- dovecot - dovecot.org

Unix socket for quota-status?
by Peter West 11 Jun '17

11 Jun '17

The example configs for quota-status use inet_listener. Does quota-status support unix sockets? -- Peter West pbw(a)pbw.id.au And the great throng heard him gladly.

2 2

Pacaging/build issues with AIX and vac (dovecot-2.2.25)
by Michael Felt 10 Jun '17

10 Jun '17

Hi. I finally decided it was really time to stop being lazy and really move away from gmail. After I have a server in my basement using power, etc. So I turned on the imap provided - and did not quite cry - it will have to do for now, but imap2 is wanting. A real server yes, but not Linux. (Using linux would require another server AND I would feel I am being lazy again). So, I downloaded dovecot-2.2.25 and tried to build. Configure (messages to stderr) xlc is /usr/vacpp/bin/xlc + CPPFLAGS="-I/opt/include -I/opt/buildaix/include" CFLAGS="-I/opt/include -O2 -qmaxmem=-1 -qarch=pwr5 -I/opt/buildaix/includes ./configure\ --prefix=/opt \ --sysconfdir=/var/dovecot/etc\ --sharedstatedir=/var/dovecot/com\ --localstatedir=/var/dovecot\ --mandir=/usr/share/man\ --infodir=/opt/share/info/dovecot \ > .buildaix/configure.out xlc_r: 1501-216 (W) command option -dM is not recognized - passed to ld xlc_r: 1501-228 (W) input file c not found 1506-297 (S) Unable to open input file null. No such file or directory. ./configure[25617]: rpcgen: not found messages to stderr by make: + make > .buildaix/make.out ./update-version.sh[42]: git: not found. "askpass.c", line 59.18: 1506-359 (I) Automatic variable str contains a const member and is not initialized. It will be initia "guid.c", line 113.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will be initiali "iostream-rawlog.c", line 28.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will b "istream-base64-decoder.c", line 42.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It "istream-base64-encoder.c", line 47.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It "istream-jsonstr.c", line 70.26: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will b "mountpoint.c", line 222.39: 1506-068 (W) Operation between types "char*" and "const char*" is not allowed. "istream-decrypt.c", line 68.18: 1506-359 (I) Automatic variable ephemeral_key contains a const member and is not initialized. "istream-decrypt.c", line 276.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "istream-decrypt.c", line 369.26: 1506-359 (I) Automatic variable peer_key contains a const member and is not initialized. It "istream-decrypt.c", line 745.42: 1506-359 (I) Automatic variable db contains a const member and is not initialized. It will b "ostream-encrypt.c", line 135.65: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "ostream-encrypt.c", line 454.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "dcrypt-openssl.c", line 787.36: 1506-359 (I) Automatic variable key contains a const member and is not initialized. It will b "dcrypt-openssl.c", line 1099.33: 1506-359 (I) Automatic variable secret contains a const member and is not initialized. It wi "dcrypt-openssl.c", line 1295.18: 1506-359 (I) Automatic variable tmp contains a const member and is not initialized. It will "dcrypt-openssl.c", line 1365.18: 1506-359 (I) Automatic variable saltbuf contains a const member and is not initialized. It w "istream-decrypt.c", line 68.18: 1506-359 (I) Automatic variable ephemeral_key contains a const member and is not initialized. "istream-decrypt.c", line 276.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "istream-decrypt.c", line 369.26: 1506-359 (I) Automatic variable peer_key contains a const member and is not initialized. It "istream-decrypt.c", line 745.42: 1506-359 (I) Automatic variable db contains a const member and is not initialized. It will b "ostream-encrypt.c", line 135.65: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "ostream-encrypt.c", line 454.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "istream-decrypt.c", line 68.18: 1506-359 (I) Automatic variable ephemeral_key contains a const member and is not initialized. "istream-decrypt.c", line 276.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "istream-decrypt.c", line 369.26: 1506-359 (I) Automatic variable peer_key contains a const member and is not initialized. It "istream-decrypt.c", line 745.42: 1506-359 (I) Automatic variable db contains a const member and is not initialized. It will b "ostream-encrypt.c", line 135.65: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "ostream-encrypt.c", line 454.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "test-http-auth.c", line 27.27: 1506-022 (S) "scheme" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 27.37: 1506-196 (W) Initialization between types "struct http_auth_challenge_test* const" and "char*" "test-http-auth.c", line 28.33: 1506-022 (S) "data" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 28.41: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 29.33: 1506-022 (S) "params" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 30.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 30.52: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 30.70: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 30.76: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 33.33: 1506-022 (S) "scheme" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 33.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 43.27: 1506-022 (S) "scheme" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 43.37: 1506-196 (W) Initialization between types "struct http_auth_challenge_test* const" and "char*" "test-http-auth.c", line 44.33: 1506-022 (S) "data" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 44.41: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 45.33: 1506-022 (S) "params" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 46.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 46.52: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 47.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 47.50: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 48.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 48.52: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 49.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 49.53: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 50.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 50.49: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 53.33: 1506-022 (S) "scheme" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 53.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 60.27: 1506-022 (S) "scheme" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 60.37: 1506-196 (W) Initialization between types "struct http_auth_challenge_test* const" and "char*" "test-http-auth.c", line 61.33: 1506-022 (S) "data" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 61.41: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 62.33: 1506-022 (S) "params" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 63.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 63.52: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 64.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 64.51: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 65.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 65.52: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 66.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 66.49: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 69.33: 1506-022 (S) "scheme" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 69.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 70.33: 1506-022 (S) "data" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 70.41: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 71.33: 1506-022 (S) "params" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 72.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 72.52: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 73.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 73.49: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 76.33: 1506-022 (S) "scheme" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 76.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 187.27: 1506-196 (W) Initialization between types "struct http_auth_param* const" and "char*" is not a "test-http-auth.c", line 187.39: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 188.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 188.36: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 189.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 189.36: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 190.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 190.34: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 191.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 191.34: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 192.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 192.33: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 193.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 193.37: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 194.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 194.39: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 195.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 195.37: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 196.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 196.33: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. make: 1254-004 The error code from the last command is 1. I am quite willing to dig and dig - but I want to be know if there will be any interest and/or support for dovecot on AIX. Sincerely, Michael

3 22

v2.2.30.1 released
by Timo Sirainen 09 Jun '17

09 Jun '17

https://dovecot.org/releases/2.2/dovecot-2.2.30.1.tar.gz https://dovecot.org/releases/2.2/dovecot-2.2.30.1.tar.gz.sig Due to some release process changes I didn't notice that one important bugfix wasn't included in the v2.2.30 release branch before I made the release. So fixing it here with v2.2.30.1. Also included another less important fix. - quota_warning scripts weren't working in v2.2.30 - vpopmail still wasn't compiling Also I guess should mention that in v2.2.30+ the "script" service's protocol changed to a new version. If anyone had written their own script services (not using the included "script" binary) they would need some changes. I haven't heard of anyone having done that though.

7 16

[Dovecot] Dovecot stops with "Fatal: kevent(): Invalid argument"
by Henrik Larsson 09 Jun '17

09 Jun '17

# 2.0.11: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.2-STABLE amd64 Dovecot stops with the following logged: - master: Fatal: kevent(): Invalid argument I have found that a diff was created for "src/lib/ioloop-kqueue.c" for a similar issue: http://dovecot.org/pipermail/dovecot/2010-November/054855.html I have patched my system with this and haven't seen the problem since, but I don't know if this is a coincidence. Could you please explain if the diff should actually fix anything or just add some more logging in case it stops again? Best regards Henrik Larsson

4 9

Dovecot LDAP using custom field to allow users to connect
by Michael JOIGNY 09 Jun '17

09 Jun '17

Hi all, I'd like to know if it's possible to add a custom field when the authentification is made by users. My boolean custom field will be for example "AllowUser" (false/true). I'm trying to do something like that but it's not working : /user_filter = (&(objectClass=posixAccount)(uid=%u)(objectClass=myclass)(AllowUser=TRUE))/ This is my dovecot/ldap configuration below : /*# dovecot.conf* / /passdb {// // driver = ldap// // args = /etc/dovecot/dovecot-ldap.conf// //}/ *# dovecot-ldap.conf* /hosts = myurl:myport// //dn = cn=myuser,dc=mydomain,dc=com// //dnpass = ********// //a//uth_bind = yes// //auth_bind_userdn = uid=%u,ou=users,dc=mydomain,dc=com// //ldap_version = 3// //base = ou=Users,dc=mydomain,dc=com// //scope = base// //default_pass_scheme = SSHA512 / Do you have an idead ? Kind regards. -- Michael

2 3

lmtp: Error: Temp file creation to /tmp/ ... failed: No such file or directory on incoming mails with attachments
by Lars-Sören Steck 09 Jun '17

09 Jun '17

Dear list, I'm currently facing problems when receiving eMails with attachments, at least sometimes. My mailserver is set up with the tool 'Mailcow', and hence is based on Dovecot (2.2.22 (fe789d2)) and Postfix. Usually, there are no problems with receiving mails. If a mail has an attachment, however, it is possible that the following error occurs (extract from /var/log/mail.log): 'Jun 7 12:50:28 mail postfix/lmtp[26827]: 564E68A0515: to=<abc(a)def.ghj>, relay=my.mail.server[private/dovecot-lmtp], delay=0.71, delays=0.67/0.01/0.01/0.02, dsn=4.3.0, status=deferred (host my.mail.server[private/dovecot-lmtp] said: 451 4.3.0 Temporary internal failure (in reply to end of DATA command))' Extract from /var/log/mail.err: 'Jun 7 12:50:28 mail dovecot: lmtp(26828): Error: Temp file creation to /tmp/dovecot.lmtp.mail.26828. failed: No such file or directory' Once this happened the first time after dovecot is running, it will happen for all incoming mails with attachments. This can be solved temporarily by restarting the dovecot service and running postqueue -f, but that obviously does not solve the underlying problem. In this post to this list, it is stated that dovecot sometimes creates temp files to avoid 'excessive memory usage'. I'm guessing that this is the case here, also the error message is similiar: https://dovecot.org/list/dovecot/2016-June/104722.html Should I simply change the configuration variable mail_temp_dir to solve this? Why is dovecot not able to find the /tmp folder? In the list thread, it is stated that this is caused by dovecot running with enabled chrooting. As far as I understand it though (correct me if I'm wrong), chrooting is not enabled in my dovecot configuration. Please find attached the output of 'dovecot -n': # 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.13 (7b14904) # OS: Linux 4.4.0-78-generic x86_64 Ubuntu 16.04.2 LTS auth_mechanisms = plain login dict { sqlquota = mysql:/etc/dovecot/dovecot-dict-sql.conf } listen = * log_timestamp = "%Y-%m-%d %H:%M:%S " login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c %k mail_home = /var/vmail/%d/%n mail_location = maildir:~/ mail_max_userip_connections = 500 mail_plugins = quota acl fts fts_solr managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace { list = yes location = maildir:%%h/:INDEXPVT=~/Shared/%%u prefix = Shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Archiv { special_use = \Archive } mailbox Archive { auto = subscribe special_use = \Archive } mailbox Archives { special_use = \Archive } mailbox "Deleted Messages" { special_use = \Trash } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Entwürfe { special_use = \Drafts } mailbox "Gelöschte Objekte" { special_use = \Trash } mailbox Gesendet { special_use = \Sent } mailbox "Gesendete Objekte" { special_use = \Sent } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Papierkorb { special_use = \Trash } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } plugin { acl = vfile acl_anyone = allow acl_shared_dict = file:/var/vmail/shared-mailboxes.db fts = solr fts_autoindex = yes fts_solr = url=http://127.0.0.1:8983/solr/ quota = dict:Userquota::proxy::sqlquota quota_rule2 = Trash:storage=+100%% sieve = /var/vmail/sieve/%u.sieve sieve_after = /var/vmail/sieve/global.sieve sieve_max_script_size = 1M sieve_quota_max_scripts = 0 sieve_quota_max_storage = 0 } protocols = imap sieve lmtp pop3 service auth { unix_listener /var/spool/postfix/private/auth_dovecot { group = postfix mode = 0660 user = postfix } unix_listener auth-master { mode = 0600 user = vmail } unix_listener auth-userdb { mode = 0600 user = vmail } user = root } service dict { unix_listener dict { group = vmail mode = 0660 user = vmail } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } user = vmail } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 2 service_count = 1 vsz_limit = 128 M } service managesieve { process_limit = 256 } ssl_cert = </etc/ssl/mail/mail.crt ssl_cipher_list = EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA ssl_dh_parameters_length = 2048 ssl_key = </etc/ssl/mail/mail.key ssl_protocols = !SSLv3 !SSLv2 userdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } protocol imap { mail_plugins = quota imap_quota imap_acl acl fts fts_solr } protocol lmtp { auth_socket_path = /var/run/dovecot/auth-master mail_plugins = quota sieve acl fts fts_solr postmaster_address = postmaster(a)steck.cc } protocol sieve { managesieve_logout_format = bytes=%i/%o } remote 127.0.0.1 { disable_plaintext_auth = no } Thank you for your help. Lars

2 2

Re: Any documentation around timeout states ?
by Joseph Tam 08 Jun '17

08 Jun '17

> Hi, this has been fixed in more recent release, where the states are > converted to human readable strings, see > > https://git.dovecot.net/dovecot/core/commit/e7d9dd003e6192b294507b9fbe9917a… Internal name I guess. For the rest of us: https://github.com/dovecot/core/commit/e7d9dd003e6192b294507b9fbe9917a514e4… Joseph Tam <jtam.home(a)gmail.com>

1 0

Re: Dovecot login is slow
by Aki Tuomi 08 Jun '17

08 Jun '17

Can you try adding blocking=yes to your dovecot-ldap.conf.ext Aki On 08.06.2017 11:15, Mitocariu Emilian wrote: > No, other servers use the same LDAP and the response is fast. The > weird part is that this morning i played a little with the > configuration, but in the end i came back to the settings i had > previously and now it works better, but from time to time it still > hangs a little > > On Thu, Jun 8, 2017 at 11:07 AM, Aki Tuomi <aki.tuomi(a)dovecot.fi > <mailto:aki.tuomi@dovecot.fi>> wrote: > > > > On 07.06.2017 16:34, Mitocariu Emilian wrote: > > Hi, > > > > I have an Ubuntu 16.04 server with dovecot 2.2.22 configured as > an imap > > server with an LDAP backend for authentication. This is the > output of > > "dovecot -n": > > # 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf > > The problem i'm having is that when i try to login it takes more than 10 > > seconds, making my webmail very slow. For testing i login to > imap like this > > "openssl s_client -connect localhost:993" and sometimes i get > this message > > "* OK Waiting for authentication master process to respond..". I > saw at > > other people, one of the problem was because they didn't > disabled pam > > authentication when using another backend (like ldap or sql), > but i already > > did that. > > > > Does anyone know what could cause such long login times and how > to fix it? > > Does your LDAP take long time to respond? > > Aki > >

1 0

mail storage auto detection failed?
by Alef Veld 08 Jun '17

08 Jun '17

Hi everyone. Nice to meet you. I’m new to dovecot and i came across a problem it seems. I setup a new user called sales with useradd, and gave it a password. Although it has a home directory, i set login to /sbin/nologin. When logging into the pop server on port 110 (with telnet) i get this in the logs: dovecot: pop3-login: Login: user=<sales>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=12938, secured, session=<94SotWVRoAB/AAAB> Jun 7 21:49:24 www dovecot: pop3(sales): Error: user sales: Initialization failed: Namespace '': Mail storage autodetection failed with home=/home/sales Jun 7 21:49:24 www dovecot: pop3(sales): Error: Invalid user settings. Refer to server log for more information. Did i have to initialise the mailbox in the homedirectory? What did i forget. I didn't change anything to the default dovecot.conf, i just installed the package with yum install dovecot (so latest version). This error also shows up when logging into port 143. Thanks for your help. My dovecot -n output if that helps is : [ec2-user@www log]$ dovecot -n # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 4.9.20-10.30.amzn1.x86_64 x86_64 mbox_write_locks = fcntl namespace inbox { inbox = yes location = prefix = } passdb { driver = pam } ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem ssl_protocols = !SSLv2 !SSLv3 userdb { driver = passwd } Thanks a lot. -atv

2 1

Any documentation around timeout states ?
by Matt Bryant 08 Jun '17

08 Jun '17

Been seeing a number of proxy timouts recently with errors such as ... timed out in state=4 timed out in state=2 Is there any doco around what state 2/4 actually means ... atm got auth_debug on to see if we can track further information down centos 7 x86_64 dovecot 2.2.19 rgds Matt

2 1

Dovecot login is slow
by Mitocariu Emilian 08 Jun '17

08 Jun '17

Hi, I have an Ubuntu 16.04 server with dovecot 2.2.22 configured as an imap server with an LDAP backend for authentication. This is the output of "dovecot -n": # 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.13 (7b14904) # OS: Linux 4.4.0-77-generic x86_64 Ubuntu 16.04.2 LTS auth_debug_passwords = yes mail_gid = vmail mail_location = maildir:~/ mail_privileged_group = mail mail_uid = vmail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocols = imap lmtp service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } ssl_cert = </path/to/my/cert ssl_key = </path/to/my/key userdb { args = /etc/dovecot/dovecot-ldap.conf.ext default_fields = home=/var/mail/vmail/%n driver = ldap } The problem i'm having is that when i try to login it takes more than 10 seconds, making my webmail very slow. For testing i login to imap like this "openssl s_client -connect localhost:993" and sometimes i get this message "* OK Waiting for authentication master process to respond..". I saw at other people, one of the problem was because they didn't disabled pam authentication when using another backend (like ldap or sql), but i already did that. Does anyone know what could cause such long login times and how to fix it?

2 1

Segmentation fault in imap_bodystructure_is_plain_7bit
by mihaiush 08 Jun '17

08 Jun '17

Hi, I have a lot of errors like this in my log: Fatal: master: service(imap): child 26049 killed with signal 11 (core dumped) Dovecot 2.2.18 build from sources ./configure --prefix=/opt/dovecot2 --with-mysql --with-sqlite --with-solr --with-ssl --disable-rpath --disable-static. Debian Wheezy 3.2.63-2 x86_64. Filesystem is ZFS. All the core files are similar: $ gdb /opt/dovecot2/libexec/dovecot/imap core GNU gdb (GDB) 7.4.1-debian Copyright (C) 2012 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html > This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /opt/dovecot2/libexec/dovecot/imap...done. [New LWP 11635] warning: Can't read pathname for load map: Input/output error. [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `/opt/dovecot2/libexec/dovecot/imap imap-postlogin'. Program terminated with signal 11, Segmentation fault. #0 imap_bodystructure_is_plain_7bit (part=part@entry=0x234cd50) at imap-bodystructure.c:458 458 if (data->content_subtype != NULL && (gdb) bt #0 imap_bodystructure_is_plain_7bit (part=part@entry=0x234cd50) at imap-bodystructure.c:458 #1 0x00007f920a0fbfaf in index_mail_body_parsed_cache_flags (mail=0x234be60) at index-mail.c:587 #2 index_mail_parse_body_finish (mail=mail@entry=0x234be60, field=field@entry=MAIL_CACHE_IMAP_BODYSTRUCTURE, success=success@entry=true) at index-mail.c:1007 #3 0x00007f920a0fc369 in index_mail_parse_body (mail=mail@entry=0x234be60, field=field@entry=MAIL_CACHE_IMAP_BODYSTRUCTURE) at index-mail.c:1081 #4 0x00007f920a0fc498 in index_mail_parse_bodystructure (mail=mail@entry=0x234be60, field=field@entry=MAIL_CACHE_IMAP_BODYSTRUCTURE) at index-mail.c:1222 #5 0x00007f920a0fcf1c in index_mail_get_special (_mail=_mail@entry=0x234be60, field=field@entry=MAIL_FETCH_IMAP_BODYSTRUCTURE, value_r=value_r@entry=0x7ffc1518fde8) at index-mail.c:1379 #6 0x00007f920a0b29cd in dbox_mail_get_special (_mail=_mail@entry=0x234be60, field=field@entry=MAIL_FETCH_IMAP_BODYSTRUCTURE, value_r=value_r@entry=0x7ffc1518fde8) at dbox-mail.c:229 #7 0x00007f920a0a83f0 in mdbox_mail_get_special (_mail=0x234be60, field=MAIL_FETCH_IMAP_BODYSTRUCTURE, value_r=0x7ffc1518fde8) at mdbox-mail.c:213 #8 0x00007f920a08f96d in mail_get_special (mail=<optimized out>, field=field@entry=MAIL_FETCH_IMAP_BODYSTRUCTURE, value_r=value_r@entry=0x7ffc1518fde8) at mail.c:317 #9 0x0000000000419a6a in fetch_bodystructure (ctx=0x232bbd8, mail=<optimized out>, context=<optimized out>) at imap-fetch.c:690 #10 0x0000000000419f9f in imap_fetch_more_int (ctx=ctx@entry=0x232bbd8, cancel=false) at imap-fetch.c:506 #11 0x000000000041af07 in imap_fetch_more (ctx=0x232bbd8, cmd=cmd@entry=0x232ba00) at imap-fetch.c:558 #12 0x000000000040f0c9 in cmd_fetch (cmd=0x232ba00) at cmd-fetch.c:286 #13 0x0000000000418aec in command_exec (cmd=cmd@entry=0x232ba00) at imap-commands.c:167 #14 0x0000000000417ad0 in client_command_input (cmd=cmd@entry=0x232ba00) at imap-client.c:814 #15 0x0000000000417b64 in client_command_input (cmd=0x232ba00) at imap-client.c:874 #16 0x0000000000417e45 in client_handle_next_command (remove_io_r=<synthetic pointer>, client=0x232ade0) at imap-client.c:912 #17 client_handle_input (client=client@entry=0x232ade0) at imap-client.c:924 #18 0x0000000000418212 in client_input (client=0x232ade0) at imap-client.c:966 #19 0x00007f9209df134b in io_loop_call_io (io=0x232b8f0) at ioloop.c:501 #20 0x00007f9209df1e5b in io_loop_handler_run_internal (ioloop=ioloop@entry=0x22ec790) at ioloop-epoll.c:220 #21 0x00007f9209df13d9 in io_loop_handler_run (ioloop=ioloop@entry=0x22ec790) at ioloop.c:548 #22 0x00007f9209df1458 in io_loop_run (ioloop=0x22ec790) at ioloop.c:525 #23 0x00007f9209d92993 in master_service_run (service=0x22ec620, callback=callback@entry=0x421140 <client_connected>) at master-service.c:581 #24 0x000000000040c60b in main (argc=2, argv=0x22ec390) at main.c:431 (gdb) q I wrote a patch which solved the problem but: - my C is absolutely basic, - dovecot is already at version 2.2.30, maybe problem was already fixed. Anyway I attached my patch, please have a look. Thanks.

1 0

Which allowed services can be defined (imap, pop3, etc.)
by Malte Schmidt 08 Jun '17

08 Jun '17

Hello, I am using Dovecot with an LDAP-backend for authentication. According to the documentation at https://wiki.dovecot.org/Authentication/RestrictAccess with LDAP and "pass_filter" it is possible to filter allowed services for the user with: pass_filter = (&(objectClass=posixAccount)(uid=%u)(service=%s)) Thats pretty cool. Now, in the LDAP-settings I created corresponding fields (service) and added the allowed services to tthese fields (imap, pop3, etc.). After that change, certain services were not available to that user anymore. So it seems that more services are there and after explicitly setting the services which are allowed, the other, not mentioned services stop to work. Now two questions: Is there any documented, full-featured list of the services that can be added? Is it possible to "flip" that setting so its not allowing certain services but denying the ones that are added to the "service"-fields? Cheers

2 3

Master users
by Noriyuki TAKEI 08 Jun '17

08 Jun '17

Hi,all What version of dovecot supports master users? Master users means as follows https://wiki2.dovecot.org/Authentication/MasterUsers -- ・‥…━━━━━━━━━━━━━━━━━━━━━━━…‥ サイオステクノロジー株式会社技術部クラウドソリューショングループ武井宜行〒106-0047 東京都港区南麻布二丁目 12 番 3 号サイオスビル TEL：03-6401-5314 (直通) 03-6401-5117 (部代表) URL：http://www.sios.com/ ■SIOSの最新情報はこちらから！「いいね！」をお待ちしています■ (SIOS Technology)：http://www.facebook.com/SIOSTechnology (OSSよろず相談室)：http://www.facebook.com/OSSyorozu ■Twitter公式アカウント■ https://twitter.com/#!/SIOS_Technology ・‥…━━━━━━━━━━━━━━━━━━━━━━━…‥

2 2

virtual isp address, local delivery
by Hugh Bragg 07 Jun '17

07 Jun '17

I'm trying to understand how to deliver mail to an address locally which is popped from my isps email account. I access and keep these emails backed up on dovecot and use postfix smtp to deliver mail. The problem is that while fetchmail uses dovecot lda directly, postfix can't include my isps domain in its $mydestination because I won't be able to send mail to other users in that domain. I want to be able to send mail to other users I'm popping for in that domain, or even send myself mail. Currently postfix just relays the mail to the isp and it returns through fetchmail, but I'd like to have it delivered locally and still be able to email my isp users that I don't pop. As far as I can tell, this can't be done because virtual users have to be in postfix $mydestination. Does someone have a better setup they can share or know how to do this? Hugh

2 3

doveadm sync SSL error when upgrading from 2.2.27 -> 2.2.29
by Pallissard, Matthew 07 Jun '17

07 Jun '17

I'm starting to see the following error from doveadm when upgrading from 2.2.27 to 2.2.29. > doveadm(ip.add.re.ss): Error: doveadm client disconnected before handshake: SSL_accept() failed: error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher I'm using a cert/key with the following curve. ASN1 OID: prime256v1 NIST CURVE: P-256 Downgrading to 2.2.27 resolves the issue. Does anyone know about this off the top of their head? If not I'll try to git-bisect 2.2.27->2.2.28 for any offending commits later on this week. -- Matt Pallissard

1 0

2.2.30.2 fails to compile on centos 7
by Matt Bryant 07 Jun '17

07 Jun '17

Just downloaded the latest release 2.2.30.2, ran ./configure with all defaults and make ... and it fails to build .. error somewhere whilst running Makefile in lib-http libtool: link: gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -Wl,--as-needed -o test-http-server-errors test-http-server-errors.o -Wl,--export-dynamic ./.libs/libhttp.a ../lib-dns/.libs/libdns.a ../lib-ssl-iostream/.libs/libssl_iostream.a ../lib-master/.libs/libmaster.a ../lib-settings/.libs/libsettings.a ../lib-test/.libs/libtest.a ../lib/.libs/liblib.a -ldl collect2: error: ld returned 1 exit status make[3]: *** [test-http-server-errors] Error 1 make[3]: Leaving directory `/home/rpmbuild/rpmbuild/BUILD/dovecot-2.2.30.2/src/lib-http' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/home/rpmbuild/rpmbuild/BUILD/dovecot-2.2.30.2/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/home/rpmbuild/rpmbuild/BUILD/dovecot-2.2.30.2' make: *** [all] Error 2 any ideas ?? 2.2.30.1 built ok ... rgds Matt

3 6

Moving from CentOS to GF RPMs
by Roger Klorese 07 Jun '17

07 Jun '17

Does anyone have fool-proof documentation for this fool on how to configure repos and what operations to perform to move from the distro RPMs to the GF ones without breaking stuff?

2 2

Re: v2.2.30.1
by Joseph Tam 07 Jun '17

07 Jun '17

Aki Tuomi <aki.tuomi(a)dovecot.fi> wrote: > On 06.06.2017 14:11, Olaf Hopp wrote: >> On 06/05/2017 11:05 AM, Angel L. Mateo wrote: >>> I have updated my dovecot proxy servers from 2.2.28 to 2.2.30. >>> Since the upgrade I'm having the error: >>> >>> Jun 5 10:54:51 musio12 dovecot: auth: Fatal: master: service(auth): >>> child 63632 killed with signal 11 (core not dumped) +1. > We have identified a bug in auth process, and are working with a fix. This is the 1 line context around the same thing I am seeing, if it helps. It seems to happen with brute force scanning Jun 6 06:13:30 server dovecot: imap-login: Warning: Auth connection closed with 1 pending requests (max 7 secs, pid=20675 , EOF) Jun 6 06:13:30 server dovecot: auth: Fatal: master: service(auth): child 20676 killed with signal 11 (core not dumped - set service auth { drop_priv_before_exec=yes }) Jun 6 06:13:30 server dovecot: imap-login: Disconnected (auth failed, 1 attempts in 7 secs): user=<{dead@account}>, method=PLAIN, rip=5.188.11.11, lip={my-ip}, TLS, session=<EpJbYkpRInsFvAsL> Bots aren't known to exit cleanly, so it's probably related to prematurely dropped connections. Apart from that, I'm not seeing this with real users. Joseph Tam <jtam.home(a)gmail.com>

1 1

Bug with 2.2.29-1~auto+25 back to haunt me
by Ralf Hildebrandt 06 Jun '17

06 Jun '17

After upgrading from 2.2.28-1~auto+45 to 2.2.29-1~auto+25 I'm gettings this: May 31 16:44:31 mproxy dovecot: auth: Fatal: passdb imap: Cannot verify certificate without ssl_ca_dir or ssl_ca_file setting May 31 16:44:31 mproxy dovecot: master: Error: service(auth): command startup failed, throttling for 8 secs May 31 16:44:31 mproxy dovecot: imap-login: Disconnected: Auth process broken (disconnected before auth was ready, waited 2 secs): user=<>, rip=141.42.206.36, lip=141.42.206.11, TLS, session=<ze1A9dJQZ8yNKs4k> # doveconf -n # 2.2.devel (215fd61): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.devel (403042e) # OS: Linux 4.4.0-71-generic x86_64 Ubuntu 16.04.2 LTS auth_mechanisms = plain login default_vsz_limit = 1 G imapc_host = exchange-imap.charite.de imapc_port = 993 imapc_ssl = imaps imapc_ssl_verify = no listen = *,:: mail_gid = imapproxy mail_home = /home/imapproxy/%u mail_location = imapc:~/imapc mail_plugins = mail_log notify mail_uid = imapproxy passdb { args = host=exchange-imap.charite.de port=993 ssl=imaps default_fields = userdb_imapc_user=%u userdb_imapc_password=%w userdb_imapc_host=exchange-imap.charite.de userdb_imapc_ssl=imaps userdb_imapc_port=993 driver = imap } plugin { sieve = file:~/sieve;active=~/.dovecot.sieve } protocols = imap service auth { inet_listener { address = 127.0.0.1 port = 12345 } } ssl = required ssl_ca = </etc/ssl/certs/ca-certificates.crt ssl_cert = </etc/dovecot/dovecot.pem ssl_cipher_list = EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4 ssl_client_ca_file = /etc/ssl/certs/ca-certificates.crt ssl_key = # hidden, use -P to show it ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 userdb { driver = prefetch } verbose_proctitle = yes So I added ssl_ca_file = /etc/ssl/certs/ca-certificates.crt But alas: May 31 16:50:24 mproxy dovecot: config: Warning: Obsolete setting in /etc/dovecot/conf.d/10-ssl.conf:36: ssl_ca_file has been replaced by ssl_ca = <file Gnarf! As you can see I do HAVE ssl_ca in my doveconf -n output! ssl_ca = </etc/ssl/certs/ca-certificates.crt So what gives? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | https://www.charite.de

2 6

v2.2.30.2 released
by Timo Sirainen 06 Jun '17

06 Jun '17

https://dovecot.org/releases/2.2/dovecot-2.2.30.2.tar.gz https://dovecot.org/releases/2.2/dovecot-2.2.30.2.tar.gz.sig Hopefully the last 2.2.30.x.. - auth: Multiple failed authentications within short time caused crashes - push-notification: OX driver crashed at deinit

1 0

2.2.29.8: YACD (Yet Another Core Dump)
by Luciano Mannucci 06 Jun '17

06 Jun '17

I'm getting this in my logfile, should I worry?: Jun 06 12:28:47 imap(paco_mcs): Error: Next message unexpectedly corrupted in mbox file /var/spool/mail/paco_mcs at 639279728 Jun 06 12:28:47 imap(paco_mcs): Error: Unexpectedly lost From-line from mbox file /var/spool/mail/paco_mcs at 639279728 Jun 06 12:28:47 imap(paco_mcs): Panic: file mbox-sync.c: line 1338 (mbox_sync_handle_eof_updates): assertion failed: (trailer_size <= 2) Jun 06 12:28:47 imap(paco_mcs): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x9cd16) [0xb75e7d16] -> /usr/lib/dovecot/libdovecot.so.0(+0x9cd9f) [0xb75e7d9f] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0xb757104e] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x81698) [0xb76d4698] -> /usr/lib/dovecot/libdovecot-storage.so.0(mbox_sync+0x4b) [0xb76d71cb] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x7728c) [0xb76ca28c] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x778c6) [0xb76ca8c6] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_get_stream_because+0x5f) [0xb768112f] -> /usr/lib/dovecot/libdovecot-storage.so.0(imap_msgpart_open+0x811) [0xb774bef1] -> dovecot/imap() [0x8064c76] -> dovecot/imap() [0x80629c6] -> dovecot/imap(imap_fetch_more+0x31) [0x8063ed1] -> dovecot/imap(cmd_fetch+0x4bb) [0x805574b] -> dovecot/imap(command_exec+0x4a) [0x80613aa] -> dovecot/imap() [0x805f8d6] -> dovecot/imap() [0x805f961] -> dovecot/imap(client_handle_input+0x185) [0x805fcc5] - > dovecot/imap(client_input+0x71) [0x80601b1] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x67) [0xb75ff997] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xeb) [0xb76013ab] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x45) [0xb75ffa55] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x48) [0xb75ffc18] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x2d) [0xb757c1ad] -> dovecot/imap(main+0x344) [0x806dbc4] -> /lib/libc.so.6(__libc_start_main+0xfe) [0xb73d6c2e] Jun 06 12:28:48 imap(paco_mcs): Fatal: master: service(imap): child 4989 killed with signal 6 (core dumped) Jun 06 12:28:52 imap(paco_mcs): Error: Next message unexpectedly lost from mbox file /var/spool/mail/paco_mcs at 1073259120 (noncached) Jun 06 12:28:52 imap(paco_mcs): Error: Sync failed for mbox file /var/spool/mail/paco_mcs: Couldn't get body size for seq=11213 My doveconf -n: # 2.2.29.1 (e0b76e3): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.17 (e179378) # OS: Linux 3.0.101-105-pae i686 openSUSE 11.4 (i586) ext3 auth_cache_size = 3 k auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_verbose = yes default_client_limit = 1249 default_vsz_limit = 712 M disable_plaintext_auth = no first_valid_gid = 0 first_valid_uid = 100 info_log_path = /var/log/dovecot/logfile.info listen = * log_path = /var/log/dovecot/logfile login_greeting = Dovecot at Baobab ready. login_trusted_networks = 127.0.0.0/8 212.45.144.0/24 192.168.134.0/24 mail_location = mbox:/var/spool/mailboxes/%u:INBOX=/var/spool/mail/%u:DIRNAME=mbox:INDEX=/var/dovecot_indexes/%u maildir_copy_with_hardlinks = no managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mbox_lock_timeout = 443 secs namespace { inbox = yes location = prefix = separator = . type = private } passdb { driver = pam } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size } protocols = pop3 imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service imap-login { inet_listener imaps { address = * } process_limit = 512 } service pop3-login { chroot = executable = pop3-login -D inet_listener pop3s { address = * } process_limit = 512 } ssl_ca = </etc/ssl/ca.crt ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = # hidden, use -P to show it userdb { driver = passwd } version_ignore = yes protocol imap { imap_client_workarounds = delay-newmail mail_plugins = mail_log notify } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_enable_last = yes } protocol lda { info_log_path = /var/log/dovecot/lda.log log_path = /var/log/dovecot/lda-errors.log postmaster_address = postmaster(a)mcs.it } Cheers, Luciano. -- /"\ /Via A. Salaino, 7 - 20144 Milano (Italy) \ / ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250 X AGAINST HTML MAIL / E-MAIL: posthamster(a)sublink.sublink.ORG / \ AND POSTINGS / WWW: http://www.lesassaie.IT/

2 2

Multiuser attachment storage (mail_attachment_dir)
by megaone＠yandex.ru 06 Jun '17

06 Jun '17

Was trying to set up attachment storage, but folders are receiving permission only for current user, so if another user is receiving a mail with same attachment he is getting permission denied error on reading hash file. Is it possible to setup global attachment storage to work with all users, at least in domain? mail_access_groups won't help, as folders are given 0 group permission. Umask and setfacl won't help either.

2 1

Two domains - same user names filter
by Sandbox 06 Jun '17

06 Jun '17

Hi, I have two LDAP domains, which has some equal users, eg: abc(a)domain1.com abc(a)domain2.com I sat up this config: domain1 users maildirs are stored in /home/vmail/username domain2 users maildirs are stored in /home/vmail/domain2/username This works fine except one thing: i cant set up the ldap query to choose the correct maildir if the user names are equal. Is it possible to use a user_filter which will choose the correct maildir and user/domain from the email address? My current ldap.conf for domain1: hosts = ldap.domain1.com base = ou=People,dc=domain1,dc=com ldap_version = 3 user_attrs = uid=user user_filter = (uid=%n) pass_attrs = uid=user,userPassword=password pass_filter = (uid=%n) default_pass_scheme = MD5 and for domain2: hosts = ldap.domain2.com base = ou=People,dc=domain2,dc=com ldap_version = 3 user_attrs = \ =mail=maildir:/home/vmail/%{ldap:departmentNumber)/%n/Maildir user_filter = (uid=%n) pass_attrs = uid=%n,userPassword=password pass_filter = (uid=%n) default_pass_scheme = MD5 Thanks, Robert

4 7

vnd.dovecot.pipe in sieve: what user....
by Larry Rosenman 06 Jun '17

06 Jun '17

I have a site-wide bayes database, that currently gets populated by scripts running as a user that is also the user that Exim uses to call spamd. When a script is running from the vnd.dovecot.pipe call, what user is it running as? Would a setuid script work? -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: larryrtx(a)gmail.com US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

2 1

Re: corrupted indexes rebuilding over and over
by Joseph Tam 06 Jun '17

06 Jun '17

micah <micah(a)riseup.net> wrote: > Now, about 50 users have a problem where their indexes are > corrupted. Dovecot tries to fix them, but for some reason it is > failing. The users are seeing their mails duplicated and they cannot > delete mails. I can see in the logs dovecot detecting this and trying to > rebuild operations during delivery and imap login, but its repeating > over and over and over. For one user, I've seen more than 4k lines in > the logs about this. > > If i try to do doveadm force-resync -u username INBOX > > I get this: > > doveadm(nuffsaid): Warning: mdbox /n/nuffsaid/mdbox/storage: Inconsistency in map index (3494,32332 != 3494,383536) I think mdbox is sensitive to index corruption. mbox/maildir indices can be rebuilt, but data loss can result if mdbox indices are corrupted: https://wiki2.dovecot.org/MailboxFormat/dbox "Grubert, Gordon" <gordon.grubert+lists(a)uni-greifswald.de> then writes: > we had the same problem after a system failure. Our problem could be > solved by > > rm /PATH/USER/mdbox/storage/dovecot.map.index* > doveadm -D -v force-resync -u USER INBOX Not sure given the above URL whether this will solve your problem of make it far worse. Better back up what you have before trying anything. Joseph Tam <jtam.home(a)gmail.com>

1 0

corrupted indexes rebuilding over and over
by micah 05 Jun '17

05 Jun '17

Hi, On saturday one of our dovecot machines had an OOPS, and we had to powercycle it. When it came up, it did a filesystem fsck (ext4) and fixed a couple things, but nothing in lost+found. Now, about 50 users have a problem where their indexes are corrupted. Dovecot tries to fix them, but for some reason it is failing. The users are seeing their mails duplicated and they cannot delete mails. I can see in the logs dovecot detecting this and trying to rebuild operations during delivery and imap login, but its repeating over and over and over. For one user, I've seen more than 4k lines in the logs about this. If i try to do doveadm force-resync -u username INBOX I get this: doveadm(nuffsaid): Warning: mdbox /n/nuffsaid/mdbox/storage: Inconsistency in map index (3494,32332 != 3494,383536) doveadm(nuffsaid): Warning: fscking index file /srv/dovecot_indexes/n/nuffsaid/storage/dovecot.map.index doveadm(nuffsaid): Warning: mdbox /n/nuffsaid/mdbox/storage: rebuilding indexes doveadm(nuffsaid): Warning: fscking index file /srv/dovecot_indexes/n/nuffsaid/storage/dovecot.map.index doveadm(nuffsaid): Warning: mdbox /n/nuffsaid/mdbox/storage: Inconsistency in map index (3494,32332 != 3494,384024) doveadm(nuffsaid): Warning: fscking index file /srv/dovecot_indexes/n/nuffsaid/storage/dovecot.map.index but then if i do it again, I get the same thing, over and over and over (the numbers change a little). This is dovecot 2.2.27 with mdbox format.... what can I do to fix this? Its driving users mad, and they keep going over quota as their space fills. thanks! micah

2 2

fts_solr: uid0?
by Larry Rosenman 05 Jun '17

05 Jun '17

I'm seeing the following: Jun 5 11:10:52 thebighonker dovecot: imap(ler): Error: fts_solr: received invalid uid '0' Is there something I can get for you to debug? doveconf -n: # 2.2.30.1 (eebd877): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.18 (29cc74d) # OS: FreeBSD 11.1-PRERELEASE amd64 auth_debug_passwords = yes auth_default_realm = lerctr.org auth_mechanisms = plain login auth_realms = lerctr.org thebighonker.lerctr.org tbh.lerctr.org auth_username_format = %Ln default_vsz_limit = 1 G deliver_log_format = msgid=%m: %$ (subject=%s from=%f size=%w) lda_mailbox_autocreate = yes listen = 192.147.25.65, :: lmtp_save_to_detail_mailbox = yes login_access_sockets = tcpwrap mail_attribute_dict = file:%h/mail/.imap/dovecot-mail-attributes mail_debug = yes mail_location = mbox:~/mail:INBOX=~/mail/INBOX mail_plugins = " fts fts_solr notify stats virtual" mail_privileged_group = mail mail_server_admin = mailto:ler@lerctr.org mail_server_comment = LERCTR Mail Server mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vacation-seconds editheader mboxmetadata servermetadata imapsieve vnd.dovecot.imapsieve namespace archive { hidden = no list = no location = mbox:~/MAIL-ARCHIVE prefix = ARCHIVE/ separator = / } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox INBOX { auto = create } mailbox Junk { special_use = \Junk } mailbox SA/FN { special_use = \Junk } mailbox SENT { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } mailbox virtual/Flagged { special_use = \Flagged } mailbox virtual/all { special_use = \All } prefix = } namespace virtual { hidden = no list = yes location = virtual:~/MAIL-VIRTUAL:INDEX=MEMORY prefix = Virtual/ separator = / } passdb { args = failure_show_msg=yes session=yes max_requests=20 driver = pam } plugin { fts = solr fts_autoindex = yes fts_solr = url=http://thebighonker.lerctr.org:8983/solr/dovecot/ fts_tika = http://localhost:9998/tika/ imapsieve_url = sieve://thebighonker.lerctr.org mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid size from subject vsize flags recipient_delimiter = + sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +editheader +vacation-seconds +mboxmetadata +servermetadata sieve_plugins = sieve_imapsieve stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_refresh = 5s stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-client { mode = 0666 } unix_listener auth-master { mode = 0666 } } service indexer-worker { drop_priv_before_exec = yes } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0666 user = } fifo_listener stats-user { group = mode = 0666 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service tcpwrap { unix_listener login/tcpwrap { group = $default_login_user mode = 0600 user = $default_login_user } } ssl_cert = </home/ler/letsencrypt-home/lerctr.org/fullchain.cer ssl_cipher_list = EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+AESGCM:EECDH:EDH+AESGCM:EDH+aRSA:HIGH:!MEDIUM:!LOW:!aNULL:!eNULL:!LOW:!RC4:!MD5:!EXP:!PSK:!SRP:!DSS ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv2 !SSLv3 userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { mail_plugins = " fts fts_solr notify stats virtual sieve mail_log" } protocol lda { mail_plugins = " fts fts_solr notify stats virtual sieve mail_log" } protocol pop3 { mail_plugins = " fts fts_solr notify stats virtual mail_log" } protocol !doveadm { mail_plugins = " fts fts_solr notify stats virtual mail_log" } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags imap_logout_format = in=%i out=%o fhc=%{fetch_hdr_count} fhb=%{fetch_hdr_bytes} fbc=%{fetch_body_count} fbb=%{fetch_body_bytes} del=%{deleted} exp=%{expunged} trash=%{trashed} imap_metadata = yes mail_max_userip_connections = 50 mail_plugins = " fts fts_solr notify stats virtual mail_log imap_sieve imap_stats stats" } -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: larryrtx(a)gmail.com US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

