- dovecot - dovecot.org

[Dovecot] LIST command ignores "hidden=yes" for default namespace
by Bill Boebel 11 Jun '06

11 Jun '06

I'm not sure if this is a bug or just an undesirable feature, but when I have our namespace configured to match Courier's "INBOX." functionality, Dovecot forces me to also define a default namespace (with no prefix). Without the default namespace defined I get "NO Unknown namespace." errors when trying to subscribe or unsubscribe folders. So I have configured my namespaces like this: namespace private { separator = . prefix = INBOX. inbox = no } namespace private { separator = . prefix = inbox = yes hidden = yes } However with this configuration, LIST commands ignore the "hidden = yes" setting on the default namespace and IMAP clients end up displaying an identical folder listing twice... 2 list "" "*" * LIST (\HasChildren) "." "INBOX" * LIST (\HasNoChildren) "." "INBOX.spam" * LIST (\HasNoChildren) "." "INBOX.Trash" * LIST (\HasNoChildren) "." "INBOX.Sent" * LIST (\HasNoChildren) "." "INBOX.Drafts" * LIST (\HasNoChildren) "." "INBOX.RSS" * LIST (\HasNoChildren) "." "INBOX.test" * LIST (\HasNoChildren) "." "INBOX.test2" * LIST (\HasNoChildren) "." "spam" * LIST (\HasNoChildren) "." "Trash" * LIST (\HasNoChildren) "." "Sent" * LIST (\HasNoChildren) "." "Drafts" * LIST (\HasNoChildren) "." "RSS" * LIST (\HasNoChildren) "." "test" * LIST (\HasNoChildren) "." "test2" 2 OK List completed. Again, I am not sure if this was intended, but either way it is undesirable for us. I even had a couple customers delete one of their duplicate folders thinking that was safe, but it deleted both folders - of course. To force Dovecot to hide mailboxes in the default namespace I made the following change: src/imap/cmd-list.c: @247 + if (ns->hidden) { + return; + }

2 1

[Dovecot] Bug: maildirsize not updated when deleting folders
by Bill Boebel 11 Jun '06

11 Jun '06

When using maildir++ quotas, if you delete an IMAP folder, the maildirsize file should get updated so that it subtracts the size of the messages that were contained in the deleted IMAP folder. However Dovecot is not doing this, resulting in Dovecot showing an incorrect quota value until the next time the maildirsize file is rebuilt. Bill

2 2

[Dovecot] Outside mails
by Tolga 11 Jun '06

11 Jun '06

Hi, I recently found out that I was able to get system mails, but not mails from the outside world. What setting do I have to fiddle with for this? Regards,

5 6

[Dovecot] Quotas and LDAP
by Stephan Müller 11 Jun '06

11 Jun '06

Hi, first of all, it is very nice that dovecot has quotas now! Thank you very much. Now, I want to use quotas with LDAP requests, but I am having the following issues. First, contrary to what is written in the Wiki about quota and LDAP ("# quotaStorage must be in the format mentioned above, # For example: dirsize:storage=10240"), it is possible to have an LDAP field with just a number in it. The configuration in dovecot-ldap.conf looks like: user_attrs = homedir=home,uidnumber=uid,primaryGroupID=gid,quotanumber=quota=maildir:storage This works (as tested - I guess, it works as long as the quota entry is the last entry) and you also see it in the logs: Jun 11 19:10:36 inet dovecot: auth(default): master out: USER^I8^Ismueller^Iuid= 76340^Igid=513^Iquota=maildir:storage=90000000^Ihome=/home/dozenten/smueller/ Question now: is this intended (meaning, is this configuration possibility here to stay)? If yes, can you please update the wiki? Second issue: according to the description, the quota number is the size in KB. Is there a chance to change it to bytes? Reason: I am using Postfix with the VDA extension. There, the quota is to be given in bytes. Now, as lazy as I am, I only want to maintain one value for the quota. As I personally think that a quota given in bytes is more flexible, I would ask whether the following change can be made to dovecot: --- quota-maildir.c.orig 2006-06-11 19:15:55.000000000 +0200 +++ quota-maildir.c 2006-06-11 19:16:13.000000000 +0200 @@ -526,7 +526,7 @@ for (; *args != '\0'; args++) { if (strncmp(*args, "storage=", 8) == 0) { - size = strtoull(*args + 8, NULL, 10) * 1024; + size = strtoull(*args + 8, NULL, 10); if (size != 0) root->message_bytes_limit = size; root->master_message_limits = TRUE; Thanks Stephan -- | Those that bite the hand that feeds them are | | doomed to lick the boot that kicks them. |

1 0

[Dovecot] RFC 3501 compliance issue: body-type-msg incorrect
by Tony Kay 11 Jun '06

11 Jun '06

Hi, I am using Dovecot 1.0 beta 7, moving to beta8 probably tomorrow. I am seeing a few RFC compliance issues with IMAP responses. I have an in-house IMAP client that caches IMAP data for a web mail system (it parses millions of IMAP interactions a day), and it reports whenever it gets a line that does not look RFC compliant. Unfortunately, users modify their mailboxes before I can get a copy that allows me to reproduce the errors. However, I can at least show you some examples of the response lines I'm seeing, since they are copied verbatim to my logs when they happen. I saw one case of imap-literal coming across without a \r\n sequence: * 1135 FETCH (UID 1345 RFC822.SIZE 4813894 BODY (("text" "plain" ("charset" "ISO-8859-1") NIL NIL "7bit" 415 6)("application" "octet-stream" ("name" {59}C:\\Documents and Settings\\Mitch\\Desktop\\AIR JORDANS.ppt) NIL NIL "base64" 4811938) "mixed") BODY[1]<0> {80} We sorted out what technical difficulties we having and have posted a corrected BODY[HEADER.FIELDS (FROM TO SUBJECT)] {90} From: XXX To: XXX Subject: Sports group II back online ) This one is probably some weird malformed message, since literal strings processing is certainly not broken in general. The much more common problem is when people receive a message that has a message embedded using the RFC3501 body-type-msg rule. Here is a sample incorrect response: * 4154 FETCH (UID 27140 RFC822.SIZE 14078 BODY (("text" "plain" ("charset" "ISO-8859-1" "format" "flowed") NIL NIL "7bit" 2 1)("message" "rfc822" ("name" "casbudmgr: FW: deans-dirs: Scholarship Announcement") NIL NIL "7bit" 11694 ("Wed, 12 Apr 2006 14:42:04 -0700" "casbudmgr: FW: deans-dirs: Scholarship Announcement" (("xxxxxxx xxxx" NIL "xxxxxx" "xxx.xxxxxxx.xxx")) ((NIL NIL "xxxxxxxxxxxxxxx" "lists.xxxxxxxxxxx")) ((NIL NIL "casbudmgr" "xxxxx.xxxxxxx.xxx")) ((NIL NIL "xxxxxxxxx" "xxxxxxxxxxxxxxxxx")) NIL NIL NIL <AF3B91355406B440A6E838338E63A742C6435B@xxxxxxxxxxxxxxxxxxxxxdu>") ("text" "plain" ("charset" "us-ascii") NIL NIL "quoted-printable" 2047 50)("text" "html" ("charset" "us-ascii") NIL NIL "quoted-printable" 6565 189) "alternative" 302)("text" "x-vcard" ("charset" "utf-8" "name" "ddkintz.vcf") NIL NIL "7bit" 415 14) "mixed")) Look through the line to the point where you see: "alternative" 302. The part the proceeds this is a body-type-mpart rule, but it is missing a set of parentheses...i.e. there should be an ending paren after alternative, and a beginning paren before the set of 1parts that precede it. This looks like a similar problem to what was in imap_bodystructure.c a while back. -- Anthony Kay University Computing Center (541) 346-1719 GPG Fingerprint: B0DB D46A 60AF FAE7 A94A 5075 0CB4 4D88 9F4F 7F09 Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the Universe trying to produce bigger and better idiots. So far, the Universe is winning. Rich Cook

3 4

[Dovecot] Fatal: chdir(/home/xxxxx) failed with uid xxx: Permission denied
by Nick Ortiz 11 Jun '06

11 Jun '06

I've had this issue for sometime, I finally gave up and switched to Courier-Imap but I'm finding I hate data storage / structure so I decided to give dovecot another go but am still running into the same issue. I had this working once upon a time and can not for the life of me figure it out. Here's some basic info. Dist: Gentoo 2005.1 Emerge Info: net-mail/dovecot-1.0_beta8 USE="ipv6 pam ssl -debug -kerberos -ldap -mbox -mysql* -pop3d -postgres -vpopmail" Permissions for /home: drwxr-x--x Owner for /home: root Permissions for /home/*: drwxr-xr-x Owner for /home/*: username:username dovecot: May 18 23:40:04 Info: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=xxx.xxx.xxx.xxx rip=xxx.xxx.xxx.xxx dovecot: May 18 23:40:04 Info: auth(default): client out: CONT 1 dovecot: May 18 23:40:04 Info: auth(default): client in: CONT<hidden> dovecot: May 18 23:40:04 Info: auth(default): client out: OK 1 user=xxxx dovecot: May 18 23:40:04 Fatal: chdir(/home/xxxxx) failed with uid 502: Permission denied dovecot: May 18 23:40:04 Info: auth(default): master in: REQUEST 2 4464 1 dovecot: May 18 23:40:04 Info: auth(default): master out: USER 2 xxxx system_user=xxxx uid=502 gid=506 home=/home/xxxx ovecot: May 18 23:40:04 Info: imap-login: Login: user=<xxxx>, method=plain, rip=xxx.xxx.xxx.xxx, lip=xxx.xxx.xxx.xxx, TLS dovecot: May 18 23:40:04 Error: child 4488 (imap) returned error 89 Only real resolution I can find refers to SELinux which I do not have installed. I can provide my dovecot.conf if needed.

2 1

[Dovecot] LDAP imaps,pop3s authentication problem
by Peter Susán 11 Jun '06

11 Jun '06

Hi, i'm using LDAP authentication with dovecot, and it's working flawlessly,until i enable SSL.. (even imaps or pop3s) i can't log in... if i test the certificates, and the login with the `openssl s_client - host example.com -port 993 -verify -debug` command, it works, until i want to log in... it lists the capibilities, but when i login it says "01 NO LOGIN failed"... no log messages appears in the logfile, only when i login without SSL... i've tried the newest beta8 and older versions of the server, but the effect is the same.. i'm really confused, becouse i have lots servers running dovecot, but with mysql authentication, and i didn't have any problems with them... the biggest problem is, that no log messages being generated during the process (with or without auth_debug, and auth_verbose options enabled), so i can't figure it out why is it happening.. it's working if i authenticate from other sources, just like passdb, or mysql... thx for the answers in advance, ->Peter Susán tel.: +36-20-395-3751 mail: peter(a)susinet.hu

2 1

[Dovecot] beta8: cores on corrupted index file
by Jeff A. Earickson 11 Jun '06

11 Jun '06

Timo, I saw a couple of these cores over the weekend. The syslog says: May 21 19:04:48 emerald dovecot: [ID 107833 mail.error] IMAP(user): Corrupted index cache file /home/students/s/user/.imap/sent-mail-apr-2004/dovecot.index.cache: indexid changed With a resulting core file from imap at this time. I also discovered a remaining lock file on the person's imap file: -rw------- 1 user user 3088940 May 10 2004 sent-mail-apr-2004 -rw------- 1 user user 13 May 21 19:04 sent-mail-apr-2004.lock The lockfile contains the pid of the process that cores: May 21 19:04:48 emerald dovecot: [ID 684838 mail.error] child 17480 (imap) killed with signal 11 The gdb output of the core file is attached. Jeff Earickson Colby College

2 1

[Dovecot] Dovecot statistics -- I hope this is a stupid question
by Jon Callas 11 Jun '06

11 Jun '06

Is there a way for me to know the last time a user logged in? i'm running Dovecot with Postfix with the authentication bridge and completely virtual everything. It would be nice to know the last time someone logged in, so four years from now I can delete the ones that haven't been used in three years. Jon

2 1

[Dovecot] Slow caching
by John Rowe 11 Jun '06

11 Jun '06

I have just installed dovecot on a RedHat Enterprise 4 clone with exim MTA, procmail LDA and mbox format. I'm getting complaints of slow caching from a Mac user: I think there's still something very sick with [host]'s IMAP server: it just took a full five minutes to cache an attachment (350kb) in an email from [person]. In that time, I couldn't do anything else with mail; it was essentially locked. The user's inbox is in /var/spool/mail (where there are no idexes), there areindex files within his home directory: ./.imap/INBOX: total 1160 -rw------- 1 xyz users 60656 May 30 14:22 dovecot.index -rw------- 1 xyz users 891904 May 30 14:22 dovecot.index.cache -rw------- 1 xyz users 78428 May 30 14:22 dovecot.index.log -rw------- 1 xyz users 131920 May 26 11:29 dovecot.index.log.2 Everything is on local disk, there are no NFS mounts at all. Any thoughts? Thanks John

3 3

[Dovecot] Inbox in two different locations
by arilinux 11 Jun '06

11 Jun '06

Hello I'm running dovecot v1.0.beta3 on a fedora 4 machine. I'm looking for the way to tell dovecot that some users have inbox (mailbox) in /var/mail/%u and some have inbox (maildir) in /home/%u/mail. Anyway?

2 1

[Dovecot] deliver LDA status?
by Lev Serebryakov 11 Jun '06

11 Jun '06

Hello dovecot, wiki mentions `deliver', but it doesn't include into 1.0.beta8 dovecot distribution. It can be downlaoded from CVS, and even contains two tags on files, that seems to eb release tags :) But what is official status of `deliver' tool? Is it stable, or experemental, or what? Are here any plans when it will be packaged ad announced? -- Best regards, Lev mailto:lev@serebryakov.spb.ru

2 1

[Dovecot] Can't run POP3 and IMAP simultaneously from xinetd...
by Timothy Meader 11 Jun '06

11 Jun '06

Hello all, I'm hoping you can help out with an issue I'm having running dovecot-beta8 on Solaris 9 (SPARC). The reason I need to run them from xinetd is that we require the filtering ability that tcp_wrappers provide. My issue is that, when running both from xinetd, IMAP runs fine, but then, when you try to POP in to check mail on the same box, it seems that the login section is handled via pop3-login... but all subsequent commands are handled via the imap interpreter. It's as if it's getting passed off to /usr/local/libexec/dovecot/imap instead of /usr/local/libexec/dovecot/pop3 as is specified in dovecot.conf. Here's an example from running a direct telnet session to the box in question: [operator@yyyy operator]# telnet yyyy 110 Trying xxx.xxx.xxx.xxx... Connected to yyyy. Escape character is '^]'. +OK Unauthorized access prohibited USER joeblow +OK PASS joeblowspass +OK Logged in. LIST LIST BAD Error in IMAP command : Unknown command. QUIT QUIT BAD Error in IMAP command : Unknown command. 1 logout If you do a ps -ef on the box and check the processes, at no time does a pop3 process start through this process. However, if you do the ps -ef right after the "LIST" command, you can see that there's an imap process started for user 'joeblow'. Now, if I take xinetd out of the equation and instead use the daemon mode /usr/local/sbin/dovecot... everything works perfectly. I've tried using the tcp_wrappers patch that's available in the unsupported directory on dovecot.org, but I cannot get the configure script to recognize the libwrap I have on the system when I compile dovecot with "--with-libwrap" as specified. I'm using tcp_wrappers for Solaris 9 off sunfreeware, so I know it's on there. I've also created sym links to libwrap.a and tcpd.h in /usr/lib and /usr/include respectively... still no dice. Honestly, I don't care which way dovecot runs (though daemon mode WOULD actually be preferred for performance reasons IF tcp_wrappers were available for use), but I just need it running both IMAP and POP3 somehow. Here are the applicable pop3 and imap sections of my dovecot.conf: -- default_mail_env = mbox:~/mail:INBOX=/var/mail/%1u/%1.1u/%u protocol pop3 { login_executable = /usr/local/libexec/dovecot/pop3-login mail_executable = /usr/local/libexec/dovecot/pop3 pop3_no_flag_updates = no pop3_enable_last = no pop3_uidl_format = %08Xu%08Xv pop3_logout_format = top=%t/%T, retr=%r/%R, del=%d/%m, size=%s pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol imap { login_executable = /usr/local/libexec/dovecot/imap-login mail_executable = /usr/local/libexec/dovecot/imap login_greeting_capability = yes } -- And the respective sections from xinetd.conf: -- service pop3 { socket_type = stream protocol = tcp wait = no user = root server = /usr/local/libexec/dovecot/pop3-login port = 110 flags = REUSE IPv4 rlimit_cpu = 150 instances = 80 cps = 110 10 disable = no } service imap { socket_type = stream protocol = tcp wait = no user = root server = /usr/local/libexec/dovecot/imap-login port = 143 flags = REUSE IPv4 rlimit_cpu = 120 disable = no } -- I hope someone can shed some light on this situation for me. Thank you in advance. --- Tim Meader CNE Internet Services NetCommerce Corporation Tim.Meader(a)gsfc.nasa.gov (301) 286-8013

2 1

[Dovecot] missing empty line in mbox folders with Outlook 2000 client
by Gary Funck 11 Jun '06

11 Jun '06

I recently looked into a problem that has been plaguing me since the switch to dovecot a couple of years back, documented here: http://mailman.rwth-aachen.de/pipermail/procmail/2006-May/024363.html The gist is that when I tell Outlook 2000 to write all outgoing mail into a Sent-mail folder on the IMAP server (using mbox format), I find that the mbox's don't have empty lines separating the messages, (though the Content-Length field is correct. This leads to interoperability problems with programs and scripts that expect each mbox message to be separated by an empty line. (We're running dovecot-1.0-0.beta2.7 under Fedora Core 5 on an x86_64 platform.) Has this mbox behavior been reported before? Is it considered a bug or a feature? Is there a configuration option, or Outlook tweak, that can be enabled to ensure that the mbox's produced by writing messages to them via Outlook, are well-formed (have an empty line separating messages)?

2 1

[Dovecot] Server settings for a busy server
by Pat Hastings 11 Jun '06

11 Jun '06

Hi, We are migrating from a windows server and i have very few stats as to what our current concurrent usage stats are other than about 50,000 active users and 90,000 email messages a day inbound 20,000 outbound. Anyone got some tips for tuning dovecot to handle this load? Below is my config - do the values of login_process_size etc sound correct? Also my logs seem to be written out as root which seems kind of scary do how do I / should I have these written out by the dovecot user. Any feedback greatfully accepted. Regards, Pat protocols = imap pop3 listen = * ssl_disable = no disable_plaintext_auth = no shutdown_clients = yes log_path = /var/log/dovecot/mainlog info_log_path = /var/log/dovecot/infolog log_timestamp = "%Y-%m-%d %H:%M:%S " login_dir = /var/run/dovecot/login login_chroot = yes login_user = dovecot login_process_size = 256 login_process_per_connection = no login_processes_count = 48 login_max_logging_users = 2048 login_greeting = Email server ready. login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c login_log_format = %$: %s first_valid_uid = 100 mail_extra_groups = mail valid_chroot_dirs = /var/vmail mail_debug = no default_mail_env = maildir:/var/vmail/dovecoterror/%domain/%u maildir_copy_with_hardlinks = yes protocol imap { } protocol pop3 { pop3_reuse_xuidl = no pop3_uidl_format =%u pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_client_workarounds = outlook-no-nuls, oe-ns-eoh } auth_executable = /usr/lib/dovecot/dovecot-auth auth_verbose = yes auth_debug = yes auth_debug_passwords = yes auth default { mechanisms = plain passdb pam { } passdb ldap { args = /etc/dovecot/dovecot-ldap.conf } userdb passwd { } userdb ldap { args = /etc/dovecot/dovecot-ldap.conf } user = root } --- [This E-mail has been scanned for viruses but it is your responsibility to maintain up to date anti virus software on the device that you are currently using to read this email. ]

2 1

[Dovecot] Dovecot 1.0beta8 dovecot-auth consumes 100% CPU time on Solaris 10 amd64
by Tore André Klock 11 Jun '06

11 Jun '06

Hello. I hope someone out there can help with this. It is getting pretty urgent. I am running a Solaris 10 server on Opteron (amd64) hardware and have compiled Dovecot 1.0beta8 from source. It has openssl compiled in (after much mucking around with various environment variables and modifying the Makefile), and was built with: $ ./configure --with-ldap --with-ssl-dir=/etc/ssl $ make # make install The variables: CC=/usr/sfw/bin/gcc CFLAGS='-m64 -I/usr/local/ssl/include:/usr/sfw/include:/opt/sfw/include' CPP=/usr/sfw/bin/cpp CPPFLAGS=-I/usr/local/ssl/include/openssl:/usr/sfw/include:/opt/sfw/include CXX=/usr/sfw/bin/g++ LDFLAGS='-m64 -L/usr/local/ssl/lib -R/usr/local/ssl/lib:/usr/sfw/lib:/opt/sfw/lib' LD_LIBRARY_PATH=/usr/local/ssl/lib:/usr/sfw/lib:/opt/sfw/lib It was compiled with gcc version 3.4.3 (csl-sol210-3_4-branch+sol_rpath). I modified the SSL_CFLAGS and SSL_LIBS variables in the Makefile to make it find my openssl install in /usr/local/ssl. The one that came with the OS was broken[1], so I compiled 0.9.8b from source. The configure script for some reason didn't pick this up, even when using CFLAGS, LDFLAGS, etc. At any rate, I successfully set it up to accept SSL/TLS connections and authenticate against an LDAP server. I use the auth_bind authentication method and only one LDAP host. I have confirmed that this works. In fact, dovecot runs just fine with the exception of the dovecot-auth proces, which is thrown into an endless loop. It starts off at maybe 1-2% CPU time, but after a few minutes it is back up to 100%. This is the output from truss(1) pointed at the dovecot-auth process: --cut-- pollsys(0xFFFFFD7FFFDFF6F0, 5, 0xFFFFFD7FFFDFF6D0, 0x00000000) = 0 pollsys(0xFFFFFD7FFFDFF6F0, 5, 0xFFFFFD7FFFDFF6D0, 0x00000000) = 0 pollsys(0x00467DC0, 10, 0xFFFFFD7FFFDFFB10, 0x00000000) = 1 [same sequence repeats ad nauseum] --cut-- This is a sample of top(1) output: --cut-- load averages: 1.00, 1.00, 1.00 08:51:38 60 processes: 55 sleeping, 3 running, 1 zombie, 1 on cpu CPU states: 0.0% idle, 68.3% user, 31.7% kernel, 0.0% iowait, 0.0% swap Memory: 1024M real, 680M free, 71M swap in use, 591M swap free PID USERNAME LWP PRI NICE SIZE RES STATE TIME CPU COMMAND 22875 nobody 1 0 0 0K 0K run 726:22 99.68% dovecot-auth --cut-- Here is a condensed version of my ldap-config: (comments removed, names changed to protect the innocent) --cut-- hosts = ldap.example.com auth_bind = yes auth_bind_userdn = uid=%u,ou=People,o=example.com,o=example.com ldap_version = 3 base = uid=%,ou=People,o=example.com,o=example.com --cut-- This is my condensed dovecot.conf: --cut-- base_dir = /var/run/dovecot/ protocols = imap pop3 listen = * ssl_disable = no ssl_cert_file = /etc/ssl/certs/host.cert ssl_key_file = /etc/ssl/private/host.key ssl_cipher_list = ALL:!LOW disable_plaintext_auth = no shutdown_clients = yes log_path = /var/log/dovecot log_timestamp = "%b %d %H:%M:%S " login_user = dovecot login_process_per_connection = yes verbose_proctitle = yes verbose_ssl = yes first_valid_uid = 100 last_valid_uid = 60000 mail_debug = yes default_mail_env = maildir:/var/mail/%u/Maildir mail_full_filesystem_access = no protocol imap { login_executable = /usr/local/libexec/dovecot/imap-login mail_executable = /usr/local/libexec/dovecot/imap login_greeting_capability = yes imap_client_workarounds = outlook-idle tb-extra-mailbox-sep } protocol pop3 { login_executable = /usr/local/libexec/dovecot/pop3-login mail_executable = /usr/local/libexec/dovecot/pop3 pop3_uidl_format = %08Xu%08Xv pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s mail_plugin_dir = /usr/local/lib/dovecot/pop3 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } auth_executable = /usr/local/libexec/dovecot/dovecot-auth auth_cache_size = 0 auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_verbose = yes auth_debug = no auth default { mechanisms = plain passdb ldap { args = /usr/local/etc/dovecot-ldap.conf } userdb passwd { } user = nobody } --cut-- I may have commented out more than necessary in an attempt to be explicit while I was trying to narrow this down. This is the output of ldd dovecot-auth: --cut-- libpam.so.1 => /lib/64/libpam.so.1 libldap.so.5 => /usr/lib/64/libldap.so.5 libsocket.so.1 => /lib/64/libsocket.so.1 libnsl.so.1 => /lib/64/libnsl.so.1 librt.so.1 => /lib/64/librt.so.1 libsendfile.so.1 => /lib/64/libsendfile.so.1 libc.so.1 => /lib/64/libc.so.1 libcmd.so.1 => /lib/64/libcmd.so.1 libsasl.so.1 => /usr/lib/64/libsasl.so.1 libmd5.so.1 => /lib/64/libmd5.so.1 libnspr4.so => /usr/lib/mps/64/libnspr4.so libplc4.so => /usr/lib/mps/64/libplc4.so libnss3.so => /usr/lib/mps/64/libnss3.so libssl3.so => /usr/lib/mps/64/libssl3.so libmp.so.2 => /lib/64/libmp.so.2 libscf.so.1 => /lib/64/libscf.so.1 libaio.so.1 => /lib/64/libaio.so.1 libpthread.so.1 => /lib/64/libpthread.so.1 libthread.so.1 => /lib/64/libthread.so.1 libdl.so.1 => /lib/64/libdl.so.1 libsoftokn3.so => /usr/lib/mps/amd64/libsoftokn3.so libplds4.so => /usr/lib/mps/amd64/libplds4.so libdoor.so.1 => /lib/64/libdoor.so.1 libuutil.so.1 => /lib/64/libuutil.so.1 libm.so.2 => /lib/64/libm.so.2 --cut-- Notes: - The problem *seems* to occur only when I use LDAP authentication. - Disabling SSL in the config has no effect on the CPU usage. - I am not using NFS for anything. - I use Thunderbird 1.5.0.2 and another client runs Outlook. - There is no indication of any problem in the dovecot or system logs. - I suspected this had to do with the poll method dovecot is compiled with (poll), but it happens even when I compiled it with the select method. As far as I know, none of the other methods are available on Solaris. - I noted that the poll(2) call in Solaris will return immediately given a timeout of zero (-1 is 'forever'). I tried tacking down the use of that system call, but I had to give up on that. I only mention it in case it is a dovecot bug and of any help to Timo. Any help is greatly appreciated. Thank you. - Tore [1] If you use the factory-installed version, you get messages like "Warning: imap-login: SSL_accept() failed: error:1409D08A:SSL routines:SSL3_SETUP_KEY_BLOCK:cipher or hash unavailable" in your dovecot log.

2 7

[Dovecot] Can't read dovecot.conf
by E P 11 Jun '06

11 Jun '06

Hello all, I'm attempting to run dovecot on an HP-UX 11.11 system ... the built went fine, and I've got the program installed. I copied dovecot-example.conf to dovecot.conf and made a few changes to it, then went to sbin and ran the dovecot binary to see what would happen. What happened was this: colin:/usr/local/dovecot/sbin# ./dovecot Error: Error in configuration file /usr/local/dovecot/etc/dovecot.conf line 1: Unknown setting: _cert_file ... which is odd; line 1 of dovecot.conf was actually this: ## Dovecot configuration file ... and the first line that wasn't commented out was this: protocols = imaps So just for fun I changed the first non-commented line to this: protocols=imaps ... and then ran the dovecot binary again. This time the error was subtly different: colin:/usr/local/dovecot/sbin# ./dovecot Error: Error in configuration file /usr/local/dovecot/etc/dovecot.conf line 1: Unknown setting: ert_file ... "aha" says I, "it's having some issue with comments." So I took out every line in dovecot.conf that wasn't a comment, leaving me with just 23 lines: protocols=imaps listen=<IP address> ssl_cert_file=/opt/openssl/certs/imapd.pem ssl_key_file=/opt/openssl/certs/imapd.pem disable_plaintext_auth=yes protocol imap { login_executable=/usr/local/dovecot/libexec/dovecot/imap-login mail_executable=/usr/local/dovecot/libexec/dovecot/imap mail_plugin_dir=/usr/local/dovecot/lib/dovecot } protocol pop3 { } auth_executable=/usr/local/dovecot/libexec/dovecot/dovecot-auth auth default { mechanisms=plain passdb pam { } userdb passwd { } user=root } plugin { } This time, when I ran the binary, I got a new error: colin:/usr/local/dovecot/sbin# ./dovecot Error: Can't use SSL certificate /opt/openssl/certs/dovecot.pem: No such file or directory ... this is odd, because the config file clearly states that it should look for the certificate elsewhere. But just for fun, I made dovecot.pem symlinks in /opt/openssl/certs and /opt/openssl/private. Then I try running again: colin:/usr/local/dovecot/sbin# ./dovecot Error: Missing auth section for server default At this point, it's becoming clear to me that my current tactic isn't doing much, so I read some READMEs, checked the wiki, googled around a bit, and now I'm here. Anyone have hints on this? Thanks -- Elliott

2 1

[Dovecot] Dovecot wont start.
by Cesar Diaz 11 Jun '06

11 Jun '06

I installed Dovecot along with Postfix on a FreeBSD server using the port. When I try to start dovecot I get the following error: Fatal: Can't resolve address : hostname nor servname provided, or not known I have the hostname define on the server and can ping it by FQDN and by just hostname with out problems. Any suggestions are greatly appreciated.

2 1

[Dovecot] postmaster alias
by Tracy R Reed 11 Jun '06

11 Jun '06

I have dovecot configured to use an LDAP database for mail delivery with dovecot-lda. All of of my user accounts and aliases work fine except for postmaster@ which consistantly bounces. I have compared the entry for postmaster with another working alias and see no difference. When I send mail to postmaster I get the following in the logs: Jun 11 02:11:13 server1 postfix/pipe[12083]: 6D6CF33444: to=<postmaster(a)mydomain.com>, orig_to=<postmaster>, relay=dovecot, delay=3, status=bounced (user unknown)Jun 11 02:11:13 server1 deliver(treed(a)mydomain.com): saved mail to INBOX Jun 11 02:11:13 server1 postfix/pipe[12193]: 6D6CF33444: to=<treed(a)mydomain.com>, orig_to=<postmaster>, relay=dovecot, delay=3, status=sent (mydomain.com) Jun 11 02:11:13 server1 postfix/cleanup[12055]: 49F1F33431: message-id=<20060611091113.49F1F33431(a)mail.mydomain.com> Jun 11 02:11:13 server1 postfix/qmgr[29342]: 49F1F33431: from=<>, size=2138, nrcpt=2 (queue active) Jun 11 02:11:13 server1 postfix/qmgr[29342]: 6D6CF33444: removed Jun 11 02:11:13 server1 postfix/smtpd[12089]: 6464D33415: client=d150-39-102.home.cgocable.net[24.150.39.102] Jun 11 02:11:13 server1 postfix/pipe[12193]: 49F1F33431: to=<treed(a)mydomain.com>, orig_to=<root(a)mydomain.com>, relay=dovecot, delay=0, status=sent (mydomain.com) Jun 11 02:11:13 server1 postfix/pipe[12083]: 49F1F33431: to=<myboss(a)mydomain.com>, orig_to=<root(a)mydomain.com>, relay=dovecot, delay=0, status=sent (mydomain.com) Then I get a bounce email back saying: <postmaster(a)drjays.com> (expanded from <postmaster>): user unknown The strange thing is that first I get the bounce and then the mail goes on to be delivered to the two users (me and my boss) specified in the alias as it should be. How is this possible that the user is unknown and then it goes on to deliver to the alias? I am running 1.0.beta8 pulled from CVS May 23 16:46 (PDT) with openldap-2.2.13-4 on CentOS 4.3 Thanks for any clues you can provide! -- Tracy R Reed http://ultraviolet.org

2 1

[Dovecot] mkcert.sh broken
by Erick Calder 10 Jun '06

10 Jun '06

I've just installed dovecot on my FC5 box. I tweaked the dovecot-openssl.cnf and attempted to recreate the cert but get the errors below. I see older postings about this problem on FC2. help? - e # ./mkcert.sh /etc/ssl/certs directory doesn't exist /etc/ssl/private directory doesn't exist error on line -1 of dovecot-openssl.cnf 2810:error:02001002:system library:fopen:No such file or directory:bss_file.c:122:fopen('dovecot-openssl.cnf','rb') 2810:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:125: 2810:error:0E078072:configuration file routines:DEF_LOAD:no such file:conf_def.c:197:

4 6

[Dovecot] IMAP FILE MOVE ERROR
by agreig＠protectionprojects.co.za 10 Jun '06

10 Jun '06

I recently installed dovecot.x86_64 1.0-0.beta8.1.fc5 on a new server. Our network users use Pegasus as their mail readers, accessing their home folder on the server via Samba. Each user has a pop3 set of folders, and we have a shared imap set of folders. This has worked very well for previous versions of dovecot. When moving files between folders on the imap set, we get an error message from Pegasus, as follows: "The IMAP server that manages this mailbox or folder has reported an error during the operation you have attempted to perform." The operation cannot be completed." Operation of the imap INBOX only restores once it is "refreshed" via Pegasus. The maillog shows the following message for this error: "dovecot: IMAP(tekstaff): file mail-cache-transaction.c: line 709 (mail_cache_add): assertion failed: (fixed_size == (unsigned int)-1 || fixed_size == data_size)" A search using find / -name mail-cache-transaction.c does not find such file. I am stumped. Any help to fix this will be much appreciated.

