- dovecot - dovecot.org

[Dovecot] High cpu usage OpenSolaris
by Gary Gendel 29 Jul '07

29 Jul '07

Hi, I've built 64-bit dovecot 1.0.2 on Opensolaris to replace version 1.0.0rc10. It functions fine, but when I connect, it eats up all available cpu. My guess is that the poll thread is running continuously. Any ideas on what I should do to verify this or does anyone know of a fix? Thanks, Gary

1 0

[Dovecot] Shared mailboxes (maildir, symlinks) and permissions
by Andreas Ntaflos 28 Jul '07

28 Jul '07

Hello list, I am trying to set up a public mailbox for users to put spam in so that sa-learn can do its job at night. Only I can't seem to fully understand how and which permissions should be set. I've read [1] and am using Dovecot 1.0.1. First some background information: I do not host or care (at the moment) about virtual users or virtual mail hosting. All users have Unix system accounts and shell access. I'd like to have a Spam folder, say /var/mail/public/.Spam that is a maildir where users can put Spam that got through the server-side filter. Spamassassin's sa-learn runs nightly and learns from the contents of the Spam folder. After reading [1] I think I should have under /var/mail/public a file called dovecot-shared that belongs to root:mail and has permissions 0660 (with user dovecot being a member of group mail) so that it looks like this: root@host:/var/mail/public# ls drwxr-sr-x 2 root mail 4096 2007-07-28 03:29 . drwxrwsr-x 3 root mail 4096 2007-07-28 02:19 .. -rw-rw---- 1 root mail 0 2007-07-28 02:46 dovecot-shared root@host:/var/mail/public# The first question arises: should Dovecot have write access to /var/mail/public itself? Now I should create the Spam folder called /var/mail/public/.Spam. Should this directory be in maildir format, i.e. should it already contain the subdirectories cur, tmp and new? What of the permissions of this directory? I am pretty sure Dovecot needs write access to it, so it should look like this: root@host:/var/mail/public# ls drwxr-sr-x 3 root mail 4096 2007-07-28 03:44 . drwxrwsr-x 3 root mail 4096 2007-07-28 02:19 .. -rw-rw---- 1 root mail 0 2007-07-28 02:46 dovecot-shared drwxrwsr-x 2 root mail 4096 2007-07-28 03:44 .Spam root@host:/var/mail/public# The .Spam directory here is completely empty. Now in a user's Maildir (/home/user1/Maildir) there are the user's private folders; a symlink to /var/mail/public/.Spam should be added: root@host:/home/user1/Maildir# ln -s /var/mail/public/.Spam . root@host:/home/user1/Maildir# ls ... drwx------ 5 user1 user1 4096 2007-07-19 16:14 .INBOX.foo drwx------ 5 user1 user1 4096 2007-07-06 23:01 .INBOX.bar ... lrwxrwxrwx 1 user1 user1 22 2007-07-28 03:51 .Spam -> /var/mail/public/.Spam ... root@host:/home/user1/Maildir# Is that all I have to do? Probably not, because I keep getting errors like the following when connecting (after subscribing of course): Jul 28 03:52:35 host dovecot: IMAP(user1): mkdir(/home/user1/Maildir/.Spam/cur) failed: Permission denied Should I have created the cur, tmp and new subdirectories manually and set their permissions like /var/mail/public/.Spam? But that still wouldn't give user1 write access. If I gave the users (or "others": chmod o+w) write permissions then Dovecot's index files would be owned by the first user that connects to the server and uses that folder. Apparently also not a solution. I also don't think I should have to make my users members of the mail group, but I could be wrong here. So I am not sure what I am missing, or if what I want to do is at all possible (without taking out the sledgehammer and setting all permissions to 0777). I also apologise for this lengthy post with many details and little interesting questions. It's getting late and I fear I've reached a dead end. I'd really appreciate it if someone knowledgeable could point me in the right direction here. Thanks in advance! Andreas [1] http://wiki.dovecot.org/SharedMailboxes -- Andreas "daff" Ntaflos Vienna, Austria GPG Fingerprint: 6234 2E8E 5C81 C6CB E5EC 7E65 397C E2A8 090C A9B4

2 1

[Dovecot] Issues upgrading to 1.1alpha1
by Luca Corti 27 Jul '07

27 Jul '07

I'm trying to upgrade from 1.0.2 to 1.1alpha1. I can build and start dovecot correctly. dovecot -n says: # 1.1.alpha1: /usr/local/etc/dovecot.conf protocols: imap pop3 ssl_cert_file: /etc/postfix/server.pem ssl_key_file: /etc/postfix/server.pem login_dir: /usr/local/var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login mail_location: maildir:/mnt/shared/mail/%u:INDEX=/var/indexes/%u mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 auth default: passdb: driver: pam passdb: driver: passwd userdb: driver: passwd socket: type: listen client: path: /usr/local/var/run/dovecot/auth-client mode: 436 master: path: /usr/local/var/run/dovecot/auth-master mode: 384 user: root group: dovecot When I try to access my 1.4G Maildir via IMAP I can see messages in INBOX, but accessing mail in other folders returns a "resource temporarily unavailable" error in my client. In the server logs I see killed by signal 10 errors for dovecot imap processes. I'm on Linux 2.6.21 sparc64, mail is stored in NFS, indexes on local disk. ciao Luca

2 1

[Dovecot] auth_cache_...
by Frank Elsner 26 Jul '07

26 Jul '07

Hello, the dovecot-example.conf states: # Authentication cache size in kilobytes. 0 means it's disabled. # Note that bsdauth, PAM and vpopmail require cache_key to be set for caching # to be used. #auth_cache_size = 0 # Time to live in seconds for cached data. After this many seconds the cached # record is no longer used, *except* if the main database lookup returns # internal failure. We also try to handle password changes automatically: If # user's previous authentication was successful, but this one wasn't, the # cache isn't used. For now this works only with plaintext authentication. #auth_cache_ttl = 3600 auth_cache_size = 0, does it mean "cache can grow ad infinitum" or does it mean "no cache at all" ? Kind regards ______________________________________________________________ Frank Elsner / c/o Technische Universitaet Berlin | ____________/ tubIT [BD], Sekr. E-N 50 | | Einsteinufer 17 | | Phone: +49 30 314 23897 D-10587 Berlin | | eMail: Frank.Elsner(a)TU-Berlin.DE Germany __________________| |_________________________________________________________| in dubio pro exim

4 4

[Dovecot] quota: maildrop + dovecot. dovecot doesn't update maildirsize file
by Frittella Laurento 26 Jul '07

26 Jul '07

Hi all, I'm trying to implement quota support in postfix using maildrop + dovecot but I think dovecot doesn't update info stored in maildirsize file. # 1.0.2: /etc/dovecot/dovecot.conf base_dir: /var/run/dovecot/ listen: 127.0.0.1 ssl_listen: * ssl_ca_file: ... ssl_cert_file: ... ssl_key_file: ... ssl_cipher_list: ALL:!LOW:!SSLv2 login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login valid_chroot_dirs: /home/vmail/domains first_valid_uid: 1001 last_valid_uid: 1001 first_valid_gid: 1001 last_valid_gid: 1001 mail_location: maildir:/home/vmail/domains/%d/%n auth default: user: dovecot-auth passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf plugin: quota: maildir:ignore=Trash When a mail arrives maildrop delivers it and update info in the maildirsize file, but when I delete messages through dovecot (using thunderbird) the maildirsize remains the same and so users reach overquota very soon. What's wrong? Thanks in advance, Laurento

4 8

[Dovecot] migration from cyrus to dovecot
by Dirk Müller 26 Jul '07

26 Jul '07

hi there, just a short question. ;-) are the tools mentioned in the wiki for migration from cyrus (http://wiki.dovecot.org/Migration/Cyrus) still working fine with the latest dovecot release 1.0.2? i remember there have been some internal changes from 1.0.1 to 1.0.2 to keep compatible with the upcoming 1.1. thanks and best regards, dirk

2 1

[Dovecot] dspam plugin
by Oliver Kohll 26 Jul '07

26 Jul '07

Hello, I'm trying to install the dspam plugin to dovecot. So far, I've Installed dovecot 1.0.2 from RPM and set up Installed dspam 3.8.0, set up and integrated with postfix, using dspam as local delivery agent before dovecot's deliver Downloaded the dovecot 1.0.2 source in order to compile the C file http://johannes.sipsolutions.net/Projects/dovecot-dspam-integration/ beta7-code with the command cc -fPIC -shared -Wall -I../src/ -I../src/lib -I.. -I../src/lib- storage -I../src/lib-mail -I../src/lib-imap -I../src/imap/ - DHAVE_CONFIG_H -DDSPAM=\"/usr/local/bin/dspam\" dspam.c -o lib_dspam.so and copied the resulting lib_dspam.so to /usr/lib/dovecot/imap/ In dovecot.conf, set protocol imap { mail_plugins = dspam mail_plugin_dir = /usr/lib/dovecot/imap } Created a SPAM folder. However, when I move a message into or out of the SPAM folder, dspam doesn't seem to execute. Nothing appears in /usr/local/var/dspam/system.log or /var/log/maillog and "SELECT * FROM dspam_stats;" in the dspam database returns unchanged numbers: dspam=> select * from dspam_stats ; uid | spam_learned | innocent_learned | spam_misclassified | innocent_misclassified | spam_corpusfed | innocent_corpusfed | spam_classified | innocent_classified -----+--------------+------------------+-------------------- +------------------------+----------------+-------------------- +-----------------+--------------------- 505 | 18 | 1870 | 3 | 3 | 0 | 3 | 0 | 0 (1 row) One thing that may be relevant is that I have a namespace in dovecot.conf namespace private { prefix = INBOX. inbox = yes } Any ideas? Regards Oliver p.s. the page http://johannes.sipsolutions.net/Projects/dovecot-dspam- integration seems to be blank now but the Google cache http:// 216.239.59.104/search?q=cache:K_yW5wV88uwJ:johannes.sipsolutions.net/ Projects/dovecot-dspam-integration+dovecot +dspam&hl=en&ct=clnk&cd=3&client=safari is still there for now. oliver(a)gtwm.co.uk / 0845 456 1810 / 07814 828608 The Old Bank, 4 Ravenhill Rd, Swansea SA5 5AW, UK NOTE No contracts may be concluded on behalf of GT webMarque by means of e- mail communications. The contents of this e-mail are confidential to the intended recipient at the e-mail address to which it has been addressed; it may not be disclosed to or used by anyone other than this addressee, nor may it be copied in any way. If received in error please return to sender via e-mail. DISCLAIMER Please note that neither GT webMarque Ltd nor the sender accept any responsibility for viruses transmitted via e-mail. It is your responsibility to scan attachments (if any).

1 1

[Dovecot] Vacation message functionality
by Charles Marcus 25 Jul '07

25 Jul '07

Hi, Since I will soon be attempting to get this working on one of my client's systems, I posed a question on the postfix list - since they mostly dislike vacation messages - but *ardent haters* of badly configured vacation message systems - as to the quality of the dovecot vacation message function. The only response I got did seem to have a few very good suggestions for additional conditions to test for, so I'm posting the response here to see if they can be incorporated (I'm not a coder or I'd attempt it myself). The original text (prefixed by double quote characters) in the following exchange is what I copied/pasted from the wiki, and the reply (prefixed by one quote character) is the suggested change/enhancement (this reply is from a trusted source on the postfix list): >> Vacation auto-reply >> >> The vacation replies are sent to the envelope sender. Currently this >> is taken from the Return-Path: header in the message. > comment: > or from the command line if this is supported. > > also, if the envelope sender is not available, no reply should be > sent. >> List of autoreplied senders is stored in .dovecot.lda-dupes file in >> user's home directory. When you're testing the vacation feature, it's >> easy to forget that the reply is sent only once in the number of >> configured days. If you've problems getting the vacation reply, try >> deleting this file. If that didn't help, make sure the problem isn't >> related to sending mails in general by trying the "reject" Sieve >> command. > if you support extensions, you can test using a unique sender each > time: foo+12345(a)domain.example. >> The automatic replies aren't sent if any of the following is true: >> >> <snip> >> >> o begins with "owner-" (case-sensitive) > replace with: > o starts with "${token}-" (not case sensitive), where token > is one of: owner, request, bounces > > It is safer to send nothing than send a risky one. >> o contains the string "-request" anywhere within it >> (case-sensitive) > replace with: > o contains "-${token}@" (not case sensitive), where token is > one of: owner, request, bounces >> * The envelope sender and envelope recipient are the same >> * The envelope recipient is not found in the message To:, Cc: or >> Bcc: fields. > add: > * There is a "Sender:" header containing one of the tokens listed > above. > * There is a List-Id or List-Post header > * There is no header suggesting that this is possible spam > > Unlike delivery, safety here is to not send a reply if the message > may be spam. so you don't rely on recipient preferences, and you > don't fear false positives too much (the guy who receives your > auto-rep may have a better filter, and besides annoying him, would > find you stupid to miss an obvious spam ;-p) >> The envelope sender is taken from a Return-Path: header in the >> message. The envelope recipient is taken from the recipient user >> (-d parameter with virtual user setup). A bare username without a >> domain gets canonicalised by the libsieve code to >> "<username>@unspecified-domain", which means it is highly unlikely >> to pass the last two tests in the list above. > note: > the envelope recipient can also be retrieved in the Delivered-To > header if this is available ('D' flag). Comments appreciated... -- Best regards, Charles

3 4

[Dovecot] Thunderbird body search and multiple imap process
by Oliver Schulze L. 25 Jul '07

25 Jul '07

Hi, I'm having an issue with dovecot and Thunderbird and it is reproducible all the time. You do many body search from TB and you end up with multiple imap processess consuming all the CPU and with linux load 20+ Setup: - Centos 4.5 - Thunderbird 2.0.0.5 - Dovecot 1.0-7_53.rc29 and 1.0.1-1_58.el4 How to reproduce: - have an imap account in Thunderbird with 12000+ emails - user maildir in dovecot - do a: ps auwx|grep user1|grep imap|wc -l - in the main window of TB, in the sarch box select "Entire Message" - search one random word and wait 30 seconds - search another random word and wait 30 seconds - search another random word and wait 30 seconds - search another random word and wait 30 seconds - do another: ps auwx|grep user1|grep imap|wc -l - watch that the user1 have now more imap process - watch the linux load, it just rocketed from 1 to 20 - killall -9 imap - watch the linux load return to 1 I'm thinking its TB fault, anyone has seen this issue too? Thanks Oliver -- Oliver Schulze L. | http://tinymailto.com/oliver Asuncion - Paraguay | http://www.solojuegos.mobi

2 2

Re: [Dovecot] Move deleted to trash
by Timo Sirainen 25 Jul '07

25 Jul '07

On 25.7.2007, at 16.02, Donald Nash wrote: > I do have to point out that you didn't actually answer my > question. :-) You originally asserted as fact that a server-managed > trash folder is evil from IMAP's point of view. However, when > asked to explain this, you changed from an assertion of fact to a > statement of personal preference: "I hate the move-to-Trash feature." > > Don't get me wrong, I'm not trying to say that your opinion is > wrong, nor am I trying to brow-beat you into implementing something > you don't think should be implemented. I'm just curious to know > what your motivation is. Why is it evil? Why do you hate it? EXPUNGE command is specified to expunge the mails, not move them to another mailbox. This would make having the message really gone a 4 stage operation: Mark deleted, expunge, mark deleted in Trash, expunge Trash. In many clients when you mark a message deleted it also copies it to Trash. So a server side expunge-to-trash feature causes the message to get copied there twice. A Trash mailbox also has the problem that all of your messages get there. There's no way to have an easy "unexpunge" operation, because the original mailbox isn't saved anywhere. You have to manually copy the message to the wanted mailbox. Perhaps lazy-expunge is a bit similar, but it preserves the mailboxes and doesn't conflict with clients' move-to-Trash feature. Also the concept in general is about having easily restorable backups of mails and not some kind of a idea that mails should go to a Trash mailbox when they're deleted. Maybe that whole Trash concept is the reason I consider it evil. I don't like that Trash concept in desktop environments either. I wish the undelete feature was in filesystems, so that when disk is full, the oldest deleted files would automatically get overwritten with new data, but until then the files would be undeletable. >> I think having a virtual Trash mailbox that contained all messages >> marked >> as deleted in all mailboxes would be a good solution for this. > > That's not quite the same thing. All the trash folders I've seen > are for messages which have been expunged from other folders, not > just marked for deletion. It's to give you one last chance to > retrieve a message that you realize shouldn't have been deleted. I think I'd prefer the lazy-expunge way for that more than having everything go to Trash. The virtual Trash would make client-side "delete=mark deleted + copy to Trash" feature unnecessary. >> It's not a requirement to subscribe to post. The messages to go to >> moderation queue and I approve them from there. > > Quoting from your web site: > > * You can post to the list without subscribing. The mail then > waits > in a moderator queue. However a lot of spam arrives there, > so it's > possible that your message gets accidentally discarded as spam. > > I didn't want to take a chance on my message getting lost in the > spam. If you want, I will join the mailing list and we can replay > this discussion there so everyone else can benefit from it. Well, I Cc'd the list now. > I hadn't anticipated that it would evolve into this much of a > discussion (I was hoping for a simple "It's evil because of X, Y, > and Z" sort of answer), or I would have done that in the first place. Evilness is subjective. :)

2 1

[Dovecot] Errors logging in
by Cassidy B. Larson 25 Jul '07

25 Jul '07

Out of the blue my proxy installations started showing this: dovecot: login: tried to change state 2 -> 2 (if you can't login at all, see src/lib/fdpass.c) Nobody can login. Running 1.0.0 on the proxy and 1.0.2 on my storage boxes. Anybody have any insights? -c

1 1

[Dovecot] Quota plugin, Maildir, dict backend loop problem
by David Jonas 25 Jul '07

25 Jul '07

Hello, I've been working with the quota plugin(s) the past few days and have been having some real trouble. Only a few entries are appearing in the database, a couple more when I restarted dovecot. None of the current entries were being updated either. I think I've tracked it down to somewhere in the dict backend. I put in a few i_info() statements and recompiled. A few queries get through, then it seems to try the same query about three times and then no new more queries at all (the i_info is right after the allocation of the query string). I couldn't find any errors in the log. An strace of the dict pid shows the following loop. Dovecot -n to follow as well. A quick tcpdump showed a loop something like this: < SELECT current FROM quota WHERE ... > 513965019 < BEGIN < INSERT INTO quota (current, ... < COMMIT > ?? (error_r appears to be (null)) .. repeat .. In all my tests it appears that the quota value being set during the loop is 0, but that would be the most common case anyway. An insert query would look like this: INSERT INTO quota (current, path, username) VALUES (0, 'quota/storage', 'user(a)example.com') ON DUPLICATE KEY UPDATE current = current + 0; Help on what to do/try next would greatly be appreciated. Thanks, David $ strace -p 19816 epoll_wait(5, {{EPOLLIN, {u32=153555248, u64=153555248}}, {EPOLLIN, {u32=153601240, u64=153601240}}, {EPOLLIN|EPOLLHUP, {u32=153567344, u64=153567344}}}, 29, 2147483647) = 3 gettimeofday({1185308526, 494477}, {420, 0}) = 0 read(20, "Lpriv/quota/storage\n", 4044) = 20 fcntl64(9, F_SETFL, O_RDWR|O_NONBLOCK) = 0 read(9, 0x9271eb8, 8192) = -1 EAGAIN (Resource temporarily unavailable) fcntl64(9, F_SETFL, O_RDWR) = 0 setsockopt(9, SOL_SOCKET, SO_SNDTIMEO, "\2003\341\1\0\0\0\0", 8) = 0 write(9, "l\0\0\0\3SELECT current FROM quota W"..., 112) = 112 setsockopt(9, SOL_SOCKET, SO_RCVTIMEO, "\2003\341\1\0\0\0\0", 8) = 0 read(9, "\1\0\0\1", 4) = 4 read(9, "\1", 1) = 1 setsockopt(9, SOL_SOCKET, SO_RCVTIMEO, "\2003\341\1\0\0\0\0", 8) = 0 read(9, "6\0\0\2", 4) = 4 read(9, "\3def\10vpopmail\5quota\5quota\7curren"..., 54) = 54 setsockopt(9, SOL_SOCKET, SO_RCVTIMEO, "\2003\341\1\0\0\0\0", 8) = 0 read(9, "\1\0\0\3", 4) = 4 read(9, "\376", 1) = 1 setsockopt(9, SOL_SOCKET, SO_RCVTIMEO, "\2003\341\1\0\0\0\0", 8) = 0 read(9, "\n\0\0\4", 4) = 4 read(9, "\t582670292", 10) = 10 setsockopt(9, SOL_SOCKET, SO_RCVTIMEO, "\2003\341\1\0\0\0\0", 8) = 0 read(9, "\5\0\0\5", 4) = 4 read(9, "\376\0\0\2\0", 5) = 5 write(20, "O582670292\n", 11) = 11 read(10, "B1\nA1\tpriv/quota/storage\t-24324\n"..., 4043) = 35 fcntl64(9, F_SETFL, O_RDWR|O_NONBLOCK) = 0 read(9, 0x9271eb8, 8192) = -1 EAGAIN (Resource temporarily unavailable) fcntl64(9, F_SETFL, O_RDWR) = 0 setsockopt(9, SOL_SOCKET, SO_SNDTIMEO, "\2003\341\1\0\0\0\0", 8) = 0 write(9, "\6\0\0\0\3BEGIN", 10) = 10 setsockopt(9, SOL_SOCKET, SO_RCVTIMEO, "\2003\341\1\0\0\0\0", 8) = 0 read(9, "\7\0\0\1", 4) = 4 read(9, "\0\0\0\3\0\0\0", 7) = 7 fcntl64(9, F_SETFL, O_RDWR|O_NONBLOCK) = 0 read(9, 0x9271eb8, 8192) = -1 EAGAIN (Resource temporarily unavailable) fcntl64(9, F_SETFL, O_RDWR) = 0 setsockopt(9, SOL_SOCKET, SO_SNDTIMEO, "\2003\341\1\0\0\0\0", 8) = 0 write(9, "\247\0\0\0\3INSERT INTO quota (current,"..., 171) = 171 setsockopt(9, SOL_SOCKET, SO_RCVTIMEO, "\2003\341\1\0\0\0\0", 8) = 0 read(9, "\7\0\0\1", 4) = 4 read(9, "\0\2\0\3\0\0\0", 7) = 7 fcntl64(9, F_SETFL, O_RDWR|O_NONBLOCK) = 0 read(9, 0x9271eb8, 8192) = -1 EAGAIN (Resource temporarily unavailable) fcntl64(9, F_SETFL, O_RDWR) = 0 setsockopt(9, SOL_SOCKET, SO_SNDTIMEO, "\2003\341\1\0\0\0\0", 8) = 0 write(9, "\7\0\0\0\3COMMIT", 11) = 11 setsockopt(9, SOL_SOCKET, SO_RCVTIMEO, "\2003\341\1\0\0\0\0", 8) = 0 read(9, "\7\0\0\1", 4) = 4 read(9, "\0\0\0\2\0\0\0", 7) = 7 write(10, "O\n", 2) = 2 read(14, "", 3998) = 0 epoll_ctl(5, EPOLL_CTL_DEL, 14, {0, {u32=153567344, u64=153567344}}) = 0 close(14) = 0 epoll_wait(5, {{EPOLLIN|EPOLLHUP, {u32=153601240, u64=153601240}}}, 29, 2147483647) = 1 gettimeofday({1185308526, 500644}, {420, 0}) = 0 read(10, "", 4008) = 0 epoll_ctl(5, EPOLL_CTL_DEL, 10, {0, {u32=153601240, u64=153601240}}) = 0 close(10) = 0 epoll_wait(5, <unfinished ...> Process 19816 detached $ /usr/local/dovecot/sbin/dovecot -n # 1.0.2: /etc/dovecot.conf protocols: imap pop3 ssl_disable: yes disable_plaintext_auth: no login_dir: /usr/local/dovecot/var/run/dovecot/login login_executable(default): /usr/local/dovecot/libexec/dovecot/imap-login login_executable(imap): /usr/local/dovecot/libexec/dovecot/imap-login login_executable(pop3): /usr/local/dovecot/libexec/dovecot/pop3-login login_greeting: postoffice.no-ip.com login_log_format_elements: user=<%u@%d> method=%m rip=%r lip=%l %c login_process_per_connection: no verbose_proctitle: yes first_valid_uid: 89 maildir_stat_dirs: yes maildir_copy_with_hardlinks: yes mail_executable(default): /usr/local/dovecot/libexec/dovecot/imap mail_executable(imap): /usr/local/dovecot/libexec/dovecot/imap mail_executable(pop3): /usr/local/dovecot/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/local/dovecot/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/dovecot/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/dovecot/lib/dovecot/pop3 mail_log_prefix: %Us(%u)[%p]: pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %f pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: cache_size: 100 cache_ttl: 600 user: nobody username_translation: %@ username_format: %Lu verbose: yes passdb: driver: sql args: /etc/dovecot-sql.conf userdb: driver: prefetch plugin: quota: dict:storage=102400000 proxy::quotadict dict: quotadict: mysql:/etc/dovecot-dict-quota.conf $ cat /etc/dovecot-dict-quota.conf connect = host=192.168.15.25 dbname=vpopmail user=xxx password=xxx table = quota select_field = current where_field = path username_field = username $ cat /etc/redhat-release Red Hat Enterprise Linux ES release 4 (Nahant Update 5) $ rpm -qa | grep -i mysql MySQL-devel-standard-4.1.22-0.rhel4 MySQL-shared-standard-4.1.22-0.rhel4 MySQL-client-standard-4.1.22-0.rhel4 $ lsof -c dict -n COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME dict 19816 root cwd DIR 8,5 4096 464289 /usr/local/dovecot/var/run/dovecot dict 19816 root rtd DIR 8,7 4096 2 / dict 19816 root txt REG 8,5 1868454 464309 /usr/local/dovecot/libexec/dovecot/dict dict 19816 root mem REG 8,7 47404 160369 /lib/libnss_files-2.3.4.so dict 19816 root mem REG 8,7 112168 160456 /lib/ld-2.3.4.so dict 19816 root mem REG 8,7 1529008 163193 /lib/tls/libc-2.3.4.so dict 19816 root mem REG 8,7 16732 165083 /lib/libdl-2.3.4.so dict 19816 root mem REG 8,7 213772 165079 /lib/tls/libm-2.3.4.so dict 19816 root mem REG 8,7 107800 165077 /lib/tls/libpthread-2.3.4.so dict 19816 root mem REG 8,7 28476 165086 /lib/libcrypt-2.3.4.so dict 19816 root mem REG 8,7 97120 165087 /lib/libnsl-2.3.4.so dict 19816 root 0r CHR 1,3 1797 /dev/null dict 19816 root 1r CHR 1,3 1797 /dev/null dict 19816 root 2w FIFO 0,7 52832717 pipe dict 19816 root 3u unix 0xf4e58180 52832640 /usr/local/dovecot/var/run/dovecot/dict-server dict 19816 root 4r CHR 1,9 466 /dev/urandom dict 19816 root 5r 0000 0,8 0 52832719 eventpoll dict 19816 root 6r FIFO 0,7 52832720 pipe dict 19816 root 7w FIFO 0,7 52832720 pipe dict 19816 root 8u unix 0xf6fac480 52884208 /usr/local/dovecot/var/run/dovecot/dict-server dict 19816 root 9u IPv4 52832745 TCP 192.168.15.55:46058->192.168.15.25:mysql (ESTABLISHED) dict 19816 root 10u unix 0xdae69240 52881759 /usr/local/dovecot/var/run/dovecot/dict-server dict 19816 root 11u unix 0xf36af680 52884148 /usr/local/dovecot/var/run/dovecot/dict-server dict 19816 root 12u unix 0xf505f6c0 52881064 /usr/local/dovecot/var/run/dovecot/dict-server dict 19816 root 13u unix 0xd5d84280 52884278 /usr/local/dovecot/var/run/dovecot/dict-server dict 19816 root 15u unix 0xd1ab9b00 52883941 /usr/local/dovecot/var/run/dovecot/dict-server dict 19816 root 16u unix 0xf6faca80 52884264 /usr/local/dovecot/var/run/dovecot/dict-server dict 19816 root 17u unix 0xf63cb1c0 52884235 /usr/local/dovecot/var/run/dovecot/dict-server

3 7

[Dovecot] assertion failed with KMail 3.5.6 and dovecot 1.0.0
by Sylvain Joyeux 25 Jul '07

25 Jul '07

Please CC me on answer, as I'm not subscribed on the list Here is the description of the problem. The system description follows. Everytime I read my email using KMail 3.5.6, dovecot hangs up near the end. I get the following in mail.err: IMAP(doudou): file ostream-crlf.c: line 339 (_send_istream): assertion failed: ((size_t)ret <= iov.iov_len) IMAP(doudou): Raw backtrace: imap [0x10080384] -> imap(i_info+0) [0x10080120] -> imap [0x1008f70c] -> imap(o_stream_send_istream+0x7c) [0x1008d57c] -> imap(maildir_save_continue+0x4c) [0x1002bacc] -> imap(mailbox_save_continue+0x20) [0x1006d910] -> imap [0x1000f4b4] -> imap [0x1000fe44] -> imap(io_loop_handler_run+0x1b8) [0x10087ea8] -> imap(io_loop_run+0x38) [0x10086cf8] -> imap(main+0x474) [0x1001f714] -> /lib/tls/libc.so.6 [0xfe84994] -> /lib/tls/libc.so.6(__libc_start_main+0xb0) [0xfe84ad0] child 18757 (imap) killed with signal 6 The attached dovecot.txt contains the end of the tcp dump (dovecot aborts just after) System information: [~] dovecot --version 1.0.0 [~] dovecot -n # /etc/dovecot/dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login login_process_per_connection: no login_process_size: 16 login_processes_count: 1 login_max_connections: 3 max_mail_processes: 3 mail_extra_groups: mail mail_location: maildir:~/mail namespace: type: private separator: / inbox: yes auth default: mechanisms: plain login process_size: 16 passdb: driver: pam userdb: driver: passwd OS: linux debian etch, got dovecot 1.0.0-1~bpo.1 from www.backports.org CPU arch: powerpc Filesystem: ext3 -- Sylvain Joyeux

2 1

[Dovecot] qpopper -> dovecot migration : which pop3_uidl_format?
by bob passendon 25 Jul '07

25 Jul '07

Hello, I have read in lots of places about how I should use pop3_reuse_xuidl = yes to prevent pop3 users having to re-download mail (and duplicate their e-mail) after a migration. This fails with the message: pop3_uidl_format setting is missing from config file Which setting for pop3_uidl_format should I set to prevent the e-mail being downloaded again?

2 1

[Dovecot] inotify_rm_watch() failed: Invalid argument ?
by Ralf Hildebrandt 25 Jul '07

25 Jul '07

I'm seeing these in my log: Jul 25 15:22:27 postamt dovecot: IMAP(hdaebrit): inotify_rm_watch() failed: Invalid argument Jul 25 15:22:27 postamt dovecot: IMAP(hdaebrit): inotify_rm_watch() failed: Invalid argument Jul 25 15:22:34 postamt dovecot: IMAP(hdaebrit): inotify_rm_watch() failed: Invalid argument Jul 25 15:22:34 postamt dovecot: IMAP(hdaebrit): inotify_rm_watch() failed: Invalid argument Jul 25 15:25:12 postamt dovecot: IMAP(hdaebrit): inotify_rm_watch() failed: Invalid argument Jul 25 15:25:12 postamt dovecot: IMAP(hdaebrit): inotify_rm_watch() failed: Invalid argument Jul 25 15:27:26 postamt dovecot: IMAP(hdaebrit): inotify_rm_watch() failed: Invalid argument Jul 25 15:27:26 postamt dovecot: IMAP(hdaebrit): inotify_rm_watch() failed: Invalid argument Jul 25 15:29:45 postamt dovecot: IMAP(hdaebrit): inotify_rm_watch() failed: Invalid argument Jul 25 15:29:45 postamt dovecot: IMAP(hdaebrit): inotify_rm_watch() failed: Invalid argument should I worry? Kernel 2.6.22.1 and dovecot 1.0.x hg checkout. -- Ralf Hildebrandt (Ralf.Hildebrandt(a)charite.de) plonk(a)charite.de Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155 http://www.arschkrebs.de Microsoft: A Proven Danger to National Security http://www.infowarrior.org/articles/msdanger.pdf

2 1

[Dovecot] v1.1 alpha1: can't pop/imap login with LDAP
by Katsu Yamamoto 25 Jul '07

25 Jul '07

Hi, We recentlty upgraded our dovecot from v1.0.2 to v1.1ahpha1 under CentOS 4.4. Also, we are using Postfix 2.4.3 and OpenLDAP 2.3.35. We've been using LDAP for our POP/IAMP user authentication, however after upgrading to v1.1alpha1, LDAP authentication does't seem to be working properly. We re-examined the source code, and made a few modification. We are suspecting that... (1) db-ldap.c is not handling value properly?? (2) userdb-ldap.c is not allocating memory for userdb_reply?? The modification we made are following: *** src/auth/db-ldap.c.orig Thu Jul 12 10:42:49 2007 --- src/auth/db-ldap.c Tue Jul 24 20:20:31 2007 *************** *** 55,60 **** --- 55,62 ---- BerElement *ber; string_t *var, *debug; + + int value_index; }; #define DEF_STR(name) DEF_STRUCT_STR(name, ldap_settings) *************** *** 764,769 **** --- 766,772 ---- ctx->vals = ldap_get_values(ctx->conn->ld, ctx->entry, ctx->attr); ctx->value = ctx->vals[0]; + ctx->value_index = 0; } static void *************** *** 797,804 **** db_ldap_result_change_attr(ctx); } else { /* continuing existing attribute */ ! if (ctx->value != NULL) ! ctx->value++; } if (ctx->value != NULL) { --- 800,806 ---- db_ldap_result_change_attr(ctx); } else { /* continuing existing attribute */ ! ctx->value = ctx->vals[++ctx->value_index]; } if (ctx->value != NULL) { *** src/auth/userdb-ldap.c.orig Thu Jul 12 10:42:49 2007 --- src/auth/userdb-ldap.c Tue Jul 24 20:33:45 2007 *************** *** 37,42 **** --- 37,44 ---- struct db_ldap_result_iterate_context *ldap_iter; const char *name, *const *values; + auth_request_init_userdb_reply(auth_request); + ldap_iter = db_ldap_result_iterate_init(conn, entry, auth_request, conn->user_attr_map); while (db_ldap_result_iterate_next_all(ldap_iter, &name, &values)) { With the modification, LDAP authentication is working without any problem, at least for our system. However we are not sure whether the above modification affect other functions of dovecot. Is there an official patch to fix the problem already released? And somehow we missed it? If there is no patch, then will there be any to be released sometime in near future? By the way, our dovecot configuration is: ----- protocols: imap pop3 listen(default): *:40143 listen(imap): *:40143 listen(pop3): *:40110 ssl_disable: yes disable_plaintext_auth: no login_dir: /opt/mrn/mss/var/run/dovecot/login login_executable(default): /opt/mrn/mss/libexec/dovecot/imap-login login_executable(imap): /opt/mrn/mss/libexec/dovecot/imap-login login_executable(pop3): /opt/mrn/mss/libexec/dovecot/pop3-login mail_location: maildir:~/mail mmap_disable: yes mail_executable(default): /opt/mrn/mss/libexec/dovecot/imap mail_executable(imap): /opt/mrn/mss/libexec/dovecot/imap mail_executable(pop3): /opt/mrn/mss/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /opt/mrn/mss/lib/dovecot/imap mail_plugin_dir(imap): /opt/mrn/mss/lib/dovecot/imap mail_plugin_dir(pop3): /opt/mrn/mss/lib/dovecot/pop3 auth default: mechanisms: plain login cram-md5 apop username_translation: %@ verbose: yes debug: yes passdb: driver: ldap args: /opt/mrn/mss/etc/dovecot-ldap.conf userdb: driver: prefetch userdb: driver: ldap args: /opt/mrn/mss/etc/dovecot-ldap.conf socket: type: listen master: path: /opt/mrn/mss/var/run/dovecot/auth-master mode: 384 user: mssmail group: mssmail plugin: quota: maildir:ignore=Trash ----- And our dovecot-ldap.conf is: ----- hosts =localhost:40389 dn =cn=Manager,o=internet,c=jp dnpass = ******** auth_bind = no ldap_version = 3 base = ou=mail,o=internet,c=jp user_attrs = mail=user,uidNumber=uid,gidNumber=gid,homeDirectory=home,mailQuota=quota=maildir:ignore=Trash:storage user_filter = (&(objectClass=mailAccount)(mail=%u)) pass_attrs = mail=user,userPassword=password,uidNumber=userdb_uid,gidNumber=userdb_gid,homeDirectory=userdb_home,mailQuota=userdb_quota=maildir:igno\ re=Trash:storage pass_filter = (&(objectClass=mailAccount)(mail=%u)) default_pass_scheme = PLAIN ----- Thanks in advance, -- Katsu Yamamoto Marino Ltd., Yokohama, JAPAN

2 1

[Dovecot] need to limit imap/pop processes per user.. possible?
by Jordan Tardif 25 Jul '07

25 Jul '07

Is it possible to limit the imap/pop connections per user in dovecot? If so i couldnt find the option to do that. Thanks! -- Jordan Tardif DreamHost

2 2

[Dovecot] Fwd: SSL / TSL no advertise????
by Rob Buch 25 Jul '07

25 Jul '07

> > Hello, I am new to this list, and I wanted to bring up an issue > that I have been struggling with. ( Now that I have subscribed to > the correct list!) > > I want to enable SSL for our mail server that runs Dovecot and > Exim. I have been told that if SSL is enabled then it can break > Eudora mail clients before 6.2 ish. > > So, I was wondering if any one knows a way to turn SSL on , but > not advertise it as an option. Apparently the advertisement of SSL > for pop / imap connections causes this issue. > > Thank you all in advance. > > Current version of Dovecot is : 1.0.beta5 > > Exim Version is: exim-4.54-1 > > Rob Buch > Network administration > www.mcn.org > Now offering DSL service in the village of Mendocino - and beyond! > (707) 937-1444 X 103 > tech9(a)mcn.org > Mendocino Community Network > 10700 Ford St. Mendocino > Ca. 95460 > > >

2 1

[Dovecot] Dovecot for HP-UX
by Bandi, Uma (GE Indust, Plastics, consultant) 25 Jul '07

25 Jul '07

Hi I am trying to install Dovecot on HP-UX .I did ./configure but when I did make i am getting following error, please advice me what I have to do . uasng074@root# make No suffix list. make all-recursive No suffix list. Making all in src No suffix list. Making all in lib source='ioloop-epoll.c' object='ioloop-epoll.o' libtool=no \ DEPDIR=.deps depmode=hp /bin/sh ../../depcomp \ cc -DHAVE_CONFIG_H -I. -I. -I../.. -g -D_XOPEN_SOURCE_EXTENDED -c ioloop-epoll.c cc: "array.h", line 63: error 1588: "__inline_func_array_create_from_buffer_para m_2_buffer__" undefined. cc: "array.h", line 63: error 1531: Invalid member of struct or union. cc: "array.h", line 64: error 1588: "__inline_func_array_create_from_buffer_para m_3_element_size__" undefined. cc: "array.h", line 64: error 1531: Invalid member of struct or union. *** Error exit code 1 Stop. *** Error exit code 1 Stop. *** Error exit code 1 Stop. *** Error exit code 1 Stop.