1 0

SIG11/Auth/FreeBSD
by Larry Rosenman 05 Jun '17

05 Jun '17

I'm seeing lots of: Jun 2 00:00:05 thebighonker exim[57437]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51339 I=[192.147.25.65]:465: 535 Incorrect authentication data (set_id=web) Jun 2 00:00:06 thebighonker exim[57439]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51363 I=[192.147.25.65]:465: 535 Incorrect authentication data (set_id=web) Jun 2 00:00:06 thebighonker exim[57438]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51355 I=[192.147.25.65]:465: 535 Incorrect authentication data (set_id=web) Jun 2 00:00:06 thebighonker exim[57443]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51385 I=[192.147.25.65]:465: 435 Unable to authenticate at present: authentication socket read error or premature e of Jun 2 00:00:06 thebighonker exim[57442]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51368 I=[192.147.25.65]:465: 435 Unable to authenticate at present: authentication socket read error or premature e of Jun 2 00:00:06 thebighonker exim[57441]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51361 I=[192.147.25.65]:465: 435 Unable to authenticate at present: authentication socket read error or premature e of Jun 2 00:00:06 thebighonker exim[57440]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51362 I=[192.147.25.65]:465: 435 Unable to authenticate at present: authentication socket read error or premature e of Jun 2 00:00:06 thebighonker dovecot: auth: Fatal: master: service(auth): child 55916 killed with signal 11 (core not dumped - set s ervice auth { drop_priv_before_exec=yes }) The suggestion to drop_priv_before_exec=yes breaks auth totally. doveconf -n: # 2.2.30.1 (eebd877): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.18 (29cc74d) # OS: FreeBSD 11.0-STABLE amd64 auth_default_realm = lerctr.org auth_mechanisms = plain login auth_realms = lerctr.org thebighonker.lerctr.org tbh.lerctr.org auth_username_format = %Ln default_vsz_limit = 1 G deliver_log_format = msgid=%m: %$ (subject=%s from=%f size=%w) lda_mailbox_autocreate = yes listen = 192.147.25.65, :: lmtp_save_to_detail_mailbox = yes login_access_sockets = tcpwrap mail_attribute_dict = file:%h/mail/.imap/dovecot-mail-attributes mail_debug = yes mail_location = mbox:~/mail:INBOX=~/mail/INBOX mail_plugins = " fts fts_solr notify stats virtual" mail_privileged_group = mail mail_server_admin = mailto:ler@lerctr.org mail_server_comment = LERCTR Mail Server mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vacation-seconds editheader mboxmetadata servermetadata imapsieve vnd.dovecot.imapsieve namespace archive { hidden = no list = no location = mbox:~/MAIL-ARCHIVE prefix = ARCHIVE/ separator = / } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox INBOX { auto = create } mailbox Junk { special_use = \Junk } mailbox SA/FN { special_use = \Junk } mailbox SENT { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } mailbox virtual/Flagged { special_use = \Flagged } mailbox virtual/all { special_use = \All } prefix = } namespace virtual { hidden = no list = yes location = virtual:~/MAIL-VIRTUAL:INDEX=MEMORY prefix = Virtual/ separator = / } passdb { args = failure_show_msg=yes session=yes max_requests=20 driver = pam } plugin { fts = solr fts_autoindex = yes fts_solr = url=http://thebighonker.lerctr.org:8983/solr/dovecot/ fts_tika = http://localhost:9998/tika/ imapsieve_url = sieve://thebighonker.lerctr.org mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid size from subject vsize flags recipient_delimiter = + sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +editheader +vacation-seconds +mboxmetadata +servermetadata sieve_plugins = sieve_imapsieve stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_refresh = 5s stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-client { mode = 0666 } unix_listener auth-master { mode = 0666 } } service indexer-worker { drop_priv_before_exec = yes } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0666 user = } fifo_listener stats-user { group = mode = 0666 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service tcpwrap { unix_listener login/tcpwrap { group = $default_login_user mode = 0600 user = $default_login_user } } ssl_cert = </home/ler/letsencrypt-home/lerctr.org/fullchain.cer ssl_cipher_list = EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+AESGCM:EECDH:EDH+AESGCM:EDH+aRSA:HIGH:!MEDIUM:!LOW:!aNULL:!eNULL:!LOW:!RC4:!MD5:!EXP:!PSK:!SRP:!DSS ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv2 !SSLv3 userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { mail_plugins = " fts fts_solr notify stats virtual sieve mail_log" } protocol lda { mail_plugins = " fts fts_solr notify stats virtual sieve mail_log" } protocol pop3 { mail_plugins = " fts fts_solr notify stats virtual mail_log" } protocol !doveadm { mail_plugins = " fts fts_solr notify stats virtual mail_log" } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags imap_logout_format = in=%i out=%o fhc=%{fetch_hdr_count} fhb=%{fetch_hdr_bytes} fbc=%{fetch_body_count} fbb=%{fetch_body_bytes} del=%{deleted} exp=%{expunged} trash=%{trashed} imap_metadata = yes mail_max_userip_connections = 50 mail_plugins = " fts fts_solr notify stats virtual mail_log imap_sieve imap_stats stats" } -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: larryrtx(a)gmail.com US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

2 4

Possible RENAME bug
by Gabriele Bulfon 05 Jun '17

05 Jun '17

Hello, I'm having some trouble working on a webapp managing the imap tree on Dovecot. The same doesn't happen on other imap servers (e.g. Cyrus). Looks like if I receive shared folders from another user, and try to rename a folder in it, the rename command returns "ok", then if you list the new folder name, it isn't there. Looks like you've lost all the original folder because if you try listing the parent folder, you don't have nor the original nor the new name, even trying to logout/disconnect and reconnect/login. Luckily nothing is lost actually, if you try to create a new folder on the parent folder, and then list the parent folder, you get both the newly created one and the renamed one also appears magically! Here is the IMAP trace to reproduce: *** ON ACCOUN RECEIVING SHARED FOLDER *** PREPARE A FOLDER IN SHARED TREE WITH JUST ONE CHILD "aaaa" *** THEN RENAME aaaa FOLDER TO bbbb *** AFTER "OK Rename" FOLDER IS NOT PRESENT IN LIST A3 LIST "" Shared/gabriele.prova(a)sonicle.com/Junk/aaaa * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Junk/aaaa A3 OK List completed. A4 RENAME Shared/gabriele.prova(a)sonicle.com/Junk/aaaa Shared/gabriele.prova(a)sonicle.com/Junk/bbbb A4 OK Rename completed. A5 LIST "" Shared/gabriele.prova(a)sonicle.com/Junk/bbbb A5 OK List completed. *** bbbb IS NOT LISTED AFTER "OK Rename"! *** LOGOUT/DISCONNECT - CONNECT/LOGIN AND LIST BRANCH *** A66 LIST "" "Shared/gabriele.prova(a)sonicle.com/%" * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Sent * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Drafts * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Trash * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Spam * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Junk * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/INBOX A66 OK List completed. *** Junk HAS NO CHILDREN! *** CREATE A NEW FOLDER IN Junk *** A68 CREATE Shared/gabriele.prova(a)sonicle.com/Junk/zzzz A68 OK Create completed. A69 LIST "" Shared/gabriele.prova(a)sonicle.com/Junk/zzzz * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Junk/zzzz A69 OK List completed. *** "zzzz" IS LISTED, SO NOW LIST PARENT BRANCH *** A26 LIST "" "Shared/gabriele.prova(a)sonicle.com/%" * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Sent * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Drafts * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Trash * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Spam * LIST (\HasChildren) "/" Shared/gabriele.prova(a)sonicle.com/Junk * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/INBOX A26 OK List completed. *** Junk NOW HAS CHILDREN, SO NOW LIST Junk BRANCH *** A29 LIST "" "Shared/gabriele.prova(a)sonicle.com/Junk/%" * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Junk/bbbb * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Junk/zzzz A29 OK List completed. *** bbbb MAGICALLY APPEARS! NOTHING IS LOST. Is there anything I can do to force "bbbb" to reappear without having to create a new folder? Any idea? Thanks in advance, Gabriele ---------------------------------------------------------------------------------------- Sonicle S.r.l. : http://www.sonicle.com Music: http://www.gabrielebulfon.com Quantum Mechanics : http://www.cdbaby.com/cd/gabrielebulfon

2 2

Problem with LMTP
by Angel L. Mateo 05 Jun '17

05 Jun '17

Hello, I'm having a problem with LMTP in a proxy server since I upgraded from 2.1.16 to 2.2.28. In my logs I have: Apr 26 12:54:17 musio12 dovecot: lmtp(2082): Fatal: master: service(lmtp): child 2082 killed with signal 11 (core dumped). As far as I could check the message is delivered in a later connection. I have enabled core dumped files, but how could I debug it? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

2 11

Retrieving mail from read-only mdbox
by Mark Moseley 05 Jun '17

05 Jun '17

This is a 'has anyone run into this and solved it' post. And yes, I've been reading and re-reading TFM but without luck. The background is that I'm working on tooling before we start a mass maildir->mdbox conversion. One of those tools is recovering mail from backups (easy as pie with maildir). We've got all of our email on Netapp file servers. They have nice snapshotting but the snapshots are, of course, readonly. My question: is there a doveadm command that will allow for email to be retrieved from a readonly mdbox, either directly (like manipulating the mdbox files directly) or by doveadm talking to the dovecot processes? Ideally, there'd be something like doveadm dump, but that could dump selected message contents. I've tried using IMAP with mail_location pointed at the snapshot, but, though I can get a listing of emails in the mailbox, the fetch fails when dovecot can't write-lock dovecot.index.log. If anyone has gotten something similar to work, I'd love to hear about it. A working IMAP setup would be the ideal, since it's more easily automatible (but I'll take whatever I can get). Any and all hints are most welcome!

4 4

10-ssl.conf: Unknown setting: ssl / debian 1:2.2.13-12~deb8u
by Sophie Loewenthal 05 Jun '17

05 Jun '17

Hi, I've been trying to get dovecot2 running and kept having this error message: May 13 13:38:32 mail systemd[1]: Started Dovecot IMAP/POP3 email server. May 13 13:38:32 mail dovecot[2178]: doveconf: Fatal: Error in configuration file /etc/dovecot/conf.d/10-ssl.conf line 61: Unknown setting: ssl # dovecot --build-options Build options: ioloop=epoll notify=inotify ipv6 openssl io_block_size=8192 Mail storages: shared mdbox sdbox maildir mbox cydir imapc pop3c raw fail SQL driver plugins: mysql postgresql sqlite Passdb: checkpassword ldap pam passwd passwd-file shadow sql Userdb: checkpassword ldap(plugin) nss passwd prefetch passwd-file sql # openssl version OpenSSL 1.0.1t 3 May 2016 This package is from from Debian repos with version number 1:2.2.13-12~deb8u amd64 In case I had inadvertently entered some invisible charaters in 10-ssl.conf, I deleted and typed this out. Not copy-pasted: # >10-ssl.conf # cat 10-ssl.conf # echo 'ssl = required' >10-ssl.conf # echo 'ssl_key = </etc/ssl/private/xxx.key' >>10-ssl.conf # echo 'ssl_cert = </etc/ssl/private/xxx.pem' >>10-ssl.conf I’ve done usual searching online for a week and read some dox, but cannot see what I’ve missed out. Any ideas? Please? Thanks, Sophie

4 14

quota clone + mysql + duplicate key
by Dimos Alevizos 05 Jun '17

05 Jun '17

I'm trying to setup quota clone with mysql on dovecot 2.2.29.1. I see in the wiki that the table is always updated to the new value (https://wiki.dovecot.org/Plugins/QuotaClone) : > Every time quota is updated, the value is updated to the cloned dict. > There are race conditions with it so the quota may not always be 100% > correct. The old value is always replaced with the new one though (not > just incremented/decremented) so the cloned quota is never too much wrong. But the queries I see don't agree : 1186029 Query BEGIN 1186029 Query INSERT INTO quota (bytes,messages,username) VALUES (25002030,226,'user(a)domain.tld') ON DUPLICATE KEY UPDATE bytes=bytes+25002030,messages=messages+226 1186029 Query COMMIT Is it a bug or am I missing something in my configuration ? The relevant part of the config : dict { sqlquota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } plugin { quota = count:User quota quota_clone_dict = proxy::sqlquota quota_exceeded_message = Quota for this mail account has been exceeded, please try again later. quota_grace = 1M quota_vsizes = yes } map { pattern = priv/quota/storage table = quota username_field = username value_field = bytes } map { pattern = priv/quota/messages table = quota username_field = username value_field = messages } Dimos

1 0

Panic: file dsync-brain-mailbox.c: line 814 ...
by Sander Lepik 04 Jun '17

04 Jun '17

Hi! We have 2 servers replicating each other and after upgrade to 2.2.26.0 we are seeing this in the logs: Primary server: Nov 17 09:37:39 mailhost01 dovecot: dsync-server(user(a)domain.ee): Panic: file dsync-brain-mailbox.c: line 814 (dsync_brain_slave_recv_mailbox): assertion failed: (memcmp(dsync_box->mailbox_guid, local_dsync_box.mailbox_guid, sizeof(dsync_box->mailbox_guid)) == 0) Nov 17 09:37:39 mailhost01 dovecot: dsync-server(user(a)domain.ee): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x9438e) [0x7f3ccceb238e] -> /usr/lib/dovecot/libdovecot.so.0(+0x9447c) [0x7f3ccceb247c] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f3ccce4ba4e] -> dovecot/doveadm-server(dsync_brain_slave_recv_mailbox+0x3d8) [0x7f3ccd8f66f8] -> dovecot/doveadm-server(dsync_brain_run+0x650) [0x7f3ccd8f4110] -> dovecot/doveadm-server(+0x4143b) [0x7f3ccd8f443b] -> dovecot/doveadm-server(+0x5735f) [0x7f3ccd90a35f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x4c) [0x7f3cccec6bdc] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x10a) [0x7f3cccec809a] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x25) [0x7f3cccec6c65] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f3cccec6e08] -> dovecot/doveadm-server(+0x26b99) [0x7f3ccd8d9b99] -> dovecot/doveadm-server(+0x28efc) [0x7f3ccd8dbefc] -> dovecot/doveadm-server(+0x3daba) [0x7f3ccd8f0aba] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x4c) [0x7f3cccec6bdc] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x10a) [0x7f3cccec809a] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x25) [0x7f3cccec6c65] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f3cccec6e08] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f3ccce51f53] -> dovecot/doveadm-server(main+0x19f) [0x7f3ccd8ccdef] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f3ccca94b45] -> dovecot/doveadm-server(+0x19ea6) [0x7f3ccd8ccea6] Nov 17 09:37:39 mailhost01 dovecot: dsync-server(user(a)domain.ee): Fatal: master: service(doveadm): child 42621 killed with signal 6 (core dumps disabled) Secondary server: Nov 17 09:37:40 secondarymailhost01 dovecot: dsync-local(user(a)domain.ee): Error: read(mailhost01.domeen.ee) failed: EOF (last sent=mailbox, last recv=mailbox_state) I'm guessing that it happens during automatic full resync, but that's just guessing. OS is Debian 8 (x86_64) and Dovecot is recompiled from Debian's unstable repository. -- Sander

2 2

ACL File
by Bobber 02 Jun '17

02 Jun '17

I'm getting inconsistent behavior from my acl file. I have an acl vfile configured with this: > Jobs$* anyone lrwikst > $* user=bob.wooldridge(a)edm-inc.com lrwstipekxa > $* user=michael.user(a)edm-inc.com lrwstipekxa > Jobs$* user=bob.wooldridge(a)edm-inc.com lrwstipekxa > Jobs$* user=michael.user(a)edm-inc.com lrwstipekxa The Jobs folder is a public shared folder. I want just the two users to be able to have complete control of anything in the shared Jobs folder. Currently, user bob is able to move folders to sub folders but user michael is sometimes able to move folders but mostly not. I am using Thunderbird as the mail client. Sometimes I can restart Thunderbird and it will allow one operation but subsequent operations error out with Thunderbird saying the user does not have permissions. Here's my doveconf -n: > # 2.2.30.1 (eebd877): /usr/local/etc/dovecot/dovecot.conf > # OS: Linux 3.16.0-0.bpo.4-amd64 x86_64 Debian 7.11 > auth_cache_size = 8 k > auth_debug = yes > first_valid_gid = 89 > first_valid_uid = 89 > last_valid_gid = 89 > last_valid_uid = 89 > listen = * > log_path = /dev/stderr > login_greeting = IMAP service for edm-inc.com clients. > mail_location = maildir:~/Maildir > mail_plugins = " listescape acl" > namespace { > inbox = yes > location = > prefix = > separator = $ > type = private > } > namespace { > location = maildir:/home/vpopmail/domains/edm-inc.com/public > prefix = Jobs$ > separator = $ > subscriptions = no > type = public > } > passdb { > args = cache_key=%u%s > driver = vpopmail > } > plugin { > acl = vfile:/usr/local/etc/dovecot/acls:cache_secs=300 > } > protocols = imap > service auth { > user = root > vsz_limit = 64 M > } > service imap-login { > process_limit = 150 > service_count = 1 > } > ssl_cert = </etc/ssl/certs/mail_edm-inc_com.pem > ssl_key = # hidden, use -P to show it > userdb { > driver = vpopmail > } > userdb { > driver = vpopmail > } > protocol imap { > mail_plugins = " listescape acl imap_acl" > } -- *Bob Wooldridge* Blog: http://kc0dxf.net/blog/

1 0

updated to dove 2.30.1 and still the same error ....
by dovecot＠jeffandjessi.com 02 Jun '17

02 Jun '17

Well.. updated to 2.30.1 hoping it would fix this mysterious seg fault ... ,but nope ... auth: Fatal: master: service(auth): child 14502 killed with signal 11 (core dumped) the core dump shows gdb) bt #0 0x00007f7ff4a06bee in ?? () #1 0x00007f7ff74a4f44 in io_loop_handle_remove () from /usr/local/lib/dovecot/libdovecot.so.0 #2 0x00007f7ff74a3765 in io_remove_full () from /usr/local/lib/dovecot/libdovecot.so.0 #3 0x00007f7ff7438b62 in master_service_deinit () from /usr/local/lib/dovecot/libdovecot.so.0 #4 0x00000000004307ef in main () no symbols are available as this is a pkg install.... so whats next? time to dump dovecot after running it for 10 years? Can't believe no one else is seeing this .... the symtoms are dovecot starts up fine when a client connects, they authorize just fine and download email .... about a minute later the auth process crashes and the entire process starts over .... so how do you trouble shoot this ... it sounds like a coding issue some place .... anyone ?

2 1

Problem with dsync backup
by Sergio Belkin 02 Jun '17

02 Jun '17

Hi folks, Firstly, the first: dovecot --version 2.2.10 dovecot -n # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-514.16.1.el7.x86_64 x86_64 CentOS Linux release 7.3.1611 (Core) auth_debug = yes auth_krb5_keytab = /var/lib/dovecot/krb5.keytab auth_master_user_separator = * auth_mechanisms = plain login gssapi auth_verbose = yes debug_log_path = /dev/null default_process_limit = 400 disable_plaintext_auth = no first_valid_uid = 988 imapc_features = rfc822.size fetch-headers imapc_host = mail.example-aid.com imapc_master_user = osstand imapc_password = secret imapc_ssl = starttls imapc_ssl_verify = no imapc_user = %u import_environment = TZ KRB5CCNAME last_valid_uid = 988 lmtp_save_to_detail_mailbox = yes mail_gid = vmail mail_location = maildir:~/Maildir mail_plugins = " acl listescape fts fts_lucene" mail_prefetch_count = 20 mail_shared_explicit_inbox = yes mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags mbox_write_locks = fcntl namespace PUBLIC { list = children location = maildir:/var/lib/nethserver/vmail/vmail/Maildir:INDEXPVT=~/Maildir/public prefix = Public/ separator = / subscriptions = no type = public } namespace ROOT { inbox = yes location = mailbox Drafts { auto = no special_use = \Drafts } mailbox Sent { auto = no special_use = \Sent } mailbox "Sent Messages" { auto = no special_use = \Sent } mailbox Trash { auto = no special_use = \Trash } prefix = separator = / subscriptions = yes type = private } namespace SHARED_USERS { disabled = no list = children location = maildir:/var/lib/nethserver/vmail/%%u/Maildir:INDEXPVT=~/Maildir/shared/%%u prefix = Shared/%%n(a)example.local/ separator = / subscriptions = no type = shared } passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes } passdb { args = dovecot-master driver = pam master = yes } passdb { args = /etc/dovecot/deny.passwd deny = yes driver = passwd-file } passdb { args = max_requests=100 failure_show_msg=yes blocking=yes driver = pam } plugin { acl = vfile acl_shared_dict = file:/var/lib/nethserver/vmail/shared-mailboxes.db antispam_backend = MAILTRAIN antispam_mail_notspam = ham antispam_mail_sendmail = /usr/libexec/nethserver/spam-training.sh antispam_mail_sendmail_args = %u antispam_mail_spam = spam antispam_spam = Junk antispam_trash = Trash fts = lucene fts_lucene = whitespace_chars=@. sieve_after = /var/lib/nethserver/sieve-scripts/after.sieve sieve_before = /var/lib/nethserver/sieve-scripts/before.sieve sieve_extensions = +imapflags } protocols = imap lmtp sieve pop3 service anvil { client_limit = 1603 } service auth { client_limit = 2000 unix_listener /var/spool/postfix/private/smtpauth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0660 } } service dict { unix_listener dict { mode = 0600 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 } unix_listener imap-ipc { group = root mode = 0600 user = $default_internal_user } } service imap-postlogin { executable = script-login /usr/libexec/nethserver/dovecot-postlogin user = $default_internal_user } service imap { executable = imap imap-postlogin } service lmtp { client_limit = 1 unix_listener lmtp { group = vmail mode = 0660 user = vmail } user = vmail } service managesieve { executable = managesieve sieve-postlogin } service pop3-postlogin { executable = script-login /usr/libexec/nethserver/dovecot-postlogin user = $default_internal_user } service pop3 { executable = pop3 pop3-postlogin } service sieve-postlogin { executable = script-login /usr/libexec/nethserver/dovecot-postlogin user = $default_internal_user } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = username_format=%Ln /etc/dovecot/imap.passwd driver = passwd-file override_fields = uid=988 gid=985 home=/var/lib/nethserver/vmail/%Ln } userdb { driver = passwd override_fields = uid=988 gid=985 home=/var/lib/nethserver/vmail/%u skip = found } protocol imap { mail_max_userip_connections = 12 mail_plugins = " acl listescape fts fts_lucene imap_acl antispam" } protocol lmtp { mail_plugins = " acl listescape fts fts_lucene sieve" } When I try to import a mailbox from an Exchange server, this is the output: time dsync -D -v backup -R -u sergio.zuniga(a)example.local imapc: |& tee /tmp/errors2 doveadm(root): Debug: Loading modules from directory: /usr/lib64/dovecot doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/lib01_acl_plugin.so doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/lib20_fts_plugin.so doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/lib20_listescape_plugin.so doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/lib21_fts_lucene_plugin.so doveadm(root): Debug: Loading modules from directory: /usr/lib64/dovecot/doveadm doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib10_doveadm_acl_plugin.so doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib10_doveadm_sieve_plugin.so doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib20_doveadm_fts_lucene_plugin.so doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib20_doveadm_fts_plugin.so doveadm(sergio.zuniga(a)example.local): Debug: Effective uid=988, gid=985, home=/var/lib/nethserver/vmail/sergio.zuniga(a)example.local doveadm(sergio.zuniga(a)example.local): Debug: Namespace ROOT: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir doveadm(sergio.zuniga(a)example.local): Debug: maildir++: root=/var/lib/nethserver/vmail/sergio.zuniga(a)example.local/Maildir, index=, indexpvt=, control=, inbox=/var/lib/nethserver/vmail/sergio.zuniga(a)example.local/Maildir, alt= doveadm(sergio.zuniga(a)example.local): Debug: acl: initializing backend with data: vfile doveadm(sergio.zuniga(a)example.local): Debug: acl: acl username = sergio.zuniga(a)example.local doveadm(sergio.zuniga(a)example.local): Debug: acl: owner = 1 doveadm(sergio.zuniga(a)example.local): Debug: acl vfile: Global ACL directory: (none) doveadm(sergio.zuniga(a)example.local): Debug: Namespace SHARED_USERS: type=shared, prefix=Shared/%n(a)example.local/, sep=/, inbox=no, hidden=no, list=children, subscriptions=no location=maildir:/var/lib/nethserver/vmail/%u/Maildir:INDEXPVT=~/Maildir/shared/%u doveadm(sergio.zuniga(a)example.local): Debug: shared: root=/var/run/dovecot, index=, indexpvt=, control=, inbox=, alt= doveadm(sergio.zuniga(a)example.local): Debug: fts: Indexes disabled for namespace 'Shared/%n(a)example.local/' doveadm(sergio.zuniga(a)example.local): Debug: acl: initializing backend with data: vfile doveadm(sergio.zuniga(a)example.local): Debug: acl: acl username = sergio.zuniga(a)example.local doveadm(sergio.zuniga(a)example.local): Debug: acl: owner = 0 doveadm(sergio.zuniga(a)example.local): Debug: acl vfile: Global ACL directory: (none) doveadm(sergio.zuniga(a)example.local): Debug: Namespace PUBLIC: type=public, prefix=Public/, sep=/, inbox=no, hidden=no, list=children, subscriptions=no location=maildir:/var/lib/nethserver/vmail/vmail/Maildir:INDEXPVT=~/Maildir/public doveadm(sergio.zuniga(a)example.local): Debug: maildir++: root=/var/lib/nethserver/vmail/vmail/Maildir, index=, indexpvt=/var/lib/nethserver/vmail/sergio.zuniga(a)example.local/Maildir/public, control=, inbox=, alt= doveadm(sergio.zuniga(a)example.local): Debug: acl: initializing backend with data: vfile doveadm(sergio.zuniga(a)example.local): Debug: acl: acl username = sergio.zuniga(a)example.local doveadm(sergio.zuniga(a)example.local): Debug: acl: owner = 0 doveadm(sergio.zuniga(a)example.local): Debug: acl vfile: Global ACL directory: (none) doveadm(sergio.zuniga(a)example.local): Debug: acl vfile: file /var/lib/nethserver/vmail/sergio.zuniga(a)example.local/Maildir/dovecot-acl not found doveadm(sergio.zuniga(a)example.local): Debug: acl vfile: file /var/lib/nethserver/vmail/sergio.zuniga(a)example.local/Maildir/.Sent/dovecot-acl not found doveadm(sergio.zuniga(a)example.local): Debug: Namespace : Using permissions from /var/lib/nethserver/vmail/sergio.zuniga(a)example.local/Maildir: mode=0700 gid=default dsync(sergio.zuniga(a)example.local): Debug: Effective uid=988, gid=985, home=/var/lib/nethserver/vmail/sergio.zuniga(a)example.local dsync(sergio.zuniga(a)example.local): Debug: Namespace ROOT: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=imapc: dsync(sergio.zuniga(a)example.local): Debug: imapc(mail.example.com:143): Looking up IP address dsync(sergio.zuniga(a)example.local): Debug: imapc(mail.example.com:143): Connecting to 192.168.50.1:143 dsync(sergio.zuniga(a)example.local): Debug: imapc(mail.example.com:143): Server capabilities: IMAP4 IMAP4rev1 LOGINDISABLED STARTTLS IDLE NAMESPACE LITERAL+ dsync(sergio.zuniga(a)example.local): Debug: imapc(mail.example.com:143): Starting SSL handshake dsync(sergio.zuniga(a)example.local): Debug: imapc(mail.example.com:143): SSL handshake successful, ignoring invalid certificate: SSL certificate not received dsync(sergio.zuniga(a)example.local): Debug: imapc(mail.example.com:143): Server capabilities: IMAP4 IMAP4rev1 AUTH=GSSAPI AUTH=PLAIN IDLE NAMESPACE LITERAL+ dsync(sergio.zuniga(a)example.local): Debug: imapc(mail.example.com:143): Authenticating as neth.stand for user sergio.zuniga(a)example.local dsync(sergio.zuniga(a)example.local): Error: imapc(mail.example.com:143): Authentication failed: AUTHENTICATE failed. dsync(sergio.zuniga(a)example.local): Debug: imapc(mail.example.com:143): Disconnected dsync(sergio.zuniga(a)example.local): Error: imapc: Command failed: Disconnected from server dsync(sergio.zuniga(a)example.local): Error: user sergio.zuniga(a)example.local: Initialization failed: Namespace '': Mailbox list driver imapc: Failed to access imapc backend Also, mailllog has a lot of lines as of: dovecot: auth: passwd-file(john.doe(a)infoestructura.local,127.0.0.1,<qRwxrulQ/gB/AAAB>): unknown user Please could you help to know where is the error? Thanks in advance!! -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org

2 1

Re: Retrieving mail from read-only mdbox
by Joseph Tam 01 Jun '17

01 Jun '17

> I've tried using IMAP with mail_location pointed at the snapshot, but, > though I can get a listing of emails in the mailbox, the fetch fails when > dovecot can't write-lock dovecot.index.log. I've thought about doing this someday (adding snapshots to a user's namespace) but never got around to doing it. Snapshots get rotated (e.g. hourly.1 -> hourly.2 -> etc.) so every hour, so any indices produced gets invalidated. You would need to generate MEMORY indices to create it on the fly. Something like namespace snapshots { location = ...:INDEX==MEMORY ... } I'm not sure how dovecot would react when NetApp pulls the rug out from under one of the hourly snapshots and replace it with the next hour's version. Joseph Tam <jtam.home(a)gmail.com>

3 2

SSL problem - no banner
by Marcio Merlone 01 Jun '17

01 Jun '17

Hi, I am running dovecot 2.2.22-1ubuntu2.4 on a ubuntu 16.04 server. It has a valid Letsencrypt certificate but the problem also happens with a self-digned one. Only openssl s_client -connect localhost:993 works fine and fast, while all MUA's and telnet does not. Telnet timeouts waiting for banner after a minute or so: root@netuno:~# openssl s_client -connect localhost:993 CONNECTED(00000003) depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3 verify return:1 depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 verify return:1 (...) Start Time: 1496081321 Timeout : 300 (sec) Verify return code: 0 (ok) --- * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready. 0 logout * BYE Logging out 0 OK Logout completed. closed root@netuno:~# telnet localhost 993 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. (about 1 minute later...) Connection closed by foreign host. root@netuno:~# I Have enabled verbose_ssl = yes and mail_debug = yes but no useful info got to logs. Has anyone seen this? Any hint? Thanks, best regards. -- *Marcio Merlone*

3 3

Two domains, same users
by Sandbox 01 Jun '17

01 Jun '17

Hi, I have two LDAP domains, which has some equal users, eg: abc(a)domain1.com abc(a)domain2.com I sat up this config: domain1 users maildirs are stored in /home/vmail/username domain2 users maildirs are stored in /home/vmail/domain2/username This works fine except one thing: i cant set up the ldap query to choose the correct maildir if the user names are equal. Is it possible to use a user_filter which will choose the correct maildir and user/domain from the email address? My current ldap.conf for domain1: hosts = ldap.domain1.com base = ou=People,dc=domain1,dc=com ldap_version = 3 user_attrs = uid=user user_filter = (uid=%n) pass_attrs = uid=user,userPassword=password pass_filter = (uid=%n) default_pass_scheme = MD5 and for domain2: hosts = ldap.domain2.com base = ou=People,dc=domain2,dc=com ldap_version = 3 user_attrs = \ =mail=maildir:/home/vmail/%{ldap:departmentNumber)/%n/Maildir user_filter = (uid=%n) pass_attrs = uid=%n,userPassword=password pass_filter = (uid=%n) default_pass_scheme = MD5 Thanks, Robert

1 0

Re: v2.2.30 released
by Joseph Tam 01 Jun '17

01 Jun '17

Timo wrote: >> (Lots of this ...) >> May 26 15:22:50 server dovecot: pop3(user): Warning: Transaction log file /{cachedir}/dovecot.index.log was locked for 43 seconds (rotating while syncing) >> May 27 16:57:18 server dovecot: imap(user): Warning: Transaction log file /{cachedir}/dovecot.index.log was locked for 105 seconds (Mailbox was synchronized) > > Not really an error, just bad performance. Probably happens when a user is doing I/O on their large INBOX's via NFS, and bogging down. Thanks for explaining this. Joseph Tam <jtam.home(a)gmail.com>

1 0

sieve folders in maildir with imap: not a directory not fixed with maildir_stat_dirs = yes
by David Gessel 01 Jun '17

01 Jun '17

As my logs fill up with "imap(user(a)domain.com): Error: stat(/mail/doman.com/user//.dovecot.sieve/tmp) failed: Not a directory" errors, I followed the advice at https://wiki2.dovecot.org/VirtualUsers/Home and https://dovecot.org/list/dovecot/2016-June/104403.html and set in /usr/local/etc/dovecot/conf.d/10-mail.conf # By default LIST command returns all entries in maildir beginning with a dot. # Enabling this option makes Dovecot return only entries which are directories. # This is done by stat()ing each entry, so it causes more disk I/O. # (For systems setting struct dirent->d_type, this check is free and it's # done always regardless of this setting) maildir_stat_dirs = yes My mailbox format reads "mail_location = maildir:~:CONTROL=/var/no-quota/%u:INDEX=MEMORY" The error is factually correct, but there is not .dovecot.sieve/tmp directory or file as .dovecot.sieve is a file (the head sieve script that calls the subordinate scripts out of the /sieve directory. There is a tmp directory at /sieve/tmp/ drwxr----- 2 vmail vmail 2B May 31 04:14 tmp Any hints as to why this isn't working? It does seem like the right answer.

2 2

Re: v2.2.30.1 released
by Eric Broch 01 Jun '17

01 Jun '17

Built on CentOS 7 without a hitch. On 5/31/2017 7:24 AM, Timo Sirainen wrote: > https://dovecot.org/releases/2.2/dovecot-2.2.30.1.tar.gz > https://dovecot.org/releases/2.2/dovecot-2.2.30.1.tar.gz.sig > > Due to some release process changes I didn't notice that one important bugfix wasn't included in the v2.2.30 release branch before I made the release. So fixing it here with v2.2.30.1. Also included another less important fix. > > - quota_warning scripts weren't working in v2.2.30 > - vpopmail still wasn't compiling > > Also I guess should mention that in v2.2.30+ the "script" service's protocol changed to a new version. If anyone had written their own script services (not using the included "script" binary) they would need some changes. I haven't heard of anyone having done that though. -- Eric Broch White Horse Technical Consulting (WHTC)

1 0

Re: v2.2.30 released
by Joseph Tam 31 May '17

31 May '17

Timo wrote: >>> + If dovecot.index.cache corruption is detected, reset only the one >>> corrupted mail instead of the whole file. >> >> Is this a big performance win? I still have users with jumbo mailboxes >> who insist on direct mailbox file access using procmail or mail readers, >> which trigger index rebuilds when dovecot accesses them. > > What does Dovecot log then? But probably doesn't affect that. It's > only when Dovecot logs something about dovecot.index.cache corruption > that this helps. It logs stuff like this (Lots of this ...) May 26 15:22:50 server dovecot: pop3(user): Warning: Transaction log file /{cachedir}/dovecot.index.log was locked for 43 seconds (rotating while syncing) May 27 16:57:18 server dovecot: imap(user): Warning: Transaction log file /{cachedir}/dovecot.index.log was locked for 105 seconds (Mailbox was synchronized) (... and some this this ...) May 26 15:43:07 server dovecot: imap(user): Error: Next message unexpectedly corrupted in mbox file /var/mail/user at 9627641 (... but very rarely this ...) May 8 17:05:59 server dovecot: imap(user): Error: Corrupted index cache file /{cachedir}/dovecot.index.cache: Broken virtual size for mail UID 12032 in mailbox INBOX: read(/var/mail/user): FETCH BODY[] got too little data: 6199 vs 6201 >From what you say, the changes would only affects the latter, so no big change. Thanks for the info. Joseph Tam <jtam.home(a)gmail.com>

2 1

shared folder and private index file problems
by Thomas Robers 31 May '17

31 May '17

Hello, I'm using Dovecot 2.2.30 with Pideonhole 0.4.18 and I'm having some problems, perhaps someone can give an hint on how to solve them. When I try to create a folder in the toplevel directory of a shared mailbox, i get a "permission denied" although I have the rights, example: 1.doveadm -f table acl rights -u bob(a)example.com shared/bill(a)example.com Rights lookup read write write-seen write-deleted insert post expunge create delete admin 2.doveadm mailbox create -u bob(a)example.com "shared/bill(a)example.com" doveadm(bob(a)example.com): Error: Can't create mailbox shared/bill(a)example.com: Permission denied Creating an subfolder of a folder which already exists works fine: 1.doveadm -f table acl rights -u bob(a)example.com shared/bill(a)example.com /Drafts Rights lookup read write write-seen write-deleted insert post expunge create delete admin 2.doveadm mailbox create -u bob(a)example.com "shared/bill(a)example.com /Drafts/Test" (no output) 3.doveadm -f table acl rights -u bob(a)example.com shared/bill(a)example.com /Drafts/Test Rights lookup read write write-seen write-deleted insert post expunge create delete So this works, but creating a folder directly in the inbox of the shared mailbox doesn't work and I don't know why. Is this not supported? Or do I miss something important? Another problem I have is, that the private index files in shared folders are often to always marked as inconsistent in the dovecot log file, an example of such log messages look like: - imap(bob(a)example.com): Error: /export/home/imap/bob(a)example.com/shared /bill(a)example.com/.Templates/dovecot.index.pvt view is inconsistent - imap(bob(a)example.com): Error: /export/home/imap/bob(a)example.com/shared /bill(a)example.com/.Templates/dovecot.index.pvt view is inconsistent - imap(bob(a)example.com): Error: /export/home/imap/bob(a)example.com/shared /bill(a)example.com/.Trash/dovecot.index.pvt view is inconsistent - imap(bob(a)example.com): Error: /export/home/imap/bob(a)example.com/shared /bill(a)example.com/.Trash/dovecot.index.pvt view is inconsistent And this is logged for almost every user who has access to a shared mailbox and I don't know how to stop getting the indexes inconsistent. Here's my Dovecot configuration: # 2.2.30 (8acbc67): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.18 (29cc74d) # OS: Linux 2.6.32-642.4.2.el6.x86_64 x86_64 CentOS release 6.9 (Final) ext4 auth_master_user_separator = * auth_mechanisms = plain login auth_verbose = yes disable_plaintext_auth = no mail_debug = yes mail_location = maildir:/export/home/imap/%Lu/Maildir mail_plugins = acl zlib mail_log notify mailbox_idle_check_interval = 10 secs mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mbox_write_locks = fcntl namespace { hidden = no ignore_on_failure = no inbox = no list = children location = maildir:%%h/Maildir:INDEXPVT=%h/shared/%%u prefix = shared/%%u/ separator = / subscriptions = yes type = shared } namespace inbox { hidden = no inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX/ separator = / type = private } passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 acl_shared_dict = file:/export/home/shared-db/shared-mailboxes mail_log_events = append delete undelete expunge copy mailbox_delete mailbox_rename flag_change mail_log_fields = uid box msgid size from flags sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global = /var/lib/dovecot/sieve/global/ sieve_user_log = ~/.dovecot.sieve.log zlib_save = gz zlib_save_level = 6 } protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } service imap-login { process_limit = 500 process_min_avail = 20 } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl = required ssl_cert = </etc/pki/dovecot/certs/mail.tutech.de.crt_chain ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL:!EXPORT ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv3 !SSLv2 syslog_facility = local6 userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf.ext driver = ldap } protocol lmtp { mail_plugins = acl zlib mail_log notify sieve } protocol imap { mail_max_userip_connections = 100 mail_plugins = acl zlib mail_log notify imap_zlib imap_acl } Any help is appreciated. Many Thanks & best regards Thomas

1 0

Still trouble with vpopmail
by Bobber 31 May '17

31 May '17

Getting this error: > In file included from ../../src/lib/lib.h:6:0, > from auth-common.h:4, > from userdb-vpopmail.c:5: > ../../config.h:791:0: note: this is the location of the previous > definition > #define VERSION "2.2.30" > ^ > userdb-vpopmail.c: In function ‘userdb_vpopmail_get_quota’: > userdb-vpopmail.c:72:6: error: too many arguments to function ‘var_expand’ > if (var_expand(quota, template, tab, error_r) < 0) > ^ > In file included from auth-request.h:5:0, > from userdb.h:89, > from userdb-vpopmail.c:6: > ../../src/lib/var-expand.h:18:6: note: declared here > void var_expand(string_t *dest, const char *str, > ^ > userdb-vpopmail.c:72:2: error: void value not ignored as it ought to be > if (var_expand(quota, template, tab, error_r) < 0) -- *Bob Wooldridge* Blog: http://kc0dxf.net/blog/

3 3

Re: v2.2.30 released
by Joseph Tam 31 May '17

31 May '17

Timo Sirainen announced > + If dovecot.index.cache corruption is detected, reset only the one > corrupted mail instead of the whole file. Is this a big performance win? I still have users with jumbo mailboxes who insist on direct mailbox file access using procmail or mail readers, which trigger index rebuilds when dovecot accesses them. Joseph Tam <jtam.home(a)gmail.com>

2 1

mailserver.users does not exist
by Amaechi Janneh 31 May '17

31 May '17

Hello. It appears that I have an issue with my dovecot setup. When trying to authenticate, i get this error: May 28 20:18:26 AmaechiJ dovecot[10516]: imap-login: Login: user=< aj(a)example.com>, method=PLAIN, rip=, lip=, mpid=10879, TLS, ses...QOQBg9rlR> May 28 20:18:42 AmaechiJ dovecot[10516]: imap(aj(a)example.com): Connection closed in=116 out=1311 May 28 20:20:32 AmaechiJ dovecot[10516]: auth-worker(10892): Warning: mysql: Query failed, retrying: Table 'mailserver.users' doesn't exist May 28 20:20:32 AmaechiJ dovecot[10516]: auth-worker(10892): Error: sql( aj(a)example.com,) User query failed: Table 'mailserver.users' doesn't exist May 28 20:20:32 AmaechiJ dovecot[10516]: imap-login: Login: user=< aj(a)example.com>, method=PLAIN, rip=, lip=, mpid=10894, TLS, ses...QZwBg9rlR> But I already have the users data under virtual_users. So what should I do? Regards, Amaechi Janneh

2 1

Re: SSL problem - no banner
by Joseph Tam 30 May '17

30 May '17

Marcio Merlone <marcio.merlone(a)a1.ind.br> writes: > Only openssl s_client -connect localhost:993 works fine and fast, while > all MUA's and telnet does not. Telnet timeouts waiting for banner after > a minute or so: > > root@netuno:~# openssl s_client -connect localhost:993 > ... > * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE > IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready. > ... > root@netuno:~# telnet localhost 993 > Trying 127.0.0.1... > Connected to localhost. > Escape character is '^]'. > (about 1 minute later...) > Connection closed by foreign host. You misundertand how SSL (or TLS) vs STARTTLS works. SSL/TLS (on port 993) starts negotiating a secure session protocol right after connection, which involves binary exchange of data, certificates, etc.. This is what "openssl s_client ..." does, but telnet does not. Only after the SSL handshake completes will you get banners, etc. STARTTLS starts out as a unencrypted session and thus, you'll get the initial banner. The client is then expected to initiate a secure session by issuing a STARTTLS directive, whereupon client and server starts the secure session negotiation like above. To test this, you would use openssl s_client -starttls imap -connect localhost:143 So telnet doesn't work because it does not do SSL. Your MUA don't work because of the same misunderstanding, or there's some network issue at play. You need to align your clients to use the security protocol you've enabled. Joseph Tam <jtam.home(a)gmail.com>

1 0

Fatal error with IMAP MOVE from a shared mailbox to Trash folder
by Daniele Barresi 30 May '17

30 May '17

Hello everyone. I have a problem using Dovecot 2.2.26 with ACL plugin and deleting e-mails from a shared mailbox. My user doesn't have the "expunge" permission on the shared mailbox, but it has the "write-deleted" permission. So, when I delete a message from the shared mailbox using a client that implements the IMAP MOVE command, it tries to move the message to my Trash folder. Then the server closes the connection to the client (process aborted) and I get three lines in the log file with a backtrace and "Fatal" error. In this case the message doesn't get copied or moved from the shared folder and the client complaints. I found the same thing happens whenever I try to move anything between folders of the shared mailbox itself, while logged in with my user. I can move messages inside my own mailbox just fine. If I try the same operation from a client that uses the IMAP COPY + DELETE commands, no errors are logged and the outcome is as expected: the message gets copied from the shared folder to my Trash and gets the flag "\Deleted" set on the shared folder. My setup is as follows: Dovecot: 2.2.26.0 OS: Ubuntu 16.04.1 LTS CPU architecture: x86_64 Filesystem: ext4 The relevant lines from mail.err log: Dec 27 15:21:18 dovecot dovecot: imap(danielebarresi): Panic: file mail-storage.c: line 2143 (mailbox_save_context_reset): assertion failed: (ctx->copying_via_save) Dec 27 15:21:18 dovecot dovecot: imap(danielebarresi): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x9438e) [0x7fbcd478538e] -> /usr/lib/dovecot/libdovecot.so.0(+0x9447c) [0x7fbcd478547c] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fbcd471ea4e] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x41b78) [0x7fbcd4a50b78] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_save_cancel+0x73) [0x7fbcd4a53d73] -> /usr/lib/dovecot/modules/lib01_acl_plugin.so(+0xe142) [0x7fbcd3f1d142] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x4516d) [0x7fbcd4a5416d] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_move+0x23) [0x7fbcd4a54333] -> dovecot/imap(+0xf9c5) [0x557cf98629c5] -> dovecot/imap(command_exec+0xa6) [0x557cf986f196] -> dovecot/imap(+0x1a4c2) [0x557cf986d4c2] -> dovecot/imap(+0x1a550) [0x557cf986d550] -> dovecot/imap(client_handle_input+0x195) [0x557cf986d915] -> dovecot/imap(client_input+0x85) [0x557cf986de25] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x4c) [0x7fbcd4799bdc] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x10a) [0x7fbcd479b09a] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x25) [0x7fbcd4799c65] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7fbcd4799e08] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fbcd4724f53] -> dovecot/imap(main+0x322) [0x557cf9860ca2] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf0) [0x7fbcd4348830] -> dovecot/imap(+0xde1f) [0x557cf9860e1f] Dec 27 15:21:18 dovecot dovecot: imap(danielebarresi): Fatal: master: service(imap): child 6907 killed with signal 6 (core dumped) Dovecot configuration (doveadm -n): # 2.2.26.0 (23d1de6): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.16 (fed8554) # OS: Linux 4.4.0-57-generic x86_64 Ubuntu 16.04.1 LTS auth_cache_negative_ttl = 10 mins auth_cache_size = 2 M auth_master_user_separator = * auth_mechanisms = plain login first_valid_uid = 12 last_valid_uid = 12 mail_location = maildir:~/Maildir mail_plugins = acl quota notify mail_log stats lazy_expunge managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace casellecondivise { list = children location = maildir:%%h/Maildir:INDEXPVT=~/Maildir/shared/%%u prefix = Caselle condivise/%%u/ separator = / subscriptions = no type = shared } namespace expunged { hidden = yes list = no location = maildir:/var/expunged/%n/Expunged prefix = EXPUNGED/ separator = / } namespace inbox { inbox = yes location = mailbox Archive { auto = subscribe special_use = \Archive } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 acl_shared_dict = file:/etc/dovecot/shared/shared-mailboxes lazy_expunge = EXPUNGED/ lazy_expunge_only_last_instance = yes mail_log_events = delete copy flag_change save undelete expunge mail_log_fields = uid box msgid size quota = maildir:user quota quota_exceeded_message = (Quota exceeded) La casella di posta elettronica del destinatario è piena. quota_rule = *:storage=1G quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=100%% quota-warning 100 %u sieve = file:~/sieve;active=~/.dovecot.sieve stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 32 M stats_refresh = 30 secs stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours } protocols = " imap sieve" service auth { unix_listener /var/spool/postfix/private/auth { group = mail mode = 0666 user = postfix } unix_listener auth-userdb { group = mail user = mail } } service dict { unix_listener dict { group = mail mode = 0600 user = mail } } service imap-login { process_limit = 300 process_min_avail = 2 } service managesieve-login { inet_listener sieve { port = 4190 } } service quota-warning { executable = script /etc/dovecot/scripts/quota-warning.sh unix_listener quota-warning { group = mail user = mail } } service stats { fifo_listener stats-mail { mode = 0600 user = mail } } ssl = required ssl_cert = </etc/ssl/certs/pac.apg23.org.pem ssl_key = # hidden, use -P to show it userdb { args = /etc/dovecot/dovecot-sql.conf.ext default_fields = uid=mail gid=mail home=/var/mail/%u master_user=%u driver = sql } userdb { args = /etc/dovecot/dovecot-ldap.conf.ext default_fields = uid=mail gid=mail home=/var/mail/%u master_user=%u driver = ldap } protocol lda { mail_plugins = acl quota notify mail_log stats lazy_expunge sieve } protocol imap { mail_max_userip_connections = 25 mail_plugins = acl quota notify mail_log stats lazy_expunge imap_quota imap_stats } I tested this with different users with the same result. I tested and reproduced the error with Thunderbird and Roundcube. The Apple Mail client uses IMAP COPY + DELETE, instead of IMAP MOVE, and no errors are reported. So I think it's related to the IMAP MOVE implementation on Dovecot server. Has anyone seen the same error? Any suggestions? Is this a Dovecot bug? --- Daniele Barresi

