Missing separate debuginfos, use: debuginfo-install glibc-2.12-1.132.el6_5.2.x86_64 sssd-client-1.9.2-129.el6.x86_64 (gdb) bt full #0 acl_mailbox_right_lookup (box=0x12e6730, right_idx=7) at acl-mailbox.c:40 abox = 0x0 alist = <value optimized out> ret = <value optimized out> #1 0x00007f4c11604d06 in acl_copy_has_rights (ctx=0x12f9810, mail=0x12f5030) at acl-mailbox.c:409 destbox = 0x12edf90 save_right = <value optimized out> #2 acl_copy (ctx=0x12f9810, mail=0x12f5030) at acl-mailbox.c:430 t = <value optimized out> abox = 0x12ee5f8 #3 0x00007f4c11b741ed in mailbox_copy (_ctx=<value optimized out>, mail=0x12f5030) at mail-storage.c:2149 ctx = 0x12f9810 t = 0x12f32d0 keywords = 0x12f9b80 pvt_flags = 0 backend_mail = 0x12f5030 ret = <value optimized out> __FUNCTION__ = "mailbox_copy" #4 0x00007f4c11b742dd in mailbox_move (_ctx=<value optimized out>, mail=0x12f5030) at mail-storage.c:2170 ctx = 0x12f9810 #5 0x000000000040c587 in fetch_and_copy (cmd=0x12e3f10, move=true) at cmd-copy.c:67 search_ctx = 0x12f4db0 src_trans = 0x12f4090 srcset_ctx = {str = 0x12bf328, first_uid = 0, last_uid = 4294967295} ret = 1 save_ctx = 0x0 mail = 0x12f5030 copy_count = 1 src_uidset = 0x12bf328 #6 cmd_copy_full (cmd=0x12e3f10, move=true) at cmd-copy.c:123 client = 0x12e3330 dest_storage = <value optimized out> destbox = 0x12edf90 t = 0x12f32d0 src_trans = <value optimized out> search_args = 0x12ecf80 messageset = 0x12cac10 "112850,112871,112903:112905,112919" mailbox = 0x12cac38 "Trash" src_uidset = <value optimized out> sync_flags = 0 imap_flags = 0 changes = {pool = 0x12e6730, uid_validity = 19807984, saved_uids = { (I'm not sure how much more info is needed; let me know if more...) thank you Tom Lieuallen

2 3

Multiple Instances with Director
by Cassidy Larson 08 Jul '14

08 Jul '14

I have four front end servers with two backend servers. Each front end server has three instances for different mail hosts (individual SSL certs, etc). I'm looking at adding a fourth instance on each front end server for the director process. Currently we just return the backend server ip via SQL and use the old master username/password to proxy the inbound POP/IMAP sessions to the correct backend server. The plan is for each instance to have connect to the same list of director_servers (one from each front end server). What's the trick to separate a director instance into its own setup and having multiple instances/servers connect to that director? Currently I have on my proxy instance: director_servers = 10.128.1.42:9090 (this is the inet_listener from the director instance) service director { unix_listener login/director { mode = 0666 } fifo_listener login/proxy-notify { mode = 0600 user = $default_login_user } unix_listener director-userdb { mode = 0600 } } And I get in logs: director: Fatal: No inet_listeners defined for director service (for standalone keep director_servers empty) Do I need an inet_listener on the front end instance if I want to forward all director queries to the director_servers list? Or is there some other trick to get a proxy front end to talk to a separate director instance(s)? Thanks, Cassidy

1 0