2 1

[Dovecot] Possible to run two dovecot accessing same directory?
by Simon Gao 25 Jul '07

25 Jul '07

Hi, Just wonder if it's possible to run two dovecot servers on two different machines, but serve out of the same directories. I would like to test second dovecot server before switching from first one to second one. Any suggestions? Simon

2 1

Re: [Dovecot] Can't connect to auth server at default: Resource temporarily unavailable
by Sergey A. Kobzar 24 Jul '07

24 Jul '07

Hi bob, Tuesday, July 24, 2007, 2:30:24 PM, you wrote: > auth default { > mechanisms = plain login > userdb passwd { > args = blocking=yes ^^^^^^^^^^^^^^^^^^^ - try comment this. > } > passdb pam { > args = dovecot > } > user = dovecot-auth > } http://wiki.dovecot.org/WhyDoesItNotWork >> But 'dovecot -n' will be more useful. > dovecot doesn't seem to like "-n" It must work. # "dovecot -n" command gives a clean output of the changed settings. Use it # instead of copy&pasting this file when posting to the Dovecot mailing list. >> Which service do you use to authenticate users? > saslauthd from cyrus Sorry, I don't use it, but I think the problem is there. -- Sergey

4 7

[Dovecot] Sieve Vacation Auto-Reply Exclusions
by Bruce Bodger 24 Jul '07

24 Jul '07

The Dovecot Wiki is quite clear regarding its vacation auto-reply mechanism http://wiki.dovecot.org/LDA/Sieve and under what circumstances the automatic replies will NOT be sent. However, is it possible to manually add a list of envelope senders that the script will not respond to? Thank you, B. Bodger

2 1

[Dovecot] Can't connect to auth server at default: Resource temporarily unavailable
by bob passendon 24 Jul '07

24 Jul '07

Hello! What do the following messages mean? Jul 24 13:07:20 box dovecot: pop3-login: Can't connect to auth server at default: Resource temporarily unavailable Jul 24 13:07:20 box dovecot: imap-login: Can't connect to auth server at default: Resource temporarily unavailable Jul 24 13:07:20 box dovecot: pop3-login: Can't connect to auth server at default: Resource temporarily unavailable Jul 24 13:07:22 box dovecot: imap-login: Can't connect to auth server at default: Resource temporarily unavailable Jul 24 13:07:25 box dovecot: pop3-login: Can't connect to auth server at default: Resource temporarily unavailable I am running 1.0.beta3-3ubuntu5.5 on Ubuntu Dapper LTS. Thanks.

2 1

[Dovecot] Shared folder
by Jon Essen-Moller 24 Jul '07

24 Jul '07

Hi, I wish to setup a shared folder where everyone can read and copy. How does that work? Does each user get their own index file to determine weather a mail i read or not? can users move or copy mail? Thanks in advance Best regards - Jon

6 20

Re: [Dovecot] Ideas for Webmail/OTP
by Joakim Ryden 23 Jul '07

23 Jul '07

On Mon, July 23, 2007 10:54 am, Phillip T. George wrote: [...] > Oh...also his post did include "/OTP", which unless I'm mistaken, than means Off-Topic Post ..so it doesn't really matter if it had to do with Dovecot or not, right? :) :-) I believe he was referring to One Time Passwords. --Jo

2 1

[Dovecot] Dovecot using more than one NIC
by Andrew Petrushanco 23 Jul '07

23 Jul '07

I'm am trying to run dovecot on a Fedora 6 Install with multiple IP's but Dovecot (POP3) seems to only function correctly on the 1st NIC/IP. It seems to be responding OK if you telnet to the 2nd or 3rd IPs, but Email clients timeout. >From dovecot.conf protocol pop3 { listen = *:110 } Any suggestions please? Andrew

2 1

[Dovecot] Dovecot don't compile
by Sam Przyswa 22 Jul '07

22 Jul '07

Hi, I try to compile Dovecot with the *Ubuntu* patched sources but I got this error during the compilation: ./.libs/libsieve.a(script.o): In function `sieve_script_parse': /src/dovecot-1.0.rc17/dovecot-sieve/src/libsieve/script.c:140: undefined reference to `yylineno' ./.libs/libsieve.a(sieve.o): In function `sieveerror': /src/dovecot-1.0.rc17/dovecot-sieve/src/libsieve/sieve.y:568: undefined reference to `yylineno' I have bison-1.35, tried with flex but it's the same !? I would like to apply the ManageSieve server patch (http://dovecot.org/list/dovecot/2007-March/021130.html) I already send this mail on the Ubuntu list but don't got a reply. Thanks in advance for your help. Sam. -- Ce message a été vérifié par MailScanner pour des virus ou des polluriels et rien de suspect n'a été trouvé.

1 0

[Dovecot] Sieve server in python
by Sam Przyswa 22 Jul '07

22 Jul '07

Hi, I'm testing Dovecot to migrate from my old Courier IMAP/POP server. It work fine but I have some problems to start the sieve server "pysieved" from Neale Pickett in PAM auth, I got the message: Traceback (most recent call last): File "/usr/share/pysieved/pysieved.py", line 97, in <module> main() File "/usr/share/pysieved/pysieved.py", line 60, in main None, None, True) File "/usr/share/pysieved/auth/pam.py", line 22, in <module> import PAM ImportError: No module named PAM What's wrong ? Thanks in advance for your help. Sam. -- Ce message a été vérifié par MailScanner pour des virus ou des polluriels et rien de suspect n'a été trouvé.

4 4

[Dovecot] v1.1.alpha1 released
by Timo Sirainen 21 Jul '07

21 Jul '07

http://dovecot.org/releases/1.1/alpha/dovecot-1.1.alpha1.tar.gz http://dovecot.org/releases/1.1/alpha/dovecot-1.1.alpha1.tar.gz.sig This is the first alpha release of Dovecot v1.1. I hope that it stabilizes into final release within a few months. There are a lot of new features since v1.0. The most important ones are listed at the end of this post. This is the only v1.1.alpha announcement I send to dovecot-news list (or to www.dovecot.org news). The next one probably will be v1.1.rc1. I've been stress testing the code a lot and I've also been using it myself for almost a year, so I think this release should actually be quite stable and usable. But since I haven't tested everything, there might be some crashes and misbehaving commands. So this release should now have all the major features that I intend to add to v1.1 (except for dbox rewrite, see below). Some smaller features will still be added. The rest of the major features in my previous v1.1 list will go to v1.2. While v1.1 is getting stabilized I'm beginning to rewrite dbox code. Its code is isolated from the rest of Dovecot, so it can't destabilize anything else. Hopefully it will be ready before v1.1 release, although maybe still marked as experimental. Some of the features might not be considered quite ready yet: - Mailbox list indexes improve STATUS performance a lot (maybe 7x) when mailboxes haven't changed. Handling updates however is a lot slower than I'd want (2x with one client, more with multiple), so you may want to disable them with mailbox_list_index_disable=yes until the update performance gets better. - THREAD code is completely rewritten with support for incremental updates and index files. I tested it last year and it seemed OK, but I didn't dare try it now so I wouldn't have to delay this alpha if it was broken :) I'll do some more testing soon, but for now be careful with using v1.1 with webmails. - SORT code also uses indexes now, but it's a lot simpler so it probably works. - Squat indexes work and I'm using them myself, but they'll be rewritten for v1.2 with a new faster format. - Although Dovecot now flushes NFS attribute/data caches when needed, I'm not sure if it's done in all the necessary places. - I don't remember if I've tested expire plugin at all. So, the largest changes I've added to NEWS file (which BTW won't contain changes between alphas/betas/rcs, those will be only in my mailing list posts): * After Dovecot v1.1 has modified index or dovecot-uidlist files, they can't be opened anymore with Dovecot versions earlier than v1.0.2. * Empty passwords in passdb doesn't allow user to log in with any password anymore. To do that you'll also need to set nopassword extra field. + IMAP: Added support for UIDPLUS and LIST-EXTENDED extensions. + IMAP SORT: Sort keys are indexed, which makes SORT commands faster. + IMAP THREAD: Threads are indexed into a dovecot.index.thread file. It can usually be updated incrementally, so this makes THREAD fast. + Added Dovecot-specific X-REFERENCES2 threading algorithm. It's similar to REFERENCES, but it doesn't do base subject merging and it sorts the threads by their newest message. + When saving messages, update cache file immediately with the data that we expect client to fetch later. Maildir-only currently. + NFS attribute and data caches are are flushed whenever needed. See mail_nfs_storage and mail_nfs_index settings. + Mailbox list indexes. Mailbox metadata is stored there, so STATUS commands can return synchronized mailboxes' metadata simply by reading a single mailbox list index file. Currently works only with Maildir++ layout. + Out of order command execution (SEARCH, FETCH, LIST), nonstandard command cancellation (X-CANCEL <tag>) + Expire plugin can be used to keep track of oldest messages in specific mailboxes. A nightly run can then quickly expunge old messages from the mailboxes that have them. The tracking is done using lib-dict, so you can use either Berkeley DB or SQL database. + Namespaces are supported everywhere now. + Full text search indexing support with Lucene and Squat backends. + OTP and S/KEY authentication mechanisms (by Andrey Panin). + mbox and Maildir works with both Maildir++ and FS layouts. You can change these by appending :LAYOUT=maildir++ or :LAYOUT=fs to mail_location. + LDAP: Support templates in pass_attrs and user_attrs + Support for listening in multiple IPs/ports. + Quota plugin rewrite: Support for multiple quota roots, warnings, allow giving storage size in bytes or kilo/mega/giga/terabytes, per-mailbox quota rules.

9 22

[Dovecot] PLAIN.B64 Password Scheme Patch Missing in Dovecot 1.0.2
by imacat 21 Jul '07

21 Jul '07

Dear all, Hi. This is imacat from Taiwan. I've just downloaded the newly-released Dovecot 1.0.2, but found that the PLAIN.B64 password scheme patch seems to be missing. http://www.dovecot.org/list/dovecot/2007-May/022610.html Is there any reason for this? Thank you very much. -- Best regards, imacat ^_*' <imacat(a)mail.imacat.idv.tw> PGP Key: http://www.imacat.idv.tw/me/pgpkey.asc <<Woman's Voice>> News: http://www.wov.idv.tw/ Tavern IMACAT's: http://www.imacat.idv.tw/ TLUG List Manager: http://lists.linux.org.tw/cgi-bin/mailman/listinfo/tlug

2 2

[Dovecot] Slower than Courier-IMAP
by Nejc Škoberne 20 Jul '07

20 Jul '07

Hello, I have been running Courier-IMAP for while now, and I decided that I'd like to try Dovecot. This paper: http://student.iu.hio.no/~s132278/reports/disney_imap_maildir.pdf says that the performances are somewhat comparable, but my Dovecot "feels" slower than Courier-IMAP. I am using Maildirs and I have substantial amounts of emails in them. For example one of the folder has 26000 messages and to display a message it takes 6-7 seconds. Before it took only 2-3 seconds to display a message (in Thunderbird). I have tried to turn "fsync_disable" to yes, but the feeling is somewhat the same. What else can I try to tune? It's a FreeBSD 6.2 machine on a HP ProLiant ML350 with 2GB RAM and 120GB SATA disk and the Dovecot running in a FreeBSD jail. You can find my dovecot.conf here: http://pastebin.ca/627442 Thanks, Nejc

2 1

[Dovecot] Quota warning patch and config parsing in 1.0.2
by Doug Council 20 Jul '07

20 Jul '07

Dovecot 1.0.2 patches and compiles fine with the quota warning patch (http://www.dovecot.org/patches/quota-warning.patch) But, when parsing the configuration file , deliver now seems to strip all of the spaces in the QUOTA_WARNING environment variable, generating an error. This is the plugin{} section from my dovecot.conf: plugin { quota = maildir:storage=20480 quota_warning = storage=10% /usr/local/bin/quota-warning } And this is the error Dovecot generates for anyone with a quota: quota warning: No command specified: storage=10/usr/local/bin/quota-warning Doing a diff on src/deliver/deliver.c between 1.0.1 and 1.0.2 show some changes to how the config file is parsed, but nothing I can find that would cause the spaces to get stripped out of the configuration value. Has anyone successfully used the quota warning patch with 1.0.2? Thanks, -Doug

4 5

[Dovecot] telnet connection refused
by Neil Robins 20 Jul '07

20 Jul '07

I'm running Dovecot 1.0 with Postfix and Amavisd-new on FreeBSD 2.6-RELEASE. Mail was working OK until I put a new mailbox on but then it stopped. Dovecot appears to be running but it doesn't show up in "Top" nor when I run "ps -aucx". I also can't telnet to it on port 110 either at localhost or at the mail server (Connection refused). Can telnet to port 25 (Postfix) no problem. Any suggestions very much appreciated. I know this is an imap group but it's the only Dovecot group I could find. Thanks,

1 0

[Dovecot] fine-grained user authentication support
by Adam Jacob Muller 20 Jul '07

20 Jul '07

Hi, I'm wondering if it's possible to have some users restricted to only login via POP3 or only IMAP (likewise for IMAPS/POP3S). Returning a particular field with the userdb sql query (protocols=imaps did not work), perhaps setting up a different passdb? Is this possible with dovecot? -Adam

2 3

[Dovecot] errmsg question
by Stewart Dean 19 Jul '07

19 Jul '07

Am seeing: > Jul 19 14:59:19 mercury mail:err|error dovecot: IMAP(jab): dotlock /var/spool/mail/jab.lock was immediately delet > ed under us > Jul 19 14:59:19 mercury mail:err|error dovecot: IMAP(jab): file_lock_dotlock() failed with mbox file /var/spool/m > ail/jab: No such file or directory what does it mean, what should I be doing to alleviate or troubleshoot the problem? -- ==== Stewart Dean, Unix System Admin, Henderson Computer Resources Center of Bard College, Annandale-on-Hudson, New York 12504 sdean(a)bard.edu voice: 845-758-7475, fax: 845-758-7035

2 1

[Dovecot] sluggish updating of gnome mail-notification?
by Greg Troxel 19 Jul '07

19 Jul '07

Sorry if this is a repeat query. I am running dovecot 1.0.2 under NetBSD/i386 (3.1 and 4.0ish). I use maildirs, and deliver into them with procmail. For clients I use Gnus (CVS head) mostly and thunderbird, and also the gnome mail-notification status applet (4.0). Gnus fixed a bug in the last few months where exiting a group didn't unselect the folder and thus didn't necessarily push read marks back. Mostly everything works perfectly. When new mail arrives, thunderbird shows it as new/unread, gnus will find it with 'g', and mail-notification shows it as well. After reading it in gnus, when I exit the group (which pushes read marks to the IMAP server), thunderbird usually shows the message as read immediately, but often mail-notification waits for a while (up to about a minute) before withdrawing the new-mail notification. I just tried this and thunderbird was also slow in showing the mail read. marking the message read in thunderbird caused mail-notification to show the message as read, but with a 30s lag. mail-notification is supposed to use IDLE if available. Sometimes it withdraws new-mail claims at the right time. I know that I need to turn on debugging and trace all this. So I'm really just asking if anyone else has seen this or similar behavior.

2 1

[Dovecot] Performance question
by Stewart Dean 19 Jul '07

19 Jul '07

I now have Dovecot in production and things are apparently trouble-free. The one known problem is that initial client inbox load can take 30 seconds - 2 minutes. For instance: 'I got fed up waiting and went and got coffee'...this with a 3MB mbox inbox...and my mail server is a substantial machine consuming 25% CPU just for this person's IMAP session. I realize that a certain amount of performance piggishness is inevitable with large mbox inboxes (the prize goes to the user with a 500MB inbox). Eventually, I plan to move to maildir format, but for now I'm here. Also, we have legacy requirement for procmail, so I can't currently use deliver. Questions: 1) Any tuning I can do to improve this? 2) Any metrics, troubleshooting I should be doing to better characterize the problem? -- ==== Stewart Dean, Unix System Admin, Henderson Computer Resources Center of Bard College, Annandale-on-Hudson, New York 12504 sdean(a)bard.edu voice: 845-758-7475, fax: 845-758-7035

3 2

[Dovecot] avoiding getting maildir cur/ folder contents?
by Johannes Berg 19 Jul '07

19 Jul '07

Hi, On my server with many mails in one folder and slow IO, getting the mail listing in the cur/ folder is becoming a serious bottleneck. Dovecot is the only thing accessing the mail folders, so would there be any way to avoid getting a listing all the time? johannes

3 8

[Dovecot] Small problem with src/lib/mountpoint.c [now with patch attached!]
by Mike Brudenell 19 Jul '07

19 Jul '07

Greetings - [SIGH: I hit the "Send" button instead of "Attach". Here's Take 2...] Whilst playing with getting quotas from NFS-mounted filestores I've just discovered a slight problem with src/lib/mountpoint.c I had things working on a Solaris 10 test machine which had the mailstore mounted 'normally' using an entry in /etc/vfstab. However when I changed to use the automounter for the mailstore obtaining the quota broke. The problem lies with mountpoint_get(). On a 'normally' mounted filestore this obtains the device_path of the remote filestore in the form remoteservername.some.domain:/remote/path However when the mailstore was automounted I was instead getting back auto_direct which is the name of the automounter map we're using. The /etc/mnttab file has TWO entries for the auto-mounted filestore, like this: auto_direct /mailstore/messages/p autofs direct,ignore,dev=4740014 1184648400 crypt2.york.ac.uk:/vol/vol9/p /mailstore/messages/p nfs proto=tcp,xattr,dev=4700386 1184668792 Although there are two entries they have different device numbers. The mountpoint_get() function attempts to guard against this by checking the device number obtained matches that of the path being located. However for some reason I don't understand when getmntent() returns the FIRST of the above two entries it supplies the device number of the SECOND. Thus the device numbers match in the mountpoint_get() test and it thinks it has found the correct entry. This leads to the device_path being set to the map name -- auto_direct -- instead of the host:/path My fix is to add an additional fstype for the test to ignore: "autofs". The loop skips over any such mounts (along with the existing tests for "swap" and "ignore"). I'm attaching my minimal patch in case it's of help to anyone else. (Timo: would it be possible to get this added into the distribution code if you agree it's right?) Cheers, Mike Brudenell -- The Computing Service, University of York, Heslington, York Yo10 5DD, UK Tel:+44-1904-433811 FAX:+44-1904-433740 * Unsolicited commercial e-mail is NOT welcome at this e-mail address. *

2 5

[Dovecot] Shared folders and LDAP?
by Gavin Henry 19 Jul '07

19 Jul '07

Dear All, Is it possible to store shared folder lists in an LDAP Directory along with your virtual users? Will check the wiki too. Thanks, Gavin. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/

2 4

[Dovecot] assertion failed
by Ralf Hildebrandt 19 Jul '07

19 Jul '07

I'm getting these in my log: Jul 17 11:40:42 postamt dovecot: imap-login: file ssl-proxy-openssl.c: line 460 (ssl_proxy_new): assertion failed: (fd != -1) Jul 17 11:40:42 postamt dovecot: child 26581 (login) killed with signal 6 Jul 17 11:51:12 postamt dovecot: imap-login: file ssl-proxy-openssl.c: line 460 (ssl_proxy_new): assertion failed: (fd != -1) Jul 17 11:51:12 postamt dovecot: child 24406 (login) killed with signal 6 This is dovecot-1.0.2 -- is this something to worry about? -- Ralf Hildebrandt (Ralf.Hildebrandt(a)charite.de) plonk(a)charite.de Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155 http://www.arschkrebs.de There are two ways to write error-free programs. Only the third one works.

2 4

[Dovecot] Integrating dovecot 1.01 into CentOS-3.8 systemw with chroot passwd dirs?
by Gary Goldberg 19 Jul '07

19 Jul '07

Hello. I'm administrating a CentOS 3.8 linux system (RHEL3) and I just replaced the imap-2002d-12 package that came with the system, with a dovecot 1.01 package I obtained through the dovecot home page. The problem I have, is that many of my POP3 users have jailed user accounts set up through wu-ftpd, where the dir field is of the form /home/group/./pop/user, and wu-ftpd chroots them from /home/group but then places them into their home directories, in this case /home/group/pop/user. dovecot can't seem to locate their mail directory. Can anyone offer any advice on this situation? Please respond to my email address <og at digimark.net> if you could. --- Here are some relevant stats: example user: lda01 home directory (in /etc/passwd: /home/lda/./pop/lda01 mail folder directory: /home/lda/pop/lda01/mail INBOX: /home/mail/lda01 (/var/mail, /var/spool/mail symlinked to /home/mail.) dovecot 1.01 output of dovecot -n: #1.0.1: /etc/dovecot.conf base_dir: /var/run/dovecot log_path: /var/log/dovecot.log protocols: imap imaps pop3 pop3s ssl_disable: yes ssl_cert_file: /usr/share/ssl/certs/dovecot.pem ssl_key_file: /usr/share/ssl/certs/dovecot.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_greeting: mail.digimark.net ready. valid_chroot_dirs: /var/mail:/var/spool/mail:/home/mail:/home mail_extra_groups: mail mail_location: mbox:~/mail:INBOX=/home/mail/%u mail_debug: yes mail_full_filesystem_access: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xv%08Xu auth default: passdb: driver: pam args: blocking=yes dovecot userdb: driver: passwd attempt to login using a Squirrelmail (webmail) client gave these entries in the dovecot.log error log: dovecot: Jul 12 16:22:50 Info: imap-login: Login: user=<lda01>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Jul 12 16:22:50 Info: IMAP(lda01): Effective uid=10572, gid=510, home=/pop/lda01 dovecot: Jul 12 16:22:50 Info: IMAP(lda01): mbox: data=/pop/lda01/mail:INBOX=/home/mail/lda01 dovecot: Jul 12 16:22:50 Info: IMAP(lda01): mbox: root=/pop/lda01/mail, index=/pop/lda01/mail, inbox=/home/mail/lda01 dovecot: Jul 12 16:23:04 Error: IMAP(lda01): open(/home/mail/lda01, O_CREAT) failed: No such file or directory dovecot: Jul 12 16:23:04 Error: IMAP(lda01): access() failed with mbox file /home/mail/lda01: No such file or directory dovecot: Jul 12 16:23:04 Error: IMAP(lda01): stat() failed with mbox file /home/mail/lda01: No such file or directory dovecot: Jul 12 16:23:58 Info: IMAP(lda01): Disconnected: Logged out -- -- "Outside of a dog, a book is a man's best friend. -- Inside of a dog, it is too dark to read." -- Groucho Marx. Gary Goldberg KA3ZYW <og(a)digimark.net> V:301/249-6501 F:301/390-1955 AIM:OgGreeb Digital Marketing/Bowie MD/Systems & Networks Consult <http://www.digimark.net/>

3 7

[Dovecot] production switchover questions
by Stewart Dean 19 Jul '07

19 Jul '07

So far so good...other than a my-bad fubar with the permission on the index directory that kept DC from creating index dirs for the entering-for-the-first-time users, quickly noticed (thanks to the excellent logging) and corrected. Some questions 1) the max_mail_processes parm in dovecot.conf...is that *all* processes owned by dovecot? 2) I thought there was a parm to limit how many processes each user can have, but can't seem to find it. Is there any way to control that? -- ==== Stewart Dean, Unix System Admin, Henderson Computer Resources Center of Bard College, Annandale-on-Hudson, New York 12504 sdean(a)bard.edu voice: 845-758-7475, fax: 845-758-7035

2 1

[Dovecot] deleting maildir files
by Tom Bombadil 18 Jul '07

18 Jul '07

Greetings all... Can we delete maildir files directly from the file system? Basically, we use dovecot to train spam, and we want to delete messages that are older than 30 days, using a simple "find /maildirs -cname +30 -name *imap-server* -exec rm {} \;" I have seen a post a while ago saying that dovecot can rebuild the indexes, but I don't remember if it's when the index is deleted or when the maildir files are deleted. And if we cannot delete files with the 'rm' command, whats the best/proper way to delete these older files. Thanks

8 16

[Dovecot] A little OT but hopefully still related enough... Maildir Delivered mail naming problems.
by Jesse C. Smillie 18 Jul '07

18 Jul '07

Normally I wouldn't post off topic to a mailing list, but I have posted every where else I can think of and haven't had any success yet working this out. I know there has to be a few people here with extensive knowledge of how mail works and maybe just a tip in the right direction would help me out at this point. I have migrated from mbox format to Maildir format in the last week. I used the utility mb2md.pl to convert all of our existing emails from one system to the next. I then modified my /etc/procmailrc file by putting this at the top: MAILDIR=$HOME/Maildir DEFAULT=$MAILDIR/ This way procmail is forced to deliver to the new format as well. For the most part all of this is working perfectly. Procmail is delivering emails to their new proper folder and even extended rules in users own ~/.procmailrc are working well once the folder path was changed from $MAILDIR/whatever to $MAILDIR/.whatever/. Works great. I am using Dovecot 1.0.1 to deliver our email through the IMAP protocol and with the clients we support (Thunderbird and Outlook) things are working very well for us. So now to my problem. We also use Usermin for our users to access their email when they don't have a supported client available to them. When users look at their email with Usermin their emails are out of order regardless of weather I have Usermin's "Read Mail" module using IMAP to get mail or have it read the users Maildir directly. Sorts are just all jacked up. Sometimes if users then click the "Date" button to sort by date it snaps to; sometimes it don't. I currently have multiple posts on the Webmin/Usermin mailing list about this problem and it really seems to point back to the naming scheme of our emails now. All emails which were converted have the classic maildir format. UnixTime.PID.Server... 1183737827.002379.mbox:2,RS 1183737827.002388.mbox:2,RS 1183737827.002392.mbox:2,RSa 1183737827.002394.mbox:2,RS However, all the email that is delivered after the fact is different. They all look like this: _oTH.XqwlGB.gator:2,RS _p2F.qjVlGB.gator:2,RS _qQF.2mpjGB.gator:2,Sa _sK.8mTlGB.gator:2,RSa _uOG.gCtjGB.gator:2,RS _uxG.a6lkGB.gator:2,RS _vnF.n-2lGB.gator:2, _x9H.llckGB.gator:2, _z3G.k8klGB.gator:2,S _z5G.kAilGB.gator:2,RS I have been searching the net for a few hours and reading various documentation here and there and I haven't been able to find anything that tells me why my mail is being named this way or how to fix it. I can say that my test box which also runs 10.2 slamd also delivers this exact same way.... For the most part I'm being told that the reason why Usermin's sort is all screwed up (order wise) in IMAP mode is that messages are displayed in the order that the IMAP server reports them. Like wise in Maildir mode the order which they are read. I can understand why this naming stuff throws everything off at this point. What I don't understand is why its doing this. I mean I'm pretty sure there is nothing here out of the ordinary as far as my config. I have searched all over the net the last few days and haven't been able to find anything useful. So in wrap up sorry for being a little OT and thanks a head of time for any info or light anyone can share here. -Jesse Smillie

2 2

[Dovecot] some mail reappears or marked as read again
by Herbert Gasiorowski 17 Jul '07

17 Jul '07

Sometimes a mail - already read or moved into another folder - appears again in the INBOX. I was not quite sure about this but today is once close the mail client (thunderbird 2.0.0.4 on fedora 7) and the only mail in the inbox was mark as unread. I think it happens in other mailboxes too. But it might be a client problem as I changed to dovecot and thunderbird 2 (from 1.5) nearly at the same time - but i think it happens before with thunderbird 1.5 too). In the logs there is nothing but some logins/logout. (the "dovecot -n" is attached) # 1.0.1: /etc/dovecot.conf syslog_facility: local6 protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/pki/dovecot/certs/dovecot2.pem ssl_key_file: /etc/pki/dovecot/private/dovecot2.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 pop3_uidl_format: %08Xu%08Xv namespace: type: private separator: / location: mbox:~/Mail:INBOX=/var/spool/mailx/%u:INDEX=/export/dovecot/%u inbox: yes namespace: type: private separator: / prefix: FB12/home-temp/ location: mbox:~:INDEX=/export/dovecot/%u namespace: type: shared separator: / prefix: FB12/ location: mbox:/export/mailfb12:INDEX=/export/dovecot/%u auth default: passdb: driver: pam args: imap userdb: driver: passwd

1 1

[Dovecot] Small problem with src/lib/mountpoint.c
by Mike Brudenell 17 Jul '07

17 Jul '07

Greetings - Whilst playing with getting quotas from NFS-mounted filestores I've just discovered a slight problem with src/lib/mountpoint.c I had things working on a Solaris 10 test machine which had the mailstore mounted 'normally' using an entry in /etc/vfstab. However when I changed to use the automounter for the mailstore obtaining the quota broke. The problem lies with mountpoint_get(). On a 'normally' mounted filestore this obtains the device_path of the remote filestore in the form remoteservername.some.domain:/remote/path However when the mailstore was automounted I was instead getting back auto_direct which is the name of the automounter map we're using. The /etc/mnttab file has TWO entries for the auto-mounted filestore, like this: auto_direct /mailstore/messages/p autofs direct,ignore,dev=4740014 1184648400 crypt2.york.ac.uk:/vol/vol9/p /mailstore/messages/p nfs proto=tcp,xattr,dev=4700386 1184668792 Although there are two entries they have different device numbers. The mountpoint_get() function attempts to guard against this by checking the device number obtained matches that of the path being located. However for some reason I don't understand when getmntent() returns the FIRST of the above two entries it supplies the device number of the SECOND. Thus the device numbers match in the mountpoint_get() test and it thinks it has found the correct entry. This leads to the device_path being set to the map name -- auto_direct -- instead of the host:/path My fix is to add an additional fstype for the test to ignore: "autofs". The loop skips over any such mounts (along with the existing tests for "swap" and "ignore"). I'm attaching my minimal patch in case it's of help to anyone else. (Timo: would it be possible to get this added into the distribution code if you agree it's right?) Cheers, Mike Brudenell -- The Computing Service, University of York, Heslington, York Yo10 5DD, UK Tel:+44-1904-433811 FAX:+44-1904-433740 * Unsolicited commercial e-mail is NOT welcome at this e-mail address. *

1 0

[Dovecot] Problem with Dovecot SASL in Postfix
by Chris McMacken 16 Jul '07

16 Jul '07

Ok lets try this again... I'm trying to configure my postfix server to use Dovecot as an SASL server and running into some problems. My server supports a couple of domain, I have multiple user/password files for multiple domains to make the files a little easier to manage. Not sure if this question should belong in the dovecot mailing list or the postfix one, but here goes anyway. I have everything configured to use CRAM-MD5 authentication, including my mail client. Here is the Dovecot -n output: mail# dovecot -n # /usr/local/etc/dovecot.conf log_path: /var/log/dovecot info_log_path: /var/log/dovecot.info protocols: imap pop3 ssl_disable: yes disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login verbose_proctitle: yes first_valid_gid: 0 mail_extra_groups: mail mail_location: maildir:/home/vmail/%d/%n mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): outlook-idle pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain cram-md5 passdb: driver: passwd-file args: /usr/local/etc/dovecot/%d/passwd userdb: driver: passwd-file args: /usr/local/etc/dovecot/%d/passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: heres a sample line from one of the passwd files: chrism:{CRAM-MD5}a67a65704086a046b3f875d1eaac8cb5c6fd13406507fead30d9bcb1bf… and to login through SASL I am trying to use the username chrism(a)example.com when I use the full email address like this to login like this I get this output into my postfix log: Jul 10 18:46:59 mail postfix/smtpd[57343]: connect from unknown[12.244.148.123] Jul 10 18:46:59 mail postfix/smtpd[57343]: NOQUEUE: reject: RCPT from unknown[12.244.148.123]: 554 5.7.1 <chrism(a)gmail.com>: Relay access denied; from=<chrism(a)example.com> to=<chrism(a)gmail.com> proto=ESMTP helo=<[192.168.1.14]> Jul 10 18:47:00 mail postfix/smtpd[57343]: disconnect from unknown[12.244.148.123] (not actually using example.com but I changed it here) heres my smtpd_recipient_restricitons from postconf smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination, permit_sasl_authenticated so when I use the full user name (chrism(a)example.com) it doesn't appear to even attempt logging into the sasl server. If I change it to simply chrism, heres the output: Jul 10 18:50:36 mail postfix/smtpd[57356]: connect from unknown[12.244.148.123] Jul 10 18:50:38 mail postfix/smtpd[57356]: warning: unknown[12.244.148.123]: SASL CRAM-MD5 authentication failed: PDI3NjU4MTE4NDExMTQzN0BtYWlsPg== Jul 10 18:50:39 mail postfix/smtpd[57356]: lost connection after AUTH from unknown[12.244.148.123] Jul 10 18:50:39 mail postfix/smtpd[57356]: disconnect from unknown[12.244.148.123] if I put my user name in as chrism and don't add the @example.com it tried to login but it can't login. anyone have any ideas?

