- dovecot - dovecot.org

[Dovecot] Couldn't drop privileges
by LuKreme 15 Aug '13

15 Aug '13

attempts to login result in: dovecot: imap-login: Login: user=<lists@*munged*>, method=PLAIN, rip=ip.xx.yy.zz, lip=75.148.117.91, mpid=75104, TLS, session=<cBjCqf/jdwAXGJaN> dovecot: imap(lists@*munged*): Error: user lists@*munged*: Couldn't drop privileges: User is missing UID (see mail_uid setting) dovecot: imap(lists@*munged*): Error: Internal error occurred. Refer to server log for more information. Local (shell) user authentication works fine. It looks to me like the authentication is working based on the first line, so I don't think the issue is in the dovecot-sql.conf.ext $ cat dovecot-sql.conf.ext driver = mysql connect = host=localhost dbname=postfix user=dovecot password=dovecot default_pass_scheme = MD5-CRYPT password_query = select password from mailbox where username ='%u' user_query = select maildir from mailbox where username = '%u' # home is set in userdb static, kept for history #user_query = select concat('/usr/local/virtual/', maildir) from mailbox where username = '%u' #user_query = select concat('/usr/local/virtual/', maildir), 'vpopmail' as uid, 'postfix' as gid, from mailbox where username = '%u' #iterate_query = SELECT username AS user FROM users # 2.2.5: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 9.1-RELEASE i386 auth_mechanisms = plain login disable_plaintext_auth = no mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox NotJunk { auto = subscribe } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } userdb { args = uid=vpopmail gid=postfix home=/usr/local/virtual/%u driver = static } I have also tried: userdb { args = uid=vpopmail gid=postfix driver = static } sql users all have their mail in /usr/local/virtual/lists@*munged* $ ls -lsd /usr/local/virtual/lists\@*munged* 8 drwxr-xr-x 12 vpopmail postfix 512 Aug 14 21:40 /usr/local/virtual/lists\@*munged* [New thread because the old one's original issue is solved] -- BUGS: There is no conversion specification for the phase of the moon." strftime(3) man page

2 7

[Dovecot] Error: dict client sent broken reply
by Chris Richards 15 Aug '13

15 Aug '13

I've been mucking about, experimenting with the expire plugin and using a dictionary. I've got the iteration query working when I do a normal expunge using: doveadm expunge -A mailbox "INBOX.Trash" savedbefore 1w and expunging works as expected. However, I've got over 12,000 accounts on this server, so I was hoping using the expire plugin to could help out. I've configured the plugin, and things kinda work, except that somewhere between 3700 and 3800 users, I abort with this: doveadm(someuseraccount@somedomain): Error: dict client (/var/run/dovecot/dict) sent broken reply doveadm(someuseraccount@somedomain): Error: Dictionary iteration failed doveadm: Error: Failed to iterate through some users It consistently fails at the same user. If I delete that user from the expire database, then it appears to fail on the next user. I also see this in the logs: dovecot: dict: Error: dict client: COMMIT: Can't commit while iterating I've absolutely no idea where to go from here to troubleshoot this. Any guidance would be appreciated. Thanks, Chris doveconf -n: # 2.1.12: /etc/dovecot/dovecot.conf # OS: Linux 3.7.5-hardened-r1 x86_64 Gentoo Base System release 2.1 ext4 auth_master_user_separator = * auth_mechanisms = plain login auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@& auth_verbose_passwords = plain default_process_limit = 200 dict { quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no login_greeting = Awaiting command... mail_location = maildir:/home/vmail/%d/%n/Maildir mail_plugins = " quota" mail_privileged_group = 100 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX. separator = . type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { expire = Trash 7 expire2 = Trash/* 7 expire3 = Spam 7 quota = dict:User quota:%u:proxy::quota quota_rule = *:storage=200M quota_warning = storage=99%% quota-warning 99 %n %d quota_warning2 = storage=95%% quota-warning 95 %n %d quota_warning3 = storage=80%% quota-warning 80 %n %d quota_warning4 = -storage=95%% quota-warning 'less than 95' %n %d sieve = ~/.dovecot.sieve sieve_default = /home/vmail/dovecot/sieve/default.sieve sieve_dir = ~/sieve sieve_global_dir = /home/vmail/dovecot/sieve } protocols = imap pop3 sieve lmtp service auth-worker { user = $default_internal_user } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = dovecot mode = 0666 user = dovecot } user = $default_internal_user } service dict { unix_listener dict { mode = 0600 user = vmail } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service quota-warning { executable = script /etc/dovecot/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } ssl_cert = </etc/ssl/dovecot/server.pem ssl_key = </etc/ssl/dovecot/server.key userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = sieve quota postmaster_address = postmaster@domain } protocol lda { mail_plugins = " quota sieve quota" } protocol imap { mail_max_userip_connections = 20 mail_plugins = " quota quota imap_quota" } protocol pop3 { mail_plugins = " quota quota" } >From dovecot-dict-sql.conf.ext: connect = host=localhost dbname=maildb user=dbuser password=dbpass # CREATE TABLE quota ( # username varchar(100) not null, # bytes bigint not null default 0, # messages integer not null default 0, # primary key (username) # ); map { pattern = priv/quota/storage table = quota_usage username_field = address value_field = quota_bytes } map { pattern = priv/quota/messages table = quota_usage username_field = address value_field = quota_messages } # CREATE TABLE expires ( # username varchar(100) not null, # mailbox varchar(255) not null, # expire_stamp integer not null, # primary key (username, mailbox) # ); map { pattern = shared/expire/$user/$mailbox table = expires value_field = expire_stamp fields { address = $user folder = $mailbox } } dovecot-sql.conf.ext driver = mysql connect = host=/var/run/mysqld/mysqld.sock dbname=maildb user=dbuser password=dbpass default_pass_scheme = PLAIN user_query = SELECT homedir AS home, maildir AS mail, uid AS uid, gid AS gid, quota_rule AS quota_rule FROM email WHERE address = CONVERT('%u' USING latin1) AND is_alias=0; password_query = SELECT address AS user, NULL as password, homedir AS userdb_home, maildir as userdb_mail, uid AS userdb_uid, gid AS userdb_gid, quota_rule AS userdb_quota_rule, 'Y' AS nopassword FROM email WHERE address = CASE WHEN ('%d' = '') THEN CONCAT (CONVERT('%n' USING latin1), '@bordernet.com.au') ELSE CONVERT('%u' USING latin1) END AND is_alias=0 AND CheckPasswordFunc(CONVERT('%n' USING latin1), '%d', CONVERT('%w' USING latin1), '%r'); iterate_query = SELECT address AS user FROM email WHERE is_alias=0 AND length(password) > 1

3 7

[Dovecot] Sieve-storage: couldn't find storage root directory
by Asai 15 Aug '13

15 Aug '13

Greetings, Using Dovecot 2.2.4. In my DSync logs, I'm getting the error message: Error: sieve-storage: couldn't find storage root directory; sieve_dir was left unconfigured and autodetection failed However, I have the following configuration set: plugin { sieve = /vmail/%d/%n/sievescript sieve_dir = /vmail/%d/%n/ } Please, if you have a moment, tell me what I'm doing wrong here. Thank you. -- --Asai

3 5

[Dovecot] Quota to use limits from LDAP and usage from FS
by Frank Steinberg 15 Aug '13

15 Aug '13

Hi, I'm new to Dovecot (switching from Cyrus). I'm using Dovecot 2.1.7 from Ubuntu 13.04. Maildir data is stored on a Linux ext4 filesystem with quotas. I would like to use mail quota in a way, so that the usage values are taken from the filesystem's quota system by the "fs" backend, while the per-user limits get read from LDAP. Due to debugging messages, it's my impression that reading the limits from LDAP works quite well when the user process starts, but when IMAP access actually takes place, the fs backend uses the filesystem's soft limits. Can anybody confirm this behavior or is there a way to achieve what I intend? -frank

1 0

[Dovecot] Dovecot mailbox in read-only mode, Permanentflags empty
by Tommi A 15 Aug '13

15 Aug '13

Hi, I have installed Postfix + Dovecot 2.2.5 on a Fresh Arch Linux server (using Arch Linux repository packages). When accessing mailbox through Dovecot IMAP, all user mailboxes are in READ-ONLY mode. Here is a snippet from IMAP telnet conversation (after successful login). a LIST "" "*" * LIST (\HasNoChildren) "." INBOX a OK List completed. a EXAMINE INBOX * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS ()] Read-only mailbox. * 1 EXISTS * 1 RECENT * OK [UNSEEN 1] First unseen. * OK [UIDVALIDITY 1376459543] UIDs valid * OK [UIDNEXT 2] Predicted next UID * OK [NOMODSEQ] No permanent modsequences a OK [READ-ONLY] Examine completed (0.000 secs). I can read the messages but trying to delete results in: a uid store 1 +flags.silent (\Seen \Deleted) a OK Store ignored with read-only mailbox. I have tried ALOT of different settings (mbox/maildir/acl) but nothing seems to help, also no error messages are found in any logfiles. I noticed from mailing list archive that Dovecot has had Permanentflags problem in the past, but bugs should have been fixed. Is the bug back or is there something wrong with my configuration? Best Regards Tommi P.S. Here is my dovecot configuration: # 2.2.5: /etc/dovecot/dovecot.conf # OS: Linux 3.10.5-1-ARCH x86_64 auth_debug = yes debug_log_path = /var/log/dovecot_debug.log info_log_path = /var/log/dovecot.log mail_debug = yes mail_full_filesystem_access = yes mail_location = maildir:~/Maildir namespace inbox { hidden = no inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = type = private } passdb { driver = pam } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd }

3 4

[Dovecot] force ciphers order for clients
by Robert Schetterer 14 Aug '13

14 Aug '13

Hi Timo, reading this http://www.kuketz-blog.de/perfect-forward-secrecy-mit-apple-mail/ it looks like DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA can be forced in use with apple mail ( if no ECDHE is possible ,by missing openssl 1.x etc, seems that apple mail tries ECDHE first if fails its going to use RSA-AES128-SHA ) force soltution as tried ssl_cipher_list = DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!CBC:!PSK:!SRP:!DSS:!SSLv2:!RC4 so far so good , it worked nice with recent thunderbird too but it fails with outlook 2003 pop3s / win7 so i thought about using an order like this ssl_cipher_list = DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ALL:!LOW:!SSLv2:!EXP:!aNULL does that makes sense ? ( using dove 2.1.x / openssl 0.9x ) Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

3 7

Re: [Dovecot] force ciphers order for clients
by Reindl Harald 14 Aug '13

14 Aug '13

Am 14.08.2013 22:04, schrieb Robert Schetterer: > Am 14.08.2013 21:30, schrieb Reindl Harald: >> Am 14.08.2013 21:19, schrieb Robert Schetterer: >>>>> thx Harald, upgrading openssl to 1.x and using dove 2.2.5 is no option >>>>> at my setup lucid ubuntu yeter >>>> >>>> so you can practically forget it >>> >>> perhaps true forever, as long old clients are around, cause the server >>> can only workaround them >> >> not absolutely >> >> playing around with the setings below and https://www.ssllabs.com/ssltest/ >> turned out that the order is what counts, and that is really tricky >> >> i played around 5 hours with this absoluetly crap > > that sounds good, so you allready did many real world tests yeah and the bad is that it prove *currently* it is imposible to have perfect forward secrecy for most real world clients without open other vectors leading to fall back to a yellow B really sad is that playing around turned out how hard it is to force different clients at the same time to a good cipher and how one change in the order refelcts the overall result and facing this: "ssllabs" simulates negotiation of real clients (skipped in the screenshot) but we are missing the same for mailservers and thats why my conclusion is that we are hopeless as admins and can only offer things but not do much in case of clients using them __________________________ attached the current results for our webservers the only positive from the current resullt is that the sever supports ciphers for "Perfect Forward Secrecy" and the negative that it is only theory, so i stay at this config and say "dear browser vendors, i support it so use it with your damned client" because i can hardly use a config which get a yellow CVSS on security-audits to support FS for you" well, i could reven aise up "key exchange" to 90/95 but after that "FS" would not be listed at all the real sad thing is that the "FS" you see is not used by current clients which mostly use RC4 and if you add !MEDIUM the most start using FS-ciphers but are vulerable by BEAST-attack which let you fall down to grade B if i add !MEDIUM to dovecot Thunderbird does no longer connect at all

1 1

[Dovecot] weird situation with pop3/imap proxy and postfix authentication
by Leonardo Rodrigues 14 Aug '13

14 Aug '13

Hello dovecot mailing list, I have a server running postfix and dovecot. I havea configuration on dovecot that allows me to provide imap4/pop3 messages for local hosted users as well as for proxied users on other servers. Basically, i have a simple MySQL table (imapproxy) with two fields, 'domain' and 'host'. My password_query isa 'UNION' query, exactly like: password_query=select endereco as user, password, '/var/spool/mail/%u' as userdb_home, 'maildir:/var/spool/mail/%u' as userdb_mail, 8 as userdb_uid, 12 as userdb_gid, concat('*:storage=', quota) as userdb_quota_rule, 'Trash:storage=+100M' as userdb_quota_rule2, 'Y' as proxy_maybe, '10.252.38.2' as host from emails where endereco = '%u' and ativa = '1' UNION select NULL as user, '%w' as password, NULL as userdb_home, NULL as userdb_mail, NULL as userdb_uid, NULL as userdb_gid, NULL as userdb_quota_rule, NULL as userdb_quota_rule2, 'Y' as proxy_maybe, imapproxy.host as host from imapproxy where imapproxy.dominio = '%d' the 10.252.38.2 address, on the query, is my local server when this query received a local user, from a domain that is NOT listed on the imapproxy table, results are like: *************************** 1. row *************************** user: localuser(a)domain.com.br password: (SSHA256 encrypted password) userdb_home: /var/spool/mail/localuser(a)domain.com.br userdb_mail: maildir:/var/spool/mail/localuser@domain.com.br userdb_uid: 8 userdb_gid: 12 userdb_quota_rule: *:storage=51200 userdb_quota_rule2: Trash:storage=+100M proxy_maybe: Y host: 10.252.38.2 when it receives a proxied domain, results are: *************************** 1. row *************************** user: NULL password: password userdb_home: NULL userdb_mail: NULL userdb_uid: NULL userdb_gid: NULL userdb_quota_rule: NULL userdb_quota_rule2: NULL proxy_maybe: Y host: 10.254.116.9 This is working just fine for IMAP4 and POP3 proxying. Local users (which domains are NOT listed on imapproxy table) can successfully login to their accountsas well as users from domains listed on imapproxy table can successfully login to their accounts. On SMTP authentication, tough, things are not so fine. SMTP authentication is provided by dovecot to postfix: [root@correio dovecot]# postconf mail_version mail_version = 2.7.1 [root@correio dovecot]# smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = yes smtpd_sasl_path = /var/spool/postfix/private/auth smtpd_sasl_security_options = noanonymous smtpd_sasl_type = dovecot service auth is defined on dovecot confs as: service auth { unix_listener auth-userdb { mode = 0600 user = mail group = mail } # Postfix smtp-auth unix_listener /var/spool/postfix/private/auth { mode = 0660 user = postfix group = postfix } } and it seems to be allowing ANYuser on any domain listed on the imapproxy table domains to login, even if the user does not exists or provides wrong password. In fact, it seems dovecot returns OK to postfix even without trying to contact the assigned server to that domain, as i cannot find any password-failed-specific log to that user on the specific server. Example: (a proxied domain) [root@correio dovecot]# telnet mail.proxieddomain.com.br 110 Trying 10.254.116.9... Connected to mail.proxieddomain.com.br (10.254.116.9). Escape character is '^]'. +OK Dovecot ready. user teste(a)proxieddomain.com.br +OK pass password -ERR Authentication failed. (i can successfully find this auth trial and fail on 10.254.116.9 logs) but on SMTP authentication, i have: [root@correio dovecot]# perl -MMIME::Base64 -e \ 'print encode_base64("teste\@proxieddomain.com.br\0teste\@proxieddomain.com.br\0password");' xxxxxxxxx(not the real encoded pass)xxxxxxxxxxxxxxxx= [root@correio dovecot]# [root@correio dovecot]# telnet localhost 587 Trying 127.0.0.1... Connected to localhost.localdomain (127.0.0.1). Escape character is '^]'. 220 mail.domain.com.br ESMTP EHLO test 250-mail.domain.com.br [ ... ] AUTH PLAIN (encoded string returned by perl encode_base64) 235 2.7.0 Authentication successful (and i cannot even find any authentication log, fail or success, on the specific server for proxieddomain.com.br) dovecot version is: [root@correio dovecot]# dovecot --version 2.2.2 [root@correio dovecot]# what am i doing wrong here ? How to have dovecot to really check users before giving OK to postfix on SMTP authentications ? Thanks for any hints ! -- Atenciosamente / Sincerily, Leonardo Rodrigues Solutti Tecnologia http://www.solutti.com.br Minha armadilha de SPAM, NÃO mandem email gertrudes(a)solutti.com.br My SPAMTRAP, do not email it

1 0

[Dovecot] Patch to log the cipher suite used for TLS
by Matthias Scheler 14 Aug '13

14 Aug '13

Hello, the attached patch for Dovecot 2.2.4 improves the logging to include information about the cipher suite used for a TLS connection. Here is an example log line: Aug 13 21:49:55 colwyn dovecot: imap-login: Login: user=<tron>, method=CRAM-MD5, rip=2001:8b0:114:1::2, lip=2001:8b0:114:1::2, mpid=10567, TLS=<TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)>, session=<ZkEhYtrjSgAgAQiwARQAAQAAAAAAAAAC> This will e.g. allow you to find out that mobile phones use rather week cipher suites (128bit keys, no PFS). There is also something else I noticed. If I switch "mutt" (which generated the above log line) from using IMAP on port 143 and "STARTTLS" to use IMAPS on port 993 I get TLS 1.2: Aug 14 07:44:59 colwyn dovecot: imap-login: Login: user=<tron>, method=CRAM-MD5, rip=2001:8b0:114:1::2, lip=2001:8b0:114:1::2, mpid=1156, TLS=<TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)>, session=<0js/suLj9gAgAQiwARQAAQAAAAAAAAAC> Not sure why TLS 1.2 is only used in this case. It might be "mutt" doing that. Kind regards -- Matthias Scheler http://zhadum.org.uk/

2 2

[Dovecot] SA54438
by Timo Sirainen 14 Aug '13

14 Aug '13

http://secunia.com/advisories/54438/ Since I already got 3 private mails about this, here's the same reply for everyone (actually updated, now that I looked at the code): This was a v2.2-only bug. And it isn't really a DoS.. It only caused the one pop3 process to crash in assert, which was handling only the connection that had already disconnected. (Unless you were running a non-recommended configuration with multiple clients per process.) So the only problem it caused was that Dovecot logged an assert error and maybe wrote a core dump.

3 2

[Dovecot] Dovecot security
by Jay Khashan 14 Aug '13

14 Aug '13

Hi, THIS IS URGENT I have Debian Linux machine which I installed as a mail server with postfix, and dovecot. my mail server is setup to use SMTP relay. I currently have ports 143, 995, 25 & SSMTP ports open. in the last few days I have been under attack where email is being sent to fake email address for example xxx(a)evg-mail.org which does not exist in the mysql db. I need to figure out and lock down dovecot, because I believe the attack is some kind of virus /spyware. I need to know what statement in dovecot.conf or main.cf (postfix) I can modify to lock it down. Also open to install software to combat this kind of attack. Let me know what configuration files, info do you need to help out Many Thanks ~Jay

4 3

[Dovecot] HG changes affecting received headers
by Thomas Leuxner 13 Aug '13

13 Aug '13

Let me say this is a rather cosmetic issue, but it appears with the latest commits (around 2.2.5 release) the scheme of 'Received' headers has changed for LMTP: 1) Inet socket: Return-Path: <dfn-adv-bounces(a)dfn-cert.de> Delivered-To: <tlx(a)leuxner.net> Received: from spectre.leuxner.net ([188.138.0.199]) by spectre.leuxner.net (Dovecot) with LMTP id 8AkXDF5cA1LvDgAAZ53dLw for <tlx(a)leuxner.net>; Thu, 08 Aug 2013 10:52:46 +0200 2) UNIX socket: Return-Path: <dfn-adv-bounces(a)dfn-cert.de> Delivered-To: <tlx(a)leuxner.net> Received: from spectre.leuxner.net ([]) by spectre.leuxner.net (Dovecot) with LMTP id q8WuGflcA1I3DwAAZ53dLw for <tlx(a)leuxner.net>; Thu, 08 Aug 2013 10:55:21 +0200 3) Old (Pre 2.2.5) build, UNIX socket: Return-Path: <dfn-adv-bounces(a)dfn-cert.de> Delivered-To: <tlx(a)leuxner.net> Received: from spectre.leuxner.net by spectre.leuxner.net (Dovecot) with LMTP id 8NiKKX0h+lFRIAAAZ53dLw for <tlx(a)leuxner.net>; Thu, 01 Aug 2013 10:51:09 +0200 While it probably should resolve the FQDN in 1) (Postfix does), not sure what it should do with a UNIX socket in 2). Previously as shown in 3) it had none of it... Thomas

2 5

[Dovecot] fail2ban
by Aldo Reset 13 Aug '13

13 Aug '13

hi dovecot filter for fail2ban do not match: dovecot: pop3-login: Aborted login (tried to use disallowed plaintext auth): user=<>, rip=67 dovecot filter: failregex = (?: pop3-login|imap-login): (?:Authentication failure|Aborted login \(auth failed|Aborted login \(tried to use disabled|Disconnected \(auth failed).*rip=(?P<host>\S*),.* bst regards.

2 2

[Dovecot] Can't take user info from an alternate file
by dave＠661.org 12 Aug '13

12 Aug '13

I'm positive I did everything right to get Dovecot to take usernames and passwords from /etc/dovecot/users, but it still goes for /etc/passwd and /etc/shadow. The format of /etc/dovecot/users is "alice:{PLAIN}plaintextpassword" Here's my "doveconf -n": # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-51-virtual x86_64 Ubuntu 12.04.2 LTS auth_debug = yes auth_verbose = yes auth_verbose_passwords = plain hostname = papasmurf.foobar.com listen = * mbox_write_locks = fcntl passdb { args = scheme=PLAIN-MD5 username_format=%n /etc/dovecot/users driver = passwd-file } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0664 user = postfix } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = username_format=%n /etc/dovecot/users driver = passwd-file } I'm using Ubuntu Precise and version 2.0.19 of Dovecot. -- David Griffith dave(a)661.org

2 5

[Dovecot] Disconnected (no auth attempts)
by Eric Broch 12 Aug '13

12 Aug '13

Hello list, I have a user who is not able to 'get' email using the 'Get Mail' option in his Thunderbird Client. The error on the server is the following: [Dovecot] dovecot: imap-login: Disconnected (no auth attempts) : rip 192.168.7.7, lip 192.168.7.12, TLS This user is able to receive mail on his phone, however. What does this error mean? Eric <http://www.dovecot.org/list/dovecot/2012-January/062988.html>

2 1

Re: [Dovecot] Please HELP: how to delete all messages older than X days
by Răzvan Sandu 12 Aug '13

12 Aug '13

Pe 7 Aug 2013 11:35, Timo Sirainen a scris: >> Thank you, but doveadm expunge will ask for the mailbox name: >> >> [root@mail1 ~]# doveadm expunge -u john.doe(a)example.com ON >> 2013-08-07 doveadm(root): Fatal: expunge: To avoid accidents, >> search query must contain MAILBOX in all search branches > > Add: mailbox '*' Thank you, it works! May I use the same wildcard syntax ('*') when configuring the expire plugin? Something like: mail_plugins = $mail_plugins expire plugin { expire = * } or plugin { expire = '*' } ? Best regards, Răzvan

3 2

[Dovecot] Unlock non existent locks
by Thomas Hummel 12 Aug '13

12 Aug '13

Hello Timo, I'm running a single instance of dovecot-2.1.15 on a single host running 8.3-RELEASE-p3 FreeBSD amd64 mailboxes (Maildir), control files and indexes are on NFS (v3,tcp) mail_nfs_storage = yes lock_method = fcntl [didn't touch the following] # Mail index files also exist in NFS. Setting this to yes requires # mmap_disable=yes and fsync_disable=no. mail_nfs_index = yes served by an Isilon s200 node (OneFS 6.5.5.22) procmail delivers in the same location through postfix-2.8.7 The filer shows *a lot* of such messages : 2013-08-02T14:12:29+02:00 <0.5> XXXX-10(id10) /boot/kernel.amd64/kernel: [lkf_delegate.c:2752](pid 46390="kt: dwt3")(tid=101282) dev_local_lkf_unlock(): no lock entry present to unlock for resource: 1:19d5:fdbe ;client: 0xa51cc3f444107 Corresponding file may be a message, a maildir, an index, ... I can experience the same message with a simple fcntl C program which tries to unlock an NFS file without prior locking of it. However, the problem occurs only on a FreeBSD client (I tried the old nfs client and the new (mount_newnfs), not on a 2.6.32-358.11.1.el6.x86_64 CentOS release 6.4 (Final) Linux release. So my guess is that dovecot has some safety mechanism which tries to unlock locked files, maybe after some timeout and that, in the case of a an already unlocked file, the FreeBSD client sends the unlock RPC request to the server anyway whereas the linux client does not, noticing there isn't anything to unlock. Can you help me explaining such a behavior ? Are those "unlock a file with no prior lock" made on purpose or is it a bug ? Would it be an application or a RPC bug ? Can you think of another reason ? Thanks -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Groupe Exploitation et Infrastructure

2 5

[Dovecot] Error: Threading lost Message ID?
by Ralf Hildebrandt 12 Aug '13

12 Aug '13

QUERY: THREAD REFERENCES ISO-8859-1 ALL RESPONSE: [SERVERBUG] Internal error occurred. Refer to server log for more information. [2013-08-09 15:42:34] Aug 9 15:41:48 postamt dovecot: imap(username) tTbs7oPjfACNKs4m: Error: Threading lost Message ID Aug 9 15:42:34 postamt dovecot: imap(username) tTbs7oPjfACNKs4m: Error: Threading lost Message ID What does that mean? WHY has the Message-Id been lost? How can I find out WHICH MAIL caused this? This is the most recent dovecot 2.2.x -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

3 6

[Dovecot] GUID Mismatch Issue
by Jeff Geiger 12 Aug '13

12 Aug '13

Dovecot 2.1.7 While migrating mail from one server (Maildir) to another (mdbox), a config issue caused my dsync to fail on a few accounts. Those accounts received mail on the new server over night and it autocreated new inboxes with new GUIDs. Now dsync wants nothing to do with mirroring between the two (diff GUIDs). Is there a way to fix this? dsync(jeff(a)foo.bar): Error: Mailbox INBOX changed its GUID (0eee4b021dcadd5158550000eed085a1 -> 43f87412a8f00352ac340000be821591) dsync(jeff(a)foo.bar): Error: msg iteration failed: Couldn't open mailbox 0eee4b021dcadd5158550000eed085a1 dsync(jeff(a)foo.bar): Error: Mailbox INBOX changed its GUID (0eee4b021dcadd5158550000eed085a1 -> 43f87412a8f00352ac340000be821591) dsync(jeff(a)foo.bar): Error: Mailbox Trash changed its GUID (0fee4b021dcadd5158550000eed085a1 -> 6300df050ef10352e9350000be821591) dsync(jeff(a)foo.bar): Error: Mailbox Sent changed its GUID (832d1e3663cadd515f5d0000eed085a1 -> 855ef505c0f00352fc340000be821591) I need a way to merge the mailboxes, in either direction, so I can clear out one side and successfully migrate the mail accounts. Any tips or pointers are greatly appreciated.

2 1

[Dovecot] multiple passdbs and auth sockets
by md＠Linux.IT 12 Aug '13

12 Aug '13

I have a few systems which run dovecot 1.x as the authentication backend for Postfix, with multiple auth { } sections like this one, each one with a different passdb and its own socket: auth ldap-10 { passdb ldap { args = /etc/dovecot/dovecot-ldap-10.conf } socket listen { client { path = /var/spool/postfix/private/auth-10 mode = 0666 } } } I need multiple sockets tied to multiple dbs because there are duplicated accounts, but after switching to dovecot 2.1.7 apparently *all* passdbs are checked and dovecot reports this message: Warning: Obsolete setting in /etc/dovecot/conf.d/auth-local.conf.ext:91: add auth_ prefix to all settings inside auth {} and remove the auth {} section completely doveconf shows that all my custom sockets are now part of a single "service auth { }" section, while all the passdbs appear at the top level. How can I update my configuration for dovecot 2.x? -- ciao, Marco

2 1

[Dovecot] Errors in SASL authentication ("attempted master login")
by Grzegorz Staniak 12 Aug '13

12 Aug '13

Hi, I'm using dovecot 2.2.4 (with Postfix 2.8.4) as both the SASL authentication backend and the delivery agent, and I keep getting lines like the following in the dovecot.log from the authentication subsystem: auth: passdb(toshiba1(a)domain,8.8.8.8,master): Attempted master login with no master passdbs (trying to log in as user: plain) The connections come from an old (embedded) mail client in a printer-fax machine. I googled for this specific error, but I only found info about old clients using "user\0user\0pass" string incorrectly during authentication, which caused a problem for earlier, development versions of dovecot. Actually, I recently migrated from 1.2 to 2.2.4 exactly to alleviate this situation, but the errors persist. Is there a way to remove the problem or work around it? Regards, GS -- Grzegorz Staniak <gstaniak [at] gmail _dot_ com>

2 1

[Dovecot] The docs a re a bit weird on "Directory hashing"
by Eliezer Croitoru 11 Aug '13

11 Aug '13

In squid we use a double layer of hashed directories on the FS to allow storage of millions of files. I was reading the "Directory hashing" section but never understood it.. since it's written.. in a way I could not understand. I am using this line: mail_location = maildir:/home/vmail/%d/%n/Maildir/ and I want to migrate to a hash based directory scheme. While trying to understand how that hash will work I stumbled a old thread at: http://www.dovecot.org/list/dovecot/2010-June/049695.html there they used: mail_location=maildir:/buzones/us.es/%1Hu/%2.1u/%n so I assume it should be used like that: mail_location=maildir:/home/vmail/%H/%2.256Hn/%d_%n/Maildir/ or: mail_location=maildir:/home/vmail/%1Mu/%2.1Mu/%d_%n/Maildir/ It's a bit hard to think alone so I hope you can assist me. let say I want to follow the model of squid cache_dir which has: cache_dir aufs /usr/local/squid/var/cache/squid 40000 16 256 And means a two layers cache of max 16 directories on the first layer and 256 directories on the second layer. The above allows millions of files storage and can benefit from all ext4 lower kernel levels of compatibly rather then do stuff on the user-land.. Since I am not 100% sure that the scheme I understood is indeed what I think I assume the above will need a small correction. Eliezer

3 4

[Dovecot] prevent dovecot from modifying maildirs
by Felix Rubio Dalmau 11 Aug '13

11 Aug '13

Hi all, Is there any possibility to ask dovecot to write nothing to disk, something like a "read only" state, without shutting it down? I have set up a ZFS+postfix+dovecot mail server, and I need both postfix (postsuper -h ALL) and dovecot (¿?) to stop modifying the disk to create the snapshot to be saved. Does anybody has any idea on how to achieve this? Regards! Felix

5 10

[Dovecot] constant Log synchronization error's
by Kim Bisgaard 10 Aug '13

10 Aug '13

Hi, I am seeing constant "Log synchronization error"s in my logs. See later for an example. This is dovecot 2.2.4, pigeonhole 0.4.1, and postfix 2.10.1 (with mailbox_command = /usr/libexec/dovecot/deliver) on a Fedora 19 system. I am using packages from Atrpms so there are some patches applied - ask for details. The mailboxes have resently been moved from a i386 system. I have tried to manually do "doveadm force-resync" for all users, but the problem persists :-( Here are an example from a user which does not use sieve: 11:45:48 Y dovecot: imap-login: Login: user=<X>, method=PLAIN, rip=62.199.61.123, lip=192.168.0.5, mpid=21531, TLS, session=<XxDNm3XhdAA+xz17> 11:45:52 Y dovecot: imap-login: Login: user=<X>, method=PLAIN, rip=62.199.61.123, lip=192.168.0.5, mpid=21541, TLS, session=<UewQnHXhAwA+xz17> 11:45:54 Y dovecot: imap(X): Error: mdbox /var/mail/X/mdbox/mailboxes/INBOX/Streams/dbox-Mails: map uidvalidity mismatch (0 vs 1283330954) 11:45:54 Y dovecot: imap(X): Disconnected: Internal error occurred. Refer to server log for more information. [2013-07-14 11:45:54] in=353 out=115680 11:45:54 Y dovecot: imap(X): Warning: fscking index file /var/mail/X/mdbox/storage/dovecot.map.index 11:45:54 Y dovecot: imap(X): Warning: mdbox /var/mail/X/mdbox/storage: rebuilding indexes 11:45:54 Y dovecot: imap(X): Disconnected: Disconnected in IDLE in=707 out=437806 11:45:55 Y dovecot: imap(X): Error: Log synchronization error at seq=4,offset=156 for /var/mail/X/mdbox/mailboxes/INBOX/Kvitteringer/dbox-Mails/dovecot.index: Ex tension header update points outside header size 11:45:55 Y dovecot: imap(X): Warning: fscking index file /var/mail/X/mdbox/mailboxes/INBOX/Kvitteringer/dbox-Mails/dovecot.index 11:45:55 Y dovecot: imap(X): Error: Log synchronization error at seq=9,offset=156 for /var/mail/X/mdbox/mailboxes/INBOX/Streams/dbox-Mails/dovecot.index: Extensi on header update points outside header size 11:45:55 Y dovecot: imap(X): Warning: fscking index file /var/mail/X/mdbox/mailboxes/INBOX/Streams/dbox-Mails/dovecot.index 11:45:55 Y dovecot: imap(X): Error: Log synchronization error at seq=13,offset=156 for /var/mail/X/mdbox/mailboxes/Facebook/dbox-Mails/dovecot.index: Extension h eader update points outside header size 11:45:55 Y dovecot: imap(X): Warning: fscking index file /var/mail/X/mdbox/mailboxes/Facebook/dbox-Mails/dovecot.index 11:45:55 Y dovecot: imap(X): Error: Log synchronization error at seq=5,offset=156 for /var/mail/X/mdbox/mailboxes/Junk/dbox-Mails/dovecot.index: Extension header update points outside header size 11:45:55 Y dovecot: imap(X): Warning: fscking index file /var/mail/X/mdbox/mailboxes/Junk/dbox-Mails/dovecot.index 11:45:55 Y dovecot: imap(X): Error: Log synchronization error at seq=5,offset=156 for /var/mail/X/mdbox/mailboxes/Sent/dbox-Mails/dovecot.index: Extension header update points outside header size 11:45:55 Y dovecot: imap(X): Warning: fscking index file /var/mail/X/mdbox/mailboxes/Sent/dbox-Mails/dovecot.index 11:45:55 Y dovecot: imap(X): Error: Log synchronization error at seq=4,offset=156 for /var/mail/X/mdbox/mailboxes/Drafts/dbox-Mails/dovecot.index: Extension header update points outside header size 11:45:55 Y dovecot: imap(X): Warning: fscking index file /var/mail/X/mdbox/mailboxes/Drafts/dbox-Mails/dovecot.index 11:45:55 Y dovecot: imap(X): Error: Log synchronization error at seq=4,offset=156 for /var/mail/X/mdbox/mailboxes/Archives/dbox-Mails/dovecot.index: Extension header update points outside header size 11:45:55 Y dovecot: imap(X): Warning: fscking index file /var/mail/X/mdbox/mailboxes/Archives/dbox-Mails/dovecot.index 11:45:55 Y dovecot: imap-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=62.199.61.123, lip=192.168.0.5, TLS, session=<dz05nHXh9wA+xz17> 11:45:55 Y dovecot: imap(X): Error: Log synchronization error at seq=4,offset=156 for /var/mail/X/mdbox/mailboxes/Archives/2012/dbox-Mails/dovecot.index: Extension header update points outside header size 11:45:55 Y dovecot: imap(X): Warning: fscking index file /var/mail/X/mdbox/mailboxes/Archives/2012/dbox-Mails/dovecot.index 11:45:55 Y dovecot: imap-login: Login: user=<X>, method=PLAIN, rip=62.199.61.123, lip=192.168.0.5, mpid=21548, TLS, session=<bAs5nHXhfgA+xz17> 11:45:55 Y dovecot: imap(X): Error: Log synchronization error at seq=5,offset=156 for /var/mail/X/mdbox/mailboxes/Trash/dbox-Mails/dovecot.index: Extension header update points outside header size 11:45:55 Y dovecot: imap(X): Warning: fscking index file /var/mail/X/mdbox/mailboxes/Trash/dbox-Mails/dovecot.index 11:45:55 Y dovecot: imap(X): Error: Log synchronization error at seq=4,offset=156 for /var/mail/X/mdbox/mailboxes/Trash/Spam/dbox-Mails/dovecot.index: Extension header update points outside header size 11:45:55 Y dovecot: imap(X): Warning: fscking index file /var/mail/X/mdbox/mailboxes/Trash/Spam/dbox-Mails/dovecot.index 11:45:55 Y dovecot: imap-login: Login: user=<X>, method=PLAIN, rip=62.199.61.123, lip=192.168.0.5, mpid=21552, TLS, session=<zCw7nHXh2AA+xz17> 11:45:55 Y dovecot: imap(X): Connection closed: Connection reset by peer in=118 out=111246 11:45:56 Y dovecot: imap-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=62.199.61.123, lip=192.168.0.5, TLS, session=<Ov9MnHXhgwA+xz17> 11:45:56 Y dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=62.199.61.123, lip=192.168.0.5, TLS, session=<OK5RnHXhiAA+xz17> 11:45:56 Y dovecot: imap(X): Error: mdbox /var/mail/X/mdbox/mailboxes/INBOX/Streams/dbox-Mails: map uidvalidity mismatch (0 vs 1283330954) 11:45:56 Y dovecot: imap(X): Disconnected: Internal error occurred. Refer to server log for more information. [2013-07-14 11:45:56] in=353 out=115647 11:45:56 Y dovecot: imap(X): Warning: fscking index file /var/mail/X/mdbox/storage/dovecot.map.index 11:45:56 Y dovecot: imap(X): Warning: mdbox /var/mail/X/mdbox/storage: rebuilding indexes 11:45:57 Y dovecot: imap(X): Error: Log synchronization error at seq=5,offset=156 for /var/mail/X/mdbox/mailboxes/INBOX/Kvitteringer/dbox-Mails/dovecot.index: Extension header update points outside header size 11:45:57 Y dovecot: imap(X): Warning: fscking index file /var/mail/X/mdbox/mailboxes/INBOX/Kvitteringer/dbox-Mails/dovecot.index 11:45:57 Y dovecot: imap(X): Error: Log synchronization error at seq=10,offset=156 for /var/mail/X/mdbox/mailboxes/INBOX/Streams/dbox-Mails/dovecot.index: Extension header update points outside header size 11:45:57 Y dovecot: imap(X): Warning: fscking index file /var/mail/X/mdbox/mailboxes/INBOX/Streams/dbox-Mails/dovecot.index 11:45:57 Y dovecot: imap(X): Error: Log synchronization error at seq=14,offset=156 for /var/mail/X/mdbox/mailboxes/Facebook/dbox-Mails/dovecot.index: Extension header update points outside header size 11:45:57 Y dovecot: imap(X): Warning: fscking index file /var/mail/X/mdbox/mailboxes/Facebook/dbox-Mails/dovecot.index 11:45:57 Y dovecot: imap(X): Error: Log synchronization error at seq=6,offset=156 for /var/mail/X/mdbox/mailboxes/Junk/dbox-Mails/dovecot.index: Extension header update points outside header size 11:45:57 Y dovecot: imap(X): Warning: fscking index file /var/mail/X/mdbox/mailboxes/Junk/dbox-Mails/dovecot.index 11:45:57 Y dovecot: imap(X): Error: Log synchronization error at seq=6,offset=156 for /var/mail/X/mdbox/mailboxes/Sent/dbox-Mails/dovecot.index: Extension header update points outside header size 11:45:57 Y dovecot: imap(X): Warning: fscking index file /var/mail/X/mdbox/mailboxes/Sent/dbox-Mails/dovecot.index 11:45:57 Y dovecot: imap(X): Error: Log synchronization error at seq=5,offset=156 for /var/mail/X/mdbox/mailboxes/Drafts/dbox-Mails/dovecot.index: Extension header update points outside header size 11:45:57 Y dovecot: imap(X): Warning: fscking index file /var/mail/X/mdbox/mailboxes/Drafts/dbox-Mails/dovecot.index 11:45:57 Y dovecot: imap(X): Error: Log synchronization error at seq=5,offset=156 for /var/mail/X/mdbox/mailboxes/Archives/dbox-Mails/dovecot.index: Extension header update points outside header size 11:45:57 Y dovecot: imap(X): Warning: fscking index file /var/mail/X/mdbox/mailboxes/Archives/dbox-Mails/dovecot.index 11:45:57 Y dovecot: imap(X): Error: Log synchronization error at seq=5,offset=156 for /var/mail/X/mdbox/mailboxes/Archives/2012/dbox-Mails/dovecot.index: Extension header update points outside header size 11:45:57 Y dovecot: imap(X): Warning: fscking index file /var/mail/X/mdbox/mailboxes/Archives/2012/dbox-Mails/dovecot.index 11:45:57 Y dovecot: imap(X): Error: Log synchronization error at seq=6,offset=156 for /var/mail/X/mdbox/mailboxes/Trash/dbox-Mails/dovecot.index: Extension header update points outside header size 11:45:57 Y dovecot: imap(X): Warning: fscking index file /var/mail/X/mdbox/mailboxes/Trash/dbox-Mails/dovecot.index 11:45:57 Y dovecot: imap(X): Error: Log synchronization error at seq=5,offset=156 for /var/mail/X/mdbox/mailboxes/Trash/Spam/dbox-Mails/dovecot.index: Extension header update points outside header size 11:45:57 Y dovecot: imap(X): Warning: fscking index file /var/mail/X/mdbox/mailboxes/Trash/Spam/dbox-Mails/dovecot.index 11:45:57 Y dovecot: imap-login: Login: user=<X>, method=PLAIN, rip=62.199.61.123, lip=192.168.0.5, mpid=21563, TLS, session=<gs9WnHXhcwA+xz17> 11:45:57 Y dovecot: imap(X): Connection closed: Connection reset by peer in=150 out=111316 11:45:57 Y dovecot: imap-login: Login: user=<X>, method=PLAIN, rip=62.199.61.123, lip=192.168.0.5, mpid=21568, TLS, session=<4y1hnHXhkQA+xz17> 11:46:05 Y dovecot: imap-login: Login: user=<X>, method=PLAIN, rip=62.199.61.123, lip=192.168.0.5, mpid=21574, TLS, session=<+zbNnHXhBAA+xz17> My config is: # dovecot -n # 2.2.4: /etc/dovecot/dovecot.conf # OS: Linux 3.9.9-301.fc19.x86_64 x86_64 Fedora release 19 (Schrödinger’s Cat) ext4 mail_location = mdbox:/var/mail/%u/mdbox mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = . } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +imapflags sieve_subaddress_sep = - } postmaster_address = postmaster(a)alleroedderne.adsl.dk protocols = imap recipient_delimiter = - ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol lda { mail_plugins = " sieve" } Regards, Kim

3 3

[Dovecot] Mailbox Format
by Vijay Rajah 10 Aug '13

10 Aug '13

Hello List, I'm in the process of implementing a new mail server environment from scratch. I was wondering, what mailbox format is recommended? I have been using maildir format for my other projects. I would like to use some format that provides Single Instance Storage. I'm using postfix 2.11 and will use lmtp. I will be using dovecot 2.2.5 (Latest) version. I'm not planning on using NFS (if that matters) and will use dsync to backup mails to another server. Thanks in Advance Vijay Rajah

1 0

Re: [Dovecot] prevent dovecot from modifying maildirs
by Joseph Tam 09 Aug '13

09 Aug '13

> In order to save space I prefer no to have such half-files (mails) , > and it is for this reason that I am asking if there is any way to > prevent this. > > I'm not an expert in field of file systems, so I can be asking very > naive questions... but I appreciate your comments on this topic. Filesystem consistency is different than, for lack of a better term, dovecot consistency. The latter places additional constraints on the content of files, rather than treating them as sequences of disk blocks. I don't think you can ensure the latter without stopping all dovecot processes (and maybe the MTA/LDA as well), which will be much more difficult and disruptive than just taking a snapshot. (I think some snapshot aware application like databases and hypervisors allows the operator to put the application in a state of acquiesence, long enough to take a snapshot, then unblock all processes after the snapshot.) I'd take the suggestion of the previous poster: take snapshots, don't worry, be happy. The small amount of inconsistencies is trivial compared with quickly recovering a mail store after disaster. Joseph Tam <jtam.home(a)gmail.com>

1 0

Re: [Dovecot] How to troubleshoot LDA or LMTP?
by Joseph Tam 09 Aug '13

09 Aug '13

John Williams writes: > *What doesn't work* I thought the next step would be to execute > dovecot-lda manually (as is suggested on the wiki and in numerous > newsgroup posts), but I can't figure out how to do this. When I execute > it as root and provide my non-root username via the -u option, it > hangs. I can see that it spawns a child process that executes as the > non-root user (specified with the -u option). So, could someone tell > how to execute dovecot-lda manually please? Maybe use "-d"? I had no trouble invoking dovecot-lda -c config-file -d user < mailfile If it doesn't work for you, I suggest process tracing it. > Also, when does LMTP process messages? When sending mail via SMTP, or > when reading mail via IMAP? I would prefer to use LMTP rather than > LDA. The former. Joseph Tam <jtam.home(a)gmail.com>

4 6

[Dovecot] execvp /usr/local/libexec/dovecot/dovecot-lda: Permission denied
by Edward Carraro 09 Aug '13

09 Aug '13

I'm trying to follow the instructions for configuring Dovecot LMTP with postfix for virtual domains but whenever mail arrives, in /var/log/maillog, I see Sep 23 16:01:20 mybox postfix/pipe[572]: 999C83206C6: to=< user(a)mytest.domain.com>, relay=dovecot, delay=0.08, delays=0.04/0.01/0/0.03, dsn=4.3.0, status=deferred (temporary failure. Command output: pipe: fatal: pipe_command: execvp /usr/local/libexec/dovecot/dovecot-lda: Permission denied ) ls -lh for /usr/local/libexec/dovecot/dovecot-lda -rwxr-xr-x 1 root staff 62K Sep 20 15:15 dovecot-lda It will deliver mail when I do the sudo invocation of dovecot-lda, but I thought LMTP was suppose to be an alternative to that postfix/main.cf: virtual_transport = dovecot virtual_mailbox_domains = mytest.domain.com dovecot_destination_recipient_limit = 1 /etc/postfix/master.cf: dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/local/libexec/dovecot/dovecot-lda -f ${sender} -d ${recipient} /usr/local/etc/dovecot/conf.d/10-master.conf: service auth { unix_listener auth-userdb { mode = 0600 user = vmail #group = vmail } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } inet_listener lmtp { port = 24 } user = vmail } Did I miss something in my config?