1 0

[Dovecot] imap default folder dont appear..,
by John Von Essen 10 Jun '06

10 Jun '06

Hi, New to list. I am having some issues with dovecot and Outlook. Mail server is sendmail with procmail LDA for supporting /home/username/Maildir. I am talking to IMAP with both Outlook and SquirrelMail. SquirrelMail shows the default IMAP folders under INBOX, namely Sent, Drafts, and Trash for all users. However Outlook does not. Actually, to be more specific, some clients Outlook show the default folders but some do not. On the ones that do not, I am not sure what to do? Those accounts receive mail into the Inbox, but there is no Sent mail folder for outbound email, etc.,. Can someone point me in the right direction. I have six Outlook clients for six users, 2 show the default folders, the others do not. On the users Outlook that do not see the defaults folders, like Sent mail... If I go into SquirrelMail and send an email, I see it in SquirrelMails Sent, but not Outlook?! Thanks in advance for any help.... John

1 0

[Dovecot] Dovecot, IMAP, and mutt
by Travis Poppe 09 Jun '06

09 Jun '06

Hello, I'm running FreeBSD 6.0 release on x86 hardware and am using mutt version 1.5.11. Not running dovecot on/over NFS or anything, just the standard UFS2 filesystem. I'm also using SSL for IMAP. Since dovecot 1.0.b8, I've had to instruct mutt to do things twice (such as deleting) before the changes will actually occur. I've confirmed that this does not happen with dovecot 1.0.b7, which is what I'm using now to work around the problem. To repeat, use mutt 1.5.11 in IMAP/SSL mode with dovecot 1.0.b8 and try to mark some mail for deletion. Then, press the '$' key to enact the changes. You'll see that the piece(s) of mail will still be there after doing so. Pressing the '$' key again will cause the mail to be removed. Any ideas as to what's going on? Thanks, -- Travis Poppe IRC: tlp @ irc.freenode.net

3 2

[Dovecot] Problem with dovecot-lda
by Jef Driesen 09 Jun '06

09 Jun '06

I have installed the dovecot 1.0 beta3 (package included with Ubuntu Dapper Drake) and everything is working very well. Next I wanted to try the dovecot lda (for sieve filtering). In postfix I have "mailbox_command = /usr/lib/dovecot/deliver" and I followed the instructions from http://wiki.dovecot.org/LDA. I only changed "postmaster_address = postmaster(a)localdomain.local" and "user = dovecot" from the example configuration. With this configuration, no mail is delivered (discarded?) and in the logfile there is this error: Jun 5 18:10:08 localhost postfix/local[9630]: BFA6D5A403: to=<jef(a)localdomain.local>, relay=local, delay=0, status=bounced (local configuration error. Command output: Fatal: open(/etc/dovecot/dovecot.conf) failed: Permission denied ) Changing permissions on /etc/dovecot/dovecot.conf to 644 fixes the problem, but I think this is not the best solution. Any ideas?

2 2

[Dovecot] Problem Compiling Dovecot-LDA
by Timothy White 09 Jun '06

09 Jun '06

I'm trying to setup Dovecot-LDA. I grab dovecot beta8 and compiled it with the following options. $ ./configure --without-deliver --with-mysql $ make # make install It builds fine, and I have it running fine now. I then tried to build dovecot-lda from cvs, with the following. $ ./configure --with-dovecot=../dovecot-1.0.beta8/ $ make and it then fails with the following gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -o sievec sievec.o libsieve.a /home/tim/src/dovecot-1.0.beta8/src/lib/liblib.a libsieve.a(script.o)(.text+0xa23): In function `sieve_script_load': /home/tim/src/dovecot-lda/src/libsieve/script.c:435: undefined reference to `map_refresh' libsieve.a(script.o)(.text+0xaf0): In function `sieve_script_unload': /home/tim/src/dovecot-lda/src/libsieve/script.c:462: undefined reference to `map_free' libsieve.a(sieve.o)(.text+0x1e6e): In function `verify_flag': /home/tim/src/dovecot-lda/src/libsieve/sieve.y:951: undefined reference to `imparse_isatom' collect2: ld returned 1 exit status make[2]: *** [sievec] Error 1 make[2]: Leaving directory `/home/tim/src/dovecot-lda/src/libsieve' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/home/tim/src/dovecot-lda/src' make: *** [all-recursive] Error 1 Any ideas as to what is wrong? Grepping the src files for map_refresh, map_free, and imparse_isatom only show references in dovecot-lda, in src/imparse.c and src/map.c. It seems to be a problem with src/libsieve when trying to build the sieve stuff. But I'm not sure. Thanks Tim -- Linux Counter user #273956

3 3

[Dovecot] Dovecot Authentication through LDAP Server
by ashok cvs 09 Jun '06

09 Jun '06

I have a Samba PDC with LDAP (samba version 3.0.21c with Openldap 2.3.19). where i have all the users. I have configured sendmail on another system with dovecot as IMAP and POP3 server. I wanted to enable user authentication from LDAP server which is on samba PDC. So configured /etc/dovecot.conf ################################################################ protocols = pop3 imap imap_listen = [::] pop3_listen = [::] login_dir = /var/run/dovecot-login login = imap login_user = testuser login = pop3 verbose_proctitle = yes maildir_copy_with_hardlinks = yes mbox_locks = fcntl auth = default auth_mechanisms = plain digest-md5 auth_userdb = ldap /etc/dovecot-ldap.conf auth_passdb = ldap /etc/dovecot-ldap.conf auth_user = dovecot auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ ################################################################ configured /etc/dovecot-ldap.conf ####################################################################### # NOTE: We don't support "authentication binds", so you'll have to give # dovecot-auth read access to userPassword field in LDAP server. With OpenLDAP # this is done by modifying /etc/ldap/slapd.conf. There should already be # something like this: # # access to attribute=userPassword # by dn="<dovecot's dn>" read # add this # by anonymous auth # by self write # by * none # Space separated list of LDAP hosts to use. host:port is allowed too. hosts = 192.168.129.18 # Distinguished Name - the username used to login to the LDAP server dn = uid=root,ou=People,dc=msdpl,dc=com # Password for LDAP server dnpass = mobil5@b1d # LDAP protocol version to use. Likely 2 or 3. ldap_version = 3 # LDAP base base = dc=msdpl,dc=com # Dereference: never, searching, finding, always deref = never # Search scope: base, onelevel, subtree scope = subtree # User attributes in order: # Virtual user name (user@domain) # Home directory # MAIL environment # System user name (for initgroups()) # System UID # System GID #user_attrs = uid,homeDirectory,,uid,uidNumber,gidNumber user_attrs = uid,homeDirectory,,uid,, # Filter for user lookup. Some variables can be used: # %u - username # %n - user part in user@domain, same as %u if there's no domain # %d - domain part in user@domain, empty if user there's no domain user_filter = (&(objectClass=posixAccount)(uid=%u)) #ser_filter = (&(objectClass=sambaSamAccount)(uid=%u)) # Password checking attributes in order: # Virtual user name (user@domain) # Password, may optionally start with {type}, eg. {crypt} pass_attrs = uid,userPassword # Filter for password lookups #pass_filter = (&(objectClass=posixAccount)(uid=%u)) # Default password scheme. "{scheme}" before password overrides this. # Currently supported schemes include PLAIN, PLAIN-MD5, DIGEST-MD5, CRYPT #default_pass_scheme = CRYPT # You can use same UID and GID for all user accounts if you really want to. # If the UID/GID is still found from LDAP reply, it overrides these values. #user_global_uid = 100 #user_global_gid = 100 ####################################################################### The following is the error when we check using [root]#telnet mymailserverip 110 Trying 192.168.129.248 Connected to testmail.mydomain.com (192.168.129.248) Escape character is '^]`. user dcadmin pass mypass ERR-Authentication Failure The following is the log output of /var/log/maillog ######################################################################### Jun 8 13:09:16 testmail dovecot-auth: ldap(dcadmin): No password in reply Jun 8 13:10:16 testmail pop3-login: Disconnected: Inactivity [::ffff: 127.0.0.1] Jun 8 13:10:26 testmail dovecot-auth: ldap(root): No password in reply Jun 8 13:11:26 testmail pop3-login: Disconnected: Inactivity [::ffff: 127.0.0.1] Jun 8 13:11:38 testmail dovecot-auth: LDAP: ldap_result() failed: Can't contact LDAP server Jun 8 13:13:46 testmail dovecot-auth: ldap(root): No password in reply Jun 8 13:13:46 testmail imap-login: Disconnected [::ffff:127.0.0.1] Jun 8 13:14:03 testmail dovecot-auth: ldap(dcadmin): No password in reply Jun 8 13:14:03 testmail imap-login: Disconnected [::ffff:127.0.0.1] ############################################################################ Regards Niranjan

2 1

[Dovecot] Login issue
by "M. Tolga Özses" 09 Jun '06

09 Jun '06

Hi, cat /var/log/dovecot.log|grep -i jun\ 09 dovecot: Jun 09 09:35:26 Info: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=192.168.1.2 rip=212.98.201.1 resp=<hidden> dovecot: Jun 09 09:35:26 Info: auth(default): client out: CONT 1 dovecot: Jun 09 09:35:26 Info: auth(default): client in: CONT<hidden> dovecot: Jun 09 09:35:26 Info: auth(default): client out: OK 1 user=kabuto dovecot: Jun 09 09:35:26 Info: auth(default): master in: REQUEST 13 12652 1 dovecot: Jun 09 09:35:26 Info: auth(default): master out: USER 13 kabuto system_user=kabuto uid=1000 gid=100 home=/home/kabuto dovecot: Jun 09 09:35:26 Info: pop3-login: Login: user=<kabuto>, method=PLAIN, rip=212.98.201.1, lip=192.168.1.2 dovecot: Jun 09 09:35:26 Info: POP3(kabuto): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Does this look right? I'm still not getting any e-mails from outside world. My latest .conf file is at http://www.kunduz.org/dovecot.conf. The last change I made was to out uncomment pop3_uidl_format as I was suggested yesterday. Regards,

2 2

[Dovecot] Error building on OpenBSD 3.9
by B.O.F.H. 08 Jun '06

08 Jun '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 This is for all versions from 1.0b3 - 1.0b8 All crash at the same place: Making all in auth gmake[3]: Entering directory `/src/mail/dovecot-1.0.beta8/src/auth' if gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../../src/lib - -I../../src/lib-sql -I../../src/lib-settings -I../../src/lib-ntlm - -DAUTH_MODULE_DIR=\""/usr/local/lib/dovecot/auth"\" - -DPKG_LIBEXECDIR=\""/usr/local/libexec/dovecot"\" -I@includedir@ @INCLUDE_des@ -I/usr/local/include -I/usr/include/kerberosV - -std=gnu99 -O2 -march=athlon -pipe -Wall -W -Wmissing-prototypes - -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 - -Wbad-function-cast -MT mycrypt.o -MD -MP -MF ".deps/mycrypt.Tpo" - -c -o mycrypt.o mycrypt.c; \ then mv -f ".deps/mycrypt.Tpo" ".deps/mycrypt.Po"; else rm -f ".deps/mycrypt.Tpo"; exit 1; fi gcc: cannot specify -o with -c or -S and multiple compilations gmake[3]: *** [mycrypt.o] Error 1 gmake[3]: Leaving directory `/src/mail/dovecot-1.0.beta8/src/auth' gmake[2]: *** [all-recursive] Error 1 gmake[2]: Leaving directory `/src/mail/dovecot-1.0.beta8/src' gmake[1]: *** [all-recursive] Error 1 gmake[1]: Leaving directory `/src/mail/dovecot-1.0.beta8' gmake: *** [all] Error 2 Gnu-make versus BSD make doesn't differ. Compile options were: ./configure \ - --sysconfdir=/etc/dovecot \ - --localstatedir=/var \ - --infodir=/usr/share/info \ - --mandir=/usr/share/man \ - --disable-rpath \ - --enable-ipv6 \ - --enable-asserts \ - --without-shadow \ - --without-pam \ - --without-vpopmail \ - --with-pgsql \ - --with-mysql \ - --with-ssl=openssl \ - --with-ssldir=/etc/ssl \ - --with-storages='maildir mbox' \ - --with-sql-drivers \ CFLAGS='-O2 -march=athlon -pipe' \ LDFLAGS='-L/usr/local/lib' \ CPPFLAGS='-I/usr/local/include -I/usr/include/kerberosV' What other data can I provide to help figure out what's going wrong? - -- Ed V. IBM: Into Building Money 7 June 2006 17:52:03 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (MingW32) iQIVAwUBRIdnZKfRmhqF/IZAAQrVUg//U0L4agoc5WGQ8gvj0XiEclzj+izer635 NYppYOc4AicVKq1Hp3HbcwaYcWYBY0nubkcUemSk+t8V/2qcZY2Y3rvaQo6B2aj8 rQF8Wj8BdqIzVMsX4IeVJO7XQlI7xUA/vaEOeL69dx43M/+7VE673YuaBpHYLvez UwXx/4pWujg0HbSuuX1SqFg5VntAE2XppxfukHmbK4FYfNbmWWGYKuAwAMqdr35t r+2cN8GOrk9nRBgisl2ADJW8YbDYvrj1DVcrNeo2cIeK68kqXU8knhCNxs9fXr75 pNRP811rdDLXQur66JHSlGdcJWOSNuoKUDUWLoJ5vpuQP/QlCpF2IfJ5kiK7rraJ 56q4Jbw63IHqYOiEC+yb2pGcgoh7tOOBSGTtlmzorym+0lOBS2SSKz7xd0+zfeU2 yHlRs5af13nCWG5ZV9e+gdyLuvZkd+8H9RTQyv2pbBgn9GHjq62HreDP/Drj6/DA HfHMXOtDF0tkfWbedIDD6SCeH4ptPf6FOqRd0BVdzuMk0Hi4uFeiChmkdXJYo9Vn c3176FN31fHmc7ZJm1P7MjAPdzAI/QP+vGiucMJg9bNTZVVOs5t/4aKMdG183zRT 5UZR4x+7ZA1JKZ4NgfVuaTM3khsgo9lQgw+A8QwrOOwKFGaek9By0AKxbJ06wIcg BFOZZSoKgWc= =U0oQ -----END PGP SIGNATURE-----

3 6

[Dovecot] a bug in the LDAP code
by Udo Rader 08 Jun '06

08 Jun '06

Hi, I was heaving some grave problems with dovecot's ldap client that left me with the following settings for virtual users: -------CUT------- mbox: data=/virtual/oeush.at/home/f.someone/mail/:INBOX=/var/mail/f.someone.oeush.at -------CUT------- data in that case was correct, yet the INBOX location was wrong, this should have been /virtual/oeush.at/var/mail/f.someone.oeush.at instead. My settings for the retrieval of the mail environment in /etc/dovecot/dovecot-ldap.conf were like this: -------CUT------- user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid,MailMessageStore=mail -------CUT------- now at first glance this seems correct, but the problem was the upper cased "MailMessageStore" attribute name. changing it to "mailMessageStore" gave me the correct settings: -------CUT------- mbox: data=/virtual/oeush.at/home/f.someone/mail/:INBOX=/virtual/oeush.at/var/mail/f.someone.oeush.at -------CUT------- I don't have any of the LDAP RFCs ready, but I think that per default the case of the attribute _names_ should not matter when querying an ldap server. Udo Rader -- B e s t S o l u t i o n . a t EDV Systemhaus GmbH ------------------------------------------------------------------------ udo rader technischer leiter/CTO mobile ++43 660 5263642 ------------------------------------------------------------------------ eduard-bodem-gasse 8/3 A-6020 innsbruck fax ++43 512 935833 http://www.bestsolution.at phone ++43 512 935834

2 1

[Dovecot] Login issue
by "M. Tolga Özses" 08 Jun '06

08 Jun '06

Hi, I have a login issue. I do everything I can think of, but can't login. My .conf file is at http://kabuto.kunduz.org/dovecot.conf and I make slight changes everytime I try a new thing. I last set disable_plaintext_auth to yes and when I try to login using Thunderbird, I get *Code:* Sending of username did not succeed. Mail server mail.somedomain.org responded: Plaintext authentication disabled. , and dovecot.log reads *Code:* Info: pop3-login: Login failed: Plaintext authentication disabled: method=PLAIN, rip=212.98.201.1, lip=192.168.1.2. When I set disable_plaintext_auth to no and try again, I get *Code:* Sending of password did not succeed. Mail server mail.somedomain.org responded: Authentication failed and dovecot.log reads *Code:* dovecot: Jun 07 16:05:45 Info: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=192.168.1.2 rip=212.98.201.1 resp=<hidden> dovecot: Jun 07 16:05:45 Info: auth(default): client out: CONT 1 dovecot: Jun 07 16:05:45 Info: auth(default): client in: CONT<hidden> dovecot: Jun 07 16:05:45 Info: auth(default): pam(kabuto,212.98.201.1): pam_authenticate() failed: Authentication failure dovecot: Jun 07 16:05:46 Info: auth(default): client out: FAIL 1 user=kabuto dovecot: Jun 07 16:05:47 Info: auth(default): client in: AUTH 2 PLAIN service=POP3 lip=192.168.1.2 rip=212.98.201.1 resp=<hidden> dovecot: Jun 07 16:05:47 Info: auth(default): pam(kabuto,212.98.201.1): pam_authenticate() failed: Authentication failure dovecot: Jun 07 16:05:48 Info: auth(default): client out: FAIL 2 user=kabuto dovecot: Jun 07 16:05:51 Info: pop3-login: Disconnected: user=<kabuto>, method=PLAIN, rip=212.98.201.1, lip=192.168.1.2 Can you help me with this? Sorry that it is long, but it was the only way to describe completely. Best regards,

3 3

RE: [Dovecot] Using MySQL to store email?
by Joshua Goodall 08 Jun '06

08 Jun '06

Marc Perkel scribbled: > Repeat after me - think outside the box. Did you miss the part where I said we've already tried this? Not only have we thought outside the box, but we've smashed it up and built several alternatives to see which one sucked the least. Turns out, SQL backends suck the most. Please try to keep up :) Marc Perkel also scribbled: > To do this with MySQL would be trivial. To do it without a database > isn't possible. Actually you could do that with a tiny Sieve extension. I don't think you really understand what you are even proposing. Your statement would be better phrased "to do it without an index would be slow". If you wanted to create a database server for mail, with a mail-specific query language, then that database might be called "Dovecot", and the query language might be called "IMAP". Innovation is not an excuse for lousy engineering. As usual, it turns out to be bad design practice to say "let's deploy shinytoy for feature X!" rather than say "we need capability X! What's a creative way to achieve that?". Which is why necessity is the mother of invention. /JG

1 0

RE: [Dovecot] Using MySQL to store email?
by Joshua Goodall 07 Jun '06

07 Jun '06

Marc Perkel: > Suppose I want to move all message from a specific host to another folder. > UPDATE table SET folder=new-folder WHERE host=value; > > With databases you can do things you would have to write complex programs > to do with files. Things that you would consider to be impossible are > trivial with databases. > > This outside the box. People who optimise their systems for shiny cute features rather than the common case get all the hacks they deserve. Repeat after me: design for the common case. Also your proposed sql above and implications (arbitrary operations based on mail metadata i.e. headers) seems to involve indexing every mail header on delivery. Good luck with that one large scale mail storage. Did you want a mail database, or an OLAP system? >-) /jg

3 2

RE: [Dovecot] Using MySQL to store email?
by Joshua Goodall 07 Jun '06

07 Jun '06

Marc Perkel trolled: > So Timo, > > Have you considered the idea of storing all the email in a MySQL > database? Seems to me that MySQL could somplify all the backend stuff > that everyone struggles with and with replication one could create very > massive and reliable systems. What would it take to use MySQL that way? Maybe we could recode Dovecot in PHP, too. Sorry, that was nasty. However, having recently experimented with a very large mail storage system using mysql, I strongly advise against this avenue. In particular, the two main backends have serious deficiencies when you get up to the multi-gigabyte ranges: * MyISAM doesn't restart in constant time. * InnoDB's next-key locking kills performance on large blob inserts & deletes. Anyway, what do you mean, everyone struggles with backends? Dovecot's backends are fast, modular and reliable. Regarding replication; all good logical volume managers can do this. Regarding massive; all good filesystems can do this. Regarding reliable; I guarantee that mysql reliability (when properly managed) is still lower than that of a filesystem (when properly managed). In fact, the whole argument is specious. Filesystems already are databases, optimised for storing arbitrary-sized data objects using a hierarchical key, which is practically the definition of mail storage. /jg

2 1

[Dovecot] Dspam Plugin
by Timothy White 07 Jun '06

07 Jun '06

Johannes, do you have any plans (regarding your dspam plugin) to: a) Integrate it into libdspam rather than calling the dspam binary? b) Any ideas for scaling it better, and implementing it scaled better? I notice a slight discussion about scaling, and you have chosen not to pursue it. Is that because it's too hard, or just because you don't need to? Thanks Tim p.s. If I knew how to use the libdspam stuff, I'd make the changes myself... I might have to learn ;-) -- Linux Counter user #273956

2 1

[Dovecot] Dovecot configure script for 1.0b8 not including SQL drivers?
by Will Buik 06 Jun '06

06 Jun '06

On 6/5/06, grant beattie <grant(a)grunta.com> wrote: > On Mon, Jun 05, 2006 at 05:57:36PM -0400, Will Buik wrote: > > > I am having a problem with the configure script for Dovecot 1.0b8. It > > doesn't seem to be compiling in sql engine driver support. I have > > specified --with-sql and --with-pgsql but when the script is done it > > says "Building with SQL drivers ..............:" but lists no drivers > > afterwards. I tried compiling it anyway but it logs the error " > > auth(default): Unknown database driver 'pgsql' " so the it defiantly > > didn't get compiled in. My pgsql includes and libs are in a non > > standard location but I specified that in the CPPFLAGS and LDFLAGS > > before the ./configure invocation. What have I done wrong here, or is > > there a bug in the script? > > > > The whole invocation is: > > CPPFLAGS='-I/usr/local/openssl-0.9.8b/include > > -I/usr/local/pgsql-8.1.4/include' > > LDFLAGS='-L/usr/local/openssl-0.9.8b/lib -L/usr/local/pgsql-8.1.4/lib' > > ./configure --prefix=/usr/local/dovecot-1.0b8 > > --sysconfdir=/etc/dovecot --localstatedir=/var --with-ioloop=eooll > > --with-notify=dnotify --without-pop3d --with-storages=maildir > > --with-sql --with-pgsql --with-gnu-ld > > what does config.log say? and does it report any problems with > finding openssl? > > the problem may be that the shared libraries can't be found at > runtime, in which case you will need to set the rpath in the binaries > that are built. you didn't mention which platform/compiler you're > using, but this is done using the -Wl,-R<directory> argument for gcc > and Sun Studio compiler/Solaris ld, at least (-Wl passes the next > argument to the linker, -R tells the linker to include this path in the > binary's rpath). > > grant. I looked at the config.log file and it doesn't look like it's having any problems with openssl, but when I looked for pgsql I got what looked like some errors. configure:29296: checking for PQconnectdb in -lpq | char PQconnectdb (); | PQconnectdb (); ac_cv_lib_pq_PQconnectdb=no /usr/local/pgsql-8.1.4/lib/libpq.so: undefined reference to `dlerror' /usr/local/pgsql-8.1.4/lib/libpq.so: undefined reference to `dlclose' /usr/local/pgsql-8.1.4/lib/libpq.so: undefined reference to `dlopen' /usr/local/pgsql-8.1.4/lib/libpq.so: undefined reference to `dlsym'

2 1

Re: [Dovecot] Using MySQL to store email?
by nodata 06 Jun '06

06 Jun '06

> On 06-06-2006 15:48:20 +0200, nodata wrote: >> Putting everything in a database would provide one benefit: >> * Less storage space needed due to duplicated e-mail > > ... assuming that the mails are completely identical (i.e. have no slightly different headers) and that the database backend does expensive duplicate elimination on its string heaps. Yes, like Exchange does (unless you did something "clever" with the headers). > So the real benefit you get I think is: > * full text searching capabilities based on the IR-like indices > provided/maintained by the database backend, such as for instance: http://dev.mysql.com/doc/refman/5.0/en/fulltext-query-expansion.html If the original poster if struggling with a filesystem version of dovecot, and wants to create "massive and reliable systems" using MySQL, then he's going to have trouble. Adding MySQL won't do that.

1 0

[Dovecot] vpopmail
by C J Kenneth Tan -- OptimaNumerics 06 Jun '06

06 Jun '06

I was running 1.0.beta3 code with no problems. I recently switched to 1.0.beta8 and I noticed that vpopmail's pop-before-smtp functionality stopped working. I am using vpopmail authentication. Has anyone else encountered this problem? Thank you. Kenneth Tan ----------------------------------------------------------------------- C J Kenneth Tan, PhD OptimaNumerics Ltd Telephone: +44 798 941 7838 E-mail: cjtan(a)OptimaNumerics.com Telephone: +44 207 099 4428 Web: http://www.OptimaNumerics.com Facsimile: +44 207 100 4572 -----------------------------------------------------------------------

8 24

[Dovecot] Procmail and dovecot interactions
by Jeff Turner 06 Jun '06

06 Jun '06

Hi, I'm using procmail to deliver to Maildir directories: DEFAULT=${HOME}/Maildir/ I notice dovecot keeps a 'dovecot-uidlist' plus cache and index files, in each maildir. How is it that dovecot keeps these up to date when the contents of cur/ keeps changing? Is dovecot scanning cur/ every so often checking for changes? Isn't this slow for large folders (100k+)? I note on the Dovecot LDA page[1], that it keeps the "Dovecot index base up to date". Does this mean Dovecot isn't expected to work properly with a delivery agent which doesn't know about its indexes? Cheers, Jeff [1] http://wiki.dovecot.org/LDA

2 2

[Dovecot] Dovecot configure script for 1.0b8 not including SQL drivers?
by Will Buik 06 Jun '06

06 Jun '06

I am having a problem with the configure script for Dovecot 1.0b8. It doesn't seem to be compiling in sql engine driver support. I have specified --with-sql and --with-pgsql but when the script is done it says "Building with SQL drivers ..............:" but lists no drivers afterwards. I tried compiling it anyway but it logs the error " auth(default): Unknown database driver 'pgsql' " so the it defiantly didn't get compiled in. My pgsql includes and libs are in a non standard location but I specified that in the CPPFLAGS and LDFLAGS before the ./configure invocation. What have I done wrong here, or is there a bug in the script? The whole invocation is: CPPFLAGS='-I/usr/local/openssl-0.9.8b/include -I/usr/local/pgsql-8.1.4/include' LDFLAGS='-L/usr/local/openssl-0.9.8b/lib -L/usr/local/pgsql-8.1.4/lib' ./configure --prefix=/usr/local/dovecot-1.0b8 --sysconfdir=/etc/dovecot --localstatedir=/var --with-ioloop=eooll --with-notify=dnotify --without-pop3d --with-storages=maildir --with-sql --with-pgsql --with-gnu-ld Thanks in advance.

2 1

[Dovecot] Maildir, procmail, and locks
by Mark Nienberg 05 Jun '06

05 Jun '06

I'm using procmail as the local delivery agent for Maildir style mailboxes. I discovered that I was able to send mail to other users but was unable to send mail to myself. Examples from verbose procmail log: **** Successful message to another user **** procmail: [24589] Fri Jun 2 15:03:34 2006 procmail: Assigning "PATH=/home/david/bin:/bin:/usr/bin:/sbin:/usr/sbin:/usr/local/bin:/usr/X11R6/bin" procmail: Assigning "LASTFOLDER=/home/david/Maildir/new/msg.4AAdC" procmail: Opening "/home/david/Maildir/new/msg.4AAdC" procmail: Acquiring kernel-lock procmail: Notified comsat: "david@0:/home/david/Maildir/new/msg.4AAdC" From mark.nienberg(a)tippingmar.com Fri Jun 2 15:03:34 2006 Subject: test to other user Folder: /home/david/Maildir/new/msg.4AAdC **** Failed message to myself **** procmail: [24596] Fri Jun 2 15:05:13 2006 procmail: Assigning "PATH=/home/mark/bin:/bin:/usr/bin:/sbin:/usr/sbin:/usr/local/bin:/usr/X11R6/bin" procmail: Couldn't create or rename temp file "/home/mark/Maildir/new/msg.A" procmail: Assigning "LASTFOLDER=/var/mail/mark" procmail: Opening "/var/mail/mark" procmail: Acquiring kernel-lock procmail: Notified comsat: "mark@686:/var/mail/mark" From mark.nienberg(a)tippingmar.com Fri Jun 2 15:05:13 2006 Subject: test to self Folder: /var/mail/mark Anyway, I changed dovecot's lock_method from the default fcntl to flock and the problem disappeared. I'll add this to the wiki unless someone points out an error in my method. Mark Nienberg

3 8

[Dovecot] Re: Expunge is not expunging unless called twice--revisited
by Glenn Leavell 05 Jun '06

05 Jun '06

On Tue May 30 05:45:12 EEST 2006, Jeff Blank jb000002 at mr-happy.com wrote: > Hi, > > I'm running dovecot-1.0.beta8 from FreeBSD ports, using mbox mail > store. My problem appears to have come up on the list about a month > ago, "Expunge is not expunging unless it is called twice". I ran > through Bill Boebel's telnet-IMAP session for myself, and I see that > his test case is now fixed (as Timo said), but mutt, for whatever > reason, uses +FLAGS.SILENT, and I'm still getting the behaviour in > Bill's original problem when I telnet and use +FLAGS.SILENT: > > 1 OK Logged in. > 2 select INBOX > * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) > * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] > * Flags permitted. > * 1 EXISTS > * 1 RECENT > * OK [UNSEEN 1] First unseen. > * OK [UIDVALIDITY 1148956034] UIDs valid > * OK [UIDNEXT 4] Predicted next UID > 2 OK [READ-WRITE] Select completed. > 3 UID STORE 3 +FLAGS.SILENT (\Deleted) > 3 OK Store completed. > 4 expunge > 4 OK Expunge completed. > 5 expunge > * 1 EXPUNGE > * 0 RECENT > 5 OK Expunge completed. > > After step 4, the message is still in the mailbox with "X-Status: D"; > the second expunge is required to remove it. I seem to get the same > behaviour with Thunderbird, so is this still a dovecot problem? (I > have Thunderbird set up to remove deleted messages immediately, not > move to trash or just mark as deleted.) I'm also still experiencing the twice-needed expunge problem (with mutt and +FLAGS.SILENT) just as Jeff described it. I have the problem both with Beta8 and with last night's CVS snapshot. I'm using Maildir. Thanks very much, Glenn

2 1

[Dovecot] Dovecot + Logcheck Regex
by Rik Wade 05 Jun '06

05 Jun '06

I'm using logcheck for log reporting on Debian Etch, and am currently getting a lot of log entries from Syslog falling through the standard logcheck regex filters. I'm running Dovecot 1.0beta8. The filters follow: ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (imap|pop3)-login: Login: [.[:alnum:]@-]+ \[(::ffff:)?[:0-9a-f.]+\]$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (dovecot: )?(imap|pop3)-login: Disconnected \[(::ffff:)?[:0-9a-f.]+\]$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (dovecot: )?(imap|pop3)$[^[:space:]]+$: File isn't in mbox format: [^[:space:]]+$ # dovecot 1.0 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dovecot: (imap|pop3)-login: Login: user=<[.[:alnum:]@-]+>, method=(PLAIN|plain|LOGIN|login|(CRAM|cram|DIGEST|digest)-(MD5|md5)), rip=(::ffff:)?[:.[:digit:]]+, lip=(::ffff:)?[:0-9a-f.]+(, TLS)?$ The type of entry coming through is: Jun 5 09:05:57 myhostname dovecot: IMAP(myusername): Disconnected for inactivity Jun 5 09:07:05 myhostname dovecot: IMAP(myusername): Disconnected: Logged out Jun 5 09:07:05 myhostname dovecot: IMAP(myusername): Disconnected: Logged out The first alnum pattern doesn't match given a host name, but the messages given by Dovecot do not appear to be catered for in the logcheck files. I wondered whether anyone on the dovecot list was also using logcheck and had fixed the regex patterns? -- rik

1 0

[Dovecot] Specifying with openssl to use
by Chase 05 Jun '06

05 Jun '06

I'm trying to setup dovecot on Solaris 10. I can get it all working except TLS/SSL. I traced my problem down to the version of openssl that Solaris 10 ships with. The fix is supposed to be to use a newer version of openssl. Without removing the built-in version of openssl I've installed openssl-0.9.8b to /usr/local. When I "./configure" dovecot it seems to always pick up the broken version of openssl in /usr/sfw. How do I make dovecot use an alternate copy of openssl? How is it even finding the one in /usr/sfw? Thanks, -Chase I tried setting CPPFLAGS and LDFLAGS already.

3 4

[Dovecot] Since Updating Dovecot - Problem by connecting with Client
by Mailing 04 Jun '06

04 Jun '06

Hi, in the last days I've updated my dovecot on my Gentoo System. Before all went fine. Since the update it doesn't work in any way. After the Update my Thunderbird Client says: The Connecction could not proceeded because it was rejected. Another message was, that I should use TLS or SSL to connect. I've not changed my config - probably the update does - and it's only a simple configuration in my home-network. Has anybody an idea which is causing the problem? the config looks like this: protocols = imap imaps listen = [::] default_mail_env = maildir:%h/.mail mechanism = plain Thx for help k1x

3 3

[Dovecot] imaps multiple domains proposal
by Jim Flowers 04 Jun '06

04 Jun '06

There was a thread earlier this year that noted a difficulty in modifying dovecot to handle multiple domain certificates. This is a proposal that may require only minor modifications. Virtual domains can be set up with a unique ip address for each server; mail.domain1.tld ###.###.###.1, mail.domain2.tld ###.###.###.2, etc. Users are instructed to enter 'mail.domain?.tld' for their imap server. When an SSL TCP connection is established on port 993, the server program will know the IP # that was used for the connection and can use getnameinfo to extract the domain name (%d). This can then be used to build a specific reference to the certificate to be used, prior to responding to CLIENT_HELLO. Something like /etc/ssl/%d/[certs|private]/dovecot.pem One technique would be to include this in multiple dovecot.conf listen parameters read on startup, similar to tpop3d: listen = ###.###.###.1:993(domain1.tld);tls=stls,\ /etc/ssl/domain1.tld/certs/dovecot.pem,\ /etc/ssl/domain1.tld/private/dovecot.pem listen = ###.###.###.2:993(domain2.tld);tls=stls,\ /etc/ssl/domain2.tld/certs/dovecot.pem,\ /etc/ssl/domain2.tld/private/dovecot.pem Alternatively, as virtual servers almost always use some form of lookup (in my case mysql) the certificate used could be determined at time of connection, similar to the way ssl_ca is handled. For example: user_query = SELECT '125'as uid, '125' as gid, maildir as home, '/etc/ssl/%d/certs/dovecot.pem' as cert, '/etc/ssl/%d/private/dovecot.pem as priv FROM mailbox WHERE username = '%u' In this manner the certificate returned would match the server ip/FQDN and can also be customized for the specific domain involved. Seeing their own domain name as the CN for both the certificate and CA goes a long way to establish credibility for most secure email users. Could this be done? -- Jim Flowers<jflowers(a)ezo.net>

4 5

[Dovecot] "Bug" report (and patch)
by Soren Hansen 03 Jun '06

03 Jun '06

1 0

[Dovecot] outlook express 6 imap client workaround
by david williams 03 Jun '06

03 Jun '06

My outlook express users connecting with imap are having issues with client timeout. The wiki says to add oe6-fetch-no-newmail, but when I add that workaround I get this error in the logs: Jun 2 10:00:13 mail dovecot: IMAP(username): Unknown client workaround: oe6-fetch-no-newmail I'm using 1.0b7. Any ideas?