2 2

[Dovecot] Can't compile mbox-snarf-plugin.c on AIX 5.3
by Adnan Vatandas 16 Jul '07

16 Jul '07

Hello everyone, I tried to compile the mbox-snarf-plugin.c (downloaded today, so I assume it's the most recent version available) on AIX 5.3 with gcc 4.0. Building Dovecot 1.0.1 and 1.0.2 works fine. [root@aix root]# export DOVECOT=/root/dovecot-1.0.1 [root@aix root]# gcc -fPIC -shared -Wall -I$DOVECOT -I$DOVECOT/src/lib -I$DOVECOT/src/lib-storage -I$DOVECOT/src/lib-mail -I $DOVECOT/src/lib-imap -DHAVE_CONFIG_H mbox-snarf-plugin.c -o mbox_snarf_plugin.so ld: 0711-317 ERROR: Undefined symbol: .mailbox_sync_init ld: 0711-317 ERROR: Undefined symbol: .mailbox_sync_next ld: 0711-317 ERROR: Undefined symbol: .mailbox_sync_deinit ld: 0711-317 ERROR: Undefined symbol: .mailbox_transaction_begin ld: 0711-317 ERROR: Undefined symbol: .mailbox_search_init ld: 0711-317 ERROR: Undefined symbol: .mail_alloc ld: 0711-317 ERROR: Undefined symbol: .mailbox_copy ld: 0711-317 ERROR: Undefined symbol: .mail_expunge ld: 0711-317 ERROR: Undefined symbol: .mailbox_search_next ld: 0711-317 ERROR: Undefined symbol: .mail_free ld: 0711-317 ERROR: Undefined symbol: .mailbox_search_deinit ld: 0711-317 ERROR: Undefined symbol: .mailbox_transaction_rollback ld: 0711-317 ERROR: Undefined symbol: .mailbox_transaction_commit ld: 0711-317 ERROR: Undefined symbol: .mailbox_open ld: 0711-317 ERROR: Undefined symbol: .buffer_append_zero ld: 0711-317 ERROR: Undefined symbol: .buffer_get_space_unsafe ld: 0711-317 ERROR: Undefined symbol: .mailbox_close ld: 0711-317 ERROR: Undefined symbol: .mail_storage_set_critical ld: 0711-317 ERROR: Undefined symbol: .buffer_write ld: 0711-317 ERROR: Undefined symbol: .home_expand ld: 0711-317 ERROR: Undefined symbol: .p_strdup ld: 0711-317 ERROR: Undefined symbol: mail_storage_module_id ld: 0711-317 ERROR: Undefined symbol: hook_mail_storage_created ld: 0711-345 Use the -bloadmap or -bnoquiet option to obtain more information. collect2: ld returned 8 exit status [root@aix root]# Does this plugin work with Dovecot > 1.0 at all, is this a know bug or are there any users who managed to install it successfully on AIX? Sincerely Adnan

1 0

[Dovecot] Dict-server mysql module error
by Gabriele Fergola 16 Jul '07

16 Jul '07

hi all when i setup plugin quota by quota = dict: mysql:/etc/quota-dict.conf i get the folowing error: deliver(zzzz(a)zzzz.zz): Unknown dict module: mysql deliver(zzzz(a)zzz.zz): dict quota: dict_init() failed quota-dict.conf: connect = host=localhost dbname=zzzz user=zzzz password=zzzz table = mailbox select_field = quota where_field = maildir username_field = username dovecot.conf: # 1.0.2: /etc/dovecot//dovecot.conf base_dir: /var/run/dovecot/ protocols: imap pop3 imaps pop3s ssl_disable: yes disable_plaintext_auth: no shutdown_clients: no login_dir: /var/run/dovecot//login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login first_valid_uid: 5000 mail_location: maildir:/mbox/%d/%u/Maildir mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv auth default: passdb: driver: pam passdb: driver: sql args: /etc/dovecot-sql.conf userdb: driver: passwd userdb: driver: sql args: /etc/dovecot-sql.conf socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: mail plugin: quota: dict:storage=10240:messages=1000 mysql:/etc/dovecot-dict-quota.conf quota_warning: storage=80% /usr/local/bin/quota_warning.sh 80 dict: quota: mysql:/etc/dovecot-dict-quota.conf i applied the patch for quota warning message by nicolas. thank you in advance Workino

2 1

[Dovecot] Getting quotas from an NFS-mounted filestore
by Mike Brudenell 16 Jul '07

16 Jul '07

Greetings - I was just wondering what the state of play was with regard to reading filestore-based quotas when the mailstore is NFS-mounted? Timo mentioned a little while ago that he'd be including it: http://www.dovecot.org/list/dovecot/2007-May/022594.html However it isn't in 1.0.1 and isn't mentioned in the release notes for 1.0.2. Is it going to be a 1.1 feature or will it appear before then? I'm asking because although I can't get the rquota-rquotad patch to build on Solaris I have found some code on the net which does do RPC based quota lookups. I'm toying with the idea of trying to modify rquota-rquotad to use this other code. However this is out of my area of knowledge so it will be an uphill battle ... so if reading quotas from NFS-mounted filestores will be coming Real Soon Now I'll probably just wait instead. So any ideas as to timescales, please? Cheers, Mike B-) -- The Computing Service, University of York, Heslington, York Yo10 5DD, UK Tel:+44-1904-433811 FAX:+44-1904-433740 * Unsolicited commercial e-mail is NOT welcome at this e-mail address. *

1 0

[Dovecot] Dict-Server
by Gabriele Fergola 16 Jul '07

16 Jul '07

Hi, i try to use dict server but i recive this error: net_connect_unix(/usr/local/var/run/dovecot/dict-server) failed: Permission denied net_connect_unix(/usr/local/var/run/dovecot/dict-server) failed: Permission denied because i have dict-server in /var/run and not in /usr/local/var/run ..... Thank you in advance Workino

1 0

[Dovecot] quota warning - take 2
by Nicolas Boullis 16 Jul '07

16 Jul '07

Hi, About one month ago, I sent a patch to this list to implement warnings when a user is close to reach his quota. I tried to follow Timo's advice to improve my code, and here (at last) is a new patch. Things I did not fix: - This patch is still for dovecot 1.0, as I will need warnings with dovecot 1.0. I may rewrite it for CVS HEAD in the future but can't promise. - I'm still using system() rather than fork()+exec()+waitpid() since I don't know a good time to run waitpid(). Comments are welcome. Timo, will you consider to add this to your unofficial patches? Cheers, Nicolas Boullis

3 5

[Dovecot] v1.0.2 released
by Timo Sirainen 15 Jul '07

15 Jul '07

http://dovecot.org/releases/dovecot-1.0.2.tar.gz http://dovecot.org/releases/dovecot-1.0.2.tar.gz.sig Fixes several bugs. This release also adds compatibility with upcoming Dovecot v1.1 so it'll be possible to upgrade to v1.1 and back to v1.0.2 without anything breaking. * dbox isn't built anymore by default. It will be redesigned so it shouldn't be used. + Maildir: Support reading dovecot-uidlist (v3) files created by Dovecot v1.1. - Maildir: "UIDVALIDITY changed" errors could happen with newly created mailboxes - If "INBOX." namespace was used, LIST returned it with \HasNoChildren which caused some clients not to show any other mailboxes. - Maildir++ quota: If multiple processes were updating maildirsize at the same time, we failed with "Unknown error". - IMAP: IDLE didn't actually disconnect client after 30 minutes of inactivity. - LDAP passdb/userdb was leaking memory - deliver: %variables in plugin {} weren't expanded - deliver: Don't bounce the mail if Sieve plugin returns failure

2 2

[Dovecot] INBOX empty
by Mohamed Navas 15 Jul '07

15 Jul '07

Hi list, We have been using the mail server with postfix and dovecot IMAP. This is the second time we are facing the problem of inbox of some users are completely empty. Pls advice anyway to recover and to rectify the problem for such threat in future. Thanks, M.Navas Mob: +971 55 5973731

2 1

[Dovecot] How to stop POP clients from downloading mail after directory corruption
by Frank Church 15 Jul '07

15 Jul '07

Transferring my email from a Courier server, as well as some corruption in my dovecot installation caused all POP mails to be downloaded again. I surmised that the dovecot-uidlist file was not present in the first instance, and was probably out of sync in the second. Is there a way to do some reindexing and uid-list regeneration that can stop the problem from occurring? - Frank

2 1

[Dovecot] More Descriptive Logging Needed
by Joseph D. Wagner 15 Jul '07

15 Jul '07

(Everything herein refers to dovecot-1.0.1.) I'm sorry to say that I've been having troubles with dovecot. While attempting to troubleshoot them, I've found the existing logs to be lacking. In particular, I've had a lot of difficulty with the client<->server connection disconnecting, but the only message I get in the logs is "Disconnected". After dissecting the code a bit, I've found quite a number of places where the code will close the connection logging nothing more than the word "Disconnected", or worse, it will not specify a reason in which case the code in client_destroy() will log the default "Disconnected". Because of this, isolating the offending code has been a bit difficult. (I realize the problem may lie with the client, but I cannot even begin to program a work around until I isolate the exact place and cause of failure.) In an attempt to change the logging to be more descriptive myself, I already changed src/imap/cmd-fetch.c:85 on my own copy of dovecot from: client_disconnect(cmd->client, "Disconnected"); to: client_disconnect(cmd->client, "Disconnected in FETCH"); This makes the logging both more descriptive and more in line with other parts of code, like src/imap/cmd-append.c:50 which already say: client_destroy(client, "Disconnected in APPEND"); As luck would have it, my problem was not in the FETCH command. I'm now looking at the client_read() function in src/imap-login/client.c:318-334. If I'm reading the code right, then "i_stream_read(client->input)" returning "-1" means that the socket/stream is already disconnected, right? In other words, some function attempted to read off of a socket/stream that was already closed, right? If so, shouldn't the client_read() function not have been called in the first place? Please let me know if I'm wrong. I've been banging my head against the wall trying to make sense of all the different code. Any assistance you can offer would be appreciated. Joseph D. Wagner

2 1

[Dovecot] problem with subscriptions file version 1.0.1
by Liz 13 Jul '07

13 Jul '07

Hello, I am currently working on a patch to add IMAPdir support to dovecot. (For those who do not know, IMAPdir is exactly like Maildir except that instead of having a folder .foo it would just be foo. The advantage is that the file system is slightly easier to search through without the dot in front of the folders.) The first thing I did was get the configuration file working for Maildir. So I know that the problem has nothing to do with the configuration file. Next I looked through the actual source code to find any place where a dot might be added to the beginning of a folder. It transpired that there is a constant, MAILDIR_FS_SEP_S, which is assigned the value ".". I deleted all the occurrences of this constant, compiled the source code again, and ran into a rather interesting problem. When I try to create a new folder through Thunderbird on a separate machine, the folder is not visible unless I restart Thunderbird. I checked on the machine acting as a server and the folder is created and the subscriptions file is updated, and the dot at the beginning is indeed absent. So I see no reason why this should not work. If I had deleted some of the constants that ought not have been deleted, the subscriptions file would not be readable at all and I would not be able to see the folder when Thunderbird restarts. If there were some sort of deadlock going on with the subscriptions file, one would think that it would not be caused by deleting the constants. I would have run into the problem before editing any of the source code. I know for fact that the only thing different about my source code and the code available for downloading is the deleted constants. If anyone has any ideas, please let me know. If you need more information, please feel free to prompt me for it because I have no idea what might be useful that I have not already provided. Regards, Elizabeth Bermel

2 3

[Dovecot] telnet to dovecot not creating mbox
by Andy Fadich 13 Jul '07

13 Jul '07

Hi, Whenever I create a new email user, telnet fails until an email is sent to that user to create his mbox. This is the error that it gives. Anyone know how to fix this? I could create the email account script to touch the users mbox, but I havn't needed to do this in the past with ipop3d and dovecot on a different server. [root@mail log]# telnet localhost 110 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. +OK Dovecot ready. user testact +OK pass +OK Logged in. -ERR Internal error occurred. Refer to server log for more information. [2007-07-13 10:37:15] Connection closed by foreign host. Jul 13 10:33:43 mail dovecot: pop3-login: Login: user=<testact>, method=PLAIN, rip=::ffff:127.0.0.1, lip=::ffff:127.0.0.1, secured Jul 13 10:33:43 mail dovecot: POP3(testlol): open(/var/spool/mail/testact, O_CREAT) failed: Permission denied Jul 13 10:33:43 mail dovecot: POP3(testlol): access() failed with mbox file /var/spool/mail/testact: No such file or directory Jul 13 10:33:43 mail dovecot: POP3(testlol): stat() failed with mbox file /var/spool/mail/testact: No such file or directory Jul 13 10:33:43 mail dovecot: POP3(testlol): Couldn't init INBOX: Internal error occurred. Refer to server log for more information. [2007-07-13 10:33:43] Jul 13 10:33:43 mail dovecot: POP3(testlol): Mailbox init failed top=0/0, retr=0/0, del=0/0, size=0 Andy

3 2

[Dovecot] Today's hg pull doesn't compile
by Ralf Hildebrandt 13 Jul '07

13 Jul '07

I get: Making all in auth make[3]: Entering directory /usr/src/dovecot/src/auth' rm -f libpassword.a ar cru libpassword.a mycrypt.o password-scheme.o password-scheme-md5crypt.o password-scheme-otp.o password-scheme-rpa.o ranlib libpassword.a gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-sql -I../../src/lib-settings -I../../src/lib-ntlm -I../../src/lib-otp -DAUTH_MODULE_DIR=\""/usr/local/lib/dovecot/auth"\" -DPKG_LIBEXECDIR=\""/usr/local/libexec/dovecot"\" -std=gnu99 -fstack-protector -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -Wstrict-aliasing=2 -MT auth-request.o -MD -MP -MF .deps/auth-request.Tpo -c -o auth-request.o auth-request.c auth-request.c: In function ‘is_ip_in_network’: auth-request.c:874: error: ‘const union <anonymous>’ has no member named ‘ip6’ auth-request.c:875: error: ‘union <anonymous>’ has no member named ‘ip6’ make[3]: *** [auth-request.o] Error 1 make[3]: Leaving directory /usr/src/dovecot/src/auth' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory /usr/src/dovecot/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory /usr/src/dovecot' make: *** [all] Error 2 -- Ralf Hildebrandt (Ralf.Hildebrandt(a)charite.de) plonk(a)charite.de Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155 http://www.arschkrebs.de Any technology sufficiently advanced is indistinguishable from magic.

2 2

[Dovecot] Maildir and Windows NFS server
by Julian Jimenez 13 Jul '07

13 Jul '07

Hi, I want to migrate form Courier to Dovecot. The problem is that our NFS server is a Windows server. We use Debian stable (Etch) and maildir. With Courier, we need to compile from the source, changing the parameter MDIRSEP from ":" to ";", because Windows cannot handle files with this character in their name. Anyone knows the name of the parameter in Dovecot that I need to change to do the same? Thanks in advance. Julián

2 1

[Dovecot] Dovecot login failing
by Richard Ellis 13 Jul '07

13 Jul '07

Fedora 7 Dovecot version 1.0.1 Hi All, I've been using a combination of getmail/Dovecot/Squirrelmail for a while now and its all been fine. However, last week when trying to demonstrate how to use Squirrelmail to my wife, her login failed. I then tried mine, which I had used many times before and it also fails. Looking in the logs, Dovecot appears to be trying to add a domain name against the login, instead of just checking that user against the UNIX logins of my machine. I thought at first this was because when I'm away from home, I use a no-ip address to access my mailserver, but it also fails when I'm in the house, or even on the server console. dovecot: Jul 12 12:04:56 Info: imap-login: Aborted login: user=< rick(a)servehttp.com>, method=PLAIN, rip=::ffff:127.0.0.1, lip=::ffff: 127.0.0.1, secured dovecot: Jul 12 12:10:00 Info: pop3-login: Login: user=<rick>, method=PLAIN, rip=::ffff:127.0.0.1, lip=::ffff:127.0.0.1, secured Anybody any idea how to rectify this? I can't see an option in the /etc/dovecot.conf file to stop it and using auth_default_realm = doesn't seem to make any difference. If I telnet into dovecot using my local username and password, it works fine. Any advice would be most welcome before I break it fiddling. Thanks Rik -- The Truth is out there, does anyone have the URL?

5 5

[Dovecot] v1.0.2 release candidate
by Timo Sirainen 13 Jul '07

13 Jul '07

http://dovecot.org/tmp/dovecot-1.0.2-rc.tar.gz Unless someone finds something broken, I'll release v1.0.2 in a few days. The most important changes since v1.0.1: * dbox isn't built anymore by default. It will be redesigned so it shouldn't be used. + Maildir: Support reading dovecot-uidlist (v3) files created by Dovecot v1.1. - Maildir: "UIDVALIDITY changed" errors could happen with newly created mailboxes - If "INBOX." namespace was used, LIST returned it with \HasNoChildren which caused some clients not to show any other mailboxes. - Maildir++ quota: If multiple processes were updating maildirsize at the same time, we failed with "Unknown error". - IMAP: IDLE didn't actually disconnect client after 30 minutes of inactivity. - LDAP passdb/userdb was leaking memory - deliver: %variables in plugin {} weren't expanded

4 9

[Dovecot] Monitoring Recomendations
by Dehnert James Sr 13 Jul '07

13 Jul '07

I have a client that I have installed Dovecot 1.0.1 for is having some performance issues. Especially when using IMAP from various Outlook clients. I have TLS installed and all the IMAP connections are secured. I'm wondering is anyone has any recommendations for monitoring dovecot performance. I'd like to try and nail down where the real performance issues are. I suspect outlook, but I want to eliminate Dovecot as the cause of any problems, or, if I have a problem with Dovecot, I want to identify any issues I can and fix them. Thanks, Zeke -- James "Zeke" Dehnert mailto:jdehnert@norcalnetworks.com Phone: +1 707.546.6620 x602 Fax: +1 707.324.8043 "Life is racing, everything else is just waiting"

4 4

[Dovecot] dovecot sieve notify mailto
by Kupor Laszlo 13 Jul '07

13 Jul '07

Hello, I try to migrate to dovecot-lda from procmail, but some script can't run under lda cmusieve plugin. dovecot version: dovecot-1.0(debian) revelant config dovecot.conf: protocol lda { postmaster_address = postmaster(a)wizard.dunanet.hu hostname = wizard.dunanet.hu mail_plugin_dir = /usr/lib/dovecot/modules/lda #sendmail_path = /usr/lib/sendmail auth_socket_path = /var/run/dovecot/auth-master mail_plugins = cmusieve } .forward | "/usr/lib/dovecot/deliver" .dovecot.sieve (revelant part) require ["fileinto","notify"]; ... ... notify :method "mailto" :options "9141141(a)sms1.pgsm.hu" :id "test" :message; if true { keep; } ... I can compile with sievec, deliver also can compile to .dovecot.sievec (no errors) i can decompile with sieved: 1935: NOTIFY METHOD({6}mailto) ID({5}willy) OPTIONS {20}9141141(a)sms1.pgsm.hu PRIORITY(13) MESSAGE({17}$from$: $subject$) 1954: IF (ends at 1957)true 1957:JUMP 1960 1959: KEEP full len is: 1960 But notification does not work.. Jul 3 17:50:38 WiZARD deliver(willy): Loading modules from directory: /usr/lib/dovecot/modules/lda Jul 3 17:50:38 WiZARD deliver(willy): Module loaded: /usr/lib/dovecot/modules/lda/lib90_cmusieve_plugin.so Jul 3 17:50:38 WiZARD deliver(willy): mbox: data=/home/willy/mail/:INBOX=/var/mail/willy Jul 3 17:50:38 WiZARD deliver(willy): mbox: root=/home/willy/mail, index=/home/willy/mail, inbox=/var/mail/willy Jul 3 17:50:38 WiZARD deliver(willy): cmusieve: Using sieve path: /home/willy/.dovecot.sieve Jul 3 17:50:38 WiZARD deliver(willy): cmusieve: Executing script /home/willy/.dovecot.sievec Jul 3 17:50:38 WiZARD postfix/smtpd[15234]: disconnect from donci.dunanet.hu[62.77.204.40] Jul 3 17:50:38 WiZARD deliver(willy): msgid=<Pine.LNX.4.62.0707031750280.28802(a)donci.dunanet.hu>: saved mail to INBOX Jul 3 17:50:38 WiZARD deliver(willy): sieve runtime error: Notify: Generic Error Jul 3 17:50:38 WiZARD postfix/local[15239]: B31B419746C: to=<willy(a)wizard.dunanet.hu>, relay=local, delay=0.1, delays=0.07/0/0/0.02, dsn=2.0.0, status=sent (delivered to command: /usr/lib/dovecot/deliver) I always get sieve runtime error: Notify: Generic Error Fileinto, and redirect works fine, but notify does not. I try "dovecot-sieve-1-0-64a7986b5e55.tar.bz2" without success. Please help debug "Generic Error". Thanks, Udv.: Willy -- PGP GNUPG/1.0 ID = 5BFA0D36 Kupor Laszlo Attila <willy(a)dunanet.hu> Key fingerprint = 3F68 9483 5B65 8E2F CD30 5326 50F9 5A33 5BFA 0D36

3 5

[Dovecot] Quota Messages
by Hermann wacker 13 Jul '07

13 Jul '07

Hi @all, First: I'm sorry when my english isn't understandable, please just ask if I messed things up. I switched from Cyrus to Dovecot (Cyrus was on Debian Sarge, Dovecot is now on a Etch) and I'm quite happy with it. There is just one thing that I'm missing in Dovecot. in Cyrus when users reached 90% of their Quota, a message popped up in their Mailclients, telling them to clean up their Mailboxes. Dovecot delivers the quotausage to the Client (I can see in my Thunderbird a small Statusbar), but when you don't look carefully, you will mostly miss the point where you can delete the messages without having a fight with the quotalimit (because mails in trash using the quota). At the moment I'm using "quota = fs" so there is no good way to keep the trash out of the quotathing and that's not the point of my question. The question is: Is there a way where Dovecot (or Postfix) inform the user that his quota is reaching its limit? Or maybe the postmaster, thats not important. The important thing is a way where my mailsystem tells somebody that quotas are reaching their limits. Greetings from Germany Hermann Wacker Dovecot Version: 1.0.rc15 Postfix Version: 2.3.8-2+b1 quotaconf: # /etc/dovecot/dovecot.conf IEffective uid=65534, gid=65534 ILoading modules from directory: /usr/lib/dovecot/modules/imap IModule loaded: /usr/lib/dovecot/modules/imap/lib01_quota_plugin.so IModule loaded: /usr/lib/dovecot/modules/imap/lib02_imap_quota_plugin.so log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_extra_groups: mail mail_location: maildir:%h/mails mail_debug: yes mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv auth default: passdb: driver: shadow userdb: driver: passwd

2 1

[Dovecot] Quota exceeded messages
by Frank Church 13 Jul '07

13 Jul '07

When I try to move messages between folders I get 'Quota exceeded' messages. I installed dovecot without any major configuration and accounts are created with PostfixAdmin. Is there some common setting that I must be missing? Version in use is 1.0 rc26 - Frank

3 7

[Dovecot] Patches to log imap bandwidth?
by Jason Fesler 13 Jul '07

13 Jul '07

Anyone patch dovecot to syslog bytes transfered during a session or anything of that sort? I'm trying to track down imap bandwidth spikes, and unfortunately the uid (according to ipfw) for the imap port spikes is 0. (Presumably FreeBSD's ipfw accounting is based on who started the app instead of the effective user id?) -- Jason Fesler, email/jabber <jfesler(a)gigo.com> resume: http://jfesler.com "Give a man fire, and he'll be warm for a day; set a man on fire, and he'll be warm for the rest of his life."

2 2

[Dovecot] Today's stable hg pull destroyed dovecot...
by Ralf Hildebrandt 13 Jul '07

13 Jul '07

I performed a hg pull today for 1.0.1 and after recompilation my log was flooded with: Jul 12 10:29:21 postamt dovecot: IMAP(kxx4): UID larger than next_uid in file /home/k/j/kxx4/Maildir/dovecot-uidlist (6 >= 0) Jul 12 10:29:21 postamt dovecot: IMAP(rexxxes): UID larger than next_uid in file /home/r/e/rexxxes/Maildir/dovecot-uidlist (1 >= 0) Jul 12 10:29:21 postamt dovecot: IMAP(sxxkim): Maildir /home/s/i/sxxkim/Maildir sync: UIDVALIDITY changed (1184228955 -> 3086699759) and people were reporting "the IMAP server closing and dropping connections". I then downloaded 1.0.1 from the webpage, rebuilt and the problems are gone. Now I'm getting those: Jul 12 10:33:10 postamt dovecot: IMAP(blxxe): Corrupted index cache file /home/b/l/blxxe/Maildir/dovecot.index.cache: indexid changed Somethin amiss with the index code? -- Ralf Hildebrandt (Ralf.Hildebrandt(a)charite.de) plonk(a)charite.de Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155 http://www.arschkrebs.de Those who would give up essential liberty to purchase a little temporary safety deserve neither liberty nor safety. -- Benjamin Franklin, 1759

2 1

[Dovecot] v1.1 status and benchmarks
by Timo Sirainen 13 Jul '07

13 Jul '07

v1.1 plans have changed a bit. I'll release v1.1.alpha1 soon and hope to have a stable v1.1 in a month or two. The rest of the features that didn't make it into v1.1 will go to v1.2. I'll write more about this when v1.1 alpha is released. I also did a bit of benchmarking. v1.1's performance improvements are looking pretty great, it seems to be twice as fast as v1.0. v1.0: Maildir, dovecot-1.0 hg + inotify dotlock wait patch, mmap_disable=yes v1.1: Maildir, dovecot hg, mmap_disable=no cydir: Cydir, dovecot hg, mmap_disable=no 1 client -------- ./imaptest logout=0 seed=1 secs=10 clients=1 Logi List Stat Sele Fetc Fet2 Stor Dele Expu Appe 100% 50% 50% 100% 100% 100% 50% 100% 100% 100% 30% 5% v1.0: 1 1221 1179 1 2420 3458 323 1934 2419 2552 v1.1: 1 2606 2597 1 5221 7352 688 4181 5221 5489 cydir: 1 4495 4534 1 8960 12786 1216 7224 8959 9434 10 clients ---------- ./imaptest logout=0 seed=1 secs=10 clients=10 Logi List Stat Sele Fetc Fet2 Stor Dele Expu Appe 100% 50% 50% 100% 100% 100% 50% 100% 100% 100% 30% 5% v1.0: 10 2058 2102 10 4157 6019 1426 3348 4157 4391 v1.1: 10 5029 5072 10 10064 14352 3176 8092 10064 10624 cydir: 10 6332 6393 10 12664 17965 3958 10154 12663 13336

5 11

[Dovecot] NFS cache flush tester
by Timo Sirainen 13 Jul '07

13 Jul '07

http://dovecot.org/tools/nfstest.c I wrote a test utility that tests different ways to flush NFS attribute cache and data cache. Please test in your NFS setup and show me the results, so I can make Dovecot v1.1 works well with NFS. Run the test several times (3 should be enough) to make sure the output stays the same, because the attribute cache flushes might incorrectly say "OK". And of course attribute cache must not be disabled for this test to work. If you have other ideas how to flush either cache please tell me and I'll update the test utility. I'd like to have a way to flush the cache without having the NFS client send anything to server. Unfortunately all of the below ways do that. Results for Linux v2.6.15 and v2.6.18: Info: Testing attribute cache.. Info: Attr cache flush fchown(-1, -1): failed Info: Attr cache flush fchown(uid, gid): OK Info: Attr cache flush fchmod(mode): OK Info: Attr cache flush chown(-1, -1): failed Info: Attr cache flush chown(uid, gid): OK Info: Attr cache flush chmod(mode): OK Info: Testing data cache.. Info: data cache: Appends weren't noticed (ret = 0) Info: - Attribute cache flush helped Info: data cache (no caching): failed Info: data cache (attr cache): failed Info: data cache (lockf()): OK Info: data cache (flock(shared)): OK Info: data cache (flock(exclusive)): OK

7 25

[Dovecot] Problem with Dovecot SASL in Postfix
by Chris McMacken 12 Jul '07

12 Jul '07

I'm trying to configure my postfix server to use Dovecot as an SASL server and running into some problems. My server supports a couple of domain, I have multiple user/password files for multiple domains to make the files a little easier to manage. Not sure if this question should belong in the dovecot mailing list or the postfix one, but here goes anyway. I have everything configured to use CRAM-MD5 authentication, including my mail client. Here the auth section of my dovecot conf. auth default { mechanisms = plain cram-md5 passdb passwd-file { # Path for passwd-file args = /usr/local/etc/dovecot/%d/passwd } userdb passwd-file { # Path for passwd-file args = /usr/local/etc/dovecot/%d/passwd } user = root # It's possible to export the authentication interface to other programs: socket listen { client { # The client socket is generally safe to export to everyone. Typical use # is to export it to your SMTP server so it can do SMTP AUTH lookups # using it. path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } } heres a sample line from one of the passwd files: chrism:{CRAM-MD5}a67a65704086a046b3f875d1eaac8cb5c6fd13406507fead30d9bcb1bf… and to login through SASL I am trying to use the username chrism(a)example.com when I use the full email address like this to login like this I get this output into my postfix log: Jul 10 18:46:59 mail postfix/smtpd[57343]: connect from unknown[12.244.148.123] Jul 10 18:46:59 mail postfix/smtpd[57343]: NOQUEUE: reject: RCPT from unknown[12.244.148.123]: 554 5.7.1 <chrism(a)gmail.com>: Relay access denied; from=<chrism(a)example.com> to=<chrism(a)gmail.com> proto=ESMTP helo=<[192.168.1.14]> Jul 10 18:47:00 mail postfix/smtpd[57343]: disconnect from unknown[12.244.148.123] (not actually using example.com but I changed it here) heres my smtpd_recipient_restricitons from postconf smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination, permit_sasl_authenticated so when I use the full user name (chrism(a)example.com) it doesn't appear to even attempt logging into the sasl server. If I change it to simply chrism, heres the output: Jul 10 18:50:36 mail postfix/smtpd[57356]: connect from unknown[12.244.148.123] Jul 10 18:50:38 mail postfix/smtpd[57356]: warning: unknown[12.244.148.123]: SASL CRAM-MD5 authentication failed: PDI3NjU4MTE4NDExMTQzN0BtYWlsPg== Jul 10 18:50:39 mail postfix/smtpd[57356]: lost connection after AUTH from unknown[12.244.148.123] Jul 10 18:50:39 mail postfix/smtpd[57356]: disconnect from unknown[12.244.148.123] if I put my user name in as chrism and don't add the @example.com it tried to login but it can't login. anyone have any ideas?