7 9

[Dovecot] Getting default uid/gid of users via socket for virtual user support for sendmail
by Steffen Kaiser 09 Aug '13

09 Aug '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I'm trying to make my life easier with sendmail and virtual users. For that I'd like to pass sendmail the home directory and uid/gid for each user. The user data is storred in a LDAP,& I retrieve it from the auth-userdb socket fine. If I add uid / gid to each user, I get them via that socket as well, but is there a way I get the default uid/gid? I mean, without calling an external program, such as doveadm. There is an "initialize" phase, so the default information is retrieved just once per lifetime of the demon, but each time the sendmail binary is invoked. Kind regards, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBUfp2JF3r2wJMiz2NAQL61Af+MuF1BTwaX+Tm+rOWe+smcVUzRmMYZdtL J08wDGNB2EyQ9a0zXwZleO/X3Jvaqr8HSHaC6oTzliS25yqPT4AYG0VVswZoyDTg hggyS9kVse2R1koLZKPAM1EatTmpTsKfUKDjsB3cxbYsBU5NYMJY+u4YATPTl7ui 46K4YmeL4xkKirRXc7j0fIMxdXttuD9zPq20qJ0p41HK2W0ECVHeQpUahozWY45h DREbwdZBZe9PeZNbfOYTLWnxPi1/FK/AX20QH3y3uxEhgMDfYAUHNwAleSCpack5 JEuVYwTPchxsH6uibk62qIsK/uWO3vZM0Zj18S0BBWDNvPhg0Nz92w== =abqh -----END PGP SIGNATURE-----

2 3

[Dovecot] Override master service settigs with spaces
by Ulrich Zehl 08 Aug '13

08 Aug '13

I'd like to override one setting for a master service in conf.d/10-master.conf. Unfortunately, said setting contains spaces, and I do not know how to escape them properly. Here's what I've tried so far. (Note: This is just the easiest/silliest test case I could come up with; not the actual setting or service I want to overwrite.) conf.d/10-master.conf: service quota-status { executable = quota-status -p postfix -o plugin/quota_status_success=Testing 1 2 3 inet_listener { port = 12340 } } Reaction: $ printf "recipient=test(a)example.org\nsize=0\n\n" | nc 127.0.0.1 12340 action=Testing conf.d/10-master.conf: service quota-status { executable = quota-status -p postfix -o "plugin/quota_status_success=Testing 1 2 3" inet_listener { port = 12340 } } Reaction: $ printf "recipient=test(a)example.org\nsize=0\n\n" | nc 127.0.0.1 12340 action=DUNNO [<-- This is the default setting] conf.d/10-master.conf: service quota-status { executable = quota-status -p postfix -o 'plugin/quota_status_success=Testing 1 2 3' inet_listener { port = 12340 } } Reaction: $ printf "recipient=test(a)example.org\nsize=0\n\n" | nc 127.0.0.1 12340 action=DUNNO [<-- This is the default setting] conf.d/10-master.conf: service quota-status { executable = quota-status -p postfix -o plugin/quota_status_success="Testing 1 2 3" inet_listener { port = 12340 } } Reaction: $ printf "recipient=test(a)example.org\nsize=0\n\n" | nc 127.0.0.1 12340 action="Testing [<-- Note the " after = ] conf.d/10-master.conf: service quota-status { executable = quota-status -p postfix -o plugin/quota_status_success=Testing\ 1\ 2\ 3 inet_listener { port = 12340 } } Reaction: $ printf "recipient=test(a)example.org\nsize=0\n\n" | nc 127.0.0.1 12340 action=Testing\ [<-- Note the \ ] I'm out of ideas now. What's the correct way to quote / escape these options?

3 4

[Dovecot] 2.2.5 fails to compile - SSL_OP_SINGLE_ECDH_USE : Solaris 10 + Sunstudio 12.3
by Tomi Vainio 07 Aug '13

07 Aug '13

Hi, Compile fails in these two files src/lib-ssl-iostream/iostream-openssl-context.c src/login-common/ssl-proxy-openssl.c due to missing SSL_OP_SINGLE_ECDH_USE In these there is only #if !defined(OPENSSL_NO_ECDH) when all the other places it always compares also SSL version #if !defined(OPENSSL_NO_ECDH) && OPENSSL_VERSION_NUMBER >= 0x10002000L Tomppa

3 4

[Dovecot] keywords leak in cmd_append_handle_args()
by Mike Abbott 07 Aug '13

07 Aug '13

In 2.2.5 and earlier it appears that mailbox_keywords_unref(&keywords) is not called in some return paths from cmd_append_handle_args(). Should it be?

2 1

[Dovecot] Postfix aliases with quota-status service
by Thomas Leuxner 07 Aug '13

07 Aug '13

The latest HG commits seem to have fixed some underlying problems with the 'quota-status' service. Now doing some quick tests I wonder if this can be used with aliases on the Postfix side. Appears the 'check_policy_service' used in the example below will query existing users via Dovecot's Auth Backend: http://sys4.de/en/blog/2013/04/05/dovecot-quota-mit-postfix-abfragen/ http://www.postfix.org/SMTPD_POLICY_README.html This works fine for Dovecot user 'philo' where the mail is rejected upfront before it enters the queue: ==> /var/log/mail.log <== Jul 30 13:41:18 spectre postfix/smtpd[31072]: NOQUEUE: reject: RCPT from host.example.com[1.2.3.4]: 554 5.2.2 <philo(a)trashheap.net>: Recipient address rejected: Quota exceeded (mailbox for use r is full); from=<user(a)example.com> to=<philo(a)trashheap.net> proto=ESMTP helo=<host.example.com> Now user 'gunge' is an alias for 'philo' in Postfix, thus the quota check will not recognize the user, will queue the message and reject it at the MDA stage: ==> /var/log/mail.log <== Jul 30 14:41:02 spectre postfix/lmtp[31460]: 3c4HSD5ZkBzBP: to=<philo(a)trashheap.net>, orig_to=<gunge(a)trashheap.net>, relay=spectre.leuxner.net[private/dovecot-lmtp], delay=1.2, delays=1.1/0.01/0/0.13, dsn=4.2.2, status=deferred (host spectre.leuxner.net[private/dovecot-lmtp] said: 452 4.2.2 <philo(a)trashheap.net> Quota exceeded (mailbox for user is full) (in reply to end of DATA command)) This is probably intended behaviour, just want to make sure that I'm not missing a point here. For now the only fix that comes to my mind to create "quota aware" aliases - is creating 'dummy' users in Dovecot which point to the same mailbox rather than performing aliasing on the Postfix end. Open to suggestions... Regards Thomas

7 15

Re: [Dovecot] Please HELP: how to delete all messages older than X days from the server?
by Răzvan Sandu 07 Aug '13

07 Aug '13

On Tue, 06 Aug 2013 19:18:15 +0200, Pascal Volk a scris: > There is also the -A option, see > http://wiki2.dovecot.org/Tools/Doveadm/Expunge#section_options Thank you, but doveadm expunge will ask for the mailbox name: [root@mail1 ~]# doveadm expunge -u john.doe(a)example.com ON 2013-08-07 doveadm(root): Fatal: expunge: To avoid accidents, search query must contain MAILBOX in all search branches What I need is to traverse *all* directories under /var/spool/mail/vhosts/domainname/ (which are /var/spool/mail/vhosts/domainname/username, with further variable subdirectories, name never known in advance...) and to delete all messages older than X days (incoming, sent, drafts, trash, etc.) This must be done without manual confirmation ("are you sure...?") (if I do it via a script run from cron). >From the examples given in the wiki page, the expire plugin presents the same problem: one must know in advance the *name of the mailbox* he has to empty. Also for the correct search criteria: should I use SAVEDBEFORE or SENTBEFORE ? Thanks again, Răzvan

2 1

[Dovecot] v2.2.5 released
by Timo Sirainen 06 Aug '13

06 Aug '13

http://dovecot.org/releases/2.2/dovecot-2.2.5.tar.gz http://dovecot.org/releases/2.2/dovecot-2.2.5.tar.gz.sig So, I'm back from the first vacation I've had in about 10 years. (Well, maybe there were a few short ones.) I was planning on coding it the whole time, but looks like I didn't manage to get anything at all done. Maybe that's a good vacation?.. Anyway, I've still a few more pending things to look into, but it's been too long since v2.2.4 so here are the fixes so far. + SSL: Added support for ECDH/ECDHE cipher suites (by David Hicks) + Added some missing man pages (by Pascal Volk) + quota-status: Added quota_status_toolarge setting (by Ulrich Zehl) - director: Users near expiration could have been redirected to different servers at the same time. - pop3: Avoid assert-crash if client disconnects during LIST. - mdbox: Corrupted index header still wasn't automatically fixed. - dsync: Various fixes to work better with imapc and pop3c storages. - ldap: sasl_bind=yes caused crashes, because Dovecot's lib-sasl symbols conflicted with Cyrus SASL library. - imap: Various error handling fixes to CATENATE. (Found using Apple's stress test script.)

4 5

[Dovecot] Please HELP: how to delete all messages older than X days from the server?
by Răzvan Sandu 06 Aug '13

06 Aug '13

Hello, Would you please help me solve the following case? My (CentOS) server runs dovecot and allows both POP3 and IMAP service. Users are virtual users (no home directories), with messages stored in Maildir directories under /var/spool/mail/vhosts/example.com/username Some of them use mobile devices (without local storage space), so I must allow IMAP access, not just POP3. But the storage on the server must be for a strictly *limited* period of time. As an admin, I'm trying to force each user to: - download *locally* received messages when they arrive at the office - don't let copies of messages on the server (incoming, sent, trash, drafts, etc.) For various reasons, e-mail client configuration is not under my control (I can't rely on client configuration for implementing this). Implementing filesystem quotas is not an option because a. presently, all virtual users share same UID/GID on the server and b. administrative reasons (the "full quota" situation may occur unexpectedly and this is not tolerable in corporate policy). So I need EITHER: 1. a method of downloading locally *all* messages from the server (incoming, sent, trash, drafts, etc.) to the workstation, when the user consults his/her mailbox from a POP3 desktop client, thus completely *emptying* the user's mailbox on the server OR 2. an automatic, elegant but forceful method of deleting all messages older than X days (incoming, sent, trash, drafts, etc.) I've tried to use a line such as: doveadm expunge -u john.doe(a)example.com before 4w run as root, from a script in crontab, but for "expunge" doveadm won't let me skip the "-u" parameter (to perform the expunge for *all* users). Could you please help? Any sugestion is welcomed. Thanks a lot, Răzvan

2 1

[Dovecot] Using ldap and pam
by Bo Lynch 06 Aug '13

06 Aug '13

Having some issues with ldap logins. I am using Centos 5,dovecot-1.0.13-1.el5.rfx and openldap-servers-2.3.43-25.el5_8.1 Trying to get this to work with the SoGo interface. First I converted all my standard system users to ldap using the openldap-tools. This worked fine, however when a user changes there password they can no longer see there email. If they change it back to the original password mail can be seen. This has stumped me for a day or so so I was hoping someone could shed some light. /etc/dovecot.conf protocols = imap imaps disable_plaintext_auth = no mbox_read_locks = fcntl mbox_write_locks = fcntl protocol imap { } protocol pop3 { } protocol lda { postmaster_address = postmaster(a)example.com } auth default { mechanisms = plain login passdb pam { } passdb ldap { args = /etc/dovecot-ldap.pass } userdb passwd { } user = root user = root socket listen { client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } } dict { } plugin { } /etc/dovecot-ldap.conf hosts = 127.0.0.1:389 sasl_bind = no auth_bind = yes auth_bind = no ldap_version = 3 deref = never dn = cn=sogo,dc=ameliaschools,dc=com dnpass=password base = dc=ameliaschools,dc=com scope = subtree pass_attrs = uid=user, userPassword=password pass_filter = (uid=%u)

3 5

[Dovecot] How to troubleshoot LDA or LMTP?
by John Williams 06 Aug '13

06 Aug '13

Please forgive me if these are silly questions. I am a normal user, not a system administrator. I am using Dovecot as a kind of IMAP caching proxy, i.e. reading IMAP mail via Gnus + Dovecot + Offlineimap. I am trying to enable sieve functionality. *Desired behaviour* When Gnus (or whatever MUA) asks for new mail from Dovecot, that before Dovecot returns and answer, the sieve rules are executed. Please tell me if I completely misunderstand how the mail system works in this instance. *Actual behaviour* As far as I can tell, not only are the sieve rules not executed, but also neither LDA or LMTP is invoked. *What works* Running the scripts manually via `sieve-filter` works fine. The next time I read from my local dovecot server the mail is all in the desired place. Also, the LMTP service is running, listening on port 24. *What doesn't work* I thought the next step would be to execute dovecot-lda manually (as is suggested on the wiki and in numerous newsgroup posts), but I can't figure out how to do this. When I execute it as root and provide my non-root username via the -u option, it hangs. I can see that it spawns a child process that executes as the non-root user (specified with the -u option). So, could someone tell how to execute dovecot-lda manually please? Also, when does LMTP process messages? When sending mail via SMTP, or when reading mail via IMAP? I would prefer to use LMTP rather than LDA. *My environment* Fedora 19 & sendmail. Is any other information relevant, apart from the dovecot configuration? Thank you, John .2.4: /etc/dovecot/dovecot.conf # OS: Linux 3.10.4-300.fc19.x86_64 x86_64 Fedora release 19 (Schrödinger’s Cat) auth_socket_path = /var/run/dovecot/auth-userdb debug_log_path = /var/log/dovecot-debug.log disable_plaintext_auth = no hostname = falcon.novoalexandrovsk.ru info_log_path = /var/log/dovecot-info.log lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes login_greeting = Dovecot ready, folks! mail_access_groups = mail mail_debug = yes mail_location = mbox:~/mail/mailboxes:DIRNAME=mBoX-MeSsAgEs:INDEX=~/mail/index:CONTROL=~/mail/control:INBOX=/var/spool/mail/%u managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_dir = /var/lib/dovecot/sieve/global/ sieve_global_path = /var/lib/dovecot/sieve/default.sieve } postmaster_address = johnfrombluff(a)gmail.com protocols = imap lmtp sieve service auth { unix_listener auth-userdb { mode = 0600 user = mail } } service lmtp { executable = lmtp -L inet_listener lmtp { address = 192.168.0.101 127.0.0.1 ::1 port = 24 } user = mail } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 1 service_count = 1 vsz_limit = 64 M } service managesieve { process_limit = 10 } ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol lmtp { info_log_path = /var/log/dovecot-lmtp-info.log log_path = /var/log/dovecot-lmtp-debug.log mail_plugins = " sieve" } protocol lda { info_log_path = /var/log/dovecot-lda-info.log log_path = /var/log/dovecot-lda-errors.log mail_plugins = " sieve" } protocol sieve { mail_max_userip_connections = 10 managesieve_implementation_string = Dovecot Pigeonhole, Asshole! managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 }

3 2

[Dovecot] The "<" sign in config files
by Frank Elsner 06 Aug '13

06 Aug '13

Hallo experts, what is the meaning of the "<" sign in config files as in ssl_key = </etc/pki/tls/private/dovecot.key ^ | ? --Frank Elsner

2 1

[Dovecot] dovecot, spamassasin and lmtp
by alfdc 06 Aug '13

06 Aug '13

Hi, Ok, so I got rid of my procmail in favor of dovecot lmtp as my MDA. However, I lost the ability to tag the emails as SPAM or not. Before, this is done by procmail. Filtering is done by the Evolution client. Is there a way to do something similar now? I still want my filtering to be done by the Evolution. So I need something similar what procmail is doing i.e. altering the email header and putting some tag on it if it is a SPAM. Thanks. -- View this message in context: http://dovecot.2317879.n4.nabble.com/dovecot-spamassasin-and-lmtp-tp43709.h… Sent from the Dovecot mailing list archive at Nabble.com.

3 5

[Dovecot] script to test CATENATE
by Mike Abbott 05 Aug '13

05 Aug '13

Attached please find a perl script which tests the CATENATE support in dovecot. I used this to test my CATENATE implementation a few years ago and it runs fine against dovecot in OS X Server. When run against dovecot-2.2.4 though it always fails or hangs, which in some cases means we interpreted RFCs differently and in other cases means it's finding bugs; both conditions are worthy of scrutiny. (It's random-number driven so every run is different.) A couple months ago I reported a few simple bugs which this script found and you fixed them; thanks. Then it started finding problems for which it's harder to isolate simple reproducible test cases. Vacations and other work interceded but now Apple is pleased to give you the script itself to allow you to iterate faster. Here are some examples of it running. One time only, pass the --init argument to store some template messages used by the real tests: $ ./catenate.pl --host your.test.server --user testuser --password 1234 --init connecting (imaps)... capability... logging in... deleting old templates mailbox... creating templates mailbox... append1... Append succeeded append2... Append succeeded logout... success $ ./catenate.pl --host your.test.server --user testuser --password 1234 connecting (imaps)... capability... logging in... append1... Append failed as it should have (bad url): <append1 NO [BADURL ;invalid;] Invalid IMAP URL: Unexpected IMAP URL path segment: `;invalid;'.> append2... Append failed as it should have (bad url): <append2 NO [BADURL /inbox/;uid=99999999] Message not found.> append3... Append succeeded [...] All tests passed. $ If it concludes with anything other than "All tests passed" or hangs then it found something that it didn't expect and that should be examined. Use the --verbose option to see the entire client-server conversation. We hope that you find this script helpful to harden your CATENATE code. I will be happy to answer any questions.

3 5

[Dovecot] problems with expire plugin
by Felix Rubio Dalmau 05 Aug '13

05 Aug '13

Hi all, I'm experiencing problems to set-up the expire plugin in dovecot. This is the relevant part of my dovecot configuration dict { expire = mysql:/etc/dovecot/dovecot-dict-expire.conf.ext } plugin { expire = Trash 15 Junk 15 expire_dict = proxy::expire } protocol imap { mail_plugins = quota zlib expire imap_quota } File dovecot-dict-expire.conf.ext looks like: connect = host=127.0.0.1 dbname=virtual_email user=<user> password=<passw> map { pattern = shared/expire/$user/$mailbox table = virtual_expires value_field = expire_stamp fields { username = $user mailbox = $mailbox } } and the mysql schema for table virtual_expires is: +--------------+--------------+------+-----+---------+-------+ | Field | Type | Null | Key | Default | Extra | +--------------+--------------+------+-----+---------+-------+ | username | varchar(75) | NO | PRI | NULL | | | mailbox | varchar(255) | NO | PRI | NULL | | | expire_stamp | int(11) | NO | | NULL | | +--------------+--------------+------+-----+---------+-------+ However, when I delete any mail from the Inbox, the table is not updated, and there are no messages in the log, although mail_debug is set to "yes" Does anybody has any idea on how to solve this issue? Regards! Felix

3 9

[Dovecot] Corrupted mboxes with v2.2.4, posix_fallocate and GFS2
by Francesco Prelz 05 Aug '13

05 Aug '13

Hi, on a clustered Dovecot server installation that was recently moved from a shared GPFS filesystem to GFS2, occasional corruptions in the users' INBOXes started appearing, where a new incoming message would be appended directly after a block of NUL bytes, and be scanned by dovecot as being glued to the preceding message. I traced this to the file extension operation performed in mbox_sync_handle_eof_updates, where the 'file_set_size' call is used. If available, file_set_size will use the posix_fallocate call. In GFS2 posix_fallocate increases the file size in 4 kB chunks (there seems to be no guarantee anyway that posix_allocate will extend a file by the exact size requested). After a successful posix_fallocate call, mbox_sync_handle_eof_updates currently proceeds in rewriting the mailbox starting from the originally intended 'file_size': 1306 if (file_set_size(sync_ctx->write_fd, 1307 file_size + -sync_ctx->space_diff) < 0) { 1308 mbox_set_syscall_error(sync_ctx->mbox, 1309 "file_set_size()"); 1310 if (ftruncate(sync_ctx->write_fd, file_size) < 0) { 1311 mbox_set_syscall_error(sync_ctx->mbox, 1312 "ftruncate()"); 1313 } 1314 return -1; 1315 } 1316 mbox_sync_file_updated(sync_ctx, FALSE); 1317 1318 if (mbox_sync_rewrite(sync_ctx, mail_ctx, file_size, 1319 -sync_ctx->space_diff, padding, 1320 sync_ctx->need_space_seq, 1321 sync_ctx->seq) < 0) 1322 return -1; When posix_fallocate extends the mailbox beyond the requested 'file_size', a variable size block of NUL bytes is left behind at the tail of the mailbox, with the side effects described above. I successfully worked around this issue by undefining HAVE_POSIX_FALLOCATE, as the performance penalty with falling back to direct block appends seems small. At least a size check (and possible truncation) after the mbox_sync_file_updated call above should probably be added. I thought that the issue would be anyway worth bringing to your attention. Thanks. Francesco Prelz INFN - Sezione di Milano

2 2

[Dovecot] problems with doveadm
by listserv 05 Aug '13

05 Aug '13

Hello, since few weeks i have problems with the command: doveadm expunge -A mailbox Trash savedbefore 7d => kernel: doveadm[11609]: segfault at 10 ip b75f146a sp bf856ad0 error 4 in libdovecot.so.0.0.0[b7585000+c8000] but for a single user it's works fine: doveadm expunge -u test(a)vtlx.de mailbox Trash savedbefore 30h doveconf -n # 2.2.4 (f16816a69130): /etc/dovecot/dovecot.conf # OS: Linux 3.2.45.stk32 i686 Debian jessie/sid ext3 I hope there is a solution for this. with regards Mario -- 中華人民共和國

3 8

[Dovecot] attachments not with email causing FETCH BODY[] failed
by Anand Kumria 05 Aug '13

05 Aug '13

Hi, Anyone else experiencing this (Dovecot 2.2.4, attachments stored separately): dovecot: imap(user(a)kamdha.com): Error: file_istream.open(/home/ example.com/user/attachments/f5/f0/f5f0f2c08c4311fa404d090a703c3b492f2ea718…) failed: No such file or directory dovecot: imap(user(a)example.com): Error: read(BODY[]) failed: No such file or directory (FETCH for mailbox INBOX UID 42501) dovecot: imap(user(a)example.com): Disconnected: FETCH failed in=186 out=86389 My dovecot.conf attachment related config is: mail_attachment_dir = /home/%d/%n/attachments mail_attachment_min_size = 128k mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} So, questions: - anyone else experiencing this? - how might this occurred? - what is the best way to find the corrupted message? - how should I go about fixing this? Any help or pointers would be appreciated. Thanks, Anand

3 4

[Dovecot] Passing data safely in password_key?
by Attila Nagy 05 Aug '13

05 Aug '13

Hi, I would like to convert my custom POP/IMAP proxy to Dovecot's. In this proxy I do more than giving back user name, password and the host and I need extra information. Luckily all of them are available as variables, but more than one comes as user input (like user name and cleartext password) and I'm not sure how to pass them safely. Obviously I would need a separator, which is guaranteed not to show up either in user name and the cleartext password. Should I use escape (%E) here, or is there a better way?

2 4

[Dovecot] ACL not copied to new mailboxes
by Markus Weippert 05 Aug '13

05 Aug '13

Hi, I had some trouble with ACLs not being copied to new child mailboxes in dovecot 2.2.4. It doesn't matter whether it's a private, shared or public mailbox I create the folder in, the ACLs just seems to be ignored. Anyway, I debugged the executable and came up with the attached patch. Since I'm not a developer, I'm not 100% sure about this but it works for me now. Regards, Markus # dovecot --build-options Build options: ioloop=epoll notify=inotify ipv6 openssl io_block_size=8192 Mail storages: shared mdbox sdbox maildir mbox cydir imapc pop3c raw fail SQL drivers: mysql Passdb: checkpassword ldap pam passwd passwd-file shadow sql Userdb: checkpassword ldap nss passwd prefetch passwd-file sql # doveconf -n # 2.2.4: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.2.0-48-generic x86_64 Ubuntu 12.04.2 LTS auth_cache_negative_ttl = 5 mins auth_cache_size = 10 M auth_cache_ttl = 1 mins auth_debug = yes auth_master_user_separator = * auth_mechanisms = plain login auth_verbose = yes first_valid_gid = 122 first_valid_uid = 114 imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags last_valid_gid = 122 last_valid_uid = 114 mail_debug = yes mail_gid = vmail mail_plugins = acl mail_privileged_group = vmail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { alias_for = hidden = yes inbox = no list = no location = prefix = INBOX. separator = . type = private } namespace { list = children location = maildir:/var/vmail/public/%d:LAYOUT=fs prefix = Public/ separator = / subscriptions = no type = public } namespace { list = children location = maildir:/var/vmail/mail/%%d/%%n:INDEX=~/shared/%%d/%%n prefix = Shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / type = private } passdb { args = /etc/dovecot/auth/%s.master driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile:/var/vmail/acls:cache_secs=300 acl_shared_dict = file:/var/vmail/mail/shared-mailboxes.db sieve = ~/dovecot.sieve sieve_after = /var/vmail/sieve/after sieve_before = /var/vmail/sieve/before sieve_default = /var/vmail/sieve/default.sieve sieve_dir = ~/sieve sieve_global_dir = /var/vmail/sieve/global } protocols = imap lmtp sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0777 } } service imap-login { process_min_avail = 10 service_count = 0 } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/ssl/dovecot.pem ssl_cipher_list = HIGH:!MD5:!eNULL ssl_key = </etc/ssl/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = acl sieve } protocol lda { mail_plugins = acl sieve } protocol imap { mail_plugins = acl imap_acl }

2 1

[Dovecot] Maildir Synchronization warnings
by Kavish Karkera 05 Aug '13

05 Aug '13

Hi, We are repeatedly getting these below warnings for some of our users, al though we have no complaints from them yet, we need to know why these warning occurs. So it would be help full if some one explain these warning msg in detail. ----------------------------------------------------------------------------------------------------------------------------------------------------- Aug 2 12:52:55 blade8 dovecot: imap(kavish.karkera(a)example.com): Warning: Maildir: Scanning /mail/v3store/example.com/kavish.karkera(a)example.com/Maildir/cur took 94 seconds (23191 readdir()s, 0 rename()s to cur/, why=0x1) Aug 2 12:52:55 blade8 dovecot: imap(kavish.karkera(a)example.com): Warning: Maildir /mail/v3store/example.com/kavish.karkera(a)example.com/Maildir: Synchronization took 94 seconds (0 new msgs, 0 flag change attempts, 0 expunge attempts) Aug 2 12:53:54 blade6 dovecot: imap(kavish.karkera(a)example.com): Warning: Maildir: Scanning /mail/v3store/example.com/kavish.karkera(a)example.com/Maildir/cur took 154 seconds (43129 readdir()s, 0 rename()s to cur/, why=0x1) Aug 2 12:53:54 blade6 dovecot: imap(kavish.karkera(a)example.com): Warning: Maildir: Scanning /mail/v3store/example.com/kavish.karkera(a)example.com/Maildir/cur took 162 seconds (43129 readdir()s, 0 rename()s to cur/, why=0xc) Aug 2 12:53:54 blade6 dovecot: imap(kavish.karkera(a)example.com): Warning: Maildir /mail/v3store/example.com/kavish.karkera(a)example.com/Maildir: Synchronization took 162 seconds (0 new msgs, 0 flag change attempts, 0 expunge attempts) Aug 2 12:53:54 blade6 dovecot: imap(kavish.karkera(a)example.com): Warning: Locking transaction log file /indexes//mail/v3store/example.com/kavish.karkera(a)example.com/.INBOX/dovecot.index.log took 50 seconds ----------------------------------------------------------------------------------------------------------------------------------------------------- Thanks In advance, Regards, Kavish Karkera

4 6

[Dovecot] [Metadata Plugin] Q: Source Repository
by Christoph Hintermüller 05 Aug '13

05 Aug '13

Hi I'm currently trying to package V14 of Metadata plugin for Ubuntu Quantal (https://launchpad.net/~privatedata/+archive/dovecot-2.2.2/) to be installed along with dovecot 2.2.4. According to my efforts packaging the plugin i do have some questions For future releases, is it possible to add a link to the current release on the meta data mercurial page which includes in the filename of the tar.gz archive the current version number of the plugin ( metadata-plugin-v14.tar.gz). That would allow to add an appropriate line in the debian/watch file to detect when a new release of the plugin is available. Currently i have to check mercurial page manually and use an updated version mangling entry to ensure that the packaging system downloads the latest version. The link would help to simplify this. Especially as the base link in my debian/watch file currently points to tip.tar.gz and not to the archive the linke of the V14 tag points to. The sources i got represent the tip.tar.gz downloaded on July 19th 2013 23:16 CET which likely do not exactly correspond to the contents of the archive containing sources of V14. Therefore a versioned link to the source archives of the latest version would simplify things a lot, especially adding patches released for the latest version. As well as reporting the following addition. Further I have added a doc directory stub, containing the configuration examples found in thread http://dovecot.2317879.n4.nabble.com/dovecot-metadata-8-released-tp10091.ht… Greetings Christoph

1 0

[Dovecot] Subfolders of Inbox with LAYOUT=fs
by Keith Edmunds 05 Aug '13

05 Aug '13

We've just converted to LAYOUT=fs. Some users had subfolders under Inbox, and for those users some MUAs no longer show those folders. The directory structure is that the cur, tmp and new folders are in the 'location' directory, but the subfolders are in $location/INBOX/$foldername. I am suspicious of this: 12 list "" INBOX * LIST (\HasNoChildren) "/" "INBOX" 12 OK List completed. I have tried moving the cur, tmp and new folders to $location/INBOX, and changing 'location' in dovecot.conf, but the subfolders still do not show. Question: is it legitimate to have subfolders of INBOX when using LAYOUT=fs? If so, what am I missing? Thanks, Keith Config: # dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.1 ext3 lda_mailbox_autocreate = yes log_timestamp = "%Y-%m-%d %H:%M:%S " mail_home = /home/%u mail_location = maildir:/home/imapmail/%u:LAYOUT=fs mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = maildir:/home/imapmail/%u:LAYOUT=fs prefix = separator = / type = private } namespace { hidden = no list = children location = maildir:/home/imapmail/public:INDEX=/home/imapmail/public.indexes/%u.index:LAYOUT=fs prefix = public/ separator = / subscriptions = no type = public } passdb { driver = pam } plugin { acl = vfile acl_shared_dict = file:/home/imapmail/shared-mailboxes fts = squat home = /home/%u sieve = /home/sieve/%u.sieve sieve_dir = /home/sieve/%u } protocols = imap sieve service auth { user = root } service managesieve-login { inet_listener sieve { port = 4190 } } ssl_cert = </etc/dovecot/TCL_IMAPS_server.crt ssl_key = </etc/dovecot/TCL_IMAPS_server.key userdb { args = uid=imapmail gid=imapmail driver = static } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_plugins = acl imap_acl fts fts_squat } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } protocol lda { mail_plugins = sieve } -- "You can't live a perfect day without doing something for someone who will never be able to repay you."