3 4

virtual folder: how to store in mysql?
by dovecot＠avv.solutions 30 May '17

30 May '17

Hello Community, Now that virtual folders seem to work fine, I stil lhave 2 questions : 1° Is it possible to store the virtual folder definition (aka content of Folder/dovecot-virtual) in mysql? 2° I have duplicates in my "Unseen", which both correctly disappear once handled one of them Example: !Inbox * -Inbox (tried this but does not succeed -Trash -Trash/* Public/* Unseen 2°bis :) I tried to put the "common defs" in a shared folder (/etc/dovecot/virtual) using personal index location = virtual:/etc/dovecot/virtual:INDEX=/sd/MAIL_IMAP_POP/%d/%n/__Virtual/ This does not work, I have to *copy* (even symlinks do not succeed) the definitions and use location = virtual:/sd/MAIL_IMAP_POP/%d/%n/__Virtual:INDEX=/sd/MAIL_IMAP_POP/%d/%n/__Virtual/ I already tried to set perms on /etc/dovecot/virtual to: vmail.vmail rw(x)------ Thank you! Cheers

1 0

Question about how to serve many imap users on some mailbox.
by Oleksandr Lystopad 30 May '17

30 May '17

Hi, dear dovecot users! I am running 2.2.29.1 (e0b76e3) on FreeBSD. In my case, one mailbox info(a)example.com is shared between 5-10 managers. Sometimes they complains that no new messages displayed in folder message count list in brackets (bold number if new messages exists), but when they click on the imap folder (for example Inbox) they could see many new mails. There not only Inbox folder, they have 10-30 folders with quite big flow of new messages. Almost all users are using Microsoft Outlook MUA. Please, help me to solve the issue. My config could be found bellow (dovecot -n): auth_failure_delay = 12 secs auth_mechanisms = login cram-md5 plain auth_verbose = yes disable_plaintext_auth = no first_valid_gid = 26 first_valid_uid = 26 lda_mailbox_autocreate = yes listen = * login_greeting = imap/pop mailserver ready mail_location = maildir:~/Maildir mail_max_userip_connections = 50 mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf driver = sql } protocols = pop3 imap sieve service auth { unix_listener auth-client { group = mailnull mode = 0600 user = mailnull } unix_listener auth-login { group = mailnull mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mailnull mode = 0600 user = mailnull } unix_listener auth-userdb { group = mailnull mode = 0600 user = mailnull } user = root } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 } } service imap { process_limit = 512 } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 } } service pop3 { process_limit = 512 } ssl_cert = </usr/local/etc/SSL/my.crt ssl_key = # hidden, use -P to show it userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf driver = sql } verbose_proctitle = yes protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep } protocol lda { mail_plugins = sieve }

2 1

MySQL issue
by Amaechi Janneh 30 May '17

30 May '17

Hello. It appears that I have an issue with my dovecot setup. When trying to authenticate, i get this error: May 28 20:18:26 AmaechiJ dovecot[10516]: imap-login: Login: user=< aj(a)example.com>, method=PLAIN, rip=, lip=, mpid=10879, TLS, ses...QOQBg9rlR> May 28 20:18:42 AmaechiJ dovecot[10516]: imap(aj(a)example.com): Connection closed in=116 out=1311 May 28 20:20:32 AmaechiJ dovecot[10516]: auth-worker(10892): Warning: mysql: Query failed, retrying: Table 'mailserver.users' doesn't exist May 28 20:20:32 AmaechiJ dovecot[10516]: auth-worker(10892): Error: sql( aj(a)example.com,) User query failed: Table 'mailserver.users' doesn't exist May 28 20:20:32 AmaechiJ dovecot[10516]: imap-login: Login: user=< aj(a)example.com>, method=PLAIN, rip=, lip=, mpid=10894, TLS, ses...QZwBg9rlR> But I already have the users data under virtual_users. So what should I do? Regards, Amaechi Janneh I am running dovecot 2.2.13 Debian 8

3 4

Can only enable Sieve scripts not edit them (Roundcube)
by Paul Littlefield 29 May '17

29 May '17

Hello, (my first post so be gentle) I will be posting this to the Roundcube mailing list too, but thought it worth asking here as well. I have a Roundcube installation running Apache with Dovecot and Sieve. When logged in to Roundcube, a user can see the Sieve scripts and enable or disable them but NOT edit them or create new scripts. In other words, Dovecot will happily EDIT the script to mark it as 'false' but will not edit the actual rules or create a new rule... e.g. require ["fileinto","vacation"]; # rule:[Out of Office] if false # true { vacation :days 1 :addresses "me(a)mydomain.com" :subject "Out of Office" :from "me(a)mydomain.com" "I am out of the office."; } # rule:[Spam] if header :contains "subject" "{Spam}" { fileinto "Spam"; } Any ideas? Thanks, -- Paul Littlefield

3 3

user-defined special-use folders
by Fabian Schmidt 29 May '17

29 May '17

I plan to define SPECIAL-USE mailboxes and think about defining per user special-use folders for those who don't use the default folder names. Is this possible in dovecot? What I try: $ doveadm exec imap * PREAUTH [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS BINARY MOVE SEARCH=FUZZY METADATA SPECIAL-USE] Logged in as fschmidt a1 SETMETADATA "sent-mail" (/private/specialuse "\\Sent") a1 NO [CANNOT] The /private/specialuse attribute cannot be changed (0.008 + 0.000 + 0.008 secs). using dovecot 2.2.29.1, following the example in RFC 6154, sect. 5.4 (How is MAIL_ATTRIBUTE_INTERNAL_RANK_AUTHORITY defined or set?) Fabian.

2 1

When will passdb callback to mechanism yield PASSDB_RESULT_NEXT?
by Peter Mogensen 29 May '17

29 May '17

Hi, code question... I've been trying to figure out the implications of the new "noauthenticate" passdb field. Internally it causes a passdb to result in PASSDB_RESULT_NEXT. When a SASL mechanism calls auth_request_lookup_credentials(...,callback) the passdb result is passed to the callback. But I can't really figure out when that result will ever be PASSDB_RESULT_NEXT. It seems the passdb fallthrough resolver will always replace it with PASSDB_RESULT_INTERNAL_FAILURE if it ends up being the last result. Can it ever leak into the callback or is it an internal intermediate value or the passdb resolver? /Peter

2 1

No doveadm-save in wiki2?
by KT Walrus 29 May '17

29 May '17

Is “doveadm save” an undocumented feature? Or, just well-hidden? https://wiki2.dovecot.org/Tools/Doveadm <https://wiki2.dovecot.org/Tools/Doveadm> Kevin

3 5

Another mail_crypt question: figure out to password secure using mysql
by dovecot＠avv.solutions 26 May '17

26 May '17

Hello Community, (sorry to be more busy, hence more running questions in parallel :) ) As mentioned in another post, I am testing mail_crypt plugin. I was wondering how to really secure the process sothat even the admin cannot have any access to the other users mail content. My current config is simple: - using per-folder keys (hence the per-user spaces are preserved) - put the public/private global keys in base64 format into the sql DB (elliptic algo) This obviously allows anyone with read access to the table to decrypt the mails from the filesystem... which I try to prevent. Considering of course that all mail users are virtual and do not (and may not) have access to the box itself: - how can I secure the keys? I do not see how to handle a assword for them? - a solution might be to crypt/decrypt the keys using the user's password? - other? Thank you for you help.

2 2

dovecot: auth-worker: Fatal: master: service(auth-worker): child XXXXX killed with signal 11
by dovecot＠jeffandjessi.com 26 May '17

26 May '17

Still Trying to track down a dovecot issue .... The error message is: dovecot: auth-worker: Fatal: master: service(auth-worker): child XXXXX killed with signal 11 (core not dumped - set service auth-worker { drop_priv_before_exec=yes }) The setup is dovecot 2.2.29.1 with passwd and mysql auth db's and a very basic config. both authentications work ... the symptom is that after a connection is made the auth worker loads and emails are downloaded and everything "is fine". However, about 30 second to a minute after the connection is done the process dies with the error message. Then the process starts all over with on the next checking of email ,but again everything "works" just seeing this error and the process dieing each time? enabled all extra verbose logging ,but nothing gives any clues.... Tried to enable core dumps ,but couldnt get core dumps to work ? The only thing is that a recently pkgsrc (netbsd) update create 2 packages, one for dovecot and one for mysql plugin , sense then now this error appears. ,but it appears the .so lib files are installed and linked correctly. Double checked all file permissions and user permissions as well as chroot , etc, etc, ,etc.... cant seem to narrow this one down .... any ideas on trouble shooting would be great .... even tried running a trace with gdb -p on the process ,but it just dies with a signal 11 .... anybody have any ideas how to trouble shoot this or is this a bug in the software .... help !!

2 1

Moving dovecot/maildir to new host, dovecot.* files
by John Gateley 26 May '17

26 May '17

Hello, I've done a fair amount of searching, and couldn't find a definitive answer. I am moving my dovecot/postfix servers and mail in Maildir formats to a new host. When I move the Maildir directories, what should I do with the dovecot.index/cache/log/etc. files? I know I can filter them out, and dovecot will recreate them, but is that the best approach? I am thinking of the following: Shut down postfix and dovecot on both the new and old server rsync the maildirs from the old server to the new server start up postfix/dovecot on the new server verify all is okay switch DNS from old server to new server. Is this the best approach with minimal impact to mail users? Thanks very much John

2 2

Issue with virtual folder: partially see them and cannot subscribe
by dovecot＠avv.solutions 26 May '17

26 May '17

Hello Community, I am trying to figure out hwo to use the virtual mailboxes, but remain a bit confused: - I see the Virtual speudo-folder - Eventuelly the name of the boxes underneath - But cannot see more, nor subscrie to the virtual mailboxes Dovecot: # 2.2.29.1 (e0b76e3): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.18 (29cc74d) # OS: Linux 4.4.50-v7+ armv7l Debian 8.0 ext4 auth_mechanisms = plain login log_path = /dev/stderr mail_attribute_dict = file:/sd/MAIL_IMAP_POP/%d/%n/Maildir/dovecot-attributes mail_debug = yes mail_gid = vmail mail_location = maildir:/sd/MAIL_IMAP_POP/%d/%n/Maildir:LAYOUT=fs mail_plugins = " virtual mail_crypt" mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace { inbox = yes location = mailbox { special_use = \Drafts name = Drafts } mailbox { special_use = \Junk name = Junk } mailbox { special_use = \Sent name = Sent } mailbox { special_use = \Sent name = Sent Messages } mailbox { special_use = \Trash name = Trash } prefix = name = inbox } namespace { hidden = no list = yes location = virtual:/sd/MAIL_IMAP_POP/%%d/%%n/Virtual prefix = Virtual/ separator = / subscriptions = yes type = private name = virtual } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { mail_crypt_curve = secp521r1 mail_crypt_save_version = 2 sieve = file:/sd/MAIL_IMAP_POP/%d/%n/Sieve;active=/sd/MAIL_IMAP_POP/%d/%n/Sieve.active } service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { user = vmail name = auth-worker } service { unix_listener { group = postfix mode = 0666 user = postfix path = /var/spool/postfix/private/auth } unix_listener { mode = 0600 user = vmail path = auth-userdb } user = dovecot name = auth } service config { name = config } service dict-async { name = dict-async } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap-hibernate { name = imap-hibernate } service { inet_listener { port = 143 name = imap } inet_listener { port = 993 ssl = yes name = imaps } name = imap-login } service imap-urlauth { name = imap-urlauth-login } service imap-urlauth-worker { name = imap-urlauth-worker } service token-login/imap-urlauth { name = imap-urlauth } service imap-master { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service { unix_listener { group = postfix mode = 0600 user = postfix path = /var/spool/postfix/private/dovecot-lmtp } name = lmtp } service log-errors { name = log } service sieve { name = managesieve-login } service login/sieve { name = managesieve } service { inet_listener { port = 110 name = pop3 } inet_listener { port = 995 ssl = yes name = pop3s } name = pop3-login } service login/pop3 { name = pop3 } service replicator-doveadm { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } ssl = required ssl_cert = </sd/MAIL_IMAP_POP/_ssl/pi3tv.local.avv_server.crt ssl_key = # hidden, use -P to show it userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = " virtual mail_crypt sieve" service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict-async { name = dict-async } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap-hibernate { name = imap-hibernate } service imap { name = imap-login } service imap-urlauth { name = imap-urlauth-login } service imap-urlauth-worker { name = imap-urlauth-worker } service token-login/imap-urlauth { name = imap-urlauth } service imap-master { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service sieve { name = managesieve-login } service login/sieve { name = managesieve } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator-doveadm { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } } protocol lda { mail_plugins = " virtual mail_crypt virtual" service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict-async { name = dict-async } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap-hibernate { name = imap-hibernate } service imap { name = imap-login } service imap-urlauth { name = imap-urlauth-login } service imap-urlauth-worker { name = imap-urlauth-worker } service token-login/imap-urlauth { name = imap-urlauth } service imap-master { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service sieve { name = managesieve-login } service login/sieve { name = managesieve } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator-doveadm { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } } protocol imap { mail_plugins = " virtual mail_crypt virtual" service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict-async { name = dict-async } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap-hibernate { name = imap-hibernate } service imap { name = imap-login } service imap-urlauth { name = imap-urlauth-login } service imap-urlauth-worker { name = imap-urlauth-worker } service token-login/imap-urlauth { name = imap-urlauth } service imap-master { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service sieve { name = managesieve-login } service login/sieve { name = managesieve } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator-doveadm { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } } protocol pop3 { service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict-async { name = dict-async } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap-hibernate { name = imap-hibernate } service imap { name = imap-login } service imap-urlauth { name = imap-urlauth-login } service imap-urlauth-worker { name = imap-urlauth-worker } service token-login/imap-urlauth { name = imap-urlauth } service imap-master { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service sieve { name = managesieve-login } service login/sieve { name = managesieve } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator-doveadm { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } } Any tip/suggestion? I tried several configs from https://wiki2.dovecot.org/Plugins/Virtual Example 1: Virtual/Deleted/dovecot-virtual: * deleted Example 2 Virtual/All/dovecot-virtual * -Trash -Trash/* all Thanks!

2 6

Plugin "mail_crypt" - using folder keys
by Evgeniy Korneechev 26 May '17

26 May '17

Hi, i have two questions about using "folder keys" for encryption: 1. If i use this method how can i decrypt files manually? 2. If move a letter to another folder (or remove it), it will be unreadable. Log: imap(cloud): Error: read() failed: read(/home/cloud/Maildir/.Sent.test/cur/1485528498.M838579P2267....) failed: Decryption error: no private key available (uid=5, box=Sent.test, read reason=) imap(cloud): Info: Internal error occurred. Refer to server log for more information. or: imap(cloud): Error: read() failed: read(/home/cloud/Maildir/.Trash/cur/1485528906.M150750P3081....) failed: Decryption error: no private key available How fix it? Thank you in advance. ------------------------------------------------ # 2.2.27 (c0f36b0): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.16 (fed8554) # OS: Linux 4.4.39-std-def-alt0.M80P.1 x86_64 ALT 8.1 Server ..... mail_attribute_dict = file:%h/Maildir/dovecot-attributes mail_plugins = $mail_plugins mail_crypt plugin { mail_crypt_curve = secp521r1 mail_crypt_save_version = 2 } ..... -- WBR, BaseALT/ALTLinux Team

3 10

Public mailboxes and IPA (LDAP)
by Ranbir 26 May '17

26 May '17

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi Everyone, I have a working Dovecot server that is using my IPA domain to lookup users and passwords. I also have a "public" namespace that has the inboxes for public email accounts. Everything is working for "regular" private email boxes. But, I can't see new messages delivered to any of the public inboxes. Incoming emails get delivered to the correct locations for the public inboxes: I just don't see them in my email clients. I'm not sure what the problem is since I don't see an error in the dovecot logs. I also don't want to use the home directory location as provided by the IPA domain. I've worked around it by using file system symlinks, but I'd much rather just ignore the IPA provided home directory. I'm wondering if my workaround is the culprit behind new messages to the public folders not being seen by the client. Here's my config: # 2.2.10: /etc/dovecot/dovecot.conf auth_cache_negative_ttl = 0 auth_cache_size = 1 k auth_debug = yes auth_gssapi_hostname = $ALL auth_krb5_keytab = /etc/imap.keytab auth_mechanisms = plain gssapi auth_realms = SOME.REALM auth_username_format = %Ln auth_verbose = yes first_valid_uid = 1000 hostname = server listen = 1.1.1.1 mail_gid = virtual mail_location = maildir:~/Maildir mail_plugins = quota acl mail_uid = virtual managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded- character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl namespace { location = maildir:/var/spool/mail/domain.tld/public prefix = Public. separator = . subscriptions = no type = public } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/conf.d/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile quota = maildir:User quota quota_rule = *:storage=500M sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster@%d protocols = imap lmtp service auth-worker { user = $default_internal_user } service auth { inet_listener { address = 1.1.1.1 port = 17900 } unix_listener auth-userdb { group = virtual mode = 0600 user = virtual } } service imap-login { process_min_avail = 2 service_count = 1 } service lmtp { inet_listener lmtp { address = 1.1.1.1 port = 24 } } ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem ssl_protocols = !SSLv2 !SSLv3 userdb { args = /etc/dovecot/conf.d/dovecot-ldap-userdb.conf.ext default_fields = uid=virtual gid=virtual driver = ldap } verbose_proctitle = yes protocol lmtp { mail_plugins = quota acl sieve } protocol lda { mail_plugins = quota acl sieve } protocol imap { mail_plugins = quota acl imap_quota imap_acl } - -- Ranbir -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCgAGBQJZJz5lAAoJEN7T/ly5z1dituQQAIvq/DyDq5JbyREpopj5XcgN RjuvFAf2VuR9ieBnJ66GZPS9kcLZusqTzFyBczJmvq5sHRR8+UvRhsDVGGRNGFS+ 5b6oJNbP5BYP+93Ik8Ai7XgkaSfzIVg6cpru0uzMN0FvzQWXGONKQhMI0dFF+rFf 377gxho3AiAUxffX/vRhOvmE5/loJL9g8WDd6qAdZ6Ow3X3ISIWTo8ICWcndxWJK WU+/vsXfg1Up96M9X38FIhCBVcJG+igUXqZ3/0+N4at/L6BI5BWmG21XpaReGORo QjVaDIeFw4supnaKJszYiiYU1vQRHyvW5p2V0l1Q7mIh/sqANYhqJpziCP9yx1gN g0iv32V2EPxI44ympuhFtAslqyyGhfMtHOsufQ/QbrwjJAML/TRJYuyqh0hiZ+0h anhkDmkb0mlJlroPYJatiqJZqOYNRmtT8QpRMqapELDBo/Rc2LzqnkrgEso2XjI3 yLYXSgV1cY7HNJzhIvmPWZDncF4LW5o3JpidCdcDRnXvDUc3tyb/qRQkvI1+Zycw P5n2r+9BcSWA194TU+QPzvdB9MKQ+Cn3dM0HwYkEqQXH7BVgKKvXobaM+mOgBjLL Ais+yc0aeoKV5r3ln74HPRyXfw0Zp9g128BwzQG597kPhXaXb9Hd5o58LMkdMfxs 5ycn42U8p2ZiKHFDx9vO =swZL -----END PGP SIGNATURE-----

1 1

"@LIBICU_CFLAGS@: No such file or directory" during libtool command for lib-fts (cross compile)
by awl1 26 May '17

26 May '17

Hello, I am a complete newbie to dovecot, but do have reasonable experience in compiling Unix/Linux software. I am currently trying to do a cross-compile of dovecot-2.29.1 to be used on my home office Thecus NAS (host: Thecus kernel 2.6.33 on 32-bit Intel Atom: "i686-nptl-linux-gnu"; my build machine has Ubuntu 16.04.2 LTS) "from ground up", i.e. I need to build and provide all dovecot dependencies from within my module. My compiler toolchain (using gcc-5.2.0) has been set up properly using ct-ng and works completely fine. I also have already successfully cross-compiled/built almost all dovecot dependencies (zlib, bzip2, xz, lz4, openssl-1.0.2, clucene-git, snowball-git, libexttextcat, icu) - i.e. including icu - and installed them properly into my cross-compile build root (/raid/data/module/Dovecot/sys as defined by Thecus module spec). My dovecot configure/make command is as follows: === export PKG_CONFIG=/usr/bin/pkg-config export PKG_CONFIG_PATH=/raid/data/module/Dovecot/sys/lib/pkgconfig export CC=$HOME/Thecus/n4200pro-5.2.0-toolchain/i686-nptl-linux-gnu/bin/i686-nptl-linux-gnu-gcc export CFLAGS="" export LDFLAGS="-L/raid/data/module/Dovecot/sys/lib -Wl,-rpath,/raid/data/module/Dovecot/sys/lib" export LIBS="" # -llib export CPPFLAGS=-I/raid/data/module/Dovecot/sys/include export CPP=$HOME/Thecus/n4200pro-5.2.0-toolchain/i686-nptl-linux-gnu/bin/i686-nptl-linux-gnu-cpp export CXX=$HOME/Thecus/n4200pro-5.2.0-toolchain/i686-nptl-linux-gnu/bin/i686-nptl-linux-gnu-g++ export CXXFLAGS="" export LT_SYS_LIBRARY_PATH=/raid/data/module/Dovecot/sys/lib export CXXCPP=$HOME/Thecus/n4200pro-5.2.0-toolchain/i686-nptl-linux-gnu/bin/i686-nptl-linux-gnu-cpp ./configure --host i686-nptl-linux-gnu \ --prefix=/raid/data/module/Dovecot/sys \ --libdir=/raid/data/module/Dovecot/sys/lib \ --localstatedir=/raid/data/module/Dovecot/com \ --sharedstatedir=/raid/data/module/Dovecot/var \ --disable-silent-rules \ --with-notify=inotify \ --with-lucene \ --with-stemmer \ --with-textcat \ --with-icu \ --with-solr \ --with-zlib \ --with-bzlib \ --with-lzma \ --with-ssl=openssl \ --with-ssldir=/raid/data/module/Dovecot/sys/etc/ssl \ --with-storages=mdbox,sdbox,maildir,mbox,cydir,imapc,pop3c \ --with-moduledir=/raid/data/module/Dovecot/sys \ --with-gnu-ld \ --with-sysroot=/raid/data/module/Dovecot/sys \ --with-libiconv-prefix=/raid/data/module/Dovecot/sys \ --with-libintl-prefix=/raid/data/module/Dovecot/sys make === and completes configuration just fine, but the make step runs into the following issue which I am unable to resolve even after several hours of investigation, so I am completely stuck at this point... :-( === (...) make[3]: Leaving directory '/home/andreas/Thecus/Dovecot/dovecot-2.2.29.1/src/lib-dovecot' Making all in lib-fts make[3]: Entering directory '/home/andreas/Thecus/Dovecot/dovecot-2.2.29.1/src/lib-fts' make all-am make[4]: Entering directory '/home/andreas/Thecus/Dovecot/dovecot-2.2.29.1/src/lib-fts' /bin/bash ../../libtool --tag=CC --mode=compile /home/andreas/Thecus/n4200pro-5.2.0-toolchain/i686-nptl-linux-gnu/bin/i686-nptl-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-test -I../../src/lib-mail -I../../src/lib-fts -I/raid/data/module/Dovecot/sys/include/libexttextcat/ @LIBICU_CFLAGS@ -DUDHRDIR=\""../../src/lib-fts"\" -DDATADIR=\"/raid/data/module/Dovecot/sys/share/dovecot\" -DTEST_STOPWORDS_DIR=\""../../src/lib-fts/stopwords"\" -I/raid/data/module/Dovecot/sys/include -std=gnu99 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -I/raid/data/module/Dovecot/sys/include -MT fts-filter.lo -MD -MP -MF .deps/fts-filter.Tpo -c -o fts-filter.lo fts-filter.c libtool: compile: /home/andreas/Thecus/n4200pro-5.2.0-toolchain/i686-nptl-linux-gnu/bin/i686-nptl-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-test -I../../src/lib-mail -I../../src/lib-fts -I/raid/data/module/Dovecot/sys/include/libexttextcat/ @LIBICU_CFLAGS@ -DUDHRDIR=\"../../src/lib-fts\" -DDATADIR=\"/raid/data/module/Dovecot/sys/share/dovecot\" -DTEST_STOPWORDS_DIR=\"../../src/lib-fts/stopwords\" -I/raid/data/module/Dovecot/sys/include -std=gnu99 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -I/raid/data/module/Dovecot/sys/include -MT fts-filter.lo -MD -MP -MF .deps/fts-filter.Tpo -c fts-filter.c -fPIC -DPIC -o .libs/fts-filter.o i686-nptl-linux-gnu-gcc: error: @LIBICU_CFLAGS@: No such file or directory Makefile:714: recipe for target 'fts-filter.lo' failed make[4]: *** [fts-filter.lo] Error 1 make[4]: Leaving directory '/home/andreas/Thecus/Dovecot/dovecot-2.2.29.1/src/lib-fts' Makefile:562: recipe for target 'all' failed === As far as I can tell, my pkgconfig file (/raid/data/module/Dovecot/sys/lib/pkgconfig/icu-i18n.pc) also seems to be fine: === # Copyright (C) 2016 and later: Unicode, Inc. and others. # License & terms of use: http://www.unicode.org/copyright.html # Copyright (C) 2010-2013, International Business Machines Corporation. All Rights Reserved. # CFLAGS contains only anything end users should set CFLAGS = # CXXFLAGS contains only anything end users should set CXXFLAGS = -std=c++11 # DEFS only contains those UCONFIG_CPPFLAGS which are not auto-set by platform.h DEFS = prefix = /raid/data/module/Dovecot/sys exec_prefix = ${prefix} #bindir = ${exec_prefix}/bin libdir = ${exec_prefix}/lib includedir = ${prefix}/include baselibs = -lpthread -ldl -lm #datarootdir = ${prefix}/share #datadir = ${datarootdir} #sbindir = ${exec_prefix}/sbin #mandir = ${datarootdir}/man #sysconfdir = ${prefix}/etc UNICODE_VERSION=9.0 ICUPREFIX=icu ICULIBSUFFIX= LIBICU=lib${ICUPREFIX} #SHAREDLIBCFLAGS=-fPIC pkglibdir=${libdir}/icu${ICULIBSUFFIX}/59.1 #pkgdatadir=${datadir}/icu${ICULIBSUFFIX}/59.1 ICUDATA_NAME = icudt59l #ICUPKGDATA_DIR=${exec_prefix}/lib #ICUDATA_DIR=${pkgdatadir} ICUDESC=International Components for Unicode Version: 59.1 Cflags: -I${includedir} # end of icu.pc.in Description: International Components for Unicode: Internationalization library Name: icu-i18n Requires: icu-uc Libs: -licui18n === Note that even adding a line stating LIBICU_CFLAGS=-I/raid/data/module/Dovecot/sys/include (just in order to set it to any non-null value) to the icu-i18n.pc file and/or setting an environment variable export LIBICU_CFLAGS=-I/raid/data/module/Dovecot/sys/include before running configure does NOT help to get rid of the above error... So do you have any idea why variable substitution for LIBICU_CFLAGS does not work, and what could be done to work around this? Many thanks in advance for your kind help with this! Best regards, Andreas awl1(a)gmx.net

1 1

Dovecot/Sieve shortcuts?
by Adam Shostack 24 May '17

24 May '17

Hi, Is there a clean way to match on an email address the way procmail ^TO_ did? that was a macro which expanded to (^((Original-)?(Resent-)?(To|Cc|Bcc)|(X-Envelope |Apparently(-Resent)?)-To):(.*[^-a-zA-Z0-9_.])?) so you could write * ^TO_dovecot dovecot and grab messages to the list. In sieve, I find myseld writing ["To","cc"] and wonder if there's a better way. Adam

4 8

dovecot: auth-worker: Fatal: master: service(auth-worker): child XXXXX killed with signal 11
by dovecot＠jeffandjessi.com 24 May '17

24 May '17

Trying to track down a dovecot issue .... The error message is: dovecot: auth-worker: Fatal: master: service(auth-worker): child XXXXX killed with signal 11 (core not dumped - set service auth-worker { drop_priv_before_exec=yes }) The setup is dovecot 2.2.29.1 with passwd and mysql auth db's and a very basic config. both authentications work ... the symptom is that after a connection is made the auth worker loads and emails are downloaded and everything "is fine". However, about 30 second to a minute after the connection is done the process dies with the error message. Then the process starts all over with on the next checking of email ,but again everything "works" just seeing this error and the process dieing each time? enabled all extra verbose logging ,but nothing gives any clues.... Tried to enable core dumps ,but couldnt get core dumps to work ? The only thing is that a recently pkgsrc (netbsd) update create 2 packages, one for dovecot and one for mysql plugin , sense then now this error appears. ,but it appears the .so lib files are installed and linked correctly. Double checked all file permissions and user permissions as well as chroot , etc, etc, ,etc.... cant seem to narrow this one down .... any ideas on trouble shooting would be great .... even tried running a trace with gdb -p on the process ,but it just dies with a signal 11 ....

1 0

v2.2.30 release candidate released
by Timo Sirainen 24 May '17

24 May '17

https://dovecot.org/releases/2.2/rc/dovecot-2.2.30.rc1.tar.gz https://dovecot.org/releases/2.2/rc/dovecot-2.2.30.rc1.tar.gz.sig There are a couple of changes still coming, but now would be a good time to make sure anything unexpected hasn't broken. The final release should be out early next week. * auth: Use timing safe comparisons for everything related to passwords. It's unlikely that these could have been used for practical attacks, especially because Dovecot delays and flushes all failed authentications in 2 second intervals. Also it could have worked only when passwords were stored in plaintext in the passdb. * master process sends SIGQUIT to all running children at shutdown, which instructs them to close all the socket listeners immediately. This way restarting Dovecot should no longer fail due to some processes keeping the listeners open for a long time. + auth: Add passdb { mechanisms=none } to match separate passdb lookup + auth: Add passdb { username_filter } to use passdb only if user matches the filter. See https://wiki2.dovecot.org/PasswordDatabase + dsync: Add dsync_commit_msgs_interval setting. It attempts to commit the transaction after saving this many new messages. Because of the way dsync works, it may not always be possible if mails are copied or UIDs need to change. + imapc: Support imapc_features=search without ESEARCH extension. + imapc: Add imapc_features=fetch-bodystructure to pass through remote server's FETCH BODY and BODYSTRUCTURE. + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on the remote server. + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters. + If dovecot.index.cache corruption is detected, reset only the one corrupted mail instead of the whole file. + doveadm mailbox status: Add "firstsaved" field. + director_flush_socket: Add old host's up/down and vhost count as parameters - More fixes to automatically fix corruption in dovecot.list.index - dsync-server: Fix support for dsync_features=empty-header-workaround - imapc: Various bugfixes, including infinite loops on some errors - fts-lucene: Fix it to work again with mbox format - vpopmail: Fix compiling

1 0

Postfix and Dovecot SASL: log NTLM username
by Bradley Giesbrecht 24 May '17

24 May '17

dovecot 2.2.22 postfix 3.1.1 I’m seeing "SASL NTLM authentication failed: {long_hash}” in mail.log. Is there a way to log the SASL username? I think postfix is logging what Dovecot SASL is returning so I hope I am asking on the right list. Regards, Bradley Giesbrecht (pixilla)

2 5

dovecot: auth-worker: Fatal: master: service(auth-worker): child XXXXX killed with signal 11
by dovecot＠jeffandjessi.com 24 May '17

24 May '17

Trying to track down a dovecot issue .... The error message is: dovecot: auth-worker: Fatal: master: service(auth-worker): child XXXXX killed with signal 11 (core not dumped - set service auth-worker { drop_priv_before_exec=yes }) The setup is dovecot 2.2.29.1 with passwd and mysql auth db's and a very basic config. both authentications work ... the symptom is that after a connection is made the auth worker loads and emails are downloaded and everything "is fine". However, about 30 second to a minute after the connection is done the process dies with the error message. Then the process starts all over with on the next checking of email ,but again everything "works" just seeing this error and the process dieing each time? enabled all extra verbose logging ,but nothing gives any clues.... Tried to enable core dumps ,but couldnt get core dumps to work ? The only thing is that a recently pkgsrc (netbsd) update create 2 packages, one for dovecot and one for mysql plugin , sense then now this error appears. ,but it appears the .so lib files are installed and linked correctly. Double checked all file permissions and user permissions as well as chroot , etc, etc, ,etc.... cant seem to narrow this one down .... any ideas on trouble shooting would be great .... even tried running a trace with gdb -p on the process ,but it just dies with a signal 11 ....

2 1

[imaptest] Explaining errors
by aduprat 24 May '17

24 May '17

Hi, I'm an Apache James committer and we are curious to use imaptest in order to validate our IMAP protocol implementation. I'm using the nightlybuild : imaptest-20170506 I follow the examples given in the /T/ /est IMAP server compliancy/ examples https://imapwiki.org/ImapTest/Examples. And I wanted to analyse the errors reported, here are some: Error: user1(a)james.org[11]: seq too high (16 > 15, state=APPEND): * 16 FETCH (BODY[HEADER.FIELDS (In-Reply-To From) ] "From: marcelo(a)carpa.ciagri.usp.br") Error: user1(a)james.org[14]: seq too high (26 > 25, state=APPEND): * 26 FETCH (MODSEQ (6068) FLAGS (\Answered \Draft \Flagged)) Error: user1(a)james.org[14]: seq too high (20 > 16, state=APPEND): * 20 EXPUNGE Error: user10(a)james.org[18]: Keyword used without being in FLAGS: $Label1: * 1 FETCH (MODSEQ (8) FLAGS (\Answered \Deleted \Draft $Label1 $Label3)) Error: Checkpoint: Total RECENT count 6 larger than current message count 3 Warning: Disabling \Recent flag tracking Error: user1(a)james.org[5]: Owned flag changed: \Deleted: * 7 FETCH (FLAGS (\Answered \Deleted \Recent $Label2)) Error: user1(a)james.org[5]: STORE didn't return FETCH FLAGS for seq 18 (expunged=yes): 5.75 OK STORE completed. Error: user1(a)james.org[1]: SEARCH result missing seq 2 (uid 0): 1.13 OK SEARCH completed. Error: Keyword '$Label1' dropped, but it still had 1 references Do you have a link explaining what are those failures ? Is there a report by IMAP command giving us an idea about our compliancy ? Do you allow us to communicate about such tests, for example: - in news http://james.apache.org/#posts ? - in medium article ? We also would like to have James mentioned in the servers status page https://imapwiki.org/ImapTest/ServerStatus How may we help you for that ? Thanks in advance, -- Antoine Duprat Développeur LGS/OBM/R&D Committer/PMC Apache James ------------------ GROUPE LINAGORA 74-80 rue Roque de Fillol 92800 Puteaux +33 (0)8 10 25 12 51 +33 (0)6 45 63 27 17 aduprat(a)linagora.com ------------------ La présente transmission contient des informations confidentielles appartenant à Linagora, exclusivement destinées au(x) destinataire(s) identifié(s) ci-dessus. Si vous n'en faites pas partie, toute reproduction, distribution ou divulgation de tout ou partie des informations de cette transmission, ou toute action effectuée sur la base de celles-ci vous sont formellement interdites. Si vous avez reçu cette transmission par erreur, nous vous remercions de nous en avertir et de la détruire de votre système d'information. The present transmission contains privileged and confidential information belonging to Linagora, exclusively intended for the recipient(s) thereabove identified. If you are not one of these aforementioned recipients, any reproduction, distribution, disclosure of said information in whole or in part, as well as any action undertaken on the basis of said information are strictly prohbited. If you received the present transmission by mistake, please inform us and destroy it from your messenging and information systems.

2 2

Sender address when notifying original recipient
by Christoph Pleger 23 May '17

23 May '17

Hello, I am using sieve with notification of the original recipient in the case that an email has been identified to contain a virus. After upgrading dovecot from 2.2.21 to 2.2.29.1, I now detected that in these notifications, their sender address is now <postmaster@>, instead of <postmaster(a)mailserver.domain>, like it was before. Is it possible to revert to the old format? Regards Christoph

3 5

Dovecot pop3 feature
by Markus Eckerl 22 May '17

22 May '17

Hi all, we are using dovecot since several years without any problems or trouble. Now we are having trouble with a few of our customers - they are trying to fetch their emails every few seconds (3-5!). These customers are using Microsoft Exchange Server and also all of these customers are cared by the same IT Professional... Is it possible to send a pop3 "LOGIN-DELAY" if the customers last login is only a few seconds away? A simple firewall rule for rate limiting is not possible because most of them are business customers and they are connected using NAT. In RFC2449 <https://www.iana.org/assignments/pop3-extension-mechanism/pop3-extension-me…> I read that the pop3 capability "LOGIN-DELAY" exists. But it seems that dovecot does not offer this? Why? Kind regards Markus

2 1

Configuration is not working with Thunderbird
by Quark 22 May '17

22 May '17

Hi, I'm new to the list (and postfix / dovecot), so if I mistakenly omit something, then please forgive me. I cannot log into Thunderbird via IMAP with my configuration. However, I can check the mail of each user by logging into their user account & then using the "mail" command. Is there something that is wrong with my config to not allow me to log into Thunderbird (Version 52.1.1)? I'm using Postfix 3.1.0 if that helps. Any help would be greatly appreciated. Thanks! Here is the output of "|dovecot -n"|: # 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.13 (7b14904) doveconf: Warning: NOTE: You can get a new clean config file with: doveconf -n > dovecot-new.conf doveconf: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:105: listen=..:port has been replaced by service { inet_listener { port } } doveconf: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:105: protocol { listen } has been replaced by service { inet_listener { address } } doveconf: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:106: ssl_listen=..:port has been replaced by service { inet_listener { port } } doveconf: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:106: protocol { ssl_listen } has been replaced by service { inet_listener { address } } # OS: Linux 4.4.0-77-generic x86_64 Ubuntu 16.04.2 LTS mail_location = maildir:~/Maildir namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } protocols = imap service imap-login { inet_listener imap { address = * port = 143 } inet_listener imaps { address = * port = 993 } } ssl_cert = </etc/letsencrypt/live/REDACTED/fullchain.pem ssl_key = </etc/letsencrypt/live/REDACTED/privkey.pem userdb { driver = passwd } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep }

2 5

Backing up and restoring maildir folders
by Timothy D Legg 22 May '17

22 May '17

Hello, I am migrating to a different distribution of Linux that involves changing to an earlier version of dovecot (2.2.22 to 2.2.13). As part of this process, I will be copying several maildirs to the new machine. One of these has a number of files and directories that resemble this one example: cur/ dovecot.index dovecot.index.cache dovecot.index.log dovecot.mailbox.log dovecot-uidlist dovecot-uidvalidity dovecot-uidvalidity.59206030 .Drafts/ new/ .Sent/ subscriptions tmp/ .Trash/ Is it good enough to simply stop dovecot and tar this folder, and others like it, and copy them back to a similar location on the new installation? I haven't yet seen anything that resembles an official or standardized backup/recovery method for dovecot. With thanks and appreciation, Tim Legg

2 1

core from 2.2.29.1
by Luciano Mannucci 22 May '17

22 May '17

I've got this in my logfile, should I worry? May 19 14:45:04 imap(liscia_mcs): Panic: file mail-index-transaction-update.c: line 19 (mail_index_transaction_lookup): assertion failed: (seq >= t->first_new_seq && seq <= t->last_new_seq) May 19 14:45:04 imap(liscia_mcs): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x9cd16) [0xb7568d16] -> /usr/lib/dovecot/libdovecot.so.0(+0x9cd9f) [0xb7568d9f] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0xb74f204e] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xe3ebf) [0xb76b7ebf] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xe730c) [0xb76bb30c] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_lookup_uid+0x1d) [0xb76bf47d] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_cache_decision_state_update+0xac) [0xb769ff8c] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_cache_lookup_headers+0x7f) [0xb76a23bf] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xb2898) [0xb7686898] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_mail_get_first_header+0xbf) [0xb768723f] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_get_first_header+0x45) [0xb7601e95] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xb4fc1) [0xb7688fc1] -> /usr/lib/dovecot/libdovecot-storage.so.0(+ 0xb518f) [0xb768918f] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_mail_close+0x136) [0xb76896e6] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_save_cancel+0x6c) [0xb761085c] -> dovecot/imap() [0x8052e1d] -> dovecot/imap() [0x805303c] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x67) [0xb7580997] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xeb) [0xb75823ab] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x45) [0xb7580a55] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x48) [0xb7580c18] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x2d) [0xb74fd1ad] -> dovecot/imap(main+0x344) [0x806dbc4] -> /lib/libc.so.6(__libc_start_main+0xfe) [0xb7357c2e] May 19 14:45:04 imap(liscia_mcs): Fatal: master: service(imap): child 24082 killed with signal 6 (core dumped) Here is mi doveconf -n: # 2.2.29.1 (e0b76e3): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.17 (e179378) # OS: Linux 3.0.101-105-pae i686 openSUSE 11.4 (i586) ext3 auth_cache_size = 3 k auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_verbose = yes default_client_limit = 1249 default_vsz_limit = 712 M disable_plaintext_auth = no first_valid_gid = 0 first_valid_uid = 100 info_log_path = /var/log/dovecot/logfile.info listen = * log_path = /var/log/dovecot/logfile login_greeting = Dovecot at Baobab ready. login_trusted_networks = 127.0.0.0/8 212.45.144.0/24 192.168.134.0/24 mail_location = mbox:/var/spool/mailboxes/%u:INBOX=/var/spool/mail/%u:DIRNAME=mbox:INDEX=/var/dovecot_indexes/%u maildir_copy_with_hardlinks = no managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mbox_lock_timeout = 443 secs namespace { inbox = yes location = prefix = separator = . type = private } passdb { driver = pam } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size } protocols = pop3 imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service imap-login { inet_listener imaps { address = * } process_limit = 512 } service pop3-login { chroot = executable = pop3-login -D inet_listener pop3s { address = * } process_limit = 512 } ssl_ca = </etc/ssl/ca.crt ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = # hidden, use -P to show it userdb { driver = passwd } version_ignore = yes protocol imap { imap_client_workarounds = delay-newmail mail_plugins = mail_log notify } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_enable_last = yes } protocol lda { info_log_path = /var/log/dovecot/lda.log log_path = /var/log/dovecot/lda-errors.log postmaster_address = postmaster(a)mcs.it } Cheers, Luciano. -- /"\ /Via A. Salaino, 7 - 20144 Milano (Italy) \ / ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250 X AGAINST HTML MAIL / E-MAIL: posthamster(a)sublink.sublink.ORG / \ AND POSTINGS / WWW: http://www.lesassaie.IT/

1 0

Re: Pacaging/build issues with AIX and vac (dovecot-2.2.25)
by seema pandhre 22 May '17

22 May '17

Hi Micheal, I am currently working on AIX + VAC + NTPv4 build. and I have also faced same issues as mentioned by you in link https://www.dovecot.org/list/dovecot/2016-October/105597.html Wondering if you have got any resolution for above issue. If yes, please help me with your guidance. thanks in advance, seema

1 0

Using Dovecot for a Geo-replicated World-wide Email Service
by Lennart Oldenburg 22 May '17

22 May '17

Hello everyone, my colleagues and I from Technische Universität Berlin are currently looking into the best way to setup a Dovecot-powered email service that is simultaneously accessible world-wide and still provides short response times by redirecting users to the geographically-closest cluster. We imagine the setup to make use of multiple data center regions in public clouds around the world, e.g. in Amazon Web Services (AWS) or Google Compute Platform (GCP). At the same time, state is considered to be shared, i.e. changes made on file system in any local cluster will have to be synchronized with all other clusters around the globe (mailbox replication) and mailboxes might be manipulated from any data center in the world, potentially at the same time. Naturally, problems arise. We have multiple questions and would be very interested in the best way to approach them based on your experiences and recommendations: 1) Which path should we take replication-wise? Please keep in mind that we are targeting replication between more than 2 clusters. Traditionally, in a rather small local setup with mostly reliable network, a distributed file system such as NFS or GlusterFS might be the best option. Unfortunately, though, when scaling to more than 2 data centers geographically-distributed around the globe, latency becomes severe and distributed file systems might not be the way to go anymore. What is your recommendation for replicating state? 2) We are mostly interested in providing short response times to client requests while maintaining global state consistency (that is, avoiding conflicts in state and not losing any user data). What are your recommendations in that direction? Any particular performance optimizations we could apply to Dovecot? 3) Is there a recommended way to measure and monitor Dovecot's service quality? For example, is there a way to export "live" metrics of a running Dovecot deployment to something such as Prometheus (https://prometheus.io)? 4) Maildir as the way to represent mailboxes and deliver emails on file system is kind of a given. I wonder, though, how well is dbox replicatable? What happens when dbox files are synchronized (e.g. via dsync) and a conflict arises? Does dbox offer a performance improvement over Maildir? 5) We perceive Dovecot to come with many optimizations to speed up "read" IMAP commands, i.e. non-state-changing ones. Is this perception correct? Or is Dovecot able to use its various index and log files for fast "write" IMAP commands (e.g. CREATE, DELETE, RENAME, APPEND, STORE, ...) as well? 6) Would DovecotPRO by Dovecot Oy offer any advantage to state replication? For example, could the Object Storage Plugin be used to replicate mailboxes through some object store service offered world-wide? 7) Is the setup we have in mind based on Dovecot a feasible solution for world-wide email comparable to services like Gmail? If not, what would you change or not do at all? Please excuse if some questions might be of rather basic nature, we are not at all Dovecot experts. I tried to gather as much information on that topic as possible from the wiki and sources found online but I might have missed an important page. In that case, please point me towards existing resources on the questions raised above. Thanks in advance and kind regards, Lennart Oldenburg

1 0

Sieve GLOBAL + Sieve LOCAL
by Luescher Claude 19 May '17

19 May '17

Hello List, I am using dovecot: ii dovecot-antispam 2.0+20130822-2 amd64 Dovecot plugins for training spam filters ii dovecot-core 1:2.2.10-1 amd64 secure POP3/IMAP server - core files ii dovecot-imapd 1:2.2.10-1 amd64 secure POP3/IMAP server - IMAP daemon ii dovecot-ldap 1:2.2.10-1 amd64 secure POP3/IMAP server - LDAP support ii dovecot-lmtpd 1:2.2.10-1 amd64 secure POP3/IMAP server - LMTP server ii dovecot-managesieved 1:2.2.10-1 amd64 secure POP3/IMAP server - ManageSieve server ii dovecot-mysql 1:2.2.10-1 amd64 secure POP3/IMAP server - MySQL support ii dovecot-pop3d 1:2.2.10-1 amd64 secure POP3/IMAP server - POP3 daemon ii dovecot-sieve 1:2.2.10-1 amd64 secure POP3/IMAP server - Sieve filters support doveconf -n | grep -i sieve managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave editheader vnd.dovecot.duplicate sieve = ~/.dovecot.sieve sieve_after = ~/sieve_after sieve_dir = ~/sieve sieve_extensions = +editheader +vnd.dovecot.duplicate sieve_max_redirects = 20 protocols = " imap lmtp sieve pop3" service managesieve-login { inet_listener sieve { mail_plugins = " quota sieve" mail_plugins = " quota sieve" I would like to have a Global and per user based Local sieve_before file. Since doveconf does not indicate I believe my version does not support: sieve_global_path A path to a global sieve script file, which gets executed ONLY if user's private Sieve script doesn't exist, e.g. /var/lib/dovecot/default.sieve. Be sure to pre-compile this script manually using the sievec command line tool, as explained below. But what I would need is execute a global sieve_before for all users to apply some spam selection rules. Did anybody easily achieved it? An obvious workaround would be to create a script which goes through all current users mail directories and creates a sieve_before script with the settings I need and then modify the user creation to do the same when new mailboxes get created. Thank you!