2 1

[Dovecot] 1.0.1: corrupt index on fresh mailbox, ideas?
by Troy Engel 12 Jul '07

12 Jul '07

A new employee started today, when logging into his new mailbox this morning during a walk-through I got a nasty server error response in Thunderbird - something I never see, DC runs smooth as butter for us. Checking the server log I see this: == snip == dovecot: Jul 09 09:38:54 Error: IMAP(xxxxxxx): Maildir /home/x/xxxxxxx/Maildir sync: UIDVALIDITY changed (1183406107 -> 1183999134) dovecot: Jul 09 09:39:06 Error: IMAP(xxxxxxx): Corrupted transaction log file /var/spool/dovecot/indexes/x/xxxxxxx/.INBOX/dovecot.index.log.2: invalid indexid (1183406107 != 1183999146) dovecot: Jul 09 09:39:06 Error: IMAP(xxxxxxx): Corrupted index cache file /var/spool/dovecot/indexes/x/xxxxxxx/.INBOX/dovecot.index.cache: indexid changed == snip == Some facts that make this a strange occurrence: 1) new IMAP mailbox, only one email was in it that I had sent last week (boilerplate Welcome email) 2) was working perfectly fine on Friday when I set things up (Thunderbird and SquirrelMail) and tested with the same client laptop and same Thunderbird 3) nothing bad happened with the servers over the weekend, all is tip-top - no restarts, reboots, nothing. 4) DC does use NFS mounted maildirs, but there is only one DC accessing any maildir - no other servers touch ~/Maildir/. mmap is disabled. What could be a reason for this index to have gotten corrupted? This is the first time I've had an index go corrupt out of all the users, so I'd like to try and track down the cause of this... thx, -te == dovecot -n == # 1.0.1: /etc/dovecot.conf log_path: /var/log/dovecot.log protocols: imap imaps listen: * ssl_cert_file: /opt/SSL/server.pem ssl_key_file: /opt/SSL/server.pem login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login login_process_per_connection: no mail_location: maildir:~/Maildir:INDEX=/var/spool/dovecot/indexes/%1u/%u mmap_disable: yes namespace: type: private separator: . prefix: INBOX. inbox: yes auth default: cache_size: 4096 cache_ttl: 7200 passdb: driver: pam args: cache_key=%u dovecot userdb: driver: passwd args: blocking=yes == end == -- Troy Engel | Systems Engineer Fluid, Inc | http://www.fluid.com

5 12

[Dovecot] Fixing lda user_query error introduces new fault in mail delivery
by Frank Church 12 Jul '07

12 Jul '07

I was getting these errors below and after fixing it delivery errors were introduced dovecot/error_log ============== dovecot: Jul 11 06:19:28 Error: auth-worker(default): sql(user(a)domain.com): User query failed: Table 'postfix.users' doesn't exist deliver(user(a)domain.com): Jul 11 06:19:28 Error: BUG: Unexpected input from auth master: FAIL 1 dovecot: Jul 11 06:21:41 Error: auth-worker(default): sql(admin(a)achimota.com,127.0.0.1): User query failed: Table 'postfix.users' doesn't exist ============== It turns out that using prefetch with dovecot lda required a user_query in dovecot/sql.conf I fixed it by adding this query to dovecot/sql.conf user_query = SELECT concat('/var/vmail/', maildir) as home, 601 as uid, 12 as gid FROM mailbox WHERE username = '%u' AND active = '1' This resulted in a new mailbox /var/vmail/domain.com/user(a)domain.com being created when although /var/vmail/domain.com/user already exists and is what the query returns It seems that prior to that when the query was failing the mail was properly delivered somehow by dovecot, but fixing it created a new problem. It appears that the mail_location = maildir:/var/vmail/%d/%u in dovecot.conf could be related as %u is user(a)domain.com Is there a fix for this? Does the deliver line in postfix/master.cf need to be adjusted in some way I will probably have to disable the user_query and restart for the time being dovecot version - 1.0rc26 Here is dovecot.conf =============== ssl_cert_file = /etc/pki/dovecot/certs/abc.domain.net.crt ssl_key_file = /etc/pki/dovecot/private/abc.domain.net.key ssl_ca_file = /etc/pki/dovecot/certs/ca-bundle.crt mail_location = maildir:/var/vmail/%d/%u mail_extra_groups = mail first_valid_uid = 601 last_valid_uid = 601 maildir_copy_with_hardlinks = yes protocol imap { mail_plugins = quota imap_quota imap_client_workarounds = outlook-idle delay-newmail } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { postmaster_address = postmaster(a)domain.net mail_plugins = quota log_path = /var/log/dovecot/deliver.log info_log_path = /var/log/dovecot/deliver.log } auth default { mechanisms = plain passdb sql { args = /etc/dovecot/sql.conf } userdb prefetch { } userdb sql { args = /etc/dovecot/sql.conf } user = nobody socket listen { master { path = /var/run/dovecot/auth-master mode = 0660 user = vmail group = mail } client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = mail } } } dict { } plugin { quota = maildir:storage=10240:messages=1000 acl = vfile:/etc/dovecot/acls trash = /etc/dovecot/trash.conf } dovecot/sql.conf ============== default_pass_scheme = PLAIN-MD5 driver = mysql connect = host=localhost dbname=postfix user=dovecot password=password password_query = SELECT username as user, password, concat('/var/vmail/', maildir) as userdb_home, concat('maildir:/var/vmail/', maildir) as userdb_mail, 601 as userdb_uid, 12 as userdb_gid, concat('dirsize:storage=', cast(quota as char)) AS userdb_quota FROM mailbox WHERE username = '%u' AND active = '1' user_query = SELECT concat('/var/vmail/', maildir) as home, 601 as uid, 12 as gid FROM mailbox WHERE username = '%u' AND active = '1' dovecot line in postfix/master.cf ======================= # Dovecot LDA dovecot unix - n n - - pipe flags=DRhu user=vmail:mail argv=/usr/local/libexec/dovecot/deliver -d ${recipient} - Frank

2 1

[Dovecot] Can Wiki entry on dovecot LDA/deliver be clarified?
by Frank Church 11 Jul '07

11 Jul '07

Hi guys, I am having some problems relating to this "Fixing lda user_query error introduces new fault in mail delivery" and I'd like to know if the above wiki comment holds even if a user_query is configured to return the correct mail folder. According to this LDA delivers only to the mail_location setting. Does that mean that it will stick to the value in dovecot.conf or will the value returned in the query override it? This appears to be the problem I am experiencing with the previous thread. >From wiki entry at wiki.dovecot.org/LDA ============================ Problems with deliver Currently deliver doesn't support namespaces. The mails can be delivered only to mailboxes specified by the mail_location setting. If you are using prefetch userdb, keep in mind that deliver does not make a password query and thus will not work if -d parameter is used. The UserDatabase/Prefetch page explains how to fix this. ================================== Any ideas? - Frank

1 1

[Dovecot] target doesn't allow inferior mailboxes
by Adam Williams 11 Jul '07

11 Jul '07

Using Seamonkey as my email client, and IMAP to check mail. If I create a new IMAP folder, and then delete it, I get the error: The current command did not succeed. The mail server responded: Target mailbox doesn't allow inferior mailboxes. Tried a google search, didn't really come up with anything. I have rw permissions on /home/awilliam/Mail/* and delete the files fine using rm -rf /home/awilliam/Mail/whatever and editing the folder out of .subscriptions. Any ideas? [root@roark ~]# dovecot --version 1.0.1 [root@roark ~]# dovecot -n # 1.0.1: /etc/dovecot.conf login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_location: mbox:~/Mail/:INBOX=/var/spool/mail/%u mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 auth default: passdb: driver: pam userdb: driver: passwd

3 3

[Dovecot] About a simultaneous session of Dovecot(IMAP)
by Takateru Ueda 11 Jul '07

11 Jul '07

The construction of the mail server with Postfix+Dovecot(IMAP) is examined. ・The number of mailboxes is about 1000. ・The reception protocol uses IMAP and the Maildir form. ・OS is Redhat Enterprise Linux ES4. ・MUA uses Outlook Express. ・Postfix and Dovecot use latest Ver. In the above-mentioned environment, it is understanding person. how much the number of maximum sessions (number of people) that can be used at the same time becomes from MUA (When grounds of the calculation are understood, it is the best. )

2 2

[Dovecot] Connecting to dovecot/imap without a password
by Don Russell 11 Jul '07

11 Jul '07

I have written a script that connects (localhost) to the dovecot/imap server and performs various maintenance on my mail, by folder..... deleting old stuff, keeping the n most recent, that sort of crap, er good stuff. :-) My script is written in php (I use the various imap_* functions), and it connects to the imap server running on the same machine... is there a way to connect to the server without having to specify my user name and password? I was thinking there may be some form of "implied" logon if a request from user "don" requests to log on to user "don", then there's no need for a password check, when the connection is via localhost. That way I don't have to deal with userid/password related issues. :-) Thanks

2 2

[Dovecot] postfix pipe to deliver, null_sender.
by Erland Nylend 11 Jul '07

11 Jul '07

Hello, I just noticed a problem on our servers .. If I send myself a bounce, like this: | [en@mailserver ~]$ telnet localhost 25 | Trying 127.0.0.1... | Connected to localhost.localdomain (127.0.0.1). | Escape character is '^]'. | 220 mailserver ESMTP Postfix | helo foo | 250 mailserver | mail from: <> | 250 2.1.0 Ok | rcpt to: my(a)mail.address.tld | 250 2.1.5 Ok | data | 354 End data with <CR><LF>.<CR><LF> | testing | . | 250 2.0.0 Ok: queued as 673072767C | quit | 221 2.0.0 Bye | Connection closed by foreign host. Then the resulting mail message I get, has this header: | Return-Path: <MAILER-DAEMON> | Delivered-To: my(a)mail.address.tld | Received: from foo (localhost.localdomain [127.0.0.1]) | by mailserver (Postfix) with SMTP id 673072767C | for <my(a)mail.address.tld>; Wed, 11 Jul 2007 13:36:07 +0200 (CEST) | Message-Id: <20070711113611.673072767C@mailserver> | Date: Wed, 11 Jul 2007 13:36:07 +0200 (CEST) | From: MAILER-DAEMON | To: undisclosed-recipients:; It seems that postfix changes the return-path, and I dont see why it would do something like that. The bounce is not a bounce anymore, and if a user fetches the mail with e.g. fetchmail, and it cannot be delivered, then the bounce will be bounced, to MAILER-DAEMON .. My master.cf entry looks like this: dovecot unix - n n - - pipe flags=DRhu user=atmail:atmail argv=/usr/local/dovecot/libexec/dovecot/deliver -d ${recipient} If I add null_sender= , then that resolves it: dovecot unix - n n - - pipe flags=DRhu user=atmail:atmail null_sender= argv=/usr/local/dovecot/libexec/dovecot/deliver -d ${recipient} What do other postfix/dovecot-users do? Will this change break anything? I cannot see why empty null_sender isn't default .. so I'm wondering if there is something I've missed. Should we update the examples on http://wiki.dovecot.org/LDA/Postfix to include empty null_sender? -- Erland Nylend

1 0

[Dovecot] [Patch] Samba's proposed "ntlm_auth + winbind" support for dovecot-auth
by Dmitry Butskoy 11 Jul '07

11 Jul '07

The Samba team recommends to use their "ntlm_auth" command line helper for "NTLM" and "GSS-SPNEGO" authentication. This helper interacts with the Samba's winbind daemon, and this way can authenticate users against NT or Active Directory windows domain. Currently Dovecot can do "NTLM" authentication too, but just "locally" (against a local or sql database etc.). I've made a patch (attached), which adds "ntlm_auth" (or "winbind") support for Dovecot. The idea is to add two new authentication mechanisms: "mech_winbind_ntlm" and "mech_winbind_spnego". Both are coded in one additional file, "mech-winbind.c". An option "auth_ntlm_use_winbind" specifies whether to use the current implementation of ntlm, or do it by the "ntlm_auth" helper. "GSS-SPNEGO" always performed by the helper. Normally, "ntlm_auth" is invoked once, for all further requests. Such a way, "ntlm_auth helper from the Samba package, interacting with the Samba's winbind daemon", is used now by Squid, Apache and AFAIK some other applications. It is "strongly recommended" by the Samba team, and was already proposed even in this maillist 3 year ago (see f.e. http://www.dovecot.org/list/dovecot/2004-September/004775.html ). I hope there are no any serious performance issues for such a "complex way" -- f.e. with our web proxy, using this way, ~200 users do not feel any actual delays etc. I've successfully tested this patch with NTLM against AD domain. This patch can considerably improve the situation of "Email client on Windows desktop under Windows domain, but imap/pop at UNIX server". Currently, windows users have to specify their "login/password" for email accounts manually. There is an "SPA" (Secure Password Authentication) alternative for them, where just the desktop's login is used transparently, but it cannot be used now, because Dovecot cannot perform NTLM against, say, Active Directory domain. Since "dovecot-auth" daemon can be utilized by MTA as well (Postfix and other), the support of "ntlm_auth" in Dovecot can satisfy both SMTP and IMAP servers at UNIX side, and solve the issue completely. Questions and requests: - I try to code things most close to used style, i.e. using Dovecot's memory-management and io-pipe routines etc., but could someone look at it and check whether I've missed something or not? - Perhaps some names (of routines, modules) could be chosen better? - Maybe some other options should be implemented, i.e. "auth_winbind_helper_ntlm" and "auth_winbind_helper_spnego" to specify the helper's cmdline exactly ? - Currently I strip domain part of the username returned, i.e. from "DOMAIN\user" just to "user". Maybe better add some option "auth_winbind_strip_domain" for this? Certainly, it will be fine if someone else check it more, especially for "GSS-SPNEGO" which I cannot test for a while. Regards, Dmitry Butskoy http://www.fedoraproject.org/wiki/DmitryButskoy

2 6

[Dovecot] NFS and Filesystem quota
by Joseba Torre 11 Jul '07

11 Jul '07

Hi, I've recently moved my mailboxes to a NFS share (on an emc Celerra), and, as expected, the quota extensions no longer works. However, I've read that adding http://dovecot.org/patches/quota-rquotad.c to $DOVECOT/src/plugins/quota, adding a line to $DOVECOT/src/plugins/quota/Makefile.am and rebuilding, it should work again. Unfortunately, it doesn't compile in my RHEL 4.0: /usr/bin/gcc4 -DHAVE_CONFIG_H -I. -I. -I../../.. -I../../../src/lib -I../../../src/lib-dict -I../../../src/lib-index -I../../../src/lib-mail -I../../../src/lib-storage -I../../../src/lib-storage/index -I../../../src/lib-storage/index/maildir -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -I/usr/kerberos/include -MT quota-rquotad.lo -MD -MP -MF .deps/quota-rquotad.Tpo -c quota-rquotad.c -fPIC -DPIC -o .libs/quota-rquotad.o quota-rquotad.c: In function 'debugmsg': quota-rquotad.c:50: warning: implicit declaration of function 'i_vinfo' quota-rquotad.c: In function 'rquotad_quota_add_storage': quota-rquotad.c:90: error: storage size of 'statbuf' isn't known quota-rquotad.c:97: warning: implicit declaration of function 'statfs' quota-rquotad.c:99: error: 'MNT_LOCAL' undeclared (first use in this function) quota-rquotad.c:99: error: (Each undeclared identifier is reported only once quota-rquotad.c:99: error: for each function it appears in.) quota-rquotad.c:104: error: 'MNAMELEN' undeclared (first use in this function) quota-rquotad.c:90: warning: unused variable 'statbuf' quota-rquotad.c: At top level: quota-rquotad.c:225: warning: initialization from incompatible pointer type quota-rquotad.c: In function 'rquota_get': quota-rquotad.c:256: warning: dereferencing type-punned pointer will break strict-aliasing rules quota-rquotad.c:267: warning: passing argument 3 of 'clnt->cl_ops->cl_call' from incompatible pointer type quota-rquotad.c:267: warning: passing argument 4 of 'clnt->cl_ops->cl_call' from incompatible pointer type quota-rquotad.c:267: warning: passing argument 5 of 'clnt->cl_ops->cl_call' from incompatible pointer type quota-rquotad.c:267: warning: passing argument 6 of 'clnt->cl_ops->cl_call' from incompatible pointer type quota-rquotad.c: In function 'rquotad_quota_root_update': quota-rquotad.c:275: error: storage size of 'statfsbuf' isn't known quota-rquotad.c:291: error: 'MNT_LOCAL' undeclared (first use in this function) quota-rquotad.c:275: warning: unused variable 'statfsbuf' make[4]: *** [quota-rquotad.lo] Error 1 make[4]: Leaving directory `/home/lgstosej/dovecot/dovecot-1.0.1/src/plugins/quota' make[3]: *** [all-recursive] Error 1 make[3]: Leaving directory `/home/lgstosej/dovecot/dovecot-1.0.1/src/plugins' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/home/lgstosej/dovecot/dovecot-1.0.1/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/home/lgstosej/dovecot/dovecot-1.0.1' make: *** [all] Error 2 Any help? Is there any plan to have official support for this? Aaaaaaaaaagur. -- Joseba Torre. CIDIR Bizkaia.

2 1

[Dovecot] Migrating subscription lists
by Stewart Dean 10 Jul '07

10 Jul '07

I thought this would be relatively straightforward....I would create .subscriptions by doing an ls -1 of ~/mail. I'm running into some problems. 1) the ~/mail directories haves directories in them for 5% of the accounts! AFAIK, our mail sevice has always been UWIMAP with mbox format INBOXes, and it was my understanding that the mbox format is flat and NOT hierarchical and thus I'd have thought that ~/mail would be all folders and wouldn't have a directory with folders in it. Plus our users are not, as a rule, power/geek user that would understand even making subdirs in ~mail, so I don't know how this would have come to pass. Should this be? Or am I misunderstanding things? 2) Some people are consciously or unconsciously using the UWIMAP .mailboxlist subscription file as it is meant to be used, namely to *restrict* the folders shown. If/when I generated the Dovecot .subsbcriptions file by just doing an ls -1 of their mail directory, they will be surprised to see stuff not previously displayed....that they may very well not know they'd had. Murphy must be a terribly overworked deity...you'd think he'd take a rest now and then from maximizing entropy -- ==== Stewart Dean, Unix System Admin, Henderson Computer Resources Center of Bard College, Annandale-on-Hudson, New York 12504 sdean(a)bard.edu voice: 845-758-7475, fax: 845-758-7035

2 1

[Dovecot] mbox vs maildir
by Don Russell 10 Jul '07

10 Jul '07

I'm using Dovecot 1.0.1-12 on Linux/Fedora 7 along with sendmail and procmail all running on the same box mail is stored in mbox format It's a small system with a half dozen or so e-mail "accounts". Each with 40-60MB of messages in various folders. I keep seeing messages about how mbox is antiquated and anybody with more than 100 messages etc should not use mbox, but use maildir instead. I'm not entirely convinced.... there seem to be pros and cons for each. Is there a discussion somewhere that really highlights why one format is so much better than the other? The last time I tried to convert from mbox to maildir, things got pretty botched up, no data loss, but it wasn't pretty. :-) Can Dovecot handle mbox for some users and maildir for others? I'd like to try a conversion for one user... I'll probably create a new user, then have procmail copy (via ! action code) all mail for one user to that new user. Thank you

16 40

[Dovecot] secure pop for outside pop inside
by arjan 10 Jul '07

10 Jul '07

Hi all, I've a server with dovecot running in secure pop mode. For connections from the outside world, I don't want to enable pop. However, this machine is also the host for a vserver. In this vserver I have a webserver running the WebGUI Content Management System. One can add content via email. For this the cms has to be able to check a pop emailbox. The cms doesn't support secure pop. It's not nescessary either, because dovecot and cms are on the same machine. How can I configure Dovecot in such a way that I can enable pop just for one ip-adress and have secure pop for connections on another adress? Any help would be very much appreciated. Kind regards, Arjan

2 3

[Dovecot] Repeated references to non existent users table
by Frank Church 10 Jul '07

10 Jul '07

Dovecot keeps returning messages in the general log about a users table, where my users table is called mailbox, based on my postfixadmin configuration. dovecot: Jul 10 11:37:27 Info: auth-worker(default): sql(user(a)domain.com): SELECT home, uid, gid FROM users WHERE userid = 'user(a)domain.com' dovecot: Jul 10 11:37:27 Info: auth(default): prefetch(user(a)domain.com): passdb didn't return userdb entries I get errors stating that table postfix.users does not exist which is right because my table is named mailbox my dovecot-sql.conf files don't contain any references to a table named users. dovecot.conf ========= protocol lda { postmaster_address = postmaster(a)abc.meripol.net mail_plugins = quota log_path = /var/log/dovecot-deliver.log info_log_path = /var/log/dovecot-deliver.log } main.cf ========== # ---------------------- SASL PART START ---------------------- smtpd_sasl_type = dovecot smtpd_sasl_path = private/auth smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = smtpd_sasl_exceptions_networks = smtpd_sasl_security_options = noanonymous broken_sasl_auth_clients = yes # ---------------------- SASL PART END ---------------------- master.cf ======= dovecot unix - n n - - pipe flags=DRhu user=vmail:mail argv=/usr/local/libexec/dovecot/deliver -d ${recipient}

1 0

[Dovecot] dovecot lda with fetchmail
by JC Júnior 10 Jul '07

10 Jul '07

hi all, I'm new in dovecot, and i need to setup a machine that download emails from an external pop3 server, and delivers to my internal network via imap, for this , i want ( if possible ) to use fetchmail with the option mda to dovecot's deliver, because all user must be virtual users stored in a sqlite database, and my question is: 1- it is possible?? 2- theres a better way to do this?? 3- someone knows some howto about this configuration??? thanks for all JC Júnior

3 6

[Dovecot] Upgrade from 1.00 to 1.0.1
by Jon 09 Jul '07

09 Jul '07

Hi, I'm getting a bunch of errors since I upgraded to 1.0.0. I understand now that some of them are bug related to release 1.0.0. I'm about to upgrade to 1.0.1. Does anyone know if there are changes in the config file btwn these to versions? Also, what is the best way to do the upgrade? Can I just run ./configure : make : make install : killlall -HUP dovetcot? Best Regards - Jon

7 9

[Dovecot] Tbird-DC state problem
by Stewart Dean 09 Jul '07

09 Jul '07

A experienced sysadmin who's doing some guinea-pig use of DC just ran into the following situation: 1) He brings up SeaMonkey 2) About 30 minutes later, he's in the middle of some involved messaging, mistakenly hits the redX in the top right of the SeaMonkey window, knocking himself out of SeaMonkey. 3) He immediately reinvokes SeaMonkey, all appeared to be OK Viewed some e-mail and some web page references, tries to send a message and then the Send hung for a time with a message "Sending Authenticate Info"..after some minutes, a new E-mail window appeared stating the "Server reported a timeout". As far as the message, it was apparently sent successfully, and saved in the Sent folder successfully. 4) He calls me in. I look through the syslog logging. There is nothing in the syslog critical stuff...and everything in the maillog looks normal. 5) He starts another message, tries to save it to Drafts and that hangs 6) I look more closely at the maillog and see a lot of logins (one a minute in some cases, but all appear to have been cleanly executed) plus one bunch of disconnected messages with one disconnected in idle in the period when the write to the Drafts would have been hung. Could it be that DC was in the middle of clean up in the initial disconnect/reconnect and SeaMonkey came back in the middle of it and one or the other's state tables got messed up (or both of them)? Shutting out of SeaMonkey, waiting a minute and reconnecting seems to have gotten things working again. Any comments? Anything I should be looking for? OTOH, this is the first real problem I've seen in some person-months of testing..... -- ==== Stewart Dean, Unix System Admin, Henderson Computer Resources Center of Bard College, Annandale-on-Hudson, New York 12504 sdean(a)bard.edu voice: 845-758-7475, fax: 845-758-7035

1 0

[Dovecot] PHP implementation of dovecotpw passwords
by Frank Church 09 Jul '07

09 Jul '07

I am looking for PHP functions that implement passwords that much the dovecotpw implementation. I downloaded one from PEAR, Crypt_HMAC, but the passwords it generates look nothing like the dovecotpw passwords, which could be my fault because I know nothing about the field. Is there a guide or some library that implements them to match dovecotpw?

4 4

[Dovecot] Your IMAP server has closed the connection.
by Dehnert James Sr 09 Jul '07

09 Jul '07

I'm getting a large number of ... "Your IMAP server has closed the connection. This may occur if you have left the connection idle for too long." errors. These are confusing my clients. Is there a way to set the timeout on the dovecot server to help avoid this?

4 6

[Dovecot] Unable to send email out using Dovecot SASL
by dovecot＠convergenz.biz 06 Jul '07

06 Jul '07

Hi, I am currently using Dovecot 1.0.rc17 with Postfix 2.3.8 on Ubuntu. So far I'm able to receive my email using dovecot pop3 but I can't send out the email. Anybody managed to get Postfix with Dovecot SASL support so far? What do I missed out? Below is my configure: #-----------/dovecot.conf-------------- base_dir: /var/run/dovecot/ log_timestamp: .%Y-%m-%d %H:%M:%S . protocols: imap imaps pop3 pop3s listen(default): *:143 listen(imap): *:143 listen(pop3): *:110 ssl_listen(default): *:993 ssl_listen(imap): *:993 ssl_listen(pop3): *:995 ssl_cert_file: /etc/ssl/mail-cert.pem ssl_key_file: /etc/ssl/mail-key.pem login_dir: /var/run/dovecot//login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login first_valid_uid: 150 last_valid_uid: 150 mail_extra_groups: mail mail_location: maildir:/var/vmail/%d/%u maildir_copy_with_hardlinks: yes mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): outlook-idle pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: user: nobody verbose: yes debug: yes debug_passwords: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: mail #-----------/dovecot.conf end-------------- #-----------/dovecot-sql.conf-------------- driver = mysql connect = host=localhost dbname=postfix user=postfix password=Password default_pass_scheme = MD5-CRYPT user_query = SELECT '/var/vmail/%d/%n' as home, 'maildir:/var/vmail/%d/%n' as mail, 150 AS uid, 8 AS gid, concat('dirsize:storage=', quota) AS quota FROM mailbox WHERE username = '%u' AND active = '1' password_query = SELECT username as user, password, '/var/vmail/%d/%n' as userdb_home, 'maildir:/var/vmail/%d/%n' as userdb_mail, 150 as userdb_uid, 8 as userdb_gid FROM mailbox WHERE username = '%u' AND active = '1' #-----------/dovecot-sql.conf end-------------- Rgds CH

4 3

[Dovecot] utime : operation not permitted
by Jim Horner 06 Jul '07

06 Jul '07

With the upgrade to 1.0.1, I am seeing some errors/warnings dovecot: IMAP(jhorner(a)arinbe.com): utime(/home/arinbe/Maildir/.info/tmp) failed: Operation not permitted: 1 Time(s) dovecot: IMAP(jhorner(a)arinbe.com): utime(/home/arinbe/Maildir/.resumes.vabch/tmp) failed: Operation not permitted: 1 Time(s) Different directories on different days. Different users on different days. Always /tmp directory. Always a /tmp of a shared namespace. The /tmp directory in question is mode 770, with group users, just like the rest of the /arinbe/Maildir hierarchy. As far as I can tell it doesn't affect anything on the client side. dovecot -n ssl_cert_file: /etc/ssl/arinbe/arinbe-godaddy.crt ssl_key_file: /etc/ssl/arinbe/arinbe.key ssl_cipher_list: ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:!LOW:!SSLv2:+EXP:@STRENGTH login_dir: /usr/local/var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login login_greeting: I am the IMAP Whisperer and I am ready. mail_location: maildir:%h/Maildir umask: 7 mail_plugins: acl imap_client_workarounds: delay-newmail outlook-idle namespace: type: public separator: . prefix: COMPANY. location: maildir:/home/arinbe/Maildir:CONTROL=%h/shared-settings/company/control:INDEX=%h/shared-settings/company/index namespace: type: public separator: . prefix: ROOTMAIL. location: maildir:/home/rootmail/Maildir:CONTROL=%h/shared-settings/rootmail/control:INDEX=%h/shared-settings/rootmail/index namespace: type: private separator: . prefix: INBOX. inbox: yes auth default: mechanisms: plain login default_realm: arinbe.com user: nobody passdb: driver: ldap args: /etc/dovecot/dovecot-ldap-arinbe.conf passdb: driver: ldap args: /etc/dovecot/dovecot-ldap-domains.conf userdb: driver: prefetch userdb: driver: ldap args: /etc/dovecot/dovecot-ldap-arinbe.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap-domains.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 438 user: postfix group: postfix master: path: /usr/local/var/run/dovecot/auth-master mode: 432 user: nobody group: mail plugin: acl: vfile:/etc/dovecot/dovecot-acls

2 9

[Dovecot] Debian packages for Dovecot 1.0.1xx (sarge)
by Moritz Mertinkat 06 Jul '07

06 Jul '07

Hi there, i'm looking for Debian sarge dovecot packages (yes, still running sarge). Anyone here that has a backported package? Greetings, Moritz

2 1

[Dovecot] modules/imap/lib02_imap_quota_plugin.so: undefined symbol: quota_set
by Philipp Kolmann 06 Jul '07

06 Jul '07

Hi, I wanted to enable FS quota support in dovecot, and have configured the following directives: protocol imap { mail_plugins = imap_quota } plugin { quota = fs } With this additional settings, my normally working dovecot.conf doesn't start anymore: Starting mail server: dovecotEdlopen(/usr/lib/dovecot/modules/imap/lib02_imap_quota_plugin.so) failed: /usr/lib/dovecot/modules/imap/lib02_imap_quota_plugin.so: undefined symbol: quota_set Error: imap dump-capability process returned 89 I have tested this issue on the following versions: * Debian etch: 1.0.rc15 * RedHat AS 5: 1.0.rc15 * Debian sid: 1.0.0 Thanks for any help in this issue. Philipp Kolmann -- If you have problems in Windows: REBOOT If you have problems in Linux: BE ROOT

3 3

[Dovecot] assertion failed & invalid password field
by Ralf Hildebrandt 06 Jul '07

06 Jul '07

I'm getting these in my log: Jul 6 09:52:51 postamt dovecot: imap-login: file ssl-proxy-openssl.c: line 460 (ssl_proxy_new): assertion failed: (fd != -1) Jul 6 09:52:51 postamt dovecot: child 31576 (login) killed with signal 6 Jul 6 10:37:44 postamt dovecot: imap-login: file ssl-proxy-openssl.c: line 460 (ssl_proxy_new): assertion failed: (fd != -1) Jul 6 10:37:44 postamt dovecot: child 25241 (login) killed with signal 6 Jul 6 13:14:51 postamt dovecot: imap-login: file ssl-proxy-openssl.c: line 460 (ssl_proxy_new): assertion failed: (fd != -1) Jul 6 13:14:51 postamt dovecot: child 4418 (login) killed with signal 6 and I get those for accounts I deactivated using "usermod -L", maybe dovecot should log something like "account disabled" instead: Jul 6 11:07:01 postamt dovecot: auth(default): shadow(vnedwed,77.128.63.72): invalid password field Jul 6 11:07:06 postamt dovecot: auth(default): shadow(vnedwed,77.128.63.72): invalid password field Jul 6 14:12:40 postamt dovecot: auth(default): shadow(jechafch,141.42.4.251): invalid password field This is dovecot-1.0.1 -- Ralf Hildebrandt (Ralf.Hildebrandt(a)charite.de) plonk(a)charite.de Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155 http://www.arschkrebs.de Your eyes are weary from staring at the CRT. You feel sleepy. Notice how restful it is to watch the cursor blink. Close your eyes. The opinions stated above are yours. You cannot imagine why you ever felt otherwise.

1 0

[Dovecot] Virtual servers
by John Hedges 06 Jul '07

06 Jul '07

Hello I'm migrating from Courier to Dovecot (1.0.rc15) on Debian. I am trying to set up virtual servers based on the principal in this thread: http://www.dovecot.org/list/dovecot/2006-October/017165.html which suggests something like this to support multiple certificates: server foo { listen = 1.2.3.4 ssl_cert_file = /etc/ssl/certs/foo.cer } server bar { listen = 1.2.3.5 ssl_cert_file = /etc/ssl/certs/bar.cer } My virtual configs look like this: server mail.domain1.org { listen = 1.2.3.4 protocols = pop3 pop3s imap imaps ssl_cert_file = /etc/mail/hosts/domain1.org/ssl.crt ssl_key_file = /etc/mail/hosts/domain1.org/ssl.key auth default { mechanisms = plain passdb passwd-file { args = /etc/mail/hosts/domain1.org/userdb } userdb passwd-file { args = /etc/mail/hosts/domain1.org/userdb } } } server mail.domain2.org { listen = 1.2.3.5 protocols = imap imaps ssl_cert_file = /etc/mail/hosts/domain2.org/ssl.crt ssl_key_file = /etc/mail/hosts/domain2.org/ssl.key auth default { mechanisms = plain passdb passwd-file { args = /etc/mail/hosts/domain2.org/userdb } userdb passwd-file { args = /etc/mail/hosts/domain2.org/userdb } } } but I can't get ithis to work. Dovecot starts but authorisation fails. Is this kind of setup possible - is it possible to configure different passwd-files for connections on different IPs, or am I going to have to run separate instances of Dovecot for each virtual host? Thanks John

2 1

[Dovecot] Dovecot with iPhone
by Erik Dasque 05 Jul '07

05 Jul '07

Hi, anyone using their Dovecot server with an iPhone ? While the iPhone is able to see the Inbox, I can't get it to see the other folder. I have tried ~/Maildir, /home/ed/Maildir and Maildir as the IMAP prefix but to no avail. Anything I am overlooking ? Erik

3 4

[Dovecot] Index question
by Stewart Dean 05 Jul '07

05 Jul '07

The day I switch our user to dovecot and it goes into production, there will be a few thousand people all generating their indices for the first time (we have a legacy requirement for procmail, at least for now), so I wondered: 1) Is there is anyway to pre-emptively force indexing? 2) Is there any value in doing so? That is, will I gain much in terms of making the first time everyone connects to dovecot quicker (not that big initial wait)? -- ==== Stewart Dean, Unix System Admin, Henderson Computer Resources Center of Bard College, Annandale-on-Hudson, New York 12504 sdean(a)bard.edu voice: 845-758-7475, fax: 845-758-7035

7 8

Re: [Dovecot] Permission errors when creating/reading files in users' mail directories
by Bryan K. Wright 05 Jul '07

05 Jul '07

tss(a)iki.fi said: >> Jul 5 09:25:49 imap dovecot: IMAP(uid): open() failed with mbox file >> /var/spool/mail/uid: Permission denied > Sounds like your userdb is returning wrong uid. Set mail_debug=yes to see what > Dovecot is really using. Excellent! After looking at the uids, I found that my test user had both an entry in our ldap database and the local /etc/passwd file. Removing the spurious /etc/passwd entry (and fixing the local file ownerships) gets rid of the permission problems. Thanks for your help. Bryan -- ======================================================================== Bryan Wright |"If you take cranberries and stew them like Physics Department | applesauce, they taste much more like prunes University of Virginia | than rhubarb does." -- Groucho Charlottesville, VA 22901| (434) 924-7218 | bryan(a)virginia.edu ========================================================================

1 0

[Dovecot] Mark E-Mail as read
by Jens M. 05 Jul '07

05 Jul '07

Hi all, is there a way to configure Dovecot, so that it marks my e-mails as read, when I recieve them with pop3, but leave them on the server? Regards, Jens

4 4

[Dovecot] Permission errors when creating/reading files in users' mail directories
by Bryan Wright 05 Jul '07

05 Jul '07

Hi folks, I'm trying to migrate an old uw-imap server to dovecot, and running into puzzling (to me) permission problems. I've configured mail_location as follows: mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u and each user's mail directory has permissions like this: drwx------ 2 uid gid 4096 Jul 5 09:26 /home/uid/mail But when I try to check a user's mail using an imap client, I see the following error: Jul 5 09:59:49 imap dovecot: IMAP(uid): mkdir_parents(/home/uid/mail/.imap/ INBOX) failed: Permission denied If I open up the permissions so anyone can write, I find that the .imap directory is successfully created, and owned by "uid". Is dovecot initially creating the directory with some other ownership, and then changing the ownership to "uid"? I can get around this problem by setting INDEX in mail_location, and pointing it to a directory with more open permissions, but then I run into the next problem: Jul 5 09:25:49 imap dovecot: IMAP(uid): open() failed with mbox file /var/spool/mail/uid: Permission denied In this case, the permissions are set as follows: -rw------- 1 bkw1a mail 1267 Jul 5 08:47 /var/spool/mail/uid How should the permissions be set on the spool files? Thanks in advance, Bryan -- ======================================================================== Bryan Wright |"If you take cranberries and stew them like Physics Department | applesauce, they taste much more like prunes University of Virginia | than rhubarb does." -- Groucho Charlottesville, VA 22901| (434) 924-7218 | bryan(a)virginia.edu ========================================================================

2 1

[Dovecot] dovecot.conf pop3_uidl_format
by Peter Eriksson 05 Jul '07

05 Jul '07

From the Dovecot 1.0.1 sample dovecot.conf file: # If you want UIDL compatibility with other POP3 servers, use: # UW's ipop3d : %08Xv%08Xu ... # Note that Outlook 2003 seems to have problems with %v.%u format which was # Dovecot's default, so if you're building a new server it would be a good # idea to change this. %08Xu%08Xv should be pretty fail-safe. # # NOTE: Nowadays this is required to be set explicitly, since the old # default was bad but it couldn't be changed without breaking existing # installations. %08Xu%08Xv will be the new default, so use it for new # installations. # pop3_uidl_format = %08Xu%08Xv Notice the *very* small difference in the format between UW's ipop3d and the ones mentioned a little bit below? I think I just got bitten by this (we moved from UW's ipop3d to Dovecot). Loooots of users just got a lot of new (old) mail again ("Leave mail on server" is a popular setting). Ah well. They really should move to IMAP anyway and now they got some summer reading to do :-) Is the difference intentional? If so then perhaps this should be more clearly pointed out! - Peter

2 2

[Dovecot] dotlock O_EXCL query
by derek kit hoong foo 05 Jul '07

05 Jul '07

Hi there, I was wondering if someone can assist with clarifying why O_EXCL does not always work with NFS. Is it related to NFS protocol version support or export permissions mode out of the Celerra/Netapp ( e.g: mixed mode, unix file permissions ? ) Please advise. Thanks. Regards, new dovecot user.

2 1

[Dovecot] MailMan option
by Sergey A. Kobzar 05 Jul '07

05 Jul '07

Hi guys, Is it possible receive my own posts to the list? I have configured such option "Receive your own posts to the list? - Yes" on Mailman page but it still does not work. Any ideas? -- Sergey

2 2

[Dovecot] problem with quota
by juan carlos 04 Jul '07

04 Jul '07

hi everyone I have dovecot 1.0.rc15-2, postfix 2.3.8 and virtual users and domains installed in debian sarge, the users quota are not working. I have applied the pacth VDA and didn't work, if a I sent a mail to another user which exceeds his quota this user can receive the mail without problem, this said to me that the quota doesn't work. I use maildir in mi configuration. Please help me with this problem.