2 2

[Dovecot] Help needed with SOLR integration
by Nigel Smith 05 Aug '13

05 Aug '13

Hi, Is there anything wrong with this config for getting SOLR working ? I'm on Ubuntu 12.04LTS and using the bundled Jetty and SOLR. Calling "http://localhost:8080/solr/update?optimize=true" doesn't return an error. And I'm pretty sure I've replaced the schema ? Help & thanks in advance Nigel # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.5.0-37-generic x86_64 Ubuntu 12.04.2 LTS mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii -numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = scheme=CRYPT username_format=%u /etc/dovecot/users driver = passwd-file } plugin { fts = solr fts_solr = url=http://localhost:8080/solr/ sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap lmtp sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = its-virtmail user = its-virtmail } } service imap-login { process_min_avail = 3 } service lmtp { process_min_avail = 5 unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } user = its-virtmail } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 3 } ssl = required ssl_cert = </etc/ssl/certs/mx_example_com.pem ssl_cipher_list = TLSv1+HIGH:!SSLv2:!aNULL:!eNULL:!3DES:!PSK:@STRENGTH ssl_key = </etc/ssl/private/mx_example_com.key userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 10 mail_plugins = fts fts_solr } protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } protocol lmtp { mail_plugins = sieve postmaster_address = bp(a)example.com }

1 0

[Dovecot] Weird log entries when some users are composing messages in Thunderbird
by Charles Marcus 05 Aug '13

05 Aug '13

Hi all/Timo, When some of our users are composing a message in Thunderbird, I see a ton of these in the logs, and they keep repeating the entire time they are typing until the message gets sent... > 2013-08-05T10:34:42-04:00 myhost dovecot: imap-login: Login: user=<user(a)media-brokers.com>, method=PLAIN, rip=###.###.###.###, lport=993, mpid=8152, TLS, session=<El2GNTTjNgDAqAIc> > 2013-08-05T10:34:42-04:00 myhost dovecot: imap(user(a)media-brokers.com): Disconnected: Disconnected in IDLE in=149 out=12449 > 2013-08-05T10:34:42-04:00 myhost dovecot: imap-login: Login: user=<user(a)media-brokers.com>, method=PLAIN, rip=###.###.###.###, lport=993, mpid=8153, TLS, session=<lJedNTTjNwDAqAIc> > 2013-08-05T10:34:42-04:00 myhost dovecot: imap(user(a)media-brokers.com): Disconnected: Disconnected in IDLE in=149 out=12449 I confirmed that their 'Auto-Save' settings are the defaults (5 minutes, same as mine), and when I'm composing a message, there are no entries like this. The only other option I could think of that might affect t his is the 'spell check as you type', which is also enabled on mine. Also - I'm not sure this *always* happens to these users... all I know is, I see these flooding the logs sometimes, and when I remote in, that user is composing a message. Anyone have any idea why this happens to only a few of our users, and possibly only sometimes? Could it be something in the HTML of the quoted text when they are replying to certain messages? Thanks, -- Best regards, Charles

2 4

Re: [Dovecot] problems with doveadm
by listserv 05 Aug '13

05 Aug '13

> > On 3.8.2013, at 14.25, listserv <listserv(a)xtlv.cn> wrote: > >> doveadm expunge -A mailbox Trash savedbefore 7d >> => kernel: doveadm[11609]: segfault at 10 ip b75f146a sp bf856ad0 error 4 in >> libdovecot.so.0.0.0[b7585000+c8000] > > gdb backtrace would be useful, for example: > > gdb --args doveadm expunge -A mailbox Trash savedbefore 7d > run > bt full > Thank you for your advice. Here the backtrace: gdb --args doveadm expunge -A mailbox Trash savedbefore 7d GNU gdb (GDB) 7.6 (Debian 7.6-5) Copyright (C) 2013 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i486-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/bin/doveadm...Reading symbols from /usr/lib/debug/usr/bin/doveadm...done. done. (gdb) run Starting program: /usr/bin/doveadm expunge -A mailbox Trash savedbefore 7d warning: Could not load shared library symbols for linux-gate.so.1. Do you need "set solib-search-path" or "set sysroot"? [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/i386-linux-gnu/i686/cmov/libthread_db.so.1". Program received signal SIGSEGV, Segmentation fault. i_stream_next_line (stream=0x0) at istream.c:382 382 istream.c: Datei oder Verzeichnis nicht gefunden. (gdb) bt full #0 i_stream_next_line (stream=0x0) at istream.c:382 _stream = <optimized out> pos = <optimized out> #1 0xb7dfbd01 in auth_master_user_list_next (ctx=0x80bf668) at auth-master.c:694 line = <optimized out> #2 0xb7ef72cb in mail_storage_service_all_next (ctx=0x80b8f60, username_r=0xbffff550) at mail-storage-service.c:1294 __FUNCTION__ = "mail_storage_service_all_next" #3 0x08057db5 in doveadm_mail_all_users (wildcard_user=0x0, argv=<optimized out>, ctx=0x80b53f0) at doveadm-mail.c:368 ret = <optimized out> input = {module = 0x0, service = 0x8092f63 "doveadm", username = 0x80bf070 "admin(a)xtlv.jp", session_id = 0x0, local_ip = {family = 0, u = {ip6 = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}}, remote_ip = {family = 0, u = {ip6 = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}}, local_port = 0, remote_port = 0, userdb_fields = 0x0, flags_override_add = (unknown: 0), flags_override_remove = (unknown: 0), no_userdb_lookup = 0} user_idx = 0 user = 0x80bf070 "admin(a)xtlv.jp" error = 0xb7e6f2f0 "" #4 doveadm_mail_cmd (argv=<optimized out>, argc=<optimized out>, cmd=0xbffff5ac) at doveadm-mail.c:523 ctx = 0x80b53f0 getopt_args = <optimized out> ret = <optimized out> c = <optimized out> wildcard_user = 0x0 error = <optimized out> #5 doveadm_mail_try_run (cmd_name=cmd_name@entry=0x80b1209 "expunge", argc=argc@entry=6, argv=argv@entry=0x80b11dc) at doveadm-mail.c:608 cmd = 0xbffff5ac #6 0x08056b26 in main (argc=6, argv=0x80b11dc) at doveadm.c:398 cmd_name = <optimized out> i = <optimized out> quick_init = false c = <optimized out> -- 中華人民共和國

1 0

[Dovecot] dovecot fts solr plugin
by Thomas Baumann 05 Aug '13

05 Aug '13

Hello list, * apache-solr-3.6.2 * dovecot-2.1.7 I configured fts_solr for dovecot, but I have two issues When doing a search request within telnet 127.0.0.1 143 it connects to solr. Jul 21, 2013 4:38:15 PM org.apache.solr.core.SolrCore execute INFO: [] webapp=/solr path=/select params={rows=1&q=box:10361d30f8c4ea51ad7c00002ecaff3b+user:" tom(a)tirism.support.tiri.li"&sort=uid+desc&fl=uid} hits=0 status=0 QTime=10 Jul 21, 2013 4:38:15 PM org.apache.solr.core.SolrCore execute INFO: [] webapp=/solr path=/select params={rows=3&q=(hdr:"test"+OR+body:"test")&fq=%2Bbox:10361d30f8c4ea51ad7c00002ecaff3b+%2Buser:" tom(a)tirism.support.tiri.li"&sort=uid+asc&fl=uid,score} hits=0 status=0 QTime=7 But (1) doveadm fts fails: $ doveadm fts rescan -u tom(a)domain.com Error message: doveadm(tom(a)tirism.support.tiri.li): Error: fts not enabled for user's namespace (null) (2) solr schema has errors Jul 21, 2013 4:35:46 PM org.apache.solr.common.SolrException log SEVERE: org.apache.solr.common.SolrException: undefined field text at org.apache.solr.schema.IndexSchema.getDynamicFieldType(IndexSchema.java:1330) at org.apache.solr.schema.IndexSchema$SolrQueryAnalyzer.getAnalyzer(IndexSchema.java:408) at org.apache.solr.schema.IndexSchema$SolrIndexAnalyzer.reusableTokenStream(IndexSchema.java:383) at org.apache.lucene.queryParser.QueryParser.getFieldQuery(QueryParser.java:574) at org.apache.solr.search.SolrQueryParser.getFieldQuery(SolrQueryParser.java:206) at org.apache.lucene.queryParser.QueryParser.Term(QueryParser.java:1436) at org.apache.lucene.queryParser.QueryParser.Clause(QueryParser.java:1319) at org.apache.lucene.queryParser.QueryParser.Query(QueryParser.java:1245) at org.apache.lucene.queryParser.QueryParser.TopLevelQuery(QueryParser.java:1234) at org.apache.lucene.queryParser.QueryParser.parse(QueryParser.java:206) at org.apache.solr.search.LuceneQParser.parse(LuceneQParserPlugin.java:79) at org.apache.solr.search.QParser.getQuery(QParser.java:143) at org.apache.solr.handler.component.QueryComponent.prepare(QueryComponent.java:105) at org.apache.solr.handler.component.SearchHandler.handleRequestBody(SearchHandler.java:165) at org.apache.solr.handler.RequestHandlerBase.handleRequest(RequestHandlerBase.java:129) at org.apache.solr.core.SolrCore.execute(SolrCore.java:1376) at org.apache.solr.core.QuerySenderListener.newSearcher(QuerySenderListener.java:59) at org.apache.solr.core.SolrCore$3.call(SolrCore.java:1182) at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:314) at java.util.concurrent.FutureTask.run(FutureTask.java:149) at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:897) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:919) at java.lang.Thread.run(Thread.java:736) Hope somebody can help! Best regards, Thomas # dovecot --version 2.1.7 # dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.0.74-0.6.10-default x86_64 SUSE Linux Enterprise Server 11 (x86_64) xfs base_dir = /var/run/dovecot/ dict { expire = sqlite:/etc/dovecot/dovecot-dict-sql.conf.ext quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } first_valid_uid = 5000 listen = * login_greeting = tiri Mail ready. login_trusted_networks = 127.0.0.1 mail_location = maildir:/var/vmail/%u/ mail_plugins = fts fts_solr managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } ssl = no userdb { driver = passwd } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol imap { plugin { fts = solr fts_solr = break-imap-search url=http://localhost:8983/solr/ } } protocol pop3 { plugin { fts = solr fts_solr = break-imap-search url=http://localhost:8983/solr/ } }

3 4

[Dovecot] Design: Adding checksums to index files
by Timo Sirainen 05 Aug '13

05 Aug '13

I've been planning on adding these for years. Maybe it's about time soon. I guess they could be added already to v2.2, but enabled only by a new setting because it requires file format changes that old Dovecots can't then read. I could probably patch v2.1 also so it is able to at least read the new format without failing. For v2.3 this new format could then be made the default. And what would the checksums be exactly? Would the standard CRC32 and CRC8 work fine, or are there any better ones? 1. dovecot.index v2.1+ always only fully recreates this file, never overwrites data to it. So the checksums could be written only when the dovecot.index is being recreated. There are 3 possible things to checksum: - header (32bit checksum) - all of the mail records (32bit checksum) - each mail record independently (8bit checksum per mail) The header's checksum could be verified every time the index is opened. The full mail record checksum could be verified when something appears to be wrong, but it's probably a waste of time to check it in normal operation. I'm not really sure about the per-mail checksums. It would be easy to create them while dovecot.index is being created, but after reading the file into memory the records are updated in many ways in many places. It's probably not worth the complexity and extra slowness to verify and/or update the checksums in all the different places. So is it worth it to even have them? In error conditions when fixing up indexes it could be useful to skip over records with broken checksums (and check if the mail is in dovecot.index.backup with correct checksum). Maybe that's enough to be worth 1 byte per message?.. 2. dovecot.index.log This file is only appended to. Each committed transaction could be prefixed in the new format with <transaction size><transaction 32bit checksum>. With the new format this wouldn't actually increase the log file size much, because there is already some space wasted for a compatibility "boundary" record that could be removed now. 3. dovecot.index.cache Cache file is the most complex file. Its headers get overwritten once in a while. Probably not worth the trouble to checksum the header itself, and there's not a lot that could be done even if a broken checksum was found. But each mail_cache_record could have its own checksum. A 8bit checksum could be added without increasing the file's size. Maybe that would be enough? 4. dovecot.index.thread This is a rather simple file and a 32bit checksum could be added to its header, and verified every time the file is read (because it's fully read anyway). 5. dovecot.mailbox.log This file doesn't even have a header. There are 3 unused bytes in each record currently. One of them could be used for a new "flags" parameter, with the only flag being "checksum added". There would still be space left for 8bit or 16bit checksum. 6. Other files There are also some text files, like dovecot-acl, subscriptions, quota usage and Sieve scripts. They probably have to be without checksums for now.

2 2

[Dovecot] How to configure sendmail using dovecot lmtp
by alfdc 05 Aug '13

05 Aug '13

Hi, I can't seems to find any posting on how to configure sendmail to use dovecot as lmtp. All I see is using it as LDA. I am particularly interested on how to tell sendmail to ask dovecot to deliver the message to the user. In the wiki for lda it says to add the following in the sendmail config: FEATURE(`local_procmail', `/usr/local/libexec/dovecot/deliver',`/usr/local/libexec/dovecot/deliver -d $u') MODIFY_MAILER_FLAGS(`LOCAL', `-f') MAILER(procmail) Is this the same for lmtp? If so how does it know when to use lda or lmtp? Beside, is procmail playing any role in any of these? Can the I just replace the whole thing as: FEATURE(`local_lmtp',`/usr/local/libexec/dovecot/deliver',`/usr/local/libexec/dovecot/deliver -d $u) MAILER(`local') Thanks. -- View this message in context: http://dovecot.2317879.n4.nabble.com/How-to-configure-sendmail-using-doveco… Sent from the Dovecot mailing list archive at Nabble.com.

3 2

[Dovecot] Maildir Synchronization warnings
by Kavish Karkera 05 Aug '13

05 Aug '13

Hi, We are repeatedly getting these below warnings for some of our users, al though we have no complaints from them yet, we need to know why these warning occurs. So it would be help full if some one explain these warning msg in detail. ----------------------------------------------------------------------------------------------------------------------------------------------------- Aug 2 12:52:55 blade8 dovecot: imap(kavish.karkera(a)example.com): Warning: Maildir: Scanning /mail/v3store/example.com/kavish.karkera(a)example.com/Maildir/cur took 94 seconds (23191 readdir()s, 0 rename()s to cur/, why=0x1) Aug 2 12:52:55 blade8 dovecot: imap(kavish.karkera(a)example.com): Warning: Maildir /mail/v3store/example.com/kavish.karkera(a)example.com/Maildir: Synchronization took 94 seconds (0 new msgs, 0 flag change attempts, 0 expunge attempts) Aug 2 12:53:54 blade6 dovecot: imap(kavish.karkera(a)example.com): Warning: Maildir: Scanning /mail/v3store/example.com/kavish.karkera(a)example.com/Maildir/cur took 154 seconds (43129 readdir()s, 0 rename()s to cur/, why=0x1) Aug 2 12:53:54 blade6 dovecot: imap(kavish.karkera(a)example.com): Warning: Maildir: Scanning /mail/v3store/example.com/kavish.karkera(a)example.com/Maildir/cur took 162 seconds (43129 readdir()s, 0 rename()s to cur/, why=0xc) Aug 2 12:53:54 blade6 dovecot: imap(kavish.karkera(a)example.com): Warning: Maildir /mail/v3store/example.com/kavish.karkera(a)example.com/Maildir: Synchronization took 162 seconds (0 new msgs, 0 flag change attempts, 0 expunge attempts) Aug 2 12:53:54 blade6 dovecot: imap(kavish.karkera(a)example.com): Warning: Locking transaction log file /indexes//mail/v3store/example.com/kavish.karkera(a)example.com/.INBOX/dovecot.index.log took 50 seconds ----------------------------------------------------------------------------------------------------------------------------------------------------- Thanks In advance, Regards, Kavish Karkera

3 3

[Dovecot] Antispam folder names
by Jost Krieger 05 Aug '13

05 Aug '13

Is there anywhere a collection of folder names for the antispam_trash and antispam_spam configuration? Our problem is that in academia, you have a vast amount of different clients, and some, like Microsoft, use language-specific folder names *on the server*. So we're now collecting folder names to better handle the rare cases. Two more problems: 1. We needed to fix UTF-8 handling in the plugin, so that we kow canb say antispam_trash_pattern_ignorecase = gelöscht* in place of :set sp antispam_trash_pattern_ignorecase = gel&APY-scht* 2. Some clients allow prefixing the IMAP folders with a fixed name, often "INBOX". So we would like to specify something like antispam_trash_pattern_ignorecase = Junk*;*/Junk* which is not supported. Working on a patch ... Yours Jost -- | Helft Spam ausrotten! HTML in Mail ist unhöflich. | | Postmaster, JAPH, manchmal Wahrsager am RZ der RUB | | Wahre Worte sind nicht gefällig, gefällige Worte sind nicht wahr.| | Lao Tse, Tao Te King 81 |

2 1

[Dovecot] Fileoperations in Maildir – problematic or okay?
by Martin Burgraf 05 Aug '13

05 Aug '13

Hi, I'm wondering: Is it a problem to move and delete files inside a dovecot-managed maildir? For example: I have a folder ~/.maildir/.Sub1.Start/cur and a folder ~/.maildir/.Sub1.Start.old/cur and like to regularly move old mails from the first to the second one. Can you create a cron job saying something like: find ~/.maildir/.Sub1.Start/cur -mtime +5 -exec mv {} ~/.maildir/.Sub1.Start.old/cur \; ? I guess this would be some sort of problem, wouldn't it? IIRC dovecot keeps indexes of the files inside a folder and moving them around like this may confuse the software, am I right? bye Martin

3 2

[Dovecot] ./configure dovecot
by LuKreme 03 Aug '13

03 Aug '13

When I do a ./configure in dovecot (2.2.1) I get this notice (first line): configure: WARNING: you should use --build, --host, --target Then, much later on: checking sys/ucred.h presence... yes configure: WARNING: sys/ucred.h: present but cannot be compiled configure: WARNING: sys/ucred.h: check for missing prerequisite headers? configure: WARNING: sys/ucred.h: see the Autoconf documentation configure: WARNING: sys/ucred.h: section "Present But Cannot Be Compiled" configure: WARNING: sys/ucred.h: proceeding with the compiler's result configure: WARNING: ## ---------------------------------- ## configure: WARNING: ## Report this to dovecot(a)dovecot.org ## configure: WARNING: ## ---------------------------------- ## checking for sys/ucred.h... no at the end I get: configure: creating ./config.status Install prefix . : /usr/local File offsets ... : 64bit I/O polling .... : kqueue I/O notifys .... : kqueue SSL ............ : yes (OpenSSL) GSSAPI ......... : no passdbs ........ : static passwd passwd-file pam checkpassword : -shadow -bsdauth -sia -ldap -sql -vpopmail userdbs ........ : static prefetch passwd passwd-file checkpassword nss : -ldap -sql -vpopmail SQL drivers .... : : -pgsql -mysql -sqlite Full text search : squat : -lucene -solr but there is no makefile created. ./configure --help just runs the configure script again, and none of --build --host or --target have any effect on the errors shown, including the first line error. So I think, ok, fine, I'll grab the latest build (2.2.4). Same result. OK, fine. Let's look at 1.2.17. Same thing, only without the cured.h warning. Still the same error on the first line after ./configure and still no make file. There's no big flashing warning anywhere that I can see that says, "Hey, dummy, this isn't going to work." config.log even ends with a "configure: exit 0" (The system already has dovecot 1.2.17 installed, but I was looking at installing $LATEST). -- May you live in interesting times

2 9

[Dovecot] Mail being delivered but MUA showing empty inbox
by Nigel Smith 03 Aug '13

03 Aug '13

Dovecot : 2.0.19 (see config at http://pastebin.com/raw.php?i=KMaQ9Ccc) Postfix : 2.9.6 (see config at http://pastebin.com/raw.php?i=EEeevHfk) I'm trying to get Dovecot and Postfix working on Ubuntu 12.04LTS but am not having much luck. The problem is that although mail gets delivered to the correct place, however pointing a MUA of any description at Dovecot just yields a purportedly empty inbox ! I will first demonstrate correct delivery of mail, then I will show MUA - domain names changed to protect the innocent ! (1) Mail Delivery Aug 2 08:57:17 ukc-vm02-mx01 postfix/smtpd[2640]: connect from unknown[192.168.199.198] Aug 2 08:57:39 ukc-vm02-mx01 postfix/smtpd[2640]: 76AB04470E: client=unknown[192.168.199.198] Aug 2 08:57:47 ukc-vm02-mx01 postfix/cleanup[2644]: 76AB04470E: message-id=<> Aug 2 08:57:47 ukc-vm02-mx01 postfix/qmgr[2093]: 76AB04470E: from=<an(a)example.com>, size=208, nrcpt=1 (queue active) Aug 2 08:57:47 ukc-vm02-mx01 dovecot: lmtp(2192): Debug: none: root=, index=, control=, inbox=, alt= Aug 2 08:57:47 ukc-vm02-mx01 dovecot: lmtp(2192): Connect from local Aug 2 08:57:47 ukc-vm02-mx01 dovecot: lmtp(2192): Debug: auth input: test(a)ops.example.com uid=1001 gid=1001 home=/srv/mail/ops.example.com/test/./ Aug 2 08:57:47 ukc-vm02-mx01 dovecot: lmtp(2192, test(a)ops.example.com) Debug: Effective uid=1001, gid=1001, home=/srv/mail/ops.example.com/test Aug 2 08:57:47 ukc-vm02-mx01 dovecot: lmtp(2192, test(a)ops.example.com) Debug: maildir++: root=/srv/mail/ops.example.com/test, index=, control=, inbox=/srv/mail/ops.example.com/test, alt= Aug 2 08:57:47 ukc-vm02-mx01 dovecot: lmtp(2192, test(a)ops.example.com) ZH9VM3tm+1GQCAAAwf4bjw: msgid=unspecified: saved mail to INBOX Aug 2 08:57:47 ukc-vm02-mx01 postfix/lmtp[2645]: 76AB04470E: to=<test(a)ops.example.com>, relay=ukc-vm02-mx01.ops.example.com[private/dovecot-lmtp], delay=24, delays=24/0.01/0/0.09, dsn=2.0.0, status=sent (250 2.0.0 <test(a)ops.example.com> ZH9VM3tm+1GQCAAAwf4bjw Saved) Aug 2 08:57:47 ukc-vm02-mx01 dovecot: lmtp(2192): Disconnect from local: Client quit (in reset) Aug 2 08:57:47 ukc-vm02-mx01 postfix/qmgr[2093]: 76AB04470E: removed Aug 2 08:57:48 ukc-vm02-mx01 postfix/smtpd[2640]: disconnect from unknown[192.168.199.198] The mail is correctly saved in the right place….. # cat /srv/mail/ops.ops.example.com/test/new/1375430267.M868397P2192.ukc-vm02-mx01\,S\=477\,W\=486 Return-Path: <an(a)example.com> Delivered-To: <test(a)ops.ops.example.com> Received: from ukc-vm02-mx01.ops.ops.example.com by ukc-vm02-mx01.ops.ops.example.com (Dovecot) with LMTP id ZH9VM3tm+1GQCAAAwf4bjw for <test(a)ops.ops.example.com>; Fri, 02 Aug 2013 08:57:47 +0100 Received: from x (unknown [192.168.199.198]) by ukc-vm02-mx01.ops.ops.example.com (Postfix) with ESMTP id 76AB04470E for <test(a)ops.ops.example.com>; Fri, 2 Aug 2013 08:57:24 +0100 (BST) Subject: test (2) MUA * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. a1 LOGIN test(a)ops.example.com test a1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS] Logged in a2 EXAMINE INBOX * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS ()] Read-only mailbox. * 0 EXISTS * 0 RECENT * OK [UIDVALIDITY 1375424854] UIDs valid * OK [UIDNEXT 1] Predicted next UID * OK [HIGHESTMODSEQ 1] Highest a2 OK [READ-ONLY] Select completed. a3 LOGOUT * BYE Logging out a3 OK Logout completed. closed

5 29

[Dovecot] problems with doveadm
by listserv 03 Aug '13

03 Aug '13

Hello, since few weeks i have problems with the command: doveadm expunge -A mailbox Trash savedbefore 7d => kernel: doveadm[11609]: segfault at 10 ip b75f146a sp bf856ad0 error 4 in libdovecot.so.0.0.0[b7585000+c8000] but for a single user it's works fine: doveadm expunge -u test(a)vtlx.de mailbox Trash savedbefore 30h I hope there is a solution for this. with regards Mario -- 中華人民共和國

1 0

[Dovecot] system_groups_user syntax especially in LDAP
by ray klassen 02 Aug '13

02 Aug '13

so if possible, I'd like an example of how to include system_groups_user in the userdb setup. I'm using ldap, but I could revert to using pam on ldap. There is a ldap query (gleaned from smbldap-tools) that will return a list of groups for a user (&(objectclass=posixGroup)(memberuid=%u)) but I don't know if the ldap driver will handle it but above all I can't figure out how it fits into the dovecot configuration! I'm trying to get Dovecot 2.1.7 on debian wheezy to recognize shared folders that have group ownership.

1 1

[Dovecot] Lowering Log Levels Back to Defaults
by Asai 02 Aug '13

02 Aug '13

Greetings, I'm sorry for asking what may be a really obvious question, but I'm having a hard time turning off logging, or at least getting less verbose logging. My dsync logs are about 7 MB daily, and I'm trying to get that switched off. At one point I had it on a lower level of verbosity, and I turned it up for debugging purposes, but now I cannot seem to turn it back down, which is something I did many times before. For example the logs are getting tons of Info level messages. dsync(asai(a)globalchangemusic.org): Info: expunge: box=Trash, uid=61625, msgid=<JIRA.14456.1367259371732.1046.1367259384800@hexagon>, size=9586 In dovecot.conf I have commented out the following include, which used to lower the log levels back to the defaults, but I've upgraded Dovecot recently to 2.2.4 from 2.1 something: #!include conf.d/10-logging.conf I had the default levels raised in that config file. I'm not sure this helps but: [vmail@triata ~]# doveconf -n # 2.2.4: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.32.1.el5xen x86_64 CentOS release 5.5 (Final) ext3 auth_mechanisms = plain login mail_home = /vmail/%d/%n/home mail_location = maildir:/vmail/%d/%n mail_plugins = " mail_log notify" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } plugin { sieve = /vmail/%d/%n/sievescript } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = vmail mode = 0660 user = vmail } unix_listener auth-userdb { mode = 0660 user = vmail } user = root } service imap-login { process_min_avail = 3 service_count = 0 vsz_limit = 0 } ssl_cert = </etc/postfix/ssl/triata.globalchangemultimedia.net.pem ssl_key = </etc/postfix/ssl/triata.key userdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } protocol lda { hostname = triata.globalchangemultimedia.net mail_plugin_dir = /usr/lib64/dovecot/ mail_plugins = sieve postmaster_address = postmaster(a)globalchangemultimedia.net } protocol imap { imap_idle_notify_interval = 24 mins mail_max_userip_connections = 60 } -- --Asai

2 2

[Dovecot] Custom quota setup
by Richard Platel 02 Aug '13

02 Aug '13

(Dovecot 2.2-ee) We have a weird quota requirement, we have file storage that we manage through our own APIs but want that usage to come out of the user's mail quota. The usage is in a maildirsize like file uncreatively called filestoresize in the user's maildir. In the past we've been doing this by modifying the quota plugin and re-compiling, but it seems like it should be possible to do this via configuration. Is there a way to add a quota setting pointing at this file for additional usage (not limits)? The feature is used infrequently so it would probably be acceptable use the dirsize backend, but I can't figure out how to configure that to point at a certain directory. We pass custom quota rules for each user in our userdb, and use a custom dict proxy program, so that program could read the file and pass a setting at log in time too (if, for example, there was a setting that said "offset the user's quota usage by X amount") Thanks.

2 5

[Dovecot] dsync backup mails compressed
by Robert Schetterer 02 Aug '13

02 Aug '13

Hi Timo , looks like if zlib plugin is enabled all backupmails ( Maildir ) getting compressed i tested this dsync -o plugin/acl= -o plugin/quota= -u user(a)beispiel.de backup maildir://nfs-backup-data/user@beispiel.de adding -o plugin/zlib= didnt help i am not sure , what is the expected behave , and why -o plugin/quota= does not work ? Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

2 3

Re: [Dovecot] HTTP passdb (was: feature request: IMAP passdb prefetch)
by Timo Sirainen 02 Aug '13

02 Aug '13

(Cc'd to dovecot list anyway since other people might be interested) On 2.8.2013, at 18.34, Richard Platel <rplatel(a)tucows.com> wrote: >> Uh. Why not simply something completely different like HTTP-based passdb? > > I can't find info for HTTP on the wiki, can we set that up as a success/fail passdb? We do our own password auth (so we can support custom hash types, etc). I've only a private version of a HTTP-based passdb implemented for a customer. I'm not sure if I should bother adding something to be distributed with Dovecot, since I guess most people would want to modify it in some way anyway. Here's a somewhat modified version of it that hopefully works (at least it compiles): http://dovecot.org/patches/2.2/passdb-openam.c

1 0

[Dovecot] feature request: IMAP passdb prefetch
by Richard Platel 02 Aug '13

02 Aug '13

> On 2.8.2013, at 18.20, Richard Platel <rplatel(a)tucows.com> wrote: > >> It'd be useful for us if the IMAP passdb could be used as a prefetch userdb. >> >> The remote IMAP server could respond with something like >> >> * OK key=value >> * OK key=value >> SEQ OK [CAPABILITY ...] Logged in. >> >> Or >> >> * OK <some JSON key value pairs> >> SEQ OK [CAPABILITY ...] Logged in. >> >> Would anyone else find this useful? > > Uh. Why not simply something completely different like HTTP-based passdb? > I can't find info for HTTP on the wiki, can we set that up as a success/fail passdb? We do our own password auth (so we can support custom hash types, etc).

1 0

[Dovecot] feature request: IMAP passdb prefetch
by Richard Platel 02 Aug '13

02 Aug '13

It'd be useful for us if the IMAP passdb could be used as a prefetch userdb. The remote IMAP server could respond with something like * OK key=value * OK key=value SEQ OK [CAPABILITY ...] Logged in. Or * OK <some JSON key value pairs> SEQ OK [CAPABILITY ...] Logged in. Would anyone else find this useful?

2 1

Re: [Dovecot] Mail being delivered but MUA showing empty inbox
by Nigel Smith 02 Aug '13

02 Aug '13

> You should take this discussion off list. Tell me Dem.... which part of my original question was not fit for the list ? It was a perfectly valid technical question relating to Dovecot, and according to the description of the mailing list "This is the main list for requesting help with Dovecot or talking about it in general" So I was "requesting help" with Dovecot, and everyone else is perfectly within their rights to "talk about it".

1 0

[Dovecot] 2.2.4 - Some questions about and needing help with quota-status
by Axel Luttgens 02 Aug '13

02 Aug '13

Help! I'm stuck. :-( The config of my experimental setup appears at the end of this message; I'm providing hereafter some more info that may not be immediately obvious. This is dovecot 2.2.4 with changesets 9091d0f2d971 and 2be295a0b64f. All involved databases are sqlite ones. passdb and userdb are devised so as to change usernames. For example, I could have a user with addresses "doe(a)oldexample.com", "johnd(a)oldexample.com" and "john.doe(a)example.com" needing to be able to log in as "jdoe" or "u123456"; all db lookups for that user then end with name "john.doe". This is a single mail user setup (user/group "dovemailer", uid/gid 999). Service lmtp has been configured to run as that user; that required a slight adjustment at the auth-userdb socket level. As a general rule, the quota dict appears to be correctly updated upon message arrivals and removals (thru lmtp, pop, imap), and to be correctly queried/interpreted by the various parts of the server. For example, thru the userdb query, user john.doe has been given an even lower quota limit than the already low default defined for testings: $ sudo doveadm quota get -u john.doe Quota name Type Value Limit % Quota utilisateur STORAGE 20 5 400 Quota utilisateur MESSAGE 14 - 0 and is clearly recognized as being over-quota by lmtp: $ telnet /_ROOT/var/run/dovecot/lmtp Trying /_ROOT/var/run/dovecot/lmtp... Connected to (null). Escape character is '^]'. 220 almba.local Dovecot ready. mail from:<mary.jane(a)example.com> 250 2.1.0 OK rcpt to:<john.doe(a)example.com> 250 2.1.5 OK data 354 OK Subject: test . 552 5.2.2 <john.doe(a)example.com> Quota exceeded (mailbox for user is full) Note that both services config and dict are launched if they aren't running. Since it has been previously seen that running quota-status as root comes with its own problems, and since it is a single user setup anyway, I'm trying to run it as dovemailer as well. So, let's try to see what quota-status thinks about john.doe: $ sudo -u _postfix telnet /_ROOT/var/spool/postfix/private/quota-policyd Trying /_ROOT/var/spool/postfix/private/quota-policyd... Connected to (null). Escape character is '^]'. Connection closed by foreign host. Clearly, not much... Looking in the log: dovecot[10554]: quota-status: Fatal: Error reading configuration: net_connect_unix(/_ROOT/var/run/dovecot/config) failed: Permission denied This thus raises a first question: Q1. What makes lmtp and quota-status different? How does lmtp manage to fetch all needed info, while quota-status seems to require an access to the config socket? Let's then slightly adjust dovecot.conf, in the hope to make quota-status happy: service config { unix_listener config { group = dovemailer mode = 0660 } } Q2. Should the above really be needed, wouldn't there be a better way? I ask, because it seems to me that I'm starting to seriously lose the benefits of privilege separation... Anyway, let's ask quota-status again: $ sudo -u _postfix telnet /_ROOT/var/spool/postfix/private/quota-policyd Password: Trying /_ROOT/var/spool/postfix/private/quota-policyd... Connected to (null). Escape character is '^]'. recipient=john.doe(a)example.com size=10000 action=OK ^] telnet> quit Connection closed. In the log: dovecot[11050]: auth: Debug: userdb out: USER 1 john.doe(a)example.com quota_rule=*:storage=5k dovecot[11050]: quota-status: Debug: auth input: john.doe(a)example.com quota_rule=*:storage=5k dovecot[11050]: quota-status: Debug: Added userdb setting: plugin/quota_rule=*:storage=5k dovecot[11050]: quota-status(john.doe(a)example.com): Debug: Effective uid=999, gid=999, home=/_Mailstores/john.doe dovecot[11050]: quota-status(john.doe(a)example.com): Debug: Quota root: name=Quota utilisateur backend=dict args=john.doe:proxy::sql_quota dovecot[11050]: quota-status(john.doe(a)example.com): Debug: Quota rule: root=Quota utilisateur mailbox=* bytes=5120 messages=0 dovecot[11050]: quota-status(john.doe(a)example.com): Debug: Quota grace: root=Quota utilisateur bytes=512 (10%) dovecot[11050]: quota-status(john.doe(a)example.com): Debug: dict quota: user=john.doe, uri=proxy::sql_quota, noenforcing=0 dovecot[11050]: quota-status(john.doe(a)example.com): Debug: fs: root=/_Mailstores/john.doe/mboxes, index=, indexpvt=, control=, inbox=/_Mailstores/john.doe/mboxes/inbox, alt= It is to be noted that the config server is now launched as expected, but that the dict server still isn't. Trying a dirsize backend instead of the dict backend doesn't help. The problem seems to be circumscribed to the interaction with the quota backend since, for example, querying quota-status for an unknown recipient yields an expected "action=REJECT Unknown user". Hence my last question, after having tried a lot of things for several days now, with no more success: Q3. What am I doing wrong? Many thanks in advance, Axel # 2.2.4: /_ROOT/etc/dovecot/dovecot.conf # OS: Darwin 12.4.0 x86_64 auth_debug = yes dict { sql_quota = sqlite:/_ROOT/etc/dovecot/dict-quota.conf } disable_plaintext_auth = no listen = * mail_debug = yes mail_gid = dovemailer mail_home = /_Mailstores/%n mail_location = mbox:~/mboxes:INBOX=~/mboxes/inbox mail_plugins = quota mail_uid = dovemailer managesieve_sieve_capability = vacation mbox_write_locks = fcntl passdb { args = /_ROOT/etc/dovecot/db.conf driver = sql } plugin { quota = dict:Quota utilisateur:%n:proxy::sql_quota quota_rule = *:storage=50M sieve = ~/sieve/active_script.sieve sieve_dir = ~/sieve/scripts sieve_extensions = vacation sieve_max_actions = 3 sieve_max_redirects = 2 sieve_max_script_size = 10K sieve_user_log = ~/sieve/log } service auth { unix_listener auth-userdb { group = dovemailer mode = 0660 user = $default_internal_user } } service dict { unix_listener dict { group = dovemailer mode = 0660 } } service lmtp { group = dovemailer user = dovemailer } service quota-status { client_limit = 1 executable = quota-status -p postfix group = dovemailer unix_listener /_ROOT/var/spool/postfix/private/quota-policyd { user = _postfix } user = dovemailer } ssl = no userdb { driver = prefetch } userdb { args = /_ROOT/etc/dovecot/db.conf driver = sql } protocol lmtp { mail_plugins = quota sieve postmaster_address = postmaster(a)example.com sendmail_path = /_ROOT/postfix/sbin/sendmail } protocol pop3 { pop3_uidl_format = %08Xv%08Xu }

2 9

[Dovecot] mails delivered to the wrong user when using lmtp_proxy and reject_unverified_recipient
by Peer Heinlein 02 Aug '13

02 Aug '13

Hi, looks like we detected a serious bug in dovecot's lmtp proxying where e-mails are delivered to the wrong user. The setup is: *) Dovecot is configured with "lmtp_proxy=yes" # Support proxying to other LMTP/SMTP servers by performing passdb lookups. lmtp_proxy = yes *) Postfix uses "dynamic recipient verification", so Postfix starts sending a (verify) mail by LMTP to dovecot, but quits the lmtp-session right after the RCPT TO:. No DATA-stage is reached in the protocol and no real e-mail is sent. But Postfix had a LMTP-connection for "user1". *) Just some seconds later a "real" e-mail to "user2" has to be delivered to dovecot by LMTP. But Dovecot will deliver this mail to the wrong "user1" instead of "user2". Looks like dovecot re-uses the (still opened?) lmtp-proxy-connection from "user1" to deliver an e-mail to "user2". Have a log at the protocol: 1) There's a verify call to user1 from Postfix: Jul 19 13:49:49 mailms postfix/lmtp[9842]: DE653280C51: to=<user1(a)example.com>, relay=localhost[127.0.0.1]:24, conn_use=2, delay=120, delays=117/0.45/0/2.5, dsn=2.1.5, status=deliverable (250 2.1.5 OK) 2) Just five seconds later the e-mail to user2 (see Postfix' point of view in the last line) is delivered to user2 (see result from Dovecot in the last line): Jul 19 13:50:04 mailms dovecot: lmtp(10965, kraemer): save: box=INBOX, uid=49880, msgid=<59798276-E5D1-4053-A570-9901B731DF5D(a)example.come>, size=11020 Jul 19 13:50:04 mailms dovecot: lmtp(10965, kraemer): 1zTeKrMn6VHVKgAAhyqEuA: msgid=<59798276-E5D1-4053-A570-9901B731DF5D(a)example.com>: saved mail to INBOX Jul 19 13:50:04 mailms postfix/lmtp[10953]: C25FC280BE5: to=<user2(a)example.com>, relay=localhost[127.0.0.1]:24, conn_use=19, delay=116, delays=115/0.53/0/0.33, dsn=2.0.0, status=sent (250 2.0.0 <user2> 1zTeKrMn6VHVKgAAhyqEuA Saved) Same with user3 and user4: Jul 19 14:47:53 mailms postfix/lmtp[10845]: C389A2809D7: to=<user3(a)example.com>, relay=localhost[127.0.0.1]:24, delay=4.7, delays=3.7/0.87/0/0.19, dsn=2.1.5, status=deliverable (250 2.1.5 OK) Jul 19 14:47:55 mailms dovecot: lmtp(26546, fs211113): save: box=INBOX, uid=8504, msgid=<928729810.113.1374238063381(a)example.com>, size=233151 Jul 19 14:47:55 mailms dovecot: lmtp(26546, fs211113): MbMvI2816VGyZwAAhyqEuA: msgid=<928729810.113.1374238063381(a)example.com>: saved mail to INBOX Jul 19 14:47:55 mailms postfix/lmtp[22524]: 6F0D2280A6E: to=<user4(a)example.com>, relay=localhost[127.0.0.1]:24, conn_use=2, delay=10, delays=8.4/1/0/0.8, dsn=2.0.0, status=sent (250 2.0.0 <user3> MbMvI2816VGyZwAAhyqEuA Saved) The user itself is quite normal in the user database (but has a mailhost=127.0.0.1 set): root@mailms:/etc/dovecot/conf.d# doveadm user user2(a)example.com userdb: user2(a)example.com uid : 5000 gid : 5000 home : /srv/mail/user2 root@mailms:/etc/dovecot/conf.d# doveadm auth user2(a)example.com Password: passdb: user2(a)example.com auth failed extra fields: user=user2 Peer -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-42 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

4 3

[Dovecot] Auth-woker log lines
by Grzegorz Staniak 02 Aug '13

02 Aug '13

Hi, Are log lines like the following: Jul 28 15:30:50 mx1.somewhere dovecot: auth-worker(18980): sql(user(a)domain,217.67.x.x): unknown user Jul 28 15:32:56 mx1.somewhere dovecot: auth-worker(18980): sql(user(a)domain,212.182.x.x): Password mismatch written every time any authetntication phase fails, in SASL as well as in POP3/IMAP mailbox access? I have a legacy app that would gain a lot if I could distinguish between failed SASL authentication and failed POP3/IMAP authentication. I know I can use the "auth failed" lines for the latter case, and postfix log lines in the former, but they don't contain user info. Is there a way for log monitoring software to get failed login lines with both user info, and the reason (SASL, POP3, IMAP)? Regards, -- Grzegorz Staniak <gstaniak [at] gmail _dot_ com>

2 1

[Dovecot] 2.2.4 - quota-status changing the user it is running as
by Axel Luttgens 02 Aug '13

02 Aug '13

Hello, I'm currently experimenting with this quota-status service configuration: service quota-status { client_limit = 1 executable = quota-status -p postfix # Let's make the default explicit. user = root unix_listener /var/spool/postfix/private/quota-policyd { user = postfix } } The idea is to run the service as root during the preliminary tests (at worst, since the service is going to be used as a policy daemon by Postfix only, it shouldn't be very problematic to have it running as root anyway). A user, with address john.doe(a)example.com and identified as john.doe, is known to be over-quota. A "doveadm quota get" returns: $ sudo doveadm quota get -u john.doe Password: Quota name Type Value Limit % Quota utilisateur STORAGE 5 5 100 Quota utilisateur MESSAGE 9 - 0 and messages for that user are correctly rejected by lmtp: dovecot[4989]: lmtp(5069, john.doe(a)example.com) QWSWLgrP4lF7FAAA5Q0ykw: msgid=<20130714161643.9085DF176F2(a)ALMba.local>: save failed to INBOX: Quota exceeded (mailbox for user is full) Let's now simulate a connection from Postfix: $ sudo -u postfix telnet /_ROOT/var/spool/postfix/private/quota-policyd Trying /_ROOT/var/spool/postfix/private/quota-policyd... Connected to (null). Escape character is '^]'. A look at the output of top (excerpt) confirms that quota-status is running as root: PID COMMAND UID 5100 quota-status 0 Going on with our telnet session: recipient=john.doe(a)example.com size=10000 action=OK Hmmm... OK, this may be a config problem of mine which may require further investigation. Anyway, looking at top's output: PID COMMAND UID 5100 quota-status 999 it appears that quota-status is now running as the mail_uid/mail_gid user; the switch happens immediately after having entered the empty line in the telnet session. Let's then try to go further within the telnet session: recipient=john.doe(a)example.com size=10000 action=DEFER_IF_PERMIT Internal error occurred. Refer to server log for more information. ^] telnet> quit Connection closed. and a look at the log indeed reveals that quota-status doesn't have sufficient privileges anymore: dovecot[4989]: quota-status(john.doe(a)example.com): Error: user john.doe(a)example.com: Error reading configuration: net_connect_unix(/_ROOT/var/run/dovecot/config) failed: Permission denied Is this the expected behavior, to have quota-status switch to another user? TIA, Axel

3 8

[Dovecot] [PATCH] quota-status: allow different action for messages that are too large (over maximum quota)
by Ulrich Zehl 02 Aug '13

02 Aug '13

This proposed patch to quota-status allows the administrator to return different actions for messages that (a) cannot currently fit in the quota (because there's not enough free space) and (b) are over the maximum quota limit (and could not even be delivered if the mailbox was empty). Configuration works like this: plugin { quota_status_overquota = DEFER_IF_PERMIT 4.2.2 Mailbox full quota_status_toolarge = REJECT 5.2.3 Message length exceeds administrative limit } The patch is backwards compatible: If quota_status_toolarge is not set, quota_status_overquota is returned. No changes are necessary in setups where the new feature is not desired. The reason I developed this patch is: In my environment, I have mostly POP3 mailboxes, where condition (a) changes frequently (usually after each login), but condition (b) will almost never change (users do not get additional mailbox space often). Thus, I'd like to avoid bouncing mails that could be delivered half an hour later. This patch works for 2.2 and 2.1. (This assumes you have already applied the trivial patch I sent earlier; otherwise patch(1) will report some fuzz.) What do you think of this? Ulrich --- a/src/plugins/quota/quota-status.c 2013-08-01 18:05:24.000000000 +0200 +++ b/src/plugins/quota/quota-status.c 2013-08-01 18:03:30.000000000 +0200 @@ -46,13 +46,12 @@ } static int -quota_check(struct mail_user *user, uoff_t mail_size, const char **error_r) +quota_check(struct mail_user *user, uoff_t mail_size, const char **error_r, bool *too_large) { struct quota_user *quser = QUOTA_USER_CONTEXT(user); struct mail_namespace *ns; struct mailbox *box; struct quota_transaction_context *ctx; - bool too_large; int ret; if (quser == NULL) { @@ -64,7 +63,7 @@ box = mailbox_alloc(ns->list, "INBOX", 0); ctx = quota_transaction_begin(box); - ret = quota_test_alloc(ctx, I_MAX(1, mail_size), &too_large); + ret = quota_test_alloc(ctx, I_MAX(1, mail_size), too_large); quota_transaction_rollback(&ctx); mailbox_free(&box); @@ -82,6 +81,7 @@ struct mail_storage_service_user *service_user; struct mail_user *user; const char *value = NULL, *error; + bool too_large; int ret; if (client->recipient == NULL) { @@ -98,14 +98,21 @@ if (ret == 0) { value = nouser_reply; } else if (ret > 0) { - if ((ret = quota_check(user, client->size, &error)) > 0) { + if ((ret = quota_check(user, client->size, &error, &too_large)) > 0) { /* under quota */ value = mail_user_plugin_getenv(user, "quota_status_success"); if (value == NULL) value = "OK"; } else if (ret == 0) { - /* over quota */ - value = mail_user_plugin_getenv(user, "quota_status_overquota"); + if (too_large == TRUE) { + /* even over maximum quota */ + value = mail_user_plugin_getenv(user, "quota_status_toolarge"); + if (value == NULL) /* backwards compatibility */ + value = mail_user_plugin_getenv(user, "quota_status_overquota"); + } else { + /* over quota */ + value = mail_user_plugin_getenv(user, "quota_status_overquota"); + } if (value == NULL) value = t_strdup_printf("554 5.2.2 %s", error); }

2 1

Re: [Dovecot] LDA vs. LMTP
by Joseph Tam 02 Aug '13

02 Aug '13

(Weird: this message digest got dumped into Google's spam folder. Maybe it didn't like the string in a later post (obfuscated here) master(dot)cf, which in the context of this mailing list is a postfix configuration file, but which Gmail interpret as a website. However, that domain is a SURBL/DBL blacklisted URI). Ben Morrow writes: > > > And when it's running as root there is always the danger > > > of privilege escalation. LDA only runs when it's needed and since it > > > uses only user rights it shoudbe more harmless. > > > > ... > > (I'm assuming LMTP stays as root, and not spawning off user > > processes to do the real work.) > > It doesn't stay as root; Dovecot's LMTP switches down to the user's uid > to perform delivery, including sieve scripts. I stand corrected. This removes the other objection that the original poster for running a peristent LMTP process. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] misconception in uid and gid
by Felix Rubio Dalmau 02 Aug '13