3 3

lmtp segfault after upgrade
by Tom Sommer 19 May '17

19 May '17

I just upgraded our Director to 2.2.29.1 from 2.2.26, and now my dmesg and /var/log/messages are getting flooded by these errors: lmtp[45758]: segfault at 21 ip 00007fb412d3ad11 sp 00007ffe83ad2df0 error 4 in libdovecot.so.0.0.0[7fb412c95000+11c000] lmtp[46304]: segfault at 91 ip 00007f771ba64d11 sp 00007ffe830635a0 error 4 in libdovecot.so.0.0.0[7f771b9bf000+11c000] lmtp[45775]: segfault at 21 ip 00007f206ed81d11 sp 00007ffd0f0daad0 error 4 in libdovecot.so.0.0.0[7f206ecdc000+11c000] lmtp[46649]: segfault at 21 ip 00007ff4aa027d11 sp 00007ffc05841430 error 4 in libdovecot.so.0.0.0[7ff4a9f82000+11c000] lmtp[45774]: segfault at 21 ip 00007ff1f3e0bd11 sp 00007ffe0ba00340 error 4 in libdovecot.so.0.0.0[7ff1f3d66000+11c000] lmtp[45776]: segfault at 411 ip 00007f96ded95d11 sp 00007ffce6401870 error 4 in libdovecot.so.0.0.0[7f96decf0000+11c000] lmtp[46896]: segfault at 21 ip 00007fbf1aa70d11 sp 00007ffc79e22bf0 error 4 in libdovecot.so.0.0.0[7fbf1a9cb000+11c000] lmtp[46695]: segfault at 21 ip 00007fd5ccad6d11 sp 00007ffe19e759d0 error 4 in libdovecot.so.0.0.0[7fd5cca31000+11c000] lmtp[45773]: segfault at 21 ip 00007f0eb7b65d11 sp 00007fff9d02e570 error 4 in libdovecot.so.0.0.0[7f0eb7ac0000+11c000] lmtp[47101]: segfault at 21 ip 00007fa95b052d11 sp 00007fff2d5485a0 error 4 in libdovecot.so.0.0.0[7fa95afad000+11c000] lmtp[45772]: segfault at 21 ip 00007f2f52b49d11 sp 00007fff99a4a6e0 error 4 in libdovecot.so.0.0.0[7f2f52aa4000+11c000] lmtp[46595]: segfault at 21 ip 00007f0ccbdbad11 sp 00007ffd17bfe9e0 error 4 in libdovecot.so.0.0.0[7f0ccbd15000+11c000] lmtp[45770]: segfault at 21 ip 00007f94a576ed11 sp 00007ffc29c2ff00 error 4 in libdovecot.so.0.0.0[7f94a56c9000+11c000] lmtp[45769]: segfault at 21 ip 00007f34999b5d11 sp 00007ffe28818350 error 4 in libdovecot.so.0.0.0[7f3499910000+11c000] lmtp[47371]: segfault at 21 ip 00007f13c611fd11 sp 00007ffcdb000b10 error 4 in libdovecot.so.0.0.0[7f13c607a000+11c000] lmtp[47419]: segfault at 21 ip 00007f4010ff2d11 sp 00007ffd97519420 error 4 in libdovecot.so.0.0.0[7f4010f4d000+11c000] lmtp[47511]: segfault at 581 ip 00007fd5e3d21d11 sp 00007ffce61f29c0 error 4 in libdovecot.so.0.0.0[7fd5e3c7c000+11c000] lmtp[47277]: segfault at 21 ip 00007f04c3d6cd11 sp 00007ffc421da1b0 error 4 in libdovecot.so.0.0.0[7f04c3cc7000+11c000] lmtp[45771]: segfault at 21 ip 00007f55c690ed11 sp 00007fff35521fc0 error 4 in libdovecot.so.0.0.0[7f55c6869000+11c000] lmtp[47543]: segfault at 21 ip 00007f11ea946d11 sp 00007ffdd9a97690 error 4 in libdovecot.so.0.0.0[7f11ea8a1000+11c000] lmtp[47669]: segfault at 21 ip 00007f8f58abbd11 sp 00007ffdd5573220 error 4 in libdovecot.so.0.0.0[7f8f58a16000+11c000] lmtp[46959]: segfault at 41 ip 00007ff9d6f3ed11 sp 00007ffe28dc8ea0 error 4 in libdovecot.so.0.0.0[7ff9d6e99000+11c000] Any ideas? -- Tom

4 17

per user procmail filtering and dovecot-lda
by James Nord 18 May '17

18 May '17

Hi all, I recently migrated my system (postfix/Dovecot)from mbox to Maildir. Almost everything is working (phone and thunderbird show all my mail and folders with mail) However I am stuck on my .procmailrc rules # cat /etc/procmailrc SENDMAIL=/usr/sbin/sendmail SENDMAILFLAGS=-oi LOGFILE=/var/log/procmail.log ORGMAIL=${HOME}/Maildir/ DEFAULT=${ORGMAIL} MAILDIR=${HOME}/Maildir/ DELIVER="/usr/lib/dovecot/deliver -d $LOGNAME" # next line is to support user .procmailrc files INCLUDERC=$HOME/.procmailrc :0 w | $DELIVER # cat ~/.procmailrc :0 w * ^List-ID:.*jenkinsci-dev.googlegroups.com | $DELIVER -m mailing-lists/jenkinsci-dev :0 w * ^List-ID:.*jenkinsci-users.googlegroups.com | $DELIVER -m mailing-lists/jenkinsci-users However dovecot-lda complains that the mailboxes "mailing-lists/jenkinsci-users", "mailing-lists/jenkinsci-dev" etc do not exist so delivers to the INBOX. Everything I have read says that the mailbox specified by -m is the name as seen by the mail client, and this is what the client sees (see image). I have tried changing the mailbox to INBOX/mailing-lists/... inbox/mailing-lists/... but the same still happens. So I am missing something somewhere and my google foo is unfortunately letting me down this time. Is there someone that can help me? (I'm not subscribed to the list so a CC to me would be appreciated) Regards /James

5 7

Re: Sieve GLOBAL + Sieve LOCAL
by Joseph Tam 17 May '17

17 May '17

Luescher Claude <stargate(a)tango.lu> writes: > I am using dovecot: > ... > ii dovecot-sieve 1:2.2.10-1 amd64 > secure POP3/IMAP server - Sieve filters support > ... > doveconf -n | grep -i sieve > Since doveconf does not indicate I believe my version does not support: > > sieve_global_path I see mentions of this configuration variable in 7 year old dovecot posts, so it's been around a long time. You should do doveconf -a | grep sieve_global_path since "-n" won't list unchanged (defaulted) configuration values. Joseph Tam <jtam.home(a)gmail.com>

1 0

Conditionally Filter Mails During IMAP Fetch
by Ory Drilon 17 May '17

17 May '17

Hi, is there a way to arbitrarily filter out mails at the moment the IMAP request is made, based on properties of the IMAP session and the mail itself? All the filtering methods I find occur during delivery time.

2 1

Re: ACL and virtual user
by Davide Marchi 15 May '17

15 May '17

...I had under my eyes the solution I have not seen: * user=foo lrw Public user=bar lrwstipekxa Public/* user=bar lrwstipekxa I was enough (in my case) add the initial "*" wildcards, like this: * user=info(a)mydomain.com lrwsi where the "*" wildcards means all groups. I have verified and so the configuration is perfect, the user can not delete their own messages The fact remains that on the wiki dovecot ACL these steps, in the case of virtual users, are not clear, at least in my opinion. :-) I hope at least that my experience can be of assistance to other users. Many many thanks! Davide

1 0

ACL and virtual user
by Davide Marchi 15 May '17

15 May '17

Hi friends, I would like to remove write rights for a specific virtual user/email address. I've read the wiki "https://wiki2.dovecot.org/ACL" but there is nothing about it. So I started reading and rereading some old ML, like this: https://www.dovecot.org/list/dovecot/2006-June/013683.html where they talk about something like that but I would like to implement current guidelines for the "Global ACL file" and for virtual user. So I've try: * user=foo lrw Public user=bar lrwstipekxa Public/* user=bar lrwstipekxa But in my case for virtual user, so I tried (obviously I changed the email address with a generic one): -------------- #user=info(a)mydomain.com lrwsi -------------- Log: May 15 10:40:44 server dovecot: imap(info(a)mydomain.com): Error: Global ACL file /etc/dovecot/dovecot-acl line 1: Unknown ID 'lrwsi' -------------- #owner #user=info at mydomain.com lrwsi -------------- Log: May 15 10:47:58 server dovecot: imap(info(a)mydomain.com): Error: Global ACL file /etc/dovecot/dovecot-acl line 1: Missing ACL rights -------------- #user=info at mydomain.com lrwsi -------------- Log: May 15 10:51:57 server dovecot: imap(info(a)mydomain.com): Error: Global ACL file /etc/dovecot/dovecot-acl line 2: Unknown ID 'at' But none of these gave results, could you explain better or gime me an example? Many many thanks! Davide Italy

1 0

[BUG] doveadm kick doesn't play well with hibernate
by Christian Balzer 15 May '17

15 May '17

Hello, Dovecot 2.2.27 (Debian Jessie backports). When issuing a "doveadm kick" for a specific user I was greeted by: --- "warning: other connections would also be kicked from following users:" --- and a list of 22odd thousand users. As it turns out, kick wants to smack the hibernation proces(ses) that have hibernated sessions for this user, obviously the wrong approach here. If there's doveadm command to wake up and thus un-hibernate sessions for a specific user this could be used as a workaround but a quick glance suggest no such thing. This functionality is absolutely crucial for us as we need this for our custom mailbox migration functionality. If there's no workaround or fix within 2 months I'll be forced to disable hibernation again (with a heavy heart). Regards, Christian -- Christian Balzer Network/Systems Engineer chibi(a)gol.com Global OnLine Japan/Rakuten Communications http://www.gol.com/

2 2

Dovecot 2.2.29.1 + VPopMail 5.4.33
by Nicholas Chua 12 May '17

12 May '17

Hi all, I have a fresh installation of a Vpopmail 5.4.33 + Dovecot 2.2.29.1 + SQL As usual I followed the AuthDatabase/VPopMail wiki password_query = SELECT CONCAT(pw_name, '@', pw_domain) AS user, \ pw_clear_passwd AS password \ FROM vpopmail \ WHERE pw_name = '%n' AND pw_domain = '%d' user_query = SELECT pw_dir as home, \ 89 AS uid, 89 AS gid \ FROM vpopmail \ WHERE pw_name = '%n' AND pw_domain = '%d' For VPopMail, I prefer to have an individual table in the vpopmail database for each domain. So my structure will be something like this vpopmail.abc_com vpopmail.xyz_com To achieve this I add this configure when compiling VPopMail --disable-many-domains But dovecot will not read vpopmail.abc_com, instead it keep looking for vpopmail.vpopmail auth-worker(8643): Warning: mysql: Query failed, retrying: Table 'vpopmail.vpopmail' doesn't exist If I remove --disable-many-domains in the configuration, I have no issue. Is there a new password and user query to have this working? The last working version I had installed is Dovecot 2.2.15 Thank you nic

1 0

folders in public namespace only visable to 2nd folder level in 2.2.29.1
by Andreas Oster 11 May '17

11 May '17

Hi all, I am currently facing an issue with Dovevot version 2.2.29.1 where subfolders in a public namespace are only visible to the 2nd folder level: namespace Public -> folder "1st" -> folder -> "2nd" -> folder "3rd" .... When one user creates a subfolder below the 2nd level other users do not see that folder and are unable to subscribe to this folder. Folders created under the 1st level however are visible and subscribable by other users. namespace { disabled = no hidden = no ignore_on_failure = no inbox = no list = children type = public separator = / prefix = Public/ location = maildir:/var/vmail/public:INDEXPVT=~/Maildir/public subscriptions = no } I do not know at which point ( dovecot update ) this issue appeared. Does anyone face the same problem ? Thank you for your kind help best regards Andreas

5 5

Example for doveadm-save using Doveadm HTTP API
by KT Walrus 11 May '17

11 May '17

I could use an example of how to use curl to save a new message to a user’s INBOX using the Doveadm HTTP API. https://wiki2.dovecot.org/Design/DoveadmProtocol/HTTP <https://wiki2.dovecot.org/Design/DoveadmProtocol/HTTP> Do I really use the -d option and inline the entire new message in the command-line? Or, should I create a temporary .json file with the message wrapped in JSON and pass this filename to the -d option? Does anyone have a PHP class that abstracts the HTTP API commands? I’ve been using the Roundcube Framework to deliver new messages by IMAP, but I’m experimenting whether the Doveadm HTTP API might be a better solution. I eventually want my PHP code to do full administration of my users mailboxes. I was planning on using Sieve pipe PHP scripts in conjunction with IMAP to do full admin on mailboxes (as they receive new messages or change a flag, I would trigger maintenance on the mailbox such as deleting or moving to the trash old messages or filing a copy of a new message in a folder). Finally, is the Doveadm HTTP API stable enough to use in production? It seems like the documentation is rather minimal. Can this interface really be used for new message delivery instead of LMTP in production? Or, is this a bad idea to combine mailbox administration with new message delivery? Does anyone here use the Doveadm HTTP API in production? Kevin

3 5

confused with ssl settings and some error - need help
by Poliman - Serwis 09 May '17

09 May '17

Hi, To default dovecot.conf file I added (based on found documentation): ssl = required disable_plaintext_auth = yes #change default 'no' to 'yes' ssl_prefer_server_ciphers = yes ssl_options = no_compression ssl_dh_parameters_length = 2048 ssl_cipher_list = ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA 1. Are these settings good or can be improved? 2. Is this line proper: ssl_protocols = !SSLv2 !SSLv3 !TLSv1 !TLSv1.1 or maybe should be: ssl_protocols = !SSLv2 !SSLv3 3. Last thing. I have below errors (they appear in loop in mail.err log file): #Apr 25 14:08:09 serwer-1 dovecot: imap-login: Error: SSL: Stacked error: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol #Apr 25 14:08:09 serwer-1 dovecot: imap-login: Error: SSL: Stacked error: error:1408A10B:SSL routines:ssl3_get_client_hello:wrong version number #Apr 25 14:08:51 serwer-1 dovecot: imap-login: Error: SSL: Stacked error: error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac #Apr 25 14:08:51 serwer-1 dovecot: imap-login: Error: SSL: Stacked error: error:1408A0C1:SSL routines:ssl3_get_client_hello:no shared cipher When I setup in postfix main.cf file (other lines default): tls_ssl_options = no_ticket, no_compression tls_preempt_cipherlist = yes smtpd_sasl_security_options=noanonymous,noplaintext smtpd_sasl_tls_security_options=noanonymous,noplaintext smtpd_tls_mandatory_ciphers = high smtpd_tls_dh1024_param_file = /etc/postfix/dh2048.pem #instead of below I tried smtpd_tls_mandatory_exclude_ciphers but I don't know what should be setup smtpd_tls_exclude_ciphers = aNULL, eNULL, EXPORT, DES, RC4, MD5, PSK, aECDH, EDH-DSS-DES-CBC3-SHA, EDH-RSA-DES-CBC3-SHA, ECDHE-RSA-DES-CBC3-SHA, DES-CBC3-SHA, RC4-MD5, RC4-SHA, ECDHE-RSA-RC4-SHA smtp_tls_exclude_ciphers = aNULL, eNULL, EXPORT, DES, RC4, MD5, PSK, aECDH, EDH-DSS-DES-CBC3-SHA, EDH-RSA-DES-CBC3-SHA, ECDHE-RSA-DES-CBC3-SHA, DES-CBC3-SHA, RC4-MD5, RC4-SHA, ECDHE-RSA-RC4-SHA Is between dovecot and postfix some communication using above ciphers or something that generate that errors in log or maybe some public client try connect and can't establish connection? Server with Ubuntu 16.04 LTS, postfix 3.1 and dovecot 2.2.22 and openssl 1.0.2k. -- *Pozdrawiam / Best Regards* *Piotr Bracha* *tel. 534 555 877* *serwis(a)poliman.pl <serwis(a)poliman.pl>*

2 8

error trying to access the doveadm http api
by KT Walrus 09 May '17

09 May '17

I’m trying out the the doveadm http api for the first time. When I do: $ curl -H "Authorization: Basic <base64 doveadm:doveadm_password>" http://localhost:8888 curl: (52) Empty reply from server In the logs, I see the following error: May 09 11:58:05 doveadm(10.0.0.17): Error: doveadm client not compatible with this server (mixed old and new binaries?) I am running Dovecot 2.2.29.1 in Docker containers. What am I doing wrong? Kevin

1 0

DoS (was IMAP-auth on LAN and otherwise)
by Rupert Gallagher 09 May '17

09 May '17

Today the problem raised its head again, with a twist. A LAN client lost the DNS setting that pointed directly to the LAN address of the IMAP server, and two things happened: the LAN client could not connect to IMAP as we know, and a telephone call from the external client reported the same. When the LAN client closed Thunderbird, then the external client regained access. There were no other clients online at the same time. It turns out that the single LAN client was making enough requests to saturate dovecot's authentication service. I already described the detail with wireshark. On Tue, May 2, 2017 at 3:46 PM, Rupert Gallagher <ruga(a)protonmail.com> wrote: Hello, Thunderbird has been bugging us with connection errors. Dovecot is installed on a local server that carries a local IP and a public IP. When Thunderbird on a local client connects successfully, Wireshark shows a SYN request from the client's IP on LAN to the public IP of the server, followed by the ACK from the same public IP. When Thunderbird on the same local client fails to connect, Wireshark shows a SYN request from the client's IP on LAN to the public IP of the server, followed by the ACK from the server's LAN address, the client does not accept the ACK as valid and sends a new SYN request. The loop eventually leads to time-out. At the client's console, the DNS query of the IMAP server always responds with the server's public IP address. It is evident from Wireshark that the dovecot server sends ACKs from two IPs. Is it possible to instruct Dovecot to use the public IP only?

2 2

2.2 -git fails to compile as of Apr 28 2017
by Reuben Farrelly 09 May '17

09 May '17

This has been broken for the last few days: libtool: link: ( cd ".libs" && rm -f "lib10_quota_plugin.la" && ln -s "../lib10_quota_plugin.la" "lib10_quota_plugin.la" ) libtool: link: x86_64-pc-linux-gnu-gcc -std=gnu99 -O2 -pipe -march=native -mtune=native -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -Wl,-O1 -o .libs/quota-status quota-status.o .libs/quota.o .libs/quota-count.o .libs/quota-fs.o .libs/quota-dict.o .libs/quota-dirsize.o .libs/quota-imapc.o .libs/quota-maildir.o .libs/quota-plugin.o .libs/quota-storage.o .libs/quota-util.o .libs/rquota_xdr.o -Wl,--export-dynamic -Wl,--as-needed ../../../src/lib-storage/.libs/libdovecot-storage.so /var/tmp/portage/net-mail/dovecot-9999_p20170427/work/dovecot-9999_p20170427/src/lib-dovecot/.libs/libdovecot.so ../../../src/lib-imap-storage/.libs/libimap-storage.a ../../../src/lib-dovecot/.libs/libdovecot.so -ldl -Wl,-rpath -Wl,/usr/lib64/dovecot .libs/quota-imapc.o: In function `imapc_quota_refresh': quota-imapc.c:(.text+0x8dd): undefined reference to `imapc_storage_client_register_untagged' quota-imapc.c:(.text+0x8f7): undefined reference to `imapc_storage_client_register_untagged' quota-imapc.c:(.text+0x90a): undefined reference to `imapc_client_get_capabilities' quota-imapc.c:(.text+0x964): undefined reference to `imapc_simple_context_init' quota-imapc.c:(.text+0x975): undefined reference to `imapc_simple_callback' quota-imapc.c:(.text+0x97e): undefined reference to `imapc_client_cmd' quota-imapc.c:(.text+0x996): undefined reference to `imapc_command_sendf' quota-imapc.c:(.text+0x99e): undefined reference to `imapc_simple_run' quota-imapc.c:(.text+0xaab): undefined reference to `imapc_simple_context_init' quota-imapc.c:(.text+0xabc): undefined reference to `imapc_simple_callback' quota-imapc.c:(.text+0xac5): undefined reference to `imapc_client_cmd' quota-imapc.c:(.text+0xadd): undefined reference to `imapc_command_sendf' quota-imapc.c:(.text+0xae5): undefined reference to `imapc_simple_run' collect2: error: ld returned 1 exit status make[4]: *** [Makefile:694: quota-status] Error 1 make[4]: Leaving directory '/var/tmp/portage/net-mail/dovecot-9999_p20170427/work/dovecot-9999_p20170427/src/plugins/quota'

3 7

PoC doveadm HTTP API client
by Hannu Ylitalo 09 May '17

09 May '17

Hi, In case you are interested in testing the Doveadm HTTP API in a bit more simplified fashion I have written a client for it in Python. Feedback is always appreciated (pull requests more appreciated). https://github.com/hnsk/doveadm-http-cli <https://github.com/hnsk/doveadm-http-cli> -Hannu

1 0

logging number of deleted messages
by David Mehler 07 May '17

07 May '17

Hello, I'm running Dovecot 2.29. I've got it going through a Mysql database. I've got the auto expunge plugin loaded. What I'm wanting to know is is there message count deletion ability? For example, does the mail_log, trash, or auto expunge plugins log how many messages were deleted? Thanks. Dave.

1 0

IMAP-auth on LAN and otherwise
by Rupert Gallagher 04 May '17

04 May '17

Hello, Thunderbird has been bugging us with connection errors. Dovecot is installed on a local server that carries a local IP and a public IP. When Thunderbird on a local client connects successfully, Wireshark shows a SYN request from the client's IP on LAN to the public IP of the server, followed by the ACK from the same public IP. When Thunderbird on the same local client fails to connect, Wireshark shows a SYN request from the client's IP on LAN to the public IP of the server, followed by the ACK from the server's LAN address, the client does not accept the ACK as valid and sends a new SYN request. The loop eventually leads to time-out. At the client's console, the DNS query of the IMAP server always responds with the server's public IP address. It is evident from Wireshark that the dovecot server sends ACKs from two IPs. Is it possible to instruct Dovecot to use the public IP only?

3 7

Re: dovecot log shows: service=imap ... Error: Temp file, creation to /tmp/dovecot.imap. failed: No such directory
by Peter 03 May '17

03 May '17

I am using dovecot 2.2 with plesk 12 and I have made no modifications to the dovecot config. >> Logwatch reports the messages below. >> The errors don't seem to appear for every imap connect as can be seen from the number of deliveries and successful logins. >> So what makes dovecot fail sometimes to create the /tmp/dovecot.imap? >> >> >> Dovecot Deliveries: 19 >> Dovecot IMAP and POP3 Successful Logins: 106 >> Dovecot disconnects: 72 >> >> **Unmatched Entries** >> dovecot: message repeated 4 times: [ service=imap, user=tester(a)example.com, ip=[::1]. Error: Temp file creation to /tmp/dovecot.imap. failed: No such file or directory]: 1 Time(s) >> dovecot: message repeated 5 times: [ service=imap, user=tester(a)example.com, ip=[::1]. Error: Temp file creation to /tmp/dovecot.imap. failed: No such file or directory]: 1 Time(s) >> dovecot: service=imap, user=tester(a)example.com, ip=[::1]. Error: Temp file creation to /tmp/dovecot.imap. failed: No such file or directory: 10 Time(s) >> dovecot: service=imap, user=tester(a)example.com, ip=[::1]. Error: Temp file creation to /tmp/dovecot.imap. failed: No such file or directory: 1 Time(s) >> Maybe you are chrooting dovecot yourself? The chroot must contain /tmp directory. << If this was the case I would expect the error for every imap connection and not only sometimes. Nonetheless: How can I check the chroot settings? Peter

1 0

Problem with Userid
by Luciano Mannucci 03 May '17

03 May '17

I have a problem with a physical user that was removed and recreated whith same name and different uid. The home dir, the mailbox file and the index directory where removed and recreated with the new uid/gid. I can feed the mailbox via procmail, though dovecot-lda complains that userids do not match: May 02 15:27:33 lda(alessandro_cmr): Error: stat(/var/spool/mailboxes/alessandro_cmr/INBOX) failed: Permission denied (euid=3525(alessandro_cmr) egid=111(poppers) missing +x perm: /var/spool/mailboxes/alessandro_cmr, dir owned by 1000:111 mode=0700) doveadm auth cache flush says 28 entries flushed but the situation does'nt change. here's my doveconf -n: # 2.2.29.1 (e0b76e3): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.17 (e179378) # OS: Linux 3.0.101-105-pae i686 openSUSE 11.4 (i586) ext3 auth_cache_size = 3 k auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_verbose = yes default_client_limit = 1249 default_vsz_limit = 712 M disable_plaintext_auth = no first_valid_gid = 0 first_valid_uid = 100 info_log_path = /var/log/dovecot/logfile.info listen = * log_path = /var/log/dovecot/logfile login_greeting = Dovecot at Baobab ready. login_trusted_networks = 127.0.0.0/8 212.45.144.0/24 192.168.134.0/24 mail_location = mbox:/var/spool/mailboxes/%u:INBOX=/var/spool/mail/%u:DIRNAME=mbox:INDEX=/var/dovecot_indexes/%u maildir_copy_with_hardlinks = no managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mbox_lock_timeout = 443 secs namespace { inbox = yes location = prefix = separator = . type = private } passdb { driver = pam } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size } protocols = pop3 imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service imap-login { inet_listener imaps { address = * } process_limit = 512 } service pop3-login { chroot = executable = pop3-login -D inet_listener pop3s { address = * } process_limit = 512 } ssl_ca = </etc/ssl/ca.crt ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = # hidden, use -P to show it userdb { driver = passwd } version_ignore = yes protocol imap { imap_client_workarounds = delay-newmail mail_plugins = mail_log notify } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_enable_last = yes } protocol lda { info_log_path = /var/log/dovecot/lda.log log_path = /var/log/dovecot/lda-errors.log postmaster_address = mostmaster(a)mcs.it } Any idea? Thanks in advance 2 any helper, Luciano. -- /"\ /Via A. Salaino, 7 - 20144 Milano (Italy) \ / ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250 X AGAINST HTML MAIL / E-MAIL: posthamster(a)sublink.sublink.ORG / \ AND POSTINGS / WWW: http://www.lesassaie.IT/

2 2

Sieve dict and bindir question
by Alessio Cecchi 03 May '17

03 May '17

Hi, I have setup the latest Dovecot and Sieve with dict in order to read rules from MySQL and works fine: sieve_before = dict:proxy::sieve;name=activesql;bindir=~/.sieve-bin dict { sieve = mysql:/etc/dovecot/dovecot-dict-sieve-sql.conf.ext } # cat /etc/dovecot/dovecot-dict-sieve-sql.conf.ext connect = host=10.1.1.1 dbname=dovecot user=dovecot password=Ciao map { pattern = priv/sieve/name/$script_name table = user_sieve_scripts username_field = username value_field = id fields { script_name = $script_name } } map { pattern = priv/sieve/data/$id table = user_sieve_scripts username_field = username value_field = script_data fields { id = $id } } But when I update the rules in mysql sieve continue to apply only the "old" rules stored in the binary. The only way to apply the new rules is to delete the .sieve-bin/activesql.svbin. If I remove ";bindir=~/.sieve-bin" works fine. This is a cache issue and can be fixed via setting, is an issue or is a "feature" :-) ? Thanks -- Alessio Cecchi Postmaster @ http://www.qboxmail.it https://www.linkedin.com/in/alessice

3 4

dovecot log shows: service=imap ... Error: Temp file creation to /tmp/dovecot.imap. failed: No such directory
by Peter Kielbasiewicz 03 May '17

03 May '17

I am using dovecot 2.2 with plesk 12 and I have made no modifications to the dovecot config. Logwatch reports the messages below. The errors don't seem to appear for every imap connect as can be seen from the number of deliveries and successful logins. So what makes dovecot fail sometimes to create the /tmp/dovecot.imap? Dovecot Deliveries: 19 Dovecot IMAP and POP3 Successful Logins: 106 Dovecot disconnects: 72 **Unmatched Entries** dovecot: message repeated 4 times: [ service=imap, user=tester(a)example.com, ip=[::1]. Error: Temp file creation to /tmp/dovecot.imap. failed: No such file or directory]: 1 Time(s) dovecot: message repeated 5 times: [ service=imap, user=tester(a)example.com, ip=[::1]. Error: Temp file creation to /tmp/dovecot.imap. failed: No such file or directory]: 1 Time(s) dovecot: service=imap, user=tester(a)example.com, ip=[::1]. Error: Temp file creation to /tmp/dovecot.imap. failed: No such file or directory: 10 Time(s) dovecot: service=imap, user=tester(a)example.com, ip=[::1]. Error: Temp file creation to /tmp/dovecot.imap. failed: No such file or directory: 1 Time(s)

2 1

Problem with Pigeonhole/Sieve
by Kamil Kapturkiewicz 03 May '17

03 May '17

Hi, I am trying to configure Pigeonhole to get filters in RoundCube working. Unfortunately I am getting following error in DoveCot log instead: May 01 14:35:41 managesieve-login: Error: auth: connect(login) in directory / failed: Permission denied (euid=248(<getpwuid() error>) egid=248(<getgrgid() error>) missing +x perm: /, we're not in group 202, dir owned by 0:202 mode=0750) May 01 14:35:41 managesieve-login: Error: auth: connect(login) in directory / failed: Permission denied (euid=248(<unknown>) egid=248(<unknown>) missing +x perm: /, we're not in group 202, dir owned by 0:202 mode=0750) May 01 14:36:00 master: Warning: Killed with signal 15 (by pid=37695 uid=0 code=kill) May 01 14:36:36 managesieve-login: Error: auth: connect(login) in directory / failed: Permission denied (euid=248(<getpwuid() error>) egid=248(<getgrgid() error>) missing +x perm: /, we're not in group 202, dir owned by 0:202 mode=0750) May 01 14:36:36 managesieve-login: Error: auth: connect(login) in directory / failed: Permission denied (euid=248(<unknown>) egid=248(<unknown>) missing +x perm: /, we're not in group 202, dir owned by 0:202 mode=0750) May 01 15:17:08 managesieve-login: Error: auth: connect(login) in directory / failed: Permission denied (euid=248(<getpwuid() error>) egid=248(<getgrgid() error>) missing +x perm: /, we're not in group 202, dir owned by 0:202 mode=0750) May 01 15:17:08 managesieve-login: Error: auth: connect(login) in directory / failed: Permission denied (euid=248(<unknown>) egid=248(<unknown>) missing +x perm: /, we're not in group 202, dir owned by 0:202 mode=0750) Above appears in log, when I am trying to access filters configuration in RC or manually connecting to sieve using telnet. My DoveCot configuration: # 2.2.27 (c0f36b0): /usr/local/dovecot/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.15 (97b3da0) # OS: Linux 4.4.38 x86_64 Slackware 14.2 ext4 debug_log_path = /var/log/dovecot/dovecot-debug.log first_valid_gid = 12 first_valid_uid = 8 info_log_path = /var/log/dovecot/dovecot-info.log last_valid_gid = 12 last_valid_uid = 8 listen = *, [::] log_path = /var/log/dovecot/dovecot.log mail_location = maildir:/var/mail/%d/%n managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocols = imap pop3 sieve service auth { user = dovecot } service imap-login { user = dovecot } service pop3-login { user = dovecot } ssl_cert = </etc/letsencrypt/live/domain/fullchain.pem ssl_cipher_list = ALL:!ADH:!LOW:!SSLv2:!SSLv3:!EXP:!aNULL:+HIGH:+MEDIUM ssl_key = # hidden, use -P to show it userdb { driver = prefetch } verbose_proctitle = yes protocol pop3 { pop3_uidl_format = %08Xu%08Xv } What could be a reason of that? -- skype. kamil.kapturkiewicz tel/whatsapp. +44 758 306 8467

2 3

Re: Re: migrate Maildir to mdbox
by Joseph Tam 02 May '17

02 May '17

Michael Segel <dovecot_mjs(a)hotmail.com> writes: > Which is preferred? MailDir or Mbox? (directory vs flat file) Mailbox; I wish I converted when I had the chance. The only benefits I can see with mbox is that it's slightly less complicated, and if you're doing pattern searching or some global mailbox operation, less I/O intensive, but that's a niche case and usually ameliorated by indices. However, backing up mbox is a pain since changes results in the entire file being backed up for snapshotting filesystems, and atomicity of I/O operations is much harder. It just doesn't scale well for large mailboxes. As Aki recommends, use something other than mbox unless you got some legacy issue. > How would you do this when migrating from an old server to a new one? Lots of third party scripts out there that will convert for you. I think you can do dovecot->dovecot dsync to convert. Joseph Tam <jtam.home(a)gmail.com>

1 0

migrate Maildir to mdbox
by Tamas Papp 02 May '17

02 May '17

Hi, I replaced HDDs in my home server and reinstalled the OS (Ubuntu 17.04). Since I had some time I reviewed my Dovecot configuration and changed a couple of things, including mailbox format. Now I would like to migrate e-mail (about 20G -- I use this server as an e-mail archive). The Maildir is available on the (old) hard disk. The new dovecot is running. What should I use? Would mbsync work? I would prefer a solution that does not mess up the UUIDs, but I can live with that too. $ dovecot --version 2.2.27 (c0f36b0) Incidentally, would you recommend sdbox or mdbox? Lots of e-mails, many of them have large attachments. best, Tamas

4 4

Issue with parsing of forwarded messages with attachments and quotes in the subject
by Giovanni Salvatore Fois 02 May '17

02 May '17

Hi all, at work we use Roundcube acting as a mail client for the Dovecot Imap server. In Roundube the messages are parsed through the Imap BODYSTRUCTURE command If a message contains forwarded messages and attachments and some of the messages contains a quote (") in the subject, then the resulting BODYSTRUCTURE appears to be malformed. --- After some digging through the code of Dovecot, it seems to me that the problem is related to the function: imap_append_string_for_humans defined at the line 120 of the file src/lib-imap/imap-quote.c (dovecot sources v. 2.2.29) Said function is supposed to return a quoted version of the input string while removing unwanted characters from the input data. But, if I call it with a string containing quotes as argument (eg: I am a lazy " programmer) in the resulting output the quotes aren't escaped and the output string is not quoted. ---- This is related to the stated issue through the function calls in: part_write_body [ defined at line 142 of imap-bodystructure.c ] which calls imap_envelope_write [defined at line 46 of imap-envelope.c] which finally calls imap_append_string_for_humans ---- Thank you for your time. Best regards, Giovanni S. Fois

2 2

Dovecot 2.2 maildir replication issue
by Joelly Alexander 01 May '17

01 May '17

Hello, I'm just trying to setup two mailservers with dovecot 2.2, postfix, mysql, postfixadmin where i would like to sync the maildirs between them; I'm at the point where sending/receiving and qouta is working and try the maildir replication but it only creates the maildir directories (as example: /srv/vmail/test.domain/screenie/) on the second server but nothing inside the maildir is copied over; Both servers are setup identical except the things which have to be different (ssl certs and mail_replica node entries); This is what i'm getting in the log but stuck at: dsync-server(screenie(a)test.domain): Error: User has no home directory I assume it's the user_query in dovecot-sql.conf.ext but not 100% sure nor an idea to fix it; May 1 18:09:48 mx1 dovecot: doveadm(192.168.1.10,screenie(a)test.domain): Debug: auth input: user=screenie(a)test.domain May 1 18:09:48 mx1 dovecot: doveadm(192.168.1.10,screenie(a)test.domain): Debug: auth input: screenie(a)test.domain mail=maildir:/srv/vmail/test.domain/screenie/ quota_rule=*:bytes=102400000 uid=5000 gid=5000 May 1 18:09:48 mx1 dovecot: doveadm(192.168.1.10,screenie(a)test.domain): Debug: Added userdb setting: mail=maildir:/srv/vmail/test.domain/screenie/ May 1 18:09:48 mx1 dovecot: doveadm(192.168.1.10,screenie(a)test.domain): Debug: Added userdb setting: plugin/quota_rule=*:bytes=102400000 May 1 18:09:48 mx1 dovecot: doveadm(192.168.1.10,screenie(a)test.domain): Debug: Effective uid=5000, gid=5000, home= May 1 18:09:48 mx1 dovecot: doveadm(192.168.1.10,screenie(a)test.domain): Debug: Quota root: name=User Quota backend=dict args=:proxy::sqluserquota May 1 18:09:48 mx1 dovecot: doveadm(192.168.1.10,screenie(a)test.domain): Debug: Quota rule: root=User Quota mailbox=* bytes=102400000 messages=0 May 1 18:09:48 mx1 dovecot: doveadm(192.168.1.10,screenie(a)test.domain): Debug: Quota rule: root=User Quota mailbox=Trash bytes=+10240000 (10%) messages=0 May 1 18:09:48 mx1 dovecot: doveadm(192.168.1.10,screenie(a)test.domain): Debug: Quota grace: root=User Quota bytes=10240000 (10%) May 1 18:09:48 mx1 dovecot: doveadm(192.168.1.10,screenie(a)test.domain): Debug: dict quota: user=screenie(a)test.domain, uri=proxy::sqluserquota, noenforcing=0 May 1 18:09:48 mx1 dovecot: doveadm(192.168.1.10,screenie(a)test.domain): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/srv/vmail/test.domain/screenie/ May 1 18:09:48 mx1 dovecot: doveadm(192.168.1.10,screenie(a)test.domain): Debug: maildir++: root=/srv/vmail/test.domain/screenie, index=, indexpvt=, control=, inbox=/srv/vmail/test.domain/screenie, alt= May 1 18:09:48 mx1 dovecot: dsync-server(screenie(a)test.domain): Error: User has no home directory May 1 18:09:53 mx1 dovecot: doveadm(screenie(a)test.domain): Debug: auth input: user=screenie(a)test.domain May 1 18:09:53 mx1 dovecot: doveadm(screenie(a)test.domain): Debug: auth input: screenie(a)test.domain mail=maildir:/srv/vmail/test.domain/screenie/ quota_rule=*:bytes=102400000 uid=5000 gid=5000 May 1 18:09:53 mx1 dovecot: doveadm(screenie(a)test.domain): Debug: Added userdb setting: mail=maildir:/srv/vmail/test.domain/screenie/ May 1 18:09:53 mx1 dovecot: doveadm(screenie(a)test.domain): Debug: Added userdb setting: plugin/quota_rule=*:bytes=102400000 May 1 18:09:53 mx1 dovecot: doveadm(screenie(a)test.domain): Debug: Effective uid=5000, gid=5000, home= May 1 18:09:53 mx1 dovecot: doveadm(screenie(a)test.domain): Debug: Quota root: name=User Quota backend=dict args=:proxy::sqluserquota May 1 18:09:53 mx1 dovecot: doveadm(screenie(a)test.domain): Debug: Quota rule: root=User Quota mailbox=* bytes=102400000 messages=0 May 1 18:09:53 mx1 dovecot: doveadm(screenie(a)test.domain): Debug: Quota rule: root=User Quota mailbox=Trash bytes=+10240000 (10%) messages=0 May 1 18:09:53 mx1 dovecot: doveadm(screenie(a)test.domain): Debug: Quota grace: root=User Quota bytes=10240000 (10%) May 1 18:09:53 mx1 dovecot: doveadm(screenie(a)test.domain): Debug: dict quota: user=screenie(a)test.domain, uri=proxy::sqluserquota, noenforcing=0 May 1 18:09:53 mx1 dovecot: doveadm(screenie(a)test.domain): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/srv/vmail/test.domain/screenie/ May 1 18:09:53 mx1 dovecot: doveadm(screenie(a)test.domain): Debug: maildir++: root=/srv/vmail/test.domain/screenie, index=, indexpvt=, control=, inbox=/srv/vmail/test.domain/screenie, alt= May 1 18:09:53 mx1 dovecot: doveadm(screenie(a)test.domain): Debug: Namespace : Using permissions from /srv/vmail/test.domain/screenie: mode=0700 gid=default May 1 18:09:53 mx1 dovecot: dsync-local(screenie(a)test.domain): Error: User has no home directory root@mx1:/# dovecot -n # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-48-pve x86_64 Debian 8.7 simfs auth_mechanisms = plain login dict { sqluserquota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } doveadm_password = password doveadm_port = 64500 mail_debug = yes mail_location = maildir:/srv/vmail/%d/%n/maildir mail_plugins = " notify quota replication zlib" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Items" { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { mail_replica = tcp:mx2:64500 quota = dict:User Quota::proxy::sqluserquota quota_rule2 = Trash:storage=+10%% sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap lmtp sieve pop3" service aggregator { fifo_listener replication-notify-fifo { mode = 0666 user = vmail } unix_listener replication-notify { mode = 0666 user = vmail } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service config { unix_listener config { user = vmail } } service dict { unix_listener dict { group = vmail mode = 0600 user = vmail } } service doveadm { inet_listener { port = 64500 ssl = no } user = vmail } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 } } ssl_cert = </etc/ssl/certs/mx1.pem ssl_key = </etc/ssl/private/mx1.key userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = " notify quota replication zlib quota" } protocol lda { auth_socket_path = /var/run/dovecot/auth-master mail_plugins = " notify quota replication zlib quota" } protocol imap { mail_plugins = " notify quota replication zlib imap_quota" } protocol pop3 { mail_plugins = " notify quota replication zlib" } root@mx1:/# root@mx1:/etc/dovecot# grep -v '^ *$#.*$\?$' dovecot-sql.conf.ext driver = mysql connect = host=127.0.0.1 dbname=mailserver user=vmail password=password default_pass_scheme = SHA512-CRYPT password_query = SELECT CONCAT('*:bytes=', quota) AS userdb_quota_rule, password FROM mailbox WHERE username = '%u' user_query = SELECT CONCAT('maildir:/srv/vmail/',maildir) AS mail, CONCAT('*:bytes=', quota) AS quota_rule, 5000 AS uid, 5000 AS gid FROM mailbox WHERE username = '%u' iterate_query = SELECT username AS user FROM mailbox WHERE active = '1'; root@mx1:/etc/dovecot# thx, screenie

1 0

most secure password scheme
by David Mehler 30 Apr '17

30 Apr '17

Hello, I have a few questions on password schemes. Is SHA512 the most secure? Is there a difference between SHA512 and SHA512-CRYPT? What about SSHA512 and SSH512-CRYPT? Is there a problem with this sql statement: UPDATE virtual_users SET password=CONCAT(‘{SHA256-CRYPT}’, ENCRYPT (‘Password Goes Here’, CONCAT(‘$5$’, SUBSTRING(SHA(RAND()), -16)))) WHERE user=’user(a)example.xn--com-to0a; I'm getting an error 1064 at the ending email address. Thanks. Dave.