3 2

[Dovecot] PAM timed out, kill failed, auth SEGV
by Thomas Arnett 04 Jul '07

04 Jul '07

My log is full of blocks like this: auth(default): pam(?): PAM child process 13576 timed out, killing it auth(default): PAM: kill(13576) failed: No such process Often, this is recorded for several pids at once. Occasionally, there's a single burst when a virtual user logs in, immediately before pam_authenticate() fails and checkpassword is executed. When this happens, pam() contains the username and remote IP. Usually, it starts 2 minutes after a login attempt (successful or not) and repeats every 10 seconds indefinitely. pam() contains something else: ~87% ? ~ 9% [garbage],master ~ 4% ?,master < 1% [empty] [garbage] varies; it seems to be constant for an instance of auth, but I haven't verified this. Eventually, auth segfaults: Core was generated by `dovecot-auth'. Program terminated with signal 11, Segmentation fault. ... #0 0x08087a68 in str_sanitize_append (dest=0x80a8950, src=0x3d9 <Address 0x3d9 out of bounds>, max_len=64) at str-sanitize.c:11 p = 0x3d9 <Address 0x3d9 out of bounds> #1 0x08057a1d in get_log_str (auth_request=0x80c6a00, subsystem=0x808f7cd "pam", format=0x808f9ac "PAM child process %s timed out, killing it", va=0x597f8c5c ":\211\n\b?|\t\b?|\t\b?\214\177Y") at auth-request.c:1121 ip = 0xa <Address 0xa out of bounds> str = (string_t *) 0x80a8950 #2 0x08057c62 in auth_request_log_error (auth_request=0x80c6a00, subsystem=0x808f7cd "pam", format=0x808f9ac "PAM child process %s timed out, killing it") at auth-request.c:1177 va = 0x597f8c5c ":\211\n\b?|\t\b?|\t\b?\214\177Y" #3 0x080658ee in pam_child_timeout (context=0x0) at passdb-pam.c:537 request = (struct pam_auth_request *) 0x80c6de8 iter = (struct hash_iterate_context *) 0x80bcdb0 key = (void *) 0xa9e value = (void *) 0x80c6de8 timeout = 1182548633 #4 0x08079fc5 in io_loop_handle_timeouts (ioloop=0x80b09b0, update_run_now=true) at ioloop.c:294 t = (struct timeout *) 0x80b4ca8 called_timeouts = (struct timeout *) 0x80b4ca8 tv = {tv_sec = 0, tv_usec = 0} t_id = 2 #5 0x0807b32e in io_loop_handler_run (ioloop=0x80b09b0) at ioloop- epoll.c:175 ctx = (struct ioloop_handler_context *) 0x80b09d8 events = (struct epoll_event *) 0x80b0a18 event = (const struct epoll_event *) 0x80b0a18 list = (struct io_list *) 0x80c42d8 io = (struct io *) 0x0 tv = {tv_sec = 1, tv_usec = 180418} events_count = 12 t_id = 2 msecs = 1181 ret = 0 i = 1 j = 3 call = true #6 0x0807a0a8 in io_loop_run (ioloop=0x80b09b0) at ioloop.c:329 No locals. #7 0x0805d7ee in main (argc=1, argv=0x597f8ec4) at main.c:321 foreground = false My config (Gentoo Linux hardened/x86/2.6): # 1.0.1: /etc/dovecot/dovecot.conf listen: [::1] ssl_listen: [::] ssl_cert_file: /etc/ssl/misfeature.net/crt ssl_key_file: /etc/ssl/misfeature.net/key ssl_cipher_list: HIGH login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login login_greeting_capability: yes verbose_proctitle: yes first_valid_uid: 1000 first_valid_gid: 100 mail_location: maildir:~/mail mail_debug: yes maildir_copy_with_hardlinks: yes mail_drop_priv_before_exec: yes imap_client_workarounds: delay-newmail outlook-idle auth default: verbose: yes debug: yes passdb: driver: pam args: * passdb: driver: checkpassword args: /usr/local/bin/checkpassword userdb: driver: passwd userdb: driver: prefetch socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix I turned on the various logging options while investigating this problem; the messages appear even without. -- TA

2 1

[Dovecot] Maildir configuration vs ZFS and snapshots...
by Peter Eriksson 04 Jul '07

04 Jul '07

I have a little tricky issue around here. First some background: Every user is assigned their own ZFS filesystem, and it's mounted as /home/USER with a Maildir inside it. The there is a filesystem snapshot (read-only) taken automatically every day by the system. The idea is to allow users easy access to backup copies of their mail so that they can restore things themself.. For example this structure (somewhat abbreviated, some files/dirs removed): /home/testson/ .zfs/ snapshot/ 2007-06-18/ Maildir/ cur/ new/ tmp/ .Trash/ cur/ new/ tmp/ Maildir/ cur/ new/ tmp/ .Trash/ cur/ new/ tmp/ Now,I can access the normal Maildir INBOX and folders nicely via Dovecot/IMAP. The thing is I'd like to be able to access the snapshot too via Dovecot/IMAP somehow. My first idea was to use Dovecots namespace feature like this in the config file: namespace private { separator = / prefix = snapshot/ location = maildir:~/.zfs/snapshot/2007-06-18/Maildir:CONTROL=~/.dovecot/control:INDEX=~/.dovecot/index } This works great for the mail folders inside the Maildir - but not for the INBOX which isn't displayed at all... (Ie, under the "snapshot" prefix I only see "Trash" etc when looking at the folder from an IMAP client). I think that I'd need to use the "INBOX=" option for Dovecot to see the top-level "new/cur/tmp" directories in the snapshot folder, but you can only have one INBOX if I'm not mistaken? Any suggestions on how best to configure this? - Peter

3 6

[Dovecot] multiple userdb/passdb
by Thomas Balsfulland 04 Jul '07

04 Jul '07

hi all, i am using debian etch with dovecot imap (version 1.0.rc15-2) and mysql-database for the virtual mailuser. all informations (username, password, mailbox format, mailbox location, quota) are find in the sql. the maildir are locates at /home/vmail/, every is working fine. now i want to use imap for the system user as well - at the moment they cant user imap because they are not find in the sql db. so i set a second userdb/passwd in the dovecot.conf for the local system-user. now the config says: auth default { passdb passwd-file { args = /etc/dovecot/localuser } passdb sql { args = /etc/dovecot/dovecot-sql.conf } userdb passwd-file { args = /etc/dovecot/localuser } userdb sql { args = /etc/dovecot/dovecot-sql.conf } } and /etc/dovecot/localuser looks: localuser1:password:1000:1000::/home/localuser1::userdb_mail=mbox:~/Mail:INBOX=~/Mail/incoming now the local user is able to authenticate, but cant acces his mailboxes the logfile says: host dovecot: imap-login: Login: user=<localuser1>,method=PLAIN, rip=195.xxx.xxx.xxx, lip=193.yyy.yyy.yyy, TLS host dovecot: IMAP(tbals): lstat(/home/vmail//localuser1/cur) failed: Permission denied host dovecot: IMAP(tbals): lstat(/home/vmail/shared) failed: Permission denied it seems dovevot ignore the settings in /etc/dovecot/localuser. could someone help? regards thomas -- thomas balsfulland tbals(a)ctrl-c.de zwischen mut und dummheit liegt nur ein grat der sich durch das vorbereitetsein unterscheidet

1 0

[Dovecot] OT - Claws Mail on Mac OS X
by Gerard 04 Jul '07

04 Jul '07

Someone on this list recently asked regarding the availability of Claws Mail on Mac OS X architecture, A BETA release has just been issued. http://damien.krotkine.com/claws/ -- Gerard

1 0

[Dovecot] convert plugin: endless conversion and duplicate messages
by Andrew Ziem 03 Jul '07

03 Jul '07

Hi, When an mbox has a filename with a period, the Dovecot 1.0.1 convert plugin will endlessly convert the same mbox causing duplicate messages. To reproduce, create try converting two mboxes: one with a valid name and another with an invalid name. Then, repeat the login procedure a few times. Dovecot should do something more graceful such as replacing periods with another character. Here's /var/log/mail/errors Jul 2 08:29:44 aslan dovecot: IMAP(crystalp): Mailbox conversion: Couldn't create mailbox Print Shop Misc.: Invalid mailbox name Jul 2 08:39:46 aslan dovecot: IMAP(crystalp): Mailbox conversion: Couldn't create mailbox Print Shop Misc.: Invalid mailbox name Jul 2 08:48:54 aslan dovecot: IMAP(crystalp): Mailbox conversion: Couldn't create mailbox Print Shop Misc.: Invalid mailbox name Jul 2 08:48:58 aslan dovecot: IMAP(crystalp): Mailbox conversion: Couldn't create mailbox Print Shop Misc.: Invalid mailbox name Jul 2 08:49:39 aslan dovecot: IMAP(crystalp): Mailbox conversion: Couldn't create mailbox Print Shop Misc.: Invalid mailbox name Jul 2 08:59:40 aslan dovecot: IMAP(crystalp): Mailbox conversion: Couldn't create mailbox Print Shop Misc.: Invalid mailbox name Jul 2 09:09:40 aslan dovecot: IMAP(crystalp): Mailbox conversion: Couldn't create mailbox Print Shop Misc.: Invalid mailbox name Jul 2 09:20:23 aslan dovecot: IMAP(crystalp): Mailbox conversion: Couldn't create mailbox Print Shop Misc.: Invalid mailbox name I didn't test other non-{alphanumeric,whitespace} characters. Other than this and my previous e-mails, our conversion from UW-IMAP mboxes went nicely. I notice the performance difference, and our users will be happy to finally have proper subfolders. Andrew

1 0

[Dovecot] listen parm questions
by Stewart Dean 03 Jul '07

03 Jul '07

Q1: My imap server has 4 interfaces, but only one is used for imap traffic. Can I do this: listen = 10.20.30.40:10143 (when imap.mycollege.edu is 10.20.30.40) Or is there even any benefit to doing this? Q2: Can I specify more than one port....during test eval, I've had the IT dept using port 1043 for listen....which I will, of course, change to 143 when DC goes production. So my department isn't cut off by that switchover, can I do this? listen = *:10143,143 or this listen = 10.20.30.40:10143,143 I did look at the wiki but didn't see anything -- ==== Stewart Dean, Unix System Admin, Henderson Computer Resources Center of Bard College, Annandale-on-Hudson, New York 12504 sdean(a)bard.edu voice: 845-758-7475, fax: 845-758-7035

3 2

[Dovecot] [Fwd: Bounce action notification]
by Timo Sirainen 03 Jul '07

03 Jul '07

Anyone have ideas why this happened? Nothing special in logs, all tss(a)iki.fi deliveries went OK. Mailman's bounce log is unhelpful. Why does it say it tried to deliver to dovecot(a)dovecot.org and when it failed it disabled my account? Why doesn't it even bother saying which remote host gave an error? Grepping mail.log for 'This user' shows nothing.

5 7

[Dovecot] dovecot + winbind problem
by Gregorics Tamás 03 Jul '07

03 Jul '07

Hi! I'm having some problem with our setup. I have a linux server authenticating from a win2k3 domain controller via winbind and pam. When i try to log in I receive the following error messages: Jul 3 10:26:10 zeusz pam_winbind[20375]: user 'tamas' granted access Jul 3 10:26:10 zeusz pam_winbind[20375]: user 'tamas' OK Jul 3 10:26:10 zeusz pam_winbind[20375]: user 'tamas' granted access Jul 3 10:26:10 zeusz dovecot: auth(default): userdb(tamas,127.0.0.1): user not found from userdb Jul 3 10:26:10 zeusz dovecot: imap-login: Internal login failure: user=<tamas>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured But when i try other services which also use winbind via pam (like popa3d) i can log in without any problem. Any ideas?

2 4

[Dovecot] NameSpases
by Sergey A. Kobzar 03 Jul '07

03 Jul '07

Hi guys, I have a problem with namespases in Dovecot: namespace public { separator = / prefix = Public/ location = maildir:/home/mail/public } namespace private { separator = / prefix = inbox = yes } namespace private works well, but I can't subscribe to namespace Public in Outlooks Express, The Bat! and Mozilla Thunderbird. Outlook shows error 'Mailbox doesn't exist: Public'. Same with The Bat!. maildir:/home/mail/public exists and has correct rights: # ls -alh /home/mail/public/ total 0 drwx------ 5 mail mail 184 Jul 2 21:55 . drwxr-x--- 4 mail root 104 Jul 2 21:01 .. drwx------ 2 mail mail 48 Jul 2 21:01 cur -rw-r--r-- 1 mail mail 0 Jul 2 21:54 dovecot-shared drwx------ 2 mail mail 48 Jul 2 21:01 new -rw-r--r-- 1 mail mail 0 Jul 2 21:55 subscriptions drwx------ 2 mail mail 48 Jul 2 21:01 tmp # dovecot --version 1.0.1 # uname -rsm Linux 2.6.20-gentoo-r8 i686 Any help appreciated :) -- Sergey

2 2

[Dovecot] Leaky dovecot-auth ?
by Christian Balzer 03 Jul '07

03 Jul '07

Hello, as mentioned before, we are migrating our mailboxes from a 0.99 cluster to a 1.0.0 one. With 0.99 dovecot-auth (with LDAP as backend) was leaking quite happily and the dovecot-auth processes frequently did hit their size limit and thus were killed and restarted. Which in 0.99 at least lead to authentication failures on a busy server, as the dovecot master process just killed off the auth process w/o disabling new connections to it first and letting any current authentications finish. The activity per cluster node on the 0.99 boxes was about 700k logins (mostly pop3) per day and 5 dovecot-auth processes with a 64MB limit each. The migrated users so far are of the less active kind and on one node of the 1.0.0 cluster we see about 70k logins/day and currently the dovecot-auth process there is hovering at 123/84MB (VIRT/RES in top). It was at 121/82MB when I checked 4 hours ago and no new users have been added to that node for 2 days. Authentication backend is still LDAP, no caching, 256MB process size limit. There are just 16k users on that node at this point in time, with only 1200 distinct users generating those 70k logins/day. We will start migrating the rest of the users tomorrow and now I'm wondering: 1. How and why would the memory footprint of dovecot-auth grow when there is no change in the amount of users in the DB? 2. What will happen when the single dovecot-auth process reaches 256MB in the end? Internal housekeeping attempts of that process? A whack to the head from the master process like in 0.99 and thus more erroneous authentication failures, potentially aggravated by the fact that there is just single dovecot-auth process? I guess at the current rate of leakage we shall know the answers to #2 soon one way or another. ;) Regards, Christan -- Christian Balzer Network/Systems Engineer NOC chibi(a)gol.com Global OnLine Japan/Fusion Network Services http://www.gol.com/

3 15

[Dovecot] Semi-static userdb...?
by John Robinson 03 Jul '07

03 Jul '07

I'm trying to add "virtual" mailboxes to a system. Real users with different uids own domains. Each domain has a passwd-file passdb. I don't want to use this passwd-file for the userdb, because I want to fix the home, mail and uid/gid settings. Can I use the static userdb in a less static manner, e.g. userdb static { args = uid=%{owner of /vmail/%d} gid=%{gid of /vmail/%d} home=/vmail/%d/users/%u mail=mbox:/vmail/%d/users/%u/mail:INBOX=/vmail/%d/users/%u/INBOX } Or is it just a bad idea to let relatively untrusted domain owners manage their own passwd-file at all...? Cheers, John.

2 4

[Dovecot] userdb nss
by Timo Sirainen 03 Jul '07

03 Jul '07

I remembered people complaining how glibc ignores NSS errors with getpwent(), so I thought I'd see how easy it is to use NSS directly. Unless I misunderstood something, this should work: http://hg.dovecot.org/dovecot/rev/c9b49ed99d28 Tested only with "files" backend. Also it won't work with Solaris, it seems to have completely different NSS modules. Don't know about BSDs. Can someone test how it handles LDAP/NIS failures (or if it even works with them)?

1 0

[Dovecot] Force rebuild v1.0.1
by Bruce Bodger 02 Jul '07

02 Jul '07

Haven't seen a thread discussing forcing rebuilding of indexes / cache, so the question is, if these files in a users home directory were deleted... -rw------- 1 bb admin 80 May 17 15:05 dovecot-keywords -rw------- 1 bb admin 85449 Jul 2 06:15 dovecot-uidlist -rw------- 1 bb admin 6832 Jul 2 06:15 dovecot.index -rw------- 1 bb admin 752640 Jul 2 06:19 dovecot.index.cache -rw------- 1 bb admin 95416 Jul 2 06:20 dovecot.index.log -rw------- 1 bb admin 131104 Jun 27 21:32 dovecot.index.log.2 ...would they be rebuilt by dovecot? Thank you, B. Bodger

3 4

[Dovecot] Debian packages
by Moritz Mertinkat 02 Jul '07

02 Jul '07

Hi there, anyone interested in Debian Dovecot 1.0.1 packages? I have created a package for etch/stable... Could do that for sarge/oldstable as well. Greets, Maurice.

2 2

[Dovecot] v1.1 max connections per user
by Timo Sirainen 02 Jul '07

02 Jul '07

v1.1 has now: # Maximum number of connections allowed for a user. The limits are enforced # separately for IMAP and POP3 connections, so you can move this setting # inside protocol {} to have separate settings for them. NOTE: The user names # are compared case-sensitively, so make sure your userdb returns usernames # always using the same casing so users can't bypass this limit! #mail_max_user_connections = 10 Is 10 a good default? Currently new connections just fail authentication with a "Maximum number of connections exceeded" error message. v2.0 hopefully will instead disconnect the oldest idling connection with IMAP.

5 7

[Dovecot] Mbox vs maildir
by Simon Gao 02 Jul '07

02 Jul '07

> The upcoming dbox and cydir formats of course beat everything in > performance :) Is dbox in Dovecot 1.1 tree now? Is it the redesigned dbox? How close is dbox ready for general use? I am interested in testing it out. Where can I find instruction on how to configure dovecot to use dbox? Simon

2 1

[Dovecot] auto Cc: with dovecot+mysql
by albinootje 02 Jul '07

02 Jul '07

hi, i'm migrating 1 mail-server from LDAP+postfix+courier to mysql+postfixadmin+dovecot, on a debian etch machine i have followed this howto : http://wiki.dovecot.org/HowTo/DovecotLDAPostfixAdminMySQL (changed uid and gid for usage in debian, the SVN-postfixadmin didn't work for me, so i used the stable version, and haven't tested the SASL-part yet) this works great, except the LDAP+postfix setup has for some users an automatic Cc: say, for example, 1 user, with email-address jeremy(a)mydomain.org, will also have all the emails going to jeremy(a)gmail.com so far i have failed to find out whether this can be done with postfix in that setup, following above mentioned howto (postfixadmin can do aliases, but not "auto Cc: for virtual domains afaik) can this be done by dovecot LDA maybe ? or ... can i have a dovecot.conf where certain users use LDAP instead of mysql for lookups and those kind of preferences ? grtz, albi

2 1

[Dovecot] Differences in deliver and IMAP
by Andy Shellam 01 Jul '07

01 Jul '07

Hi I've now got Dovecot 1.0.1 authenticating with PostgreSQL for the IMAP service, but deliver doesn't seem to work the same. I'm using the "prefetch" passdb, but deliver doesn't seem to recognise it. Here's the log for a deliver attempt: dovecot: Jul 01 16:51:35 Info: auth(default): master in: USER 1 andy.shellam(a)mailnetwork.co.uk service=deliver dovecot: Jul 01 16:51:35 Error: auth(default): prefetch(andy.shellam(a)mailnetwork.co.uk): passdb didn't return userdb entries dovecot: Jul 01 16:51:35 Info: auth(default): master out: NOTFOUND 1 And here's the log for an IMAP login attempt straight after: dovecot: Jul 01 16:51:46 Info: auth(default): client in: AUTH 1 PLAIN service=IMAP lip=84.45.66.158 rip=82.165.38.62 resp=AGFuZHkuc2hlbGxhbUBtYWlsbmV0d29yay5jby51awBhYzI5Y2U4NHN5ZA== dovecot: Jul 01 16:51:46 Info: auth(default): sql(andy.shellam(a)mailnetwork.co.uk,82.165.38.62): query: SELECT <user_field> as user, <password_field> as password, <home_directory> AS userdb_home, <mail_directory> AS userdb_mail, <chroot_directory> AS userdb_chroot, <uid_field> AS userdb_uid, <gid_field> AS userdb_gid FROM <user_table> WHERE <user_field> = 'andy.shellam(a)mailnetwork.co.uk' dovecot: Jul 01 16:51:46 Info: auth(default): client out: OK 1 user=andy.shellam(a)mailnetwork.co.uk dovecot: Jul 01 16:51:46 Info: auth(default): master in: REQUEST 1 24949 1 dovecot: Jul 01 16:51:46 Info: auth(default): prefetch(andy.shellam(a)mailnetwork.co.uk,82.165.38.62): success dovecot: Jul 01 16:51:46 Info: auth(default): master out: USER 1 andy.shellam(a)mailnetwork.co.uk home=<home_directory> mail=maildir:<mail_directory> chroot=<chroot_directory> uid=<uid> gid=<gid> dovecot: Jul 01 16:51:46 Info: imap-login: Login: user=<andy.shellam(a)mailnetwork.co.uk>, method=PLAIN, rip=82.165.38.62, lip=84.45.66.158 This works if I use separate userdb and passdb queries. Does deliver not support the prefetch authentication method? Thanks, Andy.

2 1

Re: [Dovecot] v1.1 max connections per user
by Bill Boebel 01 Jul '07

01 Jul '07

On Sat, June 30, 2007 7:50 pm, Charles Marcus said: > Timo Sirainen, on 6/30/2007 7:25 PM, said the following: >> On Sat, 2007-06-30 at 19:11 -0400, Charles Marcus wrote: >>> Timo Sirainen, on 6/30/2007 6:43 PM, said the following: >>>> v1.1 has now: >>>> >>>> # Maximum number of connections allowed for a user. The limits are enforced >>>> # separately for IMAP and POP3 connections, so you can move this setting >>>> # inside protocol {} to have separate settings for them. NOTE: The user names >>>> # are compared case-sensitively, so make sure your userdb returns usernames >>>> # always using the same casing so users can't bypass this limit! >>>> #mail_max_user_connections = 10 >>>> >>>> Is 10 a good default? >>> I'm assuming this is per IP? >> >> No. I'm not sure if it should. Perhaps. It's mostly intended to prevent >> unintentional abuse by stupid clients, so having 3+ thunderbirds open in >> different locations with each having 5 connections should probably be >> allowed. > > Ok - you said 10 was the default - but then said that 15 (3 TBirds x 5) > connections should be allowed, which is more than 10... so... you just > meant that one could accommodate that by upping this limit to 15? I like 15. That way it is high and isn't as likely to affect existing installations unless they manually set it to something lower. Or if you want to have a separate default for POP vs IMAP, I'd use 5 for POP and 15 for IMAP.

3 2

[Dovecot] Copyright notices in code
by Timo Sirainen 30 Jun '07

30 Jun '07

I thought about committing this change to all .c files: Removed all Copyright Timo Sirainen comments. They weren't always correct and the year numbers were rarely updated when something was changed. Copyright is owned by the creator by default in practically all countries, there's no need to advertise it everywhere. Can anyone think of reasons why this wouldn't be a good idea?

7 7

Re: [Dovecot] connection dropped by imap
by Mantas 30 Jun '07

30 Jun '07

apache log say nothing. dovecot log : dovecot: Jun 30 10:56:06 Info: auth(default): passwd(diana(a)aaaaa.lt,127.0.0.1): unknown user dovecot: Jun 30 10:56:06 Info: auth(default): passwd(diana(a)aaaaa.lt,127.0.0.1): unknown user dovecot: Jun 30 10:56:06 Info: imap-login: Login: user=<diana(a)aaaaa.lt>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Jun 30 10:56:06 Info: IMAP(diana(a)aaaaa.lt): Disconnected: Logged out dovecot: Jun 30 10:56:07 Info: auth(default): passwd(diana(a)aaaaa.lt,127.0.0.1): unknown user dovecot: Jun 30 10:56:07 Info: auth(default): passwd(diana(a)aaaaa.lt,127.0.0.1): unknown user dovecot: Jun 30 10:56:07 Info: imap-login: Login: user=<diana(a)aaaaa.lt>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Jun 30 10:56:07 Info: IMAP(diana(a)aaaaa.lt): Disconnected: Logged out dovecot: Jun 30 10:57:07 Info: auth(default): passwd(diana(a)aaaaa.lt,127.0.0.1): unknown user dovecot: Jun 30 10:57:07 Info: auth(default): passwd(diana(a)aaaaa.lt,127.0.0.1): unknown user dovecot: Jun 30 10:57:07 Info: imap-login: Login: user=<diana(a)aaaaa.lt>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured when error "connection dropped by imap" appear, allways login procedure repeated 3 times (in log file). On Fri, 29 Jun 2007 23:24:12 +0200, Philipp Wollermann <philipp(a)igowo.de> wrote: > Mantas wrote: >>> when i create imap account in mail client (ex: outlook, thunderbird) > it's >>> allright. but if i want login with this account to webmail (i have 2 >>> webmail: squirrelmail and roundcube) commonly i get error. squirrelmail >>> say: Connection droped by imap. roundcube say nothing(white screen). > But >>> sometimes i can login. >>> > So.. what exactly appears in your system logfiles in /var/log when you > try to login and it does not work? Shouldn't that be the first thing to > look for? :) > > Regards, > Philipp

1 0

[Dovecot] connection dropped by imap
by Mantas 30 Jun '07

30 Jun '07

hello, when i create imap account in mail client (ex: outlook, thunderbird) it's allright. but if i want login with this account to webmail (i have 2 webmail: squirrelmail and roundcube) commonly i get error. squirrelmail say: Connection droped by imap. roundcube say nothing(white screen). But sometimes i can login. and i see one thing... when i restart apache, i can login above 1-2 hours, but later i can't login. i restart apache again and again i can login 1-2 hours. please help

2 2

[Dovecot] Document variable modifiers in pop3_uidl_format
by Ben Winslow 29 Jun '07

29 Jun '07

Attached is a trivial patch to document the fact one can use variable modifiers in pop3_uidl_format. -- Ben Winslow <rain(a)bluecherry.net>

1 0

[Dovecot] wiki.dovecot.org double-escapes capcha info
by Ben Winslow 29 Jun '07

29 Jun '07

The "capcha" on wiki.dovecot.org seems to be double-escaping HTML entities in the informational message, such that the wiki displays "Captcha to prevent wiki spam, write Dovecot here:" [sic.] When I dutifully entered "Dovecot," it didn't work, saying "You didn't provide the correct captcha. Use the browser's Back button and try again, or register an account to avoid this." [sic] It took a few minutes for me to realize what was going on and simply enter "Dovecot" for the capcha... -- Ben Winslow <rain(a)bluecherry.net>

1 0

[Dovecot] dovecot help
by Andy Fadich 29 Jun '07

29 Jun '07

Hello, I have a mail server which I upgraded yesterday. OLD: Redhat 9 sendmail (very old version) UW ipop3d usermin with readmail module for webmail access (very old version) NEW: Fedora Core 6 sendmail 8.13.8 Usermin for webmail again dovecot 1.0.0 # /etc/dovecot.conf protocols: pop3 login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/pop3-login mail_location: mbox:/home/%u/mail:INBOX=/var/spool/mail/%u mail_executable: /usr/libexec/dovecot/pop3 mail_plugin_dir: /usr/lib/dovecot/pop3 pop3_uidl_format: %08Xv%08Xu auth default: passdb: driver: pam userdb: driver: passwd Everything is working great, besides a few glitches here and there. However, When accessing mailboxes via webmail (usermin) an email shows up with a subject of DON'T DELETE THIS MESSAGE -- FOLDER INTERNAL DATA. As far as I can tell, this is an IMAP folder directory portion of the mailbox file that should be hidden. We don't use IMAP at all, and it is confusing people when they see this message that never was in their webmail before. Anyone know how to hide, remove or otherwise fix? Thank you in advance. Andy

4 9

[Dovecot] FreeBSD NFS file locking mechanism
by Tony Tsang 29 Jun '07

29 Jun '07

Hi all, I have some machines running FreeBSD and dovecot deployed. User's home dir is on NFS mount and I've found that dovecot only works with dotlock file locking mechanism, fcntl and flock failed. Now it causes problem with thunderbird (thunderbird is cachine connections) waiting forever and I noticed that dovecot is trying to acquire a lock but unsuccessful since the lock file is in place. Is it possible to use file locking other than dotlock on FreeBSD NFS mounted homedir? How do I achieve this? Thanks a lot. Tony Tsang.

4 4

[Dovecot] Server 1.0.1 migration: Maildir : UID inserted in the middle of mailbox
by damien chambe - EGS 29 Jun '07

29 Jun '07

Hello all, Since a migration from dovecot 1.rc16 to Dovecot 1.0.1 + new server, every day I have a lot of errors like this : Jun 21 17:42:34 dovecot1 deliver(damien.chambe(a)egs-gestion.fr): msgid=<467A9B3E.5070605(a)egs-gestion.fr>: saved mail to INBOX Jun 21 17:42:34 dovecot1 postfix/pipe[10242]: 92DD11FA8B: to=<damien.chambe(a)egs-gestion.fr>, relay=dovecot, delay=0, status=sent (egs-gestion.fr) Jun 21 17:42:34 dovecot1 postfix/qmgr[2724]: 92DD11FA8B: removed Jun 21 17:42:37 dovecot1 dovecot: IMAP(damien.chambe(a)egs-gestion.fr): Maildir /mnt/baie/hula/dovecot/maildir/damien.chambe sync: UID inserted in the middle of mailbox (374 > 1, file = 1182330228.P30307Q0M224874.dovecot1:2,ST) Jun 21 17:42:37 dovecot1 dovecot: IMAP(damien.chambe(a)egs-gestion.fr): Disconnected: Mailbox is in inconsistent state, please relogin. Jun 21 17:51:41 dovecot1 dovecot: imap-login: Login: user=<damien.chambe(a)egs-gestion.fr>, method=PLAIN, rip=10.6.1.104, lip=10.5.3.38 Jun 21 17:51:41 dovecot1 dovecot: IMAP(damien.chambe(a)egs-gestion.fr): Corrupted index cache file /opt/dovecot/indexes/damien.chambe/.INBOX/dovecot.index.cache: indexid changed After this error, all UID are regenerated. And, when the user logs in, all headers are sent back to the client (IMAP / thunderbird 1.5.x or 2.0.0.4). No email are lost or duplicated, but it cause a huge traffic on our DSL lines, and user are complaining... There's also other errors related to UID: Jun 21 16:11:01 dovecot1 deliver(pr(a)egs-gestion.fr): rename(/mnt/baie/hula/dovecot/maildir/pr/dovecot-uidlist.lock, /mnt/baie/hula/dovecot/maildir/pr/dovecot-uidlist) failed: No such file or directory Jun 21 16:11:01 dovecot1 deliver(pr(a)egs-gestion.fr): file_dotlock_replace(/mnt/baie/hula/dovecot/maildir/pr/dovecot-uidlist) failed: No such file or directory Jun 21 16:11:02 dovecot1 deliver(pr(a)egs-gestion.fr): /mnt/baie/hula/dovecot/maildir/pr/dovecot-uidlist: next_uid was lowered (374 -> 373) Jun 21 16:11:02 dovecot1 deliver(pr(a)egs-gestion.fr): msgid=<467A85CB.50009(a)fica.fr>: saved mail to INBOX Jun 21 16:11:02 dovecot1 dovecot: IMAP(pr(a)egs-gestion.fr): rename(/mnt/baie/hula/dovecot/maildir/pr/dovecot-uidlist.lock, /mnt/baie/hula/dovecot/maildir/pr/dovecot-uidlist) failed: No such file or directory Here's the context: Our Dovecot server had to be changed due to a hardware problem I was forced to use SUSE SLES 10 for the new one, instead of SLES 9 on the old server. X86-32 I've kept the same configuration files for postfix, dovecot. We use dovecot deliver. Old postfix version was 2.1.1, now I have 2.2.9 During the migration, I've changed dovecot 1.rc16 to dovecot 1.0.0 When I saw this error, I upgraded to dovecot 1.0.1, but same problem (I use suse rpm packages ) I have 400 mailbox, all Maildir. The problem happens 50 times a day, so not on every mail received. I store mails on NFS, and index on local disk. There's only one dovecot server, so no multiple access. I've tried to remove all index files, and remove dovecot-uidlist, all is correctly re-created, but the problem remains. Could it be an NFS locking problem ? Since only mail are stored on maildir + NFS, and index on local disk, so I didn't set lock_method or nmap_disable Could it be related to this: see email from from Doug Concil : [Dovecot] NFS lock contention for dovecot-uidlist on may 17 , 2007 ? dovecot -n # 1.0.1: /etc/dovecot/dovecot.conf protocols: imap pop3 ssl_disable: yes disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_user: dovecotlogin login_process_per_connection: no login_processes_count: 5 max_mail_processes: 2048 first_valid_uid: 120 first_valid_gid: 12 default_mail_env: maildir:/mnt/baie/hula/dovecot/maildir/%n:INDEX=/opt/dovecot/indexes/%n mail_location: maildir:/mnt/baie/hula/dovecot/maildir/%n:INDEX=/opt/dovecot/indexes/%n mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv auth default: verbose: yes passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: dovecot group: mail plugin: quota: maildir:storage=1500000:messages=40000 Thanks, -- Cordialement, Damien Chambe EGS 42 bld jules janin - BP 240 - 42006 Saint Etienne Cedex 1 Tel : 04 77 49 48 16 Fax : 04 77 49 48 45 Site institutionnel : http://www.groupe-laurent.com Site catalogue : http://ecat.groupe-laurent.com

3 4

[Dovecot] lda and mail_location
by Mark Edwards 28 Jun '07

28 Jun '07

I have the following set in the main level of my dovecot.conf file: mail_location = maildir:/var/mail/virtual/%u I decided to enable the lda protocol for local delivery from postfix, so I could use sieve plugins. The lda protocol seems to ignore settings in the rest of the dovecot.conf file, however, such as the above. Unless lda has a pre-existing maildir mailbox, it can't create one. How do I give lda defaults to follow, if the above statement doesn't do it? Here is the output of dovecot -n Thanks! ---- # /etc/dovecot/dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap pop3 imaps pop3s listen: 127.0.0.1 ssl_listen: [::] ssl_cert_file: /etc/ssl/private/mail.antsclimbtree.com.pem ssl_key_file: /etc/ssl/private/mail.antsclimbtree.com.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login valid_chroot_dirs: /var/mail verbose_proctitle: yes first_valid_uid: 8 last_valid_uid: 8 first_valid_gid: 8 last_valid_gid: 8 mail_extra_groups: mail mail_location: maildir:/var/mail/virtual/%u maildir_copy_with_hardlinks: yes mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): outlook-idle pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: / inbox: yes auth default: mechanisms: plain login username_format: %Lu verbose: yes passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: mail group: mail

2 13

[Dovecot] UW-IMAP conversion part 2
by Andrew Z 28 Jun '07

28 Jun '07

FWIW, the Dovecot 1.0.1 convert plugin works with all my UW-IMAP mboxes moved to ~/mail. At least that shows that my system otherwise works. Also, I wrote a script to move the mboxes and preserve the IMAP subscriptions. (I hope the list accepts the attached script.)