02 Aug '13

Hi, I'm using a SQL database to store the usernames and passwords of my users. However, I have found that I must explicitly return the uid and gid with every query, even though all virtual users use the same uid and gid. The query, that works, is: user_query = SELECT mail, 'vmail' AS uid, 'vmail' AS gid, home, CONCAT('*:storage=', quota_MB*1024) AS quota_rule \ FROM virtual_users AS V LEFT JOIN virtual_domains AS D ON V.domain_id=D.id WHERE V.user='%n' AND D.name='%d' Nevertheless, if I remove the segments "'vmail' AS uid, 'vmail' AS gid" and modify the file conf.d/10-mail.conf to show mail_uid = vmail mail_gid = vmail I get this error: dovecot: auth: Error: userdb(<mail>): client doesn't have lookup permissions for this user: userdb reply doesn't contain uid (change userdb socket permissions) Does anybody know what is wrong in my set-up? Regards, Felix

3 4

Re: [Dovecot] dovecot Digest, Vol 124, Issue 4
by Felix Rubio Dalmau 02 Aug '13

02 Aug '13

Hello Axel, but then I don't get it: I thought that "uid" and "gid" in the user_query where used to access the local FS, whereas the "unix_listener auth-userdb" are used to indicate under which owner/group must be auth-userdb run... although maybe I'm wrong :-S :-) What I'm looking forward to is to eliminate the need for returning these two fixed items, as long as all the virtual_users will be using the same uid and gid. Does anybody know how can I do it?? Regards, and thank you! Felix > Date: Thu, 1 Aug 2013 17:50:33 +0200 > From: Axel Luttgens <AxelLuttgens(a)swing.be> > To: Dovecot Mailing List <dovecot(a)dovecot.org> > Subject: Re: [Dovecot] misconception in uid and gid > Message-ID: <89AC3212-EFE6-41E5-A22D-97DC8E771218(a)swing.be> > Content-Type: text/plain; charset=iso-8859-1 > > Le 1 ao?t 2013 ? 15:43, Felix Rubio Dalmau a ?crit : > > > [...] > > > > Nevertheless, if I remove the segments "'vmail' AS uid, 'vmail' AS gid" and modify the file conf.d/10-mail.conf to show > > > > mail_uid = vmail > > mail_gid = vmail > > > > I get this error: > > > > dovecot: auth: Error: userdb(<mail>): client doesn't have lookup permissions for this user: userdb reply doesn't contain uid (change userdb socket permissions) > > > > Does anybody know what is wrong in my set-up? > > Hello Felix, > > Yes and no... > This still remains a bit unclear to me, but you could try something like this: > > service auth { > > unix_listener auth-userdb { > > # default: user = $default_internal_user > group = vmail # default: group = > mode = 0660 # default: mode = 0666 > } > } > > The code has some provisions to avoid the auth-userdb to be too widely open, in spite of that default mode 0666. Changing that mode short-circuits those provisions, and the above is the most secure setting I could think of in the case of a single uid/gid setup. > > HTH, > Axel

2 1

[Dovecot] Wrong remote IP (rip) in mail.log using IMAP login
by tyli 02 Aug '13

02 Aug '13

Dear list users While trying to secure our dovecot server with fail2ban I came across the following problem: We use dovecot (1.2.9, ubuntu package) behind a NAT, and failed login attempts are logged with our firewall as the remote ip. Example: Apr 15 08:36:26 mail dovecot: imap-login: Disconnected (auth failed, 6 attempts): user=<xy>, method=PLAIN, rip=192.168.0.1, lip=192.168.0.3 Therefore I would ban 192.168.0.1 which means that I ban EVERY user. Funny thing is that POP3 login attempts are logged correctly: Apr 13 11:05:50 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<sgvyniwx>, method=PLAIN, rip=217.81.27.55, lip=192.168.0.3 Any ideas how to change this? Thanks in advance tyli

5 5

[Dovecot] Dovecot v2.2.4 (ebbe00999da8) doveadm crash
by e-frog 01 Aug '13

01 Aug '13

Hello, Current Dovecot v2.2 HG crashes using the following command: $ doveadm mailbox status -A -t unseen 'virtual/unread' Please see backtrace below and dovecot -n output attached. Thanks, e-frog gdb /usr/bin/doveadm 24023 GNU gdb (GDB) 7.5.91.20130417-cvs-ubuntu Copyright (C) 2013 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i686-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/bin/doveadm...Reading symbols from /usr/lib/debug/usr/bin/doveadm...done. done. Attaching to program: /usr/bin/doveadm, process 24023 warning: unable to open /proc file '/proc/24023/status' warning: unable to open /proc file '/proc/24023/status' ptrace: No such process. [New LWP 24023] warning: Can't read pathname for load map: Input/output error. [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/i386-linux-gnu/libthread_db.so.1". Core was generated by `doveadm mailbox status -A -t unseen virtual/unread'. Program terminated with signal 11, Segmentation fault. #0 i_stream_next_line (stream=0x0) at istream.c:382 382 istream.c: No such file or directory. (gdb) bt full #0 i_stream_next_line (stream=0x0) at istream.c:382 _stream = <optimized out> pos = <optimized out> #1 0xb754656b in auth_master_user_list_next (ctx=0xb91bfbd8) at auth-master.c:689 line = <optimized out> #2 0xb7634a0b in mail_storage_service_all_next (ctx=0xb91c4ba8, username_r=username_r@entry=0xbf8e6630) at mail-storage-service.c:1260 __FUNCTION__ = "mail_storage_service_all_next" #3 0xb7752d46 in doveadm_mail_cmd_get_next_user (ctx=0xb91be478, username_r=0xbf8e6630) at doveadm-mail.c:416 No locals. #4 0xb7753e95 in doveadm_mail_all_users (wildcard_user=0x0, argv=0xb91ba1ec, ctx=0xb91be478) at doveadm-mail.c:368 ret = <optimized out> input = {module = 0x0, service = 0xb77918f3 "doveadm", username = 0xb91bf8a0 "test1(a)local.lan", session_id = 0x0, local_ip = {family = 0, u = { ip6 = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = { s_addr = 0}}}, remote_ip = {family = 0, u = {ip6 = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}}, local_port = 0, remote_port = 0, userdb_fields = 0x0, flags_override_add = (unknown: 0), flags_override_remove = (unknown: 0), no_userdb_lookup = 0} user_idx = 0 user = 0xb91bf8a0 "test1(a)local.lan" error = 0x10 <Address 0x10 out of bounds> #5 doveadm_mail_cmd (argv=0xb91ba1ec, argc=-1189371412, cmd=0xbf8e668c) at doveadm-mail.c:523 ctx = 0xb91be478 getopt_args = <optimized out> ret = <optimized out> c = <optimized out> wildcard_user = 0x0 error = <optimized out> #6 doveadm_mail_try_run (cmd_name=cmd_name@entry=0xb91ba200 "mailbox", argc=5, argc@entry=6, argv=argv@entry=0xb91ba1dc) at doveadm-mail.c:608 cmd = 0xbf8e668c #7 0xb7752903 in main (argc=6, argv=0xb91ba1dc) at doveadm.c:398 cmd_name = 0xb91ba200 "mailbox" i = <optimized out> quick_init = false c = <optimized out> (gdb)

2 4

[Dovecot] [PATCH] quota-status: remove unnecessary newlines
by Ulrich Zehl 01 Aug '13

01 Aug '13

Here's a trivial patch for quota-status.c that removes unecessary newlines present in the default overquota message. It applies to 2.2 and 2.1. Ulrich --- a/src/plugins/quota/quota-status.c 2013-08-01 14:35:35.000000000 +0200 +++ b/src/plugins/quota/quota-status.c 2013-08-01 17:58:26.000000000 +0200 @@ -107,7 +107,7 @@ /* over quota */ value = mail_user_plugin_getenv(user, "quota_status_overquota"); if (value == NULL) - value = t_strdup_printf("554 5.2.2 %s\n\n", error); + value = t_strdup_printf("554 5.2.2 %s", error); } value = t_strdup(value); /* user's pool is being freed */ mail_user_unref(&user);

1 0

[Dovecot] trouble with setting individual quota values for multiple namespaces
by Andreas Oster 01 Aug '13

01 Aug '13

Hello all please apologize that I repost this problem again. I tried to get some help several times on the list but did not find/get a solution. I am still struggling to setup different quotas for namespaces. In addition to the default "INBOX" namespace I have created a namespace called "MailArchive" which should have its own quota value of 5G per user. At first I configured quota2 like this: quota2 = maildir:MailArchive quota:ns=MailArchive/ quota2_rule = *:storage=5G and this seemd to work quite well. Users, accessing the MailArchive namespace can see the 5G limit in their mail client, unfortunately in the mail.err log file, errors like these repeatedly appear: Jul 29 11:40:24 mailserver dovecot: imap(testuser): Error: quota: Unknown namespace: MailArchive/ Jul 29 11:41:43 dovecot: last message repeated 47 times In the WIKI I have read, that in order to have quota for different namespaces, one would have to use different quota backends so I changed the quota config for the MailArchive namespace to SQL. namespace inbox { disabled = no hidden = no ignore_on_failure = no inbox = yes list = yes location = mailbox Drafts { auto = subscribe driver = special_use = \Drafts } mailbox Junk { auto = subscribe driver = special_use = \Junk } mailbox Sent { auto = subscribe driver = special_use = \Sent } mailbox "Sent Messages" { auto = no driver = special_use = \Sent } mailbox Trash { auto = subscribe driver = special_use = \Trash } prefix = separator = / subscriptions = yes type = private } namespace { disabled = no hidden = no ignore_on_failure = no inbox = no list = yes location = maildir:/var/vmail/archive/%Ln/Maildir mailbox "Archived Mails" { auto = subscribe driver = } prefix = MailArchive/ separator = / subscriptions = yes type = private } plugin { quota = maildir:User quota:ns= quota2 = dict:Archive Quota:%u.mailarchive:ns=MailArchive/:proxy::sqlquota quota2_rule = *:storage=5G quota_rule = *:storage=1G quota_rule2 = Trash:storage=+200M } dict { sqlquota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } Unfortunately this did not change anything. Quota is working like expected but I still get the same errors in mail.err. I am currently using dovecot version 2.2.4. Thank you for your kind help best regards Andreas

2 4

[Dovecot] SSL warning messages
by Anand Kumria 01 Aug '13

01 Aug '13

Hi, I've had the following appear in my logfile, and am just wondering what the warning means? dovecot: managesieve-login: Warning: SSL alert: where=0x4008, ret=256: warning close notify [a.b.c.d] dovecot: imap-login: Warning: SSL alert: where=0x4004, ret=256: warning close notify [w.x.y.z] Should I be worrying about these kinds of messages? Dovecot 2.2.4 on Ubuntu 12.04 LTS if it is important. Thanks, Anand

2 1

Re: [Dovecot] Maildir permissions and Solr re-indexing
by Joseph Tam 01 Aug '13

01 Aug '13

Michael Welsh Duggan writes: > All the files in my Maildir are owned by md5i:mail (I am md5i), and have > 660 permissions. All directories have the same user:group permissions, > and 770 with the setguid bit set. (That last may not be necessary, but > ... > > doveadm(md5i): Error: fchown(/home/md5i/Maildir/.mail.test/dovecot.index.log.newlock, group=8(mail)) failed: Operation not permitted (egid=1000(md5i), group based on /home/md5i/Maildir/.mail.test - see http://wiki2.dovecot.org/Errors/ChgrpNoPerm) > > After this, each directory has a dovecot.index.log with md5i:md5i 600 > permissions. I think the cause is clear enough: you (user=md5i/uid=1000) are not part of group mail (gid=8), so the dovecot user process doing things on your behalf cannot create index files that are anlogous to the mailbox it's indexing. You can either 1) add "md5i" to group mail 2) remove g+w permission on your mail files (making group membership irrelevant) 3) fiddle with "mail_privileged_group = mail", but I'm a little hazy on all the ramifications of this. I don't know your particular circumstances, so I don't know which is best. If (big if) nothing on your system (particularly the MTA) requires access to your mail spool files by running as group=mail, probably 2) is your best option. Joseph Tam <jtam.home(a)gmail.com>

2 1

[Dovecot] LMTP: userdb lookup - user-filter with variables
by Burckhard Schmidt 31 Jul '13

31 Jul '13

I tried to use dovcots lmtp instead of dovecot-lda. postfix has in master.cf ... dovecot-lda -f ... -d ${user} to separate the user part from user(a)hostname.domain. So lookup of "user" succeeds in userdb (LDAP) done by dovecot-lda. I have always local addresses like to=<user(a)hostname.domain> postfix/lmtp[6579]: [ID 197553 mail.info] B3CDA66A16: to=<h0094slk(a)mailstore4.hu-berlin.de> With lmtp the userpart must be separated also. I tried user_filter (LDAP) with %n, %Ln, %8n without success: userdb lookup: user(a)hostname.domain doesn't exist) dovecot-2.1.17 I used "doveadm user h0094slk" and "doveadm user h0094slk(a)mailstore4.hu-berlin.de" for my tests. userdb { driver = ldap args = /usr/dovecot/etc/ldapuser.conf } and ldapuser.conf with ... user_filter = (&(uid=%n) (objectClass=cmsAccount)) user_attrs = homeDirectory=home I modified user_filter like uid=%Ln or uid=%8u success for doveadm user h0094slk (because nothing to split) userdb: h0094slk home : /home/p0094/h0094slk but no success for doveadm user h0094slk(a)mailstore4.hu-berlin.de userdb lookup: user h0094slk(a)mailstore4.hu-berlin.de doesn't exist It looks for me like user_filter do not use variables at this point? What I'm missing? -- Mit freundlichen Grüßen --- Burckhard Schmidt Abteilung Systemsoftware und Kommunikation ZE Computer- und Medienservice der Humboldt-Universität zu Berlin Postanschrift: Unter den Linden 6, 10099 Berlin Standort: Rudower Chaussee 26; 12489 Berlin Tel.: +49-30-2093-70058 Fax: +49-30-2093-2959 Mail: bschmidt(a)cms.hu-berlin.de

1 1

Re: [Dovecot] LDA vs. LMTP
by Joseph Tam 31 Jul '13

31 Jul '13

Martin Burgraf writes: > > I don't know why you would consider a background process inferior to a > > run-on-demand executable. > > Well, the background process is hogging CPU and RAM while it basically > does nothing. "Hogging" CPU and memory is putting it strongly, as it is basically suspended while blocked on waiting for a connection, and if left for a long time in an idle state, might be swapped out to disk and not consuming (real) memory, or consuming real memory that isn't in use otherwise. As I stated before, the resource usage is small compared with all the other stuff going on, so if you don't have a busy mail server, I don't think you should sweat the difference. The benefits of LMTP should increase with load, as having LMTP resident will save you the overhead of repeatedly loading/unloading LDA, and I'm sure the CPU and memory usage of servicing that overhead will be non-trivial. If you have oodles of memory, then it's no problem keeping a LMTP resident. If you don't have enough memory and are VM disk thrashing, you'll have other problems and LDA/LMTP is the least of your worries. > And when it's running as root there is always the danger > of privilege escalation. LDA only runs when it's needed and since it > uses only user rights it shoudbe more harmless. I didn't contest the privilege separation aspect, as it a necessary design trade-off that one daemon doing things for all user will need overriding access. However, if this is a concern, you can virtualize all your users. LMTP can theoretically be subverted, but at least won't be as root. (I'm assuming LMTP stays as root, and not spawning off user processes to do the real work.) Joseph Tam <jtam.home(a)gmail.com>

3 2

Re: [Dovecot] dovecot-lda not logging if dovecot runs under daemontools
by Jost Krieger 30 Jul '13

30 Jul '13

On Fri Jul 26 14:51:30 2013, Roberto Puzzanghera wrote: > > Hi Jost, thanks for your reply. > > Il 26.07.2013 13:11 Jost Krieger ha scritto: > >Dovecot-lda runs under qmail, so you'll find the output in qmail's > >logs. If you run, say, doveadm manually, the output will be on your > >terminal. > > I didn't explain myself very well. The qmail's log > /var/log/dovecot/current doesn't show the lda output as expected. I That's dovecot's log, not qmail's. > see onlythe output of imap and pop3. Anyway, running dovecot > manually or as daemon in the normal way (without daemontools) show > the lda output in the log. You are logging to stderr, in the delivery case that means qmail-local's output. This is somewhere in a place like /var/qmal/logs/qmail/current and looks similar to @4000000051f793e218f78c54 delivery 847552: success: lda(xxxxxxxx):_Info:_msgid=<20130730102215.ECB48809E9(a)carlos.noc.ruhr-uni-bochum.de>:_saved_mail_to_NOC-Order/did_0+0+1/ Yours Jost Krieger -- | Jost.Krieger+sig(a)ruhr-uni-bochum.de Please help stamp out spam! | | Postmaster, JAPH, resident answer machine at RUB Comp. Center | | Sincere words are not sweet, sweet words are not sincere. | | Lao Tse, Tao Te King 81 |

2 1

Re: [Dovecot] LDA vs. LMTP
by Martin Burgraf 30 Jul '13

30 Jul '13

Joseph Tam wrote: > I don't know why you would consider a background process inferior to a > run-on-demand executable. Well, the background process is hogging CPU and RAM while it basically does nothing. And when it's running as root there is always the danger of privilege escalation. LDA only runs when it's needed and since it uses only user rights it shoudbe more harmless. bye Martin

2 1

[Dovecot] LDA vs. LMTP
by Martin Burgraf 30 Jul '13

30 Jul '13

Hi there, I'm using Dovecot together with Postfix; as I understand it, there are two ways to transfer the mail from Postfix to Dovecot. 1.) by using LDA with mailbox_command = /usr/libexec/dovecot/dovecot-lda -f "$SENDER" -a "$RECIPIENT" 2.) by using LMTP with mailbox_transport = lmtp:unix:private/dovecot-lmtp (currently using number 1) I'm interessted in the differences and the advantages/disadvantages of each of those solutions. According to http://wiki2.dovecot.org/LDA the recommended way is to use LMTP, since it's supposed to have a better performance. On the other hand, http://wiki2.dovecot.org/LMTP says, that LMTP is a backgound process, while LDA is only called when needed. I've also read, that LDA only uses the users privileges, which both means, that LDA should be better. I've also noticed, that LMTP adds an additional Recieved:-Header to the mail. Are there any other differences? Thank you M.

7 7

[Dovecot] Problem switching from Dovecot LDA to LMTP - on dovecot 2.2.4
by Michael Long 29 Jul '13

29 Jul '13

Dovecot LDA has been working fine for me but when I tried to follow the wiki and switch to LMTP I get: Recipient address rejected: User unknown in local recipient table; In postfix/main.cf I went from: mailbox_transport = dovecot-spam to mailbox_transport = lmtp:unix:private/dovecot-lmtp Added this: service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } protocol lmtp { mail_fsync = optimized postmaster_address = postmaster@domainname mail_plugins = sieve zlib } And some other pertinent parts of the config: passdb { args = /etc/dovecot/passdb driver = passwd-file } passdb { driver = pam } protocol lda { mail_fsync = optimized auth_socket_path = /var/run/dovecot/auth-master deliver_log_format = msgid=%m: %$ mail_plugin_dir = /usr/local/lib/dovecot mail_plugins = sieve zlib postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r lda_mailbox_autocreate = yes }

1 0

[Dovecot] Maildir permissions and Solr re-indexing
by Michael Welsh Duggan 29 Jul '13

29 Jul '13

I am running a very small dovecot installation with only one user (me). I use the Solr indexer for indexing. Due to complicated reasons, I was forced to remove all the indexes and need to re-index everything. All the files in my Maildir are owned by md5i:mail (I am md5i), and have 660 permissions. All directories have the same user:group permissions, and 770 with the setguid bit set. (That last may not be necessary, but I was trying several things to get my use case to work.) Unfortunately, I can't seem to get re-indexing to work. When I do "doveadm fts rescan -A" as root, I get the following error for each of my subgroups: doveadm(md5i): Error: fchown(/home/md5i/Maildir/.mail.test/dovecot.index.log.newlock, group=8(mail)) failed: Operation not permitted (egid=1000(md5i), group based on /home/md5i/Maildir/.mail.test - see http://wiki2.dovecot.org/Errors/ChgrpNoPerm) After this, each directory has a dovecot.index.log with md5i:md5i 600 permissions. I've read the mentioned page, and played around with the ideas on it, but haven't gotten things to work. Anyone have any clue to ship my way? -- Michael Welsh Duggan (md5i(a)md5i.com)

1 1

[Dovecot] zlib error when running doveadm
by Michael Long 29 Jul '13

29 Jul '13

Upgraded to dovecot 2.2.4 from 2.1.16 Error I see is: doveadm(root): Error: Module is for different ABI version 2.1.16 (we have 2.2.ABIv3(2.2.4)): /usr/local/lib/dovecot/doveadm/lib10_doveadm_zlib_plugin.so How do I resolve this? Configure options: ./configure --with-bzlib --with-ssl --with-mysql --with-zlib --with-pam Configuration: # 2.2.4: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.2.0-48-generic x86_64 Ubuntu 12.04.2 LTS doveconf: Warning: Dovecot was last started using /etc/dovecot/dovecot-postfix.conf, but this config is /usr/local/etc/dovecot/dovecot.conf auth_mechanisms = plain login cram-md5 disable_plaintext_auth = no listen = * log_timestamp = "%Y-%m-%d %H:%M:%S " mail_access_groups = mail mail_debug = yes mail_gid = 8 mail_location = maildir:~/Maildir mail_plugins = " zlib" mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /etc/dovecot/passdb driver = passwd-file } passdb { driver = pam } plugin { fts = squat sieve = ~/.dovecot.sieve sieve_debug = yes sieve_dir = ~/ sieve_global_dir = /etc/dovecot sieve_global_path = /etc/dovecot/dovecot.sieve zlib_save = gz zlib_save_level = 6 } protocols = imap pop3 sieve service auth { unix_listener /var/run/dovecot/auth-master { group = postfix mode = 0666 user = postfix } unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0666 user = postfix } user = root } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl_cert = </etc/postfix/certs/postfix_public_cert.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/postfix/certs/postfix_private_key.pem userdb { driver = passwd } verbose_proctitle = yes protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 50 mail_plugin_dir = /usr/local/lib/dovecot mail_plugins = " zlib fts fts_squat zlib imap_zlib" } protocol pop3 { mail_max_userip_connections = 20 mail_plugins = " zlib zlib" pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } protocol lda { auth_socket_path = /var/run/dovecot/auth-master deliver_log_format = msgid=%m: %$ lda_mailbox_autocreate = yes mail_plugin_dir = /usr/local/lib/dovecot mail_plugins = sieve zlib postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r }

4 3

[Dovecot] Upgrading to dovecot2 broke IDLE on one mailer, but not another
by John Stracke 29 Jul '13

29 Jul '13

Last weekend I upgraded my server (complete reinstall, actually), from Debian sarge to wheezy, which brought me from dovecot 1.x (I think) to 2.1.7. It's all working now, *except* that the MUA I use on Android, Kaiten (a fork of K-9), apparently no longer gets IDLE notifications. Before the upgrade, when mail arrived, Kaiten would pop up an Android notification immediately; now, it never does (or it might, hours later, with all the messages it notices at that time--presumably this happens when its background service gets killed off and restarted). The weird thing is that IDLE still works flawlessly with Thunderbird, which suggests this is a protocol interaction between Dovecot 2 and Kaiten. (I plan to check with the Kaiten folks next.) Has anybody here seen this? Is there something I can turn on in Dovecot to help debug it? I did check my old Dovecot settings, and they didn't specify anything non-default about IDLE. Thanks in advance! My configuration from dovecot -n: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.9.3-x86-linode52 i686 Debian 7.0 log_timestamp = "%Y-%m-%d %H:%M:%S " mail_access_groups = mail mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_privileged_group = mail passdb { driver = pam } protocols = imap pop3 service auth { user = root } service imap-login { inet_listener imap { port = 0 } } service pop3-login { inet_listener pop3 { port = 0 } } ssl_cert = </etc/ssl/certs/dovecot-2009.cert ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } protocol imap { mail_max_userip_connections = 100 } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } and the no-comments version of conf.d/20-imap.conf: protocol imap { imap_idle_notify_interval = 10 mins } -- /==============================================================\ | John Stracke | http://www.thibault.org | HTML OK | | François Thibault |---------------------------------------| | East Kingdom | "Okay, one more time, with *vowels*." | | francis(a)thibault.org | -- Ozy and Millie | \==============================================================/

2 2

[Dovecot] how to setup different quota for multiple namespaces
by Andreas Oster 29 Jul '13

29 Jul '13

Hello all, I am using dovecot for some time now but always had very basic configurations. I recently have configured a new, additional namespace in order to move archived mails (Thunderbird Archives) to another storage system. namespace { type = private separator = . prefix = Archives. location = maildir:/var/vmail/archive/%Ln/Maildir subscriptions = yes list = children inbox = no } This works well but unfortunately I cannot find a solution to either ignore this new namespace from quota computation or add a separate quota value for it. I have integrated user authentication with LDAP and fetch some user attributes from LDAP entries: user_attrs = =home=/var/vmail/%Ln/Maildir,=mail=maildir:/var/vmail/%Ln/Maildir/,otherPager=quota_rule=*:storage=%$ I configured the quota plugin in the following way: plugin { quota = maildir:User quota:ns= quota2 = maildir:Archive quota:ns=Archives. quota_rule = *:storage=1G quota_rule2 = ns=Archives.:ignore } unfortunately this does not give the desired result. Folders under the Archives namespace use the same quota as INBOX. Does anyone have an idea how to fix this ? Thank you for your kind help Andreas

4 19

[Dovecot] convert to mdbox
by Birta Levente 29 Jul '13

29 Jul '13

Hi How can I convert all virtual mailboxes from maildir to mdbox? Manually, one by one, working, but I have a lot ... Virtual users and domains stored in sql database. Thats what I want: mail_location = maildir:/var/vmail/%d/%n/Maildir to mail_location = mdbox:/var/vmail/%d/%n/mdbox Thanks Levi

3 3

[Dovecot] Please help with : undefined symbol: mail_deliver_save_open
by Markus Kalb 28 Jul '13

28 Jul '13

Greetings dovecot-mailing list! after upgrading from debian squeeze -> debian wheezy and therefore making the big dovecot jump from 1.x to 2.x we are stuck with one final(?) error that we can't get fixed. During login attempts the following is written to the logfiles. Error: dovecot: imap: Error: dlopen(/usr/lib/dovecot/modules/lib90_sieve_plugin.so) failed: /usr/lib/dovecot/libdovecot-sieve.so.0: undefined symbol: mail_deliver_save_open Searching the mailinglist and google in general the only thing i could find was that this error could be connected to loading the sieve plugin outside of lda. But as you can see in the attached config dump, we only load it inside the lda protocol block. ciao markus Our setup: > dovecot --version 2.1.7 > dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-686-pae i686 Debian 7.1 auth_debug = yes auth_mechanisms = plain login digest-md5 cram-md5 auth_verbose = yes mail_debug = yes mail_plugins = acl fts fts_solr mail_shared_explicit_inbox = no managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags notify namespace { hidden = no list = children location = maildir:/home/lists/.mail/:CONTROL=%h/.mail/private/.imap/shared/control:INDEX=%h/.mail/private/.imap/shared/index prefix = lists/ separator = / subscriptions = no type = shared } namespace { hidden = yes list = no location = maildir:/home/security/.mail/:CONTROL=%h/.mail/private/.imap/shared/control:INDEX=%h/.mail/private/.imap/shared/index prefix = security/ separator = / subscriptions = no type = shared } namespace { hidden = yes list = children location = maildir:/home/dsys/.mail/:CONTROL=%h/.mail/private/.imap/shared/control:INDEX=%h/.mail/private/.imap/shared/index prefix = duales_system/ separator = / subscriptions = no type = shared } namespace inbox { hidden = no inbox = yes list = yes location = mbox:%h/.mail/private:INBOX=/var/mail/%u mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { args = scheme=DIGEST-MD5 username_format=%u /etc/dovecot/passwd driver = passwd-file } plugin { acl = vfile:/etc/dovecot/acls:cache_secs=300 sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +imapflags +notify } protocols = " imap sieve" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } service imap-login { inet_listener imap { port = 143 } } ssl_cert = </etc/ssl/certs/SERVER.pem ssl_key = </etc/ssl/private/SERVER.key userdb { args = username_format=%u /etc/dovecot/passwd default_fields = mail_plugins=sieve system_groups_user=%u driver = passwd-file } protocol lda { mail_plugins = acl fts fts_solr sieve } protocol imap { mail_max_userip_connections = 20 mail_plugins = acl fts fts_solr } # dpkg -l '*dovecot*' |grep ii | cut -c 0-60 ii dovecot-antispam 2.0+20120225-3 ii dovecot-core 1:2.1.7-7 ii dovecot-imapd 1:2.1.7-7 ii dovecot-ldap 1:2.1.7-7 ii dovecot-managesieved 1:2.1.7-7 ii dovecot-sieve 1:2.1.7-7 ii dovecot-solr 1:2.1.7-7

1 1

Re: [Dovecot] LDA vs. LMTP
by Joseph Tam 27 Jul '13

27 Jul '13

"Martin Burgraf" <martin.bg(a)web.de> writes: > According to http://wiki2.dovecot.org/LDA the recommended way is to use > LMTP, since it's supposed to have a better performance. The performance gains comes mostly from avoiding the overhead of invoking an executable and spawning a new process for each delivery. If your mail system isn't stressed, I don't think it matters much. > On the other hand, http://wiki2.dovecot.org/LMTP says, that LMTP is a > backgound process, while LDA is only called when needed. I've also > read, that LDA only uses the users privileges, which both means, that > LDA should be better. I don't know why you would consider a background process inferior to a run-on-demand executable. > I've also noticed, that LMTP adds an additional Recieved:-Header to the mail. > Are there any other differences? >From a past discussion on this topic, I think Timo stated that if you use SIS (single-instance storage or de-duping), it's more efficient using LMTP since it knows all message bodies to multiple recipients will be identical. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Case-insensitive "detail" mailboxes?
by /dev/rob0 27 Jul '13

27 Jul '13

We're using sieve with LMTP. We want to have lda_mailbox_autocreate and lmtp_save_to_detail_mailbox. Is there a way to make the "detail" case-insensitive? If so I have not found it yet. I suppose we could lowercase the input string for the SQL userdb query, but that's not what is wanted. The idea being that if a user makes a mailbox called "Test" is that user+test(a)example.com and user+TEST(a)example.com should both go to that "Test" mailbox. If it was lowercased, a mailbox called "Test" would be ignored and "test" used. With autocreate, this could be a problem if mail is delivered to autocreated case-sensitive mailboxes that the user won't see. Hmmm, maybe a global sieve script? -- http://rob0.nodns4.us/ -- system administration and consulting Offlist GMX mail is seen only if "/dev/rob0" is in the Subject:

4 5

[Dovecot] dbus support in dovecot?
by Gene Heskett 26 Jul '13

26 Jul '13

Greetings; I am trying to transition from ubu10.04.4 LTS to ubu12.04.2 LTS, but in the changeover I want to setup dovecot as a local only imap server so that I can read & respond to email from any of the other 4 or so machines on my local net. To that end, and given that I have a well working setup right now, using fetchmail driving mailfilter as a pre-check, procmail as the MTA delivering to /var/spool/mail/me, with clamav and spamd in the mix to intercept and send to /dev/null the worst of the spam, or to a quarantine file if clamav triggers. The current transfer mechanism is driven by a script that uses inotifywait to detect newly delivered mail in that directory, and which then sends kmail a dbus message to go get the mail. Since I want to insert dovecot into this chain, does dovecot have a dbus port, and if so, what is the format of the command it expects? Thanks all. Cheers, Gene -- "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." -Ed Howdershelt (Author) A pen in the hand of this president is far more dangerous than 200 million guns in the hands of law-abiding citizens.

4 10

[Dovecot] Namespace, Sieve and upgrading to dovecot 2.0 -- no folder "INBOX/"
by Ben 26 Jul '13

26 Jul '13

I just upgraded from debian squeeze->wheezy. This meant upgrading from dovecot 1.2 to 2.1.7 and upgrading to Pigdeonhole sieve. I have dovecot configured to use sieve and virtual users (I'll post config below) Now any message that come in get filtered by sieve, but any messages that don't hit any filters gives the error (in the sieve log): msgid=<XXXX(a)XXX.com>: failed to store into mailbox 'INBOX/': Invalid mailbox name As far as I can tell, Pidgeonhole has hard-coded to the behavior of 'keep' (that is unfiltered emails) to be: fileinto "INBOX/" However, in my setup "INBOX/" is not a valid folder. "INBOX" is. Is there a way to get pidgeonhole sieve to treat 'keep' as fileinto "INBOX"? Or do I need to reconfigure my dovecot namespaces? I tried playing with them, but everything works right now (sharing, etc) and when I changed my prefix on the inbox, etc, it did weird things (INBOX.INBOX.FOLDER) instead of (INBOX.Folder). Suggestions? Here is, I believe the relevant config info: dovecot.conf: namespace { inbox = yes location = prefix = separator = / type = private } namespace { list = children location = maildir:/Mail/Users/%%n/:INDEX=/Mail/Users/%u/shared/%%u prefix = shared/%%u/ separator = / subscriptions = no type = shared } Thanks, Ben

2 1

[Dovecot] Fw: POP3 issues
by Thomas I Higgins 26 Jul '13

26 Jul '13

Sorry - forgot to mention it is on Dovecot version 1.0.7 and RHEL 5.6 Tom >I have been trying off and on for the better part of a year to get a dovecot server migrated from one machine to another. It is currently working on CENTOS and we are trying to get it on Redhat. Currently I have everything migrated and >working in IMAP, but we have one client device that requires POP3 (doesn't support IMAP). To this end, we have set up everything to work in POP3 as far as I can tell. > >In the dovecot.conf file, we show: > >protocols = imap imaps pop3 pop3s >protocol pop3 { > pop3_uidl_format = %08Xu%08Xv >} > >The services running include: > >dovecot-auth >imap-login >imap-login >imap-login >pop3-login >pop3-login >pop3-login > >Everything else looks good including the logs which seem to show proper connectivity - messages are being received, accounts are connecting and disconnecting, etc. but the pop connections are not (apparently) passing messages >found in that box. They are still just sitting there, not being read, picked up, or otherwise delivered by dovecot. Any ideas on what else I can check or change to get this to pick up? > >Thanks, >Tom Higgins

2 3

[Dovecot] Duplicate Mails downloding issue
by Kavish Karkera 26 Jul '13

26 Jul '13

Hi All, We are repeatedly getting the below warning / errors on our pop server. Please help us out buy knowing what could be the issue. ------------------------------------------------------------------------------------------------------------------------------------------------------- Jul 23 15:34:51 popserver dovecot: pop3(14949_kavish): Warning: Locking transaction log file /indexes//mail/v3store/example.com/14949_kavish/.INBOX/dovecot.index.log took 133 seconds Jul 23 15:34:51 popserver dovecot: pop3(kavish(a)example.com): Error: Broken file /indexes//mail/v3store/example.com/14949_kavish/.INBOX/dovecot-uidlist line 180: UIDs not ordered (10156 >= 10156) Jul 23 15:35:01 popserver dovecot: pop3(kavish(a)example.com): Error: utime(/indexes//mail/v3store/example.com/kavish/.INBOX/dovecot-uidlist.lock) failed: No such file or directory Jul 23 15:35:11 popserver dovecot: pop3(kavish(a)example.com): Error: utime(/indexes//mail/v3store/example.com/kavish/.INBOX/dovecot-uidlist.lock) failed: No such file or directory Jul 23 15:35:21 popserver dovecot: pop3(kavish(a)example.com): Warning: Our dotlock file /indexes//mail/v3store/example.com/kavish/.INBOX/dovecot-uidlist.lock was deleted (kept it 30 secs) --------------------------------------------------------------------------------------------------------------------------------------------------------- Regards, Kavish Karkera

3 9

[Dovecot] dovecot-lda not logging if dovecot runs under daemontools
by Roberto Puzzanghera 26 Jul '13

26 Jul '13

Hello all, I have dovecot running under daemontools and I can't see dovecot-lda in action when I read the logs. I've set the logs to /dev/stderr because daemontools redirects /dev/stderr to /var/log/dovecot/current. The dovecot server works fine and I know that dovecot-lda is actually doing the delivery, because the sieve facility is working as well. I can get lda log working -but only on syslog- if I override the log_path in this way: protocol lda { mail_plugins = $mail_plugins sieve log_path = } I'm calling dovecot-lda in the usual qmail way. This is my .qmail-default: |/var/qmail/bin/preline -f /usr/libexec/dovecot/deliver -d $EXT@$USER As running dovecot under daemontools seems to be a common practice among qmail users, could any of you give me an hint on how dovecot should be configured to achieve the purpose? Thanks in advance. My doveconf follows Roberto Puzzanghera # dovecof -n # 2.2.4: /etc/dovecot/dovecot/dovecot.conf # OS: Linux 3.2.29-smp i686 Slackware 14.0 auth_default_realm = mydomain.net auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-userdb auth_verbose = yes default_login_user = vpopmail disable_plaintext_auth = no first_valid_gid = 89 first_valid_uid = 89 last_valid_gid = 89 last_valid_uid = 89 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes log_path = /dev/stderr mail_access_groups = 89 mail_debug = yes mail_gid = 89 mail_location = maildir:%h/Maildir mail_plugins = " quota mail_log notify" mail_privileged_group = 89 mail_uid = 89 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave spamtest spamtestplus namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } plugin { autocreate = Sent autocreate2 = Drafts autocreate3 = Junk autocreate4 = Trash autosubscribe = Sent autosubscribe2 = Drafts autosubscribe3 = Junk autosubscribe4 = Trash mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = maildir:User quota sieve = ~/sieve/dovecot.sieve sieve_before = /etc/dovecot/sieve/ sieve_dir = ~/sieve sieve_extensions = +spamtest +spamtestplus +relational +comparator-i;ascii-numeric } postmaster_address = postmaster@%d protocols = imap pop3 sieve sendmail_path = /var/qmail/bin/sendmail service auth-worker { user = $default_internal_user } service auth { unix_listener auth-userdb { group = vchkpw mode = 0600 user = vpopmail } user = $default_internal_user } service managesieve-login { inet_listener sieve { port = 4190 } service_count = 1 vsz_limit = 64 M } ssl_cert = </etc/dovecot/ssl/certs/dovecot.pem ssl_key = </etc/dovecot/ssl/private/dovecot.pem userdb { args = /etc/dovecot/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } verbose_ssl = yes protocol lda { mail_plugins = " quota mail_log notify sieve" } protocol imap { mail_plugins = " quota mail_log notify imap_quota" } protocol pop3 { mail_plugins = " quota mail_log notify" }

2 1

[Dovecot] Managing IMAP IDLE/Push with Sieve – possible?
by FF 25 Jul '13

25 Jul '13

Hello, I've been using Dovecot with Sieve for a long time already, and I'm very happy with it. Push is working fine too. I was wondering, however, whether it would be possible to define a Sieve rule (perhaps using some plug-in), such that an IMAP push message gets sent out only for specific senders etc.? Have you come across anything like that? Thanks a lot, F.F.