3 4

IMAP hibernate and scalability in general
by Christian Balzer 30 Apr '17

30 Apr '17

Hello, as some may remember, we're running very dense IMAP cluster here, in excess of 50k IMAP sessions per node (current record holder is 68k, design is for 200k+). The first issue we ran into was that the dovecot master process (which is single thread and thus a bottleneck) was approaching 100% CPU usage (aka using a full core) when trying to spawn off new IMAP processes. This was rectified by giving IMAP a service count of 200 to create a pool of "idling" processes eventually, reducing the strain for the master process dramatically. That of course required generous cranking up ulimits, FDs in particular. The next issues of course is (as mentioned before) the memory usage of all those IMAP processes and the fact that quite a few things outside of dovecote (ps, etc) tend to get quite sedate when dealing with tens of thousands of processes. We just started to deploy a new mailbox cluster pair with 2.2.27 and having IMAP hibernate configured. Getting this work is a PITA though with regards to ownership and access rights to the various sockets, this part could definitely do with some better (I know, difficult) defaults or at least more documentation (none besides the source and this ML). Initial results are very promising, depending on what your clients are doing (are they well behaved, are your users constantly looking at other folders, etc) the vast majority of IDLE processes will be in hibernated at any given time and thus not only using a fraction of the RAM otherwise needed but also freeing up process space. Real life example: 240 users, 86 imap processes (80% of those not IDLE) and: dovecot 119157 0.0 0.0 10452 3236 ? S Apr01 0:21 dovecot/imap-hibernate [237 connections] That's 237 hibernated connections and thus less processes than otherwise. I assume that given the silence on the ML what we are going to be the first hibernate users where the term "large scale" does apply. Despite that I have some questions, clarifications/confirmations: Our current default_client_limit is 16k, which can be seen by having 5 config processes on our 65k+ session node. ^_- This would also apply to imap-hibernate, one wonders if that's fine (config certainly has no issues) or if something smaller would be appropriate here? Since we have idling IMAP processes around most of the time, the strain of re-spawning proper processes from imap-hibernate should be just as reduced as for the dovecot master, correct? I'll keep reporting our experiences here, that is if something blows up spectacularly. ^o^ Christian -- Christian Balzer Network/Systems Engineer chibi(a)gol.com Global OnLine Japan/Rakuten Communications http://www.gol.com/

4 16

Re: Dovecot last_login plugin and Mysql
by David Mehler 29 Apr '17

29 Apr '17

Hi, Thanks for the pointing out of the oops! I missed that. Don't worry that has been changed. Any suggestions on my issue? Thanks. Dave. On 4/28/17, David Mehler <dave.mehler(a)gmail.com> wrote: > Hi, > > OOPS! I missed that one and it was big. > > Changing now. > > Thanks. > Dave. > > > On 4/28/17, Noel Butler <noel.butler(a)ausics.net> wrote: >> ummmmmm >> >> It's usually a good idea to redact user and passwords for databases, >> even if only local socket ;) >> >> I suggest you change it ASAP. >> >> On 29/04/2017 10:53, David Mehler wrote: >> >>> Hello, >>> >>> Here is the requested file: >>> >>> driver = mysql >>> connect = host=/tmp/mysql.sock dbname=mail user=mail_admin >>> password=MainBoard55 >>> >>> # Last Login >>> map { >>> pattern = shared/last-login/$user >>> table = virtual_users >>> username_field = user >>> value_field = lastlogin >>> fields { >>> user = $user >>> } >>> } >>> >>> Thanks. >>> Dave. >>> >>> On 4/28/17, Aki Tuomi <aki.tuomi(a)dovecot.fi> wrote: >>> On April 29, 2017 at 12:29 AM David Mehler <dave.mehler(a)gmail.com> >>> wrote: >>> >>> Hello, >>> >>> Trying to implement lastlogin via mysql. I'm getting an unknown column >>> username which I don't get. Here's the log: >>> >>> Apr 28 17:18:15 ohio dovecot: imap-login: Login: >>> user=<user(a)example.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, >>> mpid=16257, secured, session=<KxiSnEBOwUx/AAAB> >>> >>> Apr 28 17:18:15 ohio dovecot: dict(17099): Error: sql dict: commit >>> failed: Unknown column 'username' in 'field list' >>> >>> Apr 28 17:18:15 ohio dovecot: imap(user(a)example.com): Error: >>> dict-client: server returned failure: 1493414295 (reply took 0.026 >>> secs) >>> >>> Apr 28 17:18:15 ohio dovecot: imap(user(a)example.com): Error: >>> last_login_dict: Failed to write value for user user(a)example.com >>> >>> You can configure all this in dovecot-dict-sql.conf, which you have not >>> provided. The actual column names are defined there. >>> >>> Aki >> >> -- >> Kind Regards, >> >> Noel Butler >> >> This Email, including any attachments, may contain legally privileged >> information, therefore remains confidential and subject to copyright >> protected under international law. You may not disseminate, discuss, or >> reveal, any part, to anyone, without the authors express written >> authority to do so. If you are not the intended recipient, please notify >> the sender then delete all copies of this message including attachments, >> immediately. Confidentiality, copyright, and legal privilege are not >> waived or lost by reason of the mistaken delivery of this message. Only >> PDF [1] and ODF [2] documents accepted, please do not send proprietary >> formatted documents >> >> >> >> Links: >> ------ >> [1] http://www.adobe.com/ >> [2] http://en.wikipedia.org/wiki/OpenDocument >

2 1

configuration sanity check
by David Mehler 29 Apr '17

29 Apr '17

Hello, Can I get a sanity check on this configuration? It's a database setup of Dovecot 2.2 with Postfix. I'm having issues and i'd like to know if there's anything glaringly wrong with my configuration? With the password hash situation, should I go with SHA512, SHA512-CRYPT or the SSHA512-CRYPT? Thanks. Dave. # 2.2.29.1 (e0b76e3): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.18 (29cc74d) # OS: FreeBSD 10.3-RELEASE-p18 amd64 auth_default_realm = example.com auth_mechanisms = plain login cram-md5 auth_realms = example.com example.net dict { acl = mysql:/usr/local/etc/dovecot/dovecot-share-folder.conf lastlogin = mysql:/usr/local/etc/dovecot/dovecot-last-login.conf sqlquota = mysql:/usr/local/etc/dovecot/dovecot-used-quota.conf } disable_plaintext_auth = yes first_valid_gid = 999 first_valid_uid = 999 hostname = mail.example.com imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags last_valid_gid = 999 last_valid_uid = 999 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = 127.0.0.1 xxx.xxx.xxx.xxx mail_fsync = never mail_gid = vmail mail_home = /home/vmail/%d/%n mail_location = maildir:~/mail/:LAYOUT=fs:INDEX=~/mail/ mail_plugins = acl mail_log notify quota quota_clone trash virtual welcome zlib mail_server_admin = mailto:postmaster@example.com mail_uid = vmail mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapflags notify imapsieve vnd.dovecot.imapsieve namespace { hidden = no list = yes location = maildir:/home/vmail/public:LAYOUT=fs:CONTROL=~/mail/public:INDEXPVT=~/mail/public:INDEX=~/mail/public mailbox TestFolder { auto = subscribe comment = Public Folder for message sharing } prefix = public/ separator = / subscriptions = yes type = public } namespace { list = yes location = maildir:~/mail/:INDEX=~/mail/shared/%%Ld/%%Ln prefix = shared/%%u/ separator = / subscriptions = yes type = shared } namespace { location = virtual:/usr/local/etc/dovecot/virtual mailbox All { auto = subscribe comment = All my messages special_use = \All } prefix = virtual/ separator = / } namespace inbox { inbox = yes location = mailbox Archive { auto = no special_use = \Archive } mailbox Archives { auto = subscribe special_use = \Archive } mailbox "Deleted Messages" { auto = no autoexpunge = 30 days special_use = \Trash } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = no autoexpunge = 30 days special_use = \Junk } mailbox "Junk E-mail" { auto = no autoexpunge = 30 days special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Items" { auto = no special_use = \Sent } mailbox "Sent Messages" { auto = no special_use = \Sent } mailbox Spam { auto = subscribe autoexpunge = 30 days special_use = \Junk } mailbox Trash { auto = subscribe autoexpunge = 30 days special_use = \Trash } prefix = separator = / type = private } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile:/usr/local/etc/dovecot/global-acls:cache_secs=300 acl_anyone = allow acl_shared_dict = file:/usr/local/etc/dovecot/shared-mailboxes imapsieve_mailbox1_before = file:/usr/local/lib/dovecot/sieve/report-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Spam imapsieve_mailbox2_before = file:/usr/local/lib/dovecot/sieve/report-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Spam imapsieve_mailbox2_name = * last_login_dict = proxy::lastlogin last_login_key = last-login/%u mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = count:User quota quota_clone_dict = proxy::sqlquota quota_exceeded_message = Storage quota for this account has been exceeded, please try again later. quota_grace = 10%% quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO quota_vsizes = true quota_warning = storage=100%% quota-exceeded 100 %u quota_warning2 = storage=95%% quota-warning 95 %u quota_warning3 = storage=90%% quota-warning 90 %u quota_warning4 = storage=85%% quota-warning 85 %u quota_warning5 = storage=75%% quota-warning 75 %u sieve = /home/vmail/%d/sieve/dovecot.sieve sieve_before = /home/vmail/sieve/dovecot.sieve sieve_default = /usr/local/etc/dovecot/sieve/dovecot.sieve sieve_dir = /usr/local/etc/dovecot/sieve sieve_extensions = +notify +imapflags sieve_global_dir = /home/vmail/sieve sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.execute sieve_max_redirects = 30 sieve_max_script_size = 1M sieve_pipe_bin_dir = /usr/local/lib/dovecot/sieve sieve_plugins = sieve_imapsieve sieve_extprograms sieve_user_log = /home/vmail/sieve/sieve_error.log trash = /usr/local/etc/dovecot/dovecot-trash.conf.ext welcome_script = welcome %u welcome_wait = yes } protocols = imap sieve sendmail_path = /usr/local/sbin/sendmail service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service dict { unix_listener dict { mode = 0660 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service managesieve-login { inet_listener sieve { address = 127.0.0.1 port = 4190 } } service quota-status { client_limit = 1 executable = quota-status -p postfix inet_listener { address = 127.0.0.1 port = 12345 } } service quota-warning { executable = script /usr/local/etc/dovecot/quota-warning.sh unix_listener quota-warning { group = vmail mode = 0660 user = vmail } user = vmail } service welcome { executable = script /usr/local/bin/welcome.sh unix_listener welcome { user = vmail } user = vmail } ssl_cert = </usr/local/etc/letsencrypt/live/mail.example.com/fullchain.pem ssl_cipher_list = ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256@STRENGTH ssl_dh_parameters_length = 2048 ssl_key = # hidden, use -P to show it ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 !TLSv1 !TLSv1.1 userdb { driver = prefetch } userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } userdb { args = uid=vmail gid=vmail home=/home/vmail/%d/%n driver = static } protocol lda { mail_fsync = optimized mail_plugins = acl mail_log notify quota quota_clone trash virtual welcome zlib sieve } protocol imap { mail_plugins = acl mail_log notify quota quota_clone trash virtual welcome zlib imap_acl imap_quota imap_sieve imap_zlib last_login } dovecot-shared-folder.conf: connect = host=/tmp/mysql.sock dbname=dbname user=username password=password # For shared mailboxes map { pattern = shared/shared-boxes/user/$to/$from table = user_shares value_field = dummy fields { from_user = $from to_user = $to } } # To share mailbox to anyone uncomment acl_anyone=allow in # 90-acl.conf map { pattern = shared/shared-boxes/anyone/$from table = anyone_shares value_field = dummy fields { from_user = $from } } dovecot-last-login.conf connect = host=/tmp/mysql.sock dbname=dbname user=user password=password # Last Login map { pattern = shared/last-login/$user table = virtual_users username_field = user value_field = lastlogin fields { username = $user } } global-acls #<identifier> <ACLs> [:<named ACLs>] # options: l lookup, r read, w write, s write-seen, # t write-deleted, i insert, p post, e expunge, # k create, x delete, a administration rights public/TestFolder user=username lrwstipekxa #owner lrwstipekxa # allow anyone to list and read a public mailbox public/* user=username lr # Prevent all users from deleting their Spam folder #INBOX.Spam owner lrwstipeka dovecot-trash.conf.ext # Spam mailbox is emptied before Trash 1 Spam # Trash mailbox is emptied before Sent 2 Trash # If both Sent and "Sent Messages" mailboxes exist, the next oldest message # to be deleted is looked up from both of the mailboxes. 3 Sent 3 Sent Messages # Junk mailbox is emptied 4 Junk dovecot-sql.conf.ext driver = mysql connect = host=/tmp/mysql.sock dbname=dbname user=user password=password default_pass_scheme = SHA512 password_query = SELECT user as user, password, \ CASE quota \ WHEN 0 \ THEN '*:bytes=256M:messages=0' \ ELSE \ CONCAT('*:bytes=', CAST(quota AS CHAR), 'M:messages=', CAST(quota_messages AS CHAR)) \ END AS `userdb_quota_rule` \ FROM virtual_users WHERE user='%u'; user_query = SELECT user as user, \ CASE quota \ WHEN 0 \ THEN '*:bytes=1024M:messages=0' \ ELSE \ CONCAT('*:bytes=', CAST(quota AS CHAR), 'M:messages=', CAST(quota_messages AS CHAR)) \ END AS `quota_rule` \ FROM virtual_users WHERE user='%u'; # For using doveadm -A: iterate_query = SELECT user AS user FROM virtual_users

1 0

Dovecot last_login plugin and Mysql
by David Mehler 29 Apr '17

29 Apr '17

Hello, Is anyone using the last_login plugin with a Mysql database? I'd like to track when users were last on the system. Thanks. Dave.

2 6

Re: dovecot mdbox never fix broken indexes
by CKoehl Listenaccount 28 Apr '17

28 Apr '17

Hey all, > Date: Tue, 31 Jan 2017 12:56:41 +0200 > From: Aki Tuomi <aki.tuomi(a)dovecot.fi> > To: dovecot(a)dovecot.org > Subject: Re: dovecot mdbox never fix broken indexes > Message-ID: <e6881175-8a48-ee24-6681-14427256d3a1(a)dovecot.fi> > Content-Type: text/plain; charset=utf-8 > > > > >> Also, if the file has indeed corrupted due to power loss, it's possible it's beyond repair, and you will have to delete the index file. This has the down side of losing flags, but it should repair this. > > Why dovecot not repair it by itself? > > > > It really should, as it's saying... Have to see why it's not successful > in this. > > Aki > is there anything new known about this? We are running dovecot 2.2.27 on solaris 10 and have several hundred accounts with this map inconsistency: Apr 27 12:51:06 <servername> dovecot: [ID 583609 local0.warning] lda(<userid>): Warning: mdbox /<storage-path>: Inconsistency in map index (10,29152 != 10,63560) The users of these accounts can't delete or move mails and often have trouble logging in or lags, because dovecot will try to fix the error and possibly disconnect them at any action. The warning does not occur on every action (imap/pop3 or lda). We did not have a hard reboot or any hardware trouble out of the ordinary (the machine is old and intermittently under higher load). After a variable length of time with these warnings the user accounts develop the following error: Apr 26 22:50:09 <servername> dovecot: [ID 583609 local0.error] imap(<userid>@): Error: Log synchronization error at seq=28,offset=117000 for /<storage-path>/dovecot.map.index: Extension record inc drops number below zero (uid=<uid>, diff=-1, orig=0) force-resync did not help at any stage of the problem and only got the index to continually count up. The only solution we found through which we could save the users flags is to copy the mdbox-files, delete the originals, and then re-import the copy into the user's account via doveadm import. Best regards, Catherina Koehl

1 0

Pigeonhole / Bug with "duplicate" ?
by Gilles Chauvin 28 Apr '17

28 Apr '17

Hello, Previously, while running Dovecot 2.2.27/Pigeonhole 0.4.16 the following code snippet was working as one would expect: if duplicate { addflag ["\\seen", "Duplicate"]; fileinto "Duplicate"; stop; } if address :contains "to" "user.email(a)example.com" { addflag "$label1"; } After upgrading to Dovecot 2.2.29.1/Pigeonhole 0.4.18 it's not working anymore. When an e-mail is sent to the user the "$label1" isn't applied at all to the message (in the case it's NOT a duplicate). Downgrading to Dovecot 2.2.29.1/Pigeonhole 0.4.17 exposes the same incorrect behaviour. Downgrading to Dovecot 2.2.29.1/Pigeonhole 0.4.16 is OK. When running pigeonhole 0.4.17 & 0.4.18, commenting the "if duplicate {}" block restores the expected behaviour. Looks like a bug that appeared in 0.4.17? Am I correct? Kind regards, Gilles.

2 4

[BUG] OpenSSL function has been deprecated
by Peter van der Does 26 Apr '17

26 Apr '17

In src/lib-ssl-iostream/iostream-openssl-params.c a call is made to DH_generate_parameters. This function has been deprecated since OpenSSL 0.9.8. With OpenSSL 1.1 compilation will throw an error. Not sure how to send patches, I don't even know if the patch I wrote actually works (I don't program in C, but gave it a shot anyway) but below is the patch. --- a/src/lib-ssl-iostream/iostream-openssl-params.c +++ b/src/lib-ssl-iostream/iostream-openssl-params.c @@ -13,13 +13,21 @@ generate_dh_parameters(int bitsize, buffer_t *output, const char **error_r) { DH *dh; unsigned char *p; - int len, len2; + int len, len2, success; +#if OPENSSL_VERSION_NUMBER >= 0x00908000L + success = DH_generate_parameters_ex(dh, bitsize, DH_GENERATOR, NULL); +#else dh = DH_generate_parameters(bitsize, DH_GENERATOR, NULL, NULL); if (dh == NULL) { + success = 0; + } +#endif + + if (success == 0) { *error_r = t_strdup_printf( - "DH_generate_parameters(bits=%d, gen=%d) failed: %s", - bitsize, DH_GENERATOR, openssl_iostream_error()); + "DH_generate_parameters(bits=%d, gen=%d) failed: %s", + bitsize, DH_GENERATOR, openssl_iostream_error()); return -1; } -- If anybody knows the instruction on how to send patches, please let me know and I follow those instructions. Regards, Peter van der Does

2 3

Problems with Dovecot to mysql socket with SELinux
by Robert Moskowitz 26 Apr '17

26 Apr '17

Anyone here running Dovecot connecting to mysql through the mysql.sock with SELinux enabled? I am getting access errors that go away when I put SELinux in permissive mode. I cannot find any direct help on this. Most howtos say to disable SELinux; they just don't want to bother, and in part I can see that. I have tried making a policy with allow2access and I get really bad SELinux errors with that. So I am looking to see if anyone else is running this combination? thanks

2 1

V1 Dovecot POP3 index migrate to V3
by Umut Arus 26 Apr '17

26 Apr '17

Hi, I've very old Dovecot version so I'm trying to migrate new disk and current version of dovecot. But POP3 accounts have "version 1" .INBOX/dovecot-uidlist files so clients download the messages again. How can achieve not to download to mailbox after copy to new disk? Is there any script or something to migrate index v1 to v3? thanks for your suggestions.

2 2

error ssl stacked error routines
by Poliman - Serwis 26 Apr '17

26 Apr '17

Hi I have configured one line in postfix main.cf (after configure each line I check /var/log/mail.err): smtpd_tls_dh1024_param_file = /etc/postfix/dh2048.pem After setup above line I have error in above log file (these 4 lines looped): Apr 25 14:08:09 serwer-1 dovecot: imap-login: Error: SSL: Stacked error: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol Apr 25 14:08:09 serwer-1 dovecot: imap-login: Error: SSL: Stacked error: error:1408A10B:SSL routines:ssl3_get_client_hello:wrong version number Apr 25 14:08:51 serwer-1 dovecot: imap-login: Error: SSL: Stacked error: error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac Apr 25 14:08:51 serwer-1 dovecot: imap-login: Error: SSL: Stacked error: error:1408A0C1:SSL routines:ssl3_get_client_hello:no shared cipher Apr 25 14:14:25 serwer-1 dovecot: pop3-login: Error: SSL: Stacked error: error:1408A0C1:SSL routines:ssl3_get_client_hello:no shared cipher Apr 25 14:10:51 serwer-1 dovecot: pop3-login: Error: SSL: Stacked error: error:14094085:SSL routines:ssl3_read_bytes:ccs received early Apr 25 14:09:16 serwer-1 dovecot: imap-login: Error: SSL: Stacked error: error:1408A0E3:SSL routines:ssl3_get_client_hello:parse tlsext And second thing: smtpd_sasl_security_options=noanonymous,noplaintext smtpd_sasl_tls_security_options=noanonymous,noplaintext These two lines in main.cf postfix file generate error no SASL authentication method. What should be configured in Dovecot to avoid both problems? -- *Pozdrawiam / Best Regards* *Piotr Bracha* *tel. 534 555 877* *serwis(a)poliman.pl <serwis(a)poliman.pl>*

1 0

Issue with POP3s TLS/SSL on port 995 on Outlook 2016
by Bhushan Bhosale 26 Apr '17

26 Apr '17

Dear Team, I'm facing issue with POP3s TLS/SSL on port 995 only for outlook2016. It's working fine with dovecot v2.2.28 on test environment. Is the dovecot v2.2.28 is stable released? I can upgrade the version from v2.1.17 to v2.2.28 on production if its stable version. Kindly confirm and provide the proper solution. Thanks and Regards, Bhushan Previous Mail:==========I have faced issue with email downloading in the email client by using pop3s SSL port 995 in dovecot v2.1.17 for outlook client 2016 on production environment. As per my troubleshooting on my test environment, I have upgraded dovecot version v2.2.28, and changed paramer "ssl_dh_parameters_length = 2048" and "verbose_ssl = yes", The issue seems to be resolved in dovecot v2.2.28. What can i do to resolve this issue in dovecot v2.1.17? Kindly help.

4 5

building Dovecot in Debian 9
by KT Walrus 26 Apr '17

26 Apr '17

I’m trying to build Dovecot 2.2.29.1 in a Docker container today and have the following error in ./configure: checking for shadow.h... yes checking for pam_start in -lpam... no checking for auth_userokay... no checking for mysql_config... mysql_config checking for mysql_init in -lmysqlclient... no configure: error: Can't build with MySQL support: libmysqlclient not found #> find / -name libmysqlclient\* /usr/share/doc/libmysqlclient20 /usr/share/lintian/overrides/libmysqlclient20 /usr/lib/x86_64-linux-gnu/libmysqlclient.so.20.3.5 /usr/lib/x86_64-linux-gnu/libmysqlclient.so.20 /var/lib/dpkg/info/libmysqlclient20:amd64.triggers /var/lib/dpkg/info/libmysqlclient20:amd64.shlibs /var/lib/dpkg/info/libmysqlclient20:amd64.list /var/lib/dpkg/info/libmysqlclient20:amd64.md5sums I have installed MySQL 5.7.18 Debian 9 packages (including the libmysqlclient-dev package) from the MySQL repo. I’m not an expert, but is there a bug in the "./configure --prefix=/usr --sysconfdir=/etc --with-mysql”? I’ve been building Dovecot with this Dockerfile using Ubuntu 16.04 for a while now without issue. Do I need some extra ./configure option to get it to find libmysqlclient.so.20? Kevin

2 7

Streaming out?
by Michael Segel 26 Apr '17

26 Apr '17

Hi, Has anyone tried to write out a mail stream to Kafka? Are there any good write ups on this feature? Can you split the mail so that you still write to a MailDir and also write to a stream? Thx -Mike

1 0

fts error recovery
by Daniel Miller 26 Apr '17

26 Apr '17

When a message is received, that is supposed to be added to the fts index, and an fts error occurs (like the Solr server is offline for some reason) - Dovecot logs that error and stores the message. Later, the fts system is available and new messages are added to the fts index without issue. Will the "missed" messages get added? Or would this require a manual re-indexing? -- Daniel

1 0

namespace alias issues?
by Kelsey Cummings 25 Apr '17

25 Apr '17

The Courier IMAP backwards compatibility section in the Namespaces wiki suggests that hidden aliased namespace can cause problems for some clients but doesn't quantify the extent or likelihood of running into these problems. Does anyone with real world experience with similar configurations have any feedback? -- kelsey.cummings(a)sonic.com sonic.net, inc. System Architect 2260 Apollo Way 707.522.1000 Santa Rosa, CA 95407

1 0

Host ... is being updated before previous update had finished
by Mark Moseley 24 Apr '17

24 Apr '17

We just had a bunch of backend boxes go down due to a DDoS in our director cluster. When the DDoS died down, our director ring was a mess. Each box had thousands (and hundreds per second, which is a bit much) of log lines like the following: Apr 03 19:59:29 director: Warning: director(10.1.20.10:9090/left): Host 10.1.17.15 is being updated before previous update had finished (up -> down) - setting to state=down vhosts=100 Apr 03 19:59:29 director: Warning: director(10.1.20.10:9090/left): Host 10.1.17.15 is being updated before previous update had finished (down -> up) - setting to state=up vhosts=100 Apr 03 19:59:29 director: Warning: director(10.1.20.10:9090/left): Host 10.1.17.15 is being updated before previous update had finished (up -> down) - setting to state=down vhosts=100 Apr 03 19:59:29 director: Warning: director(10.1.20.10:9090/left): Host 10.1.17.15 is being updated before previous update had finished (down -> up) - setting to state=up vhosts=100 Apr 03 19:59:29 director: Warning: director(10.1.20.10:9090/left): Host 10.1.17.15 is being updated before previous update had finished (up -> down) - setting to state=down vhosts=100 Apr 03 19:59:29 director: Warning: director(10.1.20.2:9090/right): Host 10.1.17.15 is being updated before previous update had finished (down -> up) - setting to state=up vhosts=100 Apr 03 19:59:29 director: Warning: director(10.1.20.2:9090/right): Host 10.1.17.15 is being updated before previous update had finished (up -> down) - setting to state=down vhosts=100 Apr 03 19:59:29 director: Warning: director(10.1.20.2:9090/right): Host 10.1.17.15 is being updated before previous update had finished (down -> up) - setting to state=up vhosts=100 Apr 03 19:59:29 director: Warning: director(10.1.20.2:9090/right): Host 10.1.17.15 is being updated before previous update had finished (up -> down) - setting to state=down vhosts=100 Apr 03 19:59:29 director: Warning: director(10.1.20.2:9090/right): Host 10.1.17.15 is being updated before previous update had finished (down -> up) - setting to state=up vhosts=100 This was on every director box and the status of all of the directors in 'doveadm director ring status' was 'handshaking'. Here's a sample packet between directors: 19:51:23.552280 IP 10.1.20.10.56670 > 10.1.20.1.9090: Flags [P.], seq 4147:5128, ack 0, win 0, options [nop,nop,TS val 1373505883 ecr 1721203906], length 981 Q. [f.|.HOST 10.1.20.10 9090 1006732 10.1.17.15 100 D1491260800 HOST 10.1.20.10 9090 1006733 10.1.17.15 100 U1491260800 HOST 10.1.20.10 9090 1006734 10.1.17.15 100 D1491260800 HOST 10.1.20.10 9090 1006735 10.1.17.15 100 U1491260800 HOST 10.1.20.10 9090 1006736 10.1.17.15 100 D1491260800 HOST 10.1.20.10 9090 1006737 10.1.17.15 100 U1491260800 HOST 10.1.20.10 9090 1006738 10.1.17.15 100 D1491260800 HOST 10.1.20.10 9090 1006739 10.1.17.15 100 U1491260800 HOST 10.1.20.10 9090 1006740 10.1.17.15 100 D1491260800 HOST 10.1.20.10 9090 1006741 10.1.17.15 100 U1491260800 HOST 10.1.20.10 9090 1006742 10.1.17.15 100 D1491260800 HOST 10.1.20.10 9090 1006743 10.1.17.15 100 U1491260800 HOST 10.1.20.10 9090 1006744 10.1.17.15 100 D1491260800 HOST 10.1.20.10 9090 1006745 10.1.17.15 100 U1491260800 HOST 10.1.20.10 9090 1006746 10.1.17.15 100 D1491260800 HOST 10.1.20.10 9090 1006747 10.1.17.15 100 U1491260800 SYNC 10.1.20.10 9090 1011840 7 1491263483 3377546382 I'm guessing that D1491260800 is the user hash (with D for down), and the U version is for 'up'. I'm happy to provide the full tcpdump (and/or doveconf -a), though the tcpdump is basically all identical the one I pasted (same hash, same host). This seems pretty fragile. There should be some sort of tie break for that, instead of bringing the entire cluster to its knees. Or just drop the backend host completely. Or something, anything besides hosing things pretty badly. This is 2.2.27, on both the directors and backend. If the answer is upgrade to 2.2.28, then I'll upgrade immediately. I see commit a9ade104616bbb81c34cc6f8bfde5dab0571afac mentions the same error but the commit predates 2.2.27 by a month and a half. In the meantime, is there any doveadm command I could've done to fix this? I tried removing the host (doveadm director remove 10.1.17.15) but that didn't do anything. I didn't think to try to flush the mapping for that user till just now. I suspect that with the ring unsync'd, flushing the user wouldn't have helped. The only remedy was to kill dovecot on every box in the director cluster and then (with dovecot down on *all* of them) start dovecot back up. Restarting each director's dovecot (with other directors' dovecots still running) did nothing. Only by brining the entire cluster down did dovecot stop furiously logging "Host ... is being updated before previous update had finished" on every director host. Any advice is most welcome.

2 3

System load spike on dovecot reload
by dave＠evilcigi.eu 24 Apr '17

24 Apr '17

Hi everyone, I'm running dovecot with quite a lot of users and lots of active imap connections (like 20'000). I'm using different user IDs for users, so I need to have imap {service_count=1} - i.e. I have a lots of imap processes running. Everything works fine, until I reload dovecot configuration. When that happen, every client is forced to relogin in the same time and that causes a huge system load spike (2-3000 5 min load). I was thinking that it would be great, if dovecot wouldn't kick all the users in the same time during reload, but somehow gradually, during specified interval. I'm aware of the shutdown_clients directive that could help, but I don't like it - I do want the clients get disconnected on dovecot shutdown and also I want them to relogin in reasonably short time after reload. Is something like that possible with dovecot or does it make sense to implement that in the future versions? Thank you. Dave.

5 4

Feature Request - Director Balance
by Webert de Souza Lima 24 Apr '17

24 Apr '17

Hi, often I run into the situation where a dovecot server goes down for maintenance, and all users get concentrated in the remaining dovecot server (considering I have 2 dovecot servers only). When that dovecot server comes back online, director server will send new users to it, but the dovecot server that was up all the time will still have tons of clients mapped to it. I suggest the director servers to always try to balance load between servers, in the way: - if a server has several more connections than other, mark it to re-balance - when a user connected to this loaded server disconnects, map it to another server (that is per definition not the same server) immediately. that way it would gracefully re-balance, not killing existing connections, just waiting for them to finish. Thank you for your time. Webert Lima MAV Tecnologia Belo Horizonte, Brasil.

2 2

Dovecot 2.3 ?
by Reuben Farrelly 24 Apr '17

24 Apr '17

Hi, Is anyone here running dovecot-2.3 from hg? I'm just interested in finding out how people are going with it, how stable is it and are there any interesting features that make it worth spending time looking at. I'm in a position where I can test with semi-live data (backed up and moderately important but not mission critical) but before I take the plunge I'd like to find out what the general consensus is. I see pretty much all bugfixes from 2.2 are going into 2.3 as well... Is there any timeframe on a beta release? Thanks, Reuben

3 4

Public Folder Problems
by Kevin 24 Apr '17

24 Apr '17

Hi, I've been trying to get a Public Folder namespace working, so far without any luck. I've tried in my home folder, outside my home folder, with and without acl. I can see the namespace (PUBLIC) in Roundcube, but that's as far as I get. I've put a .FirstFolder under the location, but it never appears. I've added dirs cur, new, and tmp but no difference. No hints from the maillog. Could some kind soul please put me out of my misery! # 2.2.28 (bed8434): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-642.15.1.el6.x86_64 x86_64 CentOS release 6.9 (Final) auth_cache_size = 8 k auth_mechanisms = plain login auth_username_chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!#$-=?^_{}~./@+%" dict { expire = sqlite:/usr/local/cpanel/etc/dovecot/dovecot-dict-expire.conf.ext } first_valid_uid = 201 lda_mailbox_autocreate = yes lmtp_save_to_detail_mailbox = yes mail_access_groups = dovecot mail_location = maildir:~/mail mail_plugins = quota quota_clone mail_prefetch_count = 20 mailbox_list_index = yes maildir_very_dirty_syncs = yes namespace inbox { inbox = yes location = mailbox Archives { auto = subscribe special_use = \Archive } mailbox "Deleted Messages" { auto = no special_use = \Trash } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { auto = no special_use = \Sent } mailbox Spam { auto = create special_use = \Junk } mailbox Trash { auto = no special_use = \Trash } mailbox not-Spam { auto = create } prefix = INBOX. separator = . type = private } namespace one { list = yes location = maildir:/var/spool/pubmail prefix = PUBLIC. separator = . type = public } passdb { args = /usr/local/cpanel/bin/dovecot-wrap driver = checkpassword } plugin { acl = vfile expire = Trash expire2 = Deleted Messages expire3 = INBOX.Deleted Messages expire4 = INBOX.Trash expire_cache = yes expire_dict = proxy::expire quota_exceeded_message = Mailbox is full / Blocks limit exceeded / Inode limit exceeded zlib_save = gz } protocols = lmtp imap service auth { unix_listener auth-client { mode = 0666 } } service config { vsz_limit = 2 G } service dict { unix_listener dict { group = dovecot mode = 0660 } } service imap-login { client_limit = 500 inet_listener imap { address = *,:: } inet_listener imaps { address = *,:: } process_limit = 50 process_min_avail = 2 service_count = 0 vsz_limit = 128 M } service imap { process_limit = 512 vsz_limit = 512 M } service lmtp { client_limit = 1 process_limit = 500 unix_listener lmtp { group = mail mode = 0660 user = mailnull } vsz_limit = 512 M } service managesieve-login { client_limit = 500 process_limit = 50 process_min_avail = 2 service_count = 0 vsz_limit = 128 M } service managesieve { process_limit = 512 vsz_limit = 512 M } service pop3-login { client_limit = 500 inet_listener pop3 { address = *,:: } inet_listener pop3s { address = *,:: } process_limit = 50 process_min_avail = 2 service_count = 0 vsz_limit = 128 M } service pop3 { process_limit = 512 vsz_limit = 512 M } service quota-status { executable = quota-status -p postfix unix_listener quota-status { mode = 0666 } } ssl_cert = </etc/dovecot/ssl/dovecot.crt ssl_cipher_list = ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv2 !SSLv3 userdb { driver = prefetch } userdb { args = /usr/local/cpanel/etc/dovecot/cpauthd-dict.conf driver = dict } userdb { args = /usr/local/cpanel/bin/dovecot-wrap driver = checkpassword } protocol imap { imap_capability = +NAMESPACE imap_idle_notify_interval = 24 mins imap_logout_format = in=%i, out=%o, bytes=%i/%o mail_max_userip_connections = 20 mail_plugins = acl quota imap_quota expire imap_zlib quota_clone virtual namespace sent { hidden = yes list = no location = virtual:/usr/local/cpanel/etc/dovecot/virtual/sent:INDEX=~/mail/virtual/%u prefix = sent separator = . } namespace spam { hidden = yes list = no location = virtual:/usr/local/cpanel/etc/dovecot/virtual/spam:INDEX=~/mail/virtual/%u prefix = spam separator = . } } protocol pop3 { mail_max_userip_connections = 3 mail_plugins = quota expire quota quota_clone virtual namespace sent { hidden = yes list = no location = virtual:/usr/local/cpanel/etc/dovecot/virtual/sent:INDEX=~/mail/virtual/%u prefix = sent separator = . } namespace spam { hidden = yes list = no location = virtual:/usr/local/cpanel/etc/dovecot/virtual/spam:INDEX=~/mail/virtual/%u prefix = spam separator = . } pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s, bytes=%i/%o pop3_uidl_format = UID%u-%v } protocol lmtp { mail_plugins = quota quota_clone postmaster_address = root quota_full_tempfail = no } protocol lda { mail_plugins = quota quota_clone postmaster_address = root quota_full_tempfail = no }

1 1

[BUG] client state / Message count mismatch with imap-hibernate and mixed POP3/IMAP access
by Christian Balzer 24 Apr '17

24 Apr '17

Hello, this is on Debian Jessie box, dovecot 2.2.27 from backports, imap-hibernate obviously enabled. I've been seeing a few of these since starting this cluster (see previous mail), they all follow the same pattern, a user who accesses their mailbox with both POP3 and IMAP deletes mails with POP3 and the IMAP (imap-hibernate really) is getting confused and upset about this: --- Apr 6 09:55:49 mbx11 dovecot: imap-login: Login: user=<redacted(a)gol.com>, method=PLAIN, rip=xxx.xxx.x.46, lip=xxx.xxx.x.113, mpid=951561, secured, session=<2jBV+HRM1Pbc9w8u> Apr 6 10:01:06 mbx11 dovecot: pop3-login: Login: user=<redacted(a)gol.com>, method=PLAIN, rip=xxx.xxx.x.46, lip=xxx.xxx.x.41, mpid=35447, secured, session=<uZw7C3VM9vfc9w8u> Apr 6 10:01:07 mbx11 dovecot: pop3(redacted(a)gol.com): Disconnected: Logged out top=0/0, retr=0/0, del=1/1, size=20674 session=<uZw7C3VM9vfc9w8u> Apr 6 10:01:07 mbx11 dovecot: imap(redacted(a)gol.com): Error: imap-master: Failed to import client state: Message count mismatch after handling expunges (0 != 1) Apr 6 10:01:07 mbx11 dovecot: imap(redacted(a)gol.com): Client state initialization failed in=0 out=0 head=<0> del=<0> exp=<0> trash=<0> session=<2jBV+HRM1Pbc9w8u> Apr 6 10:01:15 mbx11 dovecot: imap-login: Login: user=<redacted(a)gol.com>, method=PLAIN, rip=xxx.xxx.x.46, lip=xxx.xxx.x.113, mpid=993303, secured, session=<6QC6C3VMF/jc9w8u> Apr 6 10:07:42 mbx11 dovecot: imap-hibernate(redacted(a)gol.com): Connection closed in=85 out=1066 head=<0> del=<0> exp=<0> trash=<0> session=<6QC6C3VMF/jc9w8u> --- Didn't see these errors before introducing imap-hibernate, but then again this _could_ be something introduced between 2.2.13 (previous generation of servers) and .27, but I highly doubt it. My reading of the log is that the original IMAP session (<2jBV+HRM1Pbc9w8u>) fell over and terminated, resulting in the client to start up a new session. If so and with no false data/state transmitted to the client it would be not ideal, but not a critical problem either. Would be delighted if Aki or Timo could comment on this. If you need any further data, let me know. Christian -- Christian Balzer Network/Systems Engineer chibi(a)gol.com Global OnLine Japan/Rakuten Communications http://www.gol.com/

2 5

How to query for headers by regexp?
by Ralf Hildebrandt 23 Apr '17

23 Apr '17

I need to find all mails with a certain numerical range in my quarantine: X-Spam-Status: No, score=4.5 tagged_above=2 required=4.6 ... Assume I'd be looking for 4.5-6.0; so I tried searching for doveadm import -u restore mdbox:/home/quarantine/mdbox "" \ mailbox INBOX header X-Spam-Status "No, score=4.5" doveadm import -u restore mdbox:/home/quarantine/mdbox "" \ mailbox INBOX header X-Spam-Status "No, score=4.6" etc. Which would only return 2 Mails, with score score=4.5 What am I doing wrong here? Can I search using regular expressions? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | https://www.charite.de

2 1

Is there a tool similar to pflogsumm for Dovecot?
by Paolo 22 Apr '17

22 Apr '17

I tried to find a similar tool for Dovecot, but couldn't. Is there such a thing? Also tried to hack a little the logwatch plugin, but I am not a per programmer ... Thanks, P.

1 0

imap service count>1 (was System load spike ...)
by Joseph Tam 22 Apr '17

22 Apr '17

> I'm running dovecot with quite a lot of users and lots of active imap > connections (like 20'000). I'm using different user IDs for users, so I > need to have imap {service_count=1} - i.e. I have a lots of imap > processes running. I had a misconception this service's service_count was non-adjustable. (https://wiki.dovecot.org/Services on imap service) service_count can be changed from 1 if only a single UID is used for mail users. This is improves performance, but it's less secure, because bugs in code may leak email data from another user's earlier connection. How easy would it be to implement a hybrid solution that maps all imap service for a unique UID to a single worker process. It would result in modest performance gain for busy servers, and data leakage security would be minimal. Joseph Tam <jtam.home(a)gmail.com>

1 0

Pipe to PHP script using Sieve Extprograms
by Thomas 21 Apr '17

21 Apr '17

Hello, I seem to be having some issues trying to setup a pipe to PHP scripts using Sieve Extprograms. I am trying to allow each individual mailbox to setup its own PHP pipe rules (in other words, each user should be able to pipe incoming emails to a user defined PHP script). I have the following lines in my main Sieve configuration file (/etc/dovecot/conf.d/90-sieve.conf): sieve_extensions = +vnd.dovecot.pipe sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.execute sieve_plugins = sieve_extprograms I have configured a Sieve service that looks like this (/etc/dovecot/conf.d/90-sieve-extprograms.conf): service php { # Define the executed script as parameter to the sieve service executable = /var/run/dovecot/sieve-pipe/php.sh # Use some unprivileged user for executing the program user = dovenull # The unix socket located in the sieve_pipe_socket_dir (as defined in the # plugin {} section above) unix_listener sieve-pipe/php { # LDA/LMTP must have access user = vmail mode = 0600 } } Contents of /var/run/dovecot/sieve-pipe/php.sh: #!/usr/bin/php Sieve script for one of my mailboxes: require ["fileinto", "regex", "date", "relational", "vacation"]; require ["mailbox", "imap4flags", "vnd.dovecot.pipe"]; # Move spam to spam folder if header :contains "X-Spam-Flag" "YES" { fileinto "Junk"; # Stop here so that we do not reply on spams stop; } pipe :try "php /var/www/web2/piping.php support(a)example.com" keep; This results however in the following error in my log file: main script: line 5: error: require command: unknown Sieve capability `vnd.dovecot.pipe'. main script: line 14: error: unknown command 'pipe' (only reported once at first occurence). main script: error: validation failed. I am also not quite confident I have set this up correctly. Am I heading in the right direction for what I am trying to achieve? Dovecot version: 2.2.10 dovecot -n: # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-514.16.1.el7.x86_64 x86_64 CentOS Linux release 7.3.1611 (Core) auth_mechanisms = plain login disable_plaintext_auth = no listen = *,[::] log_timestamp = "%Y-%m-%d %H:%M:%S " mail_plugins = " quota" mail_privileged_group = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot-sql.conf driver = sql } plugin { quota = dict:user::file:/var/vmail/%d/%n/.quotausage sieve = /var/vmail/%d/%n/.sieve } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } user = root } service imap-login { client_limit = 1000 process_limit = 500 } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } ssl_cert = </etc/postfix/smtpd.cert ssl_key = </etc/postfix/smtpd.key ssl_protocols = !SSLv2 !SSLv3 userdb { driver = prefetch } userdb { args = /etc/dovecot-sql.conf driver = sql } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } protocol lda { mail_plugins = sieve quota postmaster_address = root@localhost } protocol lmtp { mail_plugins = quota sieve postmaster_address = webmaster@localhost }

2 2

namespace assertion failed
by Elisamuel Resto 21 Apr '17

21 Apr '17

Hello, I'm trying to figure out if this is a configuration issue or an actual bug. Dovecot does start, but if anybody tries to log in or if you run sievec you get an assertion fail and a coredump. --- sievec(root): Panic: file mail-namespace.c: line 709 (mail_namespace_find): assertion failed: (ns != NULL) sievec(root): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x9c3a2) [0x7ff70e2133a2] -> /usr/lib/dovecot/libdovecot.so.0(+0x9c429) [0x7ff70e213429] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7ff70e1a5e41] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_namespace_find+0xc8) [0x7ff70e4e03a8] -> /usr/lib/dovecot/modules/lib11_trash_plugin.so(+0x1e56) [0x7ff70d5ace56] -> /usr/lib/dovecot/libdovecot-storage.so.0(hook_mail_user_created+0x1eb) [0x7ff70e4ecfeb] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_user_init+0x206) [0x7ff70e4f1fb6] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_storage_service_next+0x438) [0x7ff70e4f00c8] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_storage_service_lookup_next+0x4c) [0x7ff70e4f068c] -> sievec(sieve_tool_init_finish+0xc1) [0x403371] -> sievec(main+0xd2) [0x402cb2] -> /usr/lib/libc.so.6(__libc_start_main+0xf1) [0x7ff70ddf3511] -> sievec(_start+0x2a) [0x402f3a] Aborted (core dumped) --- Coredump as follows: --- #0 0x00007ff70de06a10 in raise () from /usr/lib/libc.so.6 #1 0x00007ff70de0813a in abort () from /usr/lib/libc.so.6 #2 0x00007ff70e21339a in ?? () from /usr/lib/dovecot/libdovecot.so.0 #3 0x00007ff70e213429 in default_fatal_handler () from /usr/lib/dovecot/libdovecot.so.0 #4 0x00007ff70e1a5e41 in i_panic () from /usr/lib/dovecot/libdovecot.so.0 #5 0x00007ff70e4e03a8 in mail_namespace_find () from /usr/lib/dovecot/libdovecot-storage.so.0 #6 0x00007ff70d5ace56 in ?? () from /usr/lib/dovecot/modules/lib11_trash_plugin.so #7 0x00007ff70e4ecfeb in hook_mail_user_created () from /usr/lib/dovecot/libdovecot-storage.so.0 #8 0x00007ff70e4f1fb6 in mail_user_init () from /usr/lib/dovecot/libdovecot-storage.so.0 #9 0x00007ff70e4f00c8 in mail_storage_service_next () from /usr/lib/dovecot/libdovecot-storage.so.0 #10 0x00007ff70e4f068c in mail_storage_service_lookup_next () from /usr/lib/dovecot/libdovecot-storage.so.0 #11 0x0000000000403371 in sieve_tool_init_finish () #12 0x0000000000402cb2 in main () --- Any help appreciated! -Sam

3 3

[BUG] config-parser.c: line 89 - crash on comma in namespace mailbox
by Alek 21 Apr '17

21 Apr '17

Hi! On the latest versions (2.2.28, 2.2.29.x) we get crash on dovecot config parse. Error in config parser when checking namespace mailbox name. Reason: comma in mailbox name. Worked well in versions < 2.2.22. Do not know if it was working on 2.2.23-2.2.27, skipped this versions. Example: namespace inbox { mailbox "&BB4EQgQ,BEAEMAQyBDsENQQ9BD0ESwQ1-" { special_use = \Sent } } Error: # dovecot -n # 2.2.29.1 (e0b76e3): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.18 (29cc74d) doveconf: Panic: file config-parser.c: line 89 (config_add_type): assertion failed: (ret > 0) doveconf: Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x9b89a) [0x7fa1f8cc789a] -> /usr/lib64/dovecot/libdovecot.so.0(default_fatal_handler+0x32) [0x7fa1f8cc81d2] -> /usr/lib64/dovecot/libdovecot.so.0(+0x2f81a) [0x7fa1f8c5b81a] -> /usr/bin/doveconf() [0x40b213] -> /usr/bin/doveconf(config_parser_apply_line+0x763) [0x40b983] -> /usr/bin/doveconf(config_parse_file+0x821) [0x40c351] -> /usr/bin/doveconf(main+0x255) [0x406845] -> /lib64/libc.so.6(__libc_start_main+0xfd) [0x7fa1f88b6d1d] -> /usr/bin/doveconf() [0x4051f9] doveconf: Error: managesieve-login: dump-capability process killed with signal 6 doveconf: Panic: file config-parser.c: line 89 (config_add_type): assertion failed: (ret > 0) doveconf: Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x9b89a) [0x7f6dfa20489a] -> /usr/lib64/dovecot/libdovecot.so.0(default_fatal_handler+0x32) [0x7f6dfa2051d2] -> /usr/lib64/dovecot/libdovecot.so.0(+0x2f81a) [0x7f6dfa19881a] -> /usr/bin/doveconf() [0x40b213] -> /usr/bin/doveconf(config_parser_apply_line+0x763) [0x40b983] -> /usr/bin/doveconf(config_parse_file+0x821) [0x40c351] -> /usr/bin/doveconf(main+0x255) [0x406845] -> /lib64/libc.so.6(__libc_start_main+0xfd) [0x7f6df9df3d1d] -> /usr/bin/doveconf() [0x4051f9] Info: &BB4EQgQ,BEAEMAQyBDsENQQ9BD0ESwQ1- - is a valid mailbox name for russian Outlook folder "Отправленные".