3 2

Re[2]: [Dovecot] dovecot can't start!
by Oleg D. 02 Jun '06

02 Jun '06

MB> Hmmm... I was seeing a problem rather like this with 1.0beta8 under Solaris MB> with Sun's compiler: only it was with the IMAP protocol rather than POP. MB> The problem there was an assumption Tio had made that everyone was using a MB> C99-compatible compiler. Apparently this handles some aspects of variable MB> initialisation differently from earlier C compilers. MB> In my case adding a command-line option to the C compiler to flip it into MB> C99 mode seemed to solve the problem. The option for our compiler was MB> "-xc99" -- however if your compiler has such an option it may have a MB> different name. If you check the manual page for your C compiler you may MB> find an equivalent option to try. MB> However another solution was provided by Timo in the form of a simple patch MB> that made changes to a couple of source files. I hope Timo doesn't mind: MB> I'm re-sending his patch as an attachment to this message as it is tiny. MB> You could try applying it and rebuilding Dovecot. MB> Cheers, MB> Mike Brudenell But I use FreeBSD 4.11-RELEASE-p15 with native compiler. Really nobody has this problem on freebsd? And the main - Why I can't start dovecot without SSL :) Why I see in log "pop3-login: BUG: SSL initialization parameters not given while they should have been" even if I have "ssl_disable = yes" in dovecot.conf 1.0b3 works fine. This problem is main for me because I don't want to use SSL. -- Best regards, Oleg mailto:dzoleg@rsute.ru

4 6

[Dovecot] Duplicate Attachments....
by Charles Marcus 02 Jun '06

02 Jun '06

Love Dovecot, many thanks for it! But, I have a question regarding the storing of emails, with respect to efficiency... Our business model (advertising industry) is such that our users exchange a lot of emails with attachments - most less than a megabyte, but some considerably larger. Consequently, I have been looking for a good, open source imap server that doesn't store multiple copies of the same attachment - but instead, stores a checksum, and whenever a message is stored with a duplicate attachment, the attachment is stored only once, and simply referenced by some kind of link to other emails. This would *drastically* reduce the storage requirements for our company - imagine a message with a 10MB attachment, sent to 40 of our users, sometimes more than once. Now multiply this by 3 times per day, for 5 years... Are there any plans for Dovecot to support this type of storage in the future? Does this require the use of an SQL DB for storing the message components? -- Best regards, Charles

9 14

[Dovecot] Platform change, considerations?
by Peter Lindgren 02 Jun '06

02 Jun '06

Hello! I am switching hardware platform for my dovecot 1.0beta3 installation. From Sun Sparc (SS4) to Intel i386. OS platform will only change from OpenBSD 3.7 to 3.9. From Dovecot 1.0beta3 to beta8. Is there anything special to consider, in terms of endianness or other incompatibilities? I plan on a fresh install (compile) on the new machine, migrate the settings manually (by hand), test the new server and then migrate old mail. Can I just mount the disks and copy, or should I go through NFS to be safe from potential endianness problems? Or perhaps copy with IMAP using my Thunderbird client? The live switch (the old server is in production) isn't that delicate, several hours downtime is OK. There's a backup server that can receive any mail I might loose during downtime, which can be copied though IMAP later. Thanks for any input! /Peter -- Peter Lindgren, dataingenjör E-post: peter "at" norrskenkonsult punkt com http://www.norrskenkonsult.com

2 1

[Dovecot] Outlook causes BIG dovecot index problem (beta 8, outlook 2003)
by Casey Allen Shobe 01 Jun '06

01 Jun '06

Hey all, Well, I typed up all the below, then managed to fix the problem before sending this to the list. I'll send it anyways, in case anybody else is affected by it (and because it does indicate a definite bug in Dovecot's experimental Kerberos support). The fix is to recompile without kerberos enabled, and to take gssapi out of the auth methods in the config (the latter alone may or may not be enough of a fix on it's own, I didn't try it without recompiling). I'm guessing that Outlook attempts to use Kerberos authentication by default or something and silently fails and uses other auth methods, and that any attempt to use Kerberos is in fact what hoses the server. However I have not done any further testing against beta8 with a Kerberos-enabled client such as KMail, so I leave this as an exercise for the next adventurer. I'm also uncertain as to why this problem does not manifest on our main servers, which also have Kerberos enabled (and Outlook 2003 clients). Or /had/ anyways, as I'm disabling Kerberos support as we speak as a preventative measure. Here's the problem description: I've been running dovecot happily for many months on our production mail servers hosting about 600 accounts, with no problems. People use every mail client under the sun - Apple Mail, Outlook 97|2000|XP|2003, Outlook Express, Mutt, Thunderbird, Mozilla Mail, Eudora, and other esoteric things with no problem. So today I installed a new mail server on a client site dedicated to their domain. The MTA is exim, running with almost the same configuration we use on our main servers. The dovecot.conf is 100% identical. No mail was moved by hand to the new mail server - to migrate we copied the mail setting up the old and new accounts in Thunderbird and dragging things over (just to rule out that possibility, we have also tested using brand new empty accounts to reproduce the issue). Everything is golden using Thunderbird - email is send, and shows up in the inbox immediately. Enter Outlook 2003 (SP1): It shows all folders and mail fine. It sends mail fine. Nothing shows up in the inbox. At this moment, Thunderbird also stops receiving new mail in the inbox. I check the server, and there's a mail sitting in the /new directory in the maildir. Not only that, but suddenly NONE of the accounts on the box show any new mail, exhibiting the same signs. I tried a variety of things, including 'sync', removing all the dovecot* index files in the maildir, and restarting dovecot (being sure to killall imap before bringing it back up). Sometimes, these steps would magically cause everything to work again, until I did a mail poll in Outlook which causes the problem to re-occur. Other times, these steps didn't seem to do anything. A couple times, for no apparent reason, without doing anything, mail would show up. Too hopeful, we sat around for 30 minutes sending more mail to an account and then just idling...nothing showed up. The hardware is good, we've compiled a full glibc and gcc just to ensure that there are no CPU/memory issues, and this box has a solid good history behind it in it's prior uses. Until Outlook is used, everything works fine. We do have the outlook-idle workaround enabled, and tried both with and without delay-newmail, which didn't make any difference. Cheers, -- Casey Allen Shobe | cshobe(a)seattleserver.com | 206-381-2800 SeattleServer.com, Inc. | http://www.seattleserver.com

3 3

[Dovecot] mbx to mbox conversion
by Marc Perkel 01 Jun '06

01 Jun '06

Here's a feature I'd like. If Dovecot opened an MBX format file that it would convert it to an MBOX format file. I have several files that I'm having a hard time converting. The one I got from Washington University WUIMAP is extremely flawed.

3 2

[Dovecot] Cannot remove Maildir folder
by Marcin Deranek 01 Jun '06

01 Jun '06

Hi, I have been using dovecot 1.0 beta 8 on Debian Sarge for a couple of days and I experienced some problems when removing folders.. As an IMAP client I use Thunderbird 1.5 and IMAP folders are on NFS. Here are the steps to re-produce the problem: 1. Run Thunderbird as usual 2. Create folder 3. Remove folder - In my case folder is not removed but moved to Trash (Thunderbird setting) 4. I go to Trash and remove it from there 5. Folder is removed but I get additional ..DOVECOT-TRASHED directory - next time it won't be possible to remove it Some more info: * Just before removal I run lsof to see which files are in use: bash# lsof /home/marcin ... imap 21360 marcin cwd DIR 0,15 344064 3307008 /home/marcin (filer:/vol/vol0/home/marcin) imap 21360 marcin 8u DIR 0,15 4096 4223651 /home/marcin/Maildir/.Trash.test/new (filer:/vol/vol0/home/marcin) imap 21360 marcin 9u DIR 0,15 4096 4223650 /home/marcin/Maildir/.Trash.test/cur (filer:/vol/vol0/home/marcin) imap 21360 marcin 11r REG 0,15 144 4223663 /home/marcin/Maildir/.Trash.test/dovecot.index (filer:/vol/vol0/home/marcin) imap 21360 marcin 12r REG 0,15 104 4223647 /home/marcin/Maildir/.Trash.test/dovecot.index.log (filer:/vol/vol0/home/marcin) imap 21360 marcin 13u REG 0,15 10272 4223657 /home/marcin/Maildir/.Trash.test/dovecot.index.cache (filer:/vol/vol0/home/marcin) ... There are more files in use but in this case I'm interested with PID 21360 which has opened Trash/test (the one which I'm going to remove) * Just after removal I see error message in Syslog: dovecot: IMAP(marcin): unlink_directory(/home/marcin/Maildir/..DOVECOT-TRASHED) failed: Device or resource busy Running lsof again gives the following: imap 21360 marcin cwd DIR 0,15 344064 3307008 /home/marcin (filer:/vol/vol0/home/marcin) imap 21360 marcin 11r REG 0,15 144 4223663 /home/marcin/Maildir/..DOVECOT-TRASHED/.nfs004072af0002cb1b (filer:/vol/vol0/home/marcin) imap 21360 marcin 12r REG 0,15 104 4223647 /home/marcin/Maildir/..DOVECOT-TRASHED/.nfs0040729f0002cb1a (filer:/vol/vol0/home/marcin) imap 21360 marcin 13u REG 0,15 10272 4223657 /home/marcin/Maildir/..DOVECOT-TRASHED/.nfs004072a90002cb1c (filer:/vol/vol0/home/marcin) Looking into some NFS docs we can read: "A client has a file opened. Another process on that client deletes the file. So the client NFS stack rather than deleting the file and potentially hurting the other process, it renames the file to .nfs<file_handle>." To me it looks like one imap process tries to delete .Trash.test directory (first rename and then unlink) whereas other imap process has still opened dovecot.* files. Any workaround/fix for that ? Regards, Marcin Deranek

2 5

[Dovecot] beta8 starts but no POP3 access
by Obantec Support 31 May '06

31 May '06

Hi Timo i see you just answered a posting less than 1 hour old! any chance you can comment on mine (29/05/06) repeated below and very urgent i get dovecot beta8 up. I just compiled stock beta8 on FC3 with ./configure make make install all looked ok and i changed my dovecot.conf to suit. start dovecot and i see it running May 29 08:18:00 Info: Dovecot v1.0.beta8 starting up POP3 to 1 account and May 29 08:18:06 Info: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=xx.xx.xx.xx rip=yy.yy.yy.yy resp=<hidden> May 29 08:18:06 Info: auth(default): client out: OK 1 user=obantec_com May 29 08:18:06 Info: auth(default): master in: REQUEST 1 19528 1 May 29 08:18:06 Info: auth(default): master out: USER 1 obantec_com system_user=obantec_com uid=501 gid=10001 home=/home/domain/domain17 May 29 08:18:06 Info: pop3-login: Login: user=<obantec_com>, method=PLAIN, rip=yy.yy.yy.yy, lip=xx.xx.xx.xx May 29 08:18:06 proteus2 dovecot: POP3(obantec_com): Corrupted index cache file /home/domain/domain17/mail/.imap/INBOX/dovecot.index.cache: indexid changed May 29 08:18:06 proteus2 dovecot: child 19536 (pop3) killed with signal 11 yy.yy.yy.yy & xx.xx.xx.xx are the ip's just masked out. OE just immediately say error , what is also worrying is the Corrupted index message even though i am using POP3. any ideas what to look for. I might add a test box running FC3 and the same .conf works! Mark -- Obantec Support www.obantec.net 0845 458 3121 WebHosting and Domains Nominet UK Member & IPStag Holder CentralNic Accredited Reseller

2 2

[Dovecot] dovecot.index.cache
by Fintec 31 May '06

31 May '06

Hopefully someone can explain/help me with the dovecot.index.cache file. I am wanting to move a dovecot server (v1.0b7) onto a new box running the same version (1.0b7) of dovecot. To do this I rsync'd the maildir files to the new server but when I logged into the new machine through IMAP dovecot reported: IMAP(username): file index-mail.c: line 105 (index_mail_get_fixed_field): assertion failed: (buffer_get_used_size(buf) == data_size) As soon as I delete the dovecot.index.cache file within the users mailbox this error goes away. Great, but that now I have some questions: 1) Does the dovecot.index.cache file store/cache server specific settings? If not why did it cause this error on the new box with exactly the same dovecot version and dovecot.conf? 2) What will happen if I delete the dovecot.index.cache file for all users? Will POP3 users have to re-download all their mail or will dovecot simply reference the dovecot.index file in the absence of the cache file? If I've missed something on the wiki explaining all this please point me in the right direction. Any help would be greatly appreciated. Gavin

3 4

[Dovecot] Apple Mail and too many open files?
by Alan Schmitt 31 May '06

31 May '06

Hello, For two days in a row, I've noticed that my dovecot server (hosted on a PowerMac running OS X) has stopped working, with a bunch of error messages in /var/log/mail.log like: May 24 07:31:10 top dovecot: pipe() failed: Too many open files To solve this, I have to kill -9 dovecot and the (many) imap processes running. The only client accessing the server is a machine running Apple Mail. I tried to increase the limit in the number of files (I did a "launchctl limit maxfiles 1024 unlimited", but the problem still happened. Is this a known problem? Should I allow still more files? Thanks, Alan -- Alan Schmitt <http://alan.petitepomme.net/> The hacker: someone who figured things out and made something cool happen. .O. ..O OOO

4 5

[Dovecot] problems with Debian Sarge
by Andrea Riela 31 May '06

31 May '06

Hi folks, I've updated my dovecot 0.99.14 with the last package (0.99.14-1sarge0), but it doesn't work. I've found that problem: http://comments.gmane.org/gmane.linux.debian.devel.bugs.general/80872 then I've removed that, and reinstalled first package (from /var/cache/apt/archives), and NOW it doesnt' work too :( When I start the daemon, I see in my logs: dovecot: May 31 12:40:28 Info: Dovecot starting up dovecot-auth: May 31 12:40:29 Fatal: Unknown userdb type 'vpopmail' dovecot: May 31 12:40:29 Error: Auth process died too early - shutting down dovecot: May 31 12:40:29 Error: child 15798 (auth) returned error 89 imap-login: May 31 12:40:29 Fatal: fd_send(-1) failed: No such file or directory imap-login: May 31 12:40:29 Fatal: fd_send(-1) failed: No such file or directory I don't understand. Any advice will be appreciated Best Regards Andrea my dovecot.conf is like that: ## Dovecot 1.0 configuration file <...> # Protocols we want to be serving: # imap imaps pop3 pop3s protocols = imaps <...> # IP or host address where to listen in for SSL connections. Defaults # to above non-SSL equilevants if not specified. imaps_listen = 192.168.17.10:993 #pop3s_listen = # Disable SSL/TLS support. ssl_disable = no # PEM encoded X.509 SSL/TLS certificate and private key. They're opened before # dropping root privileges, so keep the key file unreadable by anyone but # root. #ssl_cert_file = /etc/ssl/certs/dovecot.pem #ssl_key_file = /etc/ssl/private/dovecot.pem ssl_cert_file = /var/qmail/control/servercert.pem ssl_key_file = /var/qmail/control/servercert.pem <...> # Use this logfile instead of syslog(). /dev/stderr can be used if you want to # use stderr for logging (ONLY /dev/stderr - otherwise it is closed). log_path = /var/log/dovecot.log # For informational messages, use this logfile instead of the default info_log_path = /var/log/dovecot.log <...> ## ## IMAP login process ## login = imap # Executable location. #login_executable = /usr/lib/dovecot/imap-login # User to use for the login process. Create a completely new user for this, # and don't use it anywhere else. The user must also belong to a group where # only it has access, it's used to control access for authentication process. # Note that this user is NOT used to access mails. # http://wiki.dovecot.org/UserIds login_user = dovecot <...> ## ## Mail processes ## # Maximum number of running mail processes. When this limit is reached, # new users aren't allowed to log in. #max_mail_processes = 1024 # Show more verbose process titles (in ps). Currently shows user name and # IP address. Useful for seeing who are actually using the IMAP processes # (eg. shared mailboxes or if same uid is used for multiple accounts). verbose_proctitle = no # Show protocol level SSL errors. #verbose_ssl = no # Valid UID range for users, defaults to 500 and above. This is mostly # to make sure that users can't log in as daemons or other system users. # Note that denying root logins is hardcoded to dovecot binary and can't # be done even if first_valid_uid is set to 0. first_valid_uid = 89 last_valid_uid = 89 # Valid GID range for users, defaults to non-root/wheel. Users having # non-valid GID as primary group ID aren't allowed to log in. If user # belongs to supplementary groups with non-valid GIDs, those groups are # not set. first_valid_gid = 0 #last_valid_gid = 0 <...> # Default MAIL environment to use when it's not set. By leaving this empty # dovecot tries to do some automatic detection as described in # /usr/share/doc/dovecot-common/mail-storages.txt. There's a few special # variables you can use: # # %u - username # %n - user part in user@domain, same as %u if there's no domain # %d - domain part in user@domain, empty if user there's no domain # %h - home directory # # You can also limit a width of string by giving the number of max. characters # after the '%' character. For example %1u gives the first character of # username. Some examples: # # default_mail_env = maildir:/var/mail/%1u/%u/Maildir # default_mail_env = mbox:~/mail/:INBOX=/var/mail/%u # default_mail_env = mbox:/var/mail/%d/%n/:INDEX=/var/indexes/%d/%n # default_mail_env = maildir:~/Maildir <...> # Workarounds for various client bugs: # oe6-fetch-no-newmail: # Never send EXISTS/RECENT when replying to FETCH command. Outlook Express # seems to think they are FETCH replies and gives user "Message no longer # in server" error. Note that OE6 still breaks even with this workaround # if synchronization is set to "Headers Only". # outlook-idle: # Outlook and Outlook Express never abort IDLE command, so if no mail # arrives in half a hour, Dovecot closes the connection. This is still # fine, except Outlook doesn't connect back so you don't see if new mail # arrives. # outlook-pop3-no-nuls: # Outlook and Outlook Express hang if mails contain NUL characters. # This setting replaces them with 0x80 character. client_workarounds = oe6-fetch-no-newmail outlook-idle outlook-pop3-no-nuls <...> # Copy mail to another folders using hard links. This is much faster than # actually copying the file. This is problematic only if something modifies # the mail in one folder but doesn't want it modified in the others. I don't # know any MUA which would modify mail files directly. IMAP protocol also # requires that the mails don't change, so it would be problematic in any case. # If you care about performance, enable it. maildir_copy_with_hardlinks = yes <...> ## ## Authentication processes ## # An Authentication process is a child process used by Dovecot that # handles the authentication steps. The steps cover an authentication # mechanism (auth_mechanisms, how the client authenticates in the IMAP or # POP3 protocol), which password database should be queried (auth_passdb), # and which user database should be queried (auth_userdb, to obtain # UID, GID, and location of the user's mailbox/home directory). # # You can have multiple processes, though a typical configuration will # have only one. Each time "auth = xx" is seen, a new process # definition is started. The point of multiple processes is to be able # to set stricter permissions. (See auth_user below.) # # Just remember that only one Authentication process is asked for the # password, so you can't have different passwords accessible through # different process definitions (unless they have different # auth_mechanisms, and you're ok with having different password for # each mechanisms). # Authentication process name. auth = default # Specifies how the client authenticates in the IMAP protocol. # Space separated list of permitted authentication mechanisms: # anonymous plain digest-md5 cram-md5 # # anonymous - No authentication required. # plain - The password is sent as plain text. All IMAP/POP3 clients # support this, and the password can be encrypted by Dovecot to match # any of the encryption schemes used in password databases. # digest-md5 and cram-md5 - both encrypt the password so it is more # secure in transit, but are not well supported by clients, and # require that the password database use a matching encryption # scheme (or be in plaintext). # # See auth.txt for more details. # # If you are using SSL there is less benefit to digest-md5 and # cram-md5 as the communication is already encrypted. auth_mechanisms = plain # Space separated list of realms for SASL authentication mechanisms that need # them. You can leave it empty if you don't want to support multiple realms. # Many clients simply use the first one listed here, so keep the default realm # first. #auth_realms = # Default realm/domain to use if none was specified. This is used for both # SASL realms and appending @domain to username in plaintext logins. #auth_default_realm = # User database specifies where mails are located and what user/group IDs # own them. For single-UID configuration use "static". # http://wiki.dovecot.org/Authentication # http://wiki.dovecot.org/VirtualUsers # passwd: /etc/passwd or similiar, using getpwnam() # passwd-file <path>: passwd-like file with specified location # static uid=<uid> gid=<gid> home=<dir template>: static settings # vpopmail: vpopmail library # ldap <config path>: LDAP, see /etc/dovecot/dovecot-ldap.conf # mysql <config path>: a MySQL database, see /etc/dovecot/dovecot-mysql.conf # pgsql <config path>: a PostgreSQL database, see # /etc/dovecot/dovecot-pgsql.conf auth_userdb = vpopmail # Password database specifies only the passwords for users. # http://wiki.dovecot.org/Authentication # passwd: /etc/passwd or similiar, using getpwnam() # shadow: /etc/shadow or similiar, using getspnam() # pam [<service> | *]: PAM authentication # passwd-file <path>: passwd-like file with specified location # vpopmail: vpopmail authentication # ldap <config path>: LDAP, see /etc/dovecot/dovecot-ldap.conf # mysql <config path>: a MySQL database, see /etc/dovecot/dovecot-mysql.conf # pgsql <config path>: a PostgreSQL database, see # /etc/dovecot/dovecot-pgsql.conf auth_passdb = vpopmail #auth_executable = /usr/lib/dovecot/dovecot-auth # Set max. process size in megabytes. #auth_process_size = 256 # User to use for the process. This user needs access to only user and # password databases, nothing else. Only shadow and pam authentication # requires roots, so use something else if possible. Note that passwd # authentication with BSDs internally accesses shadow files, which also # requires roots. Note that this user is NOT used to access mails. # That user is specified by auth_userdb above. auth_user = root <...>

3 2

[Dovecot] about init.d script
by Andrea Riela 31 May '06

31 May '06

Hi folks, someone using Debian? I need the init script, if you please :) Thanks for your support Regards Andrea

3 2

[Dovecot] How to move a Maildir directory to a new server?
by Darrin Smart 31 May '06

31 May '06

Hi All, I'd like to ask about the best practice for moving a user's Maildir from one host to another. I moved a few user's home directories, and therefore their ~/Maildir folders. They have complained that since the move, they don't see all the messages in their INBOX for a while, but eventually they all appear again. They are using Thunderbird. I tried deleting the index files but it didn't help. Can anyone give advice? I have a soft link pointing from the old home directory to the new one, and both paths were on NFS. I can't see how dovecot could give different results, could it be related to message UID numbers? I did notice that when I moved my own home directory, Mail.app re-downloaded every mail when I opened each folder. Thunderbird doesn't seem to do this, perhaps its related. Thanks. Darrin

1 0

[Dovecot] public folders aren't public
by Mark Nienberg 30 May '06

30 May '06

I'm testing dovecot as a replacement for an aging UW-IMAP server. I have the basic IMAP setup working but I'm stuck on public folders (which my users are addicted to). I set up public folders generally a described in the wiki. The problem is that when a user creates a new public folder, the folder is owned by the user with permissions drwx------ which prevents other users from viewing the contents. Here is part of dovecot.conf: namespace public { separator = / prefix = Public/ location = maildir:/home/public/Maildir } and here is the Maildir directory [root@tesla Maildir]# ls -la total 70k drwxrwxrwx 7 dovecot Everyone 4.1k May 12 14:33 ./ drwxrwxrwx 3 root root 4.1k May 12 13:43 ../ drwxrwS--- 2 dovecot Everyone 4.1k May 12 13:48 cur/ drwx------ 5 david Everyone 4.1k May 12 14:33 .davi/ -rw-rw-r-- 1 dovecot Everyone 0 May 12 13:46 dovecot-shared drwxrwS--- 2 dovecot Everyone 4.1k May 12 13:48 new/ -rw------- 1 mark Everyone 6 May 12 14:07 subscriptions drwxrwS--- 2 dovecot Everyone 4.1k May 12 13:48 tmp/ drwx------ 5 mark Everyone 4.1k May 12 14:30 .tryit/ The directories .davi/ and .tryit/ were created by users david and mark respectively. These are real system users. They are both members of the Everyone group. Any suggestions appreciated. Thanks, Mark

2 3

[Dovecot] IMAP server <defunct> (beta 7)
by Graham Briggs 30 May '06

30 May '06

Hi, We've been using a 0.99 version of Dovecot for nearly a year without problems, but due to a server death I had to reinstall with the same configuration as before, but more recent versions of the software, on different hardware. This time though, every few days IMAP login and access fails, and the output of ps ax shows entries such as [imap-login] <defunct> and [imap] <defunct>, with the lovely brain-eating Zombie status. There is nothing in the log file that suggests an issue. We're using dovecot with authentication/etc being done against a Postgresql database. I searched online for a solution, but the nearest problem said it was a problem with PAM, which we are not using with Dovecot. We're using Maildir as the message storage format. Does anyone have any suggestions as to why this might be occurring? If it will help to see the dovecot configuration files then I can provide them. The platform is Debian 64-bit running on a dual-core Opteron system. Yes, it isn't Debian-stable! Graham

8 13

[Dovecot] Maildirquota
by Rodolfo Gonzalez Gonzalez 30 May '06

30 May '06

Hi, I'd like to use dovecot+postfix (with Maildir) for several virtual email servers, but one requirement is quota support. I'm aware about the lack of maildirquota support in dovecot, and I found a patch in the "unofficial patches" section which is said to provide maildirquota support to dovecot. How stable is this patch?, is it usable with dovecot 1.0b2?. And, is there any plan to support maildirquota natively in the near future?, I'd like to replace courier-imap in my setup. Thanks. Rodolfo.

7 13

[Dovecot] separate pop and imap server keys?
by Noah 30 May '06

30 May '06

Hi there, is there any way to get the imap and pop client to use separate keys? My Thunderbird client complains when I am popping from popss.domain.com that the certificate is owned by imapss.domain.com Any clues here? Cheers, Noah

3 3

[Dovecot] Problems with subfolders in Thunderbird
by Ian Thurlbeck 30 May '06

30 May '06

Dear All Server: dovecot-1.0.beta8 (compiled from source) centos 4.3 Client: thunderbird 1.0.8 on Fedora Core 4 on port 993 Using maildir Normally (with the current UW-IMAP) I can create a folder which may contain only messages or only folders. If I create a folder which will contain only folders, it is listed in thunderbird in light-grey italics. Subsequently I can create message folders within this folder. When doing the same thing using dovecot as the server, the same options are available, but any attempt to create a folder containing only folders is silently ignored and nothing happens (nothing is created anywhere on the server filesystem). Is this a known problem ? I do not want to use the setting which allows you to create folders which may contain both messages and folders. Thanks Ian -- Ian Thurlbeck http://www.stams.strath.ac.uk/ Statistics and Modelling Science, University of Strathclyde Livingstone Tower, 26 Richmond Street, Glasgow, UK, G1 1XH Tel: +44 (0)141 548 3667 Fax: +44 (0)141 552 2079

3 3

[Dovecot] Hint for Fatal: sigaction(SIGRTMIN) failed: Invalid argument
by Breno Jacinto Duarte da Costa 30 May '06

30 May '06

Hello, Search google I've found a thread ("errors in logfile") discussing a similar problem to mine. It`s something related to the #define IOLOOP_NOTIFY_DNOTIFY in config.h, but disbling it resulted in errors in compilation. I'm really running out of answers for this one... if anyone could give a hint, it'd be of great help. cheers -- .''`. -- Breno Jacinto : :´` : -- breno /at/ freeunix dot com dot br : ' ' : -- 88AE 3F43 7110 57F6 A206 `. `'` -- D116 02CA 02F4 803D 4294 `-- -- Debian GNU/Linux - The Universal OS

2 1

[Dovecot] imap proxy and passwd-like passdb/userdb
by HenkJan Wolthuis 30 May '06

30 May '06

Hi, I'm testing/using dovecot as imap proxy, passdb/userdb as passwd-like-file. It seems to function as expected (1). This setup is described in the wiki in AuthSpecials. But I also noticed in the documentation (ImapProxy / FeatLoginProxy pages) that the proxy feature only works with a sql passdb. Maybe I did something strange, but passwd-like-passdb does work..... So I have some questions: Is the documentation wrong? Is the documentation right? ;-) Are there reasons not to use dovecot this way (other than scalability / maintainability)? Are there bugs I've not yet seen? (am I the only one using dovecot this way?) thanks-in-advance, HenkJan 1) i'm proxying to a courier backend, had to modify dovecots capability_string, because the emailclient gets the capabilities from dovecot, while it uses the proxied server (=courier). Had some strange errors with append, as courier doesn't support Literal+, modifying dovecot so that it stopped advertising Literal+ solved the problem....

2 1

[Dovecot] Out of Quota Causing "BYE Too many invalid IMAP commands."
by Timothy White 30 May '06

30 May '06

Doing some testing in Squirrelmail, with quotas, and basically opening a message, and saving it as a draft, over and over until I run at of quota. This is what I get when I try and save a message that is larger than the size left May 30 19:36:36 mafeking dovecot: IMAP(joeblogs): Disconnected: Too many invalid IMAP commands. and in SM ERROR: IMAP server closed the connection. Server responded:* BYE Too many invalid IMAP commands. I would expect something a little more user friendly in that situation. I haven't worked out how to debug the IMAP session in SM, or how to run an IMAP session with logging. I may get around to setting up debug in dovecot to see what happens. I'm running dovecot beta8. Any suggestions as to how to make it 'die' nicer? Thanks Tim -- Linux Counter user #273956

4 5

[Dovecot] Leave copy on server problem.
by Dario Ale 30 May '06

30 May '06

Hello, I am using Dovecot 0.99.14-r1 with mbox format. I have a problem with the option "Leave copy on server", the messages are duplicated. I tried many options but I can´t find the solution. The last test was: I modified in src/pop3/commands.c (function list_uids()) the folowing things: "... client_send_line(client, message == 0 ? "%u %u.%u" : "+OK %u %u.%u", mail->seq, client->uidvalidity, mail->uid); ..." by "... client_send_line(client, message == 0 ? "%u %08x%08x" : "+OK %u %08x%08x", mail->seq, mail->uid, client->uidvalidity); ..." then, I removed all index files so this were regenerated, I deleted popstate.dat, after with Mozilla Thunderbird I got the messages. popstate.dat was regenerated too, with the following information: this is the last lines: "... k 000000b14062ffdb 1148496134 k 000000b24062ffdb 1148496135 " After I send a new email and get messages, the last lines in popstate.dat was: "... k 000000b14062ffdb 1148496134 <-- no duplicated k 000000b34062ffdb 1148496827 <-- duplicated of k "000000b24062ffdb 1148496135" k 000000b44062ffdb 1148496828 <-- new " the new messaged arrived and the previous message was duplicated. This problem happens with OutLook Express too. Please, somebody can help me?? Thanks very much. pd: sorry by my english. -- Dario Ale (dario.a en telpin.com.ar)

3 2

[Dovecot] pop3-login: Internal login failure
by Pedro Vieira 30 May '06

30 May '06

Hi all... I'm running Dovecot 0.99.14 on Debian Sarge and I'm now trying to configure a mysql-based authentication. I made all the nessary setup accordinf to dovecot.conf and dovecot-mysql-conf but when i try to login I get the follwing error: pop3-login: Internal login failure: username(a)mydomain.tld [xxx.xxx.xxx.xxx] Any ideias on what may be happening? Thanks in advance, Pedro ---------------------------------------------------------------------------- "Very funny, Scotty. Now beam down my clothes." "Change is inevitable, except from a vending machine."

2 1

[Dovecot] Migration problems from Courier-Imap
by Mattia Martinello 30 May '06

30 May '06

Hi, I'm migrating from Courier-Imap to Dovecot-Imapd and I have some problems.. I don't want to change the IMAP folders, so I wish to have Dovecot's compatibility with Courier's IMAP folders. In the Dovecot configuration I configured this: namespace private { separator = . prefix = INBOX. inbox = yes } Dovecot correctly shows me the INBOX folder, but doesn't show me the subfolders anymore... What can I do to solve this problem? Thank you very much and goodbye. Mattia.

2 1

[Dovecot] Effect of "login_process_per_connection = no"?
by Pete Slagle 29 May '06

29 May '06

Using dovecot version v1.0.beta8 on FreeBSD 6.1_RELEASE with login_process_per_connection = no in the dovecot.conf file, I still get a new imap process for each IMAP login. That is, if a single user logs in five times, five imap processes are created. The difference appears to be that with a "yes" setting each user login causes a new copy of the imap-login processes to be forked, which then creates the imap process for the connection and exits. With a "no" setting, one of the existing imap-login processes creates the imap process directly (and does not exit). I am understanding the effect of this control setting correctly? Are there other actions or implications? Pete

3 2

[Dovecot] Security hole with mboxes
by Timo Sirainen 29 May '06

29 May '06

Unfortunately we have our first problem that could really be counted as security hole. Giving "1 LIST .. *" IMAP command allows the user to see all files and directories under the mbox root's parent directory, so potentially you could see other users' mailbox names. Nothing can be done with them though, so it's not possible to read or modify them. There are also some other less than wanted behaviors that can be done with "." and ".." directories, such as "DELETE .." command can give errors. Also with maildir if you store indexes in different directory than mails this command can be used to delete the index files. Anyway I don't see any of these as security issues. Hopefully most people have their mail directory under user's home directory, so this would only list the home directory's contents. But if you do have users' mails stored in eg. under /var/mail/%u/ directory, giving that command would list everything under /var/mail, assuming that the process has permissions to do that (that's why you should be using different UIDs for users if possible). This affects 1.0 beta and 1.0 stable releases, but not 0.99.x. Fix is in http://dovecot.org/list/dovecot-cvs/2006-May/005563.html I'll also release 1.0 beta8 now. Thanks for Bill Boebel for noticing "DELETE .." doing weird things with maildir.