3 4

[Dovecot] POP3 issues
by Thomas I Higgins 24 Jul '13

24 Jul '13

I have been trying off and on for the better part of a year to get a dovecot server migrated from one machine to another. It is currently working on CENTOS and we are trying to get it on Redhat. Currently I have everything migrated and working in IMAP, but we have one client device that requires POP3 (doesn't support IMAP). To this end, we have set up everything to work in POP3 as far as I can tell. In the dovecot.conf file, we show: protocols = imap imaps pop3 pop3s protocol pop3 { pop3_uidl_format = %08Xu%08Xv } The services running include: dovecot-auth imap-login imap-login imap-login pop3-login pop3-login pop3-login Everything else looks good including the logs which seem to show proper connectivity - messages are being received, accounts are connecting and disconnecting, etc. but the pop connections are not (apparently) passing messages found in that box. They are still just sitting there, not being read, picked up, or otherwise delivered by dovecot. Any ideas on what else I can check or change to get this to pick up? Thanks, Tom Higgins

1 0

Re: [Dovecot] Sieve info
by Reindl Harald 24 Jul '13

24 Jul '13

Am 24.07.2013 14:29, schrieb Noel Butler: > dnsbl - yes, his IP range is now listed in two lists. > > insisted to one dnsbl that they should list the dovecot mailing list > server IP's not his, why? because the list server directly sent his > abuse, not his mail server direct to, not only mine, but others :) you do not understand the problem i never said you should blacklist any mailing-list-server i only said that it is pretty dumb to block a /24 network on a DNSBL because one user from one of the IP's is disliked by you with this brain-dead logic you would need to block also all google-ranges if you dislike a single person with a gmail-address but for *that* you are too faint-hearted serious people can decide by theirself what the want or want not to read and do not need to misuse their position of controlling a RBL > Ahhh if only he was not dev nulled, I would likely have another abusive > email from him jumping up and down claiming yet again he is the innocent > victim, yes, we are all wrong.... the problem is that you can not read anything i write directly because your /dev/nulling, so in the worst case you see only stripped answers of some nitpickers and

1 0

[Dovecot] Sieve info
by Sam Flint 24 Jul '13

24 Jul '13

I'm using Dovecot v2, and I can't seem to find any info abut using sieve with the LDA, or the ManageSieve protocol, can you please point me un the right direction? Sam

5 7

[Dovecot] performance 2.1.17 zlib maildir
by Robert Schetterer 23 Jul '13

23 Jul '13

Hi Timo, i have reports from few users about lost performance with 2.17 maildir bigger mailboxes ( up to 2 GB ), i also use zlib plugin what about this patch.....,may not working as i should? http://hg.dovecot.org/dovecot-2.1/rev/9c23d1fb8969 Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

3 6

[Dovecot] Dovecot 2.2.4/sendmail with sql user and aliases
by Cedric 23 Jul '13

23 Jul '13

Hi, We are currently moving from linuxconf/dovecot to a dovecot setup with sql support, the problem we currently facing is having a message sent to a aliase delivered to the user email inbox with dovecot-lda, i have created cedrict(a)mail.vdl and a alias test(a)mail.vdl, when i send to cedrict(a)mail.vdl the message is included in the user inbox file, but when i send to test(a)mail.vdl it should do the same and not create a new created file named test, thank in advance for your help. # dovecot --version 2.2.4 dovecot.conf auth_debug = yes auth_debug_passwords = yes auth_verbose = yes default_internal_user = root default_login_user = mail disable_plaintext_auth = no first_valid_uid = 100 mail_access_groups = mail users sysadmin popusers mail_location = mbox:%h/mail:LAYOUT=maildir++:INDEX=MEMORY:CONTROL=%h/mail/control:INBOX=/var/spool/vmail/%d/%n mail_max_userip_connections = 40 mail_plugins = " quota sieve" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_lazy_writes = no passdb { args = /vdl/etc/dovecot/dovecot-sql.conf driver = sql } plugin { sieve = %h/mail/sieve/%n sieve_global_dir = /vdl/etc/dovecot/ sieve_vacation_default_period = 1d sieve_vacation_max_period = 7d } postmaster_address = x(a)x.x protocols = imap pop3 service auth { unix_listener auth-userdb { mode = 0600 user = popusers } } service imap-login { inet_listener imap { port = 143 } process_min_avail = 4 vsz_limit = 256 M } service pop3-login { inet_listener pop3 { port = 110 } process_min_avail = 16 } ssl = no submission_host = localhost:25 userdb { args = /vdl/etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { mail_plugins = quota imap_quota mail_log notify } protocol pop3 { mail_plugins = quota } protocol lda { mail_plugins = quota sieve } dovecot-sql.conf password_query = SELECT \ concat(s_courriel_utilisateur.utilisateur, '@', s_courriel_domaine.nom) AS user,s_courriel_utilisateur.password as password \ FROM s_courriel_utilisateur left join s_courriel_alias on s_courriel_utilisateur.id=s_courriel_alias.utilisateur and s_courriel_alias.archive !=1 ,s_courriel_domaine \ WHERE s_courriel_utilisateur.archive !=1 \ and s_courriel_domaine.archive !=1 \ and s_courriel_utilisateur.domaine=s_courriel_domaine.id \ and s_courriel_domaine.nom = '%d' \ and ( s_courriel_utilisateur.utilisateur = '%n' or s_courriel_alias.alias = '%n' ) user_query = SELECT \ concat("/vhome/",s_courriel_domaine.nom,"/home/",s_courriel_utilisateur.utilisateur) as home, \ concat("/vhome/",s_courriel_domaine.nom,"/home/",s_courriel_utilisateur.utilisateur,"/mail/index") as "index", \ concat("/vhome/",s_courriel_domaine.nom,"/home/",s_courriel_utilisateur.utilisateur,"/mail/control") as control, \ concat("/var/spool/vmail/",s_courriel_domaine.nom,"/",s_courriel_utilisateur.utilisateur) as inbox, \ "maildir++" as layout, \ s_courriel_utilisateur.uid as uid,s_courriel_domaine.gid as gid \ FROM s_courriel_utilisateur left join s_courriel_alias on s_courriel_utilisateur.id=s_courriel_alias.utilisateur and s_courriel_alias.archive !=1 ,s_courriel_domaine \ WHERE s_courriel_utilisateur.archive !=1 \ and s_courriel_domaine.archive !=1 \ and s_courriel_utilisateur.domaine=s_courriel_domaine.id \ and s_courriel_domaine.nom = '%d' \ and ( s_courriel_utilisateur.utilisateur = '%n' or s_courriel_alias.alias = '%n' ) Transaction debug for cedrict(a)mail.vdl with message added to file /var/spool/vmail/mail.vdl/cedrict SELECT concat("/vhome/",s_courriel_domaine.nom,"/home/",s_courriel_utilisateur.utilisateur) as home, concat("/vhome/",s_courriel_domaine.nom,"/home/",s_courriel_utilisateur.utilisateur,"/mail/index") as "index", concat("/vhome/",s_courriel_domaine.nom,"/home/",s_courriel_utilisateur.utilisateur,"/mail/control") as control, concat("/var/spool/vmail/",s_courriel_domaine.nom,"/",s_courriel_utilisateur.utilisateur) as inbox, "maildir++" as layout, s_courriel_utilisateur.uid as uid,s_courriel_domaine.gid as gid FROM s_courriel_utilisateur left join s_courriel_alias on s_courriel_utilisateur.id=s_courriel_alias.utilisateur and s_courriel_alias.archive !=1 ,s_courriel_domaine WHERE s_courriel_utilisateur.archive !=1 and s_courriel_domaine.archive !=1 and s_courriel_utilisateur.domaine=s_courriel_domaine.id and s_courriel_domaine.nom = 'mail.vdl' and ( s_courriel_utilisateur.utilisateur = 'cedrict' or s_courriel_alias.alias = 'cedrict'); +------------------------------+-----------------------------------------+-------------------------------------------+-----------------------------------+-----------+-------+------+ | home | index | control | inbox | layout | uid | gid | +------------------------------+-----------------------------------------+-------------------------------------------+-----------------------------------+-----------+-------+------+ | /vhome/mail.vdl/home/cedrict | /vhome/mail.vdl/home/cedrict/mail/index | /vhome/mail.vdl/home/cedrict/mail/control | /var/spool/vmail/mail.vdl/cedrict | maildir++ | 60001 | 231 | +------------------------------+-----------------------------------------+-------------------------------------------+-----------------------------------+-----------+-------+------+ Jul 17 14:00:56 devshed dovecot: auth: Debug: master in: USER 1 cedrict(a)mail.vdl service=lda Jul 17 14:00:56 devshed dovecot: auth-worker(7009): Debug: Loading modules from directory: /vdl/lib/dovecot/auth Jul 17 14:00:56 devshed dovecot: auth-worker(7009): Debug: sql(cedrict(a)mail.vdl): SELECT concat("/vhome/",s_courriel_domaine.nom,"/home/",s_courriel_utilisateur.utilisateur) as home, concat("/vhome/",s_courriel_domaine.nom,"/home/",s_courriel_utilisateur.utilisateur,"/mail/index") as "index", concat("/vhome/",s_courriel_domaine.nom,"/home/",s_courriel_utilisateur.utilisateur,"/mail/control") as control, concat("/var/spool/vmail/",s_courriel_domaine.nom,"/",s_courriel_utilisateur.utilisateur) as inbox, "maildir++" as layout, s_courriel_utilisateur.uid as uid,s_courriel_domaine.gid as gid FROM s_courriel_utilisateur left join s_courriel_alias on s_courriel_utilisateur.id=s_courriel_alias.utilisateur and s_courriel_alias.archive !=1 ,s_courriel_domaine WHERE s_courriel_utilisateur.archive !=1 and s_courriel_domaine.archive !=1 and s_courriel_utilisateur.domaine=s_courriel_domaine.id and s_courriel_domaine.nom = 'mail.vdl' and ( s_courriel_utilisateur.utilisateur = 'cedrict' or s_courriel_alias.alias = 'cedrict' Jul 17 14:00:56 devshed dovecot: auth: Debug: userdb out: USER 1 cedrict(a)mail.vdl home=/vhome/mail.vdl/home/cedrict index=/vhome/mail.vdl/home/cedrict/mail/index control=/vhome/mail.vdl/home/cedrict/mail/control inbox=/var/spool/vmail/mail.vdl/cedrict layout=maildir++ uid=60001 gid=231 Jul 17 14:00:56 devshed dovecot: lda: Debug: auth input: cedrict(a)mail.vdl home=/vhome/mail.vdl/home/cedrict index=/vhome/mail.vdl/home/cedrict/mail/index control=/vhome/mail.vdl/home/cedrict/mail/control inbox=/var/spool/vmail/mail.vdl/cedrict layout=maildir++ uid=60001 gid=231 Jul 17 14:00:56 devshed dovecot: lda: Debug: Added userdb setting: plugin/control=/vhome/mail.vdl/home/cedrict/mail/control Jul 17 14:00:56 devshed dovecot: lda: Debug: Added userdb setting: plugin/inbox=/var/spool/vmail/mail.vdl/cedrict Jul 17 14:00:56 devshed dovecot: lda: Debug: Added userdb setting: plugin/index=/vhome/mail.vdl/home/cedrict/mail/index Jul 17 14:00:56 devshed dovecot: lda: Debug: Added userdb setting: plugin/layout=maildir++ Jul 17 14:00:56 devshed dovecot: lda(cedrict(a)mail.vdl): Debug: Effective uid=60001, gid=231, home=/vhome/mail.vdl/home/cedrict Jul 17 14:00:56 devshed dovecot: lda(cedrict(a)mail.vdl): Debug: quota: No quota setting - plugin disabled Jul 17 14:00:56 devshed dovecot: lda(cedrict(a)mail.vdl): Debug: maildir++: root=/vhome/mail.vdl/home/cedrict/mail, index=, indexpvt=, control=/vhome/mail.vdl/home/cedrict/mail/control, inbox=/var/spool/vmail/mail.vdl/cedrict, alt= Jul 17 14:00:56 devshed dovecot: lda(cedrict(a)mail.vdl): Debug: quota: No quota setting - plugin disabled Jul 17 14:00:56 devshed dovecot: lda(cedrict(a)mail.vdl): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Jul 17 14:00:56 devshed dovecot: lda(cedrict(a)mail.vdl): Debug: Destination address: cedrict(a)mail.vdl (source: user@hostname) Jul 17 14:00:56 devshed dovecot: lda(cedrict(a)mail.vdl): Debug: sieve: Pigeonhole version 0.4.1 initializing Jul 17 14:00:56 devshed dovecot: lda(cedrict(a)mail.vdl): Debug: sieve: script file /vhome/mail.vdl/home/cedrict/mail/sieve/cedrict not found Jul 17 14:00:56 devshed dovecot: lda(cedrict(a)mail.vdl): Debug: sieve: user's script /vhome/mail.vdl/home/cedrict/mail/sieve/cedrict doesn't exist (trying default script location instead) Jul 17 14:00:56 devshed dovecot: lda(cedrict(a)mail.vdl): Debug: sieve: no default script configured for user Jul 17 14:00:56 devshed dovecot: lda(cedrict(a)mail.vdl): Debug: sieve: user has no valid location for a personal script Jul 17 14:00:56 devshed dovecot: lda(cedrict(a)mail.vdl): Debug: sieve: no scripts to execute: reverting to default delivery. Jul 17 14:00:56 devshed dovecot: lda(cedrict(a)mail.vdl): msgid=<201307171800.r6HI0unE007004(a)devshed.derytelecom.ca>: saved mail to INBOX Transaction debug for alias test(a)mail.vdl with message added to file /var/spool/vmail/mail.vdl/test mysql> SELECT concat("/vhome/",s_courriel_domaine.nom,"/home/",s_courriel_utilisateur.utilisateur) as home, concat("/vhome/",s_courriel_domaine.nom,"/home/",s_courriel_utilisateur.utilisateur,"/mail/index") as "index", concat("/vhome/",s_courriel_domaine.nom,"/home/",s_courriel_utilisateur.utilisateur,"/mail/control") as control, concat("/var/spool/vmail/",s_courriel_domaine.nom,"/",s_courriel_utilisateur.utilisateur) as inbox, "maildir++" as layout, s_courriel_utilisateur.uid as uid,s_courriel_domaine.gid as gid FROM s_courriel_utilisateur left join s_courriel_alias on s_courriel_utilisateur.id=s_courriel_alias.utilisateur and s_courriel_alias.archive !=1 ,s_courriel_domaine WHERE s_courriel_utilisateur.archive !=1 and s_courriel_domaine.archive !=1 and s_courriel_utilisateur.domaine=s_courriel_domaine.id and s_courriel_domaine.nom = 'mail.vdl' and ( s_courriel_utilisateur.utilisateur = 'test' or s_courriel_alias.alias = 'test' ); +------------------------------+-----------------------------------------+-------------------------------------------+-----------------------------------+-----------+-------+------+ | home | index | control | inbox | layout | uid | gid | +------------------------------+-----------------------------------------+-------------------------------------------+-----------------------------------+-----------+-------+------+ | /vhome/mail.vdl/home/cedrict | /vhome/mail.vdl/home/cedrict/mail/index | /vhome/mail.vdl/home/cedrict/mail/control | /var/spool/vmail/mail.vdl/cedrict | maildir++ | 60001 | 231 | +------------------------------+-----------------------------------------+-------------------------------------------+-----------------------------------+-----------+-------+------+ 1 row in set (0,00 sec) Jul 17 14:03:10 devshed dovecot: auth-worker(7135): Debug: sql(test(a)mail.vdl): SELECT concat("/vhome/",s_courriel_domaine.nom,"/home/",s_courriel_utilisateur.utilisateur) as home, concat("/vhome/",s_courriel_domaine.nom,"/home/",s_courriel_utilisateur.utilisateur,"/mail/index") as "index", concat("/vhome/",s_courriel_domaine.nom,"/home/",s_courriel_utilisateur.utilisateur,"/mail/control") as control, concat("/var/spool/vmail/",s_courriel_domaine.nom,"/",s_courriel_utilisateur.utilisateur) as inbox, "maildir++" as layout, s_courriel_utilisateur.uid as uid,s_courriel_domaine.gid as gid FROM s_courriel_utilisateur left join s_courriel_alias on s_courriel_utilisateur.id=s_courriel_alias.utilisateur and s_courriel_alias.archive !=1 ,s_courriel_domaine WHERE s_courriel_utilisateur.archive !=1 and s_courriel_domaine.archive !=1 and s_courriel_utilisateur.domaine=s_courriel_domaine.id and s_courriel_domaine.nom = 'mail.vdl' and ( s_courriel_utilisateur.utilisateur = 'test' or s_courriel_alias.alias = 'test' ) Jul 17 14:03:10 devshed dovecot: auth: Debug: userdb out: USER 1 test(a)mail.vdl home=/vhome/mail.vdl/home/cedrict index=/vhome/mail.vdl/home/cedrict/mail/index control=/vhome/mail.vdl/home/cedrict/mail/control inbox=/var/spool/vmail/mail.vdl/cedrict layout=maildir++ uid=60001 gid=231 Jul 17 14:03:10 devshed dovecot: lda: Debug: auth input: test(a)mail.vdl home=/vhome/mail.vdl/home/cedrict index=/vhome/mail.vdl/home/cedrict/mail/index control=/vhome/mail.vdl/home/cedrict/mail/control inbox=/var/spool/vmail/mail.vdl/cedrict layout=maildir++ uid=60001 gid=231 Jul 17 14:03:10 devshed dovecot: lda: Debug: Added userdb setting: plugin/control=/vhome/mail.vdl/home/cedrict/mail/control Jul 17 14:03:10 devshed dovecot: lda: Debug: Added userdb setting: plugin/inbox=/var/spool/vmail/mail.vdl/cedrict Jul 17 14:03:10 devshed dovecot: lda: Debug: Added userdb setting: plugin/index=/vhome/mail.vdl/home/cedrict/mail/index Jul 17 14:03:10 devshed dovecot: lda: Debug: Added userdb setting: plugin/layout=maildir++ Jul 17 14:03:10 devshed dovecot: lda(test(a)mail.vdl): Debug: Effective uid=60001, gid=231, home=/vhome/mail.vdl/home/cedrict Jul 17 14:03:10 devshed dovecot: lda(test(a)mail.vdl): Debug: quota: No quota setting - plugin disabled Jul 17 14:03:10 devshed dovecot: lda(test(a)mail.vdl): Debug: maildir++: root=/vhome/mail.vdl/home/cedrict/mail, index=, indexpvt=, control=/vhome/mail.vdl/home/cedrict/mail/control, inbox=/var/spool/vmail/mail.vdl/test, alt= Jul 17 14:03:10 devshed dovecot: lda(test(a)mail.vdl): Debug: quota: No quota setting - plugin disabled Jul 17 14:03:10 devshed dovecot: lda(test(a)mail.vdl): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Jul 17 14:03:10 devshed dovecot: lda(test(a)mail.vdl): Debug: Destination address: test(a)mail.vdl (source: user@hostname) Jul 17 14:03:10 devshed dovecot: lda(test(a)mail.vdl): Debug: sieve: Pigeonhole version 0.4.1 initializing Jul 17 14:03:10 devshed dovecot: lda(test(a)mail.vdl): Debug: sieve: script file /vhome/mail.vdl/home/cedrict/mail/sieve/test not found Jul 17 14:03:10 devshed dovecot: lda(test(a)mail.vdl): Debug: sieve: user's script /vhome/mail.vdl/home/cedrict/mail/sieve/test doesn't exist (trying default script location instead) Jul 17 14:03:10 devshed dovecot: lda(test(a)mail.vdl): Debug: sieve: no default script configured for user Jul 17 14:03:10 devshed dovecot: lda(test(a)mail.vdl): Debug: sieve: user has no valid location for a personal script Jul 17 14:03:10 devshed dovecot: lda(test(a)mail.vdl): Debug: sieve: no scripts to execute: reverting to default delivery. I also tried adding the username in the sql query, same problem, there's the debug : [root@devshed ~]# Jul 17 14:11:59 devshed dovecot: lda: Debug: Loading modules from directory: /vdl/lib/dovecot Jul 17 14:11:59 devshed dovecot: lda: Debug: Module loaded: /vdl/lib/dovecot/lib10_quota_plugin.so Jul 17 14:11:59 devshed dovecot: lda: Debug: Module loaded: /vdl/lib/dovecot/lib90_sieve_plugin.so Jul 17 14:11:59 devshed dovecot: auth: Debug: master in: USER 1 test(a)mail.vdl service=lda Jul 17 14:11:59 devshed dovecot: auth-worker(7385): Debug: Loading modules from directory: /vdl/lib/dovecot/auth Jul 17 14:11:59 devshed dovecot: auth-worker(7385): Debug: sql(test(a)mail.vdl): SELECT s_courriel_utilisateur.utilisateur as username, concat("/vhome/",s_courriel_domaine.nom,"/home/",s_courriel_utilisateur.utilisateur) as home, concat("/vhome/",s_courriel_domaine.nom,"/home/",s_courriel_utilisateur.utilisateur,"/mail/index") as "index", concat("/vhome/",s_courriel_domaine.nom,"/home/",s_courriel_utilisateur.utilisateur,"/mail/control") as control, concat("/var/spool/vmail/",s_courriel_domaine.nom,"/",s_courriel_utilisateur.utilisateur) as inbox, "maildir++" as layout, s_courriel_utilisateur.uid as uid,s_courriel_domaine.gid as gid FROM s_courriel_utilisateur left join s_courriel_alias on s_courriel_utilisateur.id=s_courriel_alias.utilisateur and s_courriel_alias.archive !=1 ,s_courriel_domaine WHERE s_courriel_utilisateur.archive !=1 and s_courriel_domaine.archive !=1 and s_courriel_utilisateur.domaine=s_courriel_domaine.id and s_courriel_domaine.nom = 'mail.vdl' and ( s_courriel_utilisateur.utilisateur = 'tes Jul 17 14:11:59 devshed dovecot: auth-worker(7385): Debug: auth(test(a)mail.vdl): username changed test(a)mail.vdl -> cedrict(a)mail.vdl Jul 17 14:11:59 devshed dovecot: auth: Debug: userdb out: USER 1 test(a)mail.vdl home=/vhome/mail.vdl/home/cedrict index=/vhome/mail.vdl/home/cedrict/mail/index control=/vhome/mail.vdl/home/cedrict/mail/control inbox=/var/spool/vmail/mail.vdl/cedrict layout=maildir++ uid=60001 gid=231 Jul 17 14:11:59 devshed dovecot: lda: Debug: auth input: test(a)mail.vdl home=/vhome/mail.vdl/home/cedrict index=/vhome/mail.vdl/home/cedrict/mail/index control=/vhome/mail.vdl/home/cedrict/mail/control inbox=/var/spool/vmail/mail.vdl/cedrict layout=maildir++ uid=60001 gid=231 Jul 17 14:11:59 devshed dovecot: lda: Debug: Added userdb setting: plugin/control=/vhome/mail.vdl/home/cedrict/mail/control Jul 17 14:11:59 devshed dovecot: lda: Debug: Added userdb setting: plugin/inbox=/var/spool/vmail/mail.vdl/cedrict Jul 17 14:11:59 devshed dovecot: lda: Debug: Added userdb setting: plugin/index=/vhome/mail.vdl/home/cedrict/mail/index Jul 17 14:11:59 devshed dovecot: lda: Debug: Added userdb setting: plugin/layout=maildir++ Jul 17 14:11:59 devshed dovecot: lda(test(a)mail.vdl): Debug: Effective uid=60001, gid=231, home=/vhome/mail.vdl/home/cedrict Jul 17 14:11:59 devshed dovecot: lda(test(a)mail.vdl): Debug: quota: No quota setting - plugin disabled Jul 17 14:11:59 devshed dovecot: lda(test(a)mail.vdl): Debug: maildir++: root=/vhome/mail.vdl/home/cedrict/mail, index=, indexpvt=, control=/vhome/mail.vdl/home/cedrict/mail/control, inbox=/var/spool/vmail/mail.vdl/test, alt= Jul 17 14:11:59 devshed dovecot: lda(test(a)mail.vdl): Debug: quota: No quota setting - plugin disabled Jul 17 14:11:59 devshed dovecot: lda(test(a)mail.vdl): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Jul 17 14:11:59 devshed dovecot: lda(test(a)mail.vdl): Debug: Destination address: test(a)mail.vdl (source: user@hostname) Jul 17 14:11:59 devshed dovecot: lda(test(a)mail.vdl): Debug: sieve: Pigeonhole version 0.4.1 initializing Jul 17 14:11:59 devshed dovecot: lda(test(a)mail.vdl): Debug: sieve: script file /vhome/mail.vdl/home/cedrict/mail/sieve/test not found Jul 17 14:11:59 devshed dovecot: lda(test(a)mail.vdl): Debug: sieve: user's script /vhome/mail.vdl/home/cedrict/mail/sieve/test doesn't exist (trying default script location instead) Jul 17 14:11:59 devshed dovecot: lda(test(a)mail.vdl): Debug: sieve: no default script configured for user Jul 17 14:11:59 devshed dovecot: lda(test(a)mail.vdl): Debug: sieve: user has no valid location for a personal script Jul 17 14:11:59 devshed dovecot: lda(test(a)mail.vdl): Debug: sieve: no scripts to execute: reverting to default delivery. Jul 17 14:11:59 devshed dovecot: lda(test(a)mail.vdl): msgid=<201307171811.r6HIBxWe007380(a)devshed.derytelecom.ca>: saved mail to INBOX Cedric

3 8

Re: [Dovecot] dovecot: imap-login: Aborted login
by Joseph Tam 23 Jul '13

23 Jul '13

Adnane <mls(a)adnane.me> writes: > but I cant send mails > > Jul 23 03:01:34 mailer postfix/anvil[9245]: statistics: max connection > rate 1/60s for (smtp:209.85.220.177) at Jul 23 02:58:13 > Jul 23 03:01:34 mailer postfix/anvil[9245]: statistics: max connection > count 1 for (smtp:209.85.220.177) at Jul 23 02:58:13 > Jul 23 03:01:34 mailer postfix/anvil[9245]: statistics: max cache size 1 > at Jul 23 02:58:13 Not a dovecot issue. In fact, neither was your previous problem, which was a mail reader configuration problem. Joseph Tam <jtam.home(a)gmail.com>

2 1

[Dovecot] dovecot: imap-login: Aborted login
by Adnane 23 Jul '13

23 Jul '13

Hello every one first I'am new to mail servers, I have followed this tutorial --> https://library.linode.com/email/postfix/postfix2.9.6-dovecot2.0.19-mysql?f… to set up an Ubuntu 12.04 Dovecot postfix mail box for a subdomain mailer.adnane.me, I think I followed every thing right but I get disconnected when I try to access adnane(a)mailer.adnane.me with thunderbird dig mx mailer.adnane.me +short 1 mailer.adnane.me. root@mailer:~# postmap -q mailer.adnane.me mysql:/etc/postfix/mysql-virtual-mailbox-domains.cf 1 root@mailer:~# postmap -q adnane(a)mailer.adnane.me mysql:/etc/postfix/mysql-virtual-mailbox-maps.cf 1 I think the issue is with authentication root@mailer:~# tail -f /var/log/syslogJul Jul 22 03:34:41 mailer dovecot:imap-login: Disconnected (no auth attempts): rip=41.251.155.145, lip=5.135.151.43, TLS Jul 22 03:35:02 mailer dovecot: imap-login: Disconnected (no auth attempts): rip=41.251.155.145, lip=5.135.151.43, TLS handshaking: Disconnected Jul 22 03:35:02 mailer dovecot: imap-login: Disconnected (no auth attempts): rip=41.251.155.145, lip=5.135.151.43, TLS handshaking: Disconnected Jul 22 03:35:03 mailer dovecot: imap-login: Disconnected (no auth attempts): rip=41.251.155.145, lip=5.135.151.43, TLS: Disconnected plz let me know which conf files I need to post here, tnx.

3 4

Re: [Dovecot] dovecot: imap-login: Aborted login
by Joseph Tam 22 Jul '13

22 Jul '13

From: Adnane <mls(a)adnane.me> writes: > Jul 22 22:32:53 mailer dovecot: pop3-login: Disconnected (tried to use > disabled plaintext auth): rip=196.217.182.199, lip=5.135.151.43 > Jul 22 22:36:04 mailer dovecot: pop3(adnane(a)mailer.adnane.me): > Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Looks like a mail client issue: you're not enabling STARTTLS on port 110. Fiddle with the SSL configuration. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] zlib error when running doveadm
by Michael Long 22 Jul '13

22 Jul '13

I manually fixed it by copying src/plugins/zlib/lib20_zlib_plugin.la to /usr/local/lib/dovecot/doveadm I do not understand why 'make install' won't do that? A bug perhaps?

1 0

[Dovecot] zlib error when running doveadm
by Michael Long 22 Jul '13

22 Jul '13

> Looks like you have two versions installed and are mixing them up. I checked and only one binary is on the system. I took a look in the directory /usr/local/lib/dovecot/doveadm/ and it appears the upgrade rebuilt all libraries EXCEPT zlib. Any ideas? -rw-r--r-- 1 root root 125910 Jul 22 10:58 lib10_doveadm_acl_plugin.a -rwxr-xr-x 1 root root 1070 Jul 22 10:58 lib10_doveadm_acl_plugin.la -rwxr-xr-x 1 root root 88190 Jul 22 10:58 lib10_doveadm_acl_plugin.so -rw-r--r-- 1 root root 54812 Jul 22 10:58 lib10_doveadm_expire_plugin.a -rwxr-xr-x 1 root root 1091 Jul 22 10:58 lib10_doveadm_expire_plugin.la -rwxr-xr-x 1 root root 44763 Jul 22 10:58 lib10_doveadm_expire_plugin.so -rw-r--r-- 1 root root 89116 Jul 22 10:58 lib10_doveadm_quota_plugin.a -rwxr-xr-x 1 root root 1084 Jul 22 10:58 lib10_doveadm_quota_plugin.la -rwxr-xr-x 1 root root 61137 Jul 22 10:58 lib10_doveadm_quota_plugin.so -rw-r--r-- 1 root root 369576 Jul 22 10:47 lib10_doveadm_sieve_plugin.a -rwxr-xr-x 1 root root 1248 Jul 22 10:47 lib10_doveadm_sieve_plugin.la -rwxr-xr-x 1 root root 208863 Jul 22 10:47 lib10_doveadm_sieve_plugin.so -rw-r--r-- 1 root root 26166 Apr 9 14:30 lib10_doveadm_zlib_plugin.a -rwxr-xr-x 1 root root 1077 Apr 9 14:30 lib10_doveadm_zlib_plugin.la -rwxr-xr-x 1 root root 25243 Apr 9 14:30 lib10_doveadm_zlib_plugin.so -rw-r--r-- 1 root root 100120 Jul 22 10:58 lib20_doveadm_fts_plugin.a -rwxr-xr-x 1 root root 1070 Jul 22 10:58 lib20_doveadm_fts_plugin.la -rwxr-xr-x 1 root root 65515 Jul 22 10:58 lib20_doveadm_fts_plugin.so Configure does seem to see it though: checking zlib.h usability... yes checking zlib.h presence... yes checking for zlib.h... yes checking bzlib.h usability... yes checking bzlib.h presence... yes checking for bzlib.h... yes checking for BZ2_bzdopen in -lbz2... yes

1 0

[Dovecot] OT: SAN vs Flash only SAN-less VM architecture for data storage
by Charles Marcus 21 Jul '13

21 Jul '13

Hello all, I am investigating options for leveraging our companies two locations, to provide fault tolerance/redundancy for our VM infrastructure. I was looking at SAN storage options, but ran across an interesting article, and would like opinions. It sounds great, a real win-win as to cost *and* performance... We have redundant/identical hosts at each location that can fulfill the requirements discussed... http://www.storage-switzerland.com/Articles/Entries/2012/9/20_The_Benefits_… or http://tinyurl.com/khwuspo Stan, I'm especially interested in your take, considering your experience with high end SANs and VM storage environments... Thanks, -- Best regards, Charles

4 3

[Dovecot] Error: stat dove 2.1.16 failed: File name too long
by Robert Schetterer 21 Jul '13

21 Jul '13

Hi , from some migration i have some long subfolder list sdbox ( for sure nonsense ) any good idea how to fix ? Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

1 1

Re: [Dovecot] Sieve info
by Reindl Harald 20 Jul '13

20 Jul '13

Am 21.07.2013 00:45, schrieb Sam Flint: > > On Jul 20, 2013 5:39 PM, "Reindl Harald" <h.reindl(a)thelounge.net <mailto:h.reindl@thelounge.net>> wrote: >> >> Am 21.07.2013 00:34, schrieb Sam Flint: >> > I'm using Dovecot v2, and I can't seem to find any info abut using sieve >> > with the LDA, or the ManageSieve protocol, can you please point me un the >> > right direction? >> >> google "dovecot sieve" leads to >> http://wiki2.dovecot.org/Pigeonhole/Sieve/Configuration > > Thank you very muuch! The pointer on the v1 wiki pointed to a non-existent page http://wiki2.dovecot.org/ is for version >= 2.0 many configs are completly different in v2 http://wiki.dovecot.org/ This documentation is for Dovecot v1.x, see wiki2 for v2.0 documentation

1 0

[Dovecot] zlib plugin "undefined symbol: imap_module_register"
by Alexander Weber 19 Jul '13

19 Jul '13

Hi all, i've tried to enable the zlib plugin within die LDA, but i've got some strange errors dovecot: lda: Error: dlopen(/usr/lib/dovecot/modules/lib30_imap_zlib_plugin.so) failed: /usr/lib/dovecot/modules/lib30_imap_zlib_plugin.so: undefined symbol: imap_module_register dovecot: lda: Fatal: Couldn't load required plugins am i missing something within the config? doveconf -n # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-49-generic x86_64 Ubuntu 12.04.2 LTS base_dir = /var/run/dovecot/ disable_plaintext_auth = no hostname = mail.local mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { list = yes location = maildir:/home/shared:CONTROL=~/.Maildir/control/Shared:INDEX=~/.Maildir/index/Shared prefix = shared/ separator = / subscriptions = yes type = public } namespace { inbox = yes location = prefix = separator = / type = private } passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve zlib_save = gz zlib_save_level = 6 } postmaster_address = postmaster@localhost protocols = imap sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imaps { port = 993 ssl = yes } } ssl_ca = </etc/ssl/some_magic_wildcard.pem ssl_cert = </etc/ssl/some_magic_wildcard.pem ssl_cipher_list = HIGH:MEDIUM:+TLSv1:!SSLv2:+SSLv3 ssl_key = </etc/ssl/some_magic_wildcard.pem userdb { driver = passwd } userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } protocol imaps { imap_client_workarounds = delay-newmail mail_max_userip_connections = 50 } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve, zlib, acl, imap_zlib postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } protocol imap { mail_plugins = zlib, acl, imap_zlib } Mit freundlichen Gruessen / best regards papaya Software GmbH i.A. Alexander Weber -- papaya Software GmbH | Im MediaPark 5 | 50670 Koeln | Germany Tel./Ph.: +49-221-5743-8070 | Fax: +49-221-5743-8099 mailto:weber@papaya-cms.com | http://www.papaya-cms.com/ -- Geschaeftsfuehrer: Andreas Jacobi, André Schnitzler, Daniel Schäfer Sitz& Registergericht: Koeln | HRB 60030 | USt.-Id.-Nr.: DE 255642963 --

2 1

[Dovecot] Archiving mail
by Koenraad Lelong 18 Jul '13

18 Jul '13

Hi, I'm going to migrate my company-mailserver to new hardware. I would like to take the opportunity to archive some older mail. But I would like to have it still accessible, would this be possible with dovecot ? I mean, I would like to put that older mail from different users (I got about 50 users) on some read-only media but mount that media in the users mail-dirs. That way I will have less to backup after I backup that old mail and store it safely away. I can't convince my users to really clean up their mailboxes, so I backup more than 100GB mail while the total backup is a bit more than 300GB. Writing this I realise I could give each user a folder oldmail and symlink that to a read-only oldmail folder. Would this work ? I will have to find out how my backup-software can ignore the oldmail-folder. Thanks for any suggestions, Koenraad Lelong

3 2

[Dovecot] Password encryption type for dovecot & postfix saslauthd with mysql
by Simon 18 Jul '13

18 Jul '13

Hi There, We are using dovecot v2.2.4 (compiled from source) and postfix (yum install) on Centos 6.4. We are storing our virtual user config in mysql. Server 1 has dovecot/postfix and accepts incoming mail from our mail filter servers - this is purely for IMAP/POP services. Server 2 has postfix for our clients to send email via TLS/saslauthd. Both use the same (separate) mysql server for config. One issue is that we have a requirement to merge user / passwords for sending clients from two sources: 1) the dovecot mailbox list 2). another list. The dovecot user list is email + password. The other list is username + password. To that end we have created a view table in mysql that merges the two.. tables + view look a little like this: table: mail_users (for dovecot) email,password test(a)test1.com,CRAM-MD5_PASSWORD test2(a)test1.com,CRAM-MD5_PASSWORD bla(a)bla.com,CRAM-MD5_PASSWORD table: mail_senders_other username,password username1,CRAM-MD5_PASSWORD something_else,CRAM-MD5_PASSWORD view: mail_senders (for postfix) username,password test(a)test1.com,CRAM-MD5_PASSWORD test2(a)test1.com,CRAM-MD5_PASSWORD bla(a)bla.com,CRAM-MD5_PASSWORD username1,CRAM-MD5_PASSWORD something_else,CRAM-MD5_PASSWORD I have dovecot working fine, but just need a little push in the correct direction (please) to figure out the correct settings and password encryption scheme to make the above work. Many thanks! Simon

1 0

[Dovecot] Dovecot 2.2.4 does not create home directory?
by Dmitry . 17 Jul '13

17 Jul '13

Hi, Does not create, or something I did wrong? Here http://wiki2.dovecot.org/VirtualUsers/Home it is written Home vs. mail directory Home directory shouldn't be the same as mail directory. It's possible to do that, but you might run into trouble with it sooner or later. Some problems with this are: and Ways to set up home directory The home directory is the same as the mail directory. If for example home=/var/vmail/domain/user/ mail=/var/vmail/domain/user/mail/, set: mail_home = /var/vmail/%d/%n mail_location = maildir:~/mail I think I've done it so. And yet, here http://wiki.dovecot.org/HowTo/SimpleVirtualInstall it is written Users can be added by editing this file. Dovecot automatically notices the new users immediately after they're added. It also creates their home directories when the user logs in. However, the directory is not created. My config: # dovecot -n # 2.2.4: /etc/dovecot/dovecot.conf # OS: Linux 3.9.6 x86_64 Slackware 14.0 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login digest-md5 cram-md5 rpa apop auth_verbose = yes auth_verbose_passwords = plain debug_log_path = /var/log/dovecot/dovecot.debug.log disable_plaintext_auth = no info_log_path = /var/log/dovecot/dovecot.info.log lda_mailbox_autocreate = yes listen = 192.168.1.1 log_path = /var/log/dovecot/dovecot.log mail_debug = yes mail_gid = dovecot mail_uid = dovecot managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { antispam_allow_append_to_spam = NO antispam_backend = dspam antispam_debug_target = syslog antispam_dspam_args = --user;%Lu;--deliver=;--source=error;--signature=%%s antispam_dspam_binary = /usr/bin/dspam antispam_dspam_notspam = --class=innocent antispam_dspam_result_blacklist = Virus;Blocklisted;Blacklisted antispam_dspam_result_header = X-DSPAM-Result antispam_dspam_spam = --class=spam antispam_signature = X-DSPAM-Signature antispam_signature_missing = move antispam_skip_from_line = NO antispam_spam = Spam;spam;SPAM;Junk;junk;JUNK; antispam_trash = Trash;trash;Deleted;deleted;Deleted Items;Deleted Messages; antispam_verbose_debug = 1 sieve = ~/.dovecot.sieve sieve_default = /etc/dovecot/sieve/default.sieve sieve_dir = ~/sieve sieve_global_dir = /etc/dovecot/sieve/ } protocols = imap pop3 lmtp sieve service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl_cert = </etc/dovecot/ssl/key.pem ssl_key = </etc/dovecot/ssl/key.pem userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } verbose_ssl = yes protocol lmtp { mail_plugins = " sieve" } protocol lda { mail_plugins = " sieve" } protocol imap { mail_max_userip_connections = 15 mail_plugins = " antispam" } protocol imaps { mail_max_userip_connections = 15 mail_plugins = " antispam" } # grep -v '^ *$#.*$\?$' dovecot-sql.conf driver = pgsql connect = host=localhost dbname=dbname user=user password=password default_pass_scheme = PLAIN password_query = SELECT password FROM users WHERE email = '%u' AND enabled = 1 user_query = SELECT \ concat('/var/spool/vmail/', home) AS home, \ concat('maildir:', maildir) AS mail \ FROM users WHERE email = '%u' AND enabled = 1 where in db home = "example.com/test/" maildir = "Maildir/" /etc/passwd dovecot:x:1202:202:Dovecot:/dev/null:/bin/bash dovenull:x:1203:203:Dovenull:/dev/null:/bin/false /etc/group dovecot:x:202: dovenull:x:203: cd /var/spool # ls -l drwxrwxr-x 4 dovecot dovecot 4096 Jul 17 12:41 vmail /var/log/dovecot/dovecot.debug.log Jul 17 12:49:41 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jul 17 12:49:41 auth: Debug: Read auth token secret from /var/run/dovecot/auth-token-secret.dat Jul 17 12:49:41 auth: Debug: auth client connected (pid=10501) Jul 17 12:49:41 auth: Debug: client in: AUTH 1 CRAM-MD5 service=imap session=RONGFqLhrgDAqAPO lip=192.168.1.1 rip=192.168.1.2 lport=143 rport=50094 Jul 17 12:49:41 auth: Debug: client passdb out: CONT 1 PDk3MDcyMzA1OTYxMTU0MzguMTM3Mzk4NjE4MUBtYWlsPg== Jul 17 12:49:41 auth: Debug: client in: CONT 1 dGVzdEBoYXJkcmV2aWV3LnJ1IDFhOTE0NDBmZDk1OGE5ZWI0MWVkN2Q4ZDdhOGIzNzFi (previous base64 data may contain sensitive data) Jul 17 12:49:41 auth: Debug: sql(test(a)example.com,192.168.1.2,<RONGFqLhrgDAqAPO>): query: SELECT password FROM users WHERE email = 'test(a)example.com' AND enabled = 1 Jul 17 12:49:41 auth: Debug: password(test(a)example.com,192.168.1.2,<RONGFqLhrgDAqAPO>): Generating CRAM-MD5 from user 'test@example.com@', password 'test' Jul 17 12:49:41 auth: Debug: password(test(a)example.com,192.168.1.2,<RONGFqLhrgDAqAPO>): Credentials: 6062bc903ac97de43f0b5d33ebe8c1a63bb9ae1a88ec39cf6fd85a645de8c63a Jul 17 12:49:41 auth: Debug: client passdb out: OK 1 user= test(a)example.com Jul 17 12:49:41 auth: Debug: master in: REQUEST 2206334977 10501 1 49e1fcdcc5e1c2becb50c3b47d31cdeb session_pid=10506 Jul 17 12:49:41 auth: Debug: sql(test(a)example.com,192.168.1.2,<RONGFqLhrgDAqAPO>): SELECT concat('/var/spool/vmail/', home) AS home, concat('maildir:', maildir) AS mail FROM users WHERE email = 'test(a)example.com' AND enabled = 1 Jul 17 12:49:41 auth: Debug: master userdb out: USER 2206334977 test(a)example.com home=/var/spool/vmail/example.com/test/ mail=maildir:Maildir/ auth_token=670c839af976e3c0c74db1754e28ff40a2557095 Jul 17 12:49:41 imap: Debug: Loading modules from directory: /usr/lib64/dovecot Jul 17 12:49:41 imap: Debug: Module loaded: /usr/lib64/dovecot/lib90_antispam_plugin.so Jul 17 12:49:41 imap: Debug: Added userdb setting: mail=maildir:Maildir/ Jul 17 12:49:41 imap(test(a)example.com): Debug: Effective uid=1202, gid=202, home=/var/spool/vmail/example.com/test/ Jul 17 12:49:41 imap(test(a)example.com): Debug: Home dir not found: /var/spool/vmail/example.com/test/ Jul 17 12:49:41 imap(test(a)example.com): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:Maildir/ Jul 17 12:49:41 imap(test(a)example.com): Debug: maildir++: root=Maildir, index=, indexpvt=, control=, inbox=Maildir, alt= Jul 17 12:49:41 imap(test(a)example.com): Debug: Namespace : Maildir doesn't exist yet, using default permissions Jul 17 12:49:41 imap(test(a)example.com): Debug: Namespace : Using permissions from Maildir: mode=0700 gid=default Thank you! Regards, Dmitry

4 6

[Dovecot] Variable similar to %u but providing the username changed by a database lookup?
by Axel Luttgens 17 Jul '13

17 Jul '13

Hello, Variable %u may be used in dovecot.conf whenever the "full username" is needed. But the expansion of %u returns the username before a possible change performed thru a password or user database lookup (e.g., in the case of a SQL database, thru as "AS user" clause). Is there a variable that would expand to the changed name when used in the configuration file? TIA, Axel

2 3

[Dovecot] Fail2ban and logging
by Paul van der Vlis 17 Jul '13

17 Jul '13

Hello, Dovecot is logging authentication failures this way: ------ Jul 12 18:07:19 vps0 dovecot: imap-login: Disconnected (auth failed, 22 attempts in 172 secs): user=<info>, method=PLAIN, rip=82.95.148.152, lip=1.2.3.4, TLS, session=<QylMqlLhVwBSX5SY> ------ Fail2ban is trying to catch them with this regex: ------ failregex = .*(?:pop3-login|imap-login):.*(?:Authentication failure|Aborted login \(auth failed|Aborted login \(tried to use disabled|Disconnected \(auth failed).*rip=(?P<host>\S*),.* ------ This way fail2ban is counting 22 attempts as 1 attempt... I expect I need to change something on the logging, so that every attempt is seperate logged. But I don't know how. Is here somebody who knows how to get fail2ban correct working? No help on this on the wiki's: http://wiki1.dovecot.org/HowTo/Fail2Ban http://wiki1.dovecot.org/Logging http://www.fail2ban.org/wiki/index.php/Dovecot With regards, Paul van der Vlis. -- Paul van der Vlis Linux systeembeheer, Groningen http://www.vandervlis.nl/

2 4

[Dovecot] plugin expire
by Felix Rubio Dalmau 17 Jul '13

17 Jul '13

Hi everybody, I'm trying to configure the expire plugin, unsuccessfully. This is my configuration, the part related to this plugin. Could somebody give a look to it? I can not figure out why is not working :-S. Thank you, and regards! Felix ############ doveconf output dict { expire = mysql:/etc/dovecot/dovecot-dict-expire.conf.ext } plugin { expire = Trash 15 Junk 15 expire_dict = proxy::expire } protocol imap { mail_plugins = " zlib expire" } ########### dovecot-dict-expire.conf.ext # CREATE TABLE virtual_expires ( # username varchar(100) not null, # mailbox varchar(255) not null, # expire_stamp integer not null, # primary key (username, mailbox) # ); map { pattern = shared/expire/$user/$mailbox table = virtual_expires value_field = expire_stamp fields { username = $user mailbox = $mailbox } }

1 0

[Dovecot] courier to dovecot
by J Gao 16 Jul '13

16 Jul '13

Hi, All, I am new here and I need your advises. Here is my story: I have a mail server like this: - CentOS 5 32 bit (LAMP) - Postfix 2.3 - Courier - MailScanner Courier use maildir to save emails in /home/vmail/<virtual domain>/<user> / Now I want to build a new system on CentOS 6.4 64bit with postfix, dovecot and migrate all user accounts and their emails. I already installed CentOS 6.4, postfix and mysql. Also just installed Dovecot v2.2.4 from the RPM. Now I am looking into how to Is there a good instruction on how to do this kind of migration? I still prefer using the maildir system. If I just copy all users email from old server to new dovecot user maildir, will dovecot see these mails (and sub-folders) ? Do I need do anything extra? Thanks in advance. Gao -- __ _|==|_ ('')__/ >--(`^^') (`^'^'`) `======'

3 2

[Dovecot] reload without shutting imap connections down
by Hajo Locke 16 Jul '13

16 Jul '13

Hello, we have some problems with users who report connectionproblems to dovecot sometimes. According to the logs there are dovecot reloads at this times. Seems that a reload also causes dovecot to shut all imapconnections down: Jul 16 13:31:40 myhostname dovecot: master: Warning: SIGHUP received - reloading configuration Jul 16 13:31:40 myhostname dovecot: imap: Server shutting down. bytes=251/675 I tried to reload by initscript or sending -HUP manually to pid, dovecot is shutting down imapconnections and i think this is the reason for users to report this problems with some clients. This seems to be new with versions 2.x, i have some old 1.2.x dovecots running and cant find "Server shutting down" in their logs after reload. I have still potential to reduce reloads, but cant avoid them completely. Is there a workaround? Thanks, Hajo

4 6

[Dovecot] Difference between using auth_realms and setting up virtual mailboxes in postfix?
by Gab IIpop 16 Jul '13

16 Jul '13

Hi, there is a possibility in the future that I might have to support multiple domain names(but using the same IP address). Postfix has something called 'virtual mailboxes' to help handle this. But I also noticed that dovecot has a setting "auth_realms" where I can specify domains separated by a space. What is the relationship between the two?