2 1

LDAP schema ?
by Dave Dodd 21 Apr '17

21 Apr '17

Hi, I am trying to determine the correct LDAP schema I need to use to have either mailLocation or mailboxPath available ? Should I be just adding this to one of my own custom objectClasses ? -- Dave

4 5

javamail imap listing
by Matthew Broadhead 20 Apr '17

20 Apr '17

Hi, i am using dovecot-2.2.10-7.el7.x86_64 on centos-release-7-3.1611.el7.centos.x86_64. if i follow this tutorial https://delog.wordpress.com/2011/05/10/access-imap-server-from-the-command-… i can login to my server and successfully list the folders using tag LIST "" "*" * LIST (\HasNoChildren) "." INBOX tag OK List completed. no folders are listed using tag LIST / "*" tag OK List completed. when i request a folder listing using JavaMail it similarly sends the following command and no folders are listed a97 LIST / "*" a97 OK List completed. if i follow the tutorial again and use my gmail account instead of my dovecot installation i can successfully list folders using both methods tag LIST / "*" * LIST (\HasNoChildren) "/" "youtube" tag OK List completed. is there some way to make dovecot list folders when it receives the command LIST / "*" i note that in the listings my dovecot installation has "." in the middle and gmail has a "/"

3 5

JavaMail setFlags on readonly folder
by Gabriele Bulfon 20 Apr '17

20 Apr '17

Hi, I'm facing a strange issue using JavaMail, where Dovecot let me open "READ_WRITE" a folder with readonly ACLs (same happens on other imap servers), but then doesn't issue any error when if try to setFlags(...) on that folder. The result is that the code thinks the folder marked the messages (deleted, flagged, etc), while it actually did not. Just refreshing the folder from the java client, you get back your original messages as they were before the operation. Is there any known issue about this? Gabriele ---------------------------------------------------------------------------------------- Sonicle S.r.l. : http://www.sonicle.com Music: http://www.gabrielebulfon.com Quantum Mechanics : http://www.cdbaby.com/cd/gabrielebulfon

2 1

Dovecot not listening when testing connection
by Alvaro Lacerda 20 Apr '17

20 Apr '17

Hi, This is my environment: SMTP: Exim 4.89 with Mailscanner 5.0.3 IMAP: Dovecot 2.2.10 At the moment I'm just trying to test out my Dovecot to check if it's listening on port 993. *netstat -tuln:* Shows that my machine is listening on ports 143 and 993. *telnet localhost 993: *This is my issue, I get the following message: # telnet localhost 993 Trying ::1... Connected to localhost. Escape character is '^]'. Connection closed by foreign host. According to the wiki.dovecot test installation page I should be getting this instead: https://wiki.dovecot.org/TestInstallation Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS AUTH=PLAIN] Dovecot ready. When I run doveconf this is what I get: # doveconf protocols listen protocols = imap pop3 lmtp listen = *, :: Does anyone have an idea of what I'm missing here? Thanks. -- The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If you receive this in error, please contact the sender and delete this material from any computer. Cantella does not permit execution of trades requested by email. Please call to ensure prompt execution of orders, as we are not responsible for orders transmitted through email. Investing involves risk and you may incur a profit or a loss. Please carefully consider investment objectives, risks, charges, and expenses before investing. Cantella & Co., Inc. does not provide legal or tax advice. For legal or tax advice, please seek the services of a qualified professional. The performance data featured represents past performance, which is no guarantee of future results. Mutual funds and UITs are sold by prospectus only. Please carefully consider the fund's investment objective, risks, charges and expenses applicable to a continued investment in the fund before investing. For this and other information, call or write for a free prospectus, or view one online. Read it carefully before you invest or send money. Fixed income is subject to availability and change in price. Bonds are subject to market and interest rate risk if sold prior to maturity. Interest rate increases can cause the price of a debt security to decrease. Interest income may be subject to federal, state, local, and/or alternative minimum tax. In accordance with industry regulations, all messages are retained and are subject to monitoring. This message has been scanned for viruses and dangerous content and is believed to be clean. Securities offered through Cantella & Co., Inc., Member FINRA/SIPC. Home Office: 28 State St 40th Floor, Boston, MA 02109 Telephone: (800)652-8358

3 8

Using filter in an imapsieve script?
by Tobi 20 Apr '17

20 Apr '17

Hello list I currently have an issue with an imapsieve script on my dovecot server CentOS Linux release 7.3.1611 (Core) Dovecot 2.2.26.0 (23d1de6) Pigeonhole 2.2.26.0 The goal is to "fire" an imapsieve script upon mailclient saves message to sent folder I setup the following in 90-plugin.conf: plugin { sieve_plugins = sieve_imapsieve sieve_extprograms sieve_extensions = +vnd.dovecot.filter +vnd.dovecot.pipe +vnd.dovecot.execute sieve_filter_bin_dir = /etc/dovecot/sieve-filters sieve_pipe_bin_dir = /etc/dovecot/sieve-filters sieve_execute_bin_dir = /etc/dovecot/sieve-filters sieve_filter_exec_timeout = 10000 sieve_pipe_exec_timeout = 10000 sieve_execute_exec_timeout = 10000 imapsieve_mailbox1_name = Sent imapsieve_mailbox1_causes = COPY APPEND imapsieve_mailbox1_before = file:/home/vmail/domain/user/dovecot-crypt-sent.sieve } and the content of the sieve script is: require ["environment", "vnd.dovecot.filter", "variables", "imapsieve", "vnd.dovecot.pipe", "vnd.dovecot.execute"]; if anyof (environment :is "imap.cause" "APPEND", environment :is "imap.cause" "COPY") { filter "gpgit" "myuser(a)mydomain.tld"; } gpgit is a perl script that encrypts a given message using the users pub key and returns back the encrypted message As a sieve script for lmtp/lda it works fine and encrypted messages show up in the mailbox. But it does not work if it is used as imap sieve script There is nothing in the logs that indicates a problem with the imap sieve script. Is it possible that 'filter' is not supported for imapsieve as it changes the content of a message? Thanks for any hint tobi

2 6

RSA key not found
by Michael Segel 20 Apr '17

20 Apr '17

I’ve got a couple of issues with a new mail server set up… I’m getting the following error: warning: cannot get RSA certificate from file /etc/pki/dovecot/certs/<mycert>.pem: disabling TLS support The problem is that <mycert>.pem isn’t an RSA ticket, but a X509 certificate. The RSA ticket is in /etc/pki/dovecot/private directory. I checked both files and they are good certificates. I’m using webmin to manage my server. In webmin, the TLS certificate file is the X509 and the private key is the RSA file. So why does Postfix check the certificate link for the RSA file and not the X509? Thx -Mike

2 1

Adding secure POP3?
by ＠lbutlr 20 Apr '17

20 Apr '17

I have a working server that only allows connections over secure IMAP (port 993) and secured submission (587). However, I have one account that has been forwarding mail to gmail for many years and that is getting to be more and more of a problem as more large sites enforce DMARC. So, the only way that gmail will pull mail is via pop3, so I need to add pop3 access. 1) How do I add a secure (TLS) POP3 service to dovecot 2) can I restrict access to that to specific users? Domains? OT, but someone probably knows, is secured POP3 going to work with gmail? ===BEGIN passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service imap-login { inet_listener imaps { port = 993 ssl = yes } } ===END I did read <https://wiki.dovecot.org/SSL/DovecotConfiguration> but it’s about adding ssl to an existing setup. -- Apple broke AppleScripting signatures in Mail.app, so no random signatures.

3 5

help
by Bhushan Bhosale 20 Apr '17

20 Apr '17

Dear Team I have faced issue with email downloading in the email client by using pop3 SSL port 995 in dovecot v2.1.17 for outlook client 2016 on production environment. As per my troubleshooting on my test environment, I have upgraded dovecot version v2.2.28, and changed paramer "ssl_dh_parameters_length = 2048" and "verbose_ssl = yes", The issue seems to be resolved in dovecot v2.2.28. What can i do to resolve this issue in dovecot v2.1.17 in Production environment? Kindly help. Thanks a lot in advance. Regards, Bhushan Bhosale

4 3

my domain in both my destination and virtual_mailbox_domains?
by Michael Segel 20 Apr '17

20 Apr '17

I’m doing a new dovecot mail server for my domain. Here’s yet another thing I mucked up. I wanted to set up virtual mailboxes. One reason was that I wanted to set up virtual users for the domain so I don’t need to create user accounts just mail accounts. I followed one of the many examples / tutorials out there and I end up with the following warning message. postfix/trivial-rewrite[8818]: warning: do not list domain <machine>.<domain>.com in BOTH mydestination and virtual_mailbox_domains I checked my configuration, I don’t see where I’ve set up anything for mydestination in postfix. I’m trying to work thru the log file issues that I can find… this is just one more. To add to the confusion, I’m using webmin as my server admin UI to make life easier… yet it seems to much things up a bit Any suggestions? Thx -Mike

4 3

[Configuration question] Shared Folders: sql dict - missing information
by dovecot＠avv.solutions 19 Apr '17

19 Apr '17

Hello Community, I have implemented shared folders/acl using the 'file' driver sucessfully. Now, I want to move the shared folders information to my sql DB where I have moved all user/nets/quota information. I have read carefully the documentation (https://wiki.dovecot.org/SharedMailboxes/Shared) but, as far as I can see, only the $to and $from (+ dummy) are handled in the DB? I was expecting the same granularity (per folder + explicit rights) than found using the actual solution. Did I miss something? Or how should I implement this? (Running version 2.2.13) Than you already for your help and feedback. Cheers, A

2 1

Extension record update for invalid uid=
by Luca Bertoncello 18 Apr '17

18 Apr '17

Hi list yesterday I got many of these errors: Error: Log synchronization error at seq=832,offset=2348 for indexes/.INBOX/dovecot.index: Extension record update for invalid uid=29175 But just for __ONE__ user. I couldn't find any misconfiguration for this user, it's just all other... Can someone say what it happens and how can I fix it? Thanks Luca Bertoncello (lucabert(a)lucabert.de)

1 0

v2.2.29.1 released
by Timo Sirainen 17 Apr '17

17 Apr '17

https://dovecot.org/releases/2.2/dovecot-2.2.29.1.tar.gz https://dovecot.org/releases/2.2/dovecot-2.2.29.1.tar.gz.sig Mainly because I had missed one cherry-pick from the release, which caused unit tests to also fail. And I didn't notice that, because make distcheck had been broken for some years now when it ran clang static analyzer, although I had assumed it would have run make check already before it failed.. On a related note, we're looking for a test engineer :) http://avoimettyopaikat.monster.fi/v2/job/View?JobID=182881783 - imapc reconnection fix was forgotten from 2.2.29 release, which also made "make check" fail in a unit test - dict-sql: Merging multiple UPDATEs to a single statement wasn't actually working. - Fixed building with vpopmail

5 5

Re: several misc questions, public folders and sharing, quota, ssl
by Aki Tuomi 16 Apr '17

16 Apr '17

Please keep responses on the list. Thank you. =) Without ACL plugin there is no way to restrict access, it's free for all. my site is a very tiny few user site, but ... auth_mechanisms = login plain mail_attribute_dict = file:%h/Mail/dovecot-attributes mail_location = sdbox:~/Mail mail_plugins = stats quota fts fts_lucene namespace inbox { inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { special_use = \Trash } prefix = separator = . subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { fts = lucene fts_lucene = whitespace_chars=@. imapsieve_mailbox1_before = file:/usr/lib/dovecot/sieve/report-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Spam imapsieve_mailbox2_before = file:/usr/lib/dovecot/sieve/report-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Spam imapsieve_mailbox2_name = * quota = count:User quota quota_vsizes = yes recipient_delimiter = + sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.execute sieve_pipe_bin_dir = /usr/lib/dovecot/sieve sieve_plugins = sieve_imapsieve sieve_extprograms stats_refresh = 30 } protocols = imap lmtp service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } user = $default_internal_user } service doveadm { inet_listener http { address = 127.0.0.1 port = 38080 } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 8025 } } service stats { fifo_listener stats-mail { mode = 0666 } } ssl = required ssl_cert = # ssl_cipher_list = ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:AES128-SHA ssl_dh_parameters_length = 4096 ssl_key = # ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 submission_host = 127.0.0.1:25 userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol imap { mail_plugins = stats quota fts fts_lucene imap_stats imap_sieve } protocol lmtp { mail_plugins = stats quota fts fts_lucene sieve } protocol lda { mail_plugins = stats quota fts fts_lucene sieve } Aki > On April 14, 2017 at 7:21 PM David Mehler <dave.mehler(a)gmail.com> wrote: > > > Hello Aki, > > Thank you for your reply. > > I've implemented your changes and thanks for the @STRENGTH reminder, I > had forgotten about that one. > > I'll check out the acl plugin. Is it required when sharing a public > folder or are public folders usable by all? I know it is for shared > folders. > > The TestFolder1 is still not showing up in public not sure why > everything looks good. > > My configuration was migrated from 2.0 to 2.1 then 2.2, various ports > along the way. > > I was wondering if I could take a look at your dovecot configuration > files and a doveconf -n output? > > Thanks. > Dave. > > > On 4/14/17, Aki Tuomi <aki.tuomi(a)dovecot.fi> wrote: > > > >> On April 14, 2017 at 3:04 AM David Mehler <dave.mehler(a)gmail.com> wrote: > >> > >> > >> Hello, > >> > >> I'm running dovecot 2.29 on a freebsd 10.3 system. I'm wanting to > >> optimize how the system is running and have a few misc questions. > >> > >> First ssl, is my cipher list good? I'm trying for pfs and wanting to > >> ensure these cipherlist is appropriate: > >> > >> ssl_cipher_list = EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH > >> > > > > I would add @STRENGTH to the end, so it'll get sorted by strengthness. > > > >> Next, a new feature that I'm trying for is virtual folders that store > >> All messages. My understanding of this is that it stores a version of > >> every received message in one place? I've got the virtual plugin > >> loaded and have: > >> > >> mailbox virtual/All { > >> comment = All my messages > >> special_use = \All > >> } > >> > >> I've got a directory /home/vmail/example.com/username/virtual under > >> which is an ALL folder both directories are accessible to the vmail > >> user, yet there's no contents in this folder and it's showing up > >> nowhere. > >> > > > > Configuring virtual all folder: > > > > namespace { > > prefix = virtual > > location = virtual:/etc/dovecot/virtual:INDEX=%h/virtual > > comment = All my messages > > special_use = \All > > mailbox All { > > auto = subscribe > > } > > } > > > > ==== /etc/dovecot/virtual/All/dovecot-virtual ==== > > * > > all > > ==== EOF === > > > >> Next, quota warnings, are not being sent at all. I set up a testuser > >> with a quota of 2 mb, then sent a message to that user getting the box > >> to 95% full, and no message. Took the user overquota with the next > >> message, still nothing, and a third message did trigger my custom > >> quota exceeded message and the message was bounced. > >> > > > > I would recommend you using > > > > mail_plugins = $mail_plugins quota quota_clone > > > > plugin { > > quota = count:User quota > > quota_clone_dict = proxy::sqlquota > > quota_vsizes = true > > } > > > > Also, > > > > "Note that the warning is ONLY executed at the exact time when the limit is > > being crossed, so when you're testing it you have to do it by crossing the > > limit by saving a new mail. If something else besides Dovecot updates quota > > so that the limit is crossed, the warning is never executed." > > > >> I'm wanting to implement public folders. My mailboxes are all > >> virtual, and they are stored under /home/vmail/example.com/username > >> and /home/vmail/example.org/username in the maildir format. I've got > >> one user uid and gid of 999 name of vmail who owns all the mailboxes. > >> I've separated out public folders storing them under > >> /home/vmail/public. I've created one mailbox called TestFolder and > >> new, cur, and tmp directories under it. This is what it looks like: > > > > <snip /> > > > >> The public/TestFolder is showing up fine and I can switch to it. The > >> public/TestFolder1 is not showing up at all so I'm not seeing it and > >> can't switch to it. Any ideas? > >> > > > > Not sure why it's not showing up, *but*, you could add :INDEXPVT=%h/public > > to the folder, to keep per-user indexes separate. > > > >> My second question involves public folders and domain sharing. Are > >> public folders accessible to all users and all domains? I've got two > >> domains example.com and example.org i'd like to create a folder that > >> some users in example.com can share with some users in example.org, > >> not necessarily all users in those domains should be able to see the > >> folders. > >> > > > > Dovecot does not, as per such, care about your domains. It cares about user > > names. If you want to do this kind of thing, please consult ACL plugin. > > https://wiki2.dovecot.org/ACL > > > >> Ideas welcome. > >> > >> Thanks. > >> Dave. > >> > > > > Some other comments, if you are using SSL, you can drop cram-md5 as auth > > mech, it's not storage-safe. > > > > you should use mail_location = maildir:~/maildir:LAYOUT=fs > > > > to avoid your other things in user's home being interprepted as mail > > directories. > > > > why are you setting these? > > maildir_broken_filename_sizes = yes > > maildir_empty_new = yes > > maildir_very_dirty_syncs = yes > > > > and in general I see lots of overconfiguring, dovecot defaults are usually > > right, and setting various things just for the fun of it, can cause > > problems. > > > > Aki > >

3 3

several misc questions, public folders and sharing, quota, ssl
by David Mehler 15 Apr '17

15 Apr '17

Hello, I'm running dovecot 2.29 on a freebsd 10.3 system. I'm wanting to optimize how the system is running and have a few misc questions. First ssl, is my cipher list good? I'm trying for pfs and wanting to ensure these cipherlist is appropriate: ssl_cipher_list = EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH Next, a new feature that I'm trying for is virtual folders that store All messages. My understanding of this is that it stores a version of every received message in one place? I've got the virtual plugin loaded and have: mailbox virtual/All { comment = All my messages special_use = \All } I've got a directory /home/vmail/example.com/username/virtual under which is an ALL folder both directories are accessible to the vmail user, yet there's no contents in this folder and it's showing up nowhere. Next, quota warnings, are not being sent at all. I set up a testuser with a quota of 2 mb, then sent a message to that user getting the box to 95% full, and no message. Took the user overquota with the next message, still nothing, and a third message did trigger my custom quota exceeded message and the message was bounced. I'm wanting to implement public folders. My mailboxes are all virtual, and they are stored under /home/vmail/example.com/username and /home/vmail/example.org/username in the maildir format. I've got one user uid and gid of 999 name of vmail who owns all the mailboxes. I've separated out public folders storing them under /home/vmail/public. I've created one mailbox called TestFolder and new, cur, and tmp directories under it. This is what it looks like: ls -la /home/vmail/public total 24 drwx------ 4 vmail vmail 512 Apr 13 18:23 ./ drwx------ 8 vmail vmail 512 Mar 15 10:34 ../ drwxr-xr-x 5 vmail vmail 512 Apr 13 18:16 TestFolder/ drwxr-xr-x 5 vmail vmail 512 Apr 13 18:25 TestFolder1/ -rw------- 1 vmail vmail 8 Apr 13 18:15 dovecot-uidvalidity -r--r--r-- 1 vmail vmail 0 Apr 13 18:15 dovecot-uidvalidity.58eff89a -rw------- 1 vmail vmail 688 Apr 13 18:24 dovecot.list.index.log ls -la /home/vmail/public/TestFolder total 28 drwxr-xr-x 5 vmail vmail 512 Apr 13 18:16 ./ drwx------ 4 vmail vmail 512 Apr 13 18:23 ../ drwxr-xr-x 2 vmail vmail 512 Apr 13 18:13 cur/ -rw-r--r-- 1 vmail vmail 51 Apr 13 18:16 dovecot-uidlist -rw-r--r-- 1 vmail vmail 304 Apr 13 18:16 dovecot.index.log drwxr-xr-x 2 vmail vmail 512 Apr 13 18:13 new/ drwxr-xr-x 2 vmail vmail 512 Apr 13 18:13 tmp/ ls -la /home/vmail/public/TestFolder1 total 20 drwxr-xr-x 5 vmail vmail 512 Apr 13 18:25 ./ drwx------ 4 vmail vmail 512 Apr 13 18:23 ../ drwxr-xr-x 2 vmail vmail 512 Apr 13 18:25 cur/ drwxr-xr-x 2 vmail vmail 512 Apr 13 18:25 new/ drwxr-xr-x 2 vmail vmail 512 Apr 13 18:25 tmp/ The public/TestFolder is showing up fine and I can switch to it. The public/TestFolder1 is not showing up at all so I'm not seeing it and can't switch to it. Any ideas? My second question involves public folders and domain sharing. Are public folders accessible to all users and all domains? I've got two domains example.com and example.org i'd like to create a folder that some users in example.com can share with some users in example.org, not necessarily all users in those domains should be able to see the folders. Ideas welcome. Thanks. Dave. doveconf -n # 2.2.29 (13ebc01): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.18 (29cc74d) # OS: FreeBSD 10.3-RELEASE-p11 amd64 ufs auth_cache_size = 8 k auth_default_realm = example.com auth_mechanisms = plain login cram-md5 auth_realms = example.com example.org auth_socket_path = /var/run/dovecot/auth-userdb dict { sqlquota = mysql:/usr/local/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no first_valid_gid = 999 first_valid_uid = 999 hostname = mail.example.com imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags last_valid_gid = 999 last_valid_uid = 999 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = 127.0.0.1 xxx.xxx.xxx.xxx mail_fsync = never mail_gid = vmail mail_home = /home/vmail/%d/%n/home mail_location = maildir:/home/vmail/%d/%n:LAYOUT=fs mail_plugins = acl mail_log notify quota trash virtual welcome zlib mail_server_admin = mailto:postmaster@example.com mail_uid = vmail mailbox_list_index = yes maildir_broken_filename_sizes = yes maildir_empty_new = yes maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapflags notify imapsieve vnd.dovecot.imapsieve namespace { hidden = no list = yes location = maildir:/home/vmail/public/:LAYOUT=fs:CONTROL=/home/vmail/public/:INDEX=/home/vmail/public/ prefix = public/ separator = / subscriptions = yes type = public } namespace inbox { hidden = no inbox = yes list = yes location = mailbox "Deleted Messages" { auto = no autoexpunge = 30 days special_use = \Trash } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe autoexpunge = 30 days special_use = \Junk } mailbox "Junk E-mail" { auto = no autoexpunge = 30 days special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Items" { auto = no special_use = \Sent } mailbox "Sent Messages" { auto = no special_use = \Sent } mailbox Spam { auto = no autoexpunge = 30 days special_use = \Junk } mailbox Trash { auto = subscribe autoexpunge = 30 days special_use = \Trash } mailbox virtual/All { comment = All my messages special_use = \All } prefix = separator = / subscriptions = yes type = private } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { imapsieve_mailbox1_before = file:/usr/local/lib/dovecot/sieve/report-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Spam imapsieve_mailbox2_before = file:/usr/local/lib/dovecot/sieve/report-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Spam imapsieve_mailbox2_name = * last_login_dict = redis:host=127.0.0.1:port=6379 last_login_key = last-login/%u mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = dict:User quota::proxy::sqlquota quota2 = maildir:Shared quota:ns=public/ quota_exceeded_message = Storage quota for this account has been exceeded, please try again later. quota_grace = 10%% quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO quota_warning = storage=100%% quota-warning 100 %u quota_warning2 = storage=95%% quota-warning 95 %u quota_warning3 = storage=90%% quota-warning 90 %u quota_warning4 = storage=85%% quota-warning 85 %u quota_warning5 = storage=75%% quota-warning 75 %u sieve = /home/vmail/%d/%n/sieve/scripts;active=/home/vmail/%d/%n/sieve/.dovecot.sieve sieve_before = /usr/local/etc/dovecot/sieve/dovecot.sieve sieve_default = /usr/local/etc/dovecot/sieve/dovecot.sieve sieve_dir = /usr/local/etc/dovecot/sieve sieve_extensions = +notify +imapflags sieve_global_dir = /usr/local/etc/dovecot/sieve/ sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.execute sieve_max_redirects = 30 sieve_max_script_size = 1M sieve_pipe_bin_dir = /usr/local/lib/dovecot/sieve sieve_plugins = sieve_imapsieve sieve_extprograms sieve_user_log = /home/vmail/%d/%n/sieve/sieve_error.log trash = /usr/local/etc/dovecot/dovecot-trash.conf.ext welcome_script = welcome %u welcome_wait = yes } postmaster_address = postmaster(a)example.com protocols = imap sieve sendmail_path = /usr/local/sbin/sendmail service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } service dict { unix_listener dict { group = vmail mode = 0660 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } service_count = 1 } service imap { client_limit = 1 } service lmtp { unix_listener dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service managesieve-login { inet_listener sieve { address = 127.0.0.1 port = 4190 } process_min_avail = 0 service_count = 1 vsz_limit = 64 M } service quota-status { client_limit = 1 executable = quota-status -p postfix inet_listener { address = 127.0.0.1 port = 12345 } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { group = vmail mode = 0666 user = vmail } user = vmail } service welcome { executable = script /usr/local/bin/welcome.sh unix_listener welcome { user = vmail } user = vmail } ssl_cert = </usr/local/etc/letsencrypt/live/mail.example.com/fullchain.pem ssl_cipher_list = EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH ssl_dh_parameters_length = 2048 ssl_key = # hidden, use -P to show it ssl_options = no_compression ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 userdb { driver = prefetch } userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } userdb { args = uid=vmail gid=vmail home=/home/vmail/%d/%n driver = static } protocol lmtp { mail_plugins = acl mail_log notify quota trash virtual welcome zlib sieve } protocol lda { mail_fsync = optimized mail_plugins = acl mail_log notify quota trash virtual welcome zlib quota sieve } protocol imap { mail_max_userip_connections = 30 mail_plugins = acl mail_log notify quota trash virtual welcome zlib imap_acl imap_quota imap_sieve imap_zlib last_login } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 } /usr/local/etc/dovecot/dovecot-dict-sql.conf.ext connect = host=/tmp/mysql.sock dbname=dbname user=user password=password # CREATE TABLE quota ( # username varchar(100) not null, # bytes bigint not null default 0, # messages integer not null default 0, # primary key (username) # ); map { pattern = priv/quota/storage table = quota username_field = username value_field = bytes } map { pattern = priv/quota/messages table = quota username_field = username value_field = messages } # CREATE TABLE expires ( # username varchar(100) not null, # mailbox varchar(255) not null, # expire_stamp integer not null, # primary key (username, mailbox) # ); #map { #pattern = shared/expire/$user/$mailbox #table = expires #value_field = expire_stamp #fields { #username = $user #mailbox = $mailbox #} #}

3 2

Accessing Shared Mailbox, FQDN not appended to user
by Ed Nitido 15 Apr '17

15 Apr '17

Hey all long time, I recently upgraded Dovecot from 2.1.15 to 2.2.29.1 on my Debian Wheezy box and thought I'd tackle shared mailboxes. I can grant fine, using SETACL in telnet . SETACL mine vsun(a)test.domain.com lr . OK Setacl complete (0.596 + 0.000 + 0.595 secs). . GETACL mine * ACL mine vsun(a)test.domain.com lr edward(a)test.domain.com lrwstipekxacd However, logging in as vsun(a)test.domain.com, the logs shows the MASTER IN user doesn't get FQDN. Instead of edward(a)test.domain.com it just shows edward@test How come it only show's a partial domain? Thanks! Here's my config: # 2.2.29.1 (e0b76e3): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.18 (29cc74d) # OS: Linux 2.6.32-5-openvz-amd64 i686 Debian 7.11 auth_debug = yes auth_master_user_separator = * auth_mechanisms = plain login auth_socket_path = /usr/local/var/run/dovecot/auth-userdb debug_log_path = /var/log/dovecot-debug.log disable_plaintext_auth = no info_log_path = /var/log/dovecot-debug.log listen = * log_path = /var/log/dovecot-debug.log mail_debug = yes mail_gid = vmail mail_location = maildir:%h/Maildir mail_plugins = " quota" mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace { list = children location = maildir:%%h/Maildir:INDEX=%h/Maildir/shared/%%u prefix = shared.%%u. separator = . subscriptions = no type = shared } namespace inbox { hidden = no inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = . subscriptions = yes type = private } passdb { args = /usr/local/etc/dovecot/master-users driver = passwd-file master = yes pass = yes } passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = file:/home/%d/shared-mailboxes quota = maildir:User quota quota_rule = *:storage=1G quota_warning = storage=95%% quota-warning 95 %u %d quota_warning2 = storage=80%% quota-warning 80 %u %d sieve = file:~/sieve;active=~/.dovecot.sieve sieve_after = /usr/local/etc/dovecot/sieve.d/after/ sieve_max_actions = 32 sieve_max_redirects = 4 sieve_max_script_size = 1M sieve_quota_max_scripts = 0 sieve_quota_max_storage = 0 } postmaster_address = postmaster(a)test.domain.com protocols = imap pop3 lmtp sieve quota_full_tempfail = yes service auth { inet_listener { port = 12345 } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service imap-login { inet_listener imap { port = 143 } } service imap-postlogin { executable = script-login /usr/local/bin/postlogin.sh } service imap { executable = imap imap-postlogin } service lmtp { inet_listener lmtp { port = 24 } unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 0 service_count = 1 vsz_limit = 64 M } service pop3-login { inet_listener pop3 { port = 110 } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } ssl = no userdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes protocol lmtp { mail_plugins = " quota quota sieve" } protocol lda { mail_plugins = " quota sieve" } protocol imap { mail_max_userip_connections = 20 mail_plugins = " quota imap_quota imap_acl acl" } protocol sieve { mail_debug = yes mail_max_userip_connections = 10 mail_plugins = managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 managesieve_notify_capability = managesieve_sieve_capability = } protocol pop3 { mail_max_userip_connections = 20 mail_plugins = " quota quota" } Here's my log: Apr 15 07:17:44 auth: Debug: client in: AUTH 1 PLAIN service=imap session=7Fq7Wi9N84DAqAzk lip=192.168.12.229 rip=192.168.12.228 lport=143 rport=33011 Apr 15 07:17:44 auth: Debug: client passdb out: CONT 1 Apr 15 07:17:44 auth: Debug: client in: CONT<hidden> Apr 15 07:17:44 auth: Debug: ldap(vsun(a)test.domain.com,192.168.12.228,<7Fq7Wi9N84DAqAzk>): pass search: base=dc=nitido,dc=com scope=subtree filter=(&(|(uid= vsun@test.domain.com)(mailAlternateAddress=vsun@test.domain.com))(nimPimUserStatus=active)) fields=uid,userPassword Apr 15 07:17:44 auth: Debug: ldap(vsun(a)test.domain.com,192.168.12.228,<7Fq7Wi9N84DAqAzk>): result: userPassword=<hidden> uid=vsun(a)test.domain.com; uid,userPassword unused Apr 15 07:17:44 auth: Debug: ldap(vsun(a)test.domain.com,192.168.12.228,<7Fq7Wi9N84DAqAzk>): result: userPassword=<hidden> uid=vsun(a)test.domain.com Apr 15 07:17:44 auth: Debug: client passdb out: OK 1 user= vsun(a)test.domain.com Apr 15 07:17:44 auth: Debug: master in: REQUEST 2978611201 18284 1 c7599d3e61eb73c5f88a0faa9c510d86 session_pid=18285 request_auth_token Apr 15 07:17:44 auth: Debug: ldap(vsun(a)test.domain.com,192.168.12.228,<7Fq7Wi9N84DAqAzk>): user search: base=dc=nitido,dc=com scope=subtree filter=(&(|(uid= vsun@test.domain.com)(mailAlternateAddress=vsun@test.domain.com))(nimPimUserStatus=active)) fields=homeDirectory,quotaMailSoft Apr 15 07:17:44 auth: Debug: ldap(vsun(a)test.domain.com,192.168.12.228,<7Fq7Wi9N84DAqAzk>): result: quotaMailSoft=2048 homeDirectory=/home/ test.domain.com/vsun@test.domain.com; homeDirectory,quotaMailSoft unused Apr 15 07:17:44 auth: Debug: ldap(vsun(a)test.domain.com,192.168.12.228,<7Fq7Wi9N84DAqAzk>): result: quotaMailSoft=2048 homeDirectory=/home/ test.domain.com/vsun@test.domain.com Apr 15 07:17:44 auth: Debug: master userdb out: USER 2978611201 vsun(a)test.domain.com home=/home/test.domain.com/vsun@test.domain.com quota_rule=*:storage=2048M auth_token=f594cf479e39a82a1175d26368186c2e8c938630 Apr 15 07:17:44 imap-login: Info: Login: user=<vsun(a)test.domain.com>, method=PLAIN, rip=192.168.12.228, lip=192.168.12.229, mpid=18285, session=<7Fq7Wi9N84DAqAzk> Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: Loading modules from directory: /usr/local/lib/dovecot Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: Module loaded: /usr/local/lib/dovecot/lib01_acl_plugin.so Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: Module loaded: /usr/local/lib/dovecot/lib02_imap_acl_plugin.so Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: Module loaded: /usr/local/lib/dovecot/lib10_quota_plugin.so Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: Module loaded: /usr/local/lib/dovecot/lib11_imap_quota_plugin.so Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: Added userdb setting: plugin/master_user=vsun(a)test.domain.com Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: Added userdb setting: plugin/quota_rule=*:storage=2048M Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: Effective uid=1021, gid=1021, home=/home/test.domain.com/vsun@test.domain.com Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: Quota root: name=User quota backend=maildir args= Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: Quota rule: root=User quota mailbox=* bytes=2147483648 messages=0 Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: Quota warning: bytes=2040109465 (95%) messages=0 reverse=no command=quota-warning 95 vsun(a)test.domain.com test.domain.com Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: Quota warning: bytes=1717986918 (80%) messages=0 reverse=no command=quota-warning 80 vsun(a)test.domain.com test.domain.com Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: Quota grace: root=User quota bytes=214748364 (10%) Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: Namespace inbox: type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/ test.domain.com/vsun@test.domain.com/Maildir Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: maildir++: root=/home/ test.domain.com/vsun@test.domain.com/Maildir, index=, indexpvt=, control=, inbox=/home/test.domain.com/vsun@test.domain.com/Maildir, alt= Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: acl: initializing backend with data: vfile Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: acl: acl username = vsun(a)test.domain.com Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: acl: owner = 1 Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: acl vfile: Global ACLs disabled Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: Namespace : type=shared, prefix=shared.%u., sep=., inbox=no, hidden=no, list=children, subscriptions=no location=maildir:%h/Maildir:INDEX=/home/ test.domain.com/vsun@test.domain.com/Maildir/shared/%u Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: shared: root=/usr/local/var/run/dovecot, index=, indexpvt=, control=, inbox=, alt= Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: acl: initializing backend with data: vfile Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: acl: acl username = vsun(a)test.domain.com Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: acl: owner = 0 Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: acl vfile: Global ACLs disabled Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: quota: quota_over_flag check: quota_over_script unset - skipping Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: acl vfile: file /home/ test.domain.com/vsun@test.domain.com/Maildir/dovecot-acl not found Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: acl vfile: file /home/ test.domain.com/vsun@test.domain.com/Maildir/.Sent/dovecot-acl not found Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: acl vfile: file /home/ test.domain.com/vsun@test.domain.com/Maildir/.Sent Messages/dovecot-acl not found Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: acl vfile: file /home/ test.domain.com/vsun@test.domain.com/Maildir/.Trash/dovecot-acl not found Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: acl vfile: file /home/ test.domain.com/vsun@test.domain.com/Maildir/.Drafts/dovecot-acl not found Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: acl vfile: file /home/ test.domain.com/vsun@test.domain.com/Maildir/.Deleted Messages/dovecot-acl not found Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: acl vfile: file /home/ test.domain.com/vsun@test.domain.com/Maildir/.Spam/dovecot-acl not found Apr 15 07:17:44 auth: Debug: master in: USER 1 edward@test service=imap Apr 15 07:17:44 auth: Debug: ldap(edward@test): user search: base=dc=nitido,dc=com scope=subtree filter=(&(|(uid=edward@test )(mailAlternateAddress=edward@test))(nimPimUserStatus=active)) fields=homeDirectory,quotaMailSoft Apr 15 07:17:44 auth: Debug: ldap(edward@test): no fields returned by the server Apr 15 07:17:44 auth: Info: ldap(edward@test): unknown user Apr 15 07:17:44 auth: Debug: userdb out: NOTFOUND 1 Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: auth USER input: Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: Quota root: name=User quota backend=maildir args= Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: Quota rule: root=User quota mailbox=* bytes=2147483648 messages=0 Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: Quota warning: bytes=2040109465 (95%) messages=0 reverse=no command=quota-warning 95 edward@test test Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: Quota warning: bytes=1717986918 (80%) messages=0 reverse=no command=quota-warning 80 edward@test test Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: Quota grace: root=User quota bytes=214748364 (10%) Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: shared: Tried to access mails of nonexistent user edward@test Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: maildir++: root=/usr/local/var/run/dovecot/user-not-found/edward@test, index=, indexpvt=, control=, inbox=/usr/local/var/run/dovecot/user-not-found/edward@test, alt= Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: Namespace : /usr/local/var/run/dovecot/user-not-found/edward@test doesn't exist yet, using default permissions Apr 15 07:17:44 imap(vsun(a)test.domain.com): Debug: Namespace : Using permissions from /usr/local/var/run/dovecot/user-not-found/edward@test: mode=0700 gid=default

1 0

Test error: net_connect_ip(127.0.0.1:0) failed: Can't assign requested address
by Ruga 14 Apr '17

14 Apr '17

macOS 10.12.4 clang 4.0.0 (official, non apple version) libressl 2.5.3 ... 0 / 11 tests failed /Applications/Xcode.app/Contents/Developer/usr/bin/make check-am make[3]: Nothing to be done for `check-am'. Making check in lib-imap-client for bin in test-imapc-client; do \ if ! ./$bin; then exit 1; fi; \ done Error: net_connect_ip(127.0.0.1:0) failed: Can't assign requested address Warning: imapc(127.0.0.1:0): No more IP address(es) to try - reconnecting (delay 10 ms) Error: net_connect_ip(127.0.0.1:0) failed: Can't assign requested address Error: imapc(127.0.0.1:0): No more IP address(es) to try - disconnecting test: random seed #1 was 1492961683 imapc connect failed ................................................. : FAILED Warning: imapc(127.0.0.1:65275): connect(127.0.0.1, 65275) timed out after 0 seconds - reconnecting (delay 0 ms) Error: imapc(127.0.0.1:65275): connect(127.0.0.1, 65275) timed out after 0 seconds - disconnecting imapc banner hangs ................................................... : ok Warning: imapc(127.0.0.1:55425): Authentication timed out after 0 seconds - reconnecting (delay 0 ms) Error: imapc(127.0.0.1:55425): Authentication failed: Disconnected from server imapc login hangs .................................................... : ok imapc reconnect ...................................................... : ok imapc reconnect resend commands ...................................... : ok imapc reconnect resend commands failed ............................... : ok imapc reconnect mailbox .............................................. : ok 1 / 7 tests failed make[2]: *** [check-test] Error 1 make[1]: *** [check-recursive] Error 1 make: *** [check-recursive] Error 1 >cd /opt/src/dovecot-2.2.29.1/src/lib-imap-client >./test-imapc-client test: random seed #1 was 1492323309 Error: net_connect_ip(127.0.0.1:0) failed: Can't assign requested address Warning: imapc(127.0.0.1:0): No more IP address(es) to try - reconnecting (delay 10 ms) Error: net_connect_ip(127.0.0.1:0) failed: Can't assign requested address Error: imapc(127.0.0.1:0): No more IP address(es) to try - disconnecting imapc connect failed ................................................. : FAILED Warning: imapc(127.0.0.1:50987): connect(127.0.0.1, 50987) timed out after 0 seconds - reconnecting (delay 0 ms) Error: imapc(127.0.0.1:50987): connect(127.0.0.1, 50987) timed out after 0 seconds - disconnecting imapc banner hangs ................................................... : ok Warning: imapc(127.0.0.1:62023): Authentication timed out after 0 seconds - reconnecting (delay 0 ms) Error: imapc(127.0.0.1:62023): Authentication failed: Disconnected from server imapc login hangs .................................................... : ok imapc reconnect ...................................................... : ok imapc reconnect resend commands ...................................... : ok imapc reconnect resend commands failed ............................... : ok imapc reconnect mailbox .............................................. : ok 1 / 7 tests failed >search -cv net_connect . ./imapc-connection.c:1715: fd = net_connect_ip(ip, conn->client->set.port, NULL); ./imapc-connection.c:1722: i_error("net_connect_ip(%s:%u) failed: %m", >search -cv 127.0.0.1 . ./test-imapc-client.c:43: .host = "127.0.0.1", ... static struct imapc_client_settings test_imapc_default_settings = { .host = "127.0.0.1", .username = "testuser", .password = "testpass", .dns_client_socket_path = "", .temp_path_prefix = ".test-tmp/", .rawlog_dir = "", .connect_timeout_msecs = 500, .connect_retry_count = 3, .connect_retry_interval_msecs = 10, .max_idle_time = 10000, }; The client fails if the server is not listening... Is the test server listening? static int test_open_server_fd(in_port_t *bind_port) { int fd = net_listen(&bind_ip, bind_port, 128); if (debug) i_debug("server listening on %u", *bind_port); if (fd == -1) { i_fatal("listen(%s:%u) failed: %m", net_ip2addr(&bind_ip), *bind_port); } fd_set_nonblock(fd, FALSE); return fd; } Forcing debug... >grep 'static bool debug =' test-imapc-client.c static bool debug = TRUE; >make clean >make >./test-imapc-client test: random seed #1 was 1492955953 Error: net_connect_ip(127.0.0.1:0) failed: Can't assign requested address Warning: imapc(127.0.0.1:0): No more IP address(es) to try - reconnecting (delay 10 ms) Error: net_connect_ip(127.0.0.1:0) failed: Can't assign requested address Error: imapc(127.0.0.1:0): No more IP address(es) to try - disconnecting imapc connect failed ................................................. : FAILED Warning: imapc(127.0.0.1:57648): connect(127.0.0.1, 57648) timed out after 0 seconds - reconnecting (delay 0 ms) Error: imapc(127.0.0.1:57648): connect(127.0.0.1, 57648) timed out after 0 seconds - disconnecting imapc banner hangs ................................................... : ok Warning: imapc(127.0.0.1:61221): Authentication timed out after 0 seconds - reconnecting (delay 0 ms) Error: imapc(127.0.0.1:61221): Authentication failed: Disconnected from server imapc client disconnected unexpectedly: EOF imapc login hangs .................................................... : ok imapc reconnect ...................................................... : ok imapc reconnect resend commands ...................................... : ok imapc reconnect resend commands failed ............................... : ok imapc reconnect mailbox .............................................. : ok 1 / 7 tests failed Nope, test server is not running.