1 0

[Dovecot] Locking problems on Dovecot 1.x in Maildir
by Ronald MacDonald 28 Jun '07

28 Jun '07

Hi list, Overall, everything works fine, and all the emails are delivered without anything messing up. But then, from time to time, the transaction logs for some users become corrupted, meaning emails cannot be read at all from dovecot. With a bit of a search on google, it seems to be a problem with locking on the transaction log. The individual files are fine - it's maildir, so the chances of 2 accesses on the same file are near impossible. But the problem seems to come when things get a bit busy, and inevitably, the transaction log tends to get corrupted all too often now for me to just go in and delete the log, and start afresh. I've addressed the issue temporarily by putting the index in memory by the :INDEX=MEMORY as opposed to a static file. This isn't ideal, but it seems to save the system going up in arms. Is there an alternative to using this system? Ronald. -- Ronald MacDonald http://www.rmacd.com/ 0777 235 1655

3 7

[Dovecot] convert plugin problem from UW-IMAP
by Andrew Z 28 Jun '07

28 Jun '07

Though there are conversion scripts, I'd like to give the convert plugin a chance. I have Dovecot 1.0.1 on Trustix Secure Linux 2.2 (Linux 2.4.27), and we had UW IMAP 2002e. Dovecot seems to work OK (e.g. I can add copy messages to it), but things break when I activate the convert plugin. The Wiki suggests convert_mail = mbox:~/:INBOX=/var/mail/%u # <--- locally changed to /var/spool/mail/%u convert_skip_broken_mailboxes=yes However, when I start Dovecot, then I get: Starting Dovecot Imap: ILoading modules from directory: /usr/lib/dovecot/imap IModule loaded: /usr/lib/dovecot/imap/lib20_convert_plugin.so IEffective uid=65534, gid=65534, home= Imbox: data=~/:INBOX=/var/spool/mail/dump-capability Imbox: root=, index=, inbox=/var/spool/mail/dump-capability Eopen(/.temp.localhost.localdomain.7834.96dd6ef6b7dfc402) failed: Permission denied Error: imap dump-capability process returned 89 Fatal: Invalid configuration in /etc/dovecot.conf So based on a tip on the mailing list, I try convert_mail = mbox:/home/users/%u:INBOX=/var/spool/mail/%u But the session fails, and Thunderbird can't connect properly. /var/log/dovecot.log Jun 26 11:39:25 Info: IMAP(andrewz): Module loaded: /usr/lib/dovecot/imap/lib20_convert_plugin.so Jun 26 11:39:25 Info: IMAP(andrewz): Effective uid=501, gid=501, home=/home/users/andrewz Jun 26 11:39:25 Info: IMAP(andrewz): mbox: data=/home/users/andrewz:INBOX=/var/spool/mail/andrewz Jun 26 11:39:25 Info: IMAP(andrewz): mbox: root=/home/users/andrewz, index=/home/users/andrewz, inbox=/var/spool/mail/andrewz Jun 26 11:39:25 Info: IMAP(andrewz): mbox: data=/home/users/andrewz:INBOX=/var/spool/mail/andrewz Jun 26 11:39:25 Info: IMAP(andrewz): mbox: root=/home/users/andrewz, index=/home/users/andrewz, inbox=/var/spool/mail/andrewz Jun 26 11:39:25 Info: IMAP(andrewz): maildir: data=/home/users/andrewz/Maildir Jun 26 11:39:25 Info: IMAP(andrewz): maildir: root=/home/users/andrewz/Maildir, index=/home/users/andrewz/Maildir, control=, inbox= Jun 26 11:39:25 Info: imap-login: Login: user=<andrewz>, method=PLAIN, rip=192.168.0.230, lip=192.168.0.60 /var/log/mail/errors Jun 26 11:39:25 localhost dovecot: IMAP(andrewz): Mailbox conversion: Couldn't copy mailbox Maildir/cur/1182879232.P7263Q0M965055.localhost.localdomain:2,Sa: BUG: Unknown internal error Jun 26 11:39:25 localhost dovecot: IMAP(andrewz): Mailbox conversion: Couldn't create mailbox directory Maildir..Trash Jun 26 11:39:25 localhost dovecot: IMAP(andrewz): Sending log messages too fast, throttling.. Jun 26 11:39:25 localhost dovecot: child 7888 (imap) returned error 89 I also tried convert_mail = mbox:%h:INBOX=/var/spool/mail/%u , but that acts like mbox:/home/users/%u. Then, I tried removing ~/Maildir . That doesn't help. When I connect via telnet, I get "1 OK Logged in.", and the remote host closes the connection. Also, I am not clear how Dovecot knows when to stop. With mbox in ~/mail, then dovecot can rename it, but we have mbox in ~/ which of course cannot be renamed. (I suggest moving mboxes to a new subdirectory.) I rebuild Dovecot based from a modified Fedora RPM .spec. My configuration is: # 1.0.1: /etc/dovecot.conf info_log_path: /var/log/dovecot.log protocols: imap ssl_disable: yes disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login mail_location: maildir:~/Maildir mail_debug: yes mail_plugins: convert auth default: passdb: driver: pam userdb: driver: passwd plugin: convert_mail: mbox:/home/users/%u:INBOX=/var/spool/mail/%u convert_skip_broken_mailboxes: yes Andrew

1 0

[Dovecot] deliver without lookup
by Bruno Puga 28 Jun '07

28 Jun '07

Hello friends! Is it possible to make deliver delivery a message without making a lookup using virtual users? I've read the section "Without a Lookup" (http://wiki.dovecot.org/LDA) in the wiki but I can´t do the same thing in my config and I can´t figure this out. From the forum I found this thread ( http://www.mail-archive.com/dovecot@dovecot.org/msg02956.html) but didn't understand why it didn't work in my config. I've tried: HOME=/path/to/user/homedir deliver -f test(a)test.com and I receive the message: Fatal: destination user parameter (-d user) not given I'm asking this because I need to migrate a system from maildrop to dovecot that has a script made by the system admin before me that makes something like follow. When someone send a message to all(a)domain.com, postfix call a transport that calls a script like this: ################################ cat > /tmp/message.txt cd /home/vmail/domain.com/ for i in *; do cat /tmp/message.txt | maildrop -d vmail $i domain.com done ################################ Where $i is all my users that have an domain account. This script delivery the message direct to the user's maildir, without making a lookup. I know to do this with Dovecot deliver making a lookup, but I'd like to do this without. Again, is it possible with deliver ? Or any ideas to workaround this? version 1.0.0 dovecot -n # /etc/dovecot/dovecot.conf base_dir: /var/run/dovecot/ log_path: /var/log/dovecot-imapd.log log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap disable_plaintext_auth: no login_dir: /var/run/dovecot//login login_executable: /usr/lib/dovecot/imap-login mail_location: maildir:/home/vmail/%d/%n/ mail_debug: yes mail_plugins: quota imap_quota acl imap_client_workarounds: outlook-idle delay-newmail namespace: type: private separator: . prefix: INBOX. inbox: yes namespace: type: private separator: . auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: prefetch userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail plugin: acl: vfile:/etc/dovecot/acls Thanks, Bruno.

2 1

[Dovecot] deliver errors
by azher＠niit.edu.pk 28 Jun '07

28 Jun '07

Hi, I am using ver 1.0.1 and getting the following errors in mail.log and auth.log respectively. However I can login to imap and retrieve emails no problem, while sending email is also ok. Jun 27 23:59:21 webmail sm-mta[1889]: l5RIvhQE001865: Warning: program /usr/local/libexec/dovecot/deliver unsafe: Group writable directory Jun 27 23:27:30 webmail dovecot-auth: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=dovecot ruser= rhost=127.0.0.1 user=azher Can someone plz suggest what can be wrong. Regards -Azher

4 7

[Dovecot] IMAP IDLE goes to sleep
by Julian Cowley 28 Jun '07

28 Jun '07

First of all, let me say that I'm really impressed with Dovecot. It is great. Problem description =================== Now I've got a possible bug I'd like to report. I've been learning about the IMAP protocol recently, and have started playing with the IDLE command. The problem is that Dovecot doesn't always notify the client when there is new mail available. While notifications work for the most part, it seems that Dovecot occasionally gets itself into a rut where it fails to notice any changes to the mailbox (new messages, flag changes, etc.). The problem usually becomes apparent when there is more than one email client accessing the same mailbox. In fact, this may be a requirement -- I only tested it once, but I couldn't reproduce the problem when I had only one connection open to the mailbox (which is in maildir format in my case). An example is included below. Any feedback on how to debug this problem further would be appreciated. An aside ======== After I found out about the IDLE command, I looked for implementations. I ran across this plug-in for Apple Mail (one of my favorite mail clients): http://www.rothwell.us/imapidle/index.html The web page notes that Leopard's Apple Mail may support the IDLE command natively, which is good news if true. It would be really cool if Dovecot's IDLE command can be made robust enough to make this feature really come alive. Example ======= This transcript is copied from an SSL connection directly to dovecot using openssl s_client. At the same time a separate client (Horde/IMP) has the same mailbox open: A0017 IDLE + idling * 7927 FETCH (FLAGS (\Seen \Recent)) * 7927 FETCH (FLAGS (\Deleted \Seen \Recent)) * OK Still here * OK Still here * OK Still here * OK Still here * 7940 EXISTS * 22 RECENT * OK Still here * OK Still here * OK Still here * OK Still here * OK Still here * OK Still here * OK Still here * OK Still here * OK Still here * OK Still here * 7941 EXISTS [At some point after this, something happens (or doesn't happen) and dovecot no longer notifies of new messages. The other client is still reading messages in the same mailbox and new mail is still arriving.] * OK Still here * OK Still here * OK Still here * OK Still here * OK Still here [The above message repeated another 30 times here. Finally, IDLE mode is terminated:] * OK Still here DONE * 7941 EXPUNGE A0017 OK Idle completed. [Now a NOOP is issued to gather any more untagged responses, and there's a deluge of responses, presumably all the stuff that happened while dovecot was asleep. Notice that the highest message is 7967 whereas the last one heard about was 7941.] A0018 NOOP * 7913 FETCH (FLAGS (\Deleted \Recent)) * 7914 FETCH (FLAGS (\Deleted)) * 7915 FETCH (FLAGS (\Deleted)) * 7916 FETCH (FLAGS (\Deleted)) * 7917 FETCH (FLAGS (\Deleted)) * 7918 FETCH (FLAGS (\Deleted)) * 7919 FETCH (FLAGS (\Deleted \Recent)) * 7920 FETCH (FLAGS (\Deleted \Recent)) * 7921 FETCH (FLAGS (\Deleted \Recent)) * 7922 FETCH (FLAGS (\Deleted \Seen)) * 7923 FETCH (FLAGS (\Deleted \Seen)) * 7925 FETCH (FLAGS (\Deleted \Seen)) * 7928 FETCH (FLAGS (\Deleted \Recent)) * 7967 EXISTS * 30 RECENT A0018 OK NOOP completed. Configuration ============= Here are the specifications of the dovecot used in the above test: version dovecot 1.0.1 os linux distro centos 4.5 fs ext3 arch x86_64 kernel 2.6.9-55.ELsmp configure --without inotify --with pam_stack --with forcequota2 cc gcc (GCC) 3.4.6 20060404 (Red Hat 3.4.6-8) In addition, I'm using the deliver LDA as the Postfix mailbox_command, and am using the dovecot-sieve plugin (which is used to set customized IMAP keywords). dovecot -n: # 1.0.1: /etc/dovecot.conf ssl_cert_file: /usr/lib/courier-imap/share/imapd.pem ssl_key_file: /usr/lib/courier-imap/share/imapd.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login first_valid_uid: 100 mail_location: maildir:~/Maildir maildir_copy_with_hardlinks: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 namespace: type: private separator: / inbox: yes auth default: default_realm: lava.net verbose: yes passdb: driver: sql args: /etc/dovecot-sql.conf userdb: driver: sql args: /etc/dovecot-sql.conf ps. Good thing there's no POP IDLE command!

5 7

[Dovecot] Can't see public folder contents after renaming folder
by Robert Fraser 28 Jun '07

28 Jun '07

Hi We are using Thunderbird 2.0.0.x (Linux and Windows) with IMAP accounts against Dovecot 1.0.beta3 on Ubuntu 6.06 Dapper with Maildir. It is all working well except when we rename a folder in the public namespace, the person who renames it can no longer see the contents of the folder. If we rename it back to the original name , the person can see the contents again. If we delete the files in the index directory for that folder on the file system, the user can see the folder contents again. Can anyone tell me how to fix this? Many thanks Rob Relevant dovecot.conf details follow ------------------------------- default_mail_env = maildir:~/.Mail namespace private { separator = / inbox = yes } namespace public { separator = / prefix = Public/ location = maildir:/home/mail/public:CONTROL=~/.Mail/control/public:INDEX=~/.Mail/index/public } maildir_copy_with_hardlinks = yes umask = 0007

4 4

[Dovecot] LSUB/SUBSCRIBE under namespaces
by bhayden＠umn.edu 27 Jun '07

27 Jun '07

Hi folks. Here's our situation: Migrating from UW-IMAP. Have lots (as in, tens of thousands) of clients set up using '~/mail' as the IMAP root, and using subscriptions. Dovecot mail_location is using '~' for mbox storage. We've disabled full filesystem access in Dovecot in order to use ACLs for shared folders. Hence we have a hidden namespace for backwards compatibility with those clients using '~/mail' (dovecot -n output is at the end of this message so you can see exact settings). Here's the problem. If the client is not taking advantage of this hidden namespace--say it's configured to use plain old 'mail' as the root directory--LSUB and SUBSCRIBE work as I'd expect. Subscribing to a folder called 'foo' puts this in the user's subscriptions file: mail/foo And this (from Thunderbird's log) is the LSUB exchange: 48203776[ed8ebe0]: 2e03600:server.umn.edu:A:SendData: 6 lsub "" "mail/*" 48203776[ed8ebe0]: ReadNextLine [stream=ed8ef88 nb=26 needmore=0] 48203776[ed8ebe0]: 2e03600:serverl.umn.edu:A:CreateNewLineFromSocket: * LSUB () "/" "mail/foo" 48203776[ed8ebe0]: ReadNextLine [stream=ed8ef88 nb=38 needmore=0] (trimmed...) 48203776[ed8ebe0]: 2e03600:bhayden.email.umn.edu:A:CreateNewLineFromSocket: 6 OK Lsub completed. All is well. However, when the client is configured with '~/mail' as the root and hence triggers the hidden namespace for such, SUBSCRIBE only writes a path relative to that namespace prefix. So as opposed the 'mail/foo' in the first example, we get: foo written to the subs folder. This leads to three problems: 1. Folders subscribed to when using this namespace will either disappear or break in a client using a different IMAP root setting that actually refers to the same place. For example, if this user moves to a client (such as both of the webmail offerings on campus) that use 'mail/' as the prefix, these folders will not be visible. This is a fairly sizeable population of our users, whom we aren't necessarily in the position to say "too bad" to. :) 2. Users moved over from UW-IMAP, who were using '~/mail' for the IMAP root, have a subscriptions file full of: ~/mail/bar Dovecot, with the same client configuration (since it's expecting a bare folder name to which it will prepend the namespace prefix), interprets this as so: 49036288[fa7e740]: 2eabc00:server.umn.edu:A:CreateNewLineFromSocket: * LSUB () "/" "~/mail/~/mail/foobar" Leading to having the folder displayed in the client's list, but giving an error on SELECT. Now, this one we could theoretically "solve" by scrubbing the prefixes out of subs files as we convert; however, that leaves us with #1 above, where the bare folder name in the subs file depends on (to the average user) an obscure client config setting, which in practice in a large heterogeneous environment is unreliable. 3. Users who have been using an IMAP root of 'mail' in some client and subscribed to folders, who then use a client with the root set to '~/mail' see what appears to be "duplicates" of the same folder at the top level and then within a bogus 'mail/' subdirectory. They (quite reasonably, from their perspective), delete one of these, only to find they've deleted the only copy of said folder. Not good. Also, users can't solve some of these problems by unsubbing and re-subbing on their own, as trying to unsubscribe from a folder that doesn't exist (such as ~/mail/~/mail/foobar in the example above) fails. So, I'm wondering if there's any way to address this. I looked through the list archives and code pretty thoroughly. Only thing I noticed was a CVS log mentioning a "subscriptions=yes" setting for namespaces, which sounded like it might address this problem. However, putting that setting into dovecot.conf causes it to fail to start with a "Unrecognized config option" error, and using an imap_executable wrapper that sets the env variable as specified in the code (NAMESPACE_<number>_SUBSCRIPTIONS) sets it, as I can see from the dovecot log output: Namespace: type=private, prefix=~/mail/, sep=/, inbox=no, hidden=yes, subscriptions=yes But doesn't seem to have any effect. These two things combined lead me to believe this option was deprecated at some point? Any thoughts or suggestions? While we're moving away from UW for a reason ;), it does seem to handle this one thing more coherently as it recognizes, for example, that if the server equivalent of mail_location's storage is '~', then subscription file entries: '~/mail/foo' and 'mail/foo' are the same thing, while 'foo' is '~/foo'--regardless of client settings or namespaces. Whereas in the same situation Dovecot handles a client IMAP root of '~/mail' vs 'mail' differently, even though they are in fact the same thing. This is also internally inconsistent, because (as noted above) when a namespace is not in effect Dovecot SUBSCRIBEs using a path relative to the mail_location storage--including the client's IMAP root portion of the path--whereas when a namespace is in effect it SUBSCRIBEs with only the bare mailbox name without the current client's IMAP root to give it context and meaning. Wouldn't it seem better to have these be consistent in this respect? We need to figure this out somehow before going any further with our migration. We'll modify the source if necessary, but are hoping for a solution that doesn't require maintaining local mods to the source code unless we absolutely have to. :) And this seems like a basic enough issue that it'd be good to handle it in the real codebase. Thanks for any help or insight, -Brian Hayden Internet Services University of Minnesota dovecot -n output: (The shell script mail_executable doesn't come into play here--it sets some namespace settings only for special shared accounts using Maildir, and doesn't touch anything for the normal mbox accounts discussed above.) # /etc/opt/dovecot/dovecot.conf syslog_facility: local6 protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/opt/openssl/certs/dovecot.pem ssl_key_file: /etc/opt/openssl/private/dovecot.pem shutdown_clients: no login_dir: /var/opt/dovecot/run/dovecot/login login_executable(default): /opt/dovecot/libexec/dovecot/imap-login login_executable(imap): /opt/dovecot/libexec/dovecot/imap-login login_executable(pop3): /opt/dovecot/libexec/dovecot/pop3-login max_mail_processes: 8192 first_valid_uid: 99 mail_location: mbox:~:INBOX=/var/mail/%u:INDEX=/var/mail/.dovecot-index/%1u/%u/ mail_debug: yes mail_executable(default): /opt/dovecot/libexec/dovecot/mail_path.sh mail_executable(imap): /opt/dovecot/libexec/dovecot/mail_path.sh mail_executable(pop3): /opt/dovecot/libexec/dovecot/pop3 mail_plugins(default): zlib mail_plugins(imap): zlib mail_plugins(pop3): mail_plugin_dir(default): /opt/dovecot/lib/dovecot/imap mail_plugin_dir(imap): /opt/dovecot/lib/dovecot/imap mail_plugin_dir(pop3): /opt/dovecot/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail outlook-idle tb-extra-mailbox-sep imap_client_workarounds(pop3): outlook-idle pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv namespace: type: private separator: / inbox: yes namespace: type: private separator: / prefix: ~/mail/ location: mbox:%h/mail/:INDEX=/var/mail/.dovecot-index/%1u/%u/ hidden: yes namespace: type: private separator: / prefix: ~%u/mail/ location: mbox:~%u/mail/:INDEX=/var/mail/.dovecot-index/%1u/%u/ hidden: yes namespace: type: private separator: / prefix: Shared/ location: maildir:~/Maildir/Shared:INDEX=/var/mail/.dovecot-index/%1u/u/shared auth default: username_format: %Lu passdb: driver: pam args: session=yes * userdb: driver: passwd plugin: acl: vfile:

2 2

[Dovecot] Dovecot 1.0.01 / Outlook error 0x800CCCD2
by Dave Hatton 27 Jun '07

27 Jun '07

Hi. I'm having a problem with a user running outlook 2003 against dovecot 1.0.1. A second user works fine and I haven't moved on to create a third (or more yet). On a send and receive I get an error from outlook "Task 'Checking for new mail in subscribed folders on server.' reported error (0x800CCCD2) : 'Outlook is unable to download folder (null) from the IMAP e-mail sever for account Server. Error: The server responded: 'Permission denied'....' Now I've check permissions and as a precaution "chown -R" to make sure I got them all. If I cancel the error I seem to be able to continue without a problem. It's just very annoying to get an error I can fix. Can anyone shed on light on this or suggest a plan of attack? Thanks Daveh

2 1

[Dovecot] Dovecot LDA munging INBOX access times?
by Steven F Siirila 27 Jun '07

27 Jun '07

We are running Dovecot 1.0.0 using mbox format (currently in the midst of conversion from UW IMAP). We discovered today that the Dovecot LDA is accessing the user's INBOX at delivery time! Not only do our users rely on this access time being when they last accessed their e-mail, we also rely on it to migrate "inactive" users to cheaper disk. I consider this a major bug for us and wondered if there is some reason why the LDA is doing this. I can understand that in the absence of index files it may choose to build them from scratch and therefore need to access the INBOX, but in normal cases I don't see that being necessary. It seems to me there should be a few options for how the LDA operates: 1) Deliver to INBOX, do not create or update the index. This would avoid accessing the INBOX. 2) Deliver to INBOX, update the index only if it is already current. This would avoid accessing the INBOX. (not sure if this is possible) 3) Deliver to INBOX, update/create the index as necessary to make it current. This obviously may involve accessing the INBOX. We would rather not go with option #1 -- what's the point of using Dovecot LDA in that scenario?? Comments appreciated. -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593

4 12

[Dovecot] User mapping via pam
by Flannery, Andrew 27 Jun '07

27 Jun '07

Hi, I'm trying to change the PAM_USER within a pam module, and observed that dovecot 0.99 does not support this. I then looked at 1.x and found: src/auth/passdb-pam.c:232: /* FIXME: this doesn't actually work since we're in the child process.. */ status = pam_get_item(pamh, PAM_USER, (linux_const void **)&item); if (status != PAM_SUCCESS) { *error = t_strdup_printf("pam_get_item() failed: %s", pam_strerror(pamh, status)); return status; } auth_request_set_field(request, "user", item, NULL); however it appeared to me that the auth process was passing this username to the parent in its response. Is this issue resolved? I compiled and tested mapping the username sso to the user andrew: Jun 27 13:38:45 itsrv dovecot: auth-worker(default): pam(sso,10.x.x.x): lookup service=imap Jun 27 13:38:45 itsrv dovecot: auth(default): auth(sso,10.x.x.x): username changed sso -> andrew Jun 27 13:38:45 itsrv dovecot: auth(default): client out: OK 1 user=andrew Jun 27 13:50:57 itsrv dovecot: auth(default): master in: REQUEST 1 19761 1 Jun 27 13:50:57 itsrv dovecot: auth(default): passwd(andrew,10.x.x.x): lookup Jun 27 13:50:57 itsrv dovecot: auth(default): master out: USER 1 andrew system_user=andrew uid=1001 gid=1001 home=/home/Andrew Also, is this behavior dependant on me setting blocking=yes for "passdb pam" in dovecot.conf? (for this test It was set) Thanks, Andrew Flannery

2 1

[Dovecot] ?? Error: child 1064 (imap) killed with signal 4
by Benton Haynes 27 Jun '07

27 Jun '07

After noticing a commit to the HG repository, http://hg.dovecot.org/dovecot-1.0/rev/f88b1e225be5 about, " We didn't update last_output timestamp with long fetches, causing Dovecot to idle-disconnect the client." I chekced out the latest from the DOVECOT-1.0 repo, and built again. Unfortunately, this problem still exists. Login simply disconnects. Any help, anyone? -- Ben

3 7

[Dovecot] Dovecot and SUSE 10: inotify_init()
by damien chambe - EGS 27 Jun '07

27 Jun '07

Hello all, Since my migration to SUSE SLES 10, I have a new error message : dovecot1 dovecot: IMAP(damien.chambe(a)egs-gestion.fr): inotify_init() failed: Too many open files It seems to occurs when thunderbird is idle, or when I click on sub folders I have a ulimit for open files a bit low, 1024 I have changed to 4096, but same error message. It has no visible consequences. I am on dovecot 1.0.1 I don't think it is related to dovecot config, any idea ? ulimit -a core file size (blocks, -c) 0 data seg size (kbytes, -d) unlimited file size (blocks, -f) unlimited pending signals (-i) 24573 max locked memory (kbytes, -l) 32 max memory size (kbytes, -m) unlimited open files (-n) 4096 pipe size (512 bytes, -p) 8 POSIX message queues (bytes, -q) 819200 stack size (kbytes, -s) 8192 cpu time (seconds, -t) unlimited max user processes (-u) 24573 virtual memory (kbytes, -v) unlimited file locks (-x) unlimited -- Cordialement, Damien Chambe EGS - Groupe Laurent 42 bld jules janin - BP 240 - 42006 Saint Etienne Cedex 1 Tel : 04 77 49 48 16 Fax : 04 77 49 48 45 Site institutionnel : http://www.groupe-laurent.com Site catalogue : http://ecat.groupe-laurent.com

2 1

[Dovecot] LogicMail for Blackberry and Dovecot
by Rick Romero 27 Jun '07

27 Jun '07

FYI - I just had a great interaction with the developer of this software. LogicMail for Blackberry is a true IMAP/POP client for Blackberry, which wasn't working correctly with Dovecot's IMAP. I merely posted in the sourceforge forums and got a VERY fast response with a working fix. http://logicmail.sourceforge.net/ Unfortunately I'm not a Blackberry user, but I know IMAP clients are hard to find. So I can't comment on it's usability or features, but I thought I'd give it a little press for his quick response :) Rick

2 1

[Dovecot] 1.0.rc28 released
by Timo Sirainen 27 Jun '07

27 Jun '07

http://dovecot.org/releases/dovecot-1.0.rc28.tar.gz http://dovecot.org/releases/dovecot-1.0.rc28.tar.gz.sig Still a bit more fixes. My coding TODO list is again empty. Unless something special happens in the next few weeks, I'll still make rc29 with the documentation included and v1.0 will be released April 13. * deliver + userdb static: Verify the user's existence from passdb, unless allow_all_users=yes * dovecot --exec-mail: Log to configured log files instead of stderr * Added "-example" part to doc/dovecot-sql-example.conf and doc/dovecot-ldap-example.conf. They are now also installed to $sysconfdir with "make install". + When copying/syncing a lot of mails, send "* OK Hang in there" replies to client every 15 seconds so it doesn't just timeout the connection. + Added idxview and logview utilities to examine Dovecot's index files + passdb passwd and shadow support blocking=yes setting now also + mbox: If mbox file changes unexpectedly while we're writing to it, log an error. + deliver: Ignore -m "" parameter to make calling it easier. + deliver: Added new -n parameter to disable autocreating mailboxes. It affects both -m parameter and Sieve plugin's fileinto action - mbox: Using ~/ in the mail root directory caused a ~ directory to be created (instead of expanding it to home directory) - auth cache: If unknown user was found from cache, we didn't properly return "unknown user" status, which could have caused problems in deliver. - mbox: Fixed "UID inserted in the middle of mailbox" in some conditions with broken X-UID headers - Index view syncing fixes - rc27 didn't compile with some non-GCC compilers - vpopmail support didn't compile in rc27 - NFS check with chrooting broke home direcotry for the first login - deliver: If user lookup returned "unknown user", it logged "BUG: Unexpected input" - convert plugin didn't convert INBOX

8 18

[Dovecot] Fatal: Login process must not run as root
by santhosh 27 Jun '07

27 Jun '07

Hi all, I am new to dovecot, i had installed dovecot in RH9 machine and when i tried to run( as root) it, i am getting the below message in the log file. dovecot: Jun 11 18:57:16 Fatal: Login process must not run as root I have done the installation as below ( as normal user): ./configure make sude make install When i try to run as a normal user i am getting the error like Error: Can't write to log directory /var/log: Permission denied Can anybody tell me where i am doing mistake ? Thanks in advance Regards, Santhosh

4 4

[Dovecot] Public Namespace and ACLs with pure virtual users
by Marc Delling 27 Jun '07

27 Jun '07

hi! i would appreciate to have some comments on my below scenario: # from the config userdb static { args = uid=vmail gid=mail home=/vmail/%d/%n } namespace public { separator = / prefix = All/ location = maildir:/vmail/%d/all/Maildir:CONTROL=~/Maildir/control/ all:INDEX=~/Maildir/index/all inbox = no hidden = no } namespace private { separator = / prefix = location = maildir:~/Maildir inbox = yes hidden = no } # end config the public namespace is also the maildir of the user "all@mydomain". a sieve skript is dropping mail for all@mydomain to the appropriate maildir within this maildir/namespace (e.g. .Support/) first of all: this works to some point but is such a configuration valid? can a public namespace be the maildir of a user? if a new mail for all@mydomain comes in, all subscribed users (of this domain) can view it and it is marked as /Seen individually. the important feature to me: the /Seen flags are managed per user as configured in the public namespace now the problem: the whole mail system runs with one uid/gid and virtual users, which has the effect that some user can delete mails in the public namespace or drop mails into it, create folders etc. this is not wanted. i wanted a read-only public namespace. so i decided to use acls. as namespace prefixes are ignored i needed to create them globally. my first try was: /etc/dovecot/acls/Support: owner lrwstiekxa authenticated lr which lead to the result that other users than all@mydomain cannot manipulate the public namespace at all, including setting their /Seen flag. that was the first surprise to me as i thought this flag would be managed seperately in the users homes. after a (very short) thought i came to this (allow setting the /Seen flag for others): owner lrwstiekxa authenticated lrs which lead to another unexpected result: the /Seen flag is now set globally. if one user marks a mail /Seen, it is /Seen for all other users too. where is the problem? except for the iso/osi layer 8 problem i am aware of... marc

4 7

[Dovecot] dovecot -n segfault
by Luca Corti 26 Jun '07

26 Jun '07

# uname -a Linux ns2 2.6.18-4-sparc64 #1 Mon Mar 26 11:16:07 UTC 2007 sparc64 GNU/Linux # dovecot -n # 1.0.1: /usr/local/etc/dovecot.conf Segmentation fault uhu? ciao Luca

3 4

[Dovecot] set maildir and directory default for deliver?
by Mark Edwards 26 Jun '07

26 Jun '07

I asked this question in a more detailed post, with no response, so I'm going to ask point blank. Is there a way make dovecot's deliver use default mailbox and directory settings? I'm thinking of the mail_location parameter, which deliver seems to ignore. Thanks! -- Mark Edwards

1 0

[Dovecot] APPEND fails
by Dirk Müller 26 Jun '07

26 Jun '07

hi list, i wrote a small tool in java which transfers all mails from one imap-server account to another imap-server account using the javax.mail API. when i use cyrus as source and destination imap server everything is fine. when i use dovecot as destination server occasionally exceptions occur when appending the mails. i was not able to see what's really going wrong so i used wireshark to get the imap command that fails: A23 APPEND INBOX.MYSUBFOLDER () "14-Mar-2007 14:20:45 +0100" {0+} A23 NO Append aborted. this is easy to check via telnet, always the same error. i'm not sure why the javax.mail API uses the "{0+}" but somehow it occurs every now and then. sending this command to a cyrus imap server does not fail. any idea? is this a javax.mail problem? thanks and best regards, dirk

2 1

Re: [Dovecot] dovecot.conf authentication after Debian upgrade
by Didier Misson 25 Jun '07

25 Jun '07

Bruno Puga a écrit : > I don't know what are the exactly parameters changed from sarge to etch, > but you can send us more detailed information changing this settings in > your dovecot's conf: > http://wiki.dovecot.org/Debugging/Authentication > > See this section to find out if you are looking for logs in the right > place accordingly to you configuration. > http://wiki.dovecot.org/Logging <http://wiki.dovecot.org/Logging> > > Send us the dovecot -n output instead of dovecot.conf. Thanks for you reply Bruno ;-) Between Sarge and Etch, many parameters changed between the 2 Dovecot version ... example : imaps_listen = * ---> replace by ---> replace by protocol imap { listen = 127.0.0.1:143 ssl_listen = *:993 } ... of course, simply replacing the package version, and new Dovecot doesn't run ! :-( --------------------------------------------- dovecot -n (I discover this command today) ks:/etc/dovecot# dovecot -n # /etc/dovecot/dovecot.conf base_dir: /var/run/dovecot/ log_timestamp: %Y-%m-%d %H:%M:%S listen: 127.0.0.1:143 ssl_listen: *:993 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login first_valid_uid: 1000 mail_extra_groups: mail default_mail_env: maildir:~/Maildir mail_location: maildir:~/Maildir imap_client_workarounds: outlook-idle delay-newmail netscape-eoh tb-extra-mailbox-sep auth default: passdb: driver: passwd userdb: driver: passwd --------------------- I will try to read the documentation on the authentication debugging. Thanks a lot for your help. ;-) -- Didier Google Talk : didier.misson(a)gmail.com Jabber : didier.misson(a)amessage.be http://didier.misson.net

2 2

Re: [Dovecot] dovecot.conf authentication after Debian upgrade
by Didier Misson 25 Jun '07

25 Jun '07

Bruno Puga a écrit : > but you can send us more detailed information changing this settings in > your dovecot's conf: > http://wiki.dovecot.org/Debugging/Authentication > > See this section to find out if you are looking for logs in the right > place accordingly to you configuration. > http://wiki.dovecot.org/Logging <http://wiki.dovecot.org/Logging> > > Send us the dovecot -n output instead of dovecot.conf. I read this documentation about Authentication and Logging debuggind. I add : auth_debug=yes auth_debug_passwords=yes --------------------------- for this test, I change my password = "MyPasswd" (and I change again after) My client is Thunderbird on Ubuntu 7.04 in /var/log/syslog dovecot: auth(default): client in: AUTH^I1^IPLAIN^Iservice=IMAP^Isecured^Ilip=87.98.98.98^Irip=212.71.11.157 dovecot: auth(default): client out: CONT^I1^I dovecot: auth(default): client in: CONT^I1^IAGRpZGllcgBNeVBhc3N3ZA== dovecot: auth(default): passwd(didier,212.71.11.157): password mismatch dovecot: auth(default): client out: FAIL^I1^Iuser=didier I try to check myself : printf 'didier\didier\MyPasswd' | mmencode ZGlkaWVyXGRpZGllclxNeVBhc3N3ZA== The end seem to be the same... Is it correct ? So why Dovecot don't accept my password ? Dovecot or Debian ? ... I don't know what I can check more... Thanks ;-) -- Didier Google Talk : didier.misson(a)gmail.com Jabber : didier.misson(a)amessage.be http://www.misson.net

1 0

[Dovecot] Setting retention policies
by Don Russell 25 Jun '07

25 Jun '07

I access e-mail from different PCs, typically using Thunderbird e-mail client. Thunderbird has a a "retention policy" it can set on a folder by folder basis. Policies such as how long to keep messages for, or how many messages to keep. Is there a way to set those policies on the server itself? Thank you

4 6

[Dovecot] Quota from passdb sql
by Bruno Puga 25 Jun '07

25 Jun '07

Hello folks! Is it possible to retrieve quota information from a passdb sql lookup and using static userdb? I've tried here without success, and I can't find in the wiki or forum. Some ways I configured dovecot-sql.conf: 1) password_query = SELECT email AS user, CONCAT('maildir:storage=',quota) AS quota, password FROM users WHERE email = '%u' 2) password_query = SELECT email AS user, CONCAT('maildir:storage=',quota) AS userdb_quota, password FROM users WHERE email = '%u' With userdb sql things worked perfect, but as I can use static userdb I just need quota information per user from passwd sql. Thanks, Bruno.