3 2

[Dovecot] Subfolder in Maildir
by Bart Braem 29 May '06

29 May '06

Hello, We have installed a brand new Dovecot because it seems very interesting as an IMAP server. We created a mailbox for a test user and we succeeded in copying some mails into it. However making subfolders does not work. The only folders we can create are in the root, next to the INBOX that is. We thought Maildir does support subfolders (as opposed to mbox), are we wrong here? Our Dovecot version is 1.0.b8_1. Bart

3 3

[Dovecot] Server statistics
by Dean Manners 29 May '06

29 May '06

Hey guys, Is there a way to extract the concurrent connectons to a dovecot servers? Got a fairly busy installation that Id like to monitor/graph concurrent connections for. __________________________________________ Dean Manners

4 3

[Dovecot] beta8 starts but no POP3 access
by Obantec Support 29 May '06

29 May '06

Hi I just compiled stock beta8 on FC3 with ./configure make make install all looked ok and i changed my dovecot.conf to suit. start dovecot and i see it running May 29 08:18:00 Info: Dovecot v1.0.beta8 starting up POP3 to 1 account and May 29 08:18:06 Info: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=xx.xx.xx.xx rip=yy.yy.yy.yy resp=<hidden> May 29 08:18:06 Info: auth(default): client out: OK 1 user=obantec_com May 29 08:18:06 Info: auth(default): master in: REQUEST 1 19528 1 May 29 08:18:06 Info: auth(default): master out: USER 1 obantec_com system_user=obantec_com uid=501 gid=10001 home=/home/domain/domain17 May 29 08:18:06 Info: pop3-login: Login: user=<obantec_com>, method=PLAIN, rip=yy.yy.yy.yy, lip=xx.xx.xx.xx May 29 08:18:06 proteus2 dovecot: POP3(obantec_com): Corrupted index cache file /home/domain/domain17/mail/.imap/INBOX/dovecot.index.cache: indexid changed May 29 08:18:06 proteus2 dovecot: child 19536 (pop3) killed with signal 11 yy.yy.yy.yy & xx.xx.xx.xx are the ip's just masked out. OE just immediately say error , what is also worrying is the Corrupted index message even though i am using POP3. any ideas what to look for. I might add a test box running FC3 and the same .conf works! Mark -- Obantec Support www.obantec.net 0845 458 3121 WebHosting and Domains Nominet UK Member & IPStag Holder CentralNic Accredited Reseller

1 0

[Dovecot] setting default_mail_env - INBOX not seen?
by Noah 29 May '06

29 May '06

Hi there, I am trying to figure out hte Proper defualt_mail_env definition default_mail_env = mbox:%h/mail:INBOX=/usr/mail/%u (yes /usr/mail not /var/mail) Most users have their INBOX at /usr/mail/%u and some users have saved-folders and other mail folders in %h/mail *** right now i am unable to view my inbox. But I can view all the folders and contents of the %h/mail subdirs visible as separate folders. do I have this set up correctly? My IMAP client is unable to see my INBOX file. Cheers, Noah

1 0

[Dovecot] Dovecot Implementation
by Jagga Soorma 27 May '06

27 May '06

Hey Guys, I was able to get dovecot running on my linux server using kerb authentication against our windows 2003 domain controller. Is there a way for me to use the windows active directory for looking up names on the email clients? I have tried setting the base dn to the following under microsoft outlook: dc=domain,dc=com cn=users,dc=domain,dc=com However, I am unable to lookup any names. Any ideas or suggestions? Thanks in advance, -J

1 0

[Dovecot] [RFC] create_dovecot_shares
by Gavin Henry 26 May '06

26 May '06

Dear All, As mentioned previously at: http://www.dovecot.org/list/dovecot/2006-May/013003.html create_dovecot_shares is now finished. Apologies to all for the time it has taken. Description: "Creating lots of dovecot-shared files, changing permissions and creating symlinks is a pain, especially when dealing with more than a handle of users. create_dovecot_shares helps. It modifies users home directories and Maildirs (permissions) for sharing via Dovecot, and creates symlinks into the Maildir you want the shares accessed from. There's even a restore option, to roll back any changes you made with a history of 10 runs." Uploaded to my CPAN directory (not indexed yet): http://search.cpan.org/~ghenry/ HTML Docs (embedded in program): http://www.suretecsystems.com/our_docs/create_dovecot_shares.html Syntax highlighted Code: http://www.suretecsystems.com/our_docs/create_dovecot_shares-code.html Actual Program (Please go to CPAN for latest version from now on): http://www.perl.me.uk/create_dovecot_shares Hope this helps someone out. If it does, maybe we should start a "contrib" section in the source? Many thanks, Gavin. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/

2 3

[Dovecot] Dovecot Authentication to Windows Domain Controller
by Jagga Soorma 26 May '06

26 May '06

Hey Guys, I am trying to convince my co-workers to move from Exchange 2003 to a unix implementation of sendmai/dovecot. They have a couple of concerns that I am sure can be resolved. First, is there a way for dovecot running on a linux server to authenticate a user to a windows 2003 domain controller? If so, then where can I get information on how to implement and test this feature? Also, do you guys know of any calender software that can be used with this implementation as well? Where users can maybe share their meetings? Any comments or suggestions would be grately appreciated. Thanks in advance, -Jagga

4 3

[Dovecot] Missing Mailboxes
by Jim 25 May '06

25 May '06

I upgraded from Fedora 4 to 5, which took me from dovecot .99 to 1.x. When I started up Thunderbird, I could not see any mailboxes other than Inbox. I am using Maildir with postfix. I re-installed .99, and all the mailboxes are back. I looked at the wiki on Missing Mailboxes, but I am not sure what I have to fix, and I do not really want to re-install the 1.x version and mess around, as I will mess up a number of other people. Clearly, I am not an expert, so if anyone can can help, I will be most appreciative! Jim

3 2

[Dovecot] Bug / Problem - Dovecot and Thunderbird
by wc_fbsd＠xxiii.com 25 May '06

25 May '06

Greetings, I've been running Dovecot for a couple years now. Currently 1.0.b8 on FreeBSD i386. I just switched to Mozilla Thunderbird 1.5.0.2 (windows) for an IMAP client, and am having some problems that appear to be at least partially attributable to Dovecot. After configuring the IMAP account, TB fetched the list of folders on the server, but was displaying several folders that had been deleted from the server months ago. When I tried to access or delete the folders from TB, it produced an error message (imap command failed, or something similar.) Some other folders had been moved from the root to sub-folders -- they still showed in the root, but not the sub-folder, thus were inaccessible. I looked all through the client's config files, but couldn't find any reference to them. From a shell on the server, I also verified they did not exist. I discovered they were still referenced in the .subscribe file, and had index files in .imap on the server. I deleted those, restarted the server processes, and refreshed the folders in TB, and the problem was resolved. But required manual intervention on the server. Not sure if this is a bug or just client issue, but since those files are maintained by Dovecot, I'm inclined to say "bug". Disclaimer: I know next to nothing about the internals of IMAP! -Thanks, Wayne

2 1

[Dovecot] LDAP, sieve, and virtual users
by Tracy R Reed 25 May '06

25 May '06

This seems to be a common topic but I haven't seen anyone ask this exact question and get a decent answer: I use virtual mailboxes with all of the db's in LDAP. Last night I upgraded to the latest CVS version of dovecot and dovecot-lda and got global sieve filtering working by setting the global_script_path to a sieve like /home/vmail/mydomain/sieve and it works great. Now I need to figure out how to get per-user sieve filtering to work. I googled on this and found: http://www.dovecot.org/list/dovecot/2005-August/008568.html How do I tell dovecot where the "virtual home directory" is? Yes, I could use /home/vmail/mydomain/user as my virtual home directory (that is where I originally tried to put .dovecot.sieve but it did not seem to work) but I don't see how I can tell dovecot about it. I see that in deliver.c #define SIEVE_SCRIPT_PATH "~/.dovecot.sieve" we hard code SIEVE_SCRIPT_PATH with the home dir location. Am I going to have to replace this with some code that generates an appropriate path for my system or is there a better way? And while I am here: Has any thought been given to being able to pull sieve scripts from LDAP? At the moment sieve really does not buy me much because the end users still do not have any way to edit their sieve files on the server (no shells and can't code sieve's language) but it would be nice if I could create a web interface somewhere which could generate basic filters from templates and store their sieve filters in LDAP so I didn't have to deal with somehow writing to files in their virtual home dirs on the mail server. I have found old conversations such as: http://www.mhonarc.org/archive/html/ietf-mta-filters/1999-06/msg00000.html but do not see where any standard way of doing this has come about. Or really even any implementations at all of sieve stored in LDAP. Thanks! -- Tracy R Reed http://ultraviolet.org A: Because we read from top to bottom, left to right Q: Why should I start my reply below the quoted text

3 2

[Dovecot] LDA Problem
by Alexander Dreweke 25 May '06

25 May '06

Hi I'm having a problem with dovecot deliver. I'm using a dovecot version 1.0.beta8. As I am using a chrooted (/var/spool/postfix) postfix (version: 2.2.10) with cyrus-sasl authentification (all working). Postfix config is changed according to the http://wiki.dovecot.org/LDA: main.cf: mailbox_command = dovecot master.cf: dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -d ${recipient} I have adopted the dovecot.conf also according to http://wiki.dovecot.org/LDA but changed the auth_socket_path to point into the chroot of postfix. I have attached my dovecot.conf at the end of this email. The mails that are sent to the machine are not delivered at all. In the mail-logfile I can see the following error message for each mail that can't be deliverd: postfix/pipe[21344]: BC254154E5BD: to=<root>, orig_to=<root>, relay=dovecot, delay=0, status=bounced (user unknown) I've already search the net but could not find any clue how to solve this. Can anyone give me a hint what to do? cu Alexander dovecot.conf: =========================================================== protocols = imap imaps listen = localhost ssl_listen = * first_valid_uid = 1000 first_valid_gid = 1000 mail_extra_groups = mail mail_save_crlf = no default_mail_env = maildir:/var/mail/%u protocol imap { } protocol lda { postmaster_address = postmaster(a)domain.com auth_socket_path = /var/spool/postfix/var/run/dovecot-auth-master } log_timestamp = "%Y-%m-%d %H:%M:%S " ssl_disable = no ssl_cert_file = /etc/ssl/certs/executor.pem ssl_key_file = /etc/ssl/private/executor.key ssl_cipher_list = HIGH:MEDIUM auth default { mechanisms = plain passdb pam { } userdb passwd { } user = root socket listen { master { path = /var/spool/postfix/var/run/dovecot-auth-master mode = 0660 user = dovecot group = mail } client { path = /var/spool/postfix/var/run/dovecot-auth-client mode = 0660 user = dovecot group = mail } } } } ===========================================================

3 8

[Dovecot] Client workaround?
by David King 24 May '06

24 May '06

I have a phone (LG CU320) with a built-in IMAP client. However, it has some issues. For one, the phone crashes if there are greater than some-as-of-yet-determined-number-of folders. That can't be worked around at the server, but this one can: After a long session of staring at tcpdump, it appears that when it logs in it does so like this: a001 LOGIN "username" myPassword This works unless one has funny characters in their password (which is usually the case). Why on earth it would put quotes around the username and NOT the password is beyond me (which is more likely to have special characters?) It does seem to check the CAPABILITY line to see what authentication is supported, because if I try it with a different (cyrus) server, instead of using LOGIN to authenticate, it uses AUTHENTICATE Dovecot presents that it supports AUTH=PLAIN, whereas Cyrus presents that it supports AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5 AUTH=GSSAPI. This is presumably because Dovecot prefers STARTTLS or simple IMAPS for authentication. So as I see it, getting this phone work with Dovecot and a password with special characters can take one of two forms (either of which I'll be happy to code): 1. Somehow getting Dovecot to look at the second token as if it *were* quoted. 2. Getting Dovecot to present and interpret AUTH=LOGIN (i. e. AUTHENTICATE), which appears to cause the phone to properly escape the password The first one really only fixes certain special characters, and leaves others still broken (like quotes themselves), and in fact violates IMAP4rev1. So I'd just make and run a local patch The second one fixes the problem more cleanly, and my code can be reused and submitted to the Dovecot commiters. So my question to anyone familiar with the codebase is, which of these options is more likely to work, and would the Dovecot team be interested in patches for either one?

2 2

[Dovecot] Re: Apple Mail and too many open files?
by Roger Weeks 24 May '06

24 May '06

On May 24, 2006, at 10:29 AM, Les Mikesell wrote: > On Wed, 2006-05-24 at 11:51, Roger Weeks wrote: > >> If you're running filesharing of ANY kind on your mail server, you >> should stop it. Mail servers should run mail, not run AFP and Samba >> and other things. > > Why? A robust OS can do many things at once up to its resource > limits. Sure it can. But in my experience, it's bad practice, both in the enterprise and in the service provider world. When your box gets hit with a denial of service attack, or 500 users decide to copy the latest cool video to their home dir, and it's also your mail and web server, all of your services go to hell. When you have a box dedicated to specific services, you can upgrade that box without affecting all of your services. If the box dies, not all of your services die. -- Roger J. Weeks Systems & Network Administrator Mendocino Community Network

1 0

[Dovecot] Re: Apple Mail and too many open files?
by Roger Weeks 24 May '06

24 May '06

> Date: Wed, 24 May 2006 19:55:41 +1000 > From: Rob Middleton <robm-dovecot(a)centenary.org.au> > Subject: Re: [Dovecot] Apple Mail and too many open files? > To: Alan Schmitt <alan.schmitt(a)polytechnique.org> > Cc: Dovecot List Mailing <dovecot(a)dovecot.org> > > OS X is configured by default with these numbers way too low. OS X has > some really dumb processes like AFP that will chew through all of your > open files and not cope cleanly with running out of allowable/ > available > filehandles. If you're running filesharing of ANY kind on your mail server, you should stop it. Mail servers should run mail, not run AFP and Samba and other things. > OS X has a DoS vulnerability in the way ssh processes are spawned and > the ssh interaction with their PAM modules (it exhibits with the > symptoms you have described). Have you really got port 22 blocked from > the outside world?? Have you tested that? Consider running ssh on an > alternate port if running OS X server (as Apple's GUI config tools for > the firewall don't always allow you to block port 22). This is a very simple problem to fix, and doesn't require blocking port 22. Set up /etc/hosts.allow: sshd : 192.169.1.0/255.255.255.0 sshd-keygen-wrapper : 192.168.1.0/255.255.255.0 Set up /etc/hosts.deny: ALL: ALL:deny Tcpwrappers will now take care of you, and any DOS attacks you get will simply be dropped. > Do consider running your mail services off a machine that is not a Mac > OS X server. OS X server is merely OS X client/workstation with a > pretty > management utility for some 'nix services. It is not stable under high > load -- and it is not even stable under moderate load without numerous > performance tweaks (it doesn't cope at all well if the disk queue goes > up a touch or loadavg is at all interesting - ie it degrades poorly > under load). While some of this statement may be accurate, there's a lot of FUD here too. Both OS X and OS X server use the same kernel, it is true. However, these operating systems are fast and reliable. We ran our mail server for a couple of years on OS X with exim and courier-imap, and the only reason we did stop and move to Linux is because we needed a bigger solution and intel-based hardware was cheaper than a bunch of XServes. And I will challenge your statement about high load. We have two web servers that average betwen 5 and 10 mbits of constant web load, running on OS X Server and XServes. The average load on these boxes is something like 0.20. Roger Weeks

2 1

Fwd: Re[4]: [Dovecot] dovecot can't start!
by Oleg D. 24 May '06

24 May '06

Hello Chris, Wednesday, May 24, 2006, 8:36:00 PM, you wrote: CH> Quoting "Oleg D." <dzoleg(a)rsute.ru>: >> MB> Hmmm... I was seeing a problem rather like this with 1.0beta8 >> under Solaris >> MB> with Sun's compiler: only it was with the IMAP protocol rather than POP. >> >> MB> The problem there was an assumption Tio had made that everyone >> was using a >> MB> C99-compatible compiler. Apparently this handles some aspects of >> variable >> MB> initialisation differently from earlier C compilers. >> >> MB> In my case adding a command-line option to the C compiler to flip it into >> MB> C99 mode seemed to solve the problem. The option for our compiler was >> MB> "-xc99" -- however if your compiler has such an option it may have a >> MB> different name. If you check the manual page for your C compiler you may >> MB> find an equivalent option to try. >> >> MB> However another solution was provided by Timo in the form of a >> simple patch >> MB> that made changes to a couple of source files. I hope Timo doesn't mind: >> MB> I'm re-sending his patch as an attachment to this message as it is tiny. >> MB> You could try applying it and rebuilding Dovecot. >> >> MB> Cheers, >> MB> Mike Brudenell >> >> But I use FreeBSD 4.11-RELEASE-p15 with native compiler. >> Really nobody has this problem on freebsd? >> >> And the main - Why I can't start dovecot without SSL :) >> Why I see in log "pop3-login: BUG: SSL initialization parameters not >> given while they should have been" >> even if I have "ssl_disable = yes" in dovecot.conf >> 1.0b3 works fine. >> This problem is main for me >> because I don't want to use SSL. CH> I run FreeBSD here, and my hunch is that SSL (or some form) was CH> compiled it. Which would help explain the errors you describe. CH> What "knobs" did you use when you built it? Did you simply take CH> the default without examining the Makefile? My hunch is that if CH> you take a closer look at how it was built and installed; you'll CH> find some form of SSL/ encryption was built into it, and you'll CH> either have to: cd /usr/ports/mail/dovecot; make deinstall; CH> tweak the Makefile to your needs; make reinstall. Or figure out CH> how to utilize the security method that was built in by default. CH> Perhaps SASL2, or GSSAPI, as I see they're options in the Makefile. CH> Best wishes. I hope this helps. CH> --Chris H. I tried to add --without-ssl in port's Makefile and compile dovecot without ssl. But I have all the same seen "pop3-login: BUG: SSL initialization parameters not given while they should have been" When I have set "ssl_disable = no" I saw another error: "Error: SSL support not compiled in but ssl_disable=no" WITHOUT_KQUEUE=true WITHOUT_SASL2=true WITHOUT_GSSAPI=true WITHOUT_VPOPMAIL=true WITHOUT_LDAP=true WITHOUT_PGSQL=true WITH_MYSQL=true WITHOUT_SQLITE=true only mysql is enable -- Best regards, Oleg mailto:dzoleg@rsute.ru

1 0

Re[2]: Fwd: Re[2]: [Dovecot] dovecot can't start!
by Oleg D. 24 May '06

24 May '06

Hello Chris, Tuesday, May 23, 2006, 2:13:24 PM, you wrote: CW> Oleg D. wrote: >> >> >> BTW >> If I have enable SSL and set "protocols = pop3s" only >> I see "Fatal: Protocol pop3s given more than once" >> >> CW> That's odd. It looks like it's deducing you want POP3 from somewhere CW> else. Can you send us your dovecot.conf file, or output of "dovecot -n"? CW> Chris I set "protocols = pop3s" for testing vpn# dovecot -n protocols: pop3s disable_plaintext_auth: no verbose_ssl: yes login_dir: /var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/pop3-login login_process_size: 64 verbose_proctitle: yes first_valid_gid: 0 mail_extra_groups: mail default_mail_env: mbox:/var/mail/%u mail_executable: /usr/local/libexec/dovecot/pop3 mail_plugin_dir: /usr/local/lib/dovecot/pop3 pop3_uidl_format: %08Xu%08Xv pop3_client_workarounds: outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login digest-md5 cram-md5 apop default_realm: xxxxx.xx verbose: yes debug: yes debug_passwords: yes passdb: driver: pam passdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: passwd userdb: driver: sql args: /usr/local/etc/dovecot-sql.conf But I see "Fatal: Protocol pop3s given more than once" -- Best regards, Oleg mailto:dzoleg@rsute.ru

2 2

[Dovecot] Busy, again
by Timo Sirainen 24 May '06

24 May '06

Just a note to people if you're wondering why I'm not replying to most of my mails: I'm trying to get into university to start stydying cellular biology (so I'm applying to biochemistry and biotechnology). Their entrance exams are next wednesday, so I'm trying to use most of my time left to study for them (and also do some work..). I don't know much about the subject, so I really need to study for them. :) Then again, if I don't pass, my fallback plan is to go in via computer science and try again next year. Hopefully they allow taking the same bio-classes even if it's not my major.

7 10

[Dovecot] Two INBOX locations
by arilinux 24 May '06

24 May '06

Hello I'm running dovecot v1.0.beta3 on a fedora 4 machine. I have two kinds of clients: - first use IMAP and receive their mails (maildir) in /home/%u/mail - second use POP and receive their mails (mbox) in /var/mail/%u Problem is when I want to provide an access for second with squirrelmail which use IMAP, as the INBOX is in /var/mail/%u and IMAP settings tell that INBOX is in /home/%u/mail, they can't view their emails. Is there a way to tell to dovecot to search IMAP mails both in /home/%u/mail and in /var/mail/%u Thanks > Emmanuel RIZZI > ERILOG > 103 rue Beaupoil > 39210 DOMBLANS > Tel: 03 84 44 66 66 > Fax: 03 84 44 62 00 > > >

2 1

Fwd: Re[2]: [Dovecot] dovecot can't start!
by Oleg D. 24 May '06

24 May '06

Hello Chris, Tuesday, May 23, 2006, 1:13:17 PM, you wrote: CW> Oleg D. wrote: >> Hello HenkJan, >> >> >> Tuesday, May 23, 2006, 11:30:37 AM, you wrote: >> >> >> >>>do you have "disable_plaintext_auth = no" in dovecot.conf? >> >> Yes. >> >> >>>"auth_verbose = yes" and "auth_debug = yes" in dovecot.conf for more logging >> >> Yes. >> >> >>>what happens if you telnet to your dovecotserver? >> >> I have already tried it many times. >> >> And I don't see any prompt. >> >> >> In log: >> >> "dovecot: Dovecot v1.0.beta8 starting up >> >> dovecot: Generating Diffie-Hellman parameters for the first time. This may take >> a while.. >> >> dovecot: auth-worker(default): mysql: Connected to /tmp/mysql.sock (mail)" >> >> >> after telnet: >> >> "dovecot: pop3-login: Waiting for SSL parameter file ssl-parameters.dat" >> >> and nothing else >> >> >> I found ssl-parameters.dat.tmp in /var/run/dovecot/login >> >> >> After starting/stopping dovecot several times ssl-parameters.dat is appear in >> /var/run/dovecot/login >> >> But nothing again >> >> >> OK. I try all of this to start dovecot anyway. >> >> But I don't want to use SSL! >> >> >> THE MAIN QUESTION: >> >> Why I see "pop3-login: BUG: SSL initialization parameters not given while they >> should have been" >> >> even if I have "ssl_disable = yes" in dovecot.conf >> >> >> 1.0b3 works fine. >> >> >> -- >> >> Best regards, >> >> Oleg mailto:dzoleg@rsute.ru >> CW> What do you have as your "protocols" line? Make sure there's no "imaps" CW> or "pop3s". Also, make sure you don't have any "ssl_listen" options set. CW> Also, do you ever get the "SSL parameters regeneration completed" line CW> in your log file (it can take several minutes on a slow machine)? If CW> it's decided (however wrongly) to do the SSL paramters generation, you CW> won't be able to login until it's finished. CW> Chris "protocols = pop3" only >"ssl_listen" options set dont't set. BTW If I have enable SSL and set "protocols = pop3s" only I see "Fatal: Protocol pop3s given more than once" -- Best regards, Oleg mailto:dzoleg@rsute.ru

2 1

[Dovecot] Thunderbird 1.5 and messages with no Date: header
by grant beattie 24 May '06

24 May '06

hi, some of my Thunderbird users have a minor but annoying problem with messages that have no Date: header. these clients use BODY[HEADER.FIELDS (Date)] as the date for messages. when a message has no Date: header, they display the date as 01/01/1970 10:00:00 because Dovecot returns empty string. would it be possible for Dovecot to return INTERNALDATE instead, for messages that contain no Date: header? I know this is not *technically* correct, but it's a reasonable best-guess, and better than returning nothing. perhaps as a client-workaround? I vaguely recalled a previous message about this, but I couldn't find it today. grant.

6 10

[Dovecot] Shared folder (namespace) access hanging
by Jeff Turner 24 May '06

24 May '06

Hi, I'm using Dovecot 1.0-b8. We use a shared 'support' account for incoming support mail. For security reasons we want to instead have everyone with their own account, accessing a shared 'support' folder. So I've configured dovecot with a public 'Support' namespace: default_mail_env = maildir:/imap/mailboxes/%u namespace private { separator = / prefix = inbox = yes } namespace public { separator = / location = maildir:/imap/mailboxes/support:CONTROL=/imap/mailboxes/%u/shared-settings/support/control prefix = Support/ hidden = no } So now: - User 'support' logs in (this is the user whose folder is being shared). Dovecot creates a dovecot-uidlist file: root@redback:/imap/mailboxes/support/.INBOX.test# cat dovecot-uidlist 1 1147757548 9 1 1147755677.P8078Q3M183587.redback.sydney.atlassian.com:2,RSace 2 1147755677.P8078Q2M183587.redback.sydney.atlassian.com:2,abcdf 3 1147755677.P8078Q1M183587.redback.sydney.atlassian.com:2,Sabcd 4 1147756077.P8078Q8.redback.sydney.atlassian.com:2,Sabcd 5 1147756440.P8461Q3M643698.redback.sydney.atlassian.com:2,Sa 6 1147756440.P8461Q2M643698.redback.sydney.atlassian.com:2,Sa 7 1147756440.P8461Q1M643698.redback.sydney.atlassian.com:2,Sa 8 1147756440.P8461Q0M643698.redback.sydney.atlassian.com:2,Sa root@redback:/imap/mailboxes/support/.INBOX.test# ls -la total 60 drwxrwx--- 5 jturner mail 4096 May 16 15:32 . drwxrwxrwx 59 support mail 4096 May 16 15:31 .. drwxrwx--- 2 jturner mail 4096 May 16 15:18 cur -rw-rw-rw- 1 support mail 448 May 16 15:32 dovecot.index -rw-rw-rw- 1 support mail 21504 May 16 15:32 dovecot.index.cache -rw-rw-rw- 1 support mail 512 May 16 15:32 dovecot.index.log -rw------- 1 support mail 72 May 16 15:28 dovecot-keywords -rw-rw-rw- 1 jturner mail 0 May 16 14:52 dovecot-shared -rw-rw-rw- 1 support mail 516 May 16 15:32 dovecot-uidlist drwxrwx--- 2 jturner mail 4096 May 16 15:01 new drwxrwx--- 2 jturner mail 4096 May 16 15:14 tmp root@redback:/imap/mailboxes/support/.INBOX.test# - If I now log in as 'jturner' and subscribe to this folder, there appears to be nothing in the 'test' folder. On disk, the folder subscription is registered but the test folder's CONTROL directory is empty: # ls /imap/mailboxes/jturner/shared-settings/support/control/ subscriptions # cat /imap/mailboxes/jturner/shared-settings/support/control/subscriptions INBOX.test # ls /imap/mailboxes/jturner/shared-settings/support/control/.INBOX.test/ # Restarting dovecot and Thunderbird makes no difference. However, if I delete dovecot.index and dovecot.index.log from /imap/mailboxes/support/.INBOX.test/, then suddenly it works. User 'jturner' can view the folder contents, and a uidlist file for them appears: # cat /imap/mailboxes/jturner/shared-settings/support/control/.INBOX.test/dovecot-uidlist 1 1147758095 9 1 1147755677.P8078Q3M183587.redback.sydney.atlassian.com:2,RSace 2 1147755677.P8078Q2M183587.redback.sydney.atlassian.com:2,abcdf 3 1147755677.P8078Q1M183587.redback.sydney.atlassian.com:2,Sabcd 4 1147756077.P8078Q8.redback.sydney.atlassian.com:2,Sabcd 5 1147756440.P8461Q3M643698.redback.sydney.atlassian.com:2,Sa 6 1147756440.P8461Q2M643698.redback.sydney.atlassian.com:2,Sa 7 1147756440.P8461Q1M643698.redback.sydney.atlassian.com:2,Sa 8 1147756440.P8461Q0M643698.redback.sydney.atlassian.com:2,Sa Although the contents is the same (1-8), the UIDVALIDITY at the top is different to that for the 'support' user: # head -1 /imap/mailboxes/jturner/shared-settings/support/control/.INBOX.test/dovecot-uidlist 1 1147758095 9 # head -1 /imap/mailboxes/support/.INBOX.test/dovecot-uidlist 1 1147757548 9 and now if I log back in as 'support' and access the folder, dovecot complains: dovecot: May 16 15:47:05 Error: IMAP(support): Corrupted index cache file /imap/mailboxes/support/.INBOX.test/dovecot.index.cache: indexid changed Switching back and forth results in various errors: dovecot: May 16 15:48:04 Error: IMAP(support): Corrupted transaction log file /imap/mailboxes/support/.INBOX.test/dovecot.index.log: end_offset (656) > current sync_offset (512) dovecot: May 16 15:48:04 Error: IMAP(support): Corrupted transaction log file /imap/mailboxes/support/.INBOX.test/dovecot.index.log: invalid indexid (1147758095 != 1147757548) dovecot: May 16 15:48:04 Error: IMAP(support): Corrupted transaction log file /imap/mailboxes/support/.INBOX.test/dovecot.index.log: invalid new transaction log sequence (2 >= 2) dovecot: May 16 15:48:04 Error: IMAP(support): Lost transaction log file /imap/mailboxes/support/.INBOX.test/dovecot.index.log seq 1 ------------------------------ In the wild, I've seen frequent occurrences of this error, where dovecot seems to switch between the UIDVALIDITY of 'support' and a user's dovecot-uidlists: dovecot: May 16 13:56:28 Error: IMAP(jturner): Maildir /imap/mailboxes/support/.INBOX sync: UIDVALIDITY changed (1147751603 -> 1147686345) and here's it toggling back from 'support' to jturner's dovecot-uidlist uidvalidity: dovecot: May 16 14:16:04 Error: IMAP(support): Maildir /imap/mailboxes/support/.INBOX sync: UIDVALIDITY changed (1147752716 -> 1147751603) I've also seen plenty of processes being killed, seemingly at random, about 3 or 4 a minute: # cat /usr/local/logs/dovecot | grep killed.wit ... dovecot: May 16 12:00:16 Error: child 32706 (imap) killed with signal 6 dovecot: May 16 12:00:16 Error: child 32649 (imap) killed with signal 14 dovecot: May 16 12:00:45 Error: child 32412 (imap) killed with signal 6 dovecot: May 16 12:01:02 Error: child 32702 (imap) killed with signal 6 dovecot: May 16 12:01:02 Error: child 368 (imap) killed with signal 6 dovecot: May 16 12:01:02 Error: child 357 (imap) killed with signal 6 dovecot: May 16 12:01:16 Error: child 383 (imap) killed with signal 6 dovecot: May 16 12:02:26 Error: child 32297 (imap) killed with signal 6 ... So I'm confused. Am I doing something stupid? Why is there a common .cache file (it doesn't get created in the CONTROL dir), but not a common dovecot-uidlists? Is anyone actually *using* shared folders? :) Thanks, Jeff

2 2

[Dovecot] IMAP Folder Creation
by Zach Hobbs 23 May '06

23 May '06

I am using Maildir with dovecot 0.99.14-1 and postfix. My IMAP server was working where I could create a folder in Kmail or Thunderbird and specify wether the folder was to hold messages or folders. Then something changed, and I lost all my folders that contained sub-folders. And now I cannot create folders that contain subfolders (Kmail doesn't event give the option anymore). I can create folders and put messages in them, but I cannot create subfolders in the newly created folders. The Maildir is owned by the user logging in. Do I need to do anything with permissions, or are there settings to allow/disallow this? I've been reading through everything I could find with dovecot and folders in the message, and I can't come up with anything. Here's an example file structure (logging in as "zta-tech_zach"): Maildir# ls -lA -R .: total 32 drwx------ 2 zta-tech_zach web1 4096 2006-05-22 21:41 cur -rw------- 1 zta-tech_zach web1 5 2006-05-22 21:16 .customflags -rw------- 1 zta-tech_zach web1 52 2006-05-22 21:40 dovecot-uidlist drwx------ 2 zta-tech_zach web1 4096 2006-05-22 21:16 .INBOX drwx------ 2 zta-tech_zach web1 4096 2006-05-22 21:40 new -rw------- 1 zta-tech_zach web1 6 2006-05-22 21:41 .subscriptions drwx------ 2 zta-tech_zach web1 4096 2006-05-22 21:40 tmp drwx------ 5 zta-tech_zach web1 4096 2006-05-22 21:25 .Trash ./cur: total 20 -rw------- 1 zta-tech_zach web1 16591 2006-05-22 21:40 1148352021.3157_1.www.zta-tech.com:2,S ./.INBOX: total 24 -rw------- 1 zta-tech_zach web1 1608 2006-05-22 21:41 .imap.index -rw------- 1 zta-tech_zach web1 10264 2006-05-22 21:16 .imap.index.data -rw------- 1 zta-tech_zach web1 2576 2006-05-22 21:16 .imap.index.log -rw------- 1 zta-tech_zach web1 1560 2006-05-22 21:16 .imap.index.tree ./new: total 0 ./tmp: total 0 ./.Trash: total 40 drwx------ 2 zta-tech_zach web1 4096 2006-05-22 21:24 cur -rw------- 1 zta-tech_zach web1 5 2006-05-22 21:25 .customflags -rw------- 1 zta-tech_zach web1 1608 2006-05-22 21:24 .imap.index -rw------- 1 zta-tech_zach web1 10264 2006-05-22 21:25 .imap.index.data -rw------- 1 zta-tech_zach web1 2576 2006-05-22 21:25 .imap.index.log -rw------- 1 zta-tech_zach web1 1560 2006-05-22 21:25 .imap.index.tree drwx------ 2 zta-tech_zach web1 4096 2006-05-22 21:24 new drwx------ 2 zta-tech_zach web1 4096 2006-05-22 21:24 tmp ./.Trash/cur: total 0 ./.Trash/new: total 0 ./.Trash/tmp: total 0 Thanks, Zach