1 0

Cutting down on sql connections
by David Mehler 14 Apr '17

14 Apr '17

Hello, I'm running dovecot 2.29 on a freebsd 10.3 system. I'm trying to cut down queries to my database and tried to do a userdb static and prefetch. I modified the password query to pull in userdb_quota and got an error that that was not valid. Is this behavior normal? Apr 13 17:22:15 hostname dovecot: master: Dovecot v2.2.29 (13ebc01) starting up for imap, sieve Apr 13 17:22:24 hostname dovecot: imap-login: Login: user=<username(a)example.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=66452, secured, session=<TYjM6xJNnqp/AAAB> Apr 13 17:22:24 hostname dovecot: imap(username(a)example.com): Logged out in=102 out=3020 Apr 13 17:22:24 hostname dovecot: imap-login: Login: user=<username(a)example.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=68924, secured, session=<4xDQ6xJNht1/AAAB> Apr 13 17:22:24 hostname dovecot: imap(username Thanks. Dave.

2 1

Cutting down on sql connections
by David Mehler 14 Apr '17

14 Apr '17

Hello, I'm running dovecot 2.29 on a freebsd 10.3 system. I'm trying to cut down queries to my database and tried to do a userdb static and prefetch. I modified the password query to pull in userdb_quota and got an error that that was not valid. Is this behavior normal? Apr 13 17:22:15 hostname dovecot: master: Dovecot v2.2.29 (13ebc01) starting up for imap, sieve Apr 13 17:22:24 hostname dovecot: imap-login: Login: user=<username(a)example.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=66452, secured, session=<TYjM6xJNnqp/AAAB> Apr 13 17:22:24 hostname dovecot: imap(username(a)example.com): Logged out in=102 out=3020 Apr 13 17:22:24 hostname dovecot: imap-login: Login: user=<username(a)example.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=68924, secured, session=<4xDQ6xJNht1/AAAB> Apr 13 17:22:24 hostname dovecot: imap(username Thanks. Dave.

1 0

Trouble setting up dovecot/postfix/mysql with virtual mailboxes..
by Michael Segel 14 Apr '17

14 Apr '17

Hi, I’m building a new linux box to replace my current DNS/Mail server for my SOHO. I was going to set up postfix/dovecot/mysql so I can support virtual users. I also use Webmin to make admin easier. I ran in to a couple of snags. When I first got it set up, mail went to the virtmail user and I could use my Mac mail client to read the mail. Everything was working when testing it. I was working on my TLS certificates and I broke something. I don’t know what I did, but now it’s going to the local mailbox instead. (MailDir folder) Since most of my time is doing other things, I am hoping someone could point me in the right direction. Thx

2 3

Trouble compiling 2.2.29.1
by Marc Perkel 13 Apr '17

13 Apr '17

Not sure what I'm doing wrong but I run this: ./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var --enable-maintainer-mode --with-mysql and it forks thousands of copies of config.guess and will eventually lock up the computer. What am I doing wrong?

1 0

Can sieve feed mails to a pipe like procmail can?
by Peter Kielbasiewicz 13 Apr '17

13 Apr '17

Currently I use procmail to filter mails according to specific tokens and trigger certain actions. For that I feed mails which match certain criteria to a pipe which then post processes the mail right when it arrives. >From what I found I could use a workaround with sieve by storing mails somewhere and then work on those at certain intervals. But this is an awkward solution which causes delays and extra work for locking and post processing. I read that sieve be the more modern system but without the post-processing feature it is no replacement for procmail to me. Peter

2 1

dovecot & iOS
by Dirk Laurenz 12 Apr '17

12 Apr '17

Hello List, i have a working dovecot imap service running with multiple clients running fine, even iOS. What's anying is, that only on iOS ( ) i see a huge bunch of .CONTROL directories - marked grey. It seems to be a copy of the existing folder structure. I don't see this on thunderbird, outlook or even roundcube. Is there any chance to configure dovecot to hide those folders to iOS? Here's some extended Information.... Attached: Screenshot from iOS, where you can see, what i mean dovecot Version: 2.1.7 root@mail01:~# dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 4.9.14+ armv6l Debian 7.11 lda_mailbox_autocreate = yes listen = * mail_location = maildir:~/Maildir:INBOX=~/Maildir/Inbox:LAYOUT=fs:CONTROL=~/Maildir/.CONTROL:INDEX=~/Maildir/.INDEX namespace { inbox = yes location = mailbox { special_use = \Drafts name = Drafts } mailbox { special_use = \Junk name = Junk } mailbox { special_use = \Sent name = Sent } mailbox { special_use = \Sent name = Sent Messages } mailbox { special_use = \Trash name = Trash } prefix = name = inbox } passdb { driver = pam } plugin { antispam_debug_target = syslog antispam_signature = X-DSPAM-Signature antispam_spam = SPAM antispam_verbose_debug = 1 } postmaster_address = postmaster@domain protocols = " imap" service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap { name = imap-login } service login/imap { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } ssl_cert = </etc/dovecot/fullchain.pem ssl_key = </etc/dovecot/private/privkey.pem userdb { driver = passwd } protocol lmtp { service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap { name = imap-login } service login/imap { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } } protocol lda { info_log_path = /var/log/dovecot-lda.log log_path = /var/log/dovecot-lda.log service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap { name = imap-login } service login/imap { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } } protocol imap { mail_plugins = antispam service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap { name = imap-login } service login/imap { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } }

3 6

Released Pigeonhole v0.4.18 for Dovecot v2.2.29.
by Stephan Bosch 12 Apr '17

12 Apr '17

Hello Dovecot users, Here's the definitive 0.4.18 release. There were no changes since the release candidate. Changelog v0.4.18: + imapsieve plugin: Implemented the copy_source_after rule action. When this is enabled for a mailbox rule, the specified Sieve script is executed for the message in the source mailbox during a "COPY" event. This happens only after the Sieve script that is executed for the corresponding message in the destination mailbox finishes running successfully. + imapsieve plugin: Added non-standard Sieve environment items for the source and destination mailbox. - multiscript: The execution of the discard script had an implicit "keep", rather than an implicit "discard". The release is available as follows: https://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.18.t… https://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.18.t… Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

Vpopmail Error
by Bobber 12 Apr '17

12 Apr '17

I'm trying to compile the latest Dovecot (v2.2.29) and when I run make I get this error: > auth-userdb-vpopmail.o: In function `userdb_vpopmail_get_quota': > /usr/local/src/dovecot-2.2.29/src/auth/userdb-vpopmail.c:64: undefined > reference to `var_expand_table_build' > collect2: error: ld returned 1 exit status > Makefile:932: recipe for target 'auth' failed > make[3]: *** [auth] Error 1 > make[3]: Leaving directory '/usr/local/src/dovecot-2.2.29/src/auth' > Makefile:496: recipe for target 'all-recursive' failed > make[2]: *** [all-recursive] Error 1 > make[2]: Leaving directory '/usr/local/src/dovecot-2.2.29/src' > Makefile:619: recipe for target 'all-recursive' failed > make[1]: *** [all-recursive] Error 1 > make[1]: Leaving directory '/usr/local/src/dovecot-2.2.29' > Makefile:463: recipe for target 'all' failed > make: *** [all] Error 2 I'm using Debian Jessie and it's up to date. Just to make sure it wasn't something in Jessie I went back into v2.2.28 (which I've been using since it was released) and did a clean build successfully. I've never had any problems compiling dovecot up until now. Any ideas on how to fix this? -- *Bob Wooldridge* Blog: http://kc0dxf.net/blog/

4 8

v2.2.29.rc1 released
by Timo Sirainen 11 Apr '17

11 Apr '17

http://dovecot.org/releases/2.2/rc/dovecot-2.2.29.rc1.tar.gz http://dovecot.org/releases/2.2/rc/dovecot-2.2.29.rc1.tar.gz.sig Planning to release v2.2.29 on Monday. Please find and report any bugs before that. * When Dovecot encounters an internal error, it logs the real error and usually logs another line saying what function failed. Previously the second log line's error message was a rather uninformative "Internal error occurred. Refer to server log for more information." Now the real error message is duplicated in this second log line. * lmtp: If a delivery has multiple recipients, run autoexpunging only for the last recipient. This avoids a problem where a long autoexpunge run causes LMTP client to timeout between the DATA replies, resulting in duplicate mail deliveries. * config: Don't stop the process due to idling. Otherwise the configuration is reloaded when the process restarts. * mail_log plugin: Differentiate autoexpunges from regular expunges * imapc: Use LOGOUT to cleanly disconnect from server. * lib-http: Internal status codes (>9000) are no longer visible in logs * director: Log vhost count changes and HOST-UP/DOWN + quota: Add plugin { quota_max_mail_size } setting to limit the maximum individual mail size that can be saved. + imapc: Add imapc_features=delay-login. If set, connecting to the remote IMAP server isn't done until it's necessary. + imapc: Add imapc_connection_retry_count and imapc_connection_retry_interval settings. + imap, pop3, indexer-worker: Add (deinit) to process title before autoexpunging runs. + Added %{encrypt} and %{decrypt} variables + imap/pop3 proxy: Log proxy state in errors as human-readable string. + imap/pop3-login: All forward_* extra fields returned by passdb are sent to the next hop when proxying using ID/XCLIENT commands. On the receiving side these fields are imported and sent to auth process where they're accessible via %{passdb:forward_*}. This is done only if the sending IP address matches login_trusted_networks. + imap-login: If imap_id_retain=yes, send the IMAP ID string to auth process. %{client_id} expands to it in auth process. The ID string is also sent to the next hop when proxying. - fts-tika: Fixed crash when parsing attachment without Content-Disposition header. Broken by 2.2.28. - trash plugin was broken in 2.2.28 - auth: When passdb/userdb lookups were done via auth-workers, too much data was added to auth cache. This could have resulted in wrong replies when using multiple passdbs/userdbs. - auth: passdb { skip & mechanisms } were ignored for the first passdb - oauth2: Various fixes, including fixes to crashes - dsync: Large Sieve scripts (or other large metadata) weren't always synced. - Index rebuild (e.g. doveadm force-resync) set all mails as \Recent - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix - doveadm: Exit codes weren't preserved when proxying commands via doveadm-server. Almost all errors used exit code 75 (tempfail). - ACLs weren't applied to not-yet-existing autocreated mailboxes. - Fixed a potential crash when parsing a broken message header. - cassandra: Fallback consistency settings weren't working correctly. - doveadm director status <user>: "Initial config" was always empty - imapc: Various reconnection fixes.

3 10

How to use quota with dovecot
by Mik J 11 Apr '17

11 Apr '17

Hello, I would like to use quotas with dovecot and things are not clear to me. I read this page https://wiki2.dovecot.org/Quota 1) I did this # ls /usr/local/lib/dovecot/lib10_quota_plugin.so /usr/local/lib/dovecot/lib10_quota_plugin.so # grep mail_plugins /etc/dovecot/conf.d/10-mail.conf mail_plugins = notify replication quota Then the page tells about 20-imap.conf but an explanation is written # Space separated list of plugins to load (default is global mail_plugins). So what is that default global mail_plugins ? Is it the one coming from 10-mail.conf ? 2) I tried both use this mail_plugins = $mail_plugins quota in 20-imap.conf or comment it. And restarted dovecot each time Then commented out in 90-quota.conf quota_rule = *:storage=1G quota_rule2 = Trash:storage=+100M quota_grace = 10%% } But I have this message # doveadm quota recalc -u user(a)mydomain.org doveadm(user(a)mydomain.org): Error: Quota not enabled Does anyone knows why ?

4 5

v2.2.29 released
by Timo Sirainen 11 Apr '17

11 Apr '17

https://dovecot.org/releases/2.2/dovecot-2.2.29.tar.gz https://dovecot.org/releases/2.2/dovecot-2.2.29.tar.gz.sig * passdb/userdb dict: Don't double-expand %variables in keys. If dict was used as the authentication passdb, using specially crafted %variables in the username could be used to cause DoS (CVE-2017-2669) * When Dovecot encounters an internal error, it logs the real error and usually logs another line saying what function failed. Previously the second log line's error message was a rather uninformative "Internal error occurred. Refer to server log for more information." Now the real error message is duplicated in this second log line. * lmtp: If a delivery has multiple recipients, run autoexpunging only for the last recipient. This avoids a problem where a long autoexpunge run causes LMTP client to timeout between the DATA replies, resulting in duplicate mail deliveries. * config: Don't stop the process due to idling. Otherwise the configuration is reloaded when the process restarts. * mail_log plugin: Differentiate autoexpunges from regular expunges * imapc: Use LOGOUT to cleanly disconnect from server. * lib-http: Internal status codes (>9000) are no longer visible in logs * director: Log vhost count changes and HOST-UP/DOWN + quota: Add plugin { quota_max_mail_size } setting to limit the maximum individual mail size that can be saved. + imapc: Add imapc_features=delay-login. If set, connecting to the remote IMAP server isn't done until it's necessary. + imapc: Add imapc_connection_retry_count and imapc_connection_retry_interval settings. + imap, pop3, indexer-worker: Add (deinit) to process title before autoexpunging runs. + Added %{encrypt} and %{decrypt} variables + imap/pop3 proxy: Log proxy state in errors as human-readable string. + imap/pop3-login: All forward_* extra fields returned by passdb are sent to the next hop when proxying using ID/XCLIENT commands. On the receiving side these fields are imported and sent to auth process where they're accessible via %{passdb:forward_*}. This is done only if the sending IP address matches login_trusted_networks. + imap-login: If imap_id_retain=yes, send the IMAP ID string to auth process. %{client_id} expands to it in auth process. The ID string is also sent to the next hop when proxying. + passdb imap: Use ssl_client_ca_* settings for CA validation. - fts-tika: Fixed crash when parsing attachment without Content-Disposition header. Broken by 2.2.28. - trash plugin was broken in 2.2.28 - auth: When passdb/userdb lookups were done via auth-workers, too much data was added to auth cache. This could have resulted in wrong replies when using multiple passdbs/userdbs. - auth: passdb { skip & mechanisms } were ignored for the first passdb - oauth2: Various fixes, including fixes to crashes - dsync: Large Sieve scripts (or other large metadata) weren't always synced. - Index rebuild (e.g. doveadm force-resync) set all mails as \Recent - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix - doveadm: Exit codes weren't preserved when proxying commands via doveadm-server. Almost all errors used exit code 75 (tempfail). - ACLs weren't applied to not-yet-existing autocreated mailboxes. - Fixed a potential crash when parsing a broken message header. - cassandra: Fallback consistency settings weren't working correctly. - doveadm director status <user>: "Initial config" was always empty - imapc: Various reconnection fixes.

4 6

How to migration my mails from another server ?
by Mik J 10 Apr '17

10 Apr '17

Hello, I would like to host my mails and I would like to retrieve my existing mailbox content from my ISP My ISP ====== I don't have root access on the server The server seem to use Dovecot according to the banner. My machine ========== I have root access on the server I use Dovecot 2.2.21 I use Maildir I read this page multiple times but it's not clear to me https://wiki2.dovecot.org/Migration/Dsync "Set up configuration for the IMAP server you wish to migrate from" Is it my ISP's server or my server ? In which configuration file should I do this ? The same for this option dsync_features = empty-header-workaroundwhere is it supposed to be configured ? My most important case is quite "simple": the mailboxes (there are 2 or 3) I want to migrate don't exist on my machine, so there is no such problems as merge existing mails. Will this migration use imap and retrieve the content of the mails ? Will it use port 143 or 993 ? I'll use the backup option I have another case which there are mails on both servers. So I would like to keep existing mails on my machine. I'll use the sync -1 option ? Thank you

3 3

Re: abrt reported "imap killed by SIGBUS"
by Hongying Liu 10 Apr '17

10 Apr '17

Sorry for late response. This issue occurs ran randomly. So I don't know how to run valgrind command. 2017-04-10 17:14 GMT+08:00 Hongying Liu <hongyliu(a)redhat.com>: > Sorry for late response. > > This issue occurs ran randomly. So I don't know how to run valgrind > command. > > I upload the coredump. > > The version of dovecot is dovecot-2.2.10-7.el7.x86_64. > > 2017-04-07 14:07 GMT+08:00 Aki Tuomi <aki.tuomi(a)dovecot.fi>: > >> Please keep responses on list. >> >> Can you please run valgrind on this, as it appears to be some sort of >> memory corruption issue. >> >> Aki >> >> > On April 7, 2017 at 5:37 AM Hongying Liu <hongyliu(a)redhat.com> wrote: >> > >> > >> > Thanks for your response. >> > >> > (gdb) p cache >> > $1 = (struct mail_cache *) 0x7fc4a811a320 >> > (gdb) p cache->hdr >> > $2 = (const struct mail_cache_header *) 0x7fc4a6ddb000 >> > (gdb) p cache->hdr->file_seq >> > Cannot access memory at address 0x7fc4a6ddb008 <---- >> > (gdb) p reset_id >> > $3 = 1488892251 >> > >> > >> > 2017-04-06 19:34 GMT+08:00 Aki Tuomi <aki.tuomi(a)dovecot.fi>: >> > >> > > Hi! >> > > >> > > Responses in middle. >> > > >> > > Aki >> > > >> > > On 06.04.2017 06:05, Hongying Liu wrote: >> > > > Hi sbr-services, >> > > > >> > > > Could you give me some idea? >> > > > >> > > > ### abrt reported the error as below. >> > > > [root@cupop4 log]# abrt-cli list --since 1488267244 id >> > > > ad716dbfd3a68bbe0f055e32ebfe562f4f75df43 >> > > > reason: imap killed by SIGBUS >> > > > time: Sun Mar 19 2017 10:58:27 AM JST >> > > > cmdline: dovecot/imap >> > > > package: dovecot-2.2.10-7.el7 >> > > > uid: 80180 (acaa2325) >> > > > count: 2 >> > > > Directory: /var/spool/abrt/ccpp-2017-03-19-10:58:27-4904 >> > > > 'abrt-cli report を実行する/var/spool/abrt/ccpp-2017 >> -03-19-10:58:27-4904' >> > > > >> > > > >> > > > ### /var/log/messages >> > > > Mar 19 10:58:27 cupop4 abrt-hook-ccpp: Process 4904 (imap) of user >> 80180 >> > > > killed by SIGBUS - dumping core >> > > > >> > > > And, there are lots of ldap error in /var/log/messages. Dovecot >> uses the >> > > > ldap as userdb and passwddb. >> > > > Is the ldap error related to imap crash? >> > > > >> > > > Mar 19 10:58:21 cupop4 nslcd[1534]: [a378de] >> <group/member="postfix"> >> > > > ldap_result() failed: Invalid DN syntax: Invalid DN >> > > >> > > This looks like an invalid DN syntax. >> > > >> > > > >> > > > ### /var/log/dovecot >> > > > >> > > > Mar 19 10:58:27 cupop4 dovecot: imap(acaa2325): Fatal: master: >> > > > service(imap): child 4904 killed with signal 7 (core dumped) >> > > > >> > > Can you do p cache, p cache->hdr, p cache->hdr->file_seq and p >> reset_id >> > > >> > > > ### gdb >> > > > >> > > > Core was generated by `dovecot/imap'. >> > > > Program terminated with signal 7, Bus error. >> > > > #0 0x00007fc4a69f293e in mail_cache_lookup_offset >> (cache=0x7fc4a811a320, >> > > > view=<optimized out>, seq=<optimized out>, offset_r=offset_r@entry >> > > > =0x7ffe23a98900) >> > > > at mail-cache-lookup.c:95 >> > > > 95 while (cache->hdr->file_seq != reset_id) { >> > > > (gdb) bt >> > > > #0 0x00007fc4a69f293e in mail_cache_lookup_offset >> (cache=0x7fc4a811a320, >> > > > view=<optimized out>, seq=<optimized out>, offset_r=offset_r@entry >> > > > =0x7ffe23a98900) >> > > > at mail-cache-lookup.c:95 >> > > > #1 0x00007fc4a69f2afa in mail_cache_lookup_iter_init >> > > > (view=view@entry=0x7fc4a81332b0, >> > > > seq=<optimized out>, ctx_r=ctx_r@entry=0x7ffe23a988e0) >> > > > at mail-cache-lookup.c:154 >> > > > #2 0x00007fc4a69f2f8f in mail_cache_seq (seq=<optimized out>, >> > > > view=0x7fc4a81332b0) at mail-cache-lookup.c:322 >> > > > #3 mail_cache_field_exists (view=view@entry=0x7fc4a81332b0, >> > > seq=seq@entry=760, >> > > > field=field@entry=4) at mail-cache-lookup.c:352 >> > > > #4 0x00007fc4a69f3151 in mail_cache_lookup_field >> (view=0x7fc4a81332b0, >> > > > dest_buf=dest_buf@entry=0x7ffe23a98a00, seq=760, >> > > field_idx=field_idx@entry >> > > > =4) >> > > > at mail-cache-lookup.c:413 >> > > > #5 0x00007fc4a69d9439 in index_mail_cache_lookup_field >> > > > (mail=mail@entry=0x7fc4a8128cd0, >> > > > buf=buf@entry=0x7ffe23a98a00, field_idx=field_idx@entry=4) >> > > > at index-mail.c:68 >> > > > #6 0x00007fc4a69d94a7 in index_mail_get_fixed_field >> > > (mail=0x7fc4a8128cd0, >> > > > field=<optimized out>, data=<optimized out>, data_size=8) at >> > > > index-mail.c:130 >> > > > #7 0x00007fc4a69d9fed in index_mail_get_cached_virtual_size >> > > > (mail=mail@entry=0x7fc4a8128cd0, size_r=size_r@entry=0x7ffe23a98b20) >> at >> > > > index-mail.c:403 >> > > > #8 0x00007fc4a6987c1b in maildir_mail_get_virtual_size >> > > > (_mail=0x7fc4a8128cd0, size_r=0x7ffe23a98b20) at maildir-mail.c:388 >> > > > #9 0x00007fc4a69d9719 in index_mail_update_access_parts >> > > > (mail=mail@entry=0x7fc4a8128cd0) >> > > > at index-mail.c:1490 >> > > > #10 0x00007fc4a69dbb93 in index_mail_set_seq (_mail=0x7fc4a8128cd0, >> > > > seq=760, saving=<optimized out>) at index-mail.c:1521 >> > > > #11 0x00007fc4a69e28cb in search_more_with_mail >> (mail=0x7fc4a8128cd0, >> > > > ctx=0x7fc4a8132730) at index-search.c:1507 >> > > > #12 search_more_with_prefetching (mail_r=<optimized out>, >> ctx=<optimized >> > > > out>) at index-search.c:1579 >> > > > #13 search_more (ctx=ctx@entry=0x7fc4a8132730, >> > > > mail_r=mail_r@entry=0x7ffe23a98c20) >> > > > at index-search.c:1650 >> > > > #14 0x00007fc4a69e2ff4 in index_storage_search_next_nonblock >> > > > (_ctx=0x7fc4a8132730, mail_r=0x7fc4a81120d8, >> tryagain_r=0x7ffe23a98c87) >> > > at >> > > > index-search.c:1674 >> > > > #15 0x00007fc4a69bc4ef in mailbox_search_next_nonblock >> > > > (ctx=ctx@entry=0x7fc4a8132730, >> > > > mail_r=mail_r@entry=0x7fc4a81120d8, >> > > > tryagain_r=tryagain_r@entry=0x7ffe23a98c87) at >> mail-storage.c:1787 >> > > > #16 0x00007fc4a69bc55d in mailbox_search_next (ctx=0x7fc4a8132730, >> > > > mail_r=mail_r@entry=0x7fc4a81120d8) at mail-storage.c:1773 >> > > > #17 0x00007fc4a6e97874 in imap_fetch_more_int (ctx=ctx@entry >> > > =0x7fc4a8112078, >> > > > cancel=false) at imap-fetch.c:479 >> > > > #18 0x00007fc4a6e98852 in imap_fetch_more (ctx=0x7fc4a8112078, >> > > > cmd=cmd@entry=0x7fc4a8111ed0) >> > > > at imap-fetch.c:556 >> > > > #19 0x00007fc4a6e8c17d in cmd_fetch (cmd=0x7fc4a8111ed0) at >> > > cmd-fetch.c:284 >> > > > #20 0x00007fc4a6e9601c in command_exec (cmd=cmd@entry=0x7fc4a8111ed0) >> at >> > > > imap-commands.c:158 >> > > > #21 0x00007fc4a6e94f1f in client_command_input (cmd=cmd@entry >> > > =0x7fc4a8111ed0) >> > > > at imap-client.c:780 >> > > > #22 0x00007fc4a6e95005 in client_command_input (cmd=0x7fc4a8111ed0) >> at >> > > > imap-client.c:841 >> > > > #23 0x00007fc4a6e952fd in client_handle_next_command >> > > > (remove_io_r=<synthetic pointer>, client=0x7fc4a8111530) at >> > > > imap-client.c:879 >> > > > #24 client_handle_input (client=client@entry=0x7fc4a8111530) at >> > > > imap-client.c:891 >> > > > #25 0x00007fc4a6e956c5 in client_input (client=0x7fc4a8111530) at >> > > > imap-client.c:933 >> > > > #26 0x00007fc4a66e1a87 in io_loop_call_io (io=0x7fc4a811edd0) at >> > > > ioloop.c:388 >> > > > #27 0x00007fc4a66e290f in io_loop_handler_run >> > > > (ioloop=ioloop@entry=0x7fc4a80fc750) >> > > > at ioloop-epoll.c:220 >> > > > #28 0x00007fc4a66e15d8 in io_loop_run (ioloop=0x7fc4a80fc750) at >> > > > ioloop.c:412 >> > > > #29 0x00007fc4a668e9e3 in master_service_run >> (service=0x7fc4a80fc5e0, >> > > > callback=callback@entry=0x7fc4a6e9ed70 <client_connected>) at >> > > > master-service.c:571 >> > > > #30 0x00007fc4a6e89324 in main (argc=1, argv=0x7fc4a80fc390) at >> > > main.c:400 >> > > > >> > > > Thank you. >> > > > >> > > > Best regards, >> > > > Hongying Liu >> > > >> > > >> > >

1 0

[Bug] FTS invalid address parsing
by azurit＠pobox.sk 10 Apr '17

10 Apr '17

Hi, i found another bug in FTS while parsing quoted-printable/base64-encoded sender's name inside 'From' header (again, i was figuring out why some of messages cannot be searched). Header: From: =?UTF-8?Q?A=2CB?= <test(a)example.com> Data send to Solr by Dovecot: <field name="from">A@, B &lt;test(a)example.com&gt;</field> Header: From: =?UTF-8?Q?A_B=2CC?= <test(a)example.com> Data send to Solr by Dovecot: <field name="from">A@</field> Header: From: =?UTF-8?B?QSBCLEMK?= <test(a)example.com> Data send to Solr by Dovecot: <field name="from">A@</field> Dovecot 2.2.27. azur

2 2

[Bug] FTS double escaping
by azurit＠pobox.sk 09 Apr '17

09 Apr '17

Hi, i'm trying to resolve few problems with indexing 'From' headers using FTS/Solr. I was tcpdumping the communication between Dovecot and Jetty/Solr and noticed that 'From' headers, which includes also sender's name, are double escaped. This is what was Dovecot sending to Solr: </field><field name="from">Name Surname &lt;test(a)example.com&gt;</field></doc></add> As you can see, characters < and > were escaped to < and > which were, again, escaped to &lt; and &gt;. This is doing problems while trying to index whole e-mail address, as Solr sees it as '<test(a)example.com>'. I spend hours trying to figure out why i'm able to search in all parts of e-mail addresses but searching for full and exact e-mail address was successfull ONLY for messages which doesn't include sender's name in 'From' header. Finally, after i found this bug, this fixed all search problems: <filter class="solr.PatternReplaceFilterFactory" pattern="&lt;" replacement=""/> <filter class="solr.PatternReplaceFilterFactory" pattern="&gt;" replacement=""/> I hope that, at least, this bug, reported by me, will be fixed. Thank you. azur

3 5

sieve does not seem to be working
by Robert Moskowitz 09 Apr '17

09 Apr '17

my local.conf has: # 90-sieve.conf plugin { sieve_before = /home/sieve/globalfilter.sieve } and cat /home/sieve/globalfilter.sieve require ["fileinto","mailbox"]; if anyof ( header :contains "X-Spam-Flag" "YES", header :contains "subject" "***SPAM***" ) { fileinto :create "Spam"; } There IS a globalfilter.svbin when I tried: sendmail -i testit3(a)test.htt-consult.com < sample-spam-GTUBE-junk.txt amavis is flagging it as ***Spam*** but it stays in inbox. So I tried: sieve-test -e -l /home/vmail/test.htt-consult.com/testit3/ /home/sieve/globalfilter.sieve /home/vmail/test.htt-consult.com/testit3/cur/1491512409.M371278P6513.z9m9z.test.htt-consult.com\,S\=1823\,W\=1868\:2\, info: msgid=<GTUBE1.1010101(a)example.net>: stored mail into mailbox 'Spam'. sieve-test(root): Info: final result: success And it DID get copied to Spam, not moved. I am now seeing it in inbox and Spam. Of course ownership on the message in Spam were wrong (root:root instead of vmail:mail, but I fixed that). So two questions, probably linked: Why did sieve not work. Is the subject test case sensitive? If it is case sensitive, why did the sieve-test work? thanks

2 2

Pigeonhole Sieve Extprograms Plugin
by KT Walrus 09 Apr '17

09 Apr '17

Just discovered the Pigeonhole Sieve Extprograms plugin (https://wiki2.dovecot.org/Pigeonhole/Sieve/Plugins/Extprograms <https://wiki2.dovecot.org/Pigeonhole/Sieve/Plugins/Extprograms>)… I currently have Postfix configured to run a script to store all incoming messages into a Mysql DB and a batch job that retrieves the messages in the DB, processes them and delivers them to the recipients' Dovecot servers. Seems to me it might be better to have Postfix deliver all incoming messages directly to a single Dovecot mailbox and use this Sieve plugin to do the whole job of updating the DB, processing the message, and delivering to the recipients. Also, I have a need to implement updating the DB when the recipient reads a message for the first time (setting the \Seen flag). Would this work best to execute a script using this Sieve plugin from a IMAP Sieve script that watches for \Seen flag changes? This might be a whole lot better than the way I was thinking of doing it before. I’m basically implementing mailing lists where the senders receive a notification reply with a link to a web page where the message may be edited/deleted before it is sent to recipients (after a fixed amount of time has elapsed). This gives the sender the opportunity to change his mind before it is too late or to send to recipients immediately (by marking the message as Urgent). Also, even after the message has been sent out, I want to allow the sender to be able to delete it in the recipients mailboxes if they have not read it yet (downloaded it to their email client) or to see which recipients have read the message (and when they read/downloaded it for the first time). Both the sender and the recipients will have Dovecot mailboxes so I want to give more control over the messages for their entire lifetimes (both for senders and for recipients) than normal email does. Any thoughts? Kevin

1 0

Released Pigeonhole v0.4.18.rc1 for Dovecot v2.2.29.rc1.
by Stephan Bosch 09 Apr '17

09 Apr '17

Hello Dovecot users, This is a rather small release. It fixes one important bug in the new discard script feature. It also adds a couple of new features for IMAPSieve. Changelog v0.4.18: + imapsieve plugin: Implemented the copy_source_after rule action. When this is enabled for a mailbox rule, the specified Sieve script is executed for the message in the source mailbox during a "COPY" event. This happens only after the Sieve script that is executed for the corresponding message in the destination mailbox finishes running successfully. + imapsieve plugin: Added non-standard Sieve environment items for the source and destination mailbox. - multiscript: The execution of the discard script had an implicit "keep", rather than an implicit "discard". The release is available as follows: http://pigeonhole.dovecot.org/releases/2.2/rc/dovecot-2.2-pigeonhole-0.4.18… http://pigeonhole.dovecot.org/releases/2.2/rc/dovecot-2.2-pigeonhole-0.4.18… Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this release candidate and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

Updating mysql db when messages first read by IMAP user
by KT Walrus 09 Apr '17

09 Apr '17

I need to implement updating a mysql db when the \SEEN flag is set by IMAP. New message delivery is done by having Postfix store all new inbound messages in a mysql db and a batch job watching the db for new messages and delivering them to the correct Dovecot server for the recipients. The batch job leaves a log entry in the db (for each recipient) with the current timestamp and adds a header with the log id to the outgoing message that is sent to Dovecot. The log table has a column for the first read timestamp which is set to 0 initially. I plan on implementing a Sieve IMAP script that watches for changes to the \SEEN flag and sends a mailto: notify message that contains the log id (from the message header) and the current date to a mail address dedicated for keep track of \SEEN flag changes. The notify message will be delivered to this mail address where a batch job watches that mail address and updates the db for the log id in the notify message with the timestamp and the current date if the row in the log table has a first read timestamp of 0. I plan on providing a web page that the sender can use to see whether the messages they have sent have been seen by the recipients. The web page will show other info too, but the part that I need to implement next is updating the db when a sent message has been read by the recipients of the message. Is this a good way to do this? Or, is there a better way than using an IMAP Sieve script to send notify messages? Is there any other way to have a Sieve script update a mysql database? Or, is there some other mechanism in Dovecot to use instead of an IMAP Sieve script? Kevin

1 0

IMAPSieve Changed flags cause?
by MRob 09 Apr '17

09 Apr '17

RFC 6785 says I should be able to run scripts when a command changes flags on a message but I can't understand what to put in imapsieve_mailboxXXX_causes. Dovecot logs something like STORE as an invalid cause. How do I run an administrator Sieve script caused from change in flags?

2 5

LAYOUT=fs and subfolders listing
by Dovecot＠9livesdata 07 Apr '17

07 Apr '17

dovecot-2.2.28-1.el6_31.wing.x86_64 I've created this public shared namespace with namespace public2 { type = public separator = . prefix = Public2. location = maildir:/mail/public2:INDEX=/mail/%u/public:LAYOUT=fs:DIRNAME=.store subscriptions = no } and I'm using the "imap_client_workarounds = tb-extra-mailbox-sep" and filesystem structure listed at the end. The problem is that with this configuration thunderbird (and roundcubemail) shows the Public2 namespace but empty - without any folders. I've tried with another DIRNAME=StoR - same effect If I will not use DIRNAME at all(and no .stor directories) TB sees the f1 f2 folders but not the f2/s1 subfolder. Just like it would not list any subfolders for subscription. Within TB I can create subfolder say f1/mysub1 but after it's unsubscribed cannot be subscribed again(not shown in listing) Can You provide any hints? I can live without the DIRNAME= but it has to list subfolders for subscription. BTW: it works well without LAYOUT=fs - but it's kind of requirement here. /mail/public2/: drwxrwsr-x 4 nobody havemail 4096 Apr 7 15:07 f1 drwxrwsr-x 3 nobody havemail 4096 Apr 7 15:02 f2 /mail/public2/f1: -rw-r--r-- 1 root havemail 42 Apr 7 15:07 dovecot-acl -r--r--r-- 1 nobody havemail 0 Oct 14 2015 dovecot-shared -rw-rw-r-- 1 nobody havemail 0 Oct 15 2015 dovecot-uidlist drwxrwsr-x 3 nobody havemail 4096 Apr 7 15:02 s1 drwxrws--- 5 nobody havemail 4096 Apr 7 15:02 .store /mail/public2/f1/s1: -rw-r--r-- 1 root havemail 40 Oct 16 2015 dovecot-acl -r--r--r-- 1 nobody havemail 0 Oct 14 2015 dovecot-shared -rw-rw-r-- 1 nobody havemail 0 Oct 15 2015 dovecot-uidlist drwxrws--- 5 nobody havemail 4096 Apr 7 15:02 .store /mail/public2/f1/s1/.store: drwxrws--- 2 nobody havemail 4096 Oct 15 2015 cur drwxrws--- 2 nobody havemail 4096 Oct 15 2015 new drwxrws--- 2 nobody havemail 4096 Oct 15 2015 tmp /mail/public2/f1/.store: drwxrws--- 2 nobody havemail 4096 Oct 15 2015 cur drwxrws--- 2 nobody havemail 4096 Oct 15 2015 new drwxrws--- 2 nobody havemail 4096 Oct 15 2015 tmp /mail/public2/f2: -rw-r--r-- 1 root havemail 40 Oct 16 2015 dovecot-acl -r--r--r-- 1 nobody havemail 0 Oct 14 2015 dovecot-shared -rw-rw-r-- 1 nobody havemail 0 Oct 15 2015 dovecot-uidlist drwxrws--- 5 nobody havemail 4096 Apr 7 15:02 .store /mail/public2/f2/.store: drwxrws--- 2 nobody havemail 4096 Oct 15 2015 cur drwxrws--- 2 nobody havemail 4096 Oct 15 2015 new drwxrws--- 2 nobody havemail 4096 Oct 15 2015 tmp

1 0

Running sievec as user vmail
by Robert Moskowitz 07 Apr '17

07 Apr '17

My sieve problem ended up a permissions problem. I ran sievec as root and .svbin needs vmail:mail ownership. I could always just add the chown command to my process, but I wonder if there is some 'clean' way to run sievec as user vmail while logged in as root? thanks

2 2

Doubt with imap/imap-login processes in proxy server
by Angel L. Mateo 07 Apr '17

07 Apr '17

Hi, I have a question I have not cleared after reading https://wiki.dovecot.org/LoginProcess. I'm developing a proxy server (without director, because the backend server is specified by a ldap lookup). My question is: the limit of imap (or pop3) concurrently users that the proxy can handle is determined by the imap-login limit or the imap one? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

2 2

Re: abrt reported "imap killed by SIGBUS"
by Aki Tuomi 07 Apr '17

07 Apr '17

Please keep responses on list. Can you please run valgrind on this, as it appears to be some sort of memory corruption issue. Aki > On April 7, 2017 at 5:37 AM Hongying Liu <hongyliu(a)redhat.com> wrote: > > > Thanks for your response. > > (gdb) p cache > $1 = (struct mail_cache *) 0x7fc4a811a320 > (gdb) p cache->hdr > $2 = (const struct mail_cache_header *) 0x7fc4a6ddb000 > (gdb) p cache->hdr->file_seq > Cannot access memory at address 0x7fc4a6ddb008 <---- > (gdb) p reset_id > $3 = 1488892251 > > > 2017-04-06 19:34 GMT+08:00 Aki Tuomi <aki.tuomi(a)dovecot.fi>: > > > Hi! > > > > Responses in middle. > > > > Aki > > > > On 06.04.2017 06:05, Hongying Liu wrote: > > > Hi sbr-services, > > > > > > Could you give me some idea? > > > > > > ### abrt reported the error as below. > > > [root@cupop4 log]# abrt-cli list --since 1488267244 id > > > ad716dbfd3a68bbe0f055e32ebfe562f4f75df43 > > > reason: imap killed by SIGBUS > > > time: Sun Mar 19 2017 10:58:27 AM JST > > > cmdline: dovecot/imap > > > package: dovecot-2.2.10-7.el7 > > > uid: 80180 (acaa2325) > > > count: 2 > > > Directory: /var/spool/abrt/ccpp-2017-03-19-10:58:27-4904 > > > 'abrt-cli report を実行する/var/spool/abrt/ccpp-2017-03-19-10:58:27-4904' > > > > > > > > > ### /var/log/messages > > > Mar 19 10:58:27 cupop4 abrt-hook-ccpp: Process 4904 (imap) of user 80180 > > > killed by SIGBUS - dumping core > > > > > > And, there are lots of ldap error in /var/log/messages. Dovecot uses the > > > ldap as userdb and passwddb. > > > Is the ldap error related to imap crash? > > > > > > Mar 19 10:58:21 cupop4 nslcd[1534]: [a378de] <group/member="postfix"> > > > ldap_result() failed: Invalid DN syntax: Invalid DN > > > > This looks like an invalid DN syntax. > > > > > > > > ### /var/log/dovecot > > > > > > Mar 19 10:58:27 cupop4 dovecot: imap(acaa2325): Fatal: master: > > > service(imap): child 4904 killed with signal 7 (core dumped) > > > > > Can you do p cache, p cache->hdr, p cache->hdr->file_seq and p reset_id > > > > > ### gdb > > > > > > Core was generated by `dovecot/imap'. > > > Program terminated with signal 7, Bus error. > > > #0 0x00007fc4a69f293e in mail_cache_lookup_offset (cache=0x7fc4a811a320, > > > view=<optimized out>, seq=<optimized out>, offset_r=offset_r@entry > > > =0x7ffe23a98900) > > > at mail-cache-lookup.c:95 > > > 95 while (cache->hdr->file_seq != reset_id) { > > > (gdb) bt > > > #0 0x00007fc4a69f293e in mail_cache_lookup_offset (cache=0x7fc4a811a320, > > > view=<optimized out>, seq=<optimized out>, offset_r=offset_r@entry > > > =0x7ffe23a98900) > > > at mail-cache-lookup.c:95 > > > #1 0x00007fc4a69f2afa in mail_cache_lookup_iter_init > > > (view=view@entry=0x7fc4a81332b0, > > > seq=<optimized out>, ctx_r=ctx_r@entry=0x7ffe23a988e0) > > > at mail-cache-lookup.c:154 > > > #2 0x00007fc4a69f2f8f in mail_cache_seq (seq=<optimized out>, > > > view=0x7fc4a81332b0) at mail-cache-lookup.c:322 > > > #3 mail_cache_field_exists (view=view@entry=0x7fc4a81332b0, > > seq=seq@entry=760, > > > field=field@entry=4) at mail-cache-lookup.c:352 > > > #4 0x00007fc4a69f3151 in mail_cache_lookup_field (view=0x7fc4a81332b0, > > > dest_buf=dest_buf@entry=0x7ffe23a98a00, seq=760, > > field_idx=field_idx@entry > > > =4) > > > at mail-cache-lookup.c:413 > > > #5 0x00007fc4a69d9439 in index_mail_cache_lookup_field > > > (mail=mail@entry=0x7fc4a8128cd0, > > > buf=buf@entry=0x7ffe23a98a00, field_idx=field_idx@entry=4) > > > at index-mail.c:68 > > > #6 0x00007fc4a69d94a7 in index_mail_get_fixed_field > > (mail=0x7fc4a8128cd0, > > > field=<optimized out>, data=<optimized out>, data_size=8) at > > > index-mail.c:130 > > > #7 0x00007fc4a69d9fed in index_mail_get_cached_virtual_size > > > (mail=mail@entry=0x7fc4a8128cd0, size_r=size_r@entry=0x7ffe23a98b20) at > > > index-mail.c:403 > > > #8 0x00007fc4a6987c1b in maildir_mail_get_virtual_size > > > (_mail=0x7fc4a8128cd0, size_r=0x7ffe23a98b20) at maildir-mail.c:388 > > > #9 0x00007fc4a69d9719 in index_mail_update_access_parts > > > (mail=mail@entry=0x7fc4a8128cd0) > > > at index-mail.c:1490 > > > #10 0x00007fc4a69dbb93 in index_mail_set_seq (_mail=0x7fc4a8128cd0, > > > seq=760, saving=<optimized out>) at index-mail.c:1521 > > > #11 0x00007fc4a69e28cb in search_more_with_mail (mail=0x7fc4a8128cd0, > > > ctx=0x7fc4a8132730) at index-search.c:1507 > > > #12 search_more_with_prefetching (mail_r=<optimized out>, ctx=<optimized > > > out>) at index-search.c:1579 > > > #13 search_more (ctx=ctx@entry=0x7fc4a8132730, > > > mail_r=mail_r@entry=0x7ffe23a98c20) > > > at index-search.c:1650 > > > #14 0x00007fc4a69e2ff4 in index_storage_search_next_nonblock > > > (_ctx=0x7fc4a8132730, mail_r=0x7fc4a81120d8, tryagain_r=0x7ffe23a98c87) > > at > > > index-search.c:1674 > > > #15 0x00007fc4a69bc4ef in mailbox_search_next_nonblock > > > (ctx=ctx@entry=0x7fc4a8132730, > > > mail_r=mail_r@entry=0x7fc4a81120d8, > > > tryagain_r=tryagain_r@entry=0x7ffe23a98c87) at mail-storage.c:1787 > > > #16 0x00007fc4a69bc55d in mailbox_search_next (ctx=0x7fc4a8132730, > > > mail_r=mail_r@entry=0x7fc4a81120d8) at mail-storage.c:1773 > > > #17 0x00007fc4a6e97874 in imap_fetch_more_int (ctx=ctx@entry > > =0x7fc4a8112078, > > > cancel=false) at imap-fetch.c:479 > > > #18 0x00007fc4a6e98852 in imap_fetch_more (ctx=0x7fc4a8112078, > > > cmd=cmd@entry=0x7fc4a8111ed0) > > > at imap-fetch.c:556 > > > #19 0x00007fc4a6e8c17d in cmd_fetch (cmd=0x7fc4a8111ed0) at > > cmd-fetch.c:284 > > > #20 0x00007fc4a6e9601c in command_exec (cmd=cmd@entry=0x7fc4a8111ed0) at > > > imap-commands.c:158 > > > #21 0x00007fc4a6e94f1f in client_command_input (cmd=cmd@entry > > =0x7fc4a8111ed0) > > > at imap-client.c:780 > > > #22 0x00007fc4a6e95005 in client_command_input (cmd=0x7fc4a8111ed0) at > > > imap-client.c:841 > > > #23 0x00007fc4a6e952fd in client_handle_next_command > > > (remove_io_r=<synthetic pointer>, client=0x7fc4a8111530) at > > > imap-client.c:879 > > > #24 client_handle_input (client=client@entry=0x7fc4a8111530) at > > > imap-client.c:891 > > > #25 0x00007fc4a6e956c5 in client_input (client=0x7fc4a8111530) at > > > imap-client.c:933 > > > #26 0x00007fc4a66e1a87 in io_loop_call_io (io=0x7fc4a811edd0) at > > > ioloop.c:388 > > > #27 0x00007fc4a66e290f in io_loop_handler_run > > > (ioloop=ioloop@entry=0x7fc4a80fc750) > > > at ioloop-epoll.c:220 > > > #28 0x00007fc4a66e15d8 in io_loop_run (ioloop=0x7fc4a80fc750) at > > > ioloop.c:412 > > > #29 0x00007fc4a668e9e3 in master_service_run (service=0x7fc4a80fc5e0, > > > callback=callback@entry=0x7fc4a6e9ed70 <client_connected>) at > > > master-service.c:571 > > > #30 0x00007fc4a6e89324 in main (argc=1, argv=0x7fc4a80fc390) at > > main.c:400 > > > > > > Thank you. > > > > > > Best regards, > > > Hongying Liu > > > >

1 0

Spam instead of Junk folder
by Robert Moskowitz 07 Apr '17

07 Apr '17

Traditionally I have used 'Spam' as the folder name for all those emails that get tagged as, well Spam. But it seems that the standard is now 'Junk' as from 15-mailboxes.conf # Space separated list of IMAP SPECIAL-USE attributes as specified by # RFC 6154: \All \Archive \Drafts \Flagged \Junk \Sent \Trash #special_use = If I have in local.conf # 15-mailboxes.conf namespace inbox { mailbox Spam { special_use = \Junk } } This would auto make Spam, but: Would Junk (and all the others specified in 15-mailboxes.conf) still get created? What actually controls which folders get created?