2 1

[Dovecot] mail not reject when the mailbox is full (Dovecot-LDAP-Imap_quota)
by Victor Oñate 16 Jul '13

16 Jul '13

Hello List. Currently I have configured the share of users through the LDAP query as shown #dovecot.conf protocol imap { mail_plugins = quota imap_quota } plugin { quota = dirsize } userdb ldap { args = /etc/dovecot/dovecot-ldap.conf } #dovecot-ldap.conf auth_bind = yes ldap_version = 3 base = dc=XXX,dc=YY,dc=ZZ deref = never scope = subtree user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid,mail=Maildir,mailQuotaSize=quota_rule=*:storage=%$ user_filter = (&(objectClass=posixAccount)(uid=%u)) pass_attrs = uid=user,userPassword=password,homeDirectory=userdb_home,uidNumber=userdb_uid,gidNumber=userdb_gid pass_filter = (&(objectClass=posixAccount)(uid=%u)) Additionally in thunderbird customers have the plug so they can see the share. This works perfect! However, when the mailbox exceeds 100% users continue to receive mail which makes the risk set allocated disk space, the idea is that when full the mail reject with a message "mailbox XXX full" . As always appreciate the ideas. Victor Oñate

4 4

[Dovecot] Proxying improvements in v2.1.2
by Timo Sirainen 16 Jul '13

16 Jul '13

I just committed a couple of features that will make life easier for some types of proxying setups: 1. IMAP proxying has already for a while supported sending local/remote IP/port to backend server, which can use it for logging and other purposes. I've now implemented this for POP3 as well, although only the remote IP/port is forwarded, not local IP/port. I implemented this also for LMTP in v2.2 tree, but haven't bothered to backport that change. Both POP3 and LMTP uses XCLIENT command that is compatible to Postfix's (XCLIENT ADDR=1.2.3.4 PORT=110). 2. proxy_maybe=yes + host=host.example.com actually works now. As long as host.example.com DNS lookup returns one IP that belongs to the current server the proxying is skipped. 3. auth_proxy_self = 1.2.3.4 setting means that if proxy_maybe=yes and host=1.2.3.4 then Dovecot assumes that this is a local login and won't proxy it, even if 1.2.3.4 isn't the actual local IP. This can be helpful if the host field contains load balancer's IP address instead of the server's. You can add more than one IP (space separated) and of course everything related to this works just as well with hostnames as with IPs (even when hostname expands to multiple IPs).

2 2

[Dovecot] Sieve vacation variables reference
by Simon 16 Jul '13

16 Jul '13

Hi There. We are using dovecot v2.2.4 with pigeonhole 0.4.1 (both compiled from source) Centos 6.4. Sorry for the dumb question in advance if I'm just missing an obvious link somewhere (also if I've got the terminology all wrong!), but could someone point me to the reference list for "vacation", e.g.: vacation :days :subject :addresses :from is there a definitive list of things like "days", "subject" etc? Thanks Simon

2 2

[Dovecot] Sieve scripts in mysql?
by Simon 16 Jul '13

16 Jul '13

Hi There. We are using dovecot v2.2.4 with pigeonhole 0.4.1 (both compiled from source) Centos 6.4. We are storing our virtual user config in mysql. At the moment we are storing our sieve script configs in mysql and then running a script to write these out to a file.. But I'm wondering if there a way to store sieve scripts in mysql? Many thanks! Simon

1 1

[Dovecot] Services not starting in 2.1 (or 2.2)
by Tommy Wareing 15 Jul '13

15 Jul '13

I'm trying to install Dovecot onto my QNAP NAS. I apologise for this! It means I'm not working in a normal environment, and don't (necessarily) have the normal range of tools available (or the most up to date version of those tools). It seems that 2.0.21 works (at least, as far as I've tested), but 2.1.17 and 2.2.4 won't start up their child services. I've got the source code for all three from http://www.dovecot.org/download.html, and, for experimental purposes, I'm configuring with: ./configure --prefix=/opt The configure script ends by reporting: Install prefix . : /opt File offsets ... : 64bit I/O polling .... : epoll I/O notifys .... : inotify SSL ............ : yes (OpenSSL) GSSAPI ......... : no passdbs ........ : static passwd passwd-file shadow checkpassword : -pam -bsdauth -sia -ldap -sql -vpopmail userdbs ........ : static prefetch passwd passwd-file checkpassword nss : -ldap -sql -vpopmail SQL drivers .... : : -pgsql -mysql -sqlite The dovecot.conf I'm using, at the moment, is the absolute minimal to fire things up: protocols = imap listen = * ssl_cert = </opt/etc/ssl/certs/dovecot.pem ssl_key = </opt/etc/ssl/private/dovecot.pem dovecot -n is happy, and reports those four lines back to me. When I start this up, I get, in /var/log/messages file: Jul 10 10:09:28 QNAP mail.info dovecot: master: Dovecot v2.0.21 starting up (core dumps disabled) and ps shows: [admin@qnap dovecot]# ps -ef | grep dovecot admin 11478 1 0 10:09 ? 00:00:00 /opt/sbin/dovecot dovecot 11479 11478 0 10:09 ? 00:00:00 dovecot/anvil admin 11480 11478 0 10:09 ? 00:00:00 dovecot/log admin 11482 11478 0 10:09 ? 00:00:00 dovecot/config admin 11525 455 0 10:10 pts/5 00:00:00 grep dovecot All is right with the world! Well, until I try to use dovecot properly, at which point I'll need a full configuration. But it's alright so far! :) However, if I go through the same routine with Dovecot 2.1.17, I get the appropriate message in messages: Jul 10 10:12:45 QNAP mail.info dovecot: master: Dovecot v2.1.17 starting up (core dumps disabled) But this time, ps shows: [admin@qnap dovecot-2.1.17]# ps -ef | grep dovecot admin 15259 1 0 10:12 ? 00:00:00 /opt/sbin/dovecot admin 15294 455 0 10:12 pts/5 00:00:00 grep dovecot and the child services don't seem to have started. This is born out by the fact that no network connections work: they stall, and then eventually time out (telnet localhost 143 produces no output at all, until I disconnect it). Even dovecot stop has trouble, taking several seconds before it returns me to the prompt, and *not* killing the existing process. dovecot -n is still happy however (and in a full configuration, components which don't require the services seem to work properly, such as dovecot-lda, if it doesn't require auth). I'm not sure that I need those newer versions of dovecot, so I'll get back to version 2.0 for now. But I'd certainly like the option, and imagine that somebody else might care as to what the problem is! -- Tommy Wareing

4 8

[Dovecot] trying to configre dovecot
by Gene Heskett 15 Jul '13

15 Jul '13

Hi all; Thinking I'd like to have a bit of security, I followed the example for dovecot from allgoodthings.org Guessing between the lines I made a few substitutions to localize it for me, but when I run the line to dump the configs, the output is very short because I do not have the *.pem files. Where can a usable set of these ssl 'keyfiles' be obtained? Cheers, Gene -- "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." -Ed Howdershelt (Author) My web page: <http://coyoteden.dyndns-free.com:85/gene> is up! My views <http://www.armchairpatriot.com/What%20Has%20America%20Become.shtml> Gee, I feel kind of LIGHT in the head now, knowing I can't make my satellite dish PAYMENTS! A pen in the hand of this president is far more dangerous than 200 million guns in the hands of law-abiding citizens.

3 6

[Dovecot] User login for SMTP but not for IMAP/POP?
by Martin 14 Jul '13

14 Jul '13

Hello everybody, I have a question, though I'm not sure if it's a matter of dovecot or postfix. Or if it's even possible to do at all. If I understand it correctly, SMTP authentification is done via SASL. When a user wants to login Postfix queries an external user database (dovecot). Therefore the SMTP-users are identical to the IMAP/POP-users. I want to achieve the following: I want some user credentials (username&password) for a user that is able to login via SMTP, but who doesn't have a mailbox and therefore shouldn't be able to login via IMAP/POP. Is this even possible? How can it be achieved? Or: does this behaviour have a special name, which I can google for? Regards, Martin

2 1

[Dovecot] login_trusted_networks from webmail ?
by Jan-Frode Myklebust 14 Jul '13

14 Jul '13

I'd like to get the IP-address of the webmail-klient logged in my maillog (for being compliant with coming data retention policies). I've noticed that with login_trusted_networks pointing at my dovecot directors, we get rip=client-ip logged on the backends. How is the proxy providing this to the dovecot backends? Anybody know what magic we need to implement in our webmail-solution to be able to forward the webmail-client-ip and have it logged as rip= in dovecot? I belive it will be enough to have it logged as rip= on the directors, maybe not needed to be forwarded all the way to the backends (but that would be nice as well). -jf

3 7

[Dovecot] new user questions
by Gene Heskett 14 Jul '13

14 Jul '13

Greetings; Trying to follow along with the wiki2 setup instructions and thought I'd hit a snag with the first "send me a mail" snippet as it took several minutes to arrive, so I assume that somehow procmail was involved in the delivery and my procmail runs mail thought a whole bunch of checks before finally handing it off to a mailfile as /var/mail/gene. Then the next script seems to only try whats in my home dir, and of course doesn't find it as neither exists, yet... I assume that is because dovecot needs a kill -HUP. But I am not familiar with that, so how is it done, and as what user, me, or root, on a ubuntu 12.04.2 LTS install? Thanks. Cheers, Gene -- "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." -Ed Howdershelt (Author) My web page: <http://coyoteden.dyndns-free.com:85/gene> is up! My views <http://www.armchairpatriot.com/What%20Has%20America%20Become.shtml> Beam me up, Scotty! A pen in the hand of this president is far more dangerous than 200 million guns in the hands of law-abiding citizens.

3 4

[Dovecot] Mail replication ... totally confused !
by HL 13 Jul '13

13 Jul '13

Hello, I am totally confused configuring replication in dovecot. In my case I have 2 servers instead of running rsync as a daemon which takes a lot of time I would like SERVER-A will be the master and SERVER-B will be the slave My users directly interact with server A, Server B stands as a mails backup only I've setup SERVER-B ( backup ) like that, NO SPECIAL CONF on master SERVER-A Is this ok ?? I Don't want to miss any mails Since this is a live server service aggregator { # give enough permissions for mail processes # fifo_listener replication-notify-fifo { user = vmail mode = 0600 } unix_listener replication-notify { user = vmail mode = 0600 } } service replicator { # start replication at startup # process_min_avail = 1 } service doveadm { # if you're using a single virtual user, set this to start ssh as vmail # (not root) # user = vmail } service config { # needed to grant access to /var/run/dovecot/config for service doveadm # unix_listener config { user = vmail } } dsync_remote_cmd = ssh -p 1234 -l%{login} %{host} doveadm dsync-server -u%u -l%{lock_timeout} -n%{namespace} plugin { mail_replica = remote:vmail@master-server-a.tld replication_full_sync_interval = 1 hours }

1 0

[Dovecot] Dovecot 2.2.4 metadata-plugin not support UTF7
by Sergey Sidlyarenko 13 Jul '13

13 Jul '13

In Dovecot 2.2.4 metadata-plugin crach on setmetadata but worked on ascii folders? but not worked on utf7 (non ascii) folders. [13-Jul-2013 19:15:36 +0400]: [F537] S: A0002 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE METADATA ANNOTATEMORE] Logged in [13-Jul-2013 19:15:36 +0400]: [F537] C: A0003 CREATE &BB0EPgQyBEsEOQ-8 [13-Jul-2013 19:15:36 +0400]: [F537] S: A0003 OK Create completed. [13-Jul-2013 19:15:36 +0400]: [F537] C: A0004 SUBSCRIBE &BB0EPgQyBEsEOQ-8 [13-Jul-2013 19:15:36 +0400]: [F537] S: A0004 OK Subscribe completed. [13-Jul-2013 19:15:36 +0400]: [F537] C: A0005 SETMETADATA &BB0EPgQyBEsEOQ-8 (/shared/vendor/kolab/folder-type event /private/vendor/kolab/folder-type NIL) [13-Jul-2013 19:15:36 +0400]: [F537] S: A0005 NO Mailbox does not exist. [13-Jul-2013 19:15:36 +0400]: [F537] C: A0006 SETMETADATA &BB0EPgQyBEsEOQ-8 (/private/vendor/kolab/folder-type event) [13-Jul-2013 19:15:36 +0400]: [F537] S: A0006 NO Mailbox does not exist. [13-Jul-2013 19:15:36 +0400]: [F537] C: A0007 LIST "" "&BB0EPgQyBEsEOQ-8/*" [13-Jul-2013 19:15:36 +0400]: [F537] S: A0007 OK List completed. [13-Jul-2013 19:15:36 +0400]: [F537] C: A0008 GETMETADATA "*" (/private/vendor/kolab/folder-type /shared/vendor/kolab/folder-type) [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Drafts" ("/private/vendor/kolab/folder-type" "mail.drafts") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Drafts" ("/shared/vendor/kolab/folder-type" "mail") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Configuration" ("/private/vendor/kolab/folder-type" "configuration.default") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Configuration" ("/shared/vendor/kolab/folder-type" "configuration") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Notes" ("/private/vendor/kolab/folder-type" "note.default") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Notes" ("/shared/vendor/kolab/folder-type" "note") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Junk" ("/private/vendor/kolab/folder-type" "mail.junkemail") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Junk" ("/shared/vendor/kolab/folder-type" "mail") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "FreeBusy" ("/private/vendor/kolab/folder-type" "freebusy.default") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "FreeBusy" ("/shared/vendor/kolab/folder-type" "freebusy") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "INBOX" ("/private/vendor/kolab/folder-type" "mail.inbox") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "INBOX" ("/shared/vendor/kolab/folder-type" "mail") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Sent" ("/private/vendor/kolab/folder-type" "mail.sentitems") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Sent" ("/shared/vendor/kolab/folder-type" "mail") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "New8" ("/shared/vendor/kolab/folder-type" "event") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Tasks" ("/private/vendor/kolab/folder-type" "task.default") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Tasks" ("/shared/vendor/kolab/folder-type" "task") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Trash" ("/private/vendor/kolab/folder-type" "mail.wastebasket") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Trash" ("/shared/vendor/kolab/folder-type" "mail") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Calendar" ("/private/vendor/kolab/folder-type" "event.default") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Calendar" ("/shared/vendor/kolab/folder-type" "event") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Calendar/New" ("/shared/vendor/kolab/folder-type" "event") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Calendar/New4" ("/shared/vendor/kolab/folder-type" "event") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Calendar/New3" ("/shared/vendor/kolab/folder-type" "event") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Calendar/Home" ("/shared/vendor/kolab/folder-type" "event") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Calendar/New2" ("/shared/vendor/kolab/folder-type" "event") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Calendar/New1" ("/shared/vendor/kolab/folder-type" "event") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "New7" ("/shared/vendor/kolab/folder-type" "event") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Addressbook" ("/private/vendor/kolab/folder-type" "contact.default") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Addressbook" ("/shared/vendor/kolab/folder-type" "contact") [13-Jul-2013 19:15:36 +0400]: [F537] S: A0008 OK Completed. [13-Jul-2013 19:15:36 +0400]: [F537] C: A0009 DELETE &BB0EPgQyBEsEOQ-8 [13-Jul-2013 19:15:36 +0400]: [F537] S: A0009 OK Delete completed. [13-Jul-2013 19:15:36 +0400]: [F537] C: A0010 UNSUBSCRIBE &BB0EPgQyBEsEOQ-8 [13-Jul-2013 19:15:36 +0400]: [F537] S: A0010 OK Unsubscribe completed. [13-Jul-2013 19:15:36 +0400]: [F537] C: A0011 LOGOUT [13-Jul-2013 19:15:36 +0400]: [F537] S: * BYE Logging out [13-Jul-2013 19:15:36 +0400]: [F537] S: A0011 OK Logout completed. -- Sidlyarenko Sergey https://github.com/lefoyer

1 0

[Dovecot] Dovecot 2.2.4 metadata-plugin crached
by Sergey Sidlyarenko 13 Jul '13

13 Jul '13

Dovecot (deb http://xi.rename-it.nl/debian/ stable-auto/dovecot-2.2 main) crached after create new metadata folder (But the folder with metadata is created). Metadata plugin v14. Coredump: http://yadi.sk/d/bsBCpRS76mXpj in log: imap(admin(a)example.ru): Fatal: master: service(imap): child 14339 killed with signal 11 (core dumped) [10-Jul-2013 11:46:00 +0400]: [A4A2] S: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Welcome to TU FKP IMAP server. [10-Jul-2013 11:46:00 +0400]: [A4A2] C: A0001 ID ("name" "Roundcube" "version" "1.0-git" "php" "5.4.4-14+deb7u2" "os" "Linux" "command" "/?_task=calendar&_action=calendar") [10-Jul-2013 11:46:00 +0400]: [A4A2] S: * ID ("name" "Dovecot") [10-Jul-2013 11:46:00 +0400]: [A4A2] S: A0001 OK ID completed. [10-Jul-2013 11:46:00 +0400]: [A4A2] C: A0002 AUTHENTICATE PLAIN pass [10-Jul-2013 11:46:00 +0400]: [A4A2] S: A0002 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE METADATA ANNOTATEMORE] Logged in [10-Jul-2013 11:46:00 +0400]: [A4A2] C: A0003 CREATE Calendar/New4 [10-Jul-2013 11:46:00 +0400]: [A4A2] S: A0003 OK Create completed. [10-Jul-2013 11:46:00 +0400]: [A4A2] C: A0004 SUBSCRIBE Calendar/New4 [10-Jul-2013 11:46:00 +0400]: [A4A2] S: A0004 OK Subscribe completed. [10-Jul-2013 11:46:00 +0400]: [A4A2] C: A0005 SETMETADATA Calendar/New4 (/shared/vendor/kolab/folder-type event /private/vendor/kolab/folder-type NIL) root@mail:/var/core# gdb /usr/lib/dovecot/imap /var/core/19851 GNU gdb (GDB) 7.4.1-debian Copyright (C) 2012 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/lib/dovecot/imap...Reading symbols from /usr/lib/debug/usr/lib/dovecot/imap...done. done. [New LWP 19851] warning: Can't read pathname for load map: Ошибка ввода/вывода. [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `dovecot/imap'. Program terminated with signal 11, Segmentation fault. #0 0x00007f0a7102686f in ?? () from /lib/x86_64-linux-gnu/libc.so.6 (gdb) bt full #0 0x00007f0a7102686f in ?? () from /lib/x86_64-linux-gnu/libc.so.6 No symbol table info available. #1 0x00007f0a700ccad9 in metadata_set_entry (entry=0x1705880, user=<optimized out>) at metadata-backend.c:133 muser = 0x16f6550 key = <optimized out> dt = <optimized out> #2 0x00007f0a6fcc4c91 in setmetadata_helper (box=0x1700080, args=<optimized out>, cmd=0x16fb440) at imap-metadata-plugin.c:673 name = 0x16fffd8 "/private/vendor/kolab/folder-type" value = 0x0 entry = <optimized out> ret = <optimized out> warn_maxsize = <optimized out> warn_toomany = <optimized out> arglist = 0x16ffeb8 response = <optimized out> warn_noprivate = false #3 cmd_setmetadata (cmd=0x16fb440) at imap-metadata-plugin.c:761 args = 0x16ffca8 mailbox_name = 0x16ffe10 "Calendar/New3" box = 0x1700080 #4 0x000000000041679c in command_exec (cmd=cmd@entry=0x16fb440) at imap-commands.c:156 hook = 0x16e00b0 ret = <optimized out> #5 0x0000000000415800 in client_command_input (cmd=0x16fb440) at imap-client.c:775 client = 0x16fa910 command = <optimized out> __FUNCTION__ = "client_command_input" #6 0x00000000004158ba in client_command_input (cmd=0x16fb440) at imap-client.c:836 client = 0x16fa910 command = <optimized out> __FUNCTION__ = "client_command_input" #7 0x0000000000415b75 in client_handle_next_command (remove_io_r=<synthetic pointer>, client=0x16fa910) at imap-client.c:874 No locals. #8 client_handle_input (client=client@entry=0x16fa910) at imap-client.c:886 _data_stack_cur_id = 3 ret = false remove_io = false handled_commands = false __FUNCTION__ = "client_handle_input" #9 0x0000000000415f22 in client_input (client=0x16fa910) at imap-client.c:928 cmd = <optimized out> output = 0x16fb308 bytes = 112 __FUNCTION__ = "client_input" #10 0x00007f0a71309f66 in io_loop_call_io (io=0x16f8bd0) at ioloop.c:387 ioloop = 0x16df700 t_id = 2 #11 0x00007f0a7130add7 in io_loop_handler_run (ioloop=ioloop@entry=0x16df700) at ioloop-epoll.c:215 ctx = 0x16e0390 events = 0x0 event = 0x16e11f0 list = 0x16f8c20 io = <optimized out> tv = {tv_sec = 1799, tv_usec = 999792} events_count = <optimized out> msecs = <optimized out> ret = 1 i = <optimized out> call = <optimized out> __FUNCTION__ = "io_loop_handler_run" #12 0x00007f0a71309aa8 in io_loop_run (ioloop=0x16df700) at ioloop.c:406 No locals. ---Type <return> to continue, or q <return> to quit--- #13 0x00007f0a712bf1e3 in master_service_run (service=0x16df590, callback=callback@entry=0x41ed40 <client_connected>) at master-service.c:560 No locals. #14 0x000000000040bb58 in main (argc=1, argv=0x16df390) at main.c:400 set_roots = {0x426320, 0x0} login_set = {auth_socket_path = 0x16d7040 "\001", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x41ebf0 <login_client_connected>, failure_callback = 0x41e900 <login_client_failed>, request_auth_token = 1} service_flags = <optimized out> storage_service_flags = <optimized out> username = 0x0 c = <optimized out> (gdb) quit root@mail:/var/core# dovecot -n # 2.2.4 (620876853f6f): /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.1 ext4 auth_cache_negative_ttl = 10 secs auth_cache_size = 10 M auth_cache_ttl = 2 mins auth_master_user_separator = * auth_mechanisms = plain login auth_worker_max_count = 4096 base_dir = /var/run/dovecot/ default_client_limit = 8192 default_process_limit = 2048 default_vsz_limit = 2 G dict { expire = pgsql:/etc/dovecot/dovecot-dict-expire.conf metadata = file:/var/lib/dovecot/shared-metadata } first_valid_gid = 8 first_valid_uid = 8 info_log_path = /var/log/dovecot/dovecot.log last_valid_gid = 8 last_valid_uid = 8 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = *, [::] log_path = /var/log/dovecot/dovecot-errors.log log_timestamp = "%Y-%m-%d %H:%M:%S " login_greeting = Welcome to IMAP server. login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c login_trusted_networks = 127.0.0.1 mail_gid = mail mail_location = maildir:/var/mail/%d/%n:LAYOUT=fs:INBOX=/var/mail/%d/%n/maildirfolder:DIRNAME=maildirfolder:INDEX=/var/mail/indexes/%d/%n mail_max_userip_connections = 1024 mail_plugins = virtual expire metadata mail_privileged_group = mail mail_uid = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { hidden = no inbox = yes list = yes location = maildir:/var/mail/%d/%n:LAYOUT=fs:INBOX=/var/mail/%d/%n/maildirfolder:DIRNAME=maildirfolder:INDEX=/var/mail/indexes/%d/%n:UTF-8 mailbox Archive { auto = subscribe special_use = \Archive } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / subscriptions = yes type = private } namespace { hidden = no ignore_on_failure = no inbox = no list = yes location = virtual:/etc/dovecot/virtual:CONTROL=/var/mail/controls/%d/%n/Вся почта:INDEX=/var/mail/indexes/%d/%n/Вся почта:UTF-8 mailbox { auto = subscribe special_use = \All } prefix = Вся почта/ separator = / subscriptions = no type = private } passdb { args = /etc/dovecot/dovecot-pgsql-master.conf driver = sql master = yes } passdb { args = /etc/dovecot/dovecot-pgsql.conf driver = sql } plugin { expire = Trash expire2 = Trash/* expire3 = Junk expire_dict = proxy::expire metadata_dict = proxy::metadata sieve = /var/mail/%d/%n/dovecot.sieve sieve_before = /var/lib/dovecot/sieve/ sieve_dir = /var/mail/%d/%n/maildirfolder sieve_max_actions = 32 sieve_max_redirects = 4 sieve_max_script_size = 1M } protocols = imap sieve service auth-worker { client_limit = 4096 process_limit = 2048 process_min_avail = 10 service_count = 0 unix_listener auth-worker { mode = 0600 } vsz_limit = 1 G } service auth { client_limit = 10240 process_min_avail = 1 service_count = 0 unix_listener auth-client { group = mail mode = 0660 user = mail } unix_listener auth-master { group = mail mode = 0664 user = mail } user = dovecot vsz_limit = 1 G } service dict { unix_listener dict { group = mail mode = 0660 user = mail } } service imap-login { chroot = login client_limit = 4096 process_limit = 2048 process_min_avail = 10 service_count = 0 user = dovecot vsz_limit = 1 G } service imap { client_limit = 4096 process_limit = 2048 process_min_avail = 10 service_count = 0 vsz_limit = 1 G } service managesieve-login { chroot = login client_limit = 4096 executable = /usr/lib/dovecot/managesieve-login inet_listener sieve { port = 4190 } process_limit = 2048 process_min_avail = 10 service_count = 0 user = dovecot vsz_limit = 1 G } service managesieve { client_limit = 4096 executable = /usr/lib/dovecot/managesieve process_limit = 2048 process_min_avail = 10 service_count = 0 vsz_limit = 1 G } ssl_cert = </etc/ssl/dovecot/example.ru.ca.crt ssl_cipher_list = ALL:!LOW:!SSLv2 ssl_key = </etc/ssl/dovecot/example.ru.key ssl_parameters_regenerate = 1 hours userdb { args = /etc/dovecot/dovecot-pgsql.conf driver = sql } valid_chroot_dirs = /var/mail/ verbose_proctitle = yes protocol imap { mail_max_userip_connections = 1024 mail_plugins = expire virtual metadata imap_metadata imap_annotatemore } protocol lda { hostname = mail.example.ru info_log_path = /var/log/dovecot/dovecot-local-deliver.log log_path = /var/log/dovecot/dovecot-local-deliver-errors.log mail_plugins = expire sieve virtual postmaster_address = admin(a)example.ru } protocol sieve { managesieve_max_line_length = 65536 } -- Sidlyarenko Sergey https://github.com/lefoyer

1 0

[Dovecot] Ambiguous behavior with prefetch database?
by Axel Luttgens 13 Jul '13

13 Jul '13

Hello, Let's say dovecot.conf contains: mail_uid = dovemailer mail_gid = dovemailer mail_home = /some/path/%n mail_location = mbox:~/mboxes:INBOX=~/mboxes/inbox and that the password database query is of the form: password_query = \ SELECT \ passwd AS password, \ nickname AS user, \ mail_home AS userdb_home, \ mail_location AS userdb_mail, \ WHERE \ ... The database initially comes with NULL for both mail_home and mail_location, the goal being to be able to progressively replace legacy settings. With the above, one gets such entries in the logs upon a pop or imap connection: auth-worker(11262): Debug: auth(u12345678,127.0.0.1): username changed u12345678 -> john.doe auth: Debug: auth(u12345678,127.0.0.1,<dsNsasbgRQB/AAAB>): username changed u12345678 -> john.doe [...] auth: Debug: prefetch(john.doe,127.0.0.1,<dsNsasbgRQB/AAAB>): passdb didn't return userdb entries, trying the next userdb and, of course, the userdb_query fails since it isn't supposed to be invoked under such circumstances. Of course, the userdb_query could be adapted so as to handle pop/imap connections in addition to say, lmtp or doveadm connections, but this would anyway raise the question: why bother with a prefetch database setup? In fact, it seems that the problem comes from the fact that the password_query returns NULL values (i.e. "do not override dovecot.conf settings") for all userdb_xxx settings even if, technically speaking, it returns such columns. A slight yet somewhat silly modification of the password_query, such as this one: password_query = \ SELECT \ passwd AS password, \ nickname AS user, \ 'dovemailer' AS userdb_uid, \ mail_home AS userdb_home, \ mail_location AS userdb_mail, \ WHERE \ ... indeed seems to bring back all the expected behavior: now, the "passdb returns userdb entries" and, for example, the config's mail_home expands to the expected value /some/path/john.doe. Could it be that the case "userdb_xxx columns returned, even if all with NULL values" has been somehow overlooked in the code? Or am I erring with my interpetation of all those matters? TIA, Axel

2 5

[Dovecot] A sqlite-based quota dict
by Axel Luttgens 12 Jul '13

12 Jul '13

Hello, While experimenting with the sqlite backend, I noticed a big vacuum wrt its use for a quota dict. This is thus an opportunity to share a solution I managed to devise after some trials and errors and a (very quick and unscientific) look at the code. And also the opportunity to ask the community to check for possible flaws. Yes, nothing comes for free... ;-) TIA, Axel This is the SQL for creating the database or for adding needed table/trigger to an existing database (with many comments and few "active" lines): CREATE TABLE quota ( -- We will assume that, in the case of a sqlite DB (and probably a pgsql DB -- as well), Dovecot will *always* act along these lines: -- In case of a "row creation": -- INSERT INTO quota (subject, byte_count) -- VALUES (<some id>, <byte count>); -- INSERT INTO quota (subject, message_count) -- VALUES (<some id>, <msg count>); -- In case of a recalculation: -- UPDATE quota -- SET byte_count = byte_count + <byte count diff>, -- message_count = message_count + <msg count diff> -- WHERE subject = <some id>; -- In case of a row deletion: -- DELETE FROM quota -- WHERE subject = <some id>; -- For example, a "doveadm quota recalc" may first delete the relevant row -- if it exists, then (re-)create it. -- Clearly, the "row creation" case is a bit problematic, hence the need for -- a trigger. -- An id for the entity subjected to a quota (a user/mailbox, a domain...). subject TEXT PRIMARY KEY NOT NULL, -- The entity's size, expressed as a storage space use and as a message -- count. -- Note the NULL defaults: they allow to simplify the trigger's logics. byte_count INTEGER DEFAULT NULL, message_count INTEGER DEFAULT NULL ); CREATE TRIGGER quota_insert BEFORE INSERT ON quota FOR EACH ROW BEGIN -- If there's a row to update, that's because the first INSERT of the "row -- creation" has been performed. -- (this UPDATE could probably be simplified if the insertion order, -- byte_count then message_count, was guaranteed; anyway, since the "row -- creation" operation shouldn't be very frequent, we may afford a slight -- inefficiency). UPDATE quota SET byte_count = CASE WHEN NEW.byte_count ISNULL THEN byte_count ELSE NEW.byte_count END, message_count = CASE WHEN NEW.message_count ISNULL THEN message_count ELSE NEW.message_count END WHERE subject = NEW.subject; -- In which case we may ignore that second (current) INSERT, since the -- previously inserted row has just been updated with the value coming -- from the current INSERT statement. SELECT raise(IGNORE) WHERE EXISTS (SELECT * FROM quota WHERE subject = NEW.subject); END; The corresponding dict configuration being thus supposed to be similar to this one: connect = /path/to/database map { pattern = priv/quota/storage table = quota username_field = subject value_field = byte_count } map { pattern = priv/quota/messages table = quota username_field = subject value_field = message_count }

1 0

[Dovecot] Dovecot Virtual Folders... could these be managed by a/the Client?
by Charles Marcus 12 Jul '13

12 Jul '13

Hi all/Timo, I was thinking about Thunderbirds ability to create Virtual folders allowing you to have many different views of your messages... The downside though, is you only see these in Thunderbird. I know that dovecot supports server side virtual folders: http://wiki2.dovecot.org/Plugins/Virtual But I'm wondering about the possibility to manage these from the client side... For example, would it be possible to create an extension in Thunderbird that allowed the user to manage these (create, edit the filters for, delete, rename, etc)? Thanks, -- Best regards, Charles

2 1

[Dovecot] (no subject)
by Gab IIpop 12 Jul '13

12 Jul '13

>From the documentation, virtual users seem like a good idea if you plan on having a lot of users. Although I'm wondering about the following: What other benefits/consequences are there to using virtual over system users and vice versa? Will virtual users have the same protection as system users (system users would use linux permissions, which is pretty secure)? How easy will it be to switch from using system users to virtual users or vice versa?

2 1

[Dovecot] avoid log message when using nagios check
by lluis 12 Jul '13

12 Jul '13

Hello, I'm using a nagios check to monitor dovecot status, since dovecot v2 I see those syslog messages on every nagios check: pop3-login: Aborted login (no auth attempts in 0 secs) imap-login: Aborted login (no auth attempts in 0 secs) I tried to avoid those messages sending a logout string: check_imap -H localhost -e 'OK' -s 'a logout' check_pop -H localhost -e 'OK' -s 'quit' but now I get imap-login: Disconnected (no auth attempts in 0 secs) pop3-login: Disconnected (no auth attempts in 0 secs) what can I do to avoid a log message on every nagios check? thanks! Lluís

6 12

[Dovecot] getting quota error when accessing private namespace
by Andreas Oster 12 Jul '13

12 Jul '13

Hi all, I have run into a problem which I cannot find a solution for. I have created an additional private namespace with the following commands in dovecot.conf : namespace { disabled = no hidden = no ignore_on_failure = no inbox = no list = children location = maildir:/var/vmail/archives/%Ln/Maildir mailbox "archived mails" { auto = subscribe driver = special_use = \Archive } prefix = Archives/ separator = / subscriptions = yes type = private } plugin { quota = maildir:User quota:ns= quota2 = maildir:Archives quota:ns=Archives/ quota2_rule = *:storage=5G quota_rule = *:storage=1G quota_rule2 = Trash:storage=+200M } I can access the new namespace without any problems but every time a folder in this namespace is accessed, I get the following error messages in mail.err log: dovecot: imap(testuser): Error: quota: Unknown namespace: Archives/ dovecot: last message repeated 49 times Quota seems to work, though I have the feeling, that it only will be updated when closing and reopening the mail client, but this can also be a client issue. Quota for the INBOX is either taken from LDAP or, if there is no value defined in LDAP, will be assigned a quota of 1G The Archives/ namespace has a static quota of 5G for every user. Does anyone have idea how to get rid of these error messages ? Thank you for your kind help Andreas

2 5

[Dovecot] Multiple Folders Continually Auto-Created
by Cassidy Larson 12 Jul '13

12 Jul '13

I've had reports of a number of clients running Outlook 2011 on Mac where they have quite a few folders with the same name appended by multiple "1"s. So far I've only narrowed it down to Outlook 2011 on Mac. We've been in the process of migrating to sdbox on a new server from maildir using dsync backup. Example folder structure: INBOX INBOX 1 INBOX 1 1 INBOX 1 1 1 INBOX 1 1 1 1 INBOX 1 1 1 1 1 INBOX 1 1 1 1 1 1 INBOX 1 1 1 1 1 1 1 INBOX 1 1 1 1 1 1 1 1 INBOX 1 1 1 1 1 1 1 1 1 INBOX 1 1 1 1 1 1 1 1 1 1 Junk Junk 1 Junk 1 1 Junk 1 1 1 Junk 1 1 1 1 Junk 1 1 1 1 1 Junk 1 1 1 1 1 1 Junk 1 1 1 1 1 1 1 Junk 1 1 1 1 1 1 1 1 and so on for "Sent Messages", etc. Seems that the the default folders for these clients are getting created over and over again, each time with a new "1" at the end. Anybody else see this? I'm digging for a client I can troubleshoot with and reproduce with me watching. Thanks, -c

2 2

[Dovecot] SSL cert problem
by Peter von Nostrand 12 Jul '13

12 Jul '13

Hi, I'm running a new dovecot 2.0.9 under Centos 6.4. I'm having an issue with SSL certificate not being accepted by the email client. I have my own CA and I have generated certificates for web usage without a problem. For imaps and pop3s what I did was generate a certificate for the hostname of my dovecot server and then cat that cert with the intermediate and root CA certificates. No matter what thunderbird still complains with Unknown identity. # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.2.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-userdb auth_username_format = %n disable_plaintext_auth = no log_path = /var/log/dovecot.log mail_fsync = never mail_home = /vmail/%u mail_location = maildir:~/Maildir mail_plugins = quota managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl passdb { driver = pam } plugin { quota = maildir:User quota quota_rule = *:storage=1G quota_rule2 = Trash:storage=+100M sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 lmtp sieve quota_full_tempfail = yes service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } service lmtp { unix_listener lmtp { user = vmail } } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } ssl_cert = </etc/pki/dovecot/certs/mail.pem ssl_key = </etc/pki/dovecot/private/mail.example.com.key userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_ssl = yes protocol lmtp { mail_fsync = optimized mail_plugins = sieve quota } protocol lda { mail_plugins = sieve quota } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota This is the log: Jul 11 15:38:45 imap-login: Warning: SSL: where=0x10, ret=1: before/accept initialization [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2001, ret=1: before/accept initialization [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv2/v3 read client hello A [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read client hello A [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write server hello A [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write certificate A [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write key exchange A [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write server done A [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 flush data [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read client key exchange A [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read finished A [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write session ticket A [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write change cipher spec A [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write finished A [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 flush data [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x20, ret=1: SSL negotiation finished successfully [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL alert: where=0x4004, ret=558: fatal certificate unknown [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL alert: where=0x4008, ret=256: warning close notify [192.168.0.1] Jul 11 15:38:45 imap-login: Info: Disconnected (no auth attempts): rip=192.168.0.1, lip=192.168.1.1, TLS: SSL_read() failed: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown: SSL alert number 46 Thx in advance -- Peter

4 3

[Dovecot] dsync/imapc migration question
by Gedalya 12 Jul '13

12 Jul '13

Doing an imapc migration with the pop3 migration plugin, using doveadm backup -R. I occasionally get the following output: dsync(user(a)domain.tld): Error: imapc(mail01.domain.tld:143): Server disconnected unexpectedly dsync(user(a)domain.tld): Error: imapc(mail01.domain.tld:143): Server disconnected unexpectedly dsync(user(a)domain.tld): Error: imapc(mail01.domain.tld:143): Server disconnected unexpectedly dsync(user(a)domain.tld): Warning: I/O leak: 0xb7648650 (line 1229, fd 10) dsync(user(a)domain.tld): Warning: I/O leak: 0xb7648650 (line 1229, fd 11) dsync(user(a)domain.tld): Warning: Timeout leak: 0xb76488b0 (line 1316) dsync(user(a)domain.tld): Warning: Timeout leak: 0xb76488b0 (line 1316) The source server is really crappy, no need to look at the dovecot side for causes. My question is: is it possible that the migration did complete successfully? Dovecot does seem to continue and it's kind of vague on what went wrong, and did it re-try. This operation can take several hours on large mailboxes so this question is really meaningful in my case. (I'd try with -D but it's really hard to reproduce this on demand). Thanks Gedalya

2 3

Re: [Dovecot] SSL cert problem
by Reindl Harald 11 Jul '13

11 Jul '13

Am 11.07.2013 21:51, schrieb Peter von Nostrand: > On Thu, Jul 11, 2013 at 4:23 PM, Reindl Harald > because thunderbird does not trust your own CA by default > without import it there by hand - you can not expect to > cat your CA to the cert for the server and that is enough > to get truested by the client - if so everybody would do > this to make his DNS forgery successful > > Sorry, I should specify that I already have my root CA certificates loaded in thunderbird much more important you should reply this to the list and not off-list, fixed by me, no need to send it again

1 0

[Dovecot] Pigeonhole vacation auto-response not respecting "days" parameter
by Thomas Harold 11 Jul '13

11 Jul '13

This might be a PEBKAC on my end, but in our old server, "vacation" responses would only be sent back to an origin address once per day because we had ":days 1" in the rule. On the new server, even though we have ":days 1", pigeonhole is sending responses to every message, resulting in multiple vacation responses each day back to each origin address. The following was generated by Roundcube's web interface, it looks to be correct. ----------------------- require ["vacation"]; # rule:[vacation-reply] if allof (not header :contains "Subject" "[spam]", not exists "List-Unsubscribe") { vacation :days 1 :addresses ["email1(a)example.com","email2(a)example.com"] :subject "Out of office reply" text: I am currently out of the office July 11th and 12th, returning on July 15th. During this time I will have no access to email. Thank you. User So-And-So . ; } ----------------------- Interestingly, if I look at .dovecot.sieve.log, I see error messages like (except that the vacation responses are, in reality, being sent): error: msgid=<20130711134816.35B9A40335(a)mail.example.com>: failed to send vacation response to <originemail(a)example.com> (refer to server log for more information). And in the maillog: Jul 11 09:48:17 servername sendmail[28244]: r6BDmHem028244: SYSERR(UID1132): Who are you? Jul 11 09:48:17 servername sendmail[28244]: r6BDmHem028244: Authentication-Warning: servername .example.com: Unknown UID 1132 set sender to <> using -f Jul 11 09:48:17 servername sendmail[28244]: r6BDmHem028244: from=<>, size=725, class=-60, nrcpts=1, msgid=<dovecot-sieve-1373550497-202242-0(a)servername.example.com>, relay=Unknown UID 1132@localhost My guess at this point is that I've failed to configure pigeonhole and/or postfix's copy of the sendmail command properly so that it can create the "who I have send mail to recently" file.