2 2

[Dovecot] quota calculating
by Scott Zahn 25 Jun '07

25 Jun '07

Hey everyone, Currently where I work we use qmail. Every time a message is delivered, qmail seems to walk through the user's entire maildir in order to calculate quota usage. Delivering messages simultaneously to just a few users who are allowed large maildirs (1-2GB) will bring our servers to their knees. Which brings me to dovecot. I use dovecot whereever I can, but haven't yet needed to set up quotas. I would like to migrate my servers at work to use dovecot, but have a few questions regarding quotas. Could someone explain how dovecot calculates quota usage on mail delivery? Also, is there anyone here on the list that uses quoatas on large maildirs (>=2GB)? How well has it worked for you? thanks, Scott

3 3

[Dovecot] LIST % not returning correct data?
by J.Wendland＠scan-plus.de 25 Jun '07

25 Jun '07

Hi list, I have namespace private { prefix = INBOX. separator = . inbox = yes } in an installation migrated from courier. I am testing with Outlook Mobile 5 (OM) which uses 'LIST "" %' to get the folder list. Now courier used to return * LIST (\HasChildren) "." "INBOX" whereas dovecot returns * LIST (\HasNoChildren) "." "INBOX" which is why OM failes to display any folder. Is this dovecot's failure or am I missing something here? Thanks, Jörg -- Sicherheit - Verfügbarkeit - Kontinuität ------------------------------------------------------------------------- IT-Service-Management von ScanPlus GmbH Tel. +49 731 92013 150 Lise-Meitner-Straße 5, D-89081 Ulm, Germany Fax. +49 731 92013 29 150 Web: http://www.scan-plus.de/ Mail: wendland(a)scan-plus.de -------------------------------------------------------------------------

4 4

[Dovecot] dovecot.conf authentication after Debian upgrade
by Didier Misson 25 Jun '07

25 Jun '07

Hello, I'm new on this mailing list. I run a Dovecot imaps server since several month on a Debian server. I just upgrade a Debian server from Debian Sarge --> Etch and I discover that a lot of parameters have changed (must be changed) in the dovecot.conf. I finally find an exemple an try to adapt it to our server. We never defined special authentification or password scheme. It was simple the "passwd". Dovecot is running, but impossible for users to connect :-( Actually, this is my dovecot.conf : ====================================== base_dir = /var/run/dovecot/ protocols = imap imaps protocol imap { listen = 127.0.0.1:143 ssl_listen = *:993 } # protocol pop3 { # # listen = *:110 # # ssl_listen = *:995 # # } ssl_disable = no ssl_cert_file = /etc/ssl/certs/dovecot.pem ssl_key_file = /etc/ssl/private/dovecot.pem disable_plaintext_auth = no log_timestamp = "%Y-%m-%d %H:%M:%S " login_dir = /var/run/dovecot/login #login_dir = /var/log/dovecot login_chroot = yes login_user = dovecot login_process_per_connection = yes login_greeting = Dovecot ready. first_valid_uid = 1000 last_valid_uid = 0 first_valid_gid = 1 last_valid_gid = 0 mail_extra_groups = mail # #default_mail_env = mbox:/var/mail/%u default_mail_env = maildir:~/Maildir protocol imap { imap_client_workarounds = outlook-idle delay-newmail netscape-eoh tb-extra-mailbox-sep } # # protocol pop3 { # # } auth default { mechanisms = plain ##### Didier Misson : must be check !!! #passdb passwd-file { #args = /etc/dovecot/pass #} #passdb pam { passdb passwd { } #userdb passwd-file { #args = /etc/dovecot/users #} userdb passwd { } user = root } plugin { } ===================================================================== in /var/log/syslog Jun 25 11:14:02 ks36586 dovecot: Dovecot v1.0.rc15 starting up Jun 25 11:14:53 ks36586 dovecot: imap-login: Aborted login: user=<sebastien-descy>, method=PLAIN, rip=62.235.215.24, lip=87.98.219.84, TLS Jun 25 11:14:59 ks36586 dovecot: imap-login: Aborted login: user=<dominique>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Jun 25 11:15:01 ks36586 /USR/SBIN/CRON[16295]: (root) CMD (/usr/local/rtm/bin/rtm 41 >/dev/null 2>/dev/null) I hope somebody already solved this king of problem. Thanks a lot. ;-) -- Didier http://didier.misson.net

1 0

[Dovecot] Authors wanted for Linux Magazine
by Markus Feilner 25 Jun '07

25 Jun '07

Hello list, as an editor at the german linux magazine I am looking for an author who would like to write about 5-6 pages on dovecot clustering (as a workshop or presenting a detail of special interest) If you are interested, please send me an email to: <mfeilner(a)linuxnewmedia.de> Mit freundlichen Gruessen - Best Regards, Markus Feilner -- Linux New Media AG, Sueskindstr. 4, 81929 Muenchen, Germany Phone: +49 89 9934 1122, Fax: +49 89 9934 1199 mfeilner(a)linuxnewmedia.de - http://www.linuxnewmedia.de Linux New Media - The Pulse of Linux Lawrence - Malaga - Manchester - Muenchen - Sao Paulo - Timisoara - Warszawa --------------------------------------------------- Sitz der Gesellschaft: Sueskindstrasse 4, 81929 Muenchen Amtsgericht Muenchen: HRB 129161 Vorstand: Rosemarie Schuster, Hermann Plank Aufsichtsratsvorsitzender: Rudolf Strobl

1 0

[Dovecot] Dovecot and Sendmail Working Together . . .
by Eddie Johnson Jr 24 Jun '07

24 Jun '07

I am new to this, I was just given the responsibility Thursday to get Sendmail/SquirrelMail/Dovecot to work in sync. How do I start? iloadmin

2 1

Re: [Dovecot] Dovecot won't stay running
by Gunter Ohrner 22 Jun '07

22 Jun '07

Am Freitag, 22. Juni 2007 schrieb Jon Slater: > You are AWESOME!!! Thank you!!! Mh, I think this is one of the few times I read that someone was actually greatful for a "RTFM" he got... ;) > Jun 22 01:27:56 servername dovecot: Time just moved backwards by 37 > seconds. This might cause a lot of problems, so I'll just kill myself That's bad and may cause a lot of other (and more subtle) troubles than Dovecot committing suicide. I'f your' using something like "ntpdate" to periodically step the time, do not do that but run an ntp server instead which will gradually skew the clock to keep the system's time accurate. Greetings, Gunter -- +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ I would actually distinguish between problems with compiling the kernel, and problems with the kernel after compiling. -- Karol 'sziwan' Kozimor auf der swsusp-Mailingliste +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + PGP-verschlüsselte Mails bevorzugt! + +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

1 0

Re: [Dovecot] test program #2: mmaping
by Bill Boebel 22 Jun '07

22 Jun '07

On Wed, June 20, 2007 9:28 pm, Timo Sirainen <tss(a)iki.fi> said: > Attached another test program. I don't expect it to print any errors > with any OS, but I'd like to confirm it for non-Linux SMP kernels. # ./concurrency writing, page size = 4096 4: reading, page size = 4096 3: reading, page size = 4096 2: reading, page size = 4096 1: reading, page size = 4096 0: reading, page size = 4096 Red Hat ES3 (2.4.21-32.0.1.EL) athlon i386

1 0

Re: [Dovecot] Dovecot won't stay running
by Jochen Schulz 22 Jun '07

22 Jun '07

Jon Slater schrieb: > > So I got the same suggestion several times, and I upgraded to Dovecot 1.0.1. > > At 1:27am and again at 5:23am Dovecot stopped running. My cron was able to > restart the service in both instances, but how do I debug why this is > happening? Take a look at http://wiki.dovecot.org. It contains useful instructions for debugging. J.

2 1

Re: [Dovecot] Dovecot won't stay running
by Jon Slater 22 Jun '07

22 Jun '07

So I got the same suggestion several times, and I upgraded to Dovecot 1.0.1. At 1:27am and again at 5:23am Dovecot stopped running. My cron was able to restart the service in both instances, but how do I debug why this is happening? Thanks!!! Jon > -----Original Message----- > From: dovecot-bounces(a)dovecot.org [mailto:dovecot-bounces@dovecot.org] > On Behalf Of Jon Slater > Sent: Thursday, June 21, 2007 5:19 PM > To: dovecot(a)dovecot.org > Subject: [Dovecot] Dovecot won't stay running > > This weekend I upgraded my OS from FC4 to FC6. At the same time I > updated > Dovecot from 0.99 to 1.0.0. > > Now, dovecot periodically shuts off. > > It will run fine for several hours then just dies. > > Right now my solution is to run a cron every 5 minutes to see if it’s > still > running, and if not, re-start it. > > I’m also having trouble finding any sort of meaningful logs to tell me > what’s going on. > > Where should I start? > > Thanks in advance! > > Jon > > > No virus found in this outgoing message. > Checked by AVG Free Edition. > Version: 7.5.472 / Virus Database: 269.9.2/858 - Release Date: > 6/21/2007 > 1:46 PM > > > No virus found in this incoming message. > Checked by AVG Free Edition. > Version: 7.5.472 / Virus Database: 269.9.2/858 - Release Date: > 6/21/2007 1:46 PM > No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.472 / Virus Database: 269.9.4/860 - Release Date: 6/21/2007 5:53 PM

1 0

[Dovecot] Dovecot won't stay running
by Jon Slater 22 Jun '07

22 Jun '07

This weekend I upgraded my OS from FC4 to FC6. At the same time I updated Dovecot from 0.99 to 1.0.0. Now, dovecot periodically shuts off. It will run fine for several hours then just dies. Right now my solution is to run a cron every 5 minutes to see if it’s still running, and if not, re-start it. I’m also having trouble finding any sort of meaningful logs to tell me what’s going on. Where should I start? Thanks in advance! Jon No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.472 / Virus Database: 269.9.2/858 - Release Date: 6/21/2007 1:46 PM

1 0

Re: [Dovecot] Fwd: LDAP subtree search on AD
by Bruno Puga 22 Jun '07

22 Jun '07

Timo, I have sent this message below before but I didn't saw that it was delivered to you personal email instead to the list, I just see this now, sorry. Because I'm in a hurry I gave up using Dovecot + AD and start using Mysql as my userdb and passdb and things worked perfect until the moment. I have some doubts but I will open a new thread for this. Anyway, if you get some news about this issue I would appreciate to know, if not, that's OK. Many thanks for your help. Bruno. On 6/18/07, Bruno Puga <brpuga(a)gmail.com> wrote: > > Timo, I had set this in the dovecot.conf: > > auth_verbose = yes > auth_debug = yes > auth_debug_passwords = yes > > ########################################################### > ### My dovecot logs shows this using auth_bind = yes and userdn template > ### > > dovecot: 2007-06-17 12:35:52 Warning: Killed with signal 15 > dovecot: 2007-06-17 12:35:53 Info: Dovecot v1.0.0 starting up > dovecot: 2007-06-17 12:37:23 Info: auth(default): client in: AUTH > 1 PLAIN service=IMAP secured lip= 192.168.0.251 rip=192.168.0.251 > resp=AHRlc3RlAHRlc3Rl > dovecot: 2007-06-17 12:37:23 Info: auth(default): ldap(teste,192.168.0.251): > bind: dn=teste > dovecot: 2007-06-17 12:37:23 Info: auth(default): client out: OK > 1 user=teste > dovecot: 2007-06-17 12:37:23 Info: auth(default): master in: REQUEST > 1 31290 1 > dovecot: 2007-06-17 12:37:23 Info: auth(default): ldap(teste,192.168.0.251): > user search: base=DC=tecnicopias01,DC=com,DC=br scope=subtree > filter=(&(objectClass=organizationalPerson)(sAMAccountName=teste)) > fields=info > dovecot: 2007-06-17 12:40:23 Info: imap-login: Disconnected: Inactivity: > user=<teste>, method=PLAIN, rip=192.168.0.251 , lip=192.168.0.251, secured > > dovecot: 2007-06-17 12:52:46 Error: auth(default): ldap(teste, > 192.168.0.251): ldap_search() failed: Operations error > dovecot: 2007-06-17 12:52:46 Info: auth(default): master out: FAIL 1 > dovecot: 2007-06-17 12:52:46 Error: auth(default): LDAP: ldap_result() > failed: Can't contact LDAP server > dovecot: 2007-06-17 13:07:46 Error: auth(default): LDAP: ldap_result() > failed: Can't contact LDAP server > dovecot: 2007-06-17 13:22:47 Error: auth(default): LDAP: ldap_result() > failed: Can't contact LDAP server > > As we can see, first dovecot bind correct, but after it open a new > connection as showed in the ngrep output, and without bind try to make the > ldap_search, in that point AD blocks the search saying that for the new > connection opened is necessary a successful bind. > ########################################################### > > ### Now, changing for User database Lookups authenticating with krb5 ### > > dovecot: 2007-06-18 10:14:35 Info: auth(default): client in: AUTH > 1 PLAIN service=IMAP secured lip=192.168.0.251 rip= > 192.168.0.251 resp=AHRlc3RlAHRlc3Rl > dovecot: 2007-06-18 10:14:35 Info: auth(default): pam(teste,192.168.0.251): > lookup service=dovecot > dovecot: 2007-06-18 10:14:35 Info: auth(default): client out: OK > 1 user=teste > dovecot: 2007-06-18 10:14:35 Info: auth(default): master in: REQUEST > 1 32029 1 > dovecot: 2007-06-18 10:14:35 Info: auth(default): ldap(teste,192.168.0.251): > user search: base=DC=tecnicopias01,DC=com,DC=br scope=subtree > filter=(&(objectClass=organizationalPerson)(sAMAccountName=teste)) > fields=info > dovecot: 2007-06-18 10:17:35 Info: imap-login: Disconnected: Inactivity: > user=<teste>, method=PLAIN, rip=192.168.0.251 , lip=192.168.0.251, secured > > dovecot: 2007-06-18 10:29:25 Error: auth(default): ldap(teste, > 192.168.0.251): ldap_search() failed: Operations error > dovecot: 2007-06-18 10:29:25 Info: auth(default): master out: FAIL 1 > dovecot: 2007-06-18 10:29:25 Error: auth(default): LDAP: ldap_result() > failed: Can't contact LDAP server > dovecot: 2007-06-18 10:44:26 Error: auth(default): LDAP: ldap_result() > failed: Can't contact LDAP server > dovecot: 2007-06-18 10:59:26 Error: auth(default): LDAP: ldap_result() > failed: Can't contact LDAP server > > ########################################################### > > After some time, the dovecot logs starts logging this last 3 lines saying > it "Can't contact LDAP server", and ngrep shows this: > > ########################################################### > ############# > T 192.168.0.251:49043 -> 192.168.0.11:389 [AP] > 0E...`@....1CN=postfix,CN=Users,DC=tecnicopias01,DC=com,DC=br..post123! > # > T 192.168.0.11:389 -> 192.168.0.251:49043 [AP] > 0........a............ > ### > T 192.168.0.251:49043 -> 192.168.0.11:389 [AP] > 0....B. > ####### > T 192.168.0.251:42083 -> 192.168.0.11:389 [AP] > 0E...`@....1CN=postfix,CN=Users,DC=tecnicopias01,DC=com,DC=br..post123! > # > T 192.168.0.11:389 -> 192.168.0.251:42083 [AP] > 0........a............ > ### > T 192.168.0.251:42083 -> 192.168.0.11:389 [AP] > 0....B. > ####### > T 192.168.0.251:52084 -> 192.168.0.11:389 [AP] > 0E...`@....1CN=postfix,CN=Users,DC=tecnicopias01,DC=com,DC=br..post123! > # > T 192.168.0.11:389 -> 192.168.0.251:52084 [AP] > 0........a............ > # > > Dovecot after a while keep trying to connect to LDAP server without any > requests being sent to server. So it keep logging this line below forever: > > LDAP: ldap_result() failed: Can't contact LDAP server > ########################################################### > > If I change the base to the same location as the user being authenticating > is, the userdb lookup is successfully because he's find at a first > ldap_seach try, and no subtree search is necessary. So again I think dovecot > must not open other connections then that opened at the bind time to make > the subtree search, like postfix do. > > Timo, I'm waiting for your reply. > > Thanks in advance to spent your time to contribute with free software, > Bruno.

1 0

[Dovecot] test program #2: mmaping
by Timo Sirainen 21 Jun '07

21 Jun '07

Attached another test program. I don't expect it to print any errors with any OS, but I'd like to confirm it for non-Linux SMP kernels. (Except for OpenBSD, it doesn't work correctly in it anyway because it doesn't support mixing write()s and mmap())

8 8

[Dovecot] Status update
by Timo Sirainen 21 Jun '07

21 Jun '07

I'm leaving soon and I'll be away until sunday. Sorry about not replying to all mails yet, most of them are somewhat tricky and require some time to reply (other than "I don't know"). The new index code for v1.1 seems to be finally working pretty nicely. After 9 hours of running imaptest I haven't gotten a single error yet. I'll leave it running until I'm back. The new code makes the internal index file design a lot easier to understand. For v1.0 I just wanted to get it working and I didn't dare try to clean up the code, so it was kind of magic sometimes why it worked. :) All that magic is finally gone and I understand completely how everything is supposed to work (and hopefully also how it does work). Most important problem with the new code is that \Recent flags are completely broken. I think they're not completely correctly working in v1.0 either, or at least I'm not sure why they're working even as well as they are now.. Maildir syncing in v1.1 is also a bit bad. For example EXPUNGE command could have to be given twice to get it to work. Again it worked badly with v1.0 also but since the index code worked differently it wasn't visible. Cydir is a pretty nice format for stress testing index code. It's really lightweight so it's practically testing only the index code. Because of it I've found a couple of race conditions in the code that existed also in v1.0 tree (v1.0.2 will fix them). My earlier stress testing with maildir never saw those problems, probably because with maildir there was a lot of other code running as well so the race condition was really unlikely to hit.

1 0

[Dovecot] pop3 creates bad index file
by Onno Molenkamp 21 Jun '07

21 Jun '07

Hi, When I use pop3 to log on to a (Maildir) mailbox that doesn't yet exist in the filesystem, the pop3 server autocreates it for me. This works. Jun 21 10:50:45 mail-04 dovecot: pop3-login: Login: user=<hwx7s(a)gqh7x.test>, method=PLAIN, rip=::ffff:192.168.42.105, lip=::ffff:192.168.42.97 Jun 21 10:50:48 mail-04 dovecot: POP3(hwx7s(a)gqh7x.test): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 When I log on a second time, it will complain about UIDVALIDITY that has changed, and will disconnect me: Jun 21 10:50:52 mail-04 dovecot: pop3-login: Login: user=<hwx7s(a)gqh7x.test>, method=PLAIN, rip=::ffff:192.168.42.105, lip=::ffff:192.168.42.97 Jun 21 10:50:52 mail-04 dovecot: POP3(hwx7s(a)gqh7x.test): Maildir /data/mail/898/gqh7x.test/hwx7s/Maildir sync: UIDVALIDITY changed (1182415845 -> 1182415852) Jun 21 10:50:52 mail-04 dovecot: POP3(hwx7s(a)gqh7x.test): Disconnected: Mailbox is in inconsistent state. top=0/0, retr=0/0, del=0/0, size=0 Jun 21 10:50:52 mail-04 dovecot: POP3(hwx7s(a)gqh7x.test): Couldn't init INBOX: Internal error occurred. Refer to server log for more information. [2007-06-21 10:50:52] When I log on a third time, everything seems to work from the client side, but the server still complains: Jun 21 10:51:01 mail-04 dovecot: pop3-login: Login: user=<hwx7s(a)gqh7x.test>, method=PLAIN, rip=::ffff:192.168.42.105, lip=::ffff:192.168.42.97 Jun 21 10:51:01 mail-04 dovecot: POP3(hwx7s(a)gqh7x.test): Corrupted index cache file /data/mail/898/gqh7x.test/hwx7s/Maildir/dovecot.index.cache: indexid changed Jun 21 10:51:02 mail-04 dovecot: POP3(hwx7s(a)gqh7x.test): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Fourth (and further) logons work without errors. When the Maildir is created by imap or deliver, pop3 works fine from the start. The only real difference I see with idxview between the dovecot.index created by pop3 and one created by imap is that with pop3 sync stamp is 0, and with imap it contains a timestamp. Onno

2 1

[Dovecot] mail_log plugin updates
by Timo Sirainen 21 Jun '07

21 Jun '07

It supports configuration now in devel version: # Events to log. Default is all. #mail_log_events = delete undelete expunge copy mailbox_delete # Group events within a transaction to one line. #mail_log_group_events = # Available fields: uid, box, msgid, size, vsize # size and vsize are available only for expunge and copy events. #mail_log_fields = uid box msgid size Without grouping you get pretty similar output than before: Info: copy: uid=13, dest=Trash, msgid=<20040702035043.7296C300DFC1A@asdf>, size=789 Info: delete: uid=13, msgid=<20040702035043.7296C300DFC1A@asdf> Info: expunge: uid=13, msgid=<20040702035043.7296C300DFC1A@asdf>, size=789 With mail_log_group_events=yes you get output like this: Info: copy: uids=15-17,24,26, dest=Trash, size=1534 Info: delete: uids=15-17,24,26 Info: expunge: uids=15-17,24,26, size=1534 The size is the summed size of all the messages. msgids aren't suppported. "size" means physical message size, "vsize" means the virtual size with CR+LF linefeeds. Does someone want something more?

2 2

[Dovecot] Question about pre-indexing maildirs
by David Favor 21 Jun '07

21 Jun '07

I have a situation with many users and an existing mail delivery agent. Seems like I once saw an imaptest program which I imagine might be used to pre-index maildirs. For example... - remember which users and user maildirs have changed since last pre-index - when system quiet pre-index any maildirs which have had mail delivered and no access by a mail client (using some inotify magic) If this sounds do-able, let me know where I can find an imaptest version which works with latest dovecot trunk code and the syntax for using it. Seems like I saw this once on the dovecot site. Thanks. - David -- Like feeling your best ever, all day, every day? Here's how... Your simple secrets are here - http://RadicalHealth.com

2 1

[Dovecot] how do I download concurrency.c
by Stewart Dean 20 Jun '07

20 Jun '07

When I click on the link I get not found on the server. I run on a 4 way and AIX has some pretty fancy concurrency so it would be interesting. But then I'm leaving this afternoon and won't be back until Monday..... -- ==== Stewart Dean, Unix System Admin, Henderson Computer Resources Center of Bard College, Annandale-on-Hudson, New York 12504 sdean(a)bard.edu voice: 845-758-7475, fax: 845-758-7035

2 1

[Dovecot] testing needed: log file concurrency
by Timo Sirainen 20 Jun '07

20 Jun '07

http://dovecot.org/tmp/concurrency.c I'd want to know what results this program gives with different systems. Please test and reply (but don't bother if someone already replied with the same OS+result). I expect it to print: - SMP kernels: "page size cut" once in a while - UP (uniprocessor) kernels: Nothing - The most important thing is that it never prints "broken data" It might take a while for it to print anything. With my computer it takes anything from a few seconds to a minute or so. See the file itself for compiling/running instructions. So far I've tested only with Linux 2.6.21 x86-64/SMP and a slow Solaris/Sparc/UP. If you're interested in knowing what this is about: Dovecot writes to dovecot.index.log files by first writing the transaction with its size being 0. After that it writes the 4 size bytes again (using a bit special format with all bytes ORed with 0x80). I expected that when another process is read()ing the file and it notices the size being valid (all bytes having 0x80) that the whole transaction could always be read. But looks like if the size happens to be just before a memory page boundary, it's possible that the updated size is read, but the rest of the transaction isn't.

13 18

[Dovecot] (OT) Advice on best way to collect mail from multiple domains and deliver to users via Dovecot IMAP.
by Dave Hatton 20 Jun '07

20 Jun '07

Hi Sorry if this is an inappropriate question to ask here. If it is maybe there is a better place to ask this question? I would like to collect email sent to multiple users (with previously unknown usernames) sent to multiple domains and then deliver this email to a specific set of users on my server based upon some predefined rules, with a catchall for mails that aren't caught by these rules. So as an example, I might have domains:- example.com, example.co.uk, someotherdomain.com and I'd like to say to a sender "just send a mail to anything(a)example.com". I'd like to be able to make up recipients on the fly when subscribing to a service so that I can filter mails to this address out at a later time. The method I devised when I set this up using dovecot .99 is as follows. I currently have the hosting service for the domains forwarding all email to a singular mailbox at my ISP and I user fetchmail to pop3 the mail down from this one mailbox. The mail is then passed to postfix where I use the luser_relay option to map all unknown recipients to a local address so that it doesn't get bounced. Postfix then delivers the mail via the mailbox_command to maildrop where a series of rules inspect the envelope headers and write the mail using the "to" option to an appropriate maildir for the target user. Is this a good approach? Would I be better off using dovecot LDA and sieve? Any advice or ideas would be gratefully received. Daveh

1 0

Re: [Dovecot] testing needed: log file concurrency
by Bill Boebel 20 Jun '07

20 Jun '07

On Tue, June 19, 2007 7:41 pm, Timo Sirainen <tss(a)iki.fi> said: > http://dovecot.org/tmp/concurrency.c > > I'd want to know what results this program gives with different systems. > Please test and reply (but don't bother if someone already replied with > the same OS+result). I expect it to print: ./concurrency writing, page size = 4096 ./concurrency 1 reading, page size = 4096 Red Hat ES3 (2.4.21-32.0.1.EL) athlon i386

1 0

[Dovecot] Error: net_connect(/opt/local/var/run/dovecot/auth-master) failed: No such file or directory
by J Charles Ferrari 20 Jun '07

20 Jun '07

What is auth-master, and how do I create it? Using postfix 2.1.5 dovecot 1.0.0 # /opt/local/etc/dovecot/dovecot.conf base_dir: /var/run/dovecot/ log_path: /var/log/dovecot_error.log info_log_path: /var/log/dovecot.log protocols: imap pop3 ssl_disable: yes login_dir: /var/run/dovecot/login login_executable(default): /opt/local/libexec/dovecot/imap-login login_executable(imap): /opt/local/libexec/dovecot/imap-login login_executable(pop3): /opt/local/libexec/dovecot/pop3-login mail_extra_groups: mail mail_location: maildir:/var/Maildir/%u mail_debug: yes mail_executable(default): /opt/local/libexec/dovecot/imap mail_executable(imap): /opt/local/libexec/dovecot/imap mail_executable(pop3): /opt/local/libexec/dovecot/pop3 mail_plugin_dir(default): /opt/local/lib/dovecot/imap mail_plugin_dir(imap): /opt/local/lib/dovecot/imap mail_plugin_dir(pop3): /opt/local/lib/dovecot/pop3 auth default: verbose: yes debug: yes passdb: driver: pam userdb: driver: passwd socket: type: listen client: master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: mail Thanks Charles

4 3

Re: [Dovecot] dovecot Digest, Vol 50, Issue 54
by Kenny Dail 20 Jun '07

20 Jun '07

> - SMP kernels: "page size cut" once in a while does several hundred in about 4 minutes count as once in a while? Got many "page size cut" on 2.6.17-gentoo-r8 #2 SMP i686 Dual Pentium III (Katmai) no output from a FreeBSD 4.9-RELEASE-p5 single Pentium III (Katmai) -- Kenny Dail <kend(a)amigo.net>

1 0

[Dovecot] save failed to INBOX
by Erland Nylend 19 Jun '07

19 Jun '07

Hello, I'm seeing som error messages in the mail log, like this: Jun 12 12:50:44 <mail.info> smtp2 deliver(user1(a)domain.tld): msgid=<10784847.1181644475592.foo.bar@foo99>: save failed to INBOX Jun 12 12:50:44 <mail.info> smtp2 deliver(user1(a)domain.tld): msgid=<30757588.1181644556388.foo.bar@foo99>: saved mail to INBOX It seems that when two or more messages are being delivered at the same time, only one delivery succeeds. Both the maildirs and the indexes are stored on a SAN .. I'll try to read the source, to find out whether this is a locking problem. I would think that if a deliver -process finds that a maildir is locked, then it should wait, and retry? -- Erland Nylend

3 41

[Dovecot] Odd error from deliver
by Ralf Hildebrandt 19 Jun '07

19 Jun '07

I found these errors in my log today: Jun 18 01:02:11 postamt deliver(cpxxxsch): msgid=<FSL%200706180000356580.6412(a)JISCMAIL.AC.UK>: save failed to INBOX: Unknown error Jun 18 01:02:11 postamt deliver(cpxxxsch): msgid=<FSL%200706180000356580.6412(a)JISCMAIL.AC.UK>: Rejected: Unknown error Jun 18 15:37:22 postamt deliver(roxxxmy): msgid=<E1I0HPz-0002OZ-00(a)p15110889.pureserver.info>: save failed to INBOX: Unknown error Jun 18 15:37:22 postamt deliver(roxxxmy): msgid=<E1I0HPz-0002OZ-00(a)p15110889.pureserver.info>: Rejected: Unknown error This is deliver from dovecot-1.0.1 What exactly IS "Unknown error"? -- Ralf Hildebrandt (Ralf.Hildebrandt(a)charite.de) plonk(a)charite.de Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155 http://www.arschkrebs.de Ballmer should step down in favour of Mr T, because he pity the fool who don't got high-end video cards and 4GB RAM for Vista Aero!

3 12

[Dovecot] parameters to deliver
by Bruce Bodger 19 Jun '07

19 Jun '07

Read this in the dovecot sieve wiki: "The envelope sender is taken from a Return-Path: header in the message. The envelope recipient is taken from -d option passed to deliver." Is "-d" still a valid deliver switch? When I configure postfix's main.cf like so... mailbox_command = /usr/local/libexec/dovecot/deliver -d -e ..it sqwaks with, "Jun 18 18:44:50 G518X2 deliver(-e): net_connect(/ usr/local/var/run/dovecot/auth-master) failed: No such file or directory" when configured like so... mailbox_command = /usr/local/libexec/ dovecot/deliver -e -d ${recipient} ..it burps with, "Jun 18 18:56:40 G518X2 postfix/local[19766]: 3BBC16C96E0: to=<me(a)mydomain.com>, relay=local, delay=0, status=bounced (command line usage error. Command output: Fatal: Missing destination argument )" It doesn't like... mailbox_command = /usr/local/libexec/dovecot/ deliver -e -d "$recipient" either! Is -d required any longer... and if so, how, please. B. Bodger

3 4

[Dovecot] Problem with deliver
by David Favor 19 Jun '07

19 Jun '07

Per the wiki page: http://wiki.dovecot.org/LDA Doing the following should create a Maildir directory structure in an arbitrary directory, deposit a message and create/update any dovecot indexes: mkdir /common/foo export HOME=/common/foo export PATH=/usr/libexec/dovecot:$PATH cat 1180102308.88215.4145.davidfavor.com:2,RS | deliver -f doda(a)foobar.com This gives an error "(-d user) not given" and when '-d user' given an exit code of 75 is silently returned. Let me know the correct way to test how the deliver program works. Thanks. - David -- Like feeling your best ever, all day, every day? Here's how... Your simple secrets are here - http://RadicalHealth.com

2 1

[Dovecot] Outlook 2003 - Disappearing favorite folders
by Phillip T. George 18 Jun '07

18 Jun '07

Hello all, I'm having an issue with Outlook 2003, where favorite folders seem to disappear. Specifically, they are subfolders of the Inbox. The Inbox favorite folder stays there without a problem. Any clues as to what the problem may be? With the previous IMAP server (courier I believe) this wasn't a problem...so it leads me to believe that Dovecot might be the problem. I'm working with Dovecot 1.0.rc28 Thanks, Phillip

5 10

[Dovecot] v1.0.1 released
by Timo Sirainen 17 Jun '07

17 Jun '07

http://dovecot.org/releases/dovecot-1.0.1.tar.gz http://dovecot.org/releases/dovecot-1.0.1.tar.gz.sig Lots of small fixes. * deliver: If Return-Path doesn't contain user and domain, don't try to bounce the mail (this is how it was supposed to work earlier too) * deliver: %variables in mail setting coming from userdb aren't expanded anymore (again how it should have worked). The expansion could have caused problems if paths contained any '%' characters. + Print Dovecot version number with dovecot -n and -a + deliver: Added -e parameter to write rejection error to stderr and exit with EX_NOPERM instead of sending the rejection by executing sendmail. + dovecot --log-error logs now a warning, an error and a fatal - Trying to start Dovecot while it's already running doesn't anymore wipe out login_dir and break the running Dovecot. - maildir: Fixed "UID larger than next_uid" errors which happened sometimes when dovecot-uidlist file didn't exist but index files did (usually because mailbox didn't have any messages when it was selected for the first time) - maildir: We violated maildir spec a bit by not having keyword characters sorted in the filename. - maildir: If we don't have write access to cur/ directory, treat the mailbox as read-only. This fixes some internal error problems with trying to use read-only maildirs. - maildir: Deleting a symlinked maildir failed with internal error. - mbox: pop3_uidl_format=%m wasn't working right - mbox: If non-filesystem quota was enabled, we could have failed with "Unexpectedly lost From-line" errors while saving new messages - mysql auth: %c didn't work. Patch by Andrey Panin - APPEND / SEARCH: If internaldate was outside valid value for time_t, we returned BAD error for APPEND and SEARCH never matched. With 64bit systems this shouldn't have happened. With 32bit systems the valid range is usually for years 1902..2037. - COPY: We sent "Hang in there.." too early sometimes and checked it too often (didn't break anything, but was slower than needed). - deliver: Postfix's sendmail binary wasn't working with mail_debug=yes - Don't corrupt ssl-parameters.dat files when running multiple Dovecot instances. - Cache compression caused dovecot.index.cache to be completely deleted with big endian CPUs if 64bit file offsets were used (default) - Fixed "(index_mail_parse_header): assertion failed" crash

5 6

Re: [Dovecot] index
by Timo Sirainen 17 Jun '07

17 Jun '07

(Ccing again the list in case someone else has similar problems) On Sun, 2007-06-17 at 20:14 +0200, Lucas -LandM- wrote: > Hi Timo, > > I patched the source and same result. We think the problem is because > everytime user access to his mailbox, dovecot do the index again. And it > consume near the 80% in iowait because, as strace shows, read all mails. The problem isn't that Dovecot indexes it. The problem is that Dovecot ISN'T indexing it. Dovecot commits changes to cache file only after a FETCH command finished successfully. So if the client is disconnected in the middle of doing the FETCH, all of the work that Dovecot did so far gets lost on Dovecot's side. And apparently your client also starts everything from the beginning, even though it already knew some of the messages' sizes.. So the previous patch I sent was supposed to prevent this because originally Dovecot was the one that disconnected the client. It logged "Disconnected for inactivity in reading our output" as the disconnect reason. This shouldn't happen anymore after you patched it, so why did the client still get disconnected? Anyway, here's another patch that makes Dovecot not forget all of its work if the client gets disconnected in the middle of FETCH: http://hg.dovecot.org/dovecot-1.0/rev/e1cd11c5e00a If the client is still disconnecting, it probably takes a couple of tries to get everything read and cached, but after that it should all work nicely. Here's a similar patch for POP3: http://hg.dovecot.org/dovecot-1.0/rev/86766f448e50

1 0

[Dovecot] subdir disappeared
by Luigi Rosa 17 Jun '07

17 Jun '07

I have an installation that sometimes acts strangely: Jun 12 11:28:00 mail dovecot: imap-login: Login: user=<nadia>, method=PLAIN, rip=10.10.10.103, lip=10.10.10.254 Jun 12 11:53:59 mail dovecot: IMAP(nadia): inotify_add_watch(/var/spool/mail/nadia/new) failed: No such file or directory Jun 12 11:53:59 mail dovecot: IMAP(nadia): stat(/var/spool/mail/nadia/new) failed: No such file or directory Jun 12 11:56:14 mail last message repeated 5 times Jun 12 11:58:14 mail last message repeated 2 times Jun 12 12:00:14 mail last message repeated 2 times Jun 12 12:02:14 mail last message repeated 2 times Jun 12 12:02:14 mail dovecot: IMAP(nadia): stat(/var/spool/mail/nadia/new) failed: No such file or directory Jun 12 12:03:23 mail dovecot: IMAP(nadia): Disconnected: Logged out ..... Jun 13 12:08:01 mail dovecot: IMAP(nadia): unlink(/var/spool/mail/nadia/cur/:2,ST) failed: Is a directory Needless to say that no modification has been made to the server for many days and the user did not complain until that time. Could it be Dovecot? Is there a way to trace this error? The MTS is Postfix and in that period the user did not receive any mail The system is a Fedora 6 2.6.20-1.2952.fc6 #1 SMP Wed May 16 17:59:13 EDT 2007 i686 i686 i386 GNU/Linux Ciao, luigi -- / +--[Luigi Rosa]-- \ You cannot achieve the impossible without attempting the absurd.