1 1

Fwd: Re[2]: [Dovecot] dovecot can't start!
by Oleg D. 23 May '06

23 May '06

CW> Also, do you ever get the "SSL parameters regeneration completed" line CW> in your log file (it can take several minutes on a slow machine)? If CW> it's decided (however wrongly) to do the SSL paramters generation, you CW> won't be able to login until it's finished. CW> Chris After enable SSL and start dovecot after 2 munutes I see in log: May 23 13:28:43 vpn dovecot: Dovecot v1.0.beta8 starting up May 23 13:28:43 vpn dovecot: Generating Diffie-Hellman parameters for the first time. This may take a while.. May 23 13:28:45 vpn dovecot: auth-worker(default): mysql: Connected to /tmp/mysql.sock (mail) May 23 13:30:48 vpn dovecot: ssl-build-param: SSL parameters regeneration completed after telnet I don't see any prompt and then I see in log: May 23 13:31:55 vpn dovecot: pop3-login: Disconnected: Inactivity: rip=xx.xx.xx.xx, lip=xx.xx.xx.xx, TLS May 23 13:32:08 vpn dovecot: pop3-login: SSL_accept() syscall failed: EOF [xx.xx.xx.xx] -- Best regards, Oleg mailto:dzoleg@rsute.ru

1 0

[Dovecot] Dovecot IMAP not putting size in maildir filenames
by Bill Boebel 23 May '06

23 May '06

I notice that when you move a message from one maildir folder to another, Dovecot drops the size information ("S=") from the filename. Dovecot also does not add the size info to filenames after it gets it via stat(). Shouldn't Dovecot add the size info to the filename so that "maildirsize" recalculations are fast? Bill

4 5

[Dovecot] mountpoint_get broke the quota plugin
by Bill Boebel 23 May '06

23 May '06

Looks like the new mountpoint_get code broke the quota plugin. I am getting this error when trying to start dovecot, using last night's CVS on Red Hat ES3: # service dovecot start Starting Dovecot Imap: Edlopen(/usr/lib/dovecot/imap/lib01_quota_plugin.so) failed: /usr/lib/dovecot/imap/lib01_quota_plugin.so: undefined symbol: mountpoint_get Error: imap dump-capability process returned 22784 [FAILED] Bill

3 2

[Dovecot] Fatal: sigaction(SIGRTMIN) failed: Invalid argument
by Breno Jacinto Duarte da Costa 23 May '06

23 May '06

Hello, I just download dovecot 1.0b8 and compiled and installed from sources. After setting some default configurations, here's what I get: [root@ba root]# dovecot [root@ba root]# Fatal: sigaction(SIGRTMIN) failed: Invalid argument Here`s my configuration: # Base directory where to store runtime data. base_dir = /var/run/dovecot/ # Protocols we want to be serving: # imap imaps pop3 pop3s protocols = imap protocol imap { listen = *:10143 # ssl_listen = *:10943 # .. } # Disable SSL/TLS support. ssl_disable = yes # Use this logfile instead of syslog(). /dev/stderr can be used if you want to # use stderr for logging (ONLY /dev/stderr - otherwise it is closed). log_path = /dev/stderr # For informational messages, use this logfile instead of the default info_log_path = /var/log/dovecot-info.log # everything in this directory is deleted when Dovecot is started. login_dir = /var/run/dovecot/login # default_mail_env = maildir:/var/mail/%1u/%u/Maildir default_mail_env = mbox:/home/webmail/:INBOX=/var/spool/mail/%u auth default { # Space separated list of wanted authentication mechanisms: # plain login digest-md5 cram-md5 ntlm rpa apop anonymous gssapi mechanisms = plain # /etc/passwd or similar, using getpwnam() # In many systems nowadays this uses Name Service Switch, which is # configured in /etc/nsswitch.conf. userdb passwd { } user = root } This is really weird. I`ve installed it on another server, which has the same configuration and it shows the same error messsage. BTW, both servers are DELL PowerEdge 2600, running Conectiva 9 (outdated... but I`m in a production environment and changing is not trivial). thanks in advance for any help. On 5/22/06, David King <dking(a)ketralnis.com> wrote: > > I`ve tried to run dovecot many times in my system (Conectiva Linux > > 9) and was unable to do so. For some reason it gives this message and > > quits - never runs. > > What message is that, exactly, that it is giving you before quitting? > -- .''`. -- Breno Jacinto : :´` : -- breno /at/ freeunix dot com dot br : ' ' : -- 88AE 3F43 7110 57F6 A206 `. `'` -- D116 02CA 02F4 803D 4294 `-- -- Debian GNU/Linux - The Universal OS -- .''`. -- Breno Jacinto : :´` : -- breno /at/ freeunix dot com dot br : ' ' : -- 88AE 3F43 7110 57F6 A206 `. `'` -- D116 02CA 02F4 803D 4294 `-- -- Debian GNU/Linux - The Universal OS

1 0

[Dovecot] Fatal: sigaction(SIGRTMIN) failed: Invalid argument
by Breno Jacinto Duarte da Costa 22 May '06

22 May '06

Hello all, I`ve tried to run dovecot many times in my system (Conectiva Linux 9) and was unable to do so. For some reason it gives this message and quits - never runs. My system: Linux ba.gazetaweb.com 2.4.21-28872cl #1 Sex Mar 21 22:02:49 BRT 2003 i686 unknown I`m migrating from UW-IMAPD to dovecot. I've compiled it from sources, using default configurations. Any help would be appreciated thanks, -- .''`. -- Breno Jacinto : :´` : -- breno /at/ freeunix dot com dot br : ' ' : -- 88AE 3F43 7110 57F6 A206 `. `'` -- D116 02CA 02F4 803D 4294 `-- -- Debian GNU/Linux - The Universal OS

1 0

Re: [Dovecot] Dovecot LDA troubles (input in flex scanner failed)
by Magnus Granberg 21 May '06

21 May '06

Magnus Granberg wrote: > May 20 17:32:59 micha postfix/pipe[15149]: EE314140B9: to=<blaha at > blrja.blaa>, > relay=dovecot, delay=0.13, delays=0.07/0.04/0/0.4, dsn=5.3.0 status=bounced > (Command died > with status 2: "/usr/libexec/dovecot/deliver". Command output: input in flex > scanner failed ) Anything in .dovecot.sieve.err? Cheers, -jkt Can't even get the error file Magnus Granberg

2 1

[Dovecot] Dovecot LDA troubles (input in flex scanner failed)
by Magnus Granberg 20 May '06

20 May '06

Hi I have the same error as Mark. May 20 17:32:59 micha postfix/pipe[15149]: EE314140B9: to=<blaha at blrja.blaa>, relay=dovecot, delay=0.13, delays=0.07/0.04/0/0.4, dsn=5.3.0 status=bounced (Command died with status 2: "/usr/libexec/dovecot/deliver". Command output: input in flex scanner failed ) Runig Dovecot 1.0 beta8, postfix 2.3, dovecot-lda 20060513 and flex 2.5.33 on Gentoo It have to do somting with libsieve and flex? Lock in Addr-lex.c and sieve-lex.c. #ifndef YY_INPUT........ Mark did you find a fix for it? Magnus Granberg

2 1

[Dovecot] two concurrent dovecots
by Alexey Koptsevich 20 May '06

20 May '06

Hello, Is it safe to have two concurrent dovecot processes to access the same maildir? I have a stock RHEL version (0.99.11) used by users, but I also want to test 1.0-beta together wth postfix for SASL. Is it safe to access the same maildir concurrently with both dovecots (say, the old one via webmail and the new one via remote client)? Thanks, Alex

1 0

[Dovecot] Dovecot/LDAP problem
by Burton Simmons 19 May '06

19 May '06

Dear Dovecot mailing list people - What I'm trying to do is use Postfix (with virtual users) and a POP3 server (we don't want IMAP - don't ask) to work against our new Active Directory servers that will be coming soon. Before we roll anything out we're testing it in the lab. Here's what we've got: x86 server running Red Hat Enterprise Linux 3 Postfix 2.0.16 Dovecot-1.0 Beta7 Windows 2003 server running Active Directory Windows XP client running Outlook Eventually, we'd like the clients to be joined to the AD domain and that's where we'll store ALL the user information. The email will come in on our postfix server (which uses virtual users) and the clients will check it passing their email username and domain password. The catch is that USERS CAN BE ANYWHERE IN THE DIRECTORY. (I apologize for the caps, I wanted to make sure that phrase wasn't glossed over.) So, for instance: > DC=local | >DC=domain | >OU=group1 | | | > CN=user1 | > CN=user2 | >OU=group2 | | | > CN=user3 | > CN=user4 | >OU=group3 | >CN=user5 The path to user1 is therefore CN=user1,OU=group1,DC=domain,DC=local (at least in the AD world.) The path to user3 is CN=user3,OU=group2,DC=domain,DC=local. So to search for users I would think (because this is how Postfix does it) that I could have the search base as DC=domain,DC=local and then have scope = subtree. IT DOESN'T WORK. (Again, caps used for emphasis only.) Here's the meat of the dovecot-ldap.conf file I'm using: hosts = 192.168.x.x dn = cn=Administrator,cn=Users,DC=domain,DC=local dnpass = xxxxx auth_bind = yes ldap_version = 3 base = DC=domain,DC=local scope = subtree user_attrs = sAMAccountName,mail,,,, user_filter = (&(objectClass=organizationalPerson)(sAMAccountName=%u)) pass_filter = (&(objectClass=organizationalPerson)(sAMAccountName=%u)) user_global_uid = 44 user_global_gid = 44 --- Interestingly, if I simply point the base to the actual user's container, it works just fine. The idea works from Postfix, but from dovecot it doesn't actually seem to search the tree. --- Here's some of the output from the log files. dovecot: May 17 15:35:52 Info: auth(default): client in: AUTH 1 PLAIN service=POP3 lip= 192.168.0.199 rip=192.168.0.195 resp=AGp1c2VyAHBhc3N3b3Jk dovecot: May 17 15:35:52 Info: auth(default): ldap(user1, 192.168.0.195): bind search: base=DC=LAB,DC=local filter=(&(objectClass=organizationalPerson)(sAMAccountName=user1)) dovecot: May 17 15:36:52 Info: pop3-login: Disconnected: Inactivity: method=PLAIN, rip= 192.168.90.195, lip=192.168.90.199 dovecot: May 17 15:37:52 Info: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=192.168.0.199 rip=192.168.0.195 resp=AGp1c2VyAHBhc3N3b3Jk dovecot: May 17 15:37:52 Info: auth(default): ldap(user1,192.168.0.195): bind search: base=DC=domain,DC=local filter=(&(objectClass=organizationalPerson)(sAMAccountName=user1)) dovecot: May 17 15:37:54 Info: auth(default): client out: OK 1 user=user1 dovecot: May 17 15:37:54 Info: auth(default): client out: OK 1 user=user1 dovecot: May 17 15:37:54 Info: auth(default): master in: REQUEST 1 25233 1 dovecot: May 17 15:37:54 Info: auth(default): ldap(user1,192.168.0.195): base=DC=LAB,DC=local scope=subtree filter=(&(objectClass=organizationalPerson)(sAMAccountName=user1)) fields=sAMAccountName,mail,,,, dovecot: May 17 15:38:52 Info: pop3-login: Disconnected: Inactivity: user=<user1>, method=PLAIN, rip=192.168.0.195, lip=192.168.0.199 Can anybody offer any insight? Pretty please? - Burton

2 4

[Dovecot] configure change for 1.0.beta8
by Tomi Vainio 19 May '06

19 May '06

Hi, I'm trying to compile dovecot under Solaris 10 with native Mysql support. Couple changes are needed before configure can detect and compile mysql support. Native Solaris Mysql is installed under /usr/sfw directory. Configure can't find libraries and when these are found -R runtime path is needed for linking. Also if library name is given before library path it can't find it. These changes are needed for configure script line 29533 for i in /usr /usr/local /usr/local/mysql /usr/sfw; do line 29548 LIBS="$LIBS -L$MYSQL_LIBDIR -R$MYSQL_LIBDIR" line 29559 LIBS="$LIBS -lmysqlclient" line 29770 SQL_LIBS="$SQL_LIBS -L$MYSQL_LIBDIR -R$MYSQL_LIBDIR" line 29780 LIBS="$LIBS -lmysqlclient" Tomppa

3 2

[Dovecot] Outlook Express / POP Problem?
by Marc Perkel 19 May '06

19 May '06

I have a new user who is using Outlook Express with POP and seems to be having a problem downloading messages with attachments. Watching the logs it starts to download and then disconnects. When I use squirrelmail which is IMAP it all looks good so it's not a corrupt mailbox. I'm running Beta8 and using MBOX files. The problem seems to be related to POP and/or Outlook. Has anyone run into this before?

1 0

RE: [Dovecot] Bug: maidirsize double counting moved messages
by Bill Boebel 18 May '06

18 May '06

On Fri, April 21, 2006 15:01, Bill Boebel <bill(a)webmail.us> said: > The maildirsize file is double counting messages when moving them from > folder to folder when "maildir_copy_with_hardlinks = no": > > When I change "maildir_copy_with_hardlinks" to "yes", this problem only > occurs when moving in and out of the INBOX, but not when moving from > subfolder to subfolder: Well... I don't think this is the correct fix below, but it did the trick in our environment when maildir_copy_with_hardlinks=yes. I think the real problem is that quota_default_alloc() is getting called twice. Once from somewhere in mail_storage_copy() -> maildir_copy() -> mailbox_save_init(), and a second time somewhere after that. src/lib-storage/index/maildir/maildir-copy.c @136 < if (mbox->storage->copy_with_hardlinks/* && < mail->box->storage == mbox->ibox.box.storage*/) { --- > if (mbox->storage->copy_with_hardlinks) {

1 2

[Dovecot] Building 1.0beta8 on Solaris
by Matthieu Herrb 18 May '06

18 May '06

The following patch is needed on Solaris, because <sys/stat.h> has a specific macro definition for struct stat. Without this patch the prototype for nfs_safe_stat() changes between the inclusion of nfs-workarounds.h and the definition of the function. -- Matthieu Herrb

2 2

[Dovecot] building 1.0beta8 with gcc 2.95
by Matthieu Herrb 18 May '06

18 May '06

The following patch is need to correctly align the default_settings structure with gcc 2.95, which doesn't recognise C99 style struct initializers. --- src/master/master-settings.c~ 2006-04-25 04:00:07.000000000 +0200 +++ src/master/master-settings.c 2006-05-18 11:14:08.949376000 +0200 @@ -367,6 +367,7 @@ /* .. */ MEMBER(login_uid) 0, + MEMBER(imap_generated_capability) NULL, MEMBER(listen_fd) -1, MEMBER(ssl_listen_fd) -1 }; -- Matthieu Herrb

1 0

[Dovecot] maildir-tags
by Marten Lehmann 18 May '06

18 May '06

Hello, I configured my MTA to store messages in maildirs with a tag "S=$message_size", so quota calculations can be done without stat()ing the message file. However, I have a lot old messages, than haven't been stored with this tag. Is it possible to configure dovecot so that it will rename each file adding this messagesize-tag if it is not found in a file already? You can find more on this at http://www.exim.org/exim-html-4.62/doc/html/spec_html/ch26.html#id2634917 Regards Marten

2 1

[Dovecot] Re: kqueue cont'd
by Václav Haisman 17 May '06

17 May '06

Chris Cappuccio wrote: > So I just got one like this before a login: > > May 16 21:24:58 m1 dovecot: imap-login: Unrecognized event: kevent {.ident = 0, .filter = 0xffffffff, .flags = 0x0001, .fflags = 0x00000000, .data = 0x0000002b} > May 16 21:24:58 m1 dovecot: imap-login: mode: 0x004x > May 16 21:24:58 m1 dovecot: child 10716 (login) killed with signal 6 > > The OpenBSD port runs configure with these arguments: > > CONFIGURE_ARGS+=--localstatedir=/var \ > --with-ioloop=kqueue \ > --with-notify=kqueue \ > --with-ssl=openssl \ > --with-ssldir=/etc/ssl \ > --without-pam \ > --without-shadow \ > --without-vpopmail Thanks for the report. I am aware of the problem but I haven't had enough time lately to fix it. In the mean time if it bothers you, you can remove --with-ioloop=kqueue and use poll. The other kqueue option, --with-notify=kqueue, is independent of the first one and can still be used. -- Vaclav Haisman

1 0

[Dovecot] dovecot
by Oleg D. 17 May '06

17 May '06

The old version was 1.0b3 from freebsd ports and all works fine. When I have upgrade freebsd ports and install a new 1.0b8 I see this error. Before I have installed a new version I have "make deinstall" all 1.0b3 package. (dovecot.conf was old with "ssl_disable = yes") Later I have add --without-ssl in port's Makefile and compile dovecot without ssl. But I have all the same seen "pop3-login: BUG: SSL..." When I have set "ssl_disable = no" I saw another error: "Error: SSL support not compiled in but ssl_disable=no" TS> On Tue, 2006-05-16 at 01:29 +0400, Oleg D. wrote: >> Hi >> >> I used dovecot 1.0b3 without ssl (FreeBSD) >> I just upgrage dovecot to new 1.0b8 with the same config file >> and I have this error in log: >> pop3-login: BUG: SSL initialization parameters not given while they should have been >> >> p.s >> In my dovecot.conf I have option "ssl_disable = yes" TS> What was the old version you used? Are you sure you upgraded all of the TS> binaries? I think this error usually happens when some of your binaries TS> are from older Dovecot installation while others are from newer.

1 0

[Dovecot] Horde/IMP setup
by Eric 16 May '06

16 May '06

does anyone else use Horde/IMP that can share their servers.php setup? I am getting weird behavior with IMP not showing my INBOX and sub folders, etc. and i am not sure if its an IMP issue or Dovecot. It was giving me problems yesterday, then it cleared up, but now its acting up again. mail clients like Thunderbird work fine tho. I am seeing this in the logs a lot: [Tue May 16 08:08:21 2006] [error] [client 67.133.211.52] PHP Warning: Invalid argument supplied for foreach() in /usr/local/www/horde/imp/lib/IMP.php on line 1197, referer: https://mikestammer.com/horde/services/portal/sidebar.php Line 1197 looks like this: foreach ($_SESSION['imp']['namespace'] as $key => $val) { if (!empty($key) && (strpos($mailbox, $key) === 0)) { $cache[$key][$mailbox] = $val; return $val; } } Anyone have any tips or ideas?

5 6

[Dovecot] Solaris 10 x64 - crash report
by Rob Shepherd 16 May '06

16 May '06

Dear dovecot-devel I have a newly built dovecot-1.0.beta8 crashing at start May 16 11:11:33 zorch dovecot: [ID 475045 mail.info] Dovecot v1.0.beta8 starting up May 16 11:11:34 zorch dovecot: [ID 920869 mail.error] Login process died too early - shutting down May 16 11:11:34 zorch dovecot: [ID 684838 mail.error] child 28853 (login) killed with signal 11 Built on Solaris 10u1 x64 with Studio11 sun compiler, using LDFLAGS=-L/opt/csw/lib -R/opt/csw/lib -lssl CPPFLAGS=-I/opt/csw/include ./configure --prefix=/usr/local/dovecot-1.0.beta8 --with-ldap which begat [12:40:20][root@zorch:/usr/local/dovecot-1.0.beta8/libexec/dovecot]$ ldd dovecot-auth libssl.so.0.9.8 => /opt/csw/lib/libssl.so.0.9.8 libcrypt_i.so.1 => /usr/lib/libcrypt_i.so.1 libpam.so.1 => /lib/libpam.so.1 libldap-2.3.so.0 => /opt/csw/lib/libldap-2.3.so.0 libsocket.so.1 => /lib/libsocket.so.1 libnsl.so.1 => /lib/libnsl.so.1 librt.so.1 => /lib/librt.so.1 libsendfile.so.1 => /lib/libsendfile.so.1 libc.so.1 => /lib/libc.so.1 libcrypto.so.0.9.8 => /opt/csw/lib/libcrypto.so.0.9.8 libdl.so.1 => /lib/libdl.so.1 libgen.so.1 => /lib/libgen.so.1 libcmd.so.1 => /lib/libcmd.so.1 liblber-2.3.so.0 => /opt/csw/lib/pentium/liblber-2.3.so.0 libresolv.so.2 => /lib/libresolv.so.2 libnet.so => /opt/csw/lib/i386/libnet.so libsasl2.so.2 => /opt/csw/lib/i386/libsasl2.so.2 libssl.so.0.9.8 => /opt/csw/lib/pentium/libssl.so.0.9.8 libcrypto.so.0.9.8 => /opt/csw/lib/pentium/libcrypto.so.0.9.8 libmp.so.2 => /lib/libmp.so.2 libmd5.so.1 => /lib/libmd5.so.1 libscf.so.1 => /lib/libscf.so.1 libaio.so.1 => /lib/libaio.so.1 libdoor.so.1 => /lib/libdoor.so.1 libuutil.so.1 => /lib/libuutil.so.1 libm.so.2 => /lib/libm.so.2 which is run using this grep -v '#'ed conf file > protocols = imap > ssl_disable = yes > login_user = dovecot > mail_debug = yes > default_mail_env = maildir:~/.maildir > protocol imap { > listen = *:145 > imap_client_workarounds = outlook-idle > } > > protocol pop3 { > } > auth_verbose = yes > auth_debug = yes > auth_debug_passwords = yes > auth default { > mechanisms = plain > passdb pam { > } > passdb ldap { > args = /usr/local/dovecot-1.0.beta8/etc/dovecot-ldap.conf > } > userdb passwd { > } > userdb ldap { > args = /usr/local/dovecot-1.0.beta8/etc/dovecot-ldap.conf > } > user = root > } > plugin { > } which begat -rw------- 1 root root 4212175 May 16 12:15 /usr/local/dovecot-1.0.beta8/var/run/dovecot/core I notice in the configure script, that it's building with the system ldap.h, which I don't think is openldap. however the bin is linked to the lib from blastwave.org which is openldap. How can I specify the correct inc/lib pair? if this is indeed the problem. Please tell me how to produce a backtrace if one is needed if this is an actual bug..... Cheers Rob -- Rob Shepherd | Computer and Network Engineer | Technium CAST | LL57 4HJ rob(a)techniumcast.com | 01248 671928 | 07776 210516

2 1

[Dovecot] Authentication Daemons
by Scott Penrose 16 May '06

16 May '06

Hi ho. My name is Scott Penrose - and I am experimenting with Dovecot as an IMAP replacement in our company. I have spent some time trying to write a plugin (sort of) for authentication and come to the conclusion that our instance is a little strange. So I though I would try plan B which is to write my own authentication module. This seems to have worked fairly well to start with but I have had some problems. For example, when connecting with a simple socket client (I have a socket client equiv of telnet) I see the VERSION, MECH ... DONE from the login/default socket, but nothing from the master socket. Both should be returning VERSION. Any ideas on that one? Thanks Scott

1 0

[Dovecot] Dovecot + Sendmail + virtusertable
by Chris Tata 16 May '06

16 May '06

Hello, I was wondering if there was a way to have dovecot authenticate using sendmail's virtusertable to map virtual users to system users. My goal is to allow virtual users (bob(a)domain.com) to authenticate via pop or imap using the full user@domain scheme. I tried enabling 'vpopmail' as passdb and userdb in the default namespace but I get this error: dovecot: May 15 23:05:21 Error: auth(default): Unknown passdb type 'vpopmail' Please advise. Thanks, Chris

1 0

[Dovecot] Missing mails after folder renaming
by Bob & Sabine von Knobloch 15 May '06

15 May '06

Dear List, I seem to have created myself a problem to which I can't find an answer. I am using Dovecot (0.99.13-4.FC2 on Fedora Core 2) with Mozilla Thunderbird on Windows XP and Linux as IMAP client software. I renamed a folder to a name that included spaces (it fitted the pupose better), then later realised that I would have to change my procmail rules to suit. As I wasn't sure what procmail would do with such folder names I renamed the folder back to it's original short name (all this changing was done in Thunderbird). The result is that all subfolders under the renamed folder exist in both forms: eg "Computer.SubjectA" and "Computer Projects.SubjectA", but the second versions are not seen by Thunderbird although they contain all my old mails (new mails are correctly delivered to the short name folders). I have tried to move the mails in these folders back to the short name folders but the indexing system (I assume) does not 'see' these maildir files. How can I fool the system into seeing all the old mails? Of course, I would like to know why the second renaming didn't work but don't have enough information to know if it's Thunderbird or Dovecot that isn't working correctly. As a second question, my Windows clients run in an NT domain (Samba) with roaming user profiles. The pathnames for some users become quite long and Windows throws a 'path too long' error when saving/loading the user profile from the DC. Is there a way of limiting the depth of folder nesting under Dovecot to avoid this problem? I have tried to search for answers but haven't found any yet. If there is already some information, I would be glad of a pointer to it. I am very pleased with the performance of Dovecot in all respects, thanks for the program. Bob von Knobloch.

4 3

[Dovecot] Anyone using Dovecot LDA on OS X?
by Dean Blackburn 15 May '06

15 May '06

I'm curious if anyone can get the LDA running on OS X, and what their experiences have been... We are still having index corruption issues that result in many temp files being created and client-side timeouts using a straight Postfix local delivery under 1.0beta7. The LDA does not come packaged with the Darwinports version of Dovecot, so any tips on compiling it would be most appreciated... Thanks, -deano

1 0

[Dovecot] dovecot ldap auth bind and different directories
by Andrew Bates 15 May '06

15 May '06

I have recently begun playing with Dovecot (1.0.beta8) and have run into an interesting scenario. The way my email system is set up is that users of different domains have completely different base dn's. For instance, if a user is part of test.com the bind dn would be uid=user,ou=People,dc=test,dc=com. The bind dn for user(a)domain.com would be uid=user,ou=People,dc=domain,dc=com. I could not seem to figure out a way to have the binddn adjusted based on a user's @domain so I modified auth-request.c and var-expand.c to include a new variable expansion concept. In the configuration I'm now able to include the following: auth_bind_userdn = uid=%n,ou=People,dc=%c2,dc=%c1 and %c1 will be expanded to the tld, %c2 will be expanded to the next level domain (domain or test in the above example). This will work up to 9 levels of subdomain (1-9). This is very similar in how postfix expands variables with ldap. I'm a bit rusty with my C, so I'd love some feedback on the patch. If this idea isn't included in the main code, that's fine, but I thought I'd contribute my experiences! Thanks for a great product everyone! Andrew =================================================================== --- dovecot-1.0.beta8/src/auth/auth-request.c 2006-04-12 22:00:06.000000000 -0400 +++ dovecot-1.0.beta8.new/src/auth/auth-request.c 2006-05-15 12:37:06.000000000 -0400 @@ -852,6 +852,7 @@ auth_request_get_var_expand_table(const struct auth_request *auth_request, const char *(*escape_func)(const char *)) { + char *str; static struct var_expand_table static_tab[] = { { 'u', NULL }, { 'n', NULL }, @@ -869,7 +870,27 @@ if (escape_func == NULL) escape_func = escape_none; - tab = t_malloc(sizeof(static_tab)); + /* count the number of domain components + in the given auth_request->user string + so we can allocate the correct sized + array + */ + int dc_count = 0; + str = strchr(auth_request->user, '@'); + while (str != NULL && *str != '\0' && str++) { + if (*str == '.') + dc_count++; + if (dc_count == 9) + break; + } + + /* allocate memory big enough for the static + tab plus each domain compononet. Since we + can only use 1-9 as identifiers, there is + no point in allocating more then 9 + */ + dc_count = (dc_count < 9 ? dc_count : 9); + tab = t_malloc(sizeof(static_tab) + (dc_count*(sizeof(char) + sizeof(char *)))); memcpy(tab, static_tab, sizeof(static_tab)); tab[0].value = escape_func(auth_request->user); @@ -886,6 +907,27 @@ tab[7].value = dec2str(auth_request->client_pid); if (auth_request->mech_password != NULL) tab[8].value = escape_func(auth_request->mech_password); + + char *domain = p_strdup(auth_request->pool, strchr(auth_request->user, '@')); + if (domain != NULL) { + int count = 0; + str = domain + strlen(domain); + do { + str--; + if (*str == '.' || *str == '@') { + *str = '\0'; + count++; + tab[count + 8].key = (char)(48+count); + tab[count + 8].value = escape_func(str+1); + } + if (*str == '@') { + count++; + tab[count + 8].key = '\0'; + tab[count + 8].value = NULL; + break; + } + } while (str != domain && count < 9); + } return tab; } =================================================================== --- dovecot-1.0.beta8/src/lib/var-expand.c 2006-04-12 22:00:06.000000000 -0400 +++ dovecot-1.0.beta8.new/src/lib/var-expand.c 2006-05-12 17:06:42.000000000 -0400 @@ -162,6 +162,11 @@ break; var = NULL; + + /* domain component expansion */ + if (*str == 'c') + str++; + for (t = table; t->key != '\0'; t++) { if (t->key == *str) { var = t->value != NULL ? t->value : "";

2 1

[Dovecot] re: ssl-build-param
by Jackie Hunt 15 May '06

15 May '06

Hi all, I posted a message last week about a problem with ssl-build-param, shown below. I may have a lead on this, and was hoping someone can confirm my theory. On AIX, a malloc of 0 bytes returns NULL, which is different than on Solaris and HP-UX (and probably Linux?) I'm guessing the NULL pointer returned is causing the abort of the ssl-build-param, since that was an unexpected result. Looking briefly at the code in ssl-init-openssl.c that seems reasonable. Can anyone please confirm this? And if so, any suggestions on the best way to proceed? Thanks much, Jackie --- Jackie Hunt ACNS Voice: (970) 663-3789 Colorado State University FAX: (970) 491-1958 Fort Collins, CO 80523 Email: jackie.hunt(a)colostate.edu > I'm trying to get dovecot up and running on an AIX 5.2 system > with openssl 0.9.8a. Everything compiles fine, but when I start > dovecot I find in the log: > > dovecot: May 08 13:39:14 Info: Dovecot v1.0.beta7 starting up > dovecot: May 08 13:39:14 Info: Generating Diffie-Hellman parameters for the firs > t time. This may take a while.. > dovecot: May 08 13:39:14 Error: ssl-build-param: Trying to allocate 0 bytes > dovecot: May 08 13:39:14 Error: child 18998 (ssl-build-param) killed with signal > 6 > I searched the archives of the mailing list and didn't have any luck. > Any help would be created appreciated. Please reply directly to me > as well as the list. Thanks much! > > Jackie

1 0

[Dovecot] Downloading Previous Versions??
by Jackie Hunt 15 May '06

15 May '06

Hi all, How do I get to previous versions of the dovecot source code? I wanted to download dovecot-1.0.beta7, but can't find it via the web, only the latest version (beta8). It's probably obvious how to do this...but I'm not seeing it. Thanks much! Jackie ---- Jackie Hunt ACNS Voice: (970) 663-3789 Colorado State University FAX: (970) 491-1958 Fort Collins, CO 80523 Email: jackie.hunt(a)colostate.edu

2 1

[Dovecot] beta8 compile error
by Thomas Hummel 15 May '06

15 May '06

Hello, On FreeBSD 5.4-RELEASE dovecot-1.0.beta8 build cause the following error : --------------------------------------------- make all-recursive Making all in src Making all in lib if gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I /usr/local/include/db41 -I/usr/local/include -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -MT mempool-alloconly.o -MD -MP -MF ".deps/mempool-alloconly.Tpo" -c -o mempool-alloconly.o mempool-alloconly.c; then mv -f ".deps/mempool-alloconly.Tpo" ".deps/mempool-alloconly.Po"; else rm -f ".deps/mempool-alloconly.Tpo"; exit 1; fi mempool-alloconly.c: In function `check_nuls': mempool-alloconly.c:85: error: too many arguments to function `check_nuls' *** Error code 1 --------------------------------------------- Compiler used : munster# gcc -v Using built-in specs. Configured with: FreeBSD/i386 system compiler Thread model: posix gcc version 3.4.2 [FreeBSD] 20040728 -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

2 2

[Dovecot] dovecot and vmailmgr
by Mij 15 May '06

15 May '06

hello now that dovecot supports authentication with checkpassword-compatible modules, I tried to get it working for IMAP on a qmail + vmailmgr server. For a subtle detail, while claiming to be "a drop-in replacement for the standard checkpassword", checkvpw (auth module for vmailmgr) is not "drop in". It actually expects 2 args on its command line, not 1. So, a wrapper is needed to get it authenticating correctly with dovecot; a very simple one (argswrapper.c below). This wrapper is not sufficient though. In fact, vmailmgr represents user homes like this: $HOME_LOCUSER/users/virtual_username this is ok with default_mail_env = maildir:%h/users/%n $HOME_LOCUSER depends on the domain part of the user's email. The relation is held in /var/qmail/control/virtualdomains . However, on the local part (virtual_username) some rewriting is done on the username, as dots are replaced by ":". So in the end j.doe(a)foo.com becomes "~mxfoocom/users/j:doe". Now, var-expand does not support any rewriting. I patched it by adding another modifier, m_str_replace(), which replaces REPLACE_SOURCE with REPLACE_TARGET in a given string. By defining REPLACE_SOURCE to '.' and REPLACE_TARGET to ':' one accomplishes the vmailmgr username rewriting. This modifier is applied with "P", so: default_mail_env = maildir:%h/users/%Pn A better, general solution would be for dovecot to implement some kind of general rewriting, say with regexps and sed-like replacement rules, or with an external process in a cgi fashion. With this patch, dovecot gets the correct path for any user mailbox. However, there's a bug in dovecot storage modules (both maildir and mbox) which truncates the path in the first ":", when expecting ":INBOX" etc specifiers: /* <Maildir> [:INBOX=<dir>] [:INDEX=<dir>] [:CONTROL=<dir>] */ if (debug) i_info("maildir: data=%s", data); p = strchr(data, ':'); if (p == NULL) root_dir = data; else { root_dir = t_strdup_until(data, p); this way, a former data = /var/maildirs/foo/users/j:doe:INDEX=... is truncated to /var/maildirs/foo/users/j . This opens the much worse possibility for user "j:doe" to be accounted into user "j" account after authentication. It is difficult to get a solid fix here, because the grammar is ambiguous for INBOX, INDEX and CONTROL tokens. Since they are not separated with an illegal path symbol from the rest of the path in default_mail_env, it is not possible to state when a ":INBOX=" token belongs to the path and when it is a user directive. The Best is to move the specifiers into a different configuration directive. However, a more solid check with the current modus operandi is /* <Maildir> [:INBOX=<dir>] [:INDEX=<dir>] [:CONTROL=<dir>] */ if (debug) i_info("maildir: data=%s", data); /* extracting INBOX / INDEX / CONTROL suffices */ if (((p = strstr(data, ":INBOX=")) != NULL) || ((p = strstr(data, ":INDEX=")) != NULL) || ((p = strstr(data, ":CONTROL=")) != NULL)) { root_dir = t_strdup_until(data, p); which expects the full ":INBOX=" etc strings to be present in data instead of the single ":" separator. The patches that implement this for both {maildir,mailbox}-storage are also appended below. I will take a couple of hours tomorrow to wrap all the iter up on a web page here http://mij.oltrelinux.com/net/dovecot-qmail-vmailmgr/ All the patches are applied wrt 1.0-beta7 bye