1 0

[Dovecot] Fault in dovecot 2.1.17
by Adrian Stoica 11 Jul '13

11 Jul '13

The system hang, linux from scratch. I have changed the live kernel from linux-2.6.35.4 to linux-2.6.32.61 , to see if the fault still occurs. The kernel 2.6.35.4 was working fine with all version up to dovecot 2.1.12 , from which i made update to 2.1.17. dovecot -n # 2.1.17: /usr/dovecot21/etc/dovecot/dovecot.conf # OS: Linux 2.6.32.61 i686 auth_cache_negative_ttl = 1 secs auth_cache_size = 2 M auth_failure_delay = 4 secs auth_mechanisms = plain login digest-md5 cram-md5 auth_worker_max_count = 100 base_dir = /var/run/dovecot/ default_client_limit = 4096 default_internal_user = vmail default_login_user = nobody default_process_limit = 256 deliver_log_format = mail delivery from=%f subject=%s msgid=%m: %$ dict { acl = mysql:/usr/dovecot21/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no first_valid_uid = 1 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = * mail_location = maildir:~/Maildir mail_plugins = " quota acl trash notify mail_log" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { hidden = no list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / subscriptions = yes type = private } passdb { args = /usr/dovecot21/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_defaults_from_inbox = yes acl_shared_dict = proxy::acl autocreate = Trash autocreate2 = Drafts autocreate3 = Sent autosubscribe = Trash autosubscribe2 = Drafts autosubscribe3 = INBOX autosubscribe4 = Sent mail_log_events = delete mailbox_delete mailbox_rename mail_log_fields = box subject from msgid size quota = maildir:User quota quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=95%% quota-warning 90 %u quota_warning3 = storage=85%% quota-warning 85 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_max_redirects = 10 trash = /usr/dovecot21/etc/dovecot/dovecot-trash.conf.ext } postmaster_address = postmaster(a)dacris.net protocols = imap quota_full_tempfail = yes rejection_subject = Rejected: %s: %r service auth { unix_listener auth-client { mode = 0666 user = vmail } unix_listener auth-userdb { mode = 0666 user = vmail } } service dict { unix_listener dict { user = vmail } } service imap-login { process_min_avail = 4 } service imap-postlogin { executable = script-login /bin/imap.sh unix_listener imap-postlogin { mode = 01232 } } service imap { executable = imap imap-postlogin process_limit = 1024 vsz_limit = 1 G } service quota-warning { executable = script /bin/quota_warning.sh unix_listener quota-warning { user = vmail } user = vmail } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /usr/dovecot21/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = " quota acl trash notify mail_log sieve autocreate" } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 20 mail_plugins = " quota acl trash notify mail_log imap_quota imap_acl" } Log from kernel: Jul 11 10:14:01 mail kernel: BUG: Bad page map in process imap-login pte:c926b025 pmd:4597c067 Jul 11 10:14:01 mail kernel: page:c2f2ed60 count:1 mapcount:-1 mapping:ec5a03a0 index:0x4ab Jul 11 10:14:01 mail kernel: page flags: 0x80020068(uptodate|lru|active|mappedtodisk) Jul 11 10:14:01 mail kernel: addr:b73f4000 vm_flags:08000075 anon_vma:(null) mapping:e289ec88 index:7b Jul 11 10:14:01 mail kernel: vma->vm_ops->fault: filemap_fault+0x0/0x2fa Jul 11 10:14:01 mail kernel: vma->vm_file->f_op->mmap: ext4_file_mmap+0x0/0x39 Jul 11 10:14:01 mail kernel: Pid: 22889, comm: imap-login Not tainted 2.6.35.4 #2 Jul 11 10:14:01 mail kernel: Call Trace: Jul 11 10:14:01 mail kernel: [<c1078901>] ? print_bad_pte+0x13a/0x14b Jul 11 10:14:01 mail kernel: [<c107b206>] ? unmap_vmas+0x33b/0x62d Jul 11 10:14:01 mail kernel: [<c10272cc>] ? try_to_wake_up+0x206/0x210 Jul 11 10:14:01 mail kernel: [<c107ccc7>] ? exit_mmap+0x8c/0x107 Jul 11 10:14:01 mail kernel: [<c102976f>] ? mmput+0x1c/0x8c Jul 11 10:14:01 mail kernel: [<c102c850>] ? exit_mm+0xdc/0xe4 Jul 11 10:14:01 mail kernel: [<c103da3c>] ? hrtimer_try_to_cancel+0x55/0x5b Jul 11 10:14:01 mail kernel: [<c104dd0d>] ? acct_collect+0x77/0x126 Jul 11 10:14:01 mail kernel: [<c102dccb>] ? do_exit+0x1c8/0x5bc Jul 11 10:14:01 mail kernel: [<c109fd4d>] ? mntput_no_expire+0x15/0xad Jul 11 10:14:01 mail kernel: [<c102e119>] ? do_group_exit+0x5a/0x7d Jul 11 10:14:01 mail kernel: [<c102e14d>] ? sys_exit_group+0x11/0x14 Jul 11 10:14:01 mail kernel: [<c100254c>] ? sysenter_do_call+0x12/0x22 Jul 11 10:14:01 mail kernel: Disabling lock debugging due to kernel taint Jul 11 10:14:01 mail kernel: BUG: Bad page state in process imap-login pfn:c926b Jul 11 10:14:01 mail kernel: page:c2f2ed60 count:0 mapcount:-1 mapping:ec5a03a0 index:0x4ab Jul 11 10:14:01 mail kernel: page flags: 0x80020008(uptodate|mappedtodisk) Jul 11 10:14:01 mail kernel: Pid: 22889, comm: imap-login Tainted: G B 2.6.35.4 #2 Jul 11 10:14:01 mail kernel: Call Trace: Jul 11 10:14:01 mail kernel: [<c106c916>] ? bad_page+0x9c/0xae Jul 11 10:14:01 mail kernel: [<c106d4dc>] ? free_pages_prepare+0x55/0xc5 Jul 11 10:14:01 mail kernel: [<c106d5f0>] ? free_hot_cold_page+0x20/0xef Jul 11 10:14:01 mail kernel: [<c106d739>] ? __pagevec_free+0x1a/0x21 Jul 11 10:14:01 mail kernel: [<c106fb3a>] ? release_pages+0x165/0x16d Jul 11 10:14:01 mail kernel: [<c1083302>] ? free_pages_and_swap_cache+0x68/0x74 Jul 11 10:14:01 mail kernel: [<c107b251>] ? unmap_vmas+0x386/0x62d Jul 11 10:14:01 mail kernel: [<c10272cc>] ? try_to_wake_up+0x206/0x210 Jul 11 10:14:01 mail kernel: [<c107ccc7>] ? exit_mmap+0x8c/0x107 Jul 11 10:14:01 mail kernel: [<c102976f>] ? mmput+0x1c/0x8c Jul 11 10:14:01 mail kernel: [<c102c850>] ? exit_mm+0xdc/0xe4 Jul 11 10:14:01 mail kernel: [<c103da3c>] ? hrtimer_try_to_cancel+0x55/0x5b Jul 11 10:14:01 mail kernel: [<c104dd0d>] ? acct_collect+0x77/0x126 Jul 11 10:14:01 mail kernel: [<c102dccb>] ? do_exit+0x1c8/0x5bc Jul 11 10:14:01 mail kernel: [<c109fd4d>] ? mntput_no_expire+0x15/0xad Jul 11 10:14:01 mail kernel: [<c102e119>] ? do_group_exit+0x5a/0x7d Jul 11 10:14:01 mail kernel: [<c102e14d>] ? sys_exit_group+0x11/0x14 Jul 11 10:14:01 mail kernel: [<c100254c>] ? sysenter_do_call+0x12/0x22

3 2

[Dovecot] Dovecot 2.2.4 : Panic: file pop3-client.c: line 585 (client_default_destroy): assertion failed: (client->cmd == NULL)
by Ken A 10 Jul '13

10 Jul '13

This doesn't seem to affect clients, but I'm seeing an occasional pop3 error in the log over the last week. Any ideas what is causing this? Thanks, Ken > Jul 4 15:04:03 mail dovecot: POP3(user)x.x.x.x: Connection > closed top=0/0, retr=0/0, del=0/4582, size=246709805 > Jul 4 15:04:03 mail dovecot: POP3(user)x.x.x.x: Panic: file > pop3-client.c: line 585 (client_default_destroy): assertion failed: > (client->cmd == NULL) > Jul 4 15:04:03 mail dovecot: POP3(user)x.x.x.x: Error: Raw > backtrace: /usr/lib/dovecot/libdovecot.so.0() [0x31b4c6074a] -> > /usr/lib/dovecot/libdovecot.so.0() [0x31b4c60796] -> > /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x31b4c202df] -> > dovecot/pop3() [0x404df9] -> dovecot/pop3(client_handle_input+0xd4) > [0x4051b4] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) > [0x31b4c6f6d6] -> > /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) > [0x31b4c70737] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) > [0x31b4c6f678] -> > /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) > [0x31b4c24fa3] -> dovecot/pop3(main+0x257) [0x4043d7] -> > /lib64/libc.so.6(__libc_start_main+0xfd) [0x3a08e1ecdd] -> > dovecot/pop3() [0x403f29] > Jul 4 15:04:04 mail dovecot: POP3(user)x.x.x.x: Fatal: master: > service(pop3): child 9080 killed with signal 6 (core dumped) -- Ken Anderson Pacific Internet - http://www.pacific.net

2 2

[Dovecot] How to manipulate attachments with LDA?
by Piotr Szafarczyk - NetExpert 10 Jul '13

10 Jul '13

Hi All, I want to plug in a tool that will convert attachments somewhere into a mail delivery process (postfix->dovecot). I think deliver would be a good place to do it. Does it make sense? Could you direct me where I could read about how to do it please? Piotr Szafarczyk

2 4

[Dovecot] Crashes with 2.2.4 setup that worked perfectly with 2.2.2 (.2.3 also crashes)
by Trever L. Adams 10 Jul '13

10 Jul '13

I am not sure how to get the symbols necessary, however the following is the backtrace (this is Fedora 19 latest everything): Jul 8 03:23:02 MX dovecot: auth: Fatal: block_alloc(2147483648): Out of memory Jul 8 03:23:02 MX dovecot: auth: Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x5f437) [0x7f97a952f437] -> /usr/lib64/dovecot/libdovecot.so.0(+0x5f4fe) [0x7f97a952f4fe] -> /usr/lib64/dovecot/libdovecot.so.0(i_error+0) [0x7f97a94f070f] -> /usr/lib64/dovecot/libdovecot.so.0(+0x72ee8) [0x7f97a9542ee8] -> /usr/lib64/dovecot/libdovecot.so.0(+0x72f1f) [0x7f97a9542f1f] -> /usr/lib64/dovecot/libdovecot.so.0(sasl_client_new+0x31) [0x7f97a9526ac1] -> /lib64/libldap-2.4.so.2(ldap_int_sasl_open+0x5c) [0x7f97a62f058c] -> /lib64/libldap-2.4.so.2(ldap_int_sasl_bind+0x5c9) [0x7f97a62f0cd9] -> /lib64/libldap-2.4.so.2(ldap_sasl_interactive_bind+0x96) [0x7f97a62f3e46] -> /lib64/libldap-2.4.so.2(ldap_sasl_interactive_bind_s+0xe1) [0x7f97a62f4041] -> /usr/lib64/dovecot/auth/libauthdb_ldap.so(db_ldap_connect+0x146) [0x7f97a652f286] -> dovecot/auth(userdb_init+0x1a) [0x7f97a99e09ea] -> dovecot/auth(auths_init+0xc9) [0x7f97a99c8e29] -> dovecot/auth(main+0x335) [0x7f97a99c8225] -> /lib64/libc.so.6(__libc_start_main+0xf5) [0x7f97a8ae8b75] -> dovecot/auth(+0xe43d) [0x7f97a99c843d] Jul 8 03:23:02 MX dovecot: master: Error: service(auth): command startup failed, throttling for 60 secs Jul 8 03:23:02 MX dovecot: auth: Fatal: master: service(auth): child 9650 returned error 83 (Out of memory (service auth { vsz_limit=256 MB }, you may need to increase it)) Any help would be greatly appreciated. Thank you, Trever

4 10

[Dovecot] Have an issue with catch-all - Dovecot-lda andPostfix
by Joakim Ohlsson 10 Jul '13

10 Jul '13

Hi, I run dovecot version 2.1.7 and postfix 2.9.6. I'm using dovecot-lda as local delivery. I use virtual users and need to use catch-all for some of my domains. My problem when using catch-all is that I got a separate email for each recipient. As an example: If I send mail to: test1(a)test.org, test2, test3(a)test.org, test4(a)test.org and have a catch-all which will send this mail to test(a)test.org. In this example I get 4 mails in my test(a)test.org inbox and in TO: field in the header I have all this four recipients: TO: test1(a)test.org, test2, test3(a)test.org, test4(a)test.org. In my dovecot log: 2013-07-10 13:49:25 lda(test(a)test.org): Debug: Destination address: test(a)test.org (source: user@hostname) 2013-07-10 13:49:25 lda(test(a)test.org: Info: msgid=<20130710114924.DBA3F9FA8D(a)mail2.test.org>: saved mail to INBOX 2013-07-10 13:49:25 lda(test(a)test.org): Info: msgid=<20130710114924.DBA3F9FA8D(a)mail2.test.org>: saved mail to INBOX 2013-07-10 13:49:25 lda(test(a)test.org): Info: msgid=<20130710114924.DBA3F9FA8D(a)mail2.test.org>: saved mail to INBOX 2013-07-10 13:49:25 lda(test(a)test.org): Info: msgid=<20130710114924.DBA3F9FA8D(a)mail2.test.org>: saved mail to INBOX My question is if it's possible to receive just one mail instead of four? If I send the mail via Spamassassin I'll just receive one mail to test(a)test.org with TO: test1(a)test.org, test2, test3(a)test.org, test4(a)test.org in the header. Thanks in advance Br Joakim # dovecot -n:

3 2

[Dovecot] DOVECOT 2.2.4 = 501 5.5.4 Unsupported options in LMTP
by Dmitry Dmitry 10 Jul '13

10 Jul '13

Hi, Sorry for my english. My problem: *************************************************** dspam-3.9.0 (dspam-3.10.2 all the time segmentation fault) dspam.conf .................... # DeliveryHost /var/run/dovecot/lmtp # same error as IP DeliveryHost 127.0.0.33 DeliveryPort 24 DeliveryProto LMTP .................... ServerHost 192.168.1.34 ServerPort 24 ServerQueueSize 32 ServerPID /var/run/dspam/dspam.pid *************************************************** dovecot-2.2.4 10-master.conf service lmtp { # Create inet listener only if you can't use the above UNIX socket inet_listener lmtp { # Avoid making LMTP visible for the entire internet address = 127.0.0.33 port = 24 } } quota is not included *************************************************** telnet to dspam LMTP # telnet 192.168.1.34 24 Trying 192.168.1.34... Connected to 192.168.1.34. Escape character is '^]'. 220 DSPAM LMTP 3.9.0 Ready LHLO test.com 250-localhost.localdomain 250-PIPELINING 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 SIZE MAIL FROM:<test(a)test.com> 250 2.1.0 OK RCPT TO:<user(a)test.com> 250 2.1.5 OK DATA 354 Enter mail, end with "." on a line by itself 1234567 qwertyu asdfghj . 530 5.3.0 <user(a)test.com> Fatal: 501 5.5.4 Unsupported options QUIT 221 2.0.0 OK Connection closed by foreign host. *************************************************** at the same time tcpflow LMTP # tcpflow -c -i any host 127.0.0.33 127.000.000.033.00024-127.000.000.001.41663: 220 mail Dovecot ready. 127.000.000.001.41663-127.000.000.033.00024: LHLO localhost 127.000.000.001.41663-127.000.000.033.00024: 127.000.000.033.00024-127.000.000.001.41663: 250-mail 250-8BITMIME 250-ENHANCEDSTATUSCODES 250 PIPELINING 127.000.000.001.41663-127.000.000.033.00024: MAIL FROM:<test(a)test.com> SIZE=25 127.000.000.001.41663-127.000.000.033.00024: 127.000.000.033.00024-127.000.000.001.41663: 501 5.5.4 Unsupported options 127.000.000.001.41663-127.000.000.033.00024: QUIT 127.000.000.001.41663-127.000.000.033.00024: 127.000.000.033.00024-127.000.000.001.41663: 221 2.0.0 OK ^Ctcpflow[5411]: terminating *************************************************** after telnet to dovecot LMTP # telnet 127.0.0.33 24 Trying 127.0.0.33... Connected to 127.0.0.33. Escape character is '^]'. 220 mail Dovecot ready. LHLO test.com 250-mail 250-8BITMIME 250-ENHANCEDSTATUSCODES 250 PIPELINING MAIL FROM:<test(a)test.com> 250 2.1.0 OK RCPT TO:<user(a)test.com> 250 2.1.5 OK DATA 354 OK 1234567 qwertyu asdfghj . 250 2.0.0 <user(a)test.com> WVKvFEln1VEuFQAAZU03Dg Saved QUIT 221 2.0.0 OK How can I persuade dovecot to deliver the mail? And one more: telnet to dovecot LMTP # telnet 127.0.0.33 24 .................... MAIL FROM: test(a)test.com 501 5.5.4 Invalid parameters MAIL FROM: <test(a)test.com> 501 5.5.4 Invalid parameters MAIL FROM:<test(a)test.com> 250 2.1.0 OK telnet to dspam LMTP # telnet 192.168.1.34 24 .................... MAIL FROM: test(a)test.com 250 2.1.0 OK .................... # telnet 192.168.1.34 24 .................... MAIL FROM: <test(a)test.com> 250 2.1.0 OK .................... Thank you! Regards, Dmitry

4 3

[Dovecot] Dovecot 2.2.4 - Fatal: master: service(imap): child 44562 killed with signal 11
by Marcin Mirosław 10 Jul '13

10 Jul '13

Hi all! I just upgraded dovecot from 2.2.2 to 2.2.4. Now I can't login to imap, proces imap throws segfault. Here is snip from dovecot.log: 2013-06-25T23:06:47.824321+02:00 meteor dovecot: imap-login: Login: user=<marcin(a)mejor.pl>, method=PLAIN, rip=2001:470:1f0b:1ab3:1bc:3b24:d355:b142, lip=2001:470:1f15:1b61::2, mpid=44562, TLS, session=<PaQ86ADgegAgAQRwHwsaswG8OyTTVbFC> 2013-06-25T23:06:47.827616+02:00 meteor dovecot: imap(marcin(a)mejor.pl) <PaQ86ADgegAgAQRwHwsaswG8OyTTVbFC>: Warning: autocreate plugin is deprecated, use mailbox { auto } setting instead 2013-06-25T23:06:47.830425+02:00 meteor dovecot: imap(marcin(a)mejor.pl) <PaQ86ADgegAgAQRwHwsaswG8OyTTVbFC>: Fatal: master: service(imap): child 44562 killed with signal 11 (core dumped) Here is bt created using gdb: Reading symbols from /usr/libexec/dovecot/imap...Reading symbols from /usr/lib64/debug/usr/libexec/dovecot/imap.debug...done. done. [New LWP 17730] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib64/libthread_db.so.1". Core was generated by `dovecot/imap'. Program terminated with signal 11, Segmentation fault. #0 imapc_storage_try_get_root_sep (storage=0x0, sep_r=0x3f7bad9bbd7 "") at imapc-storage.c:229 229 i_assert(storage->list != NULL); (gdb) Thread 1 (Thread 0x38656679700 (LWP 17730)): #0 imapc_storage_try_get_root_sep (storage=0x0, sep_r=0x3f7bad9bbd7 "") at imapc-storage.c:229 #1 0x00000386567b8b05 in imapc_list_get_hierarchy_sep (_list=<optimized out>) at imapc-list.c:196 #2 0x00000386567b8fff in imapc_list_get_fs_name (list=0xdba28f030, name=0x0) at imapc-list.c:282 #3 0x00000386567b9291 in imapc_list_get_path (_list=<optimized out>, name=0x0, type=MAILBOX_LIST_PATH_TYPE_MAILBOX, path_r=0x3f7bad9bcc8) at imapc-list.c:323 #4 0x00000386567db675 in mailbox_list_get_root_path (list=<optimized out>, type=<optimized out>, path_r=0x3f7bad9bcc8) at mailbox-list.c:1258 #5 0x0000038655c75d15 in quota_add_user_namespace (quota=0xdba288e80, ns=0xdba28eee0) at quota.c:704 #6 0x0000038655c7d0ea in quota_mailbox_list_created (list=0xdba292480) at quota-storage.c:590 #7 0x00000386567d64d2 in hook_mailbox_list_created (list=0xdba292480) at mail-storage-hooks.c:319 #8 0x00000386567da297 in mailbox_list_create (driver=<optimized out>, ns=0xdba28eee0, set=0x3f7bad9be20, flags=<optimized out>, list_r=0xdba28f228, error_r=0x3f7bad9be80) at mailbox-list.c:206 #9 0x00000386567b8f63 in imapc_list_get_fs (list=0xdba28f030) at imapc-list.c:265 #10 0x00000386567b927e in imapc_list_get_path (_list=<optimized out>, name=0x0, type=MAILBOX_LIST_PATH_TYPE_MAILBOX, path_r=0x3f7bad9bf18) at imapc-list.c:319 #11 0x00000386567db675 in mailbox_list_get_root_path (list=<optimized out>, type=<optimized out>, path_r=0x3f7bad9bf18) at mailbox-list.c:1258 #12 0x0000038655c75d15 in quota_add_user_namespace (quota=0xdba288e80, ns=0xdba28eee0) at quota.c:704 #13 0x0000038655c7d0ea in quota_mailbox_list_created (list=0xdba28f030) at quota-storage.c:590 #14 0x00000386567d64d2 in hook_mailbox_list_created (list=0xdba28f030) at mail-storage-hooks.c:319 #15 0x00000386567da297 in mailbox_list_create (driver=<optimized out>, ns=0xdba28eee0, set=0x3f7bad9c090, flags=<optimized out>, list_r=0x3f7bad9c0e8, error_r=0x3f7bad9c1a0) at mailbox-list.c:206 #16 0x00000386567d15c1 in mail_storage_create_full (ns=0xdba28eee0, driver=<optimized out>, data=<optimized out>, flags=(unknown: 0), storage_r=0x3f7bad9c150, error_r=0x3f7bad9c1a0) at mail-storage.c:356 #17 0x00000386567d181c in mail_storage_create (ns=<optimized out>, driver=<optimized out>, flags=<optimized out>, error_r=<optimized out>) at mail-storage.c:407 #18 0x00000386567c9b25 in namespace_add (user=0xdba283e90, ns_set=<optimized out>, unexpanded_ns_set=0xdba284668, mail_set=0xdba284f98, ns_p=0xdba28c5b0, error_r=0x3f7bad9c300) at mail-namespace.c:170 #19 0x00000386567caba7 in mail_namespaces_init (user=0xdba283e90, error_r=0x3f7bad9c300) at mail-namespace.c:344 #20 0x00000386567e1acf in mail_storage_service_init_post (error_r=0x3f7bad9c300, mail_user_r=0x3f7bad9c3d0, priv=0x3f7bad9c2d0, user=0xdba272c38, ctx=<optimized out>) at mail-storage-service.c:653 #21 mail_storage_service_next (ctx=<optimized out>, user=0xdba272c38, mail_user_r=0x3f7bad9c3d0) at mail-storage-service.c:1158 #22 0x00000386567e1e35 in mail_storage_service_lookup_next (ctx=0xdba26e4b0, input=<optimized out>, user_r=0x3f7bad9c3c8, mail_user_r=0x3f7bad9c3d0, error_r=0x3f7bad9c430) at mail-storage-service.c:1193 #23 0x0000000db6f824e9 in client_create_from_input (input=0x3f7bad9c440, login_client=0xdba270660, fd_in=12, fd_out=12, input_buf=0x3f7bad9c4b0, error_r=<optimized out>) at main.c:204 #24 0x0000000db6f827f7 in login_client_connected (client=0xdba270660, username=<optimized out>, extra_fields=<optimized out>) at main.c:277 #25 0x00000386566a97e6 in master_login_auth_finish (client=0xdba270660, auth_args=<optimized out>) at master-login.c:209 #26 0x00000386566a9b45 in master_login_auth_callback (auth_args=0xdba264ee8, errormsg=0x0, context=<optimized out>) at master-login.c:377 #27 0x00000386566aa558 in master_login_auth_input_user (args=<optimized out>, auth=<optimized out>) at master-login-auth.c:243 #28 master_login_auth_input (auth=0xdba26fa10) at master-login-auth.c:363 #29 0x0000038656704cf6 in io_loop_call_io (io=0xdba2709f0) at ioloop.c:387 #30 0x0000038656705f0f in io_loop_handler_run (ioloop=<optimized out>) at ioloop-epoll.c:215 #31 0x00000386567046f0 in io_loop_run (ioloop=0xdba26d2b0) at ioloop.c:406 #32 0x00000386566ac017 in master_service_run (service=0xdba26d140, callback=<optimized out>) at master-service.c:560 #33 0x0000000db6f82ebc in main (argc=1, argv=0xdba26cf20) at main.c:400 (gdb) quit doveconf -n: # 2.2.4: /etc/dovecot/dovecot.conf # OS: Linux 3.9.6-hardened x86_64 Gentoo Base System release 2.2 auth_cache_size = 1 k auth_mechanisms = login digest-md5 cram-md5 plain deliver_log_format = msgid=%m: from=%f: phys=%p: virt=%w %$ dict { quota = pgsql:/etc/dovecot/dovecot-dict-sql.conf.ext } first_valid_uid = 8 last_valid_uid = 8 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_attachment_dir = /dane/domeny/zalaczniki mail_attachment_min_size = 10000 k mail_cache_min_mail_count = 20 mail_gid = mail mail_log_prefix = "%s(%u) <%{session}>: " mail_plugins = autocreate quota notify mail_log stats zlib mail_privileged_group = mail mail_uid = mail maildir_stat_dirs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mdbox_preallocate_space = yes mdbox_rotate_interval = 60 days mdbox_rotate_size = 50 M namespace inbox { inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = . subscriptions = yes } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { autocreate = Trash autocreate2 = Spam autocreate3 = Sent autocreate4 = Drafts autosubscribe = Trash autosubscribe2 = Spam autosubscribe3 = Sent autosubscribe4 = Drafts quota = dict:User quota::proxy::quota sieve = ~/.dovecot.sieve sieve_dir = ~/sieve stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 1M stats_refresh = 30 s stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours zlib_save = gz } postmaster_address = postmaster(a)mejor.pl protocols = imap pop3 sieve service auth { unix_listener auth-userdb { group = mail mode = 0660 user = root } } service dict { unix_listener dict { user = mail } } service stats { fifo_listener stats-mail { mode = 0600 user = mail } } ssl_cert = </etc/ssl/gwiazdka.mejor.pl.pem ssl_key = </etc/ssl/gwiazdka.mejor.pl.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol lda { mail_plugins = autocreate quota notify mail_log stats zlib sieve } protocol imap { mail_max_userip_connections = 25 mail_plugins = autocreate quota notify mail_log stats zlib imap_quota imap_stats imap_zlib } I'm also using namespaces and imapc defined in database (as settings per user). Thanks, Marcin

3 6

[Dovecot] Dovecot SLOW in imaptest without any apparent reason
by FABIO FERRARI 10 Jul '13

10 Jul '13

Hello, I'm migrating a mail server from a centos 5 cluster architecture to a centos 6 cluster architecture. The new cluster involves faster machines then the old cluster, and a virtual machine. I use dovecot-2.0.9-5.el6.x86_64, while the old cluster uses dovecot-2.0.1-1_118.el5. Tha mail server uses mysql for the users database, and a local ldap for authentication. The storage is also much faster in the new cluster: OLD SERVER: date; dd if=/dev/zero of=/cl/prova.bin bs=102400 count=10240; sync; date Wed Jun 26 15:43:53 CEST 2013 10240+0 records in 10240+0 records out 1048576000 bytes (1.0 GB) copied, 30.0202 seconds, 34.9 MB/s Wed Jun 26 15:44:28 CEST 2013 --> 1GB / 35 secs = about 29.25 MB/sec NEW SERVER: date; dd if=/dev/zero of=/cl/prova.bin bs=102400 count=102400; sync; date mar 25 giu 2013, 15.46.36, CEST 102400+0 records in 102400+0 records out 10485760000 bytes (10 GB) copied, 62,5143 s, 168 MB/s mar 25 giu 2013, 15.48.33, CEST [root@eta ~]# ---> 10GB / 117secs = about 85.47MB/sec An 'ls -l' in the user direcotry is also much faster, when the ldap/sssd cache is populated: OLD SERVER: real 0m8.540s user 0m1.229s sys 0m0.699s NEW SERER: real 0m3.938s user 0m0.250s sys 0m0.151s But my imaptest is much slower: ./imaptest user=XXXXXXX pass=XXXXXXX secs=120 seed=123 mbox=./dovecot-crlf OLD SERVER: Totals: Logi List Stat Sele Fetc Fet2 Stor Dele Expu Appe Logo 100% 50% 50% 100% 100% 100% 50% 100% 100% 100% 100% 30% 5% 1122 559 547 1121 1121 1568 136 900 1121 1121 2244 NEW SERVER Totals: Logi List Stat Sele Fetc Fet2 Stor Dele Expu Appe Logo 100% 50% 50% 100% 100% 100% 50% 100% 100% 100% 100% 30% 5% 390 210 185 389 389 589 49 320 389 389 780 The configuration is exactly the same in the 2 clusters, that is: ----------- # 2.0.1: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-348.3.1.el5 x86_64 Red Hat Enterprise Linux Server release 5.9 (Tikanga) xfs auth_cache_size = 1024 auth_cache_ttl = 21600 s auth_debug = yes auth_debug_passwords = yes auth_master_user_separator = * auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-userdb auth_verbose = yes base_dir = /var/run/dovecot/ disable_plaintext_auth = no hostname = mail.unimore.it info_log_path = /var/log/dovecot.log lda_mailbox_autocreate = yes log_path = /var/log/dovecot.log mail_debug = yes mail_location = maildir:/cl/mail/vhosts/sms.unimo.it/%Ln/Maildir mail_plugins = $mail_plugins quota mailbox_idle_check_interval = 60 s mbox_write_locks = fcntl namespace { inbox = yes location = prefix = INBOX. separator = . type = private } passdb { args = /usr/local/etc/dovecot.masterusers driver = passwd-file master = yes } passdb { args = dovecot driver = pam } plugin { quota = maildir:User quota quota_exceeded_message = Quota exceeded (mailbox is full) quota_rule = *:storage=200MB quota_rule2 = *:messages=100000 quota_rule3 = INBOX.Trash:storage=+100M quota_warning = storage=90%% quota-warning 90 %u quota_warning2 = storage=85%% quota-warning 85 %u quota_warning3 = messages=95%% quota-warning 95 %u quota_warning4 = messages=80%% quota-warning 80 %u setting_name = quota } postmaster_address = postmaster(a)unimore.it quota_full_tempfail = yes service anvil { client_limit = 199999 process_limit = 1 } service auth { client_limit = 21224 unix_listener auth-userdb { mode = 0600 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 } process_limit = 10000 } service imap { process_limit = 10000 } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 } } service pop3 { process_limit = 1024 } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { group = vmail user = vmail } user = dovecot } ssl_ca = </etc/pki/tls/certs/ca_unimore_tcs.pem ssl_cert = </etc/pki/tls/certs/mailposta1.pem ssl_key = </etc/pki/tls/certs/mailposta1.key userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_ssl = yes protocol lda { mail_plugins = $mail_plugins quota } protocol imap { mail_plugins = $mail_plugins } protocol pop3 { mail_plugins = $mail_plugins quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } ----------- Is anyone able to tell me what I have to check? thanks in advance Fabio Ferrari

2 1

[Dovecot] Strange Problems when deleting folders.
by Davide Bozzelli 10 Jul '13

10 Jul '13

Hi I'm experiencing a strange problem on my dovecot 2.0.21 setup. When i delete a folder "foo" it was correctly moved in the trash folder. If i try to delete from it the folder "foo" from the trash it gets renamed "foo1". If I try to dlete "foo1" it gets renamed foo11, and the operation could be continued figured out in an endless loop. This happens both from thunderbird and sogo (a webmail). Is it a known bug or a misconfiguration ? Thx in advance

2 1

[Dovecot] Migrating domain using IMAPc
by Breno Moreira 10 Jul '13

10 Jul '13

Hi list, I'm trying to do a domain migration using the imapc feature, but i'm having some problems and I really don't know what is happening. So if you guys could help me with a path to solve this, I will be glad. I'm using Dovecot 2.1.7 in a Debian Wheezy machine. The command I'm using is: dsync -Dv -o imapc_features=rfc822.size -o imapc_host=IP -o imapc_port=143 -o imapc_username='breno.moreira(a)mav.com.br' -o imapc_password='pass' -u breno.moreira(a)mav.com.br mirror imapc:/tmp/dsync-imapc and what I got with the logs is: doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib20_zlib_plugin.so doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm doveadm(root): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentio nal, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentiona l, so just ignore this message) doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_zlib_plugin.so doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_backend_rescan (this is usually intentional, so just ignore this message) doveadm(breno.moreira(a)mav.com.br): Debug: Added userdb setting: mail=sdbox:~/:ALT=/srv/dovehdodd/dovecot/mav.com.br/breno.moreira doveadm(breno.moreira(a)mav.com.br): Debug: Effective uid=5000, gid=5000, home=/srv/dovessdodd/dovecot/mav.com.br/breno.moreira doveadm(breno.moreira(a)mav.com.br): Debug: Namespace : type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=sdbox:~/:ALT=/srv/dovehdodd/dovecot/mav.com.br/breno.moreira doveadm(breno.moreira(a)mav.com.br): Debug: fs: root=/srv/dovessdodd/dovecot/ mav.com.br/breno.moreira, index=, control=, inbox=, alt=/srv/dovehdodd/dovecot/mav.com.br/breno.moreira dsync(breno.moreira(a)mav.com.br): Debug: Effective uid=5000, gid=5000, home=/srv/dovessdodd/dovecot/mav.com.br/breno.moreira dsync(breno.moreira(a)mav.com.br): Debug: Namespace : type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=imapc:/tmp/dsync-imapc dsync(breno.moreira(a)mav.com.br): Debug: imapc: root=/tmp/dsync-imapc, index=, control=, inbox=, alt= dsync(breno.moreira(a)mav.com.br): Debug: maildir++: root=/tmp/dsync-imapc, index=, control=, inbox=, alt= dsync(breno.moreira(a)mav.com.br): Debug: imapc(187.115.200.155:143): Looking up IP address dsync(breno.moreira(a)mav.com.br): Debug: imapc(187.115.200.155:143): Connecting to 187.115.200.155:143 dsync(breno.moreira(a)mav.com.br): Debug: imapc(187.115.200.155:143): Server capabilities: IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS AUTH=PLAIN AUTH=LOGIN dsync(breno.moreira(a)mav.com.br): Debug: imapc(187.115.200.155:143): Authenticating as breno.moreira(a)mav.com.br dsync(breno.moreira(a)mav.com.br): Debug: imapc(187.115.200.155:143): Server capabilities: IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT I DLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS dsync(breno.moreira(a)mav.com.br): Debug: imapc(187.115.200.155:143): Authenticated successfully dsync(breno.moreira(a)mav.com.br): Debug: Namespace INBOX.: Using permissions from /srv/dovessdodd/dovecot/mav.com.br/breno.moreira: mode=0700 gid=-1 dsync(breno.moreira(a)mav.com.br): Debug: Namespace INBOX.: Using permissions from /tmp/dsync-imapc: mode=0755 gid=-1 dsync(breno.moreira(a)mav.com.br): Error: Can't create mailbox INBOX: Empty mailbox name. dsync(breno.moreira(a)mav.com.br): Info: INBOX: only in dest (guid=c92f64f79f0d1ed01e6d5b314f04886c) dsync(breno.moreira(a)mav.com.br): Info: INBOX: only in source (guid=f4c6a715e8b1d551112d000042e5307d) dsync(breno.moreira(a)mav.com.br): Error: Mailbox INBOX changed its GUID (c92f64f79f0d1ed01e6d5b314f04886c -> f4c6a715e8b1d551112d000042e5307d) dsync(breno.moreira(a)mav.com.br): Error: msg iteration failed: Couldn't open mailbox c92f64f79f0d1ed01e6d5b314f04886c dsync(breno.moreira(a)mav.com.br): Error: Mailbox INBOX changed its GUID (c92f64f79f0d1ed01e6d5b314f04886c -> f4c6a715e8b1d551112d000042e5307d) dsync(breno.moreira(a)mav.com.br): Debug: imapc(187.115.200.155:143): Looking up IP address dsync(breno.moreira(a)mav.com.br): Debug: imapc(187.115.200.155:143): Connecting to 187.115.200.155:143 dsync(breno.moreira(a)mav.com.br): Debug: imapc(187.115.200.155:143): Server capabilities: IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS AUTH=PLAIN AUTH=LOGIN dsync(breno.moreira(a)mav.com.br): Debug: imapc(187.115.200.155:143): Authenticating as breno.moreira(a)mav.com.br dsync(breno.moreira(a)mav.com.br): Debug: imapc(187.115.200.155:143): Server capabilities: IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT I DLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS dsync(breno.moreira(a)mav.com.br): Debug: imapc(187.115.200.155:143): Authenticated successfully dsync(breno.moreira(a)mav.com.br): Panic: file mail-storage.c: line 794 (mailbox_check_mismatching_separators): assertion failed: (vname[0] == ns->prefix[ns->prefix_len-1]) dsync(breno.moreira(a)mav.com.br): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4373a) [0x7f21a814b73a] -> /usr/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x2a) [0x7f21a814b7fa] -> /usr/lib/dove cot/libdovecot.so.0(i_fatal+0) [0x7f21a81237e2] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x7ce8e) [0x7f21a8411e8e] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_open+0x18) [0x7f21a8411ed8] -> /usr/lib/d ovecot/libdovecot-storage.so.0(imapc_mailbox_sync_init+0x95) [0x7f21a83fd235] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x33) [0x7f21a8410e23] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailb ox_sync+0x27) [0x7f21a8410f47] -> /usr/bin/dsync(+0x2ef11) [0x7f21a8b20f11] -> /usr/bin/dsync(+0x2f03f) [0x7f21a8b2103f] -> /usr/bin/dsync(+0x30ac4) [0x7f21a8b22ac4] -> /usr/bin/dsync(dsync_worker_msg_iter_next+0x34) [0x7f21a8b1ffb4] -> /usr/bin/dsync(+0x292b4) [0x7f21a8b1b2b4] -> /usr/bin/dsync(+0x29352) [0x7f21a8b1b352] -> /usr/bin/dsync(dsync_brain_msg_sync_more+0x450) [0x7f21a8b1b7c0] -> /usr/bin/dsync(dsync_brain_sync+0xc21) [0x7f21a8b1a6c1] -> /usr/bin/dsync(+0x28e01) [0x7f21a8b1ae01] -> /usr/bin/dsync(dsync_brain_sync+0x7b7) [0x7f21a8b1a257] -> /usr/bin/dsync(+0x28c98) [0x7f21a8b1ac98] -> /usr/bin/dsync(dsync_brain_sync+0x7f8) [0x7f21a8b1a298] -> /usr/bin/dsync(dsync_brain_sync_all+0x18) [0x7f21a8b1ae68] -> /usr/bin/dsync(+0x25f76) [0x7f21a8b17f76] -> /usr/bin/dsync(+0x26461) [0x7f21a8b18461] -> /usr/bin/dsync(+0x13486) [0x7f21a8b05486] -> /usr/bin/dsync(+0x13f51) [0x7f21a8b05f51] -> /usr/bin/dsync(doveadm_mail_try_run+0x159) [0x7f21a8b063e9] -> /usr/bin/dsync(main+0x3a1) [0x7f21a8b05031] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f21a7d9cead] Aborted Best Regards, -- --------------------------------------------------------------------- Breno Moreira “O êxito na vida não se mede pelo que você conquistou, mas sim pelas dificuldades que superou no caminho.” * Abraham Lincoln*

3 2

[Dovecot] LMTP Proxy
by Cassidy Larson 10 Jul '13

10 Jul '13

Trying to figure out Proxying with LMTP to a few back end storage servers for quota checking before accepting email delivery on the front end nodes. If I connect to the back end server directly via telnet, everything works great. If I use a front-end server to proxy to the back end server, I don't get the same result. Running 2.2.4 on both front and back end servers. Any help would be appreciated. ------ backend dovecot.log: dovecot: lmtp(72274): Error: userdb lookup(user@host*masteruser): Disconnected unexpectedly dovecot: auth: Fatal: master: service(auth): child 72272 killed with signal 11 (core not dumped) ------ front end dovecot.log: dovecot: lmtp(7495): Debug: auth input: user=user(a)host.comnopassword=<hidden> host=<backend_server_ip> destuser= user(a)host.com*masteruser nologin=Y nodelay=Y proxy=Y pass=<hidden> port=2525 ------ front end dovecot.conf: lmtp_proxy = yes protocols = lmtp protocol lmtp { postmaster_address = postmaster(a)mydomain.com mail_plugins = quota passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf driver = sql } } service lmtp { client_limit = 5 executable = lmtp idle_kill = 0 process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 inet_listener lmtp { address = <frontend_server_ip> port = 2525 } } ------ backend dovecot.conf: auth_master_user_separator = * lmtp_rcpt_check_quota = yes passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf driver = sql master = yes } userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf driver = sql } service lmtp { client_limit = 5 executable = lmtp -L idle_kill = 0 process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 inet_listener lmtp { address = <backend_server_ip> port = 2525 } } protocol lmtp { info_log_path = /var/log/dovecot-lmtp.log postmaster_address = postmaster(a)infowest.com mail_plugins = quota }

3 4

[Dovecot] Non-blocking file_dotlock_open() in quota-maildir question
by do1＠yandex.ru 10 Jul '13

10 Jul '13

Hello, Is it safe to change lines in plugins/quota/quota-maildir.c::maildirsize_write() from fd = file_dotlock_open_group(.., DOTLOCK_CREATE_FLAG_NONBLOCK, ..); to fd = file_dotlock_open_group(.., 0, ..); ? Rationale is: exim+cpanel frequently leave stale maldirsize.lock, but when quota plugin try to dotlock maildirsize, it do this with NONBLOCK flag and just once, so first lock fails with EAGAIN and second may never happen. (When last mail is over quota this also prevent user from further receiving any mail because quota remain exceeded, forver. This is annoing problem.) I wonder if it is possible to do easy fix problem by removing NONBLOCK flag, but as I don't understand why this NONBLOCK flag is used in the first place I decided to ask developers in the list for approval. If removing NONBLOCK flag is not possible I will just call file_dotlock_open_group() twice if first one return -1 with EAGAIN. Best regards, Don.