2 4

[Dovecot] 60 seconds problem
by Waheed Rahuman 17 Jun '07

17 Jun '07

I am using Dovecot-1.0-0_27.rc10.e14. And when try to login with outlook there is an error saying "You server did not respond do u want to try again in 60 seconds" Any solutions please help regards Waheed

2 1

Re: [Dovecot] Per user based protocol access and pause after failed login?
by Mart Pirita 17 Jun '07

17 Jun '07

Tere. > %c expands to "secured" or empty. So you could use eg. > passdb pam { > args = %s%c > } > > and create imap, imapsecured, pop3, pop3secured > > More better, so for example user1 can access only imaps, using Yous suggestion, I have to list all users, except user1 in imap, pop3, pop3secured. But it should works also in other way, that by default all users are allowed to use all protocols and then I exclude user1 from imap, pop3, pop3secured. So I tried: passdb pam { args = %s%c } /etc/pam.d/ includes imap, imapsecured, pop3, pop3secured files which includes: auth required pam_nologin.so auth required pam_stack.so service=system-auth account required pam_stack.so service=system-auth session required pam_stack.so service=system-auth and only imapsecured has this line: auth required pam_listfile.so item=user sense=deny file=/etc/imapsusers onerr=succeed and /etc/imapsusers includes user1 But now even pop user can't login:(. -- Mart

2 1

[Dovecot] using 'socat' to relay Dovecot SASL's auth socket over TCP?
by snowcrash 17 Jun '07

17 Jun '07

hi, i've been running Exim & Dovecot together on the same box. Exim's been sharing Dovecot/SASL auth info over a local unix socket. works great. i'm now splitting Exim & Dovecot onto two different boxes. iiuc, Dovecot ONLY provides a UNIX (local) socket; *not* a TCP socket for over-the-network access. SUre, I could mount the Dovecot socket's volume over NFS ... but just don't want to go there. i've just discovered, socat - Multipurpose relay http://www.dest-unreach.org/socat/ "Socat is a command line based utility that establishes two bidirectional byte streams and transfers data between them. Because the streams can be constructed from a large set of different types of data sinks and sources (see address types), and because lots of address options may be applied to the streams, socat can be used for many different purposes. It might be one of the tools that one `has already needed'." which, iiuc (?), can bidirectionally bridge the Dovecot unix-socket to a TCP socket that Exim can talk/listen to. reading further, "address types" (http://www.dest-unreach.org/socat/doc/socat.html#ADDRESS_TYPES) seem to include BOTH unix & tcp sockets ... can anyone here comment further on this? known to work? possible? no way? etc etc thanks!

2 1

[Dovecot] index
by Lucas -LandM- 17 Jun '07

17 Jun '07

Hi, First of all congratulations for you development. It´s really good. We have a customer that has a copy of all inbound and outbound mail in an account. When he tries to open the mail, the process of index all mail consume all cpu and memory. How can we avoid this kinds of things? Thank you in advance, Lucas

4 7

Re: [Dovecot] dovecot under attack
by Dani 16 Jun '07

16 Jun '07

A Dissabte 16 Juny 2007 16:10, Jon Slater va escriure: > Hi, > > I’ve posted this before but no one was able to help. I can’t figure > out what they are trying to do, and if I should be concerned. > I am running dovecot version 0.99.14 on Fedora Core 4. It appears > that my dovecot server is under attack. This morning in my system > e-mail I saw this: Hi Jon, just my 5 cents, eventually you can figure out if they are trying to login directly to you imap/pop3 ports or maybe through a webmail? In every case why don't you give a try to a fail2ban program to block automatically login failures through iptables and of course upgrade your dovecot's installation? http://drees76.blogspot.com/2006/08/fail2ban-dovecot-and-brute-force.html greetings, dani

1 0

[Dovecot] 1st DOVECOT installation automatically quitting on login
by Benton Haynes 16 Jun '07

16 Jun '07

Hi there. I have just installed DOVECOT 1.0.1 for the first time. After launching it, I can verify that ps -ax | grep -i dovecot 1052 ?? Ss 0:00.03 /usr/local/dovecot/sbin/dovecot -c /etc/dovecot/dovecot.conf 1053 ?? S 0:00.06 dovecot-auth 1058 p2 R+ 0:00.01 grep -i dovecot ps -ax | grep -i imap 1054 ?? S 0:00.08 imap-login 1055 ?? S 0:00.08 imap-login 1056 ?? S 0:00.08 imap-login 1060 p2 R+ 0:00.01 grep -i imap Then, if I telnet to DOVECOT/IMAP & login telnet 192.168.1.30 143 Trying 192.168.1.30... Connected to 192.168.1.30. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS QUOTA STARTTLS AUTH=PLAIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] haynes.name IMAP4 server ready x login ben(a)haynes.name benpass x OK Logged in. Connection closed by foreign host. ^^^^^^^^^^^^^^^^^^^ It disconnects automatically. In my dovecot.conf, I currently have defined verbose_ssl = no auth_verbose = no auth_debug = yes mail_debug = no And, in dovecot.log, I get only, dovecot: Jun 15 18:51:10 Info: auth(default): client in: AUTH 1 PLAIN service=IMAP lip=192.168.1.30 rip=192.168.1.3resp=<hidden> dovecot: Jun 15 18:51:10 Info: auth(default): passwd-file(user= ben(a)haynes.name,192.168.1.3) lookup: user=ben(a)haynes.namefile=/etc/dovecot/user.file dovecot: Jun 15 18:51:10 Info: auth(default): client out: OK 1 user=ben(a)haynes.name dovecot: Jun 15 18:51:10 Info: auth(default): master in: REQUEST 11054 1 dovecot: Jun 15 18:51:10 Info: auth(default): master out: USER 1 ben(a)haynes.name static uid=500 gid=500 home=/var/mail/imap/haynes.name/accounts/ben nice=10 dovecot: Jun 15 18:51:10 Info: imap-login: Login: user=<user=ben(a)haynes.name>, method=PLAIN, rip=192.168.1.3, lip=192.168.1.30 dovecot: Jun 15 18:51:14 Error: child 1064 (imap) killed with signal 4 Ihaven't been able to figure out why this is happening. Is there some more detailed debugging I should turn on? Any ideas why this is going on? -- Ben

2 4

Re: [Dovecot] dovecot under attack
by Mart Pirita 16 Jun '07

16 Jun '07

Tere. > > > Does anyone know what this is? Or someone I could ask? > > Normal dictionary attack? -- Mart

1 0

Re: [Dovecot] dovecot under attack
by Charles Marcus 16 Jun '07

16 Jun '07

Hi Jon, I cannot help with the specific question, but in my opinion, your first and primary goal should be to get that server updated to 1.0.1 asap... 0.99.x is no longer supported - and *very* dated... Jon Slater wrote: > Hi, > > > > I’ve posted this before but no one was able to help. I can’t figure out > what they are trying to do, and if I should be concerned. > > > > I am running dovecot version 0.99.14 on Fedora Core 4. It appears that my > dovecot server is under attack. This morning in my system e-mail I saw > this: > > > > dovecot: > > Authentication Failures: > > rhost= : 23431 Time(s) > > adm: 33 Time(s) > > bin: 33 Time(s) > > mail: 33 Time(s) > > mysql: 21 Time(s) > > nobody: 15 Time(s) > > news: 14 Time(s) > > operator: 8 Time(s) > > sshd: 2 Time(s) > > Unknown Entries: > > check pass; user unknown: 23431 Time(s) > > > > But, when I check my log files I can’t find an IP address for the attacker. > So, for example, if I search my logs for “operator” I see: > > ./messages:Jun 15 23:30:56 lambdacenter dovecot(pam_unix)[15512]: > authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= > user=operator > > ./messages:Jun 15 23:31:00 lambdacenter dovecot(pam_unix)[15670]: > authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= > user=operator > > ./messages:Jun 15 23:31:16 lambdacenter dovecot(pam_unix)[16332]: > authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= > user=operator > > ./messages:Jun 15 23:31:20 lambdacenter dovecot(pam_unix)[16480]: > authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= > user=operator > > ./messages:Jun 15 23:31:27 lambdacenter dovecot(pam_unix)[16695]: > authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= > user=operator > > ./messages:Jun 15 23:31:38 lambdacenter dovecot(pam_unix)[16884]: > authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= > user=operator > > ./messages:Jun 15 23:31:55 lambdacenter dovecot(pam_unix)[17080]: > authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= > user=operator > > ./messages:Jun 15 23:32:11 lambdacenter dovecot(pam_unix)[17182]: > authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= > user=operator > > ./audit/audit.log:type=USER_AUTH msg=audit(1181971858.967:156312): user > pid=15512 uid=0 auid=4294967295 msg='PAM authentication: user=operator > exe="/usr/libexec/dovecot/dovecot-auth" (hostname=?, addr=?, terminal=? > result=Authentication failure)' > > ./audit/audit.log:type=USER_AUTH msg=audit(1181971862.772:156382): user > pid=15670 uid=0 auid=4294967295 msg='PAM authentication: user=operator > exe="/usr/libexec/dovecot/dovecot-auth" (hostname=?, addr=?, terminal=? > result=Authentication failure)' > > ./audit/audit.log:type=USER_AUTH msg=audit(1181971878.710:156707): user > pid=16332 uid=0 auid=4294967295 msg='PAM authentication: user=operator > exe="/usr/libexec/dovecot/dovecot-auth" (hostname=?, addr=?, terminal=? > result=Authentication failure)' > > ./audit/audit.log:type=USER_AUTH msg=audit(1181971882.379:156775): user > pid=16480 uid=0 auid=4294967295 msg='PAM authentication: user=operator > exe="/usr/libexec/dovecot/dovecot-auth" (hostname=?, addr=?, terminal=? > result=Authentication failure)' > > ./audit/audit.log:type=USER_AUTH msg=audit(1181971908.712:156879): user > pid=16695 uid=0 auid=4294967295 msg='PAM authentication: user=operator > exe="/usr/libexec/dovecot/dovecot-auth" (hostname=?, addr=?, terminal=? > result=Authentication failure)' > > ./audit/audit.log:type=USER_AUTH msg=audit(1181972032.080:156904): user > pid=16884 uid=0 auid=4294967295 msg='PAM authentication: user=operator > exe="/usr/libexec/dovecot/dovecot-auth" (hostname=?, addr=?, terminal=? > result=Authentication failure)' > > ./audit/audit.log:type=USER_AUTH msg=audit(1181972047.607:156917): user > pid=17080 uid=0 auid=4294967295 msg='PAM authentication: user=operator > exe="/usr/libexec/dovecot/dovecot-auth" (hostname=?, addr=?, terminal=? > result=Authentication failure)' > > ./audit/audit.log:type=USER_AUTH msg=audit(1181972066.325:156928): user > pid=17182 uid=0 auid=4294967295 msg='PAM authentication: user=operator > exe="/usr/libexec/dovecot/dovecot-auth" (hostname=?, addr=?, terminal=? > result=Authentication failure)' > > > > I’ve checked my snmplog for port activity on port 110 (for POP3) and 143 > (for IMAP), but I don’t see anything unusual. I also systematically > filtered out everything I knew was okay (ssh, and httpd) . > > > > Does anyone know what this is? Or someone I could ask? > > > > Thanks!!!!!!!!!!!!!!!!!!!! > > > > Jon > > > No virus found in this outgoing message. > Checked by AVG Free Edition. > Version: 7.5.472 / Virus Database: 269.8.17/850 - Release Date: 6/15/2007 > 11:31 AM > >

1 0

[Dovecot] dovecot under attack
by Jon Slater 16 Jun '07

16 Jun '07

Hi, I’ve posted this before but no one was able to help. I can’t figure out what they are trying to do, and if I should be concerned. I am running dovecot version 0.99.14 on Fedora Core 4. It appears that my dovecot server is under attack. This morning in my system e-mail I saw this: dovecot: Authentication Failures: rhost= : 23431 Time(s) adm: 33 Time(s) bin: 33 Time(s) mail: 33 Time(s) mysql: 21 Time(s) nobody: 15 Time(s) news: 14 Time(s) operator: 8 Time(s) sshd: 2 Time(s) Unknown Entries: check pass; user unknown: 23431 Time(s) But, when I check my log files I can’t find an IP address for the attacker. So, for example, if I search my logs for “operator” I see: ./messages:Jun 15 23:30:56 lambdacenter dovecot(pam_unix)[15512]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=operator ./messages:Jun 15 23:31:00 lambdacenter dovecot(pam_unix)[15670]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=operator ./messages:Jun 15 23:31:16 lambdacenter dovecot(pam_unix)[16332]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=operator ./messages:Jun 15 23:31:20 lambdacenter dovecot(pam_unix)[16480]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=operator ./messages:Jun 15 23:31:27 lambdacenter dovecot(pam_unix)[16695]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=operator ./messages:Jun 15 23:31:38 lambdacenter dovecot(pam_unix)[16884]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=operator ./messages:Jun 15 23:31:55 lambdacenter dovecot(pam_unix)[17080]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=operator ./messages:Jun 15 23:32:11 lambdacenter dovecot(pam_unix)[17182]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=operator ./audit/audit.log:type=USER_AUTH msg=audit(1181971858.967:156312): user pid=15512 uid=0 auid=4294967295 msg='PAM authentication: user=operator exe="/usr/libexec/dovecot/dovecot-auth" (hostname=?, addr=?, terminal=? result=Authentication failure)' ./audit/audit.log:type=USER_AUTH msg=audit(1181971862.772:156382): user pid=15670 uid=0 auid=4294967295 msg='PAM authentication: user=operator exe="/usr/libexec/dovecot/dovecot-auth" (hostname=?, addr=?, terminal=? result=Authentication failure)' ./audit/audit.log:type=USER_AUTH msg=audit(1181971878.710:156707): user pid=16332 uid=0 auid=4294967295 msg='PAM authentication: user=operator exe="/usr/libexec/dovecot/dovecot-auth" (hostname=?, addr=?, terminal=? result=Authentication failure)' ./audit/audit.log:type=USER_AUTH msg=audit(1181971882.379:156775): user pid=16480 uid=0 auid=4294967295 msg='PAM authentication: user=operator exe="/usr/libexec/dovecot/dovecot-auth" (hostname=?, addr=?, terminal=? result=Authentication failure)' ./audit/audit.log:type=USER_AUTH msg=audit(1181971908.712:156879): user pid=16695 uid=0 auid=4294967295 msg='PAM authentication: user=operator exe="/usr/libexec/dovecot/dovecot-auth" (hostname=?, addr=?, terminal=? result=Authentication failure)' ./audit/audit.log:type=USER_AUTH msg=audit(1181972032.080:156904): user pid=16884 uid=0 auid=4294967295 msg='PAM authentication: user=operator exe="/usr/libexec/dovecot/dovecot-auth" (hostname=?, addr=?, terminal=? result=Authentication failure)' ./audit/audit.log:type=USER_AUTH msg=audit(1181972047.607:156917): user pid=17080 uid=0 auid=4294967295 msg='PAM authentication: user=operator exe="/usr/libexec/dovecot/dovecot-auth" (hostname=?, addr=?, terminal=? result=Authentication failure)' ./audit/audit.log:type=USER_AUTH msg=audit(1181972066.325:156928): user pid=17182 uid=0 auid=4294967295 msg='PAM authentication: user=operator exe="/usr/libexec/dovecot/dovecot-auth" (hostname=?, addr=?, terminal=? result=Authentication failure)' I’ve checked my snmplog for port activity on port 110 (for POP3) and 143 (for IMAP), but I don’t see anything unusual. I also systematically filtered out everything I knew was okay (ssh, and httpd) . Does anyone know what this is? Or someone I could ask? Thanks!!!!!!!!!!!!!!!!!!!! Jon No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.472 / Virus Database: 269.8.17/850 - Release Date: 6/15/2007 11:31 AM

1 0

[Dovecot] Per user based protocol access and pause after failed login?
by Mart Pirita 16 Jun '07

16 Jun '07

Hello. Tried search, no luck, sorry, if this is already answered, but I'm still looking a solution using pam_auth how to define in dovecot which user can access which protocol, for example, default is: protocols = pop3 pop3s imap imaps I'd like to use something like this: exclude_using_pop = user1, user2, @group exclude_using_pops = user1, user2, @group exclude_using_imap = user1, user2, @group exclude_using_imaps = user1, user2, @group The idea is security and also preventing imap user by accident logging in using pop3 and downloading (clearing inbox for imap) all inbox. And also some throttling, for example the adjustable time to pause access after failed login etc would be great. -- Mart

2 2

[Dovecot] SHA256 password patch
by Jasper Slits 16 Jun '07

16 Jun '07

Hi, I made a patch against branch-1.0 for SHA256 password hashing support for Dovecot. Courier Authlib supports this hashing scheme and in order to migrate from Courier to Dovecot, I've added SHA256 support to Dovecot. The attached patch is based on BSD licensed code from Olivier Gay (http://www.ouah.org/ogay/sha2/) Changes made by me in Olivier's sha2{.h,.c} code: - Prototype for sha256_transf is added to sha2.h - sha256_get_digest() is added to sha2{.h,.c} - Code for UNROLL_LOOPS is removed - Support for SHA224,SHA384,SHA512 was removed - Functions are renamed to match those in sha1{.h,.c} - SHA256_DIGEST_SIZE is renamed to SHA256_RESULTLEN I can add safe_memset calls if requested. Patch is attached and can also be found at http://www.malochia.nl/dovecot/sha256.patch Kind regards, Jasper diff -r -u -N --exclude=Makefile.in --exclude=.deps --exclude=Makefile src/auth/password-scheme.c auth/password-scheme.c --- src/auth/password-scheme.c 2007-02-21 13:30:38.756711250 +0100 +++ auth/password-scheme.c 2007-02-21 14:18:49.645380500 +0100 @@ -10,6 +10,7 @@ #include "mycrypt.h" #include "randgen.h" #include "sha1.h" +#include "sha2.h" #include "str.h" #include "password-scheme.h" @@ -153,6 +154,17 @@ return str_c(str); } +static const char *sha256_generate(const char *plaintext, + const char *user __attr_unused__) +{ + unsigned char digest[SHA256_RESULTLEN]; + string_t *str; + sha256_get_digest(plaintext, strlen(plaintext), digest); + str = t_str_new(MAX_BASE64_ENCODED_SIZE(sizeof(digest)+1)); + base64_encode(digest, sizeof(digest), str); + return str_c(str); +} + static const void * password_decode(const char *password, unsigned int result_len) { @@ -196,6 +208,23 @@ return memcmp(sha1_digest, data, SHA1_RESULTLEN) == 0; } +static bool sha256_verify(const char *plaintext, const char *password, + const char *user) +{ + unsigned char sha256_digest[SHA256_RESULTLEN]; + const char *data; + + sha256_get_digest(plaintext, strlen(plaintext), sha256_digest); + + data = password_decode(password, SHA256_RESULTLEN); + if (data == NULL) { + i_error("sha256_verify(%s): Invalid password encoding", user); + return 0; + } + + return memcmp(sha256_digest, data, SHA256_RESULTLEN) == 0; +} + static const char *ssha_generate(const char *plaintext, const char *user __attr_unused__) { @@ -466,6 +495,7 @@ { "MD5-CRYPT", md5_crypt_verify, md5_crypt_generate }, { "SHA", sha1_verify, sha1_generate }, { "SHA1", sha1_verify, sha1_generate }, + { "SHA256", sha256_verify, sha256_generate }, { "SMD5", smd5_verify, smd5_generate }, { "SSHA", ssha_verify, ssha_generate }, { "PLAIN", plain_verify, plain_generate }, diff -r -u -N --exclude=Makefile.in --exclude=.deps --exclude=Makefile src/lib/Makefile.am lib/Makefile.am --- src/lib/Makefile.am 2007-02-21 13:30:38.792713500 +0100 +++ lib/Makefile.am 2007-02-21 14:21:59.437241750 +0100 @@ -73,6 +73,7 @@ sendfile-util.c \ seq-range-array.c \ sha1.c \ + sha2.c \ str.c \ str-sanitize.c \ strescape.c \ @@ -146,6 +147,7 @@ sendfile-util.h \ seq-range-array.h \ sha1.h \ + sha2.h \ str.h \ str-sanitize.h \ strescape.h \ diff -r -u -N --exclude=Makefile.in --exclude=.deps --exclude=Makefile src/lib/sha2.c lib/sha2.c --- src/lib/sha2.c 1970-01-01 01:00:00.000000000 +0100 +++ lib/sha2.c 2007-02-23 14:03:46.857739818 +0100 @@ -0,0 +1,257 @@ +/* + * FIPS 180-2 SHA-224/256/384/512 implementation + * Last update: 02/02/2007 + * Issue date: 04/30/2005 + * + * Copyright (C) 2005, 2007 Olivier Gay <olivier.gay(a)a3.epfl.ch> + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * 3. Neither the name of the project nor the names of its contributors + * may be used to endorse or promote products derived from this software + * without specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND + * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE + * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL + * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS + * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) + * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY + * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF + * SUCH DAMAGE. + */ + +#include <string.h> + +#include "sha2.h" + +#define SHFR(x, n) (x >> n) +#define ROTR(x, n) ((x >> n) | (x << ((sizeof(x) << 3) - n))) +#define ROTL(x, n) ((x << n) | (x >> ((sizeof(x) << 3) - n))) +#define CH(x, y, z) ((x & y) ^ (~x & z)) +#define MAJ(x, y, z) ((x & y) ^ (x & z) ^ (y & z)) + +#define SHA256_F1(x) (ROTR(x, 2) ^ ROTR(x, 13) ^ ROTR(x, 22)) +#define SHA256_F2(x) (ROTR(x, 6) ^ ROTR(x, 11) ^ ROTR(x, 25)) +#define SHA256_F3(x) (ROTR(x, 7) ^ ROTR(x, 18) ^ SHFR(x, 3)) +#define SHA256_F4(x) (ROTR(x, 17) ^ ROTR(x, 19) ^ SHFR(x, 10)) + +#define UNPACK32(x, str) \ +{ \ + *((str) + 3) = (uint8) ((x) ); \ + *((str) + 2) = (uint8) ((x) >> 8); \ + *((str) + 1) = (uint8) ((x) >> 16); \ + *((str) + 0) = (uint8) ((x) >> 24); \ +} + +#define PACK32(str, x) \ +{ \ + *(x) = ((uint32) *((str) + 3) ) \ + | ((uint32) *((str) + 2) << 8) \ + | ((uint32) *((str) + 1) << 16) \ + | ((uint32) *((str) + 0) << 24); \ +} + +#define UNPACK64(x, str) \ +{ \ + *((str) + 7) = (uint8) ((x) ); \ + *((str) + 6) = (uint8) ((x) >> 8); \ + *((str) + 5) = (uint8) ((x) >> 16); \ + *((str) + 4) = (uint8) ((x) >> 24); \ + *((str) + 3) = (uint8) ((x) >> 32); \ + *((str) + 2) = (uint8) ((x) >> 40); \ + *((str) + 1) = (uint8) ((x) >> 48); \ + *((str) + 0) = (uint8) ((x) >> 56); \ +} + +#define PACK64(str, x) \ +{ \ + *(x) = ((uint64) *((str) + 7) ) \ + | ((uint64) *((str) + 6) << 8) \ + | ((uint64) *((str) + 5) << 16) \ + | ((uint64) *((str) + 4) << 24) \ + | ((uint64) *((str) + 3) << 32) \ + | ((uint64) *((str) + 2) << 40) \ + | ((uint64) *((str) + 1) << 48) \ + | ((uint64) *((str) + 0) << 56); \ +} + +/* Macros used for loops unrolling */ + +#define SHA256_SCR(i) \ +{ \ + w[i] = SHA256_F4(w[i - 2]) + w[i - 7] \ + + SHA256_F3(w[i - 15]) + w[i - 16]; \ +} + + + +uint32 sha256_h0[8] = + {0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, + 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19}; + + +uint32 sha256_k[64] = + {0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, + 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5, + 0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, + 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174, + 0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, + 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da, + 0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, + 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967, + 0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, + 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85, + 0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, + 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070, + 0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, + 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3, + 0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, + 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2}; + + +/* SHA-256 functions */ + +void sha256_transf(sha256_ctx *ctx, const unsigned char *message, + unsigned int block_nb) +{ + uint32 w[64]; + uint32 wv[8]; + uint32 t1, t2; + const unsigned char *sub_block; + int i,j; + + + for (i = 0; i < (int) block_nb; i++) { + sub_block = message + (i << 6); + + for (j = 0; j < 16; j++) { + PACK32(&sub_block[j << 2], &w[j]); + } + + for (j = 16; j < 64; j++) { + SHA256_SCR(j); + } + + for (j = 0; j < 8; j++) { + wv[j] = ctx->h[j]; + } + + for (j = 0; j < 64; j++) { + t1 = wv[7] + SHA256_F2(wv[4]) + CH(wv[4], wv[5], wv[6]) + + sha256_k[j] + w[j]; + t2 = SHA256_F1(wv[0]) + MAJ(wv[0], wv[1], wv[2]); + wv[7] = wv[6]; + wv[6] = wv[5]; + wv[5] = wv[4]; + wv[4] = wv[3] + t1; + wv[3] = wv[2]; + wv[2] = wv[1]; + wv[1] = wv[0]; + wv[0] = t1 + t2; + } + + for (j = 0; j < 8; j++) { + ctx->h[j] += wv[j]; + } + } +} + +void sha256(const unsigned char *message, unsigned int len, unsigned char *digest) +{ + sha256_ctx ctx; + + sha256_init(&ctx); + sha256_loop(&ctx, message, len); + sha256_result(&ctx, digest); +} + +void sha256_init(sha256_ctx *ctx) +{ + int i; + for (i = 0; i < 8; i++) { + ctx->h[i] = sha256_h0[i]; + } + + ctx->len = 0; + ctx->tot_len = 0; +} + +void sha256_loop(sha256_ctx *ctx, const unsigned char *message, + unsigned int len) +{ + unsigned int block_nb; + unsigned int new_len, rem_len, tmp_len; + const unsigned char *shifted_message; + + tmp_len = SHA256_BLOCK_SIZE - ctx->len; + rem_len = len < tmp_len ? len : tmp_len; + + memcpy(&ctx->block[ctx->len], message, rem_len); + + if (ctx->len + len < SHA256_BLOCK_SIZE) { + ctx->len += len; + return; + } + + new_len = len - rem_len; + block_nb = new_len / SHA256_BLOCK_SIZE; + + shifted_message = message + rem_len; + + sha256_transf(ctx, ctx->block, 1); + sha256_transf(ctx, shifted_message, block_nb); + + rem_len = new_len % SHA256_BLOCK_SIZE; + + memcpy(ctx->block, &shifted_message[block_nb << 6], + rem_len); + + ctx->len = rem_len; + ctx->tot_len += (block_nb + 1) << 6; +} + +void sha256_result(sha256_ctx *ctx, unsigned char *digest) +{ + unsigned int block_nb; + unsigned int pm_len; + unsigned int len_b; + int i; + + block_nb = (1 + ((SHA256_BLOCK_SIZE - 9) + < (ctx->len % SHA256_BLOCK_SIZE))); + + len_b = (ctx->tot_len + ctx->len) << 3; + pm_len = block_nb << 6; + + memset(ctx->block + ctx->len, 0, pm_len - ctx->len); + ctx->block[ctx->len] = 0x80; + UNPACK32(len_b, ctx->block + pm_len - 4); + + sha256_transf(ctx, ctx->block, block_nb); + + for (i = 0 ; i < 8; i++) { + UNPACK32(ctx->h[i], &digest[i << 2]); + } +} + +void sha256_get_digest(const void *data, size_t size, + unsigned char result[SHA256_RESULTLEN]) +{ + sha256_ctx ctx; + + sha256_init(&ctx); + sha256_loop(&ctx, data, size); + sha256_result(&ctx, result); +} + diff -r -u -N --exclude=Makefile.in --exclude=.deps --exclude=Makefile src/lib/sha2.h lib/sha2.h --- src/lib/sha2.h 1970-01-01 01:00:00.000000000 +0100 +++ lib/sha2.h 2007-02-23 14:22:32.952116316 +0100 @@ -0,0 +1,72 @@ +/* + * FIPS 180-2 SHA-224/256/384/512 implementation + * Last update: 02/02/2007 + * Issue date: 04/30/2005 + * + * Copyright (C) 2005, 2007 Olivier Gay <olivier.gay(a)a3.epfl.ch> + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * 3. Neither the name of the project nor the names of its contributors + * may be used to endorse or promote products derived from this software + * without specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND + * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE + * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL + * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS + * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) + * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY + * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF + * SUCH DAMAGE. + */ + +#ifndef SHA2_H +#define SHA2_H + +#define SHA256_RESULTLEN ( 256 / 8) + +#define SHA256_BLOCK_SIZE ( 512 / 8) + +#ifndef SHA2_TYPES +#define SHA2_TYPES +typedef unsigned char uint8; +typedef unsigned int uint32; +typedef unsigned long long uint64; +#endif + + +typedef struct { + unsigned int tot_len; + unsigned int len; + unsigned char block[2 * SHA256_BLOCK_SIZE]; + uint32 h[8]; +} sha256_ctx; + +void sha256_transf(sha256_ctx *ctx, const unsigned char *message, + unsigned int block_nb); + + +void sha256_init(sha256_ctx * ctx); +void sha256_loop(sha256_ctx *ctx, const unsigned char *message, + unsigned int len); +void sha256_result(sha256_ctx *ctx, unsigned char *digest); +void sha256(const unsigned char *message, unsigned int len, + unsigned char *digest); +void sha256_get_digest(const void *data, size_t size, + unsigned char result[SHA256_RESULTLEN]); + + + +#endif /* !SHA2_H */ +

3 2

[Dovecot] SEGV with Dovecot v1.0.0 Deliver and cmusieve v1.0.1 and vacation
by Steffen Kaiser 16 Jun '07

16 Jun '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I have a small Sieve script that tries to use vacation that segfaults. The script is the one from http://wiki.dovecot.org/LDA/Sieve. When I change the email address (I changed the local part into "skai"), hence, vacation is skipped, the mail is delivered without any problem. ==== script start require ["fileinto", "vacation"]; # Move spam to spam folder if exists "X-Spam-Flag" { fileinto "spam"; # Stop here so that we do not reply on spams stop; } vacation # Reply at most once a day to a same sender :days 1 :subject "Out of office reply" # List of allowed recipient addresses from auto reply should be sent. :addresses ["ska(a)ux-2s11-9.inf.fh-bonn-rhein-sieg.de"] "I'm out of office, please contact Joan Doe instead. Best regards John Doe"; ========== END ========== Out of sieved .dovecot.sievec Sievecode version 3 4: IF (ends at 13)exists{11}X-Spam-Flag 13:JUMP 20 19: FILEINTO {4}spam 19: STOP 20: VACATION {39}ska(a)ux-2s11-9.inf.fh-bonn-rhein-sieg.de 40 SUBJ({19}Out of office reply) 60 MESG({73}I'm out of office, please contact Joan Doe instead. Best regards John Doe) DAYS(1) MIME(0) full len is: 62 ========== END gdb output: Core was generated by `/usr/local/dovecot/libexec/dovecot/deliver'. Program terminated with signal 11, Segmentation fault. #0 0xb7eef3a3 in strlen () from /lib/tls/i686/cmov/libc.so.6 (gdb) bt full #0 0xb7eef3a3 in strlen () from /lib/tls/i686/cmov/libc.so.6 No symbol table info available. #1 0xb7e2bcf3 in sieve_execute_bytecode (bc=0x80e3eb0, interp=0x80e3de8, script_context=0xbfb57800, message_context=0xbfb577c4) at script.c:398 hash = "\000\000\000\000¸Z0F\000\000\000\000¸Z0F" actions = (action_list_t *) 0x80e3850 notify_list = (notify_list_t *) 0x80e3830 actions_string = "Action(s) taken:\n", '\0' <repeats 4078 times> errmsg = 0x0 imapflags = {flag = 0x0, nflags = 0} #2 0xb7e1eb2c in cmu_sieve_run (storage=0x80d0a20, mail=0x80e03c8, script_path=0x80cbc48 "/home/ska/.dovecot.sieve", username=0x80cb030 "ska", mailbox=0x80bae92 "INBOX") at sieve-cmu.c:573 fd = <value optimized out> interp = (sieve_interp_t *) 0x80e3de8 bytecode = (sieve_bytecode_t *) 0x80e3eb0 sdata = {username = 0x80cb030 "ska", storage = 0x80d0a20, errors = 0x0} mdata = {mail = 0x80e03c8, mailbox = 0x80bae92 "INBOX", id = 0x80e4860 "<200704260754.l3Q7sWdu002894(a)ux-2s11-9.inf.fh-bonn-rhein-sieg.de>", return_path = 0x0, authuser = 0x80cb030 "ska", temp = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}} compiled_path = 0x80cbc68 "/home/ska/.dovecot.sievec" path = 0xb7fb0ff4 "<Í\022" ret = <value optimized out> #3 0xb7e1da72 in cmusieve_deliver_mail (storage=0x80d0a20, mail=0x80e03c8, username=0x80cb030 "ska", mailbox=0x80bae92 "INBOX") at cmusieve-plugin.c:72 script_path = 0x80cbc48 "/home/ska/.dovecot.sieve" #4 0x08057536 in main (argc=Cannot access memory at address 0x0 ) at deliver.c:679 tab = (struct var_expand_table *) 0x80cb068 config_path = 0x80bb79c "/usr/local/dovecot/etc/dovecot.conf" envelope_sender = 0x80bae98 "MAILER-DAEMON" mailbox = 0x80bae92 "INBOX" auth_socket = <value optimized out> home = <value optimized out> destination = 0x80cb030 "ska" user = 0x80cb030 "ska" mail_env = <value optimized out> flags = 1025 lock_method = MAIL_STORAGE_LOCK_FCNTL storage = (struct mail_storage *) 0x80d0a20 mbox_storage = (struct mail_storage *) 0x80d2d48 box = (struct mailbox *) 0x80dcc88 input = (struct istream *) 0x80d4044 t = (struct mailbox_transaction_context *) 0x80de2a0 mail = (struct mail *) 0x80e03c8 process_euid = 30000 i = 63 ret = <value optimized out> (gdb) - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iQEVAwUBRjBdji9SORjhbDpvAQICoggAnzLxTlL8mDonntaDvwr/4JN6eWPIAm7o XP6hSw9JlbTsPY55keQMZpN/UNB/FXojcqI6lD4f/2dJqCEHmeB40NQZEMUN+f60 6+BHkE6vb2sMnXa09eQWg2d5zVKp6bHdSsbtzmWIsYX0stUFMncFTJVQgatHstDm DaSGMf6V2SwiPst/0tUbeTMqYhud9LU2YLhU3+T9AuTmcSGztohnJPGnqC1GLP+N m+KLbLF6B7ZMQ2RX+M+arzz8EQRHZ2622aqiLKoT+rVZ8LkLPzp4Whd9HK1MqMld KSjJuZBKgKuJr61SGqPboPOip635DgJH7g2BKgGnOHWvJf6E7U+Q9A== =1M3a -----END PGP SIGNATURE-----

3 3

[Dovecot] auth process(es)
by Thomas Hummel 16 Jun '07

16 Jun '07

Hello Timo, I've got some questions about dovecot-auth processes which I cannot answer just by reading the doc : [ Note : my problem is that I often see dovecot: pop3-login: Can't connect to auth server at default: Connection refused and I'm looking for a way to tweak dovecot.conf parameters to allow more login <-> auth connections ] - I'm not sure I get the auth worker process concept right : is there a master dovecot-auth which listens to new incoming connections from login processes and fork/exec the real job of authenticating against the pass/userdbs to a child, called an auth worker ? - is it safe to increment the number of auth processes (the 'count' parameter in the auth block (auth_default { ...} for instance) ? - my understanding is that login processes communicate with auth processes through a unix type socket (named 'default') : can I create a second auth block in dovecot.conf (for instance 'aut extra {...}') in addition to the existing 'auth default {...}' one ? would it create an second unix socket and thus allowing a heavier login processes load ? what would be the difference between that and, say, changing the 'count' parameter to '2' in the 'auth default' section ? thanks. -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

2 5