2 4

[Dovecot] more unexpected results from 0.99.13 -> 1.0beta8 upgrade
by Alan Premselaar 15 May '06

15 May '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Just to give some more information about this: Apparently some of our POP3 users are saying that when they checked for new mail this morning that all the mail that was saved on the server was downloaded again as unread mail. I followed the guidelines in the wiki [1] with regards to upgrading from 0.99 to 1.0, made sure the .subscriptions and .customflags files were renamed to subscriptions and dovecot-keywords respectively yet the subscriptions were not maintained (i.e. users had to re-subscribe after the update) here's my config information, can you give me any hints as to what went wrong? [root@mail root]# dovecot -n protocols: imap imaps pop3 pop3s ssl_cert_file: /usr/share/ssl/certs/dovecot.pem ssl_key_file: /usr/share/ssl/private/dovecot.pem disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_greeting_capability(default): yes login_greeting_capability(imap): yes login_greeting_capability(pop3): no verbose_proctitle: yes default_mail_env: maildir:~/Maildir:INDEX=/var/indexes/%u:CONTROL=/var/control/%u maildir_copy_with_hardlinks: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: / location: maildir:~/Maildir:INDEX=/var/indexes/%u:CONTROL=/var/control/%u inbox: yes auth default: master_user_separator: * passdb: driver: pam userdb: driver: passwd [root@mail root]# dovecot --version 1.0.beta8 the machine is running RHEL 3 and kept up to date on a regular basis. Thanks, Alan [1] http://wiki.dovecot.org/UpgradingDovecot -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEZ9hBE2gsBSKjZHQRAnSuAJ929R90J8eBhi25528jwXN1HaR7mgCg42sv t16Eyhc3G+CSLVjTTdTzaEw= =OtX8 -----END PGP SIGNATURE-----

2 1

[Dovecot] Semi-OT: Backing up maildir
by Shayne Hardesty 15 May '06

15 May '06

We switched our mail server over from mbox to maildir a few months ago and couldn't be happier - the performance under normal load is incredible. However we now have a problem with backup.. Typically we would run tar on the mail server, sending its output to another server via ssh.. Like this: tar cfp - /home | gzip | ssh other.server (cd /backups && tar xfp -).. I have tried gzipping the stream on the source side, gzipping on the destination, and running without gzip, all three take an amazingly long time to complete (> 14 hours). Ours is a modest server with about 1300 users, about 300GB of mail total. The whole thing sits on hardware RAID-10, so I'm primarily guarding against a MAJOR hardware failure, a config blunder, or a hacker wiping out files. How do you guys back up your maildir? I've considered exporing the maildir with NFS and backing it up from another server.. Any opinions on that? Thanks, Shayne

7 6

[Dovecot] 1.0beta8 won't start: Fatal: Protocol imaps given more than once
by Mike Brudenell 15 May '06

15 May '06

Greetings - I've just built Dovecot 1.0beta8 and find it refuses to start. This under Solaris 10 on an Intel-based Sun system. The error message Dovecot displays (on standard error) in response to /usr/local/sbin/dovecot is Fatal: Protocol imaps given more than once I've checked through my configuration file and the only mention of "imaps" is here: # Protocols we want to be serving: # imap imaps pop3 pop3s protocols = imap imaps The same settings file worked OK with 1.0beta7. I've also tried using the standard dovecot-example.conf that comes with 1.0beta8 which has the "protocols" line commented out and, after adding appropriate settings for "ssl_cert_file" and "ssl_key_file", still have the same problem. I popped a few dubugging i_info() calls into src/master/main.c to try and see what was going on and the output was as follows: Info: set->protocols = >imap imaps< Info: imap: *fd = -1 Info: imaps: *fd = 0 Fatal: Protocol imaps given more than once The first line is displaying the value of the keywords in set->protocols The second and third are within the if/then/else sequence: the first for the "imap" keyword and the second for the "imaps" keyword. Then comes the fatal error, caused by the "fd" variable not being equal to -1 (it is "0" for "imaps") above. Changing the dovecot.conf file to read protocols = imap lets Dovecot start up OK. Changing it to protcols = imaps causes it to fail in the same way as before(!). Seems to be a problem with the initialisation of set->ssl_listen_fd therefore, as this should apparently be -1? Is this likely to be something I've got wrong (wouldn't have thought so as 1.0beta7 is happy with the same config file) or is there a problem in 1.0beta8? Cheers, Mike B-) -- The Computing Service, University of York, Heslington, York Yo10 5DD, UK Tel:+44-1904-433811 FAX:+44-1904-433740 * Unsolicited commercial e-mail is NOT welcome at this e-mail address. *

4 5

[Dovecot] FSF - dovecot
by Matt 14 May '06

14 May '06

Will dovecot always be open FREE source for all? I am currently migrating my www.digipanel.com from Courier to dovecot as I think courier is overly complicated and a pain in the arse to manage all those files. anyways, I have dovecot IMAP working with MySQL auth but reading the Maildir each time takes up to 30 secs to complete. ANy ideas why? Maybe a dns resolve issue? how can I fix..

1 0

[Dovecot] problems with 1.0beta[78] on RHEL3
by alan premselaar 14 May '06

14 May '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I've been running 0.99.13 on RHEL 3 for over a year now and finally decided to upgrade to the 1.0 series. unfortunately, I only have one RHEL 3 machine which is my production machine. So, while doing all my preliminary testing I was doing so on a FC 3 machine. I got everything to a stage where I felt comfortable doing the upgrade but I'm running into some problems on the RHEL 3 system. if I download the tarball, it compiles without problem. If I download the cvs or the src.rpm then I get autoconf errors complaining about not supporting AC_CONFIG_HEADER but requiring AM_CONFIG_HEADER. it also complains that the installed version of autoconf is too old, although it's the latest package for RHEL 3 (which means it has the same version number as the original installed package but all the updates are back-ported to it, right?) anyways, that's all trivial as the source compiles. the problem I'm running into is this: the quota plugin is returning the following errors in the mail log: May 13 02:02:13 mail dovecot: POP3(real_user): dlopen(/usr/lib/dovecot/pop3/lib01_quota_plugin.so) failed: /usr/lib/dovecot/pop3/lib01_quota_plugin.so: undefined symbol: mount point_get and also: May 13 02:03:03 mail dovecot: IMAP(real_user): quotactl(Q_GETQUOTA, /dev/sdb1) failed: Invalid argument can anyone offer any assistance with this? oh yeah, one last thing. following the wiki, during the upgrade i renamed the .subscription files to subscription in each user's Maildir directory (oh yeah, i'm using maildir format) but, the subscription information wasn't persistant. anything else i need to be aware of related to that? thanks alan -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEZMCtE2gsBSKjZHQRAjRVAKCPgSxLQzyJ7lrhCYBSxnVeTJixtgCaA8G5 NtAoCZZWpdetBLGQsA0llrU= =K+09 -----END PGP SIGNATURE-----

2 3

[Dovecot] Problem with dovecot 1.0 make
by Bob Hope 14 May '06

14 May '06

When trying to build dovecot with MySQL support I got the following: /usr/local/mysql/lib/libmysqlclient.a(sha1.o)(.text+0x5c): In function `sha1_result': : multiple definition of `sha1_result' ../lib/liblib.a(sha1.o)(.text+0x880):/root/dovecot-1.0.alpha3/src/lib/sha1.c:233: first defined here /usr/lib/gcc-lib/i486-slackware-linux/3.3.4/../../../../i486-slackware-linux/bin/ld: Warning: size of symbol `sha1_result' changed from 158 in ../lib/liblib.a(sha1.o) to 126 in /usr/local/mysql/lib/libmysqlclient.a(sha1.o) collect2: ld returned 1 exit status make[3]: *** [dovecot-auth] Error 1 make[3]: Leaving directory `/root/dovecot-1.0.alpha3/src/auth' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/root/dovecot-1.0.alpha3/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/root/dovecot-1.0.alpha3' make: *** [all] Error 2 Any thoughts? Regards, Savage

5 10

[Dovecot] --enable-debug in 1.0beta8
by Mircea Nistor 13 May '06

13 May '06

It looks like there is an error in calling check_nuls for DEBUG In src/lib/ mempool-alloconly.c on line 85 you have check_nuls(block->prev, 0), which I think it should be check_nuls(block->prev); Can some developer confirm that? Thank you [root]#./configure --prefix=/opt/dovecot --enable-debug Install prefix ...................... : /opt/dovecot File offsets ........................ : 64bit I/O loop method ..................... : poll File change notification method ..... : dnotify Building with SSL support ........... : yes (OpenSSL) Building with IPv6 support .......... : yes Building with pop3 server ........... : yes Building with GSSAPI support ........ : no Building with user database modules . : static prefetch passwd passwd-file checkpassword (modules) Building with password lookup modules : passwd passwd-file shadow pam checkpassword (modules) Building with SQL drivers ............: . if gcc -DHAVE_CONFIG_H -I. -I. -I../.. -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -I/usr/kerberos/include -MT mempool.o -MD -MP -MF ".deps/mempool.Tpo" -c -o mempool.o mempool.c; \ then mv -f ".deps/mempool.Tpo" ".deps/mempool.Po"; else rm -f ".deps/mempool.Tpo"; exit 1; fi if gcc -DHAVE_CONFIG_H -I. -I. -I../.. -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -I/usr/kerberos/include -MT mempool-alloconly.o -MD -MP -MF ".deps/mempool-alloconly.Tpo" -c -o mempool-alloconly.o mempool-alloconly.c; \ then mv -f ".deps/mempool-alloconly.Tpo" ".deps/mempool-alloconly.Po"; else rm -f ".deps/mempool-alloconly.Tpo"; exit 1; fi mempool-alloconly.c: In function `check_nuls': mempool-alloconly.c:85: too many arguments to function `check_nuls' make[3]: *** [mempool-alloconly.o] Error 1 make[3]: Leaving directory `/usr/src/dovecot-1.0.beta8/src/lib' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/usr/src/dovecot-1.0.beta8/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/usr/src/dovecot-1.0.beta8' make: *** [all] Error 2

2 3

[Dovecot] SASL bind for LDAP
by Geert Jansen 13 May '06

13 May '06

Hi, would it be possible to add support for SASL binds to dovecot's LDAP userdb/passdb? This would be a nice feature as it would allow the use of SASL EXTERNAL binds to a local LDAP server, thereby removing the need for storing clear-text passwords in configuration files. Regards, Geert

2 4

[Dovecot] Freebsd 6.1 dovecot beta7: nss_dns.so1 not found
by pitun 13 May '06

13 May '06

Hello, FreeBSD 6.1 RELACE dovecot beta7 when enable: mail_plugins = quota imap_quota i've got: May 13 07:37:13 ranos dovecot: IMAP(pitun): module /usr/local/lib/dovecot/imap/lib01_quota_plugin.so: dlsym(quota_plugin_init) failed: Shared object "nss_dns.so.1" not found, required by "imap" May 13 07:37:13 ranos dovecot: child 9942 (imap) returned error 89 any help? -- PJ ---------------------------------------------------------------------- Poznaj Stefana! Zmien komunikator! >>> http://link.interia.pl/f1924

1 0

[Dovecot] LDA Sieve feature request
by Luca Corti 13 May '06

13 May '06

Hello, In http://wiki.dovecot.org/LDA I read # If there is no user-specific Sieve-script, global Sieve script is # executed if set. #global_script_path = so you can set global_script_path and override it using a per user script. It would be nice if the per user scripts could be optionally run after (or before maybe?) the global script. Another nice thing would be per-virtualdomain sieve scripts, but I think this is much more difficult. What do you think? -- Luca Corti PGP Key ID 1F38C091 BOFH excuse of the moment: The Borg tried to assimilate your system. Resistance is futile.

7 12

[Dovecot] pam_authenticate() failed:
by Sutton, Geoff 12 May '06

12 May '06

I'm having the same problem.... Did anyone find a solution? -- Geoff

1 0

[Dovecot] 1.0.beta8 released
by Timo Sirainen 12 May '06

12 May '06

Next release will probably be called 1.0.rc1. People just don't seem to like the beta name in the version number. :) Also I think we're nearing the final v1.0. * Fixed a security hole with mbox: "1 LIST .. *" command could list all directories and files under the mbox root directory, so if your mails were stored in eg. /var/mail/%u/ directory, the command would list everything under /var/mail. + Unless nfs_check=no or mmap_disable=yes, check for the first login if the user's index directory exists in NFS mount. If so, refuse to run. This is done only on first login to avoid constant extra overhead. + If we have plugins set and imap_capability unset, figure out the IMAP capabilities automatically by running imap binary at startup. The generated capability list isn't updated until Dovecot is restarted completely, so if you add or remove IMAP plugins you should restart. If you have problems related to this, set imap_capabilities setting manually to work around it. + Added auth_username_format setting - pop3_lock_session setting wasn't really working - Lots of fixes related to quota handling. It's still not working perfectly though. - Lots of index handling fixes, especially with mmap_disable=yes - Maildir: saving mails could have sometimes caused "Append with UID n, but next_uid = m" errors - flock() locking never timeouted because ignoring SIGALRM caused the system call just to be restarted when SIGALRM occurred (probably not with all OSes though?) - kqueue: Fixed "Unrecognized event". Patch by Vaclav Haisman

2 1

[Dovecot] dovecot: pipe() failed: Too many open files
by Obantec Support 12 May '06

12 May '06

Hi stable 1.0 on FC3 , first time i have seen this. May 11 19:40:00 proteus2 dovecot: pipe() failed: Too many open files May 11 19:40:05 proteus2 last message repeated 41406 times had to stop and re-start dovecot to free the error. Any ideas what caused it? Mark -- Obantec Support www.obantec.net 0845 458 3121 WebHosting and Domains Nominet UK Member & IPStag Holder CentralNic Accredited Reseller

2 1

[Dovecot] userdb prefetch not working with dovecot LDA?
by Luca Corti 12 May '06

12 May '06

Hello, I've configured MySQL authentication as follows. -- divecot-sql.conf -- driver = mysql connect = host=localhost dbname=postfix user=myuser password=mypass default_pass_scheme = PLAIN password_query = SELECT password FROM mailbox WHERE username = '%u' user_query = SELECT CONCAT('/var/vmail/', maildir, 'Maildir') AS home, '1234' AS uid, '1234' AS gid FROM mailbox WHERE username = '%u' -- dovecot.conf -- passdb sql { args = /usr/local/etc/dovecot-sql.conf } userdb sql { args = /usr/local/etc/dovecot-sql.conf } And both access (IMAP) and delivery (LDA) work correctly. Now I want to setup prefetching to reduce SQL queries, so I did -- dovecot-sql.conf -- driver = mysql connect = host=localhost dbname=postfix user=myuser password=mypass default_pass_scheme = PLAIN password_query = SELECT password, CONCAT('/var/vmail/', maildir, 'Maildir') AS userdb_home, '1234' AS userdb_uid, '1234' AS userdb_gid FROM mailbox WHERE username = '%u' -- dovecot.conf -- passdb sql { args = /usr/local/etc/dovecot-sql.conf } userdb prefetch { } Dovecot mail access (IMAP) works correctly, but when the LDA tries to deliver mail I get: May 11 16:25:00 ns1 dovecot: auth(default): prefetch(luca(a)example.com): passdb didn't return userdb entries May 11 16:25:00 ns1 postfix/pipe[11040]: 21E31847BC: to=<luca(a)example.com>, relay=dovecot, delay=0, status=bounced (user unknown) thanks -- Luca Corti PGP Key ID 1F38C091 BOFH excuse of the moment: user to computer ration too low.

2 1

[Dovecot] dovecot-lda and sieve filtering (SMTP is Postfix)
by Der Olli 12 May '06

12 May '06

Hello list. I've got a working Dovecot with Postfix and MySQL-support but everything from the capabilities of sieve isn't working except one thing: Sorting emails to folders works fine. But no vacation, no reject, no redirect. I don't get any errors in the logs. Verbose logging is enabled. I compiled both from newest cvs-sources but also tried older combinations (nightly snapshots). Always the same result and there's no .dovecot.sieve.err so script is okay. If it is not, .dovecot.sieve.err will be generated. I've tested this :) Anyone here who has a working sieve implementation with dovecot-lda? Where do I have to search? Is it a configuration problem? Where can I configure which sending mechanism dovecot-lda should use? Is it a local sendmail binary? Where does dovecot-lda search for it. Is it a SMTP-server? So there's one on port 25 at the local machine. Greetz, Olli

2 2

[Dovecot] comment on dovecot documentation on PAM
by president＠irithm.com 12 May '06

12 May '06

Dear Dovecote devotees, I have been going through dovecot configuration for the first time. I am not an experienced systems administrator so I had to do a left turn to read up about PAM while doing all the configuration for my new webmail service. I found that the writing in the dovecot documentation about PAM to be rather misleading in at least one aspect. The documentation I am specifically referring to is at http://wiki.dovecot.org/Authentication?highlight=%28authentication%29 and in the comments found in the dovecot.conf file. In this documentation PAM is referred to as a password database. It appears that is not correct, rather PAM is something that uses a password database. Since the default for "auth_passdb" given in dovecot.conf was "pam" I spent sometime trying to find a pam password database. I eventually found out at an independent website that what pam uses is either /etc/passwd or /etc/shadow or /etc/samba/smbpasswd. It was a relief to find out pam uses one of these, since my system has one of them (/etc/shadow), but I was looking to find something quite different for pam since /etc/shadow is one of the listed alternative values for "auth_passdb". I would have been spared a somewhat lengthy search to find out this information if the documentation was written rather more clearly. So, to help others, I suggest changing the following lines in dovecot.conf # Where password database is kept: # passwd: /etc/passwd or similiar, using getpwnam() # shadow: /etc/shadow or similiar, using getspnam() # pam [<service> | *]: PAM authentication to: # Where password database is kept: # passwd: /etc/passwd or similiar, using getpwnam() # shadow: /etc/shadow or similiar, using getspnam() # pam [<service> | *]: /etc/shadow or similiar, using PAM authentication Updating the documentation in http://wiki.dovecot.org/Authentication?highlight=%28authentication%29 to include a phrase that mentions that PAM authentication works from one of the standard password databases (i.e. /etc/passwd, /etc/shadow or /etc/samba/smbpasswd) would also be helpful. yours sincerely, Rolf

3 2

[Dovecot] Pocket Outlook
by Josh Burley 11 May '06

11 May '06

Hi all, Another user posted the same thing a few months back... after contacting them, they said they never got it working. I'm unable to get Pocket Outlook, or FlexMail 2006 working on Dovecot 0.99.13. According to the logs it connects just fine. With Pocket Outlook I'll see the headers for a few seconds, and then it clears and shows nothing. With FlexMail, which is supposed to have fantastic IMAP support (and has tons of options), I just see an empty inbox. Any ideas?? .josh

2 4

Re: [Dovecot] LDA not being called by postfix?
by Andreas Martin 11 May '06

11 May '06

Hi Luca. Luca Corti schrieb: > On Thu, 2006-05-11 at 15:16 +0200, Andreas Martin wrote: >>> and in the db: >>> >>> +----+-------------+-------------+---------+-----------+----------+-----------+----------+---------------------+---------------------+--------+ >>> | id | domain | description | aliases | mailboxes | maxquota | >>> transport | backupmx | created | modified | >>> active | >>> +----+-------------+-------------+---------+-----------+----------+-----------+----------+---------------------+---------------------+--------+ >>> | 2 | example.com | example.com | 5 | 10 | 20 | >>> virtual | 0 | 2006-05-08 01:30:58 | 2006-05-08 11:42:55 | >> ^^^^^^^ >>> 1 | >>> +----+-------------+-------------+---------+-----------+----------+-----------+----------+---------------------+---------------------+--------+ >> This should be "dovecot" - corresponding to your master.cf: > >>> The transport gets correctly selected upon mail delivery: >> Nope... >> >>> May 11 13:09:47 ns1 postfix/virtual[9797]: 7C4D4847BC: >> ^^^^^^^ >>> to=<luca(a)example.com>, relay=virtual, delay=0, status=sent >> ^^^^^^^ >> >> This should be something like: >> >> May 11 13:09:47 ns1 postfix/pipe[9797]: 7C4D4847BC: >> ^^^^ >> to=<luca(a)example.com>, relay=dovecot, delay=0, status=sent >> ^^^^^^^ > > Now it works... I thought > > virtual_transport = dovecot > > handled this. What is it doing then? Maybe it would work if I didn't > specify the virtual_transport_maps? virtual_transport is the general transport for virtual mailboxes. virtual_transport_maps overrides this to allow you to specify exceptions. Have fun! Andreas

2 1

[Dovecot] mandatory client certificates and crl check in ssl-proxy-openssl.c
by HenkJan Wolthuis 11 May '06

11 May '06

hello, I made a modification to ssl-proxy-openssl.c (patch attached) zo that it a) disconnects when no client certificate is presented b) checks the client certificate against the crl for our root cert. (so you can't use a revoked client cert.) c) returns the CommonName from the client cert. in ssl_proxy_get_peer_name (this way it's easier to use dovecot as imap-proxy with a passwd-like userdb, ssl_require_client_cert and ssl_username_from_cert, it "binds" the emailuser to the clientcertificate, a clientcert. can access only the account from the userdb) in order to use it, the CAfile must be a file which contains the CAcertificate (pem format) followed by the CRL (also in pem format). (servercert and the clientcerts are signed with a self-signed rootcert) there are some issues with the patch: a) it needs openssl > 0.9.7 for the CRL checking b) ssl_verify_client_cert now returns 0 in case of an invalid cert. was there a reason why it always returned 1? c) i'm not too happy with the commonname extraction code, is it secure?? d) i've no experience with programming openssl or dovecot e) i haven't programmed in C for at least 8 years...... does anyone here have more issues, corrections, comments on the patch? can/should this functionality be implemented in dovecot? (conf-file option?) -- groeten, HenkJan Wolthuis --- ssl-proxy-openssl.c.orig 2006-04-04 10:32:58.000000000 +0200 +++ ssl-proxy-openssl.c 2006-05-11 14:08:02.000000000 +0200 @@ -11,6 +11,7 @@ #include <fcntl.h> #include <unistd.h> #include <sys/stat.h> +#include <string.h> #ifdef HAVE_OPENSSL @@ -508,9 +509,42 @@ if (x509 == NULL) return NULL; /* we should have had it.. */ + + // ORIG: X509_NAME_oneline(X509_get_subject_name(x509), buf, sizeof(buf)); + // ORIG: name = t_strndup(buf, sizeof(buf)); + // ORIG: X509_free(x509); + + /* HJHJ get CommonName from peer-certificate */ X509_NAME_oneline(X509_get_subject_name(x509), buf, sizeof(buf)); - name = t_strndup(buf, sizeof(buf)); + + char *tmp; + char *start; + start = buf; + tmp = strstr( buf, "CN=" ); + if( NULL != tmp ) + { + if( strlen(tmp) > 3 ) /* CN= + something */ + { + start = tmp + 3; + tmp = strstr( start, "/" ); + if( NULL != tmp ) /* tmp == NULL: CN is last element in buf */ + { *tmp = '\0'; } + } + else /* empty CN= */ + { + *start = '\0'; + i_warning("get_peer_name empty CN="); + } + } + else + { + *start = '\0'; + i_warning("get_peer_name NO CN="); + } /* CN= not found (no certificate or certificate without commonname??) */ + + name = t_strndup(start, strlen(start) ); X509_free(x509); + /* HJHJ */ return *name == '\0' ? NULL : name; } @@ -582,10 +616,26 @@ proxy = SSL_get_ex_data(ssl, extdata_index); proxy->cert_received = TRUE; + // ORIG: if (!preverify_ok) + // ORIG: proxy->cert_broken = TRUE; + + // ORIG: return 1; + + /* HJHJ */ + char buf[1024]; + X509_NAME_oneline( X509_get_subject_name(ctx->current_cert),buf,sizeof(buf)); + if (!preverify_ok) + { proxy->cert_broken = TRUE; + i_warning("BAD CERT %s: %s",X509_verify_cert_error_string(ctx->error),buf); + } + else + { i_warning("CERT: %s",buf); } - return 1; + return preverify_ok; + /* HJHJ */ + } static int @@ -666,10 +716,20 @@ if (getenv("SSL_VERIFY_CLIENT_CERT") != NULL) { SSL_CTX_set_verify(ssl_ctx, SSL_VERIFY_PEER | - SSL_VERIFY_CLIENT_ONCE, + SSL_VERIFY_FAIL_IF_NO_PEER_CERT, ssl_verify_client_cert); } + /* HJHJ */ +#if OPENSSL_VERSION_NUMBER >= 0x00907000L + X509_STORE *store; + if( (store=SSL_CTX_get_cert_store(ssl_ctx)) != NULL ) + { X509_STORE_set_flags( store, X509_V_FLAG_CRL_CHECK | X509_V_FLAG_CRL_CHECK_ALL); } + else + { i_warning("X509 get cert store failed..."); } +#endif + /* HJHJ */ + /* PRNG initialization might want to use /dev/urandom, make sure it does it before chrooting. We might not have enough entropy at the first try, so this function may fail. It's still been

1 0

[Dovecot] "QUOTA" CAPABILITY keyword advertised incorrectly?
by Mike Brudenell 11 May '06

11 May '06

Greetings - I'm having a frustrating time with mail clients not picking up Dovecot's QUOTA extension to IMAP. The problem is that the QUOTA keyword isn't advertised in Dovecot's response to a CAPABILITY enquiry until *after* the user has authenticated. Unfortunately I've yet to find a mail client that issues a CAPABILITY request after authenticating. Instead all do so upon initial connection to the IMAP server (and, correctly, again after subsequently initiating a STARTTLS session but before authentication). Not re-querying the CAPABILITY after authentication is correct according to the IMAP spec in RFC2060, which says: 6.1.1. CAPABILITY Command Arguments: none Responses: REQUIRED untagged response: CAPABILITY Result: OK - capability completed BAD - command unknown or arguments invalid The CAPABILITY command requests a listing of capabilities that the server supports. The server MUST send a single untagged CAPABILITY response with "IMAP4rev1" as one of the listed capabilities before the (tagged) OK response. This listing of capabilities is not dependent upon connection state or user. It is therefore not necessary to issue a CAPABILITY command more than once in a connection. In particular the last two sentences are relevant. (At present Dovecot is only advertising availability of the QUOTA extension *after* authentication, and hence *is* dependent on the user.) Ths means that at present Dovecot's provision of the QUOTA extension isn't actually getting used by popular mail clients such as Thunderbird. Cheers, Mike Brudenell -- The Computing Service, University of York, Heslington, York Yo10 5DD, UK Tel:+44-1904-433811 FAX:+44-1904-433740 * Unsolicited commercial e-mail is NOT welcome at this e-mail address. *

3 3

[Dovecot] LDA not being called by postfix?
by Luca Corti 11 May '06

11 May '06

Hello, I'm using Postfix with virtual domains (MySQL), Dovecot 1.0beta7 and CVS LDA. I've set up postfix to use the LDA for maildir delivery and defined a global sieve script. -- master.cf -- ... dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/local/libexec/dovecot/deliver -d ${recipient} ... -- main.cf -- smtpd_banner = $myhostname ESMTP append_dot_mydomain = no relayhost = mailbox_size_limit = 0 recipient_delimiter = + inet_interfaces = all program_directory = /usr/lib/postfix command_directory = /usr/sbin daemon_directory = /usr/lib/postfix mail_owner = postfix soft_bounce = yes message_size_limit = 15728640 biff = no myhostname = mail.example.com mydomain = example.com myorigin = /etc/mailname mynetworks = 127.0.0.0/8 1.2.3.8/29 192.168.0.0/24 mydestination = $myhostname localhost localhost.localdomain alias_maps = hash:/etc/aliases alias_database = hash:/etc/aliases local_recipient_maps = proxy:unix:passwd.byname $alias_maps local_transport = local virtual_mailbox_base = /var/vmail virtual_mailbox_domains = proxy:mysql:/etc/postfix/maps/mysql_virtual_domains_maps.cf virtual_mailbox_maps = mysql:/etc/postfix/maps/mysql_virtual_mailbox_maps.cf virtual_alias_maps = proxy:mysql:/etc/postfix/maps/mysql_virtual_alias_maps.cf proxy:mysql:/etc/postfix/maps/mysql_virtual_mailbox_maps.cf virtual_uid_maps = static:1234 virtual_gid_maps = static:1234 virtual_minimum_uid = 1001 dovecot_destination_recipient_limit = 1 virtual_transport = dovecot relay_domains = proxy:mysql:/etc/postfix/maps/mysql_relay_domains_maps.cf relay_transport = relay transport_maps = proxy:mysql:/etc/postfix/maps/mysql_transport_maps.cf relocated_maps = proxy:mysql:/etc/postfix/maps/mysql_virtual_relocated_maps.cf smtpd_helo_required = yes disable_vrfy_command = yes strict_rfc821_envelopes = yes smtpd_recipient_restrictions = reject_unknown_sender_domain, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, reject_rbl_client sbl.spamhaus.org, reject_rbl_client cbl.abuseat.org, reject_rbl_client dul.dnsbl.sorbs.net smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = $myhostname smtpd_sasl_security_options = noanonymous broken_sasl_auth_clients = yes smtpd_use_tls = yes smtpd_tls_cert_file = /etc/postfix/smtpd.cert smtpd_tls_key_file = /etc/postfix/smtpd.key content_filter = smtp-amavis:[127.0.0.1]:10024 -- dovecot.conf -- protocols = imap imaps pop3 pop3s ssl_cert_file = /etc/postfix/smtpd.cert ssl_key_file = /etc/postfix/smtpd.key disable_plaintext_auth = no syslog_facility = mail login_greeting = Server ready. default_mail_env = maildir:/var/vmail/%d/%n/Maildir protocol lda { module_dir = /usr/local/lib/dovecot/lda postmaster_address = postmaster(a)example.com global_script_path = /var/vmail/sieve.script auth_socket_path = /var/run/dovecot-auth-master } protocol imap { login_executable = /usr/local/libexec/dovecot/imap-login mail_executable = /usr/local/libexec/dovecot/imap login_greeting_capability = yes imap_client_workarounds = outlook-idle delay-newmail } protocol pop3 { login_executable = /usr/local/libexec/dovecot/pop3-login mail_executable = /usr/local/libexec/dovecot/pop3 pop3_uidl_format = %08Xu%08Xv pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } auth_executable = /usr/local/libexec/dovecot/dovecot-auth auth_default_realm = example.com auth default { mechanisms = plain digest-md5 cram-md5 socket listen { master { path = /var/run/dovecot-auth-master mode = 0660 user = vmail group = vmail } } passdb sql { args = /usr/local/etc/dovecot-sql.conf } userdb static { args = uid=1234 gid=1234 home=/var/vmail/%d/%n/Maildir } } -- sieve.script -- require [ "fileinto" ]; if headers :contains "To" "luca(a)example.com" { fileinto "Spam"; } In my postfix logs I get May 11 00:59:50 ns1 postfix/virtual[9675]: 5E114847BC: to=<luca(a)example.com>, relay=virtual, delay=0, status=sent (delivered to maildir) and the message is there but no filtering is done and the sieve script is not compiled. -- Luca Corti PGP Key ID 1F38C091 Adesso dico: "Amore."