1 1

Maybe it is an sql config error?
by Robert Moskowitz 06 Apr '17

06 Apr '17

I am looking at these messages in maillog: Apr 6 15:46:58 z9m9z dovecot: dict: Error: mysql(localhost): Connect failed to database (postfix): Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (13) - waiting for 25 seconds before retry Apr 6 15:46:58 z9m9z dovecot: dict: Error: mysql(localhost): Connect failed to database (postfix): Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (13) - waiting for 1 seconds before retry Apr 6 15:46:58 z9m9z dovecot: dict: Error: dict sql lookup failed: Not connected to database and wondering if my config is wrong. Here is what I have: in local.conf: # dovecot.conf protocols = imap pop3 lmtp sieve dict { sqlquota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } # 10-auth.conf !include conf.d/auth-sql.conf.ext # auth-sql.conf.ext userdb { driver = prefetch } # 90-quota.conf plugin { quota = dict:user::proxy::sqlquota trash = /etc/dovecot/dovecot-trash.conf.ext } dovecot-sql.conf.ext: driver = mysql connect = host=localhost dbname=postfix user=postfix password=mailpassword default_pass_scheme = MD5-CRYPT # following should all be on one line. password_query = SELECT username as user, password, concat('/home/vmail/', maild ir) as userdb_home, concat('maildir:/home/vmail/', maildir) as userdb_mail, 101 as userdb_uid, 12 as userdb_gid FROM mailbox WHERE username = '%u' AND active = '1' # following should all be on one line user_query = SELECT concat('/home/vmail/', maildir) as home, concat('maildir:/ho me/vmail/', maildir) as mail, 101 AS uid, 12 AS gid, CONCAT('*:messages=30000:by tes=', quota) as quota_rule FROM mailbox WHERE username = '%u' AND active = '1' [root@z9m9z dovecot]# dovecot-dict-sql.conf.ext: connect = host=localhost dbname=postfix user=postfix password=mailserv map { pattern = priv/quota/storage table = quota2 username_field = username value_field = bytes } map { pattern = priv/quota/messages table = quota2 username_field = username value_field = messages } Users ARE getting authenticated: # openssl s_client -connect z9m9z.test.htt-consult.com:993 CONNECTED(00000003) .... Cert stuff cut --- SSL handshake has read 1676 bytes and written 405 bytes --- New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384 .... Cert stuff cut --- * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. a login faxit(a)test.htt-consult.com faxitpaaswd a OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE QUOTA] Logged in b list "" * * LIST (\HasNoChildren \Sent) "." Sent * LIST (\HasNoChildren \Trash) "." Trash * LIST (\HasNoChildren \Drafts) "." Drafts * LIST (\HasNoChildren) "." Spam * LIST (\HasNoChildren) "." INBOX b OK List completed. ====== So perhaps it is with the quota sql on sending/recv mail? thanks

1 0

Dovecot impatient with mysql?
by Robert Moskowitz 06 Apr '17

06 Apr '17

It seems dovecot is impatient with connecting with mysql, as I see in maillog entries like: Apr 6 11:48:30 z9m9z dovecot: dict: Error: mysql(localhost): Connect failed to database (postfix): Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (13) - waiting for 5 seconds before retry Apr 6 11:48:35 z9m9z dovecot: dict: Error: mysql(localhost): Connect failed to database (postfix): Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (13) - waiting for 25 seconds before retry I suspect it does connect eventually. This is a test system with only 1GB of memory and free reports: total used free shared buff/cache available Mem: 1025484 696344 24556 21528 304584 251552 Swap: 524284 92168 432116 The production box has 2GB, so if the problem is mysql is swapping out, that will be 'fixed', if it is processor, well this is an ARMv7 duo core, as is the production box. I am considering buying the new quad core. Is there anything I can do to get dovecot more patient with mysql, or just ignore there messages? thank you

3 4

abrt reported "imap killed by SIGBUS"
by Hongying Liu 06 Apr '17

06 Apr '17

Hi sbr-services, Could you give me some idea? ### abrt reported the error as below. [root@cupop4 log]# abrt-cli list --since 1488267244 id ad716dbfd3a68bbe0f055e32ebfe562f4f75df43 reason: imap killed by SIGBUS time: Sun Mar 19 2017 10:58:27 AM JST cmdline: dovecot/imap package: dovecot-2.2.10-7.el7 uid: 80180 (acaa2325) count: 2 Directory: /var/spool/abrt/ccpp-2017-03-19-10:58:27-4904 'abrt-cli report を実行する/var/spool/abrt/ccpp-2017-03-19-10:58:27-4904' ### /var/log/messages Mar 19 10:58:27 cupop4 abrt-hook-ccpp: Process 4904 (imap) of user 80180 killed by SIGBUS - dumping core And, there are lots of ldap error in /var/log/messages. Dovecot uses the ldap as userdb and passwddb. Is the ldap error related to imap crash? Mar 19 10:58:21 cupop4 nslcd[1534]: [a378de] <group/member="postfix"> ldap_result() failed: Invalid DN syntax: Invalid DN ### /var/log/dovecot Mar 19 10:58:27 cupop4 dovecot: imap(acaa2325): Fatal: master: service(imap): child 4904 killed with signal 7 (core dumped) ### gdb Core was generated by `dovecot/imap'. Program terminated with signal 7, Bus error. #0 0x00007fc4a69f293e in mail_cache_lookup_offset (cache=0x7fc4a811a320, view=<optimized out>, seq=<optimized out>, offset_r=offset_r@entry =0x7ffe23a98900) at mail-cache-lookup.c:95 95 while (cache->hdr->file_seq != reset_id) { (gdb) bt #0 0x00007fc4a69f293e in mail_cache_lookup_offset (cache=0x7fc4a811a320, view=<optimized out>, seq=<optimized out>, offset_r=offset_r@entry =0x7ffe23a98900) at mail-cache-lookup.c:95 #1 0x00007fc4a69f2afa in mail_cache_lookup_iter_init (view=view@entry=0x7fc4a81332b0, seq=<optimized out>, ctx_r=ctx_r@entry=0x7ffe23a988e0) at mail-cache-lookup.c:154 #2 0x00007fc4a69f2f8f in mail_cache_seq (seq=<optimized out>, view=0x7fc4a81332b0) at mail-cache-lookup.c:322 #3 mail_cache_field_exists (view=view@entry=0x7fc4a81332b0, seq=seq@entry=760, field=field@entry=4) at mail-cache-lookup.c:352 #4 0x00007fc4a69f3151 in mail_cache_lookup_field (view=0x7fc4a81332b0, dest_buf=dest_buf@entry=0x7ffe23a98a00, seq=760, field_idx=field_idx@entry =4) at mail-cache-lookup.c:413 #5 0x00007fc4a69d9439 in index_mail_cache_lookup_field (mail=mail@entry=0x7fc4a8128cd0, buf=buf@entry=0x7ffe23a98a00, field_idx=field_idx@entry=4) at index-mail.c:68 #6 0x00007fc4a69d94a7 in index_mail_get_fixed_field (mail=0x7fc4a8128cd0, field=<optimized out>, data=<optimized out>, data_size=8) at index-mail.c:130 #7 0x00007fc4a69d9fed in index_mail_get_cached_virtual_size (mail=mail@entry=0x7fc4a8128cd0, size_r=size_r@entry=0x7ffe23a98b20) at index-mail.c:403 #8 0x00007fc4a6987c1b in maildir_mail_get_virtual_size (_mail=0x7fc4a8128cd0, size_r=0x7ffe23a98b20) at maildir-mail.c:388 #9 0x00007fc4a69d9719 in index_mail_update_access_parts (mail=mail@entry=0x7fc4a8128cd0) at index-mail.c:1490 #10 0x00007fc4a69dbb93 in index_mail_set_seq (_mail=0x7fc4a8128cd0, seq=760, saving=<optimized out>) at index-mail.c:1521 #11 0x00007fc4a69e28cb in search_more_with_mail (mail=0x7fc4a8128cd0, ctx=0x7fc4a8132730) at index-search.c:1507 #12 search_more_with_prefetching (mail_r=<optimized out>, ctx=<optimized out>) at index-search.c:1579 #13 search_more (ctx=ctx@entry=0x7fc4a8132730, mail_r=mail_r@entry=0x7ffe23a98c20) at index-search.c:1650 #14 0x00007fc4a69e2ff4 in index_storage_search_next_nonblock (_ctx=0x7fc4a8132730, mail_r=0x7fc4a81120d8, tryagain_r=0x7ffe23a98c87) at index-search.c:1674 #15 0x00007fc4a69bc4ef in mailbox_search_next_nonblock (ctx=ctx@entry=0x7fc4a8132730, mail_r=mail_r@entry=0x7fc4a81120d8, tryagain_r=tryagain_r@entry=0x7ffe23a98c87) at mail-storage.c:1787 #16 0x00007fc4a69bc55d in mailbox_search_next (ctx=0x7fc4a8132730, mail_r=mail_r@entry=0x7fc4a81120d8) at mail-storage.c:1773 #17 0x00007fc4a6e97874 in imap_fetch_more_int (ctx=ctx@entry=0x7fc4a8112078, cancel=false) at imap-fetch.c:479 #18 0x00007fc4a6e98852 in imap_fetch_more (ctx=0x7fc4a8112078, cmd=cmd@entry=0x7fc4a8111ed0) at imap-fetch.c:556 #19 0x00007fc4a6e8c17d in cmd_fetch (cmd=0x7fc4a8111ed0) at cmd-fetch.c:284 #20 0x00007fc4a6e9601c in command_exec (cmd=cmd@entry=0x7fc4a8111ed0) at imap-commands.c:158 #21 0x00007fc4a6e94f1f in client_command_input (cmd=cmd@entry=0x7fc4a8111ed0) at imap-client.c:780 #22 0x00007fc4a6e95005 in client_command_input (cmd=0x7fc4a8111ed0) at imap-client.c:841 #23 0x00007fc4a6e952fd in client_handle_next_command (remove_io_r=<synthetic pointer>, client=0x7fc4a8111530) at imap-client.c:879 #24 client_handle_input (client=client@entry=0x7fc4a8111530) at imap-client.c:891 #25 0x00007fc4a6e956c5 in client_input (client=0x7fc4a8111530) at imap-client.c:933 #26 0x00007fc4a66e1a87 in io_loop_call_io (io=0x7fc4a811edd0) at ioloop.c:388 #27 0x00007fc4a66e290f in io_loop_handler_run (ioloop=ioloop@entry=0x7fc4a80fc750) at ioloop-epoll.c:220 #28 0x00007fc4a66e15d8 in io_loop_run (ioloop=0x7fc4a80fc750) at ioloop.c:412 #29 0x00007fc4a668e9e3 in master_service_run (service=0x7fc4a80fc5e0, callback=callback@entry=0x7fc4a6e9ed70 <client_connected>) at master-service.c:571 #30 0x00007fc4a6e89324 in main (argc=1, argv=0x7fc4a80fc390) at main.c:400 Thank you. Best regards, Hongying Liu

2 1

Replication for Pigeonhole ManageSieve
by Joe Nahmias 06 Apr '17

06 Apr '17

Hello, I currently have one machine running postfix SMTP server as MTA along with dovecot IMAP server for email. Although it only supports a handful of users, email service is important to us all; so I'm looking to make this a more fault-tolerant / highly-available system. To that end, I'm planning on configuring postfix to use deliver/dovecot-lda as my MDA (using procmail at the moment), spinning up another machine with postfix/dovecot and setting up master/master replication using dsync/doveadm-sync. My reading on the subject suggests that this should (given appropriate MX & SRV dns records) make traffic balanced across both nodes, and the system should be resilient if one of the nodes should fail without the need for much/any human intervention. In order to replace the functionality that procmail currently provides as MDA, I was thinking to use Sieve. Fortunately, it seems the Pigeonhole project provides almost everything I need on the server side to make this work. The one potential gap I have identified is the syncing of the sieve scripts between the two machines. Has any one dealt with this and come up with a good solution? Does dsync already handle this and I just haven't figured it out? Let me know if my question is best directed elsewhere. Thanks in advance for any help, --Joe PS - please cc me as I don't subscribe to this list.

2 1

Re: Getting error on port 995
by Joseph Tam 05 Apr '17

05 Apr '17

>> As a wild ass guess, I think maybe the client is using used "STARTTLS" >> intead of "SSL", or some other SSL requirement disagreement. > > I believe it has more to do with the encryption method (plain, login, > cram-md5) than with the TLS. The TLS encryption happens on the network > layer whereas the encryption method is used at the IMAP level. Those are authentication methods. However, Googling the heck out of the error message, it appears the OP's error message is a common problem fixed by resetting the PopProxy configuration https://social.technet.microsoft.com/Forums/ie/en-US/40eb0164-0bcf-499a-940… https://blog.zubairalexander.com/outlook-error-0x800ccc1/ Joseph Tam <jtam.home(a)gmail.com>

1 0

Problem with Dovecot and BlackBerry
by Luca Bertoncello 05 Apr '17

05 Apr '17

Hi all, i've got a strange behaviour with a BlackBerry Classic Phone (BBOS 10.3.2.2876) in combination with Dovecot 2.2.13 while trying to fetch mails. Before burying myself into debugging sessions, i try to get an understanding if the following is a Client- or a Server-specific error in the behaviour: CIGA8 UID FETCH 10009:10035 (UID FLAGS) (CHANGEDSINCE NOMODSEQ) CIGA8 BAD Error in IMAP command UID FETCH: Invalid CHANGEDSINCE modseq. Following the full conversation. ---- * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot on xxx ready. CIGA1 CAPABILITY * CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5 CIGA1 OK Pre-login capabilities listed, post-login capabilities have more. CIGA2 ID ("os" "BlackBerry 10" "os-version" "10.3.2.2876" "vendor" "rim" "device" "Classic" "name" "bbimap") * ID ("name" "Dovecot") CIGA2 OK ID completed. CIGA3 LOGIN xxx xxx * CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE CIGA3 OK Logged in CIGA4 CAPABILITY * CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE CIGA4 OK Capability completed. CIGA5 LIST "" "" * LIST (\Noselect) "." "" CIGA5 OK List completed. CIGA6 LIST "" "*" * LIST (\HasNoChildren) "." folder_a * LIST (\HasNoChildren) "." folder_b * LIST (\HasNoChildren) "." folder_c * LIST (\HasNoChildren) "." sent-mail * LIST (\HasNoChildren) "." folder_d * LIST (\HasNoChildren) "." folder_e * LIST (\HasNoChildren \Trash) "." Trash * LIST (\HasNoChildren \Drafts) "." Drafts * LIST (\HasNoChildren) "." folder_f * LIST (\HasNoChildren) "." folder_g * LIST (\HasNoChildren) "." INBOX CIGA6 OK List completed. CIGA7 SELECT INBOX (CONDSTORE) * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 7 EXISTS * 0 RECENT * OK [UIDVALIDITY 1391686038] UIDs valid * OK [UIDNEXT 10036] Predicted next UID * OK [HIGHESTMODSEQ 1608] Highest CIGA7 OK [READ-WRITE] Select completed (0.000 secs). CIGA8 UID FETCH 10009:10035 (UID FLAGS) (CHANGEDSINCE NOMODSEQ) CIGA8 BAD Error in IMAP command UID FETCH: Invalid CHANGEDSINCE modseq. CIGA9 LOGOUT * BYE Logging out CIGA9 OK Logout completed. ---- Thanks in advance! Luca Bertoncello (lucabert(a)lucabert.de)

4 3

Problem with acl and shared mailboxes
by Fabian 04 Apr '17

04 Apr '17

Hi there, we are currently have the following problem: User gustav(a)agreatdomain.de shares his INBOX to brunhilde(a)agreatdomain.com. But brunhilde can't subscribe that mailbox. host:~ # more //var/spool/mail/agreatdomain.com/gustav/Maildir/dovecot-acl owner akxeilprwts user=brunhilde(a)agreatdomain.com lprws host:~ # Doveadm acl debug request: host:~ # doveadm acl debug -u sieglinde(a)agreatdomain.com shared/gustav doveadm(sieglinde(a)agreatdomain.com): Error: Mailbox 'shared.gustav' in namespace 'shared/gustav/' doesn't exist in /var/spool/mail/agreatdomain.com/gustav//Maildir/.shared.gustav host:~ # In the debug logfile I can see the following message: Apr 03 10:29:18 imap(brunhilde(a)agreatdomain.com): Debug: acl: acl username = brunhilde(a)agreatdomain.com Apr 03 10:29:18 imap(brunhilde(a)agreatdomain.com): Debug: acl: owner = 0 Apr 03 10:29:18 imap(brunhilde(a)agreatdomain.com): Debug: acl vfile: Global ACLs disabled Apr 03 10:29:18 imap(brunhilde(a)agreatdomain.com): Debug: acl vfile: file /var/spool/mail/agreatdomain.com/gustav/Maildir/.shared.gustav/dovecot-acl not found Apr 03 10:29:18 imap(brunhilde(a)agreatdomain.com): Debug: acl: No lookup right to mailbox: shared/gustav Why is dovecot searching in .shared/.gustav instead of Maildir/ directly? Any ideas? My configuration: host:~ # doveconf -n # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 3.12.67-60.64.24-default x86_64 SUSE Linux Enterprise Server 12 (x86_64) ext3 auth_debug = yes auth_master_user_separator = * auth_mechanisms = plain login auth_verbose = yes debug_log_path = /var/log/dovecot.debug dict { sqlquota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no first_valid_uid = 480 lmtp_save_to_detail_mailbox = yes mail_debug = yes mail_gid = vmail mail_location = maildir:/var/spool/mail/%d/%u/Maildir:LAYOUT=fs mail_plugins = acl quota listescape mail_privileged_group = vmail mail_uid = dovecot managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { hidden = yes inbox = yes list = no location = prefix = separator = / subscriptions = yes } namespace { list = yes location = maildir:%%h/Maildir:INDEXPVT=~/Maildir/shared/%%u prefix = shared/%%n/ separator = / subscriptions = no type = shared } namespace Public { list = children location = maildir:/var/mail/%d/public:INDEXPVT=~/public:LAYOUT=fs prefix = Public/ separator = / subscriptions = no type = public } namespace inbox { inbox = no location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX/ separator = / subscriptions = yes type = private } passdb { args = /etc/dovecot/masteruser.%s driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_anyone = allow acl_shared_dict = file:/var/spool/mail/%d/shared-mailboxes.db quota = dict:User quota::proxy::sqlquota quota2 = dict:Shared quota::proxy::sqlquota quota_rule2 = INBOX/Trash:storage=+100M sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)d8ox1.int.pro-ite.de protocols = imap pop3 lmtp sieve service auth-worker { user = dovecot } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0666 } } service dict { unix_listener dict { group = vmail mode = 0660 user = dovecot } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl = no userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = acl quota listescape acl quota sieve } protocol lda { mail_plugins = acl quota listescape acl sieve } protocol imap { mail_plugins = acl quota listescape imap_quota imap_acl } host:~ # -- Kind regards, Fabian

2 3

Meaning of "protocol !indexer-worker"
by Angel L. Mateo 04 Apr '17

04 Apr '17

Hello, I'm configuring dovecot 2.2.28. Comparing with previous versions I have found now in 10-mail.conf the config: protocol !indexer-worker { # If folder vsize calculation requires opening more than this many mails from # disk (i.e. mail sizes aren't in cache already), return failure and finish # the calculation via indexer process. Disabled by default. This setting must # be 0 for indexer-worker processes. #mail_vsize_bg_after_count = 0 } I can see that indexer-worker is the index service in dovecot. But I don't what the '!' means in front of the service name. Any who can explain it to me? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

2 2

Users home path inside a sieve script
by Mark Constable 04 Apr '17

04 Apr '17

Perhaps I have not looked hard enough but is it possible to get at the current users auth userdb "home" (or $HOME) variable from inside a sieve script? Example?

3 3

Error: Virtual mailbox loops, Dovecot version 2.2.10
by dan＠redchops.com 03 Apr '17

03 Apr '17

I'm trying to follow the guide at https://wiki.dovecot.org/Plugins/Virtual for the 'Conversation' style virtual mailbox, but with a small change. I'd like the virtual mailboxes to be 'top level', which I found while searching through this list is accomplishable by putting the dovecot-virtual file in the root of the namespace location. My issue is this works perfectly fine for the All Mail virtual mailbox, but the Threaded mailbox fails with the error above. I tried creating a RealMail namespace, but that doesn't solve the issue either. I feel like I must be overlooking something simple; I could get this setup working if the virtual mailboxes shared a namespace and were subfolders, but I don't like that setup much (I'm trying to get my companies GMail users on to our own webmail client, it's features like this that I need to replicate with dovecot or they'll never leave their POP3 setups). I've attached the output of dovecot -n, and my virtual mailboxes look like this: # cat Threaded/dovecot-virtual All inthread refs x-mailbox INBOX # cat all/dovecot-virtual RealMail RealMail/* -RealMail/Trash -RealMail/Trash/* -RealMail/Spam -RealMail/Spam/* all I'd appreciate any insight in to this issue. If I try to access the Threaded Inbox through IMAP, I get this error specifically: a select "Threaded Inbox" a NO [SERVERBUG] Virtual mailbox open failed because of mailbox All: Internal error occurred. Refer to server log for more information. [2017-04-03 00:24:28] The relevant line being: Apr 3 00:24:28 mail dovecot: imap(dan(a)redchops.com): Error: Virtual mailbox loops: No information before or after. Thanks, -Dan

2 1

Re: Getting error on port 995
by Joseph Tam 03 Apr '17

03 Apr '17

Bhushan Bhosale writes: > I'm getting issue with port 995 by using Microsoft Outlook 2016 only. > The error on Microsoft Outlook showing "Your server does not support > the connection encryption type. Try changing the encryption method". > The error is only who is using Microsoft outlook2016. Kindly help. Help us help you. Please include output of "dovecot -n" and any relevant log entries. As a wild ass guess, I think maybe the client is using used "STARTTLS" intead of "SSL", or some other SSL requirement disagreement. Joseph Tam <jtam.home(a)gmail.com>

2 1

Mail list empty on my mailserver
by Philippe Forums 03 Apr '17

03 Apr '17

Hello, After changing NAS, I meet a problem when I go on my e-mail box with my webmail. Either e-mails do not appear anymore, or they appear but are "empty". When I look in the directory of the e-mails of my mailserver, these e-mails are present. I tried to rename files "dovecot.index*" and to restart dovecot but nothing can be done. To make the seesaw of a NAS towards an other one, I copied all the directory of mailserver to an external storage, and made the copy the other way on my new NAS. This directory is a mount to a NAS. Having well to look, it would seem whether it is a date problem, because the copy did not keep the real dates of e-mails and they thus find themselves dated the day of the copy. I know not at all how to get back all my e-mails in my webmail. Thank's for your help. PS : I'm french, sorry for my english. -- ##################### Philippe - Forums

2 2

Getting error on port 995
by Bhushan Bhosale 02 Apr '17

02 Apr '17

Dear Team, I'm getting issue with port 995 by using Microsoft Outlook 2016 only. The error on Microsoft Outlook showing "Your server does not support the connection encryption type. Try changing the encryption method". The error is only who is using Microsoft outlook2016. Kindly help. Thanks and Regards, Bhushan Bhosale

2 1

dsync replication
by George Dimakopoulos 31 Mar '17

31 Mar '17

Is it stable for dovecot 2.2.27 to implement DRBD (or HAST) on block level for maildir data replication instead of using dsync plugin? Regards, George

2 1

Slow performance with large folders over the Internet
by Shawn Heisey 31 Mar '17

31 Mar '17

Dovecot package version is 1:1.2.15-7+deb6u1. It is in Debian 6.0.10, using the Debian package. The server is in my basement at home, and is exposed to the Internet so I can fully access my mail from anywhere. I use IMAP for reading mail. I have a number of folders in my mailbox that have thousands of messages in them, from mailing lists. When I'm at home, I have a LAN connection to the server. It goes through a Cisco firewall that limits the connection speed to 100Mb/s. In this situation, I can open a folder with 25000 messages in it, click on the next unread message that Thunderbird did not know about before, and within a second or two, the message will download, allowing me to view it and reply. When I'm at work, with highly variable network latency between Thunderbird and the server, doing exactly the same thing takes a LOT longer. I have seen it take as long as 15 minutes for a single message. If I open a folder with only a few messages in it, it is fast. The server is not overloaded -- I can log into it with ssh and use "mutt -f" to open a folder directly. Loading thousands of messages into mutt takes a while, but I have no difficulty using the ssh connection and running commandline programs. This suggests that the IMAP communication between the server and the client involves a large amount of back and forth communication when the message count in the folder is high, possibly something for every message in the folder. It happens quickly on a LAN but crawls on a connection with high latency. I can understand it taking a few seconds longer on a high-latency link, but it takes minutes. I do plan on building a new server and migrating to Dovecot 2.x, but I haven't had the time to work on that. Is this a known problem? If so, is it fixed in 2.x? Thanks, Shawn

3 2

Studying dovecot source code (searching for mail_deliver_hook_set)
by chaouche yacine 30 Mar '17

30 Mar '17

Hello dovecot, I would like to study how dovecot manages quota, especially how it deals with the maildirsize file if one chooses to implement quota according to the maildir++ specification. I made a number of assumptions : 1. mail is (always/sometimes) delivered with the dovecot-lda binary, which source code is in src/lda. 2. mail is sent with the mail_deliver function which is called from src/lda/main.c and is defined in src/lib-lda/mail-deliver.c 3. mail_deliver function calls the deliver_mail function (it seems to be pointer to a function) 4. according to src/lib-lda/mail-deliver.h, deliver_mail is set with the mail_deliver_hook_set function. Here's what the comment says /* Sets the deliver_mail hook and returns the previous hook, which the new_hook should call if it's non-NULL. */ deliver_mail_func_t *mail_deliver_hook_set(deliver_mail_func_t *new_hook); The problem at this point is that I can't find where is this function called. A grep on the sources only reveals two results : -*- mode: grep; default-directory: "~/DOWNLOADS/APPS/dovecot-2.2.13/src/" -*- Grep started at Tue Mar 28 17:01:50 grep -nH -e 'mail_deliver_hook_set' -r . ./lib-lda/mail-deliver.c:428:deliver_mail_func_t *mail_deliver_hook_set(deliver_mail_func_t *new_hook) ./lib-lda/mail-deliver.h:103:deliver_mail_func_t *mail_deliver_hook_set(deliver_mail_func_t *new_hook); Grep finished (matches found) at Tue Mar 28 17:01:50 According to the changelog this function has been introduced back in 2010. I don't know if it's really used ? * I am working on the 2.2.13 sources because that's what's installed on my server. * I couldn't find a developers mailling listed in http://www.dovecot.org/mailinglists.html so I'm just posting this here. -- Yassine.

3 5

Email Push to Iphone
by mca＠caloro.ch 30 Mar '17

30 Mar '17

Hello Please exist in Dovecot 2.2.13 the E-Mail Push function? So that the Email on me Iphone are available at this moment that will be transfered, I see or found any other 3part software "Z-push", but it's this function are not included on dovecot? Thanks and regards Mauri

3 2

Using SpamProbe via only sieve scripts
by Mark Constable 30 Mar '17

30 Mar '17

FWIW this took me days to get right, and still needs tinkering, but it might make for a good starting point for anyone else needing something similar (ie; I don't use or need the overhead of spamassassin or rspamd). https://gist.github.com/markc/eeeb66ce30ea805af62631656cf86c4d Any comments or corrections on that page would be appreciated.

2 1

Re: cannot login to imap under load
by Gerard Ranke 29 Mar '17

29 Mar '17

Hi Maria, It does indeed run from systemd, so this is what's currently in the dovecot unit file ( /etc/systemd/system/dovecot.service ): [Unit] Description=Dovecot IMAP/POP3 email server After=local-fs.target network.target [Service] Type=simple ExecStart=/usr/sbin/dovecot -F NonBlocking=yes TasksMax=10000 LIMIT_NOFILE=10000 [Install] WantedBy=multi-user.target Unfortunately, it doesn't seem to work... Best, gerard On 29-03-17 13:13, María Arrea wrote: > > If you are running dovecot via systemd, increase NOFILES in the > dovecot startup script > > El 29/03/17 a las 13:07, Gerard Ranke escribió: >> Hi Steffen, >> >> On 29-03-17 12:38, Steffen Kaiser wrote: >>> On Tue, 28 Mar 2017, Gerard Ranke wrote: >>> >>>> dovecot: master: Error: service(imap): fork() failed: Resource >>>> temporarily unavailable >>>> dovecot: master: Error: service(imap): command startup failed, >>>> throttling for 2 secs >>> check out the ulimits for the Dovecot process. >>> >>> -- Steffen Kaiser >> Here they are: >> >> dovecot@mail:~> ulimit -a >> core file size (blocks, -c) 0 >> data seg size (kbytes, -d) unlimited >> scheduling priority (-e) 0 >> file size (blocks, -f) unlimited >> pending signals (-i) 256942 >> max locked memory (kbytes, -l) 64 >> max memory size (kbytes, -m) unlimited >> open files (-n) 10000 >> pipe size (512 bytes, -p) 8 >> POSIX message queues (bytes, -q) 819200 >> real-time priority (-r) 0 >> stack size (kbytes, -s) 8192 >> cpu time (seconds, -t) unlimited >> max user processes (-u) 256942 >> virtual memory (kbytes, -v) unlimited >> file locks (-x) unlimited >> >> This looks ok to me, but on startup, I still get: >> >> dovecot[9309]: Warning: fd limit (ulimit -n) is lower than required >> under max. load (1024 < 10000), because of service auth { client_limit } >> >> Strange thing is that dovecot still complains about the fd limit being >> 1024, while I set it to 10000. And how can a ulimit be too low 'because >> of service auth'? I don't get that at all. Thanks for your interest! >> >> gerard > >

3 3

cannot login to imap under load
by Gerard Ranke 29 Mar '17

29 Mar '17

Dear list, We moved our dovecot installation to a new vm, and ever since there are problems logging in to our imap server during office hours. ( Evenings and weekends are fine. ) Both the new and the old machine are dovecot 2.2.13. Symptoms: Logging in via imap gives: . OK Pre-login capabilities listed, post-login capabilities have more. a login <loginname> <passwd> * OK Waiting for authentication master process to respond.. closed whereas using the same credentials with pop3: +OK Dovecot ready. user <loginname> +OK pass <passwd> +OK Logged in. Our mail.err log gives lots of: dovecot: imap-login: Error: master(imap): Auth request timed out (received 0/12 bytes) dovecot: imap: Error: Login client disconnected too early dovecot: auth: Error: Master request 24000.918 not found dovecot: master: Error: service(imap): fork() failed: Resource temporarily unavailable dovecot: master: Error: service(imap): command startup failed, throttling for 2 secs Note thate we our users almost exclusively use imap. Normally we would have some 7 or 800 imap processes running and only a few pop3. Our doveconf -n output: # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 4.4.38-93-default x86_64 SUSE Linux Enterprise Server 12 (x86_64) auth_mechanisms = plain login default_client_limit = 2000 default_process_limit = 2000 default_vsz_limit = 512 M disable_plaintext_auth = no imap_client_workarounds = tb-extra-mailbox-sep import_environment = TZ DEBUG_OUTOFMEM DOVECOT_HOSTDOMAIN mail_location = maildir:~/Maildir mail_plugins = " quota" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { quota = maildir:User quota quota_rule = *:storage=1G quota_rule2 = Trash:storage=+10%% sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 lmtp sieve service anvil { client_limit = 8003 } service auth { client_limit = 10000 unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = dovecot mode = 0666 } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 4 service_count = 0 } service imap { process_limit = 2048 } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } process_min_avail = 4 service_count = 0 } service pop3 { process_limit = 2048 } ssl_cert = </etc/ssl/certs/hkuwildcardthawte.crt ssl_key = </etc/ssl/certs/hkuwildcardthawte.key ssl_protocols = !SSLv2 !SSLv3 userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf driver = ldap } protocol lmtp { mail_plugins = " quota sieve" } protocol lda { mail_plugins = " quota sieve" } protocol imap { mail_max_userip_connections = 10 mail_plugins = " quota imap_quota" } Thank you all for any insight, it will be much appreciated! Best regards, gerard

3 5

pigeonhole / vacation
by A. Schulze 29 Mar '17

29 Mar '17

Hello, we use the sieve vacation module to answer messages for certain mailboxes. vacation send back answers to most but not all messages wich is fine and intended. .dovecot.sieve looks like this: require ["vacation", "variables"]; if header :matches "subject" "*" { vacation :subject "Automatic response to: ${1}" "thanks for your message"; keep; } But now I would like to distinct messages that where answered from those where the vacation module did not send back a message. Is it possible to store answered messages in one folder and unanswered in an other? # probably invalid sieve syntax if vacation .... { fileinto "answered/"; stop; else fileinto "unanswered/"; stop; } After reading RFC 5230 I feel it's not possible at all :-/ Andreas

2 1

Re: Email Push to Iphone
by Ricardo Branco 29 Mar '17

29 Mar '17

there is this plugin to use APNS to notify phones, its a faf though as you need a legal OSX Server to generate the signing keys, I never ended up implementing it. https://github.com/st3fan/dovecot-xaps-daemon Aki Tuomi wrote on 29/03/2017 07:29: > > On 29.03.2017 07:24, mca(a)caloro.ch wrote: >> Hello >> >> >> >> Please exist in Dovecot 2.2.13 the E-Mail Push function? >> >> >> >> So that the Email on me Iphone are available at this moment that will be >> transfered, I see or found any other 3part software "Z-push", but it's this >> function are not included on dovecot? >> >> >> >> Thanks and regards >> >> Mauri >> >> > There exists a push notification framework for dovecot, but it does not support iPhone push directly. See https://wiki2.dovecot.org/Plugins/PushNotification > > Aki

1 0

Tip: update dovecot MD5 password from PAM
by Steinar Bang 29 Mar '17

29 Mar '17

This is a PAM module that listens for password changes, and will update the MD5 password for a user, in a file that dovecot can read, when the user's password is changed: https://github.com/steinarb/pam_dovecotmd5pwd Caveat emptor! (Works for me...! :-) )

5 9

The challenge of customizing Dovecot
by Robert Moskowitz 29 Mar '17

29 Mar '17

I have been running Dovecot for sometime, but I have just used someone else efforts on customizing it. Many of these throw out the dovecot/conf.d files for a single dovecot.conf with no explanation on what does what. So tell you a few conf.d files to edit. So over the past few days, I have rolled up my sleeves and did my best to work out how to modify the proper conf.d files. To 'stay true' to the Dovecot maintainer's config organization. The target is Centos7 with Dovecot 2.2.10-7 It was HARD! Besides dovecot.conf, I had to modify 13 conf.d files. Add 3 .ext files in /etc/dovecot, and set up sieve. I will soon have my total instructions available on my server, but to share with you what I have done for Dovecot customization and maybe to get some recommendations on improvements. For the most part, I have used SED to modify the conf files. I use a few env variables: your_domain_tld= your_host_only= your_host_tld=$your_host_only.$your_domain_tld Postfix_Database_Password= What follows are the pieces of my customization, all comments welcomed (this is NOT adequately tested! That is later in the week!): sed -i -e "/^#protocols/s/$/ sieve/w /dev/stdout" /etc/dovecot/dovecot.conf sed -i -e "s/^#protocols/protocols/w /dev/stdout" /etc/dovecot/dovecot.conf sed -i -e "s/#quota = /sqlquota = /w /dev/stdout" /etc/dovecot/dovecot.conf sed -i -e "/^auth_mechanisms/s/$/ login/w /dev/stdout" /etc/dovecot/conf.d/10-auth.conf sed -i -e 's/^#!include auth-sql.conf.ext/!include auth-sql.conf.ext/w /dev/stdout' /etc/dovecot/conf.d/10-auth.conf sed -i -e "0,/#userdb {/ s/#userdb {/userdb {/w /dev/stdout" /etc/dovecot/conf.d/auth-sql.conf.ext sed -i -e "s/# driver = prefetch/ driver = prefetch\n }/w /dev/stdout" /etc/dovecot/conf.d/auth-sql.conf.ext sed -i -e "/^#mail_location/s/$/maildir:\/home\/vmail\/%d\/%n/w /dev/stdout" /etc/dovecot/conf.d/10-mail.conf sed -i -e "s/^#mail_location/mail_location/w /dev/stdout" /etc/dovecot/conf.d/10-mail.conf sed -i -e "s/first_valid_uid = 1000/first_valid_uid = 101/w /dev/stdout" /etc/dovecot/conf.d/10-mail.conf sed -i -e "s/#first_valid_gid = 1/first_valid_gid = 12/w /dev/stdout" /etc/dovecot/conf.d/10-mail.conf sed -i "/unix_listener auth-userdb/ a mode = 0666\n user = vmail\n group = mail" /etc/dovecot/conf.d/10-master.conf sed -i "/#unix_listener \/var\/spool/ a mode = 0666\n user = postfix\n group = postfix\n }" /etc/dovecot/conf.d/10-master.conf sed -i -e "s/#unix_listener \/var\/spool/unix_listener \/var\/spool/w /dev/stdout" /etc/dovecot/conf.d/10-master.conf sed -i "/unix_listener dict/ a mode = 0666\n user = vmail\n group = mail" /etc/dovecot/conf.d/10-master.conf sed -i -e "s/^mode/ mode/w /dev/stdout" /etc/dovecot/conf.d/10-master.conf sed -i -e "s/dovecot\/certs\/dovecot.pem/tls\/certs\/$your_host_tld.crt/w /dev/stdout" /etc/dovecot/conf.d/10-ssl.conf sed -i -e "s/dovecot\/private\/dovecot.pem/tls\/private\/$your_host_tld.key/w /dev/stdout" /etc/dovecot/conf.d/10-ssl.conf sed -i -e "/^#postmaster_address/s/$/ postmaster@$your_domain_tld/w /dev/stdout" /etc/dovecot/conf.d/15-lda.conf sed -i -e "s/^#postmaster_address/postmaster_address/w /dev/stdout" /etc/dovecot/conf.d/15-lda.conf sed -i "/#mail_plugins/ a mail_plugins = quota sieve" /etc/dovecot/conf.d/15-lda.conf sed -i -e "s/^mail_plugins/ mail_plugins/w /dev/stdout" /etc/dovecot/conf.d/15-lda.conf sed -i -e "s/^#lda_mailbox_autocreate = no/lda_mailbox_autocreate = yes/w /dev/stdout" /etc/dovecot/conf.d/15-lda.conf sed -i -e "s/^#lda_mailbox_autosubscribe = no/lda_mailbox_autosubscribe = yes/w /dev/stdout" /etc/dovecot/conf.d/15-lda.conf sed -i "/#mail_plugins / a mail_plugins = quota imap_quota trash" /etc/dovecot/conf.d/20-imap.conf sed -i -e "s/^mail_plugins/ mail_plugins/w /dev/stdout" /etc/dovecot/conf.d/20-imap.conf sed -i "/#imap_client_workarounds/ a imap_client_workarounds = delay-newmail" /etc/dovecot/conf.d/20-imap.conf sed -i "/#mail_plugins/ a mail_plugins = sieve" /etc/dovecot/conf.d/20-lmtp.conf sed -i -e "s/^mail_plugins/ mail_plugins/w /dev/stdout" /etc/dovecot/conf.d/20-lmtp.conf sed -i -e "s/^#lmtp_save_to_detail_mailbox = no/lmtp_save_to_detail_mailbox = yes/w /dev/stdout" /etc/dovecot/conf.d/20-lmtp.conf sed -i -e "s/#service managesieve-login/service managesieve-login/w /dev/stdout" /etc/dovecot/conf.d/20-managesieve.conf sed -i -e "s/#inet_listener sieve {/inet_listener sieve {/w /dev/stdout" /etc/dovecot/conf.d/20-managesieve.conf sed -i -e "s/# port = 4190/ port = 4190\n }/w /dev/stdout" /etc/dovecot/conf.d/20-managesieve.conf sed -i "/#vsz_limit/ a }" /etc/dovecot/conf.d/20-managesieve.conf sed -i "/#mail_plugins/ a mail_plugins = quota" /etc/dovecot/conf.d/20-pop3.conf sed -i -e "s/^mail_plugins/ mail_plugins/w /dev/stdout" /etc/dovecot/conf.d/20-pop3.conf sed -i "/#pop3_client_workarounds/ a pop3_client_workarounds = outlook-no-nuls oe-ns-eoh" /etc/dovecot/conf.d/20-pop3.conf sed -i -e "s/#acl = /acl = /w /dev/stdout" /etc/dovecot/conf.d/90-acl.conf sed -i -e "s/#sieve_before =/sieve_before = \/home\/sieve\/globalfilter.sieve/w /dev/stdout" /etc/dovecot/conf.d/90-sieve.conf cat <<EOF>>/etc/dovecot/conf.d/90-quota.conf || exit 1 plugin { quota = dict:user::proxy::sqlquota trash = /etc/dovecot/dovecot-trash.conf.ext } EOF cat <<EOF>/etc/dovecot/dovecot-trash.conf.ext || exit 1 # Spam mailbox is emptied before Trash 1 Spam # Trash mailbox is emptied before Sent # 2 Trash # If both Sent and "Sent Messages" mailboxes exist, the next oldest message # to be deleted is looked up from both of the mailboxes. # 3 Sent # 3 Sent Messages EOF cat <<EOF>/etc/dovecot/dovecot-sql.conf.ext || exit 1 driver = mysql connect = host=localhost dbname=postfix user=postfix password=$Postfix_Database_Password default_pass_scheme = MD5-CRYPT # following should all be on one line. password_query = SELECT username as user, password, concat('/home/vmail/', maildir) as userdb_home, concat('maildir:/home/vmail/', maildir) as userdb_mail, 101 as userdb_uid, 12 as userdb_gid FROM mailbox WHERE username = '%u' AND active = '1' # following should all be on one line user_query = SELECT concat('/home/vmail/', maildir) as home, concat('maildir:/home/vmail/', maildir) as mail, 101 AS uid, 12 AS gid, CONCAT('*:messages=30000:bytes=', quota) as quota_rule FROM mailbox WHERE username = '%u' AND active = '1' EOF cat <<EOF>/etc/dovecot/dovecot-dict-sql.conf.ext || exit 1 connect = host=localhost dbname=postfix user=postfix password=$Postfix_Database_Password map { pattern = priv/quota/storage table = quota2 username_field = username value_field = bytes } map { pattern = priv/quota/messages table = quota2 username_field = username value_field = messages } EOF mkdir /home/sieve cat <<EOF>/home/sieve/globalfilter.sieve || exit 1 require "fileinto"; if header :contains "X-Spam-Flag" "YES" { fileinto "Spam"; } if header :contains "subject" "***SPAM***" { fileinto "Spam"; } EOF sievec /home/sieve/globalfilter.sieve chown -R vmail:mail /home/sieve

4 8

Re: UID Purge?
by Aki Tuomi 28 Mar '17

28 Mar '17

On 28.03.2017 10:55, Kevin Myers wrote: >> Does this happen if you do this on wire? >> >> telnet localhost 143 >> a LOGIN username password >> s SELECT INBOX >> s STORE 1:1 FLAGS (\Deleted) # or some other message-set >> n NOOP >> l LOGOUT >> >> Aki > Good point. No. And if I just delete it in Thunderbird (my client) it > does as it's told and just marks it deleted. Maybe it's a > Thunderbird/Dovecot thing? you could try looking at https://wiki2.dovecot.org/Debugging/Rawlog to find out. Aki

3 4

UID Purge?
by Kevin 28 Mar '17

28 Mar '17

Hi, I've just migrated to Dovecot from cyrus-imapd, and I notice that when I move emails from one folder to another they appear to be automatically marked deleted (expected) and also purged (not expected). With cyrus, I am used to emails being marked deleted, but still existing until a manual purge (expunge). Is this normal behaviour with Dovecot, and is it configurable? Thanks. Kevin.

2 1