3 11

[Dovecot] Fix for the kevent "Unrecognized event" problem.
by Václav Haisman 11 May '06

11 May '06

The attached patch should fix the problem with dying imap on "Unrecognized event". The problem is that when we register a handle for IO_ERROR only, we still can get readable/writable event without EV_EOF being set. This case was not handled. -- Vaclav Haisman *** ioloop-kqueue.c.~1.4.~ Tue May 2 14:36:56 2006 --- ioloop-kqueue.c Tue May 9 21:29:33 2006 *************** *** 74,80 **** { struct ioloop_handler_context *ctx = ioloop->handler_context; const int fd = io->fd; ! struct kevent ev = { fd, 0, EV_ADD | EV_EOF, 0, 0, NULL }; enum io_condition condition = io->condition & MASK; i_assert(io->callback != NULL); --- 74,80 ---- { struct ioloop_handler_context *ctx = ioloop->handler_context; const int fd = io->fd; ! struct kevent ev = { fd, 0, EV_ADD, 0, 0, NULL }; enum io_condition condition = io->condition & MASK; i_assert(io->callback != NULL); *************** *** 184,190 **** i_assert(ctx->evbuf[i].ident < ctx->fds_size); if ((ctx->fds[ctx->evbuf[i].ident].mode & IO_ERROR) && ! (ctx->evbuf[i].flags & EV_EOF)) { struct io *errio = ctx->fds[ctx->evbuf[i].ident].errio; t_id = t_push(); --- 184,190 ---- i_assert(ctx->evbuf[i].ident < ctx->fds_size); if ((ctx->fds[ctx->evbuf[i].ident].mode & IO_ERROR) && ! (ctx->evbuf[i].flags & (EV_EOF | EV_ERROR))) { struct io *errio = ctx->fds[ctx->evbuf[i].ident].errio; t_id = t_push(); *************** *** 203,216 **** " in I/O handler %p", (void *)io->callback); } } else i_panic("Unrecognized event: kevent {.ident = %u," " .filter = 0x%04x," " .flags = 0x%04x," " .fflags = 0x%08x," ! " .data = 0x%08x}", ctx->evbuf[i].ident, ctx->evbuf[i].filter, ctx->evbuf[i].flags, ! ctx->evbuf[i].fflags, ctx->evbuf[i].data); } } --- 203,224 ---- " in I/O handler %p", (void *)io->callback); } + } else if (ctx->fds[ctx->evbuf[i].ident].mode & IO_ERROR) { + /* + NO-OP. If the handle is registered only for + IO_ERROR, then we can get readable/writable event + but no IO_READ | IO_WRITE set. + */ } else i_panic("Unrecognized event: kevent {.ident = %u," " .filter = 0x%04x," " .flags = 0x%04x," " .fflags = 0x%08x," ! " .data = 0x%08x}\n" ! "mode: 0x%x04x", ctx->evbuf[i].ident, ctx->evbuf[i].filter, ctx->evbuf[i].flags, ! ctx->evbuf[i].fflags, ctx->evbuf[i].data, ! ctx->fds[ctx->evbuf[i].ident].mode); } }

3 6

[Dovecot] IMAP threading - the THREAD command
by Jan Kundrát 11 May '06

11 May '06

Hi folks, there's an extension [1] to IMAP specifying the THREAD command to return list of message sequence numbers grouped to indicate the threading of them. That draft currently defines two algorithms, one of them based solely on Subjects (which is rather dumb) and the second one, combining Subjects with In-Reply-To (etc) headers. The second method is actually advertised and supported by Dovecot. However, I've got quite a lot of friends that lack the knowledge of what the "Subject" field is for, so they just leave it empty. The problem comes when I want Dovecot to return the threads - it follows the ietf draft, so it doesn't check only for references from message headers, but also the subjects. The result is that especially those mails with empty subjects are incorrectly grouped together. So, I'd like to see a feature that would eliminate this problem. It seems to me that there are currently two methods: a) Don't look at the Subject field at all - altough it might increase the speead a bit, it has some disadvantages as well, namely that you'll lose threading if someone uses broken mail client (but broken only in such a way that it preserves subjects) b) Ignore the Subject field if it is empty (after stripping stuff like "re:" etc - just as that draft specifies). Seems reasonable, IMHO. Of course we can't modify the result of a THREAD command (that would break the standard and it generally isn't a proper way to go), so we'd have to introduce another one. I'm pretty sure that especially method a) is very simple (and even simpler if I decided to break the standard by "fixing" the THREAD command), but I really don't like <rant>portable assembler :)</rant> <politely>C</politely>, so are there any chances for this "new and fixed" command to be included into Dovecot? I mean, I might do that in a flawed and ugly way just for me and post a patch so that possible interested persons can pick it, or I migth persuade someone to do it, actually :). Do you think that it's worth the issue? Does anyone have any experiences with talking to the IETF about possible extension of their draft? Ideas? [1] http://www.ietf.org/internet-drafts/draft-ietf-imapext-sort-17.txt Cheers, -jkt -- cd /local/pub && more beer > /dev/mouth

3 4

[Dovecot] Large folders and timeouts
by Fran Fabrizio 11 May '06

11 May '06

I have been having persistent issues with server timeouts on operations on large folders on our Dovecot install (1.0beta2 RPM that came with Fedora Core 5). Some observations from today... I have a Maildir folder with 38,000 messages (it is my Spam folder, naturally :-). In Thunderbird 1.5.0.2, if I click on that folder, it slowly but steadily downloads the headers and after 3-4 minutes, shows me the contents. So far, so good. If I then select all the messages and click Delete to delete them, that operation times out after about 1 minute. If I then click on my Trash folder after some number of minutes has passed, I see that those messages are now both in my Trash and in the original folder - I believe this is because Thunderbird first asks for a COPY over to Trash, and then asks for a STORE +FLAG \\Deleted on the copy that is still in the original folder. It appears that the COPY commands are working but the STORE commands are not since the connection is timing out before they run. I thought I'd try on another mail client, so I tried Squirrelmail. I set it to show 1000 messages per page. It does this just fine. Then I set it to 4,000 messages per page. Then I click on a folder with 12,000 messages, and I get this: ERROR: Connection dropped by IMAP server. Query: SORT (ARRIVAL) ISO-8859-1 ALL My questions are 1. what is the likely cause? and 2. will upgrading to a newer beta address any of this? I'd prefer to wait until FC5 has an updated RPM if possible. Our mail is stored on an NFS store. (I know NFS is slow and that this might be part of the cause.) However, it seems that the timeouts I am having are more related to times when there is no data flowing between the server and client. Note that the timeouts happened when the server was doing a COPY and when the server was doing a SORT but not when the client was downloading 38,000 headers. I'm just at a loss for what to look into next. I don't want to just say "NFS is slow" and live with it if this really has some other cause. :-) So, anyone have any thoughts as to other possible causes? Thunderbird has no option for setting the length of timeout from the client side, so there's nothing I can do from that end. Thanks, Fran -- Fran Fabrizio Senior Systems Analyst Department of Computer and Information Sciences University of Alabama at Birmingham http://www.cis.uab.edu/ 205.934.0653

4 4

[Dovecot] dovecot 1.0beta7 dying on me
by Dave Alden 11 May '06

11 May '06

Hi, Dovecot 1.0 beta7 is dying on me. My logfile shows: May 10 15:54:28 hermes dovecot: IMAP(alden): UIDs broken with partial sync in mbox file /var/mail/alden May 10 15:54:28 hermes dovecot: IMAP(alden): file mbox-sync-rewrite.c: line 106 (mbox_sync_headers_add_space): assertion failed: (start_pos < data_size) May 10 15:54:28 hermes dovecot: child 14185 (imap) killed with signal 6 I'm running this on a RHEL 3U7 system. I created a core file, but it doesn't look like it's too helpful (I've attached the gdb output to this message). I tried recompiling with "--enable-debug", but I got: /usr/lib/mysql/libmysqlclient.a(sha1.o)(.text+0x60): In function `sha1_result': : multiple definition of `sha1_result' ../lib/liblib.a(sha1.o)(.text+0x7f4):/scratch/dovecot-1.0.beta7/src/lib/sha1.c:233: first defined here /usr/bin/ld: Warning: size of symbol `sha1_result' changed from 158 in ../lib/liblib.a(sha1.o) to 126 in ../lib/liblib.a(sha1.o) collect2: ld returned 1 exit status Help? ...dave -- Dave Alden The Ohio State University Department of Mathematics

3 3

[Dovecot] Sieve-Editor
by Andreas Martin 11 May '06

11 May '06

Hi all. I'm looking for an editor for sieve-scripts. I tried the Squirrelmail plugin "avelsieve", but it requires "timsieved", wich Dovecot doesn't use. I don't want my users to write sieve-scripts on the console and server-side-filtering is absolutely required. I know that there are some frontends available, but I can't figure out, which one really works with libsieve and is usable for non-geeks... Do you have any suggestions? Thanks, Andreas

4 5

[Dovecot] pop3 problem with small messages with no Subject: and no To: headers
by Ken A 11 May '06

11 May '06

Hello, Seeing a strange thing with dovecot 1.0 b7 pop3. If a user gets a particular _very_ short spam message (not sure what virus makes these..), with NO Subject and NO To: headers and NO body, (example available upon request), the user is unable to download the mail. The log entry is: May 10 10:51:35 mail dovecot: POP3(user): Disconnected top=0/0, retr=1/1344, del=0/75, size=16383381 There's no QUIT, so no "Logged out" disconnect reason. I did a tcpdump to see what was happening. I have not been able to duplicate this myself yet, even with an exact copy of the message that seems to be causing it, so it could be a client issue, but I've never seen this before, and we just switched to Dovecot, so I thought I'd check with the list.. ideas? Message #9 is requested (it's the one in the user's box with missing headers). Dovecot begins returning it, but then disconnects, or so it seems. 10:51:35.171916 IP customer.60181 > mailserver.pop3: P 40:48(8) ack 1633 win 65535 0x0000: 4500 0030 d326 4000 7106 fc20 4624 16a1 E..0.&@.q...F$.. 0x0010: ceaa 0f11 eb15 006e 7ee7 2a93 d845 fe0c .......n~.*..E.. 0x0020: 5018 ffff 3618 0000 5245 5452 2039 0d0a P...6...RETR.9.. 10:51:35.172177 IP mailserver.pop3 > customer.60181: P 1633:2980(1347) ack 48 win 5840 0x0000: 4500 056b ca0b 4000 4006 3101 ceaa 0f11 E..k..@.@.1..... 0x0010: 4624 16a1 006e eb15 d845 fe0c 7ee7 2a9b F$...n...E..~.*. 0x0020: 5018 16d0 3fde 0000 2b4f 4b20 3133 3237 P...?...+OK.1327 0x0030: 206f 6374 6574 730d 0a52 6574 7572 6e2d .octets..Return- 0x0040: 5061 7468 3a20 3c68 7469 3935 6b67 6576 Path:.<hti95kgev 0x0050: 4072 @r 10:51:35.416549 IP mailserver.pop3 > customer.60181: P 1633:2980(1347) ack 48 win 5840 0x0000: 4500 056b ca0d 4000 4006 30ff ceaa 0f11 E..k..@.@.0..... 0x0010: 4624 16a1 006e eb15 d845 fe0c 7ee7 2a9b F$...n...E..~.*. 0x0020: 5018 16d0 3fde 0000 2b4f 4b20 3133 3237 P...?...+OK.1327 0x0030: 206f 6374 6574 730d 0a52 6574 7572 6e2d .octets..Return- 0x0040: 5061 7468 3a20 3c68 7469 3935 6b67 6576 Path:.<hti95kgev 0x0050: 4072 @r 10:51:35.470688 IP customer.60181 > mailserver.pop3: F 48:48(0) ack 2980 win 64188 0x0000: 4500 0028 d329 4000 7106 fc25 4624 16a1 E..(.)@.q..%F$.. 0x0010: ceaa 0f11 eb15 006e 7ee7 2a9b d846 034f .......n~.*..F.O 0x0020: 5011 fabc 09fa 0000 0000 0000 0000 P............. 10:51:35.470997 IP mailserver.pop3 > customer.60181: F 2980:2980(0) ack 49 win 5840 0x0000: 4500 0028 ca0f 4000 4006 3640 ceaa 0f11 E..(..@.@.6@.... 0x0010: 4624 16a1 006e eb15 d846 034f 7ee7 2a9c F$...n...F.O~.*. 0x0020: 5011 16d0 ede5 0000 P....... 10:51:35.515279 IP customer.60181 > mailserver.pop3: . ack 2981 win 64188 0x0000: 4500 0028 d32e 4000 7106 fc20 4624 16a1 E..(..@.q...F$.. 0x0010: ceaa 0f11 eb15 006e 7ee7 2a9c d846 0350 .......n~.*..F.P 0x0020: 5010 fabc 09f9 0000 0000 0000 0000 P............. That's all, the connection is closed. Ken A Pacific.Net

1 1

[Dovecot] Recommended FS for Dovecot Maildir
by Daniel Watts 10 May '06

10 May '06

Hi, I've heard that for Dovecot/Mailir systems there are filesystems that are optimised for the situation of many small files in one folder. Could I possibly have some feedback on what the recommended filesystems are? I've heard of ReiserFS but was wondering what other options there are and how they compare. If I get a good comprehensive response I'll build a wiki summary page out of the data gathered. Best wishes, Daniel

17 28

[Dovecot] Re: Recommended FS for Dovecot Maildir
by Roger Weeks 10 May '06

10 May '06

> Date: Wed, 10 May 2006 00:24:23 +0100 > From: Daniel Watts <d(a)nielwatts.com> > Subject: Re: [Dovecot] Recommended FS for Dovecot Maildir > To: Les Mikesell <lesmikesell(a)gmail.com> > > Can you remember any general findings? > > Thanks to all for responding in this thread - I am reading them all > and > making notes. All very useful information. > > Can I phrase the question in a different way? Of those of you who are > running 10,000+ user system - what FS do you use? > Or do you all use special file servers (netapps, emc etc?) with > proprietary filesystems? > > Daniel We're probably right at your 10000 user threshold, but we're an ISP so we get a LOT of mail traffic. Our mail system consists of dual exim servers processing incoming mail, writing to maildirs on a home- built NFS system. The home-built system is a dual-xeon machine with lots of SATA disks in a RAID5. We then have two client-facing machines running dovecot and squirrelmail. These are all SuperMicro servers running RedHat ES 4. They all use SATA disks. We are using EXT3 for the RAID5 filesystem, and I have had no performance issues to speak of. I had considered Reiser or xfs, but as I have limited experience with either filesystem I didn't feel comfortable using them in production. -- Roger J. Weeks Systems & Network Administrator Mendocino Community Network

1 0

[Dovecot] Debugging with strace
by Fran Fabrizio 10 May '06

10 May '06

We have a dovecot install that is working fine for everyone except one user, who complains that it takes a minute or longer to delete a single message from the INBOX to Trash. This is happening for him from multiple IMAP clients so it appears to be server-side. I wanted to start up a test instance of dovecot alongside the production one and test there. So I copied dovecot.conf, put imap on port 10143, and started up the test server like this: # strace -tt dovecot -F -c /etc/dovecottest.conf (I could not find the docs for -F but without it dovecot would quickly detatch into a daemon and I could no longer strace it... so is -F for putting dovecot in the foreground like I think? :-) I noticed two things when I did this: 1. My screen just scrolled continuously with poll calls - does dovecot poll something every second even when it has no clients connected? 2. It appeared to interfere with the production install running alongside of it - as I could no longer authenticate to it or copy messages to my Sent folder when I sent something out through the production dovecot. I had to restart the production instance to get it to behave. So my questions are whether all that polling output is normal and also, is my testing method really interfering with the production server, and if so, how to avoid that? Thanks, Fran -- Fran Fabrizio Senior Systems Analyst Department of Computer and Information Sciences University of Alabama at Birmingham http://www.cis.uab.edu/ 205.934.0653

2 2

[Dovecot] moving from postfix+dovecot to postfix+dovecot+postfixadmin+mysql
by albi 10 May '06

10 May '06

hi, i know this is not really a dovecot-question, but (after searching for hours and hours) here goes : last week i've tested a setup with postfixadmin and dovecot, and i'm very happy with the result! it's running on a FreeBSD-server but i've used this howto (which describes the setup for debian) : http://bliki.rimuhosting.com/space/knowledgebase/linux/mail/postfixadmin+on… big question is : how can i convert the already existing passwords from the mail-users to the mysql-based auth in postfixadmin/dovecot ------------------------------------------ thanks for having dovecot available, it's great to work with ! :) -- grtjs, albi gpg-key: lynx -dump http://scii.nl/~albi/gpg.asc | gpg --import

1 0

[Dovecot] managesieve daemon
by Gerald Dachs 10 May '06

10 May '06

Hi, I am currently working on a managesieve daemon, so that I can use the squirrelmail plugin avelsieve together with dovecot-lda. Without this I can't migrate from cyrus to dovecot. For several reasons I don't use the timsieved from cyrus and build it from scratch. Is this interesting for somebody else? Gerald

9 11

[Dovecot] Imap folders missing after updating
by Fred Harris 10 May '06

10 May '06

I just updated from 0.99.14 to 1.0beta2 on FC5 and my my IMAP folders have mainly disappeared in my Thunderbird client. All that's left is Inbox and Trash. Is there some configuration setting that's now necessary to make the server think an account uses IMAP folders? The way it seemed to work before was that the presense of a Maildir directory in a user's home indicated IMAP. The new server seems to read the Maildir directory but it doesn't recognize all the folders. Thanks. --------------------------------- Talk is cheap. Use Yahoo! Messenger to make PC-to-Phone calls. Great rates starting at 1¢/min.

14 39

[Dovecot] SIEVE: Any information at all?
by Leah Cunningham 09 May '06

09 May '06

Hi, I am quickly losing the will to live over the lack of any kind of information at all about the SIEVE support that is listed in the dovecot features list. Does anyone have any information at all? I've grepped through the source, looked through all the configuration files, and googled a fair bit and come up with nothing at all. How would a user with maildir enable a sieve script? Does it run on port 2000? How can I test functionality? Thanks, Leah

5 7

[Dovecot] auth: pam_setcred() failed: Error in service module
by Martin Stockinger 09 May '06

09 May '06

Hi, I have a strange problem with authentication. Some users can successfully authenticate and some users can not authenticate. All users use the same client (thunderbird-1.5.0.2-win32-de). At the problematic users i get the following error message: ============ snip =================== auth(default): client in: AUTH 8 PLAIN service=IMAP secured lip=10.24.1.6 rip=10.211.11.1 auth(default): client out: CONT 8 auth(default): client in: CONT<hidden> auth(default): pam(pgerlesb,10.211.11.1): pam_setcred() failed: Error in service module auth(default): client out: FAIL 8 user=pgerlesb auth(default): client in: AUTH 9 PLAIN service=IMAP secured lip=10.24.1.6 rip=10.211.11.1 resp=<hidden> auth(default): pam(pgerlesb,10.211.11.1): pam_setcred() failed: Error in service module auth(default): client out: FAIL 9 user=pgerlesb imap-login: Aborted login: user=<pgerlesb>, method=PLAIN, rip=10.211.11.1, lip=10.24.1.6, TLS ============ snap =================== The username and password is right. I can "su - <username>" at the dovecot host with the same password. Some other users can authenticate without any problems. I have set in dovecot.conf: auth default { mechanisms = plain passdb pam { args = "*" } userdb passwd { } } I have configured PAM to do the authentication against Kerberos5. The user data come from an LDAP directory. What could be the problem? Thanks Martin Stockinger

1 0

[Dovecot] Encrypted IMAP only from Internet, unencrypted POP3 from internal network
by Rainer Frey 09 May '06

09 May '06

Hi, we have following situation: I migrated our company mailserver from POP3 only to dovecot with IMAP and POP. We need to have unencrypted POP3 from our internal network, and the subnet our mailserver is in. Additionally, we now want to allow encrypted IMAP from the internet (for some defined accounts), preferably with TLS (which means I open Port 143 in our firewall). Now, how can I achieve that they can't use unencrypted plaintext authentication from Internet, while I allow unencrypted POP3 from the mailserver and private network? (I can require using encryption for IMAP from our internal net, but I must have unencrypted POP3 as we use software that retrieves mail via POP3 that doesn't support encryption). My idea was: - use disable_plaintext_auth for IMAP only - use disable_plaintext_auth for internet, but not our networks - allow connection from the internet only for certain accounts, and limit them to use encryption Internet access for POP3 is not necessary. Is any of this possible with dovecot? Or another way to achieve my goal? Non-plaintext authentication is not possible, as we use linux system accounts with shadow passwords. TIA Rainer Frey -- Software Development ------------------------------------------------------ Inxmail GmbH

8 11

Re: [Dovecot] Imap folders missing after updating
by Mark E. Mallett 09 May '06

09 May '06

> LOL, there are only about a billion web pages that are "2 clicks" from > the front page of any site. True if you are just wandering around willy-nilly. It's not like it's tacked up on a pole on Alpha Centauri. I was opining that "Documentation" -> "Upgrading" is pretty easy to find, and not at all in line with "undocumented configuration changes." Come to think of it, it's only one click away from where the README tells you to look. But you do have to look, and care to look. Me, I was grateful that it was there; it didn't have to be. > This is why people still stay in the MS heard. Any number of problems > like this would cost most companies thousands of dollars to resolve. > It's much cheaper just to pay a company like MS who take upgrade > transitions seriously. Not gonna touch that. And true transition starts from within :) People won't bite too hard if you ask, either. Nip, maybe. mm (who obviously should be working)

1 0

[Dovecot] ssl-build-param
by Jackie Hunt 08 May '06

08 May '06

Hi all, I'm trying to get dovecot up and running on an AIX 5.2 system with openssl 0.9.8a. Everything compiles fine, but when I start dovecot I find in the log: dovecot: May 08 13:39:14 Info: Dovecot v1.0.beta7 starting up dovecot: May 08 13:39:14 Info: Generating Diffie-Hellman parameters for the first time. This may take a while.. dovecot: May 08 13:39:14 Error: ssl-build-param: Trying to allocate 0 bytes dovecot: May 08 13:39:14 Error: child 18998 (ssl-build-param) killed with signal 6 I searched the archives of the mailing list and didn't have any luck. Any help would be created appreciated. Please reply directly to me as well as the list. Thanks much! Jackie --- Jackie Hunt ACNS Voice: (970) 663-3789 Colorado State University FAX: (970) 491-1958 Fort Collins, CO 80523 Email: jackie.hunt(a)colostate.edu

1 0

[Dovecot] Unrecognized event: kevent
by Dillon 08 May '06

08 May '06

Hey guys, I just subscribed to the list about 15 minutes ago so i apologize in advance if this is something that has already been discussed. I skimmed through the web archives and I didn't see anything. I'm running FreeBSD/amd64 and after upgrading from 1.0b3 to 1.0b7 I am experiencing the following May 8 13:18:22 loveturtle dovecot: imap-login: Login: user=<turtle>, method=plain, rip=216.89.228.116, lip=216.91.90.11, TLS May 8 13:18:22 loveturtle dovecot: IMAP(turtle): Unrecognized event: kevent {.ident = 2, .filter = 0xfffffffe, .flags = 0x0000, .fflags = 0x00000000, .data = 0x00004000} May 8 13:18:22 loveturtle dovecot: child 32279 (imap) killed with signal 6 Immediately after this imap respawns and then prints this again and crashes. it happens about three or four times a second until i shut down dovecot. I reverted back to 1.0b3 and everything is happy again. Cheers, Dillon

3 3

[Dovecot] kevent error (1.0.b7) - Is this a FreeBSD-only problem?
by Odhiambo WASHINGTON 08 May '06

08 May '06

Hello everyone, The problem below has been reported, but I did not see any response! <cut> | | I'm also seeing this bug while testing the forthcoming 1.0.b7 FreeBSD | | port under 6.1-PRERELEASE: | | | | Info: imap-login: Login: user=<wibble>, method=PLAIN, rip=10.0.0.2, | | lip=10.0.0.2, TLS | | dovecot: Error: IMAP(isometry): Unrecognized event: kevent {.ident = | | 2, .filter = 0xfffffffe, .flags = 0x0001, .fflags = 0x00000000, .data | | = 0x00004000} | | dovecot: Error: child 7254 (imap) killed with signal 6 </cut> So, I am wondering if this a problem applying only to FreeBSD. When I downgrade to beta5, this problem is not there at all!! -Wash http://www.netmeister.org/news/learn2quote.html DISCLAIMER: See http://www.wananchi.com/bms/terms.php -- +======================================================================+ |\ _,,,---,,_ | Odhiambo Washington <wash(a)wananchi.com> Zzz /,`.-'`' -. ;-;;,_ | Wananchi Online Ltd. www.wananchi.com |,4- ) )-,_. ,\ ( `'-'| Tel: +254 20 313985-9 +254 20 313922 '---''(_/--' `-'\_) | GSM: +254 722 743223 +254 733 744121 +======================================================================+ On-line, adj.: The idea that a human being should always be accessible to a computer.

2 1

[Dovecot] Problem with "INDEX" in default_mail_env, and pop3
by Andrea Dell'Amico 08 May '06

08 May '06

Hello all, I've a problem with maildir, pop3 and relocated indexes. My configuration is: default_mail_env = maildir:%h/Maildir:INDEX=/var/dovecot/index/% u:CONTROL=/var/dovecot/control/%u I created the "/var/dovecot/{index,control}/%u" directories, each one have rights 700 and the ownership is assigned to the user. When the pop clients connect, they fail with the error dovecot: POP3(<username>): mkdir(/var/dovecot/index/<username>/.INBOX) failed: Permission denied I'm using dovecot 1.0.beta7, authentication is pam. I'm using the following settings, too: valid_chroot_dirs = /home:/var/spool/mail:/var/dovecot/index:/var/dovecot/control (last two directories added when i changed the "default_mail_env" setting). Does anybody know what I'm doing wrong? I need to move indexes in a file system without quota. Thanks in advance, andrea -- "Thinking meat! You're asking me to believe in thinking meat!" - Terry Bisson <http://www.terrybisson.com/meat.html>

1 0

[Dovecot] Maildir folder hierarchy question
by Richard Leszczynski 08 May '06

08 May '06

Hello all, I am trying to set up Dovecot to use a particular maildir folder hierarchy and have a problem that relates to the inbox. the folder hierarchy I want in /.../Maildir/ is: .inbox cur new tmp .imap.index.files-for-inbox .sent-items cur new tmp .imap.index.files-for-sent-items however the hierarchy that dovecot gives me is .inbox (unused) .INBOX .imap.index.files-for-.INBOX cur new tmp .sent-items cur new tmp .imap.index.files-for-.sent-items I would like to have the (cur,new,tmp) folders associated with the the .inbox placed in the .inbox directory, not alongside it in the main maildir directory. Dovecot appears to do this automatically for other folders. I'm not too bothered if the .inbox folder has to be capitalised. Is this possible? I suspect from reading the Dovecot Q&A that it may not be as the rootdir has special significance with IMAP but I would like confirmation. I've currently set my default_mail_env as: default_mail_env = maildir:/home/%u/mail/maildir:INBOX=/home/%u/mail/maildir/.inbox which I thought should do accomplish what I want but it has no apparent effect. I'm running SUSE 10.0 with Dovecot 0.99.14-5 (as installed by Yast). KMail and Outlook are being used to access Dovecot. Can anyone help? thank you, Richard L ___________________________________________________________ 24 FIFA World Cup tickets to be won with Yahoo! Mail http://uk.mail.yahoo.com

3 2

[Dovecot] CVS forked into development/stable branches
by Timo Sirainen 08 May '06

08 May '06

New branch created to CVS: branch_1_0 It's going to stabilize into v1.0 Dovecot, hopefully somewhat soon. I'll start adding new larger features into HEAD, so you might want to switch to branch_1_0 if you're currently using Dovecot from CVS. You can do this with: cvs up -r branch_1_0 The nightly snapshots are from branch_1_0, at least for now.

1 0

[Dovecot] different login_greeting for pop3 & imap?
by Geert Hendrickx 08 May '06

08 May '06

Hi, I have a tiny feature request for Dovecot: could it optionally have different login_greetings for pop3 and imap connections? e.g. I want it to say "Dovecot on pop.mycompany.com ready" on pop3 connections and "Dovecot on imap.mycompany.com ready" on imap connections. Would that be possible? TIA, Geert

3 5

[Dovecot] configuring dovecot-lda takes forever...
by Joseba Torre 08 May '06

08 May '06

Hi, I want to try dovecot-lda, but the ./configure doesn't seem to finish... I've followed the installation instructions: cvs -d :pserver:anonymous@dovecot.org:/home/cvs co dovecot-lda cd dovecot-lda/ ./autogen.sh ./configure --with-dovecot=../dovecot (dovecot source tree -from cvs- is in ../dovecot) Everything seems to go ok but the message config.status: creating Makefile never ends. The problem seems to be in this process: sed -f ./confstatn25334/subs-3.sed (i can attach the file if needed). Any hint? Aaaaaaaaaaagur.

3 3

[Dovecot] dovecot error: unrecognized event
by dovecot＠bengrimm.net 07 May '06

07 May '06

If you're using the FreeBSD port: Go to /usr/ports/mail/dovecot Edit Makefile Find the line: .if !defined(WITHOUT_KQUEUE) Change it into: .if defined(WITH_KQUEUE) Then: make deinstall && make install Worked for me.

1 0

[Dovecot] Dovecot EOF bug on FreeBSD 6.0
by Matt Bostock 06 May '06

06 May '06

Hello, We're running Dovecot 1.0.7 on FreeBSD 6.0. Now and then I'll see a POP error ('EOF'), which is remedied simply by restarting Dovecot. Is this a known issue? Kind regards, Matt

1 0

[Dovecot] rebuilding dovecot 1.0 beta7 at.src.rpm mysql error
by dave 06 May '06

06 May '06

hi all i'm trying to rebuild the 1.0 beta 7 src rpm from atrpms.net to use mysql 5, instead of mysql 4 but i'm having issues when it gets to the mysql part of the make i have mysql 5 installed (via mysql.com rpm's) i changed the spec file where it says Buildrequires to say MySQL-devel (instead of mysql-devel) but it always comes back with this error, and i don't know what it means, i also tried leaving it as mysql-devel, but still get the same error when i run rpmbuild -ba dovecot.spec && rpm -Uvh --force ../RPMS/i386/dovecot* am i doing this completely wrong, is there something else i need to do to be able to use mysql 5? /usr/lib/mysql/libmysqlclient.a(sha1.o)(.text+0x60): In function `sha1_result': : multiple definition of `sha1_result' ../lib/liblib.a(sha1.o)(.text+0x8e7):/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib/sha1.c:233: first defined here /usr/bin/ld: Warning: size of symbol `sha1_result' changed from 191 in ../lib/liblib.a(sha1.o) to 126 in /usr/lib/mysql/libmysqlclient.a(sha1.o) collect2: ld returned 1 exit status make[3]: *** [dovecot-auth] Error 1 make[3]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/auth' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7' make: *** [all] Error 2 error: Bad exit status from /var/tmp/rpm-tmp.84952 (%build) thanks dave -- http://dtracorp.com

1 0

[Dovecot] Sending email over IMAP?
by Marc Perkel 06 May '06

06 May '06

I'm advocating for a change in the IMAP specification to allow outgoing email to be sent over the same connection as incoming rather that having to separately configure outgoing SMTP email. There are two significant advantages to this concept. 1) It would greatly simplify setup for clients as they would only have to configure one connection rather than two. 2) Spam reduction by authentication. The sending of email over the same connection tells the server that the person who is the sender of the email also has demonstrated they have access to read the account. This would be a powerful whitelisting criteria for eliminating fake senders. So - my question. It seems that it would be easy to do this if there were a standard. Dovecot would merely hand incoming email off to the outgoing SMTP server. Besides the difficulty of getting a standard created, am I right on my assumptions?

11 26

[Dovecot] UID and GID problems
by Simon Windsor 06 May '06

06 May '06

Hi I have been using dovecot for a while now to support a number of virtual users via a postgres table. The dovecot user chown is dovecot:dovecot, and for each domain, I use a single GID, so for example domain1 is 1001:dovecot, domain2 is 2001:dovecot. All directories are owned by 1001:dovecot or 2001:dovecot. The works well most of the time, but occasionally, some user files are owned by dovecot:dovecot, and others by gid:dovecot. Is this a know issue? Any help would be appreciated. Simon -- Simon Windsor Eml: simon.windsor(a)cornfield.org.uk Tel: 01454 617689 Mob: 07960 321599

1 0

[Dovecot] dovecot LDA w/virtual domains and postfix
by Leah Cunningham 05 May '06

05 May '06

Hi, I've been trying to follow the documentation that I am finding, but am running into trouble getting things set up correctly for postfix + virtual domains (using ldap) with dovecot LDA. I can get it to work without LDA, but I'm running into permissions problems when I try to run with LDA. I am wondering if anyone has any good examples of configuring this. I basically have a 'vmail' user (1015) that owns a /var/vmail/domains directory tree. I have set the following in postfix master.cf: # Dovecot LDA dovecot unix - n n - - pipe flags=DRhu user=vmail:mail argv=/usr/lib/dovecot/deliver -d ${recipient} In main.cf dovecot_destination_recipient_limit = 1 virtual_transport = dovecot virtual_mailbox_base = /var/vmail/domains virtual_mailbox_maps = ldap:/etc/postfix/ldap-mailbox.cf virtual_mailbox_domains = ldap:/etc/postfix/ldap-vdoms.cf virtual_uid_maps = static:1015 virtual_gid_maps = static:12 home_mailbox = Maildir/ and in dovecot.conf: protocols = imap imaps pop3 pop3s ssl_disable = no ssl_cert_file = /etc/ssl/certs/sauerkraut.heinous.org.crt ssl_key_file = /etc/ssl/private/sauerkraut.heinous.org.key mail_extra_groups = mail valid_chroot_dirs = /var/vmail/domains default_mail_env = maildir:/var/vmail/domains/%d/%n/mail protocol lda { postmaster_address = postmaster(a)frauerpower.com } protocol imap { } protocol pop3 { } auth default { mechanisms = plain passdb ldap { args = /etc/dovecot/dovecot-ldap.conf } userdb ldap { args = /etc/dovecot/dovecot-ldap.conf } user = root } auth default_with_listener { mechanisms = plain userdb ldap { args = /etc/dovecot/dovecot-ldap.conf } passdb ldap { args = /etc/dovecot/dovecot-ldap.conf } socket listen { master { path = /var/run/dovecot-auth-master mode = 0600 user = vmail group = mail } } } plugin { } However, I must be missing something. I get the following when trying to send the user a message: setuid(1015) failed: Operation not permitted Doing 'postmap -q leah(a)frauerpower.com ldap:/etc/postfix/ldap-mailbox.cf' returns 'frauerpower.com/leah/mail/' which, in the non LDA mode worked okay, plonking the mail under /var/vmail/domains/frauerpower.com/leah/mail How is this sort of thing normally set up? Apologies in advance for my ignorance, I am pretty new to dovecot. Leah

2 5

Saving Direct to Shared Mailbox (Was: Re: [Dovecot] Sending email over IMAP?)
by Timothy White 05 May '06

05 May '06

Thinking along similar lines to this sending email via IMAP... What I am thinking, is using Shared Folders/Mailbox's, like mailing lists. We have the power of ACL's, and if you have the appropriate permissions, you can 'append' emails to the folder. Except, when you think of a mailing list, you usually just hit reply. One of the projects I am working on, will be setup with a number of shared folders, an 'official' folder that everyone has read access to, (probably thier own index files as well, so the Seen flag isn't global), and a few admins have write access to. The problem still comes, as to the easiest way to 'send emails' to the folder. I could set up a virtual user, that delivers to that folder, but then you need a second system of ACL's that determine who can send emails to the folder.... Unless, Dovecot LDA handles that.... So, other than lack of client support for saving directly to a folder, instead of sending to a folder... Can Dovecot LDA do what I want, or be made to do what I want? I have no problems having a 'virtual' user that people send the emails to, as long as Dovecot LDA will handle the ACL's for it as well. Any ideas of how to solve this problem, or if Dovecot LDA can/will do it? Tim -- Linux Counter user #273956

6 7

[Dovecot] Bug in yesterday's CVS..
by Apps Lists 05 May '06

05 May '06

Hi Timo. I'm doing some testing with yesterday's CVS code and believe I've found a bug. In SquirrelMail, I get 5 messages in INBOX (doesn't matter how). I click "Toggle All" then "Delete". All 5 messages move to Trash. The Trash folder gets a link "expunge". I click that and get the following error: ERROR : Bad or malformed request. Query:STORE 1:6 +FLAGS (\Deleted) Server responded: Error in IMAP command STORE: Invalid messageset There are 5 messages in Trash, not 6. After this error is displayed, I see the following in syslog: May 2 09:37:24 dev3 dovecot: IMAP(jtest): Fixed index file /var/mailstore/72/af/375887/Maildir/.Trash/dovecot.index: first_recent_uid_lowwater 10 -> 9 (this might not actually be the right message for the error, but it's always first_recent_uid_lowwater getting decremented by 1) If I hit refresh in the browser, I can then click Expunge without issue once first_recent_uid_lowwater is fixed. I am able to replicate this easily in NFS, GFS (cluster) and local disk. Steve

2 3

[Dovecot] dovecot LDA w/virtual domains and postfix
by Leah Cunningham 05 May '06

05 May '06

Hi, I am running into trouble getting things set up correctly for postfix + virtual domains (using ldap) with dovecot LDA. I can get it to work without LDA, but I'm running into permissions problems when I try to run with LDA. I am wondering if anyone has any good examples of configuring this. It would seem that we can't deliver in setuid mode, even though the documentation seemed to indicate that we can. I basically have a 'vmail' user (1015) that owns a /var/vmail/domains directory tree. I have set the following in postfix master.cf: # Dovecot LDA dovecot unix - n n - - pipe flags=DRhu user=vmail:mail argv=/usr/lib/dovecot/deliver -d ${recipient} In main.cf dovecot_destination_recipient_limit = 1 virtual_transport = dovecot virtual_mailbox_base = /var/vmail/domains virtual_mailbox_maps = ldap:/etc/postfix/ldap-mailbox.cf virtual_mailbox_domains = ldap:/etc/postfix/ldap-vdoms.cf virtual_uid_maps = static:1015 virtual_gid_maps = static:12 home_mailbox = Maildir/ and in dovecot.conf: protocols = imap imaps pop3 pop3s ssl_disable = no ssl_cert_file = /etc/ssl/certs/sauerkraut.heinous.org.crt ssl_key_file = /etc/ssl/private/sauerkraut.heinous.org.key mail_extra_groups = mail valid_chroot_dirs = /var/vmail/domains default_mail_env = maildir:/var/vmail/domains/%d/%n/mail protocol lda { postmaster_address = postmaster(a)frauerpower.com } protocol imap { } protocol pop3 { } auth default { mechanisms = plain passdb ldap { args = /etc/dovecot/dovecot-ldap.conf } userdb ldap { args = /etc/dovecot/dovecot-ldap.conf } user = root } auth default_with_listener { mechanisms = plain userdb ldap { args = /etc/dovecot/dovecot-ldap.conf } passdb ldap { args = /etc/dovecot/dovecot-ldap.conf } socket listen { master { path = /var/run/dovecot-auth-master mode = 0600 user = vmail group = mail } } } plugin { } However, I must be missing something. I get the following when trying to send the user a message: May 5 10:42:48 sauerkraut deliver: setuid(1015) failed: Operation not permitted May 5 10:42:48 sauerkraut postfix/pipe[28978]: ECD7FF5E: to=<leah(a)frauerpower.com>, orig_to=<root(a)oogabooga.heinous.org>, relay=dovecot, delay=1, status=bounced (Command died with status 89: "/usr/lib/dovecot/deliver") Doing 'postmap -q leah(a)frauerpower.com ldap:/etc/postfix/ldap-mailbox.cf' returns 'frauerpower.com/leah/mail/' which, in the non LDA mode worked okay, plonking the mail under /var/vmail/domains/frauerpower.com/leah/mail How is this sort of thing normally set up? Apologies in advance for my ignorance, I am pretty new to dovecot. Leah

1 1

[Dovecot] greetings and logging
by Edward Chase 05 May '06

05 May '06

Howdy, I've been working with a new CentOS installation and this is my first experience with dovecot. I would like dovecot to provide more logging, however I'm not finding much on how to alter it's logging. http://wiki.dovecot.org/DovecotFeatures speaks of having Logging Control. Can anyone point me in the right direction? Thanks. -- Edward Chase Providence College Information Technology

3 4

[Dovecot] statfs() error message
by John Wong 05 May '06

05 May '06

i use openbsd/i386, dovecot-1.0b7 i see the error message in maillog dovecot: statfs(mail/username) failed: No such file or directory i guess the statfs() can not find the directory, because i run dovecot-imap in chroot userdb static { args = uid=34567 gid=34567 home=/var/./mail } i am sure, i have this directory "/var/mail/username", and i add "nfs_check = no" to dovecot.conf, the error message will gone

1 0

[Dovecot] .imap locaction
by Obantec Support 05 May '06

05 May '06

Hi is it possible to have the .imap directory and sub-directory located under the same directory as mbox users. i.e /var/spool/mail/%u is where mbox files are i would like to use /var/spool/maildir/%u/.imap reason being i do not want my users /home/username used for anything otherthan their website. how big do the files under .imap get? Mark

2 1

[Dovecot] sigsev with postfix + dovecot SASL
by Udo Rader 05 May '06

05 May '06

hi, I am just playing a bit with the dovecot SASL plugin for postfix and so far my tests have been very successfull, can't wait to get the cyrus-sasl beast replaced. However, I found a potential problem when doing some "illegal" stuff on the postfix side: -------CUT------- cerberus:/var/log# telnet smtptest 25 Trying 192.168.99.99... Connected to smtptest.bestsolution.at. Escape character is '^]'. 220 smtptest.bestsolution.at ESMTP Postfix (bestsolution.at GmbH) EHLO localhost 250-smtptest.bestsolution.at 250-PIPELINING 250-SIZE 51200000 250-ETRN 250-AUTH PLAIN DIGEST-MD5 CRAM-MD5 250-AUTH=PLAIN DIGEST-MD5 CRAM-MD5 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 DSN AUTH somestring 535 5.7.0 Error: authentication failed: Connection lost to authentication server -------CUT------- dovecot logs this: -------CUT------- dovecot: Apr 27 10:27:36 Error: auth(default): BUG: Authentication client 4315 requested unsupported authentication mechanism somestring dovecot: Apr 27 10:27:36 Error: child 445 (auth) killed with signal 11 -------CUT------- I am very aware that "AUTH somestring" is not valid in the given context, but dovecot should not sigsev IMO. dovecot is 1.0-beta7. regards Udo Rader b e s t s o l u t i o n . a t EDV Systemhaus GmbH ------------------------------------------------------------------------ udo rader technischer leiter/CTO mobile +43 660 5263642 ------------------------------------------------------------------------ eduard-bodem-gasse 8/3 A-6020 innsbruck fax +43 512 935833 http://www.bestsolution.at phone +43 512 935834

2 1

[Dovecot] auth-request.c: assertion failed: (*name != '\0')
by Tom Sommer 05 May '06

05 May '06

I upgraded to beta7 from alpha4, and got this error during the auth process: dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=0.0.0.0 rip=0.0.0.0 resp=<hidden> dovecot: auth-worker(default): sql(webmaster(a)example.com,0.0.0.0): query: SELECT username as user, NULL as password FROM users WHERE username = 'webmaster(a)example.com' AND password = PASSWORD('mypassword') dovecot: auth(default): file auth-request.c: line 723 (auth_request_set_field): assertion failed: (*name != '\0') dovecot: child 8552 (auth) killed with signal 6 My SQL conf: password_query = SELECT username as user, NULL as password FROM users WHERE username = '%u' AND password = PASSWORD('%w') as advised in a previous discussion in this list Regards -- Tom Sommer

3 4

[Dovecot] maildir format
by DINH Viêt Hoà 05 May '06

05 May '06

Hello Timo and other dovecot-dev or users, It looks like Dovecot accepts (with APPEND command) messages that begins with 'From[SPACE]' line, which are not valid from RFC 2822 point of view. Additionnally, Dovecot will store them as they are APPENDed, I mean with the starting 'From[SPACE]' line, which generates a bad Maildir format. http://www.qmail.org/man/man5/maildir.html states the following : << Each file in new is a newly delivered mail message. The modification time of the file is the delivery date of the message. The message is delivered without an extra UUCP- style From_ line, without any >From quoting, and without an extra blank line at the end. The message is normally in RFC 822 format, starting with a Return-Path line and a Delivered-To line, but it could contain arbitrary binary data. It might not even end with a newline. >> -- DINH Viêt Hoà

2 3

[Dovecot] Solution: NFS & Dovecot!
by Apps Lists 05 May '06

05 May '06

Hi folks! It looks like Timo nailed down the NFS issues we've been seeing here in last night's CVS build. Anyone running Dovecot in a high-usage environment should check this out. Here are some relevant ChangeLog updates that seem to address the problem: 2006-05-02 11:11 Timo Sirainen <timo.sirainen(a)movial.fi> * src/lib-storage/index/maildir/: maildir-save.c, maildir-storage.h, maildir-sync.c, maildir-uidlist.c, maildir-uidlist.h: Adding mail to index while saving it had a race condition. Fixing it required a bit larger changes. Switched uidlist/index locking order so that uidlist is now locked first. 2006-05-02 11:04 Timo Sirainen <timo.sirainen(a)movial.fi> * src/lib-index/: mail-index-private.h, mail-index-sync-update.c, mail-index.c: mmap_disable: When syncing in-memory index from transaction log, we didn't skip external transactions which were already been in our in-memory mapping, causing "Append with UID n, but next_uid = m" errors. The build is available here: http://dovecot.org/nightly/dovecot-20060503.tar.gz Thus far, I've seen no complaints of corrupted indexes or core dumps. This is absolutely fantastic. As always... hats off to Timo. Great work! Steve

3 2

[Dovecot] "fchown() failed with file" and Operation not permitted with indexes
by Gavin Henry 05 May '06

05 May '06

Dear all, Getting lots of these errors in our maillog with the INDEX changed: dovecot: IMAP(ghenry): fchown() failed with file /home/ghenry/Maildir/index/.INBOX/dovecot.index.tmp: Operation not permitted For .log and .cache as well. We have: location = maildir:/home/%u/Maildir:CONTROL=%h/Maildir/control:INDEX=%h/Maildir/index I looked in safe-mkdir.c and saw: fchown() failed for (line 42) to change the owner first, so don't know why we are getting this error? Thanks, Gavin. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/

3 5

[Dovecot] dovecot LDA and pop3 session lock question
by Ken A 05 May '06

05 May '06

If pop3_lock_session = yes, how does Dovecot LDA handle the situation when the pop3 mbox is locked? Does it requeue mail for later delivery immediately (EX_TEMPFAIL), or wait until mbox_lock_timeout? Thanks, Ken A. Pacific.Net

2 2

[Dovecot] Problems with Dovecot 1.0 beta7 rpm form atrpm for RHEL4
by Oliver Schulze L. 05 May '06

05 May '06

Hi, I just want to install dovecot 1.0 beta7 from atrpm and noted that it depends on a non official dependency. If you have RHEL4 (Centos) 4.3 fully updated and you try to install: http://dl.atrpms.net/all/dovecot-1.0-0_10.99.beta7.el4.at.i386.rpm You get this error: # rpm -ivh dovecot-1.0-0_10.99.beta7.el4.at.i386.rpm error: Failed dependencies: openssl >= 0.9.7f-4 is needed by dovecot-1.0-0_10.99.beta7.el4.at.i386 The lates official openssl version for RHEL 4.3 is: # rpm -q openssl openssl-0.9.7a-43.8 I think I can solve this problem by compiling the src.rpm, but I get this error: # rpmbuild --rebuild --target=i686 --clean dovecot-1.0-0_10.99.beta7.el4.at.src.rpm Installing /opt/shares/tmp/dovecot-1.0-0_10.99.beta7.el4.at.src.rpm Building target platforms: i686 Building for target i686 error: line 4: Tag takes single token only: Release: 0_%atrelease 10.99.beta7 How can I compile the .src.rpm from atrpm? It seems that there is an error in the spec file: This line: Release: 0_%atrelease 10.99.beta7 should it looks like this: Release: 0_%{atrelease}10.99.beta7 Many thanks Oliver -- Oliver Schulze L. <oliver(a)samera.com.py>

3 13

[Dovecot] support for no modules, patch
by Jens Laas 05 May '06

05 May '06

--- src/lib/module-dir.c~ 2006-02-26 13:14:12.000000000 +0100 +++ src/lib/module-dir.c 2006-05-05 11:09:11.000000000 +0200 @@ -255,8 +255,8 @@ } #else - struct module *module_dir_load(const char *dir __attr_unused__, + const char *module_names __attr_unused__, bool require_init_funcs __attr_unused__) { i_error("Dynamically loadable module support not built in"); ----------------------------------------------------------------------- 'Old C programmers don't die ... they're just cast into void*' ----------------------------------------------------------------------- Jens Låås Email: jens.laas(a)data.slu.se Department of Computer Services, SLU Phone: +46 18 67 35 15 Vindbrovägen 1 P.O. Box 7079 S-750 07 Uppsala SWEDEN -----------------------------------------------------------------------

1 0

[Dovecot] running only the dovecot-auth service
by Udo Rader 05 May '06

05 May '06

Hi, we are just testing postfix 2.3 in combination with its new dovecot SASL plugin. Now what we would like to have was dovecot SASL without acutally running dovecot ... The reason for this is because we have the "real" dovecot running on a different server than the postfix instance and it would be nice if it would not be necessary running an "full" dovecot on that server for only SASL support. So is it possible to start only the "dovecot-auth" part of dovecot? Another idea that I had was to export the created auth socket via nfs. Somewhere, sometimes I think to have read that it was possible to use unix domain sockets over nfs mounted shares, but I am not sure about this (and have failed so far). Udo Rader -- bestsolution.at EDV Systemhaus GmbH http://www.bestsolution.at

2 2

[Dovecot] Bug in new mail-index-transaction.c
by Bill Boebel 04 May '06

04 May '06

These changes apparently broke something: > 2006-04-24 09:17 Timo Sirainen <timo.sirainen(a)movial.fi> > > * src/lib-index/mail-index-transaction.c: Fixed crash while > updating keywords (broken by recent changes). > > 2006-04-20 14:10 Timo Sirainen <tss(a)iki.fi> > > * src/lib-index/mail-index-transaction.c: If we sorted appended > messages, we weren't sorting extensions and keywords so they were > mapped to wrong messages (dbox-only problem, keywords not yet > fixed by this change). What I am seeing is when there are messages that have keywords set, Dovecot occasionally hangs while building the index and/or uidlist. It leaves a lock file "dovecot-uidlist.lock" around and the IMAP process reading that folder never completes successfully. To fix it, I have have to rename the message files to remove the keyword. For example: $ mv 1146246349.P365Q2.mail1b.r1.iad.emailsrvr.com:2,Sa 1146246349.P365Q2.mail1b.r1.iad.emailsrvr.com:2,S I reverted back to the copy of src/lib-index/mail-index-transaction.c from the 4/14/2006 CVS snapshot, and this problem completely went away. And mailboxes that were encountering the .lock problem suddenly worked again. If there is any additional information that you need in order to troubleshoot this bug, please let me know and I'll be happy to send it. Bill

2 2

Re: [Dovecot] Expunge is not expunging unless it is called twice
by Bill Boebel 03 May '06

03 May '06

On Tue, May 2, 2006 18:21, Timo Sirainen <tss(a)iki.fi> said: > > Dovecot is requiring two "expunge" calls before it deletes an email. It just >> seems to ignore the first expunge call, leaving the email file in the maildir cur/ >> folder. Any idea why? I even waited 10 seconds after setting the Deleted flag, >> but still the first expunge call did nothing.... > > Fixed now. > I have tested this and works now. Thanks, Bill

1 0

[Dovecot] help server crash
by Luis Atala 03 May '06

03 May '06

chek this out how can i fix this pple? http://channels.debian.net/paste/2475 http://channels.debian.net/paste/2476 pls i need help

3 11

[Dovecot] dovecot, procmail, postfix & SpamAssassin working together
by Paul Matthews 03 May '06

03 May '06

Hi there, i'm trying to get dovecot, procmail, postfix & SpamAssassin working together http://www.linuxquestions.org/questions/showthread.php?t=441062 But i'm not having a lot of luck, a question about dovecot, what kind of mail box am i using? mbox? if so does anyone know if procmail can use mbox? /etc/dovecot.conf protocols = imap pop3 imap_listen = [::] pop3_listen = [::] imaps_listen = pop3s_listen = log_path = /var/log/dovecot.log login = imap login = pop3 default_mail_env = mbox:/home/CATHEDRAL/%u/mail:INBOX=/var/spool/mail/%u auth = default auth_mechanisms = plain auth_userdb = passwd auth_passdb = pam auth_user = root -- Paul Matthews I.T Trainee | The Cathedral School Ph (07) 47222 194 | Fax (07) 47222 111 PO Box 944 Aitkenvale Q 4814 E: paul.matthews(a)cathedral.qld.edu.au W: www.cathedral.qld.edu.au Anglican coeducation | Day and Boarding | Early Childhood to Year 12 Educating for life-long success **************************************************************************** **************************************************************************** *********************************** IMPORTANT NOTICE REGARDING CONFIDENTIALITY This electronic email message is intended only for the addressee and may contain confidential information. If you are not the addressee, you are notified that any transmission, distribution or photocopying of this email is strictly prohibited. The confidentiality attached to this email is not waived, lost or destroyed by reasons of a mistaken delivery to you.

2 1

Re: [Dovecot] FreeBSD 6 - DirectAdmin - dovecot
by Floris van den Berg 03 May '06

03 May '06

Jim Trigg schreef: > On Tue, May 2, 2006 1:27 pm, Floris van den Berg wrote: > >> Jim Trigg schreef: >> >>> On Tue, May 2, 2006 10:45 am, Floris van den Berg wrote: >>> >>> >>>> Jim Trigg schreef: >>>> >>>> >>>>> On Tue, May 2, 2006 1:15 am, Floris van den Berg wrote: >>>>> >>>>> >>>>> >>>>>> Since version 1.0 I experience strange problems with dovecot. At the >>>>>> moment I have beta 7 installed. I use FreeBSD 6.0. >>>>>> >>>>>> * Pop3 works >>>>>> * Imap works, but only when i telnet to localhost >>>>>> * In all other cases I can't connect to the server. Tried with >>>>>> squirrelmail, uebimau and thunderbird. Squirrelmail after a long >>>>>> time >>>>>> waiting: "ERROR: Connection dropped by IMAP server." >>>>>> >>>>>> >>>>> What happens if you try to telnet to the imap port other than >>>>> localhost? >>>>> >>>>> >>>>> >>>> Hi, that works too. It didn't work before because i didn't properly >>>> disable the firewall. >>>> >>>> >>> Do the mail clients work now, then, or do we need to keep >>> troubleshooting? >>> >>> >> Webmail still doesn't work. Other clients however do work. >> I still have no clue what's wrong :( >> > > Actually, here are all of my imap-related entries from Squirrelmail's > config.php -- what is different in your setup? > > $imapServerAddress = 'localhost'; > $imapPort = 143; > $imap_server_type = 'other'; > $imap_auth_mech = 'login'; > $use_imap_tls = false; > No difference. It's getting weirder and weirder. 1) imap works fine when i connect to this dovecot from a remote client (e.g. thunderbird or scripts provided above) 2) everything works fine when i use the troubled box and connect to a remote dovecot server, using telnet and the scripts provided above. 3) the scripts above do work when used with localhost but they are extremely slow. It takes about 1,5 to 2 minutes to complete just to perform a login/logout sequence. Seems to be something wrong with connecting to localhost on that port. Can't pinpoint what it is. Oh by the way, results do not differ when the firewall is enabled or disabled. Floris

1 0

[Dovecot] Dovecot-1.0.beta7 Build Fedora 3 Error REMOVE
by Luke Jackson 03 May '06

03 May '06

Sorry about the double post and I did search google but it didn't provide me with the information i needed. You can delete the last 2 posts I was forced to use google as I was not receving emails from the list at ljackson at luteck.com Thanks for your help hope to be more informed next time I post. -Luke

1 0

[Dovecot] Dovecot-1.0.beta7 Build Fedora 3 Error
by Luke Jackson 03 May '06

03 May '06

Hello I'm attempting to configure Dovecot with mysql support so I'm able to have a single database of users and point both postfix and dovecot to this db. I currently have an rpm src that I have download and placed in my RPMBUILDROOT of my linux box. Next I configured the .spec file and attempted to run a rpmbuild -bb Near the end of the install phase I receive an error which has me stumped. I ran rpmbuild again and used the -bi --short-circuit options and logged the output for you to see. Any help would be greatly appreciated..... rpmbuild -bi --short-circuit dovecot-fc5.spec Executing(%install): /bin/sh -e /var/tmp/rpm-tmp.44599 Making install in src make[1]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src' Making install in lib make[2]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib' make[3]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib' make[3]: Nothing to be done for `install-exec-am'. make[3]: Nothing to be done for `install-data-am'. make[3]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib' make[2]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib' Making install in lib-dict make[2]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-dict' make[3]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-dict' make[3]: Nothing to be done for `install-exec-am'. make[3]: Nothing to be done for `install-data-am'. make[3]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-dict' make[2]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-dict' Making install in lib-sql make[2]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-sql' make[3]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-sql' make[3]: Nothing to be done for `install-exec-am'. make[3]: Nothing to be done for `install-data-am'. make[3]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-sql' make[2]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-sql' Making install in lib-ntlm make[2]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-ntlm' make[3]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-ntlm' make[3]: Nothing to be done for `install-exec-am'. make[3]: Nothing to be done for `install-data-am'. make[3]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-ntlm' make[2]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-ntlm' Making install in lib-settings make[2]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-settings' make[3]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-settings' make[3]: Nothing to be done for `install-exec-am'. make[3]: Nothing to be done for `install-data-am'. make[3]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-settings' make[2]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-settings' Making install in lib-charset make[2]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-charset' make[3]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-charset' make[3]: Nothing to be done for `install-exec-am'. make[3]: Nothing to be done for `install-data-am'. make[3]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-charset' make[2]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-charset' Making install in lib-mail make[2]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-mail' make[3]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-mail' make[3]: Nothing to be done for `install-exec-am'. make[3]: Nothing to be done for `install-data-am'. make[3]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-mail' make[2]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-mail' Making install in lib-imap make[2]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-imap' make[3]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-imap' make[3]: Nothing to be done for `install-exec-am'. make[3]: Nothing to be done for `install-data-am'. make[3]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-imap' make[2]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-imap' Making install in lib-index make[2]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-index' make[3]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-index' make[3]: Nothing to be done for `install-exec-am'. make[3]: Nothing to be done for `install-data-am'. make[3]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-index' make[2]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-index' Making install in lib-storage make[2]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage' Making install in index make[3]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/index' Making install in maildir make[4]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/index/maildir' make[5]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/index/maildir' make[5]: Nothing to be done for `install-exec-am'. make[5]: Nothing to be done for `install-data-am'. make[5]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/index/maildir' make[4]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/index/maildir' Making install in mbox make[4]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/index/mbox' make[5]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/index/mbox' make[5]: Nothing to be done for `install-exec-am'. make[5]: Nothing to be done for `install-data-am'. make[5]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/index/mbox' make[4]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/index/mbox' Making install in dbox make[4]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/index/dbox' make[5]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/index/dbox' make[5]: Nothing to be done for `install-exec-am'. make[5]: Nothing to be done for `install-data-am'. make[5]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/index/dbox' make[4]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/index/dbox' make[4]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/index' make[5]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/index' make[5]: Nothing to be done for `install-exec-am'. make[5]: Nothing to be done for `install-data-am'. make[5]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/index' make[4]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/index' make[3]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/index' Making install in subscription-file make[3]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/subscription-file' make[4]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/subscription-file' make[4]: Nothing to be done for `install-exec-am'. make[4]: Nothing to be done for `install-data-am'. make[4]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/subscription-file' make[3]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/subscription-file' Making install in register make[3]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/register' make install-am make[4]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/register' make[5]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/register' make[5]: Nothing to be done for `install-exec-am'. make[5]: Nothing to be done for `install-data-am'. make[5]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/register' make[4]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/register' make[3]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage/register' make[3]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage' make[4]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage' make[4]: Nothing to be done for `install-exec-am'. make[4]: Nothing to be done for `install-data-am'. make[4]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage' make[3]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage' make[2]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-storage' Making install in lib-auth make[2]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-auth' make[3]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-auth' make[3]: Nothing to be done for `install-exec-am'. make[3]: Nothing to be done for `install-data-am'. make[3]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-auth' make[2]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/lib-auth' Making install in auth make[2]: Entering directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/auth' /bin/sh ../../libtool --mode=link --tag=CC gcc -std=gnu99 -O2 -g -march=i386 -mcpu=i686 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -I/usr/kerberos/include -o dovecot-auth auth.o auth-cache.o auth-client-connection.o auth-master-connection.o auth-master-listener.o auth-module.o auth-request.o auth-request-handler.o auth-stream.o auth-worker-client.o auth-worker-server.o db-ldap.o db-sql.o db-passwd-file.o main.o mech.o mech-anonymous.o mech-plain.o mech-login.o mech-cram-md5.o mech-digest-md5.o mech-ntlm.o mech-gssapi.o mech-rpa.o mech-apop.o passdb.o passdb-blocking.o passdb-bsdauth.o passdb-cache.o passdb-ldap.o passdb-passwd.o passdb-passwd-file.o passdb-pam.o passdb-checkpassword.o passdb-shadow.o passdb-vpopmail.o passdb-sql.o userdb.o userdb-blocking.o userdb-ldap.o userdb-passwd.o userdb-passwd-file.o userdb-prefetch.o userdb-static.o userdb-vpopmail.o userdb-sql.o libpassword.a ../lib-settings/libsettings.a ../lib-ntlm/libntlm.a ../lib-sql/libsql.a ../lib/liblib.a -lcrypt -lpam -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lresolv -lldap -L/usr/lib/mysql -lmysqlclient -lz -lm -export-dynamic -ldl gcc -std=gnu99 -O2 -g -march=i386 -mcpu=i686 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -I/usr/kerberos/include -o dovecot-auth auth.o auth-cache.o auth-client-connection.o auth-master-connection.o auth-master-listener.o auth-module.o auth-request.o auth-request-handler.o auth-stream.o auth-worker-client.o auth-worker-server.o db-ldap.o db-sql.o db-passwd-file.o main.o mech.o mech-anonymous.o mech-plain.o mech-login.o mech-cram-md5.o mech-digest-md5.o mech-ntlm.o mech-gssapi.o mech-rpa.o mech-apop.o passdb.o passdb-blocking.o passdb-bsdauth.o passdb-cache.o passdb-ldap.o passdb-passwd.o passdb-passwd-file.o passdb-pam.o passdb-checkpassword.o passdb-shadow.o passdb-vpopmail.o passdb-sql.o userdb.o userdb-blocking.o userdb-ldap.o userdb-passwd.o userdb-passwd-file.o userdb-prefetch.o userdb-static.o userdb-vpopmail.o userdb-sql.o -Wl,--export-dynamic libpassword.a../lib-settings/libsettings.a ../lib-ntlm/libntlm.a ../lib-sql/libsql.a ../lib/liblib.a -lpam -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lldap -L/usr/lib/mysql /usr/lib/mysql/libmysqlclient.a -lcrypt -lnsl -lc -lnss_files -lnss_dns -lresolv -lz -lm -ldl make[2]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src/auth' make[1]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.beta7/src' RPM build errors: /BUILD/dovecot-1.0.beta7/src/lib/sha1.c:233: first defined here /usr/bin/ld: Warning: size of symbol `sha1_result' changed from 190 in ../lib/liblib.a(sha1.o) to 126 in /usr/lib/mysql/libmysqlclient.a(sha1.o) collect2: ld returned 1 exit status make[2]: *** [dovecot-auth] Error 1 make[1]: *** [install-recursive] Error 1 make: *** [install-recursive] Error 1 error: Bad exit status from /var/tmp/rpm-tmp.44599 (%install) Bad exit status from /var/tmp/rpm-tmp.44599 (%install) Thanks, -m3

1 0

[Dovecot] "0" quota and Maildir++
by Apps Lists 03 May '06

03 May '06

Hi Timo. I saw the "0" quota should be interpreted as unlimited in the ChangeLog from yesterday's snapshot. I just tested and it's still seeing zero as zero. I am unable to append any messages. Can you double-check this feature? Thanks! Steve

2 2

[Dovecot] Unoffical Survey - What MTA/Spam filtering do you use?
by Marc Perkel 03 May '06

03 May '06

I like this unofficial survey of hardware but wondering what MTA and spam filtering everyone is using. I do front end spam filtering for other servers as well. (junkemailfilter.com) I'm using Exim 4.61 SpamAssassin 3.11 Some version of DSpam that I'm experimenting with Most of my spam filtering happens on the Exim level. My mail spam filter server is: AMD 3800 Dual Core Athlon 2 100gb SATA drives 4 gigs ram 64 bit Fedora Core 4 2 backup servers on higher MX recored that are similar configuration.

18 38

[Dovecot] timeout_remove and "Timeout leak" problems
by David Friedlander 03 May '06

03 May '06

Hello, I have run into troubles trying to jump from 1.0alpha5 (basically running smoothly) to 1.0beta5 and/or beta7. I am seeing errors such as the following set for nearly every user. dovecot: May 01 16:21:02 Info: IMAP(joeuser): Disconnected: Logged out dovecot: May 01 16:21:02 Error: IMAP(joeuser): file ioloop.c: line 153 (timeout_remove): assertion failed: (*timeout != NULL) dovecot: May 01 16:21:03 Info: IMAP(joeuser): Disconnected: Logged out dovecot: May 01 16:21:03 Warning: IMAP(joeuser): Timeout leak: 0x111acc dovecot: May 01 16:21:03 Error: child 20607 (imap) killed with signal 6 (INBOX is on local RAID disks while home directory (hence, ~/Maildir) is on a NetApp NFS file server.) While I tweaked settings for the differences between the 1.0a5 conf file and the beta conf file, things are fundamentally the same between them. The other critical element to this is that imap-login sessions are being left around and the load average climbs inexorably. (It reached 50 on this dual dual-core machine before I killed things off and started the daemon from scratch.) This occurs for users using a whole array of clients: Thunderbird, SquirrelMail, Eudora, Apple Mail, etc. How can I track this down or can someone please help me figure out what is happening here? (I have been unable to find answers between the mailing list archives and Google.) Thanks in advance, David P.S. The only item of note from examining ioloop.c was the differences between the alpha and beta source code: alpha5: void timeout_remove(struct timeout *timeout) { i_assert(timeout != NULL); timeout->destroyed = TRUE; } beta7: void timeout_remove(struct timeout **timeout) { i_assert(*timeout != NULL); (*timeout)->destroyed = TRUE; *timeout = NULL; }

2 1

[Dovecot] Re: mail shown throught outlook, shows todays date
by richs＠whidbey.net 03 May '06

03 May '06

> bclark wrote: > > > The interesting thing is, once I have some mail on the dovecot, > the date > > displayed on Mozilla is correct, but the mail shown throught > outlook, > > shows todays date (thats for all mail). > > Each mail has (at least) two dates : the date it was sent (stored > in the > headers), and the date it arrived (in Maildir, the date of the > file). Most > likely, Mozilla and SquirrelMail are showing the date in the > headers, and Outloo > is showing the arrival date. > > This problem has come up a few times, I believe. As I recall, most > mail clients > allow you to select which date to sort by. If you can't find the > option, it may > be somewhere in this list's archives. > > > Almost seems as Outlook (office 2000) looks at the date / time > stamp of > > the file it self as opposed to opening and reading the mail and > reading > > the necassry tags. > > That's my assessment, also. > > > If anyone could help me understand this (is this a dovecot issue), I > > would really appreciate it. > > I don't believe it's a dovecot issue, per se. > > -- > Curtis Maloney > cmaloney <at> cardgate.net I've been testing Dovecot 1.0beta7 to implement IMAP for the first time, and have had a good experience so far. But like Curtis and Brent, I found that Outlook and Outlook Express display "incorrect" dates on messages uploaded via APPEND. That's because they sort messages using INTERNALDATE: wea3 SELECT "Test Folder" pqng UID FETCH 1:* (UID FLAGS RFC822.SIZE BODY.PEEK[HEADER] INTERNALDATE) Some have created scripts to sync file timestamps with "Date" headers, which conflicts with the concept of "INTERNALDATE". Others ask users to add the "Date Sent" column, but those dates are only revealed after a message is viewed. I'd like to propose the attached patch to add an optional "outlook- dates" IMAP workaround, which returns the message "Date:" even when INTERNALDATE is specified. Since "BODY.PEEK" is being called anyway, our tests didn't reveal any performance impact. Can anyone think of a scenario this would negatively impact? Another option might be to patch the APPEND function? Thanks! Rich Sandberg richs(a)whidbey.net

4 7

[Dovecot] Expunge is not expunging unless it is called twice
by Bill Boebel 03 May '06

03 May '06

Dovecot is requiring two "expunge" calls before it deletes an email. It just seems to ignore the first expunge call, leaving the email file in the maildir cur/ folder. Any idea why? I even waited 10 seconds after setting the Deleted flag, but still the first expunge call did nothing.... 1 OK User logged in 2 select "INBOX" * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 12 EXISTS * 0 RECENT * OK [UIDVALIDITY 1144082550] UIDs valid * OK [UIDNEXT 1509] Predicted next UID 2 OK [READ-WRITE] Select completed. 3 UID STORE 1511 +FLAGS (\Deleted) * 12 FETCH (UID 1508 FLAGS (\Deleted \Seen)) 3 OK Store completed. 4 expunge 4 OK Expunge completed. 5 expunge * 12 EXPUNGE 5 OK Expunge completed.

2 1