2 1

[Dovecot] Mailbox statistics (sdbox / indexes) (+ wiki2 frontpage notes)
by Jeroen Massar 10 Jul '13

10 Jul '13

Hi, I used to, with a simple script, loop over the filenames in a Maildir, grab the From from the contents of the file and grab the flags (especially "READ" and "REPLIED") from the filename, but after moving to sdbox these flags are hidden in the index file. Is there anyway to get these out of there programmatically without having to resort to using an imap-client or is that the way to go? (I am effectively counting who has sent the most mail to a mailbox and how many of the the messages have been and have not been replied to; thus another answer would be: "I got a stats program for mailboxes") Greets, Jeroen PS: just reverted the wiki2 Frontpage, apparently even bots know who the author of the IMAP protocol is (leading me to believe that that check does not work): http://wiki2.dovecot.org/FrontPage?action=info I could not find a "revert" button thus copied&pasta'd the previous edition in there. PS2: there seems to be a master.wiki2.dovecot.org and a wiki2.dovecot.org; logging in on the one does not log in on the other, and accounts on the one are different from the other, and it seems cookies go missing also somewhere, hence why an IP is logged and not my account (which I used to have, now was missing and thus I recreated, but needed to do that on both boxes)

3 2

[Dovecot] [PATCH] login-common: Add support for ECDH/ECDHE cipher suites
by David Hicks 10 Jul '13

10 Jul '13

# HG changeset patch # User David Hicks <david(a)hicks.id.au> # Date 1373085976 -36000 # Sat Jul 06 14:46:16 2013 +1000 # Node ID ccd83f38e4b484ae18f69ea08631eefcaf6a4a4e # Parent 1fbac590b9d4dc05d81247515477bfe6192c262c login-common: Add support for ECDH/ECDHE cipher suites ECDH temporary key parameter selection must be performed during OpenSSL context initialisation before ECDH and ECDHE cipher suites can be used. OpenSSL >= 1.0.2 automatically handles ECDH temporary key parameter selection. For OpenSSL < 1.0.2 we must manually specify a named elliptic curve that Dovecot will use to generate an ephemeral key pair. By default we try to use the same named curve as that used in the server's private EC key file. If this attempt fails, a fall back curve of NIST P-384 (secp384r1) is used instead. RFC 6460 states that NIST P-384 MUST be used for cipher suites that include AES-256. For cipher suites that include AES-128, RFC 6460 states that NIST P-256 MUST be used. No matter which curve is used as a fall back option, Dovecot will be non-compliant. The reason for selecting NIST P-384 as a fall back curve is to ensure that the non-compliance is in the form of providing too great a level of security for AES-128 cipher suites rather than too little security for AES-256 cipher suites. diff -r 1fbac590b9d4 -r ccd83f38e4b4 src/login-common/ssl-proxy-openssl.c --- a/src/login-common/ssl-proxy-openssl.c Fri Jun 28 19:48:37 2013 +0300 +++ b/src/login-common/ssl-proxy-openssl.c Sat Jul 06 14:46:16 2013 +1000 @@ -119,6 +119,10 @@ const struct master_service_ssl_settings *ssl_set); static void ssl_server_context_deinit(struct ssl_server_context **_ctx); +static void ssl_proxy_ctx_set_crypto_params(SSL_CTX *ssl_ctx, + const struct master_service_ssl_settings *set); +static int ssl_proxy_ctx_get_pkey_ec_curve_name(const struct master_service_ssl_settings *set); + static unsigned int ssl_server_context_hash(const struct ssl_server_context *ctx) { unsigned int i, g, h = 0; @@ -993,11 +997,58 @@ store = SSL_CTX_get_cert_store(ssl_ctx); load_ca(store, set->ssl_ca, load_xnames ? &xnames : NULL); } + ssl_proxy_ctx_set_crypto_params(ssl_ctx, set); SSL_CTX_set_info_callback(ssl_ctx, ssl_info_callback); + return xnames; +} + +static void +ssl_proxy_ctx_set_crypto_params(SSL_CTX *ssl_ctx, + const struct master_service_ssl_settings *set) +{ +#if !defined(OPENSSL_NO_ECDH) && OPENSSL_VERSION_NUMBER >= 0x10000000L && OPENSSL_VERSION_NUMBER < 0x10002000L + EC_KEY *ecdh; + int nid; + const char *curve_name; +#endif if (SSL_CTX_need_tmp_RSA(ssl_ctx)) SSL_CTX_set_tmp_rsa_callback(ssl_ctx, ssl_gen_rsa_key); SSL_CTX_set_tmp_dh_callback(ssl_ctx, ssl_tmp_dh_callback); - return xnames; +#if !defined(OPENSSL_NO_ECDH) + /* In the non-recommended situation where ECDH cipher suites are being + used instead of ECDHE, do not reuse the same ECDH key pair for + different sessions. This option improves forward secrecy. */ + SSL_CTX_set_options(ssl_ctx, SSL_OP_SINGLE_ECDH_USE); +#endif +#if !defined(OPENSSL_NO_ECDH) && OPENSSL_VERSION_NUMBER >= 0x10002000L + /* OpenSSL >= 1.0.2 automatically handles ECDH temporary key parameter + selection. */ + SSL_CTX_set_ecdh_auto(ssl_ctx, 1); +#elif !defined(OPENSSL_NO_ECDH) && OPENSSL_VERSION_NUMBER >= 0x10000000L + /* For OpenSSL < 1.0.2, ECDH temporary key parameter selection must be + performed manually. Attempt to select the same curve as that used + in the server's private EC key file. Otherwise fall back to the + NIST P-384 (secp384r1) curve to be compliant with RFC 6460 when + AES-256 TLS cipher suites are in use. This fall back option does + however make Dovecot non-compliant with RFC 6460 which requires + curve NIST P-256 (prime256v1) be used when AES-128 TLS cipher + suites are in use. At least the non-compliance is in the form of + providing too much security rather than too little. */ + nid = ssl_proxy_ctx_get_pkey_ec_curve_name(set); + ecdh = EC_KEY_new_by_curve_name(nid); + if (ecdh == NULL) { + /* Fall back option */ + nid = NID_secp384r1; + ecdh = EC_KEY_new_by_curve_name(nid); + } + if ((curve_name = OBJ_nid2sn(nid)) != NULL) + i_debug("SSL: elliptic curve %s will be used for ECDH and" + " ECDHE key exchanges", curve_name); + if (ecdh != NULL) { + SSL_CTX_set_tmp_ecdh(ssl_ctx, ecdh); + EC_KEY_free(ecdh); + } +#endif } static void @@ -1084,6 +1135,28 @@ } static int +ssl_proxy_ctx_get_pkey_ec_curve_name(const struct master_service_ssl_settings *set) +{ + int nid = 0; +#if !defined(OPENSSL_NO_ECDH) && OPENSSL_VERSION_NUMBER >= 0x10000000L && OPENSSL_VERSION_NUMBER < 0x10002000L + EVP_PKEY *pkey; + const char *password; + EC_KEY *eckey; + EC_GROUP *ecgrp; + + password = *set->ssl_key_password != '\0' ? set->ssl_key_password : + getenv(MASTER_SSL_KEY_PASSWORD_ENV); + pkey = ssl_proxy_load_key(set->ssl_key, password); + if (pkey != NULL && + (eckey = EVP_PKEY_get1_EC_KEY(pkey)) != NULL && + (ecgrp = EC_KEY_get0_group(eckey)) != NULL) + nid = EC_GROUP_get_curve_name(ecgrp); + EVP_PKEY_free(pkey); +#endif + return nid; +} + +static int ssl_proxy_ctx_use_certificate_chain(SSL_CTX *ctx, const char *cert) { /* mostly just copy&pasted from SSL_CTX_use_certificate_chain_file() */ @@ -1209,7 +1282,6 @@ #endif ssl_proxy_ctx_use_key(ctx->ctx, ssl_set); - SSL_CTX_set_info_callback(ctx->ctx, ssl_info_callback); if (ctx->verify_client_cert) ssl_proxy_ctx_verify_client(ctx->ctx, xnames);

2 1

[Dovecot] dovecot.index disappeared
by Metro Domain Admin 10 Jul '13

10 Jul '13

Hello, One of my users just mysteriously lost all files from his inbox. I have "mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename" but couldn't find any evidence of accidental file or folder deletion. I logged in to find that ~user/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index and its backup were tiny, only 552 bytes, when the folder had thousands of messages. Other folders were left intact. We are running 2.1.15 (mdbox) on Ubuntu 12.10 using ext4. The system was rebooted about 10 days before and the full INBOX was definitely seen since the reboot. I'm just looking for ideas about what might have happened. Thanks, Tony

2 1

[Dovecot] Right way to share some global mailboxes
by Dieter Knopf 09 Jul '13

09 Jul '13

Hello, i'm using Dovecot since a long time but now I need to share folders for global mail adresses like info@ and support@ between all users. What is the right way to share this mailboxes between many users (everyone with own read flag). My config for location is: mail_location = maildir:/home/vmail/%d/%n:INDEX=/home/vmail-indexes/%d/%n And now i have a folder like /home/vmail/bar.com/foo for sharing... Thanks!

3 3

Re: [Dovecot] Anyone know dovecot?
by Reindl Harald 09 Jul '13

09 Jul '13

Am 09.07.2013 13:52, schrieb Tom Horsley: > I keep getting this sort of garbage cluttering my logs: > > dovecot: master: Warning: /ada/denmark is no longer mounted. See http://wiki2.dovecot.org/Mountpoints: 1 Time(s) > > I have indeed seen the wiki page mentioned, and even > tried what it says, but nothing seems to "stick". > Any time a filesystem gets mounted, I apparently > also have to invoke doveadm yet again to make > it ignore the new dadgum filesystem. (The wildcards > mentioned in that web page seem only to apply to > existing filesystems, not new mounts). > > Is there a way to just make it stop forever? no, i asked on the dovecot list why this happens since dovecot 2.0 and upstream believes it is a good idea to assume that every random mounted FS could be relevant for email because it *may* be referred in a config-include instead throw only a fatal error if this is the case and something can not be accessed

1 0

[Dovecot] (no subject)
by Dotan Cohen 08 Jul '13

08 Jul '13

On an Ubuntu Server 12.04 system with Dovecot 2.0.19 I am having some trouble with the Dovecot passwords. I am finding this in the logs when I unsuccessfully try to log in: Jul 07 08:13:25 auth-worker: Debug: pam(user(a)someDomain.com,212. 179.241.14): lookup service=dovecot Jul 07 08:13:25 auth-worker: Debug: pam(user(a)someDomain.com,212.179.241.14): #1/1 style=1 msg=Password: Jul 07 08:13:27 auth-worker: Info: pam(user(a)someDomain.com,212.179.241.14): pam_authenticate() failed: Authentication failure (password mismatch?) (given password: 12345) Jul 07 08:13:29 auth: Debug: client out: FAIL 2 user=user(a)someDomain.com Jul 07 08:13:29 pop3-login: Info: Disconnected (auth failed, 2 attempts): user=<user(a)someDomain.com>, method=PLAIN, rip=212.179.241.14, lip=10.138.11.251 This is not the real password, but an example to show that I think that there is an issue: $ /usr/bin/doveadm pw -u user(a)someDomain.com -s DIGEST-MD5 Enter new password: # Here I have typed "12345" Retype new password: # Here I have typed "12345" {DIGEST-MD5}f4e442b0dec5009eaa8b9b4104923edc $ printf "12345" | md5sum 827ccb0eea8a706c4c34a16891f84e7b - $ Shouldn't that password match the md5sum check? Also, might I have the file formats wrong? $ cat passwd user@someDomain.com::5000:5000::/var/mail/vhosts/someDomain.com/user $ cat shadow user@someDomain.com:{DIGEST-MD5}f4e442b0dec5009eaa8b9b4104923edc $ Note that testing in Telnet fails the password as well, both when specifying the user without a domain and with a domain: $ telnet mail.someDomain.com 143 Trying x.x.x.x... Connected to mail.someDomain.com. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. a login user 12345 a NO [AUTHENTICATIONFAILED] Authentication failed. e logout * BYE Logging out e OK Logout completed. Connection closed by foreign host. $ telnet mail.someDomain.com 143 Trying x.x.x.x... Connected to mail.someDomain.com. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. a login user(a)someDomain.com 12345 a NO [AUTHENTICATIONFAILED] Authentication failed. * BAD Error in IMAP command received by server. e logout * BYE Logging out e OK Logout completed. Connection closed by foreign host. Thanks! -- Dotan Cohen http://gibberish.co.il http://what-is-what.com

2 2

[Dovecot] DOVECOT 2.2.4 = 501 5.5.4 Unsupported options in LMTP
by Dmitry 06 Jul '13

06 Jul '13

Hi, Sorry for my english. My problem: *************************************************** dspam-3.9.0 (dspam-3.10.2 all the time segmentation fault) dspam.conf .................... # DeliveryHost /var/run/dovecot/lmtp # same error as IP DeliveryHost 127.0.0.33 DeliveryPort 24 DeliveryProto LMTP .................... ServerHost 192.168.1.34 ServerPort 24 ServerQueueSize 32 ServerPID /var/run/dspam/dspam.pid *************************************************** dovecot-2.2.4 10-master.conf service lmtp { # Create inet listener only if you can't use the above UNIX socket inet_listener lmtp { # Avoid making LMTP visible for the entire internet address = 127.0.0.33 port = 24 } } quota is not included *************************************************** telnet to dspam LMTP # telnet 192.168.1.34 24 Trying 192.168.1.34... Connected to 192.168.1.34. Escape character is '^]'. 220 DSPAM LMTP 3.9.0 Ready LHLO test.com 250-localhost.localdomain 250-PIPELINING 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 SIZE MAIL FROM:<test(a)test.com> 250 2.1.0 OK RCPT TO:<user(a)test.com> 250 2.1.5 OK DATA 354 Enter mail, end with "." on a line by itself 1234567 qwertyu asdfghj . 530 5.3.0 <user(a)test.com> Fatal: 501 5.5.4 Unsupported options QUIT 221 2.0.0 OK Connection closed by foreign host. *************************************************** at the same time tcpflow LMTP # tcpflow -c -i any host 127.0.0.33 127.000.000.033.00024-127.000.000.001.41663: 220 mail Dovecot ready. 127.000.000.001.41663-127.000.000.033.00024: LHLO localhost 127.000.000.001.41663-127.000.000.033.00024: 127.000.000.033.00024-127.000.000.001.41663: 250-mail 250-8BITMIME 250-ENHANCEDSTATUSCODES 250 PIPELINING 127.000.000.001.41663-127.000.000.033.00024: MAIL FROM:<test(a)test.com> SIZE=25 127.000.000.001.41663-127.000.000.033.00024: 127.000.000.033.00024-127.000.000.001.41663: 501 5.5.4 Unsupported options 127.000.000.001.41663-127.000.000.033.00024: QUIT 127.000.000.001.41663-127.000.000.033.00024: 127.000.000.033.00024-127.000.000.001.41663: 221 2.0.0 OK ^Ctcpflow[5411]: terminating *************************************************** after telnet to dovecot LMTP # telnet 127.0.0.33 24 Trying 127.0.0.33... Connected to 127.0.0.33. Escape character is '^]'. 220 mail Dovecot ready. LHLO test.com 250-mail 250-8BITMIME 250-ENHANCEDSTATUSCODES 250 PIPELINING MAIL FROM:<test(a)test.com> 250 2.1.0 OK RCPT TO:<user(a)test.com> 250 2.1.5 OK DATA 354 OK 1234567 qwertyu asdfghj . 250 2.0.0 <user(a)test.com> WVKvFEln1VEuFQAAZU03Dg Saved QUIT 221 2.0.0 OK How can I persuade dovecot to deliver the mail? And one more: telnet to dovecot LMTP # telnet 127.0.0.33 24 .................... MAIL FROM: test(a)test.com 501 5.5.4 Invalid parameters MAIL FROM: <test(a)test.com> 501 5.5.4 Invalid parameters MAIL FROM:<test(a)test.com> 250 2.1.0 OK telnet to dspam LMTP # telnet 192.168.1.34 24 .................... MAIL FROM: test(a)test.com 250 2.1.0 OK .................... # telnet 192.168.1.34 24 .................... MAIL FROM: <test(a)test.com> 250 2.1.0 OK .................... Thank you! Regards, Dmitry

2 1

[Dovecot] popup to all users ?
by Frank Bonnet 05 Jul '13

05 Jul '13

Hello I need to have a information popup will be send when my thunderbird's users connect to our server. Is there a function in Dovecot to do so ? Thank you

7 7

[Dovecot] IMAP Cannot Delete (Mailbox Doesn't exist)
by gw1500se 05 Jul '13

05 Jul '13

I am now at the next layer of the onion. I am able to retrieve mail but I cannot delete mail from my inbox. My reader says the server is responding with "mailbox does not exist." Any ideas? TIA. -- View this message in context: http://dovecot.2317879.n4.nabble.com/IMAP-Cannot-Delete-Mailbox-Doesn-t-exi… Sent from the Dovecot mailing list archive at Nabble.com.

3 5

[Dovecot] CaCert certificate configuration help needed
by gw1500se 04 Jul '13

04 Jul '13

I was not able to find specific help for configuring the crt file for CaCert. I gleaned from examples the following order: server certificate CaCert class 3 certificate Cacert root certificate However, when I try to configure my mail reading for IMAP, Dovecot shows the following error in the log: dovecot: imap-login: Aborted login (no auth attempts): I am assuming, based on searches for this error, that my crt file is not correct but I don't know what to do at this point. Can someone steer me in the right direction? TIA. -- View this message in context: http://dovecot.2317879.n4.nabble.com/CaCert-certificate-configuration-help-… Sent from the Dovecot mailing list archive at Nabble.com.

3 7

[Dovecot] dovecot 2.2 Panic: pool_data_stack_realloc(): stack frame changed
by Dimos Alevizos 04 Jul '13

04 Jul '13

Hi again, we've been trying dovecot 2.2 in our setup and we see thousands of messages like these : Jul 4 12:29:47 pop01 dovecot: lmtp(2899): Debug: auth input: rigakis2(a)otenet.gr home=/var/mail/folders/U/9/5/rigakis2 quota_rule=*:storage=50M uid=531846 gid=100 mail=mbox:~/:INBOX=/var/mail/U/9/5 /rigakis2:INDEX=/indexes/4/1/b/rigakis2@otenet.gr Jul 4 12:29:47 pop01 dovecot: lmtp(2899): Debug: Added userdb setting: mail=mbox:~/:INBOX=/var/mail/U/9/5/rigakis2:INDEX=/indexes/4/1/b/rigakis2@otenet.gr Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Debug: Effective uid=531846, gid=100, home=/var/mail/folders/U/9/5/rigakis2 Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Debug: Quota root: name=User quota backend=dict args=:noenforcing:proxy::sqlquota Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Debug: Quota rule: root=User quota mailbox=* bytes=52428800 messages=0 Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Debug: Quota grace: root=User quota bytes=5242880 (10%) Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Debug: dict quota: user=rigakis2(a)otenet.gr, uri=proxy::sqlquota, noenforcing=1 Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Debug: fs: root=/var/mail/folders/U/9/5/rigakis2, index=/indexes/4/1/b/rigakis2(a)otenet.gr, indexpvt=, control=, inbox=/var/mail/U/9/5/ rigakis2, alt= Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Debug: sieve: Pigeonhole version 0.4.0 initializing Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Debug: sieve: include: sieve_global_dir is not set; it is currently not possible to include `:global' scripts. Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Debug: o6pTL5k/1VFTCwAAYg/qxw: sieve: using the following location for user's Sieve script: /var/mail/folders/U/9/5/rigakis2/.sieve;na me=main script Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Debug: o6pTL5k/1VFTCwAAYg/qxw: sieve: loading script /var/mail/folders/U/9/5/rigakis2/.sieve;name=main script Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Debug: o6pTL5k/1VFTCwAAYg/qxw: sieve: script binary /var/mail/folders/U/9/5/rigakis2/.sieve.svbin successfully loaded Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Debug: o6pTL5k/1VFTCwAAYg/qxw: sieve: binary save: not saving binary /var/mail/folders/U/9/5/rigakis2/.sieve.svbin, because it is alre ady stored Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Debug: o6pTL5k/1VFTCwAAYg/qxw: sieve: executing script from /var/mail/folders/U/9/5/rigakis2/.sieve.svbin Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Panic: pool_data_stack_realloc(): stack frame changed Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Error: Raw backtrace: /opt/dovecot-2.2.4/lib/dovecot/libdovecot.so.0 [0x2b0066488bb0] -> /opt/dovecot-2.2.4/lib/dovecot/libdovecot.so. 0 [0x2b0066488c06] -> /opt/dovecot-2.2.4/lib/dovecot/libdovecot.so.0 [0x2b0066487dc3] -> /opt/dovecot-2.2.4/lib/dovecot/libdovecot.so.0 [0x2b006649c5d1] -> /opt/dovecot-2.2.4/lib/dovecot/libdovecot .so.0 [0x2b00664844ef] -> /opt/dovecot-2.2.4/lib/dovecot/libdovecot.so.0(buffer_write+0xf6) [0x2b0066484956] -> /opt/dovecot-2.2.4/lib/dovecot/libdovecot-sieve.so.0(rfc2822_header_append+0x35) [0x2 b0066b2c695] -> /opt/dovecot-2.2.4/lib/dovecot/libdovecot-sieve.so.0(rfc2822_header_printf+0xbd) [0x2b0066b2cbdd] -> /opt/dovecot-2.2.4/lib/dovecot/libdovecot-sieve.so.0 [0x2b0066b6141c] -> /opt/do vecot-2.2.4/lib/dovecot/libdovecot-sieve.so.0 [0x2b0066b5fd63] -> /opt/dovecot-2.2.4/lib/dovecot/libdovecot-sieve.so.0(sieve_result_execute+0x220) [0x2b0066b407b0] -> /opt/dovecot-2.2.4/lib/dovecot /libdovecot-sieve.so.0(sieve_execute+0x Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Fatal: master: service(lmtp): child 2899 killed with signal 6 (core not dumped) I tried to get a core dump but I can't, apparently I'm doing something wrong. Any ideas ? dovecot -n : # 2.2.4: /opt/dovecot-2.2.4/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-348.6.1.el5 x86_64 CentOS release 5.9 (Final) auth_cache_negative_ttl = 10 mins auth_cache_size = 5 M auth_cache_ttl = 10 mins auth_verbose = yes default_client_limit = 5000 default_process_limit = 500 deliver_log_format = msgid=%m: from=%f size=%p %$ dict { sqlquota = mysql:/opt/dovecot/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no first_valid_uid = 20 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = * log_timestamp = "%Y-%m-%d %H:%M:%S " login_greeting = OTENET ready login_trusted_networks = 83.235.66.0/24 mail_access_groups = mail otemail disk root mail_fsync = always mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = quota managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags notify mbox_lock_timeout = 3 secs mbox_read_locks = dotlock fcntl mmap_disable = yes passdb { args = /opt/dovecot/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid size quota = dict:User quota::noenforcing:proxy::sqlquota sieve = ~/.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags } postmaster_address = postmaster(a)otenet.gr quota_full_tempfail = yes service auth-worker { user = dovenull } service dict { unix_listener dict { group = otemail mode = 0666 } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { client_limit = 1 inet_listener lmtp { port = 24 } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service quota-warning { executable = script /opt/dovecot/etc/dovecot/quota-warning.sh user = dovecot } ssl = no userdb { args = /opt/dovecot/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes protocol lmtp { mail_plugins = quota sieve } protocol lda { mail_plugins = quota sieve } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_max_userip_connections = 100 mail_plugins = quota imap_quota notify } protocol pop3 { mail_max_userip_connections = 100 mail_plugins = quota notify pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_fast_size_lookups = yes pop3_lock_session = yes pop3_reuse_xuidl = yes pop3_uidl_format = %08Xu%08Xv }

1 1

[Dovecot] namespace delivery question
by Laszlo Kiraly 04 Jul '13

04 Jul '13

Hi list, I like to have public mailboxes in addition to other private in the same domain, and manage the public mailbox permissions through acls. For example: info(a)domain.com <- public, readable by user2 user1(a)domain.com <- private user2(a)domain.com <- private The mailboxes are virtual, authentication through pam (kerberos). The public mailbox doesn't have valid kerberos account. My smtp server is exim 4.80. I set the mail delivery to lmtp. I couldn't find solution in the documentation, how can I manage the email delivery to the public namespace? There is a -m option in the lda delivery where you can give namespace prefix. Maybe it's good for this, but I couldn't find any information how can I do this with lmtp? my dovecot config: test:~# dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.0.0-1-686-pae i686 Debian squeeze/sid managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { location = sdbox:/home/vmail/public/%u prefix = public. separator = . subscriptions = no type = public } namespace inbox { inbox = yes location = sdbox:/home/vmail/private/%n mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = . } passdb { driver = pam } plugin { acl = vfile sieve = /home/vmail/%n/.dovecot.sieve sieve_dir = /home/vmail/%n sieve_global_dir = /home/vmail/sieve } protocols = " imap lmtp sieve" service managesieve-login { inet_listener sieve { port = 4190 } service_count = 1 } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = uid=1035 gid=8 home=/home/vmail/%Lu allow_all_users=yes driver = static } protocol lmtp { mail_plugins = " sieve" } protocol lda { mail_plugins = " sieve" } protocol sieve { mail_max_userip_connections = 10 managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_line_length = 65536 } Best regards: László Király

5 15

[Dovecot] dnsbl feature for dovecot
by John Fawcett 04 Jul '13

04 Jul '13

dnsbl's are a popular method to prevent listed ips from making connections to mta software. cf. postscreen_dnsbl_sites in postfix Would it be possible to introduce such a feature in dovecot, so that connections can be denied based on a dnsbl lookup (where the precise dnsbls used are configurable)? John

8 20

[Dovecot] tcpwrappers
by lejeczek 04 Jul '13

04 Jul '13

hi everybody having I believe sort of plain-vanilla config with section in 10-tcpwrapper.conf as per docs login_access_sockets = tcpwrap service tcpwrap { unix_listener login/tcpwrap { group = $default_login_user mode = 0600 user = $default_login_user } } /etc/hosts.deny contains: ALL: given_host and yet dovecot logins IMAP client in whereas other tcpwrapper aware services act as expected what am I missing? regards

1 1

[Dovecot] flat file in tmpfs for dict quota
by Ken A 04 Jul '13

04 Jul '13

I'm using dict quota like so: quota = dict:User quota::file:/[path]/quotas/%u [path]/quotas/ is a tmpfs. The idea is to do less work on disk. Other than forcing dovecot to rebuild quotas on a reboot, are there any downsides? Thanks, Ken -- Ken Anderson Pacific Internet - http://www.pacific.net

3 3

Re: [Dovecot] dnsbl feature for dovecot
by Joseph Tam 03 Jul '13

03 Jul '13

Professa Dementia writes: > 2) Fail2Ban with rules that seem like they are pretty weak, but trust > me, they work fine and you limit complaints from users. > > a) If you get 3 invalid login attempts within a minute from more than > 1 IP address, block that login for 10 minutes. If you have blocked a > login and another attempt to log in to that account is made then tarpit > that connection. Usually 60 seconds is sufficient. Do not extend the > original block time past the original 10 minutes. > b) If you get 5 invalid login attempts within a minute from the same > IP, block that IP for 5 minutes. This is usually a valid user who > forgot their password, as opposed to a) which is usually a malicious > third party. Looking at my POP3/IMAP logs, users enter wrong passwords all the time, then their mail client keeps trying to re-authenticate, giving the appearance of a slow rolling BFD. For example, I just grabbed this typical sample Jul 2 13:24:48 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 5 secs): user=<x> ... Jul 2 13:26:03 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 5 secs): user=<x> ... Jul 2 13:26:13 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 9 secs): user=<x> ... Jul 2 13:26:37 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 5 secs): user=<x> ... Jul 2 13:26:43 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 5 secs): user=<x> ... Jul 2 13:27:08 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 5 secs): user=<x> ... Jul 2 13:27:14 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 5 secs): user=<x> ... Jul 2 13:27:30 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 5 secs): user=<x> ... Jul 2 13:27:36 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 5 secs): user=<x> ... Jul 2 13:27:51 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 5 secs): user=<x> ... Brute force attempts are more intense, so I think these rules can be set harder to not risk plunking your users into blacklist hell. Also, some common role account (that don't exist on my system e.g. "admin") will trigger an immediate blacklist here -- an easy way to shortcut the process. > I feel your pain and frustration. I do not believe there is an RBL list > of offending IP's for brute force attacks ... Maybe http://www.blocklist.de/en/index.html I use it for ssh BFD blocking, and it detects 2/3 of the IPs trying to do attempts. On their web page, they also list FTP, Web, and Mail login brute forcers, although I'm not sure whether "Mail" logins means IMAP, POP, SMTP-AUTH, or all of them. You can also integrate this with fail2ban so that not only can you use it to block, but can also contribute to the global detection of brute forcers. Joseph Tam <jtam.home(a)gmail.com>

2 1

[Dovecot] Released Pigeonhole v0.4.1 for Dovecot v2.2.4.
by Stephan Bosch 03 Jul '13

03 Jul '13

Hello Dovecot users, Now that I am not preoccupied anymore, I quickly release a new version of Pigeonhole for Dovecot v2.2. This consists mainly of bug fixes. One new feature is that the Sieve plugin will try to pass temporary failures (e.g. from mail storage) back to LDA/LMTP as much as possible. However, this change turned out a little bigger than I would have liked, so experiment with it a bit before you deploy it in production. Changelog v0.4.1: + Added support for handling temporary failures. These are passed back to LDA/LTMP to produce an appropriate response towards the MTA. - Sieve storage: Removed PATH_MAX limitation for active symlink. This caused problems for GNU/Hurd. - Fixed line endings in X-Sieve headers added by redirect command. - ManageSieve: Fixed '[' ']' stupidity for response codes (only happened before login). - Fixed setting name in example-config/conf.d/20-managesieve.conf. - Sieve extprograms plugin: Fixed interaction between pipe command and remote script service. The output from the script service was never read, causing a broken pipe error at the script service. Apparently, this was broken since the I/O handling for extprograms was last revised. - Fixed assertion failure due to datastack problem in message header composition. The release is available as follows: http://www.rename-it.nl/dovecot/2.2/dovecot-2.2-pigeonhole-0.4.1.tar.gz http://www.rename-it.nl/dovecot/2.2/dovecot-2.2-pigeonhole-0.4.1.tar.gz.sig Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

[Dovecot] Creating an authenticated user master user
by Chris Bullock 03 Jul '13

03 Jul '13

dovecot --version 1.1.18 mbox format We are trying to migrate from dovecot to another imap server and need some help migrating the user data to the new server. We have written a perl script to migrate the data but it seems that we need an "authenticated or Master user" in order for the script to access the user mail boxes without the users password. We are using PAM authentication, and root does not have access to the user's mail boxes. Any help would be appreciated. Chris

1 0

[Dovecot] lmtp: Disable Delivered-To header
by Micha Krause 03 Jul '13

03 Jul '13

Hi, using LMTP, is it possible to disable the addition of the Delivered-To header to messages? Micha Krause

4 4

[Dovecot] Who all accessed my dovecot server?
by pvsuja 03 Jul '13

03 Jul '13

Hi, I have set up a mail server with dovecot as IMAP/POP3 server, postfix as MTA and roundcube as web mail client. Other mail clients such as Thunderbird is also being used for mail access. Now as a security policy in our organization, I want to know the IP addresses of the machines from which my mail server was accessed. Is there any monitoring tools to get these details? Regards, Suja -- View this message in context: http://dovecot.2317879.n4.nabble.com/Who-all-accessed-my-dovecot-server-tp4… Sent from the Dovecot mailing list archive at Nabble.com.

3 3

[Dovecot] dovecot corrupted transaction log
by John Fawcett 03 Jul '13

03 Jul '13

Hi I came across this error which happend immedately after a mail delivery to the inbox. Should I look for the problem externally to dovecot (ie. file system, operating system) or within dovecot? I never saw this error before installing 2.2.1, with 2.2.2 I seemed to get even more of them so currently back on 2.2.1 Thanks John Jun 11 00:00:05 rosalia dovecot: imap(myemail@mydomain): Error: Corrupted transaction log file /var/vmail/mydomain/myemail(a)mydomain/dovecot.index.log seq 311: file size shrank (1184 < 1304) (sync_offset=1304) Jun 11 00:00:05 rosalia dovecot: imap(myemail@mydomain): Error: Index /var/vmail/mydomain/myemail(a)mydomain/dovecot.index: Lost log for seq=310 offset=32816 Jun 11 00:00:05 rosalia dovecot: imap(myemail@mydomain): Warning: fscking index file /var/vmail/mydomain/myemail(a)mydomain/dovecot.index Jun 11 00:00:05 rosalia dovecot: imap(myemail@mydomain): Error: Index /var/vmail/mydomain/myemail(a)mydomain/dovecot.index: Lost log for seq=310 offset=32816 Jun 11 00:00:05 rosalia dovecot: imap(myemail@mydomain): Warning: fscking index file /var/vmail/mydomain/myemail(a)mydomain/dovecot.index Jun 11 00:00:05 rosalia dovecot: imap(myemail@mydomain): Error: /var/vmail/mydomain/myemail(a)mydomain/dovecot.index log position went backwards (310,32816 < 311,1304) Jun 11 00:00:05 rosalia dovecot: imap(myemail@mydomain): Error: Index /var/vmail/mydomain/myemail(a)mydomain/dovecot.index: Lost log for seq=310 offset=32816 Jun 11 00:00:05 rosalia dovecot: imap(myemail@mydomain): Warning: fscking index file /var/vmail/mydomain/myemail(a)mydomain/dovecot.index Jun 11 00:00:05 rosalia dovecot: imap(myemail@mydomain): Disconnected: Internal error occurred. Refer to server log for more information. [2013-06-11 00:00:05] in=5596 out=27722 Jun 11 00:02:11 rosalia dovecot: imap-login: Login: user=<myemail@mydomain>, method=PLAIN, rip=81.174.4.175, lip=80.237.194.64, mpid=5824, TLS, session=<lGC47tPexABRrgSv> Jun 11 00:02:11 rosalia dovecot: imap(myemail@mydomain): Error: Transaction log file /var/vmail/mydomain/myemail(a)mydomain/dovecot.index.log: marked corrupted

2 4

[Dovecot] Dovecot METADATA plugin configuration
by Sergey Sidlyarenko 02 Jul '13

02 Jul '13

Debian Wheezy dovecot 2.2.4 (deb http://xi.rename-it.nl/debian/ stable-auto/dovecot-2.2.patched main) dovecot-metadata-plugin v14 /var/lib/dovecot 777 dovecot:dovecot /var/lib/dovecot/shared-metadata 700 dovecot:dovecot /var/run/dovecot 777 dovecot:dovecot /var/run/divecot/dict 666 mail:dovecot Test1 - create calendar UTF7 mailbox (no errors in dovecot-error.log): [02-Jul-2013 15:47:51 +0400]: [4419] S: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Welcome to TU FKP IMAP server. [02-Jul-2013 15:47:51 +0400]: [4419] C: A0001 ID ("name" "Roundcube" "version" "1.0-git" "php" "5.4.4-14+deb7u2" "os" "Linux" "command" "/?_task=calendar&_action=calendar") [02-Jul-2013 15:47:51 +0400]: [4419] S: * ID ("name" "Dovecot") [02-Jul-2013 15:47:51 +0400]: [4419] S: A0001 OK ID completed. [02-Jul-2013 15:47:51 +0400]: [4419] C: A0002 AUTHENTICATE PLAIN [02-Jul-2013 15:47:51 +0400]: [4419] S: A0002 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE METADATA ANNOTATEMORE] Logged in [02-Jul-2013 15:47:51 +0400]: [4419] C: A0003 CREATE &BCAEMAQxBD4ERwQ4BDk- [02-Jul-2013 15:47:51 +0400]: [4419] S: A0003 OK Create completed. [02-Jul-2013 15:47:51 +0400]: [4419] C: A0004 SUBSCRIBE &BCAEMAQxBD4ERwQ4BDk- [02-Jul-2013 15:47:51 +0400]: [4419] S: A0004 OK Subscribe completed. [02-Jul-2013 15:47:51 +0400]: [4419] C: A0005 SETMETADATA &BCAEMAQxBD4ERwQ4BDk- (/shared/vendor/kolab/folder-type event /private/vendor/kolab/folder-type NIL) [02-Jul-2013 15:47:51 +0400]: [4419] S: A0005 NO Mailbox does not exist. [02-Jul-2013 15:47:51 +0400]: [4419] C: A0006 SETMETADATA &BCAEMAQxBD4ERwQ4BDk- (/private/vendor/kolab/folder-type event) [02-Jul-2013 15:47:51 +0400]: [4419] S: A0006 NO Mailbox does not exist. [02-Jul-2013 15:47:51 +0400]: [4419] C: A0007 LIST "" "&BCAEMAQxBD4ERwQ4BDk-/*" [02-Jul-2013 15:47:51 +0400]: [4419] S: A0007 OK List completed. [02-Jul-2013 15:47:51 +0400]: [4419] C: A0008 DELETE &BCAEMAQxBD4ERwQ4BDk- [02-Jul-2013 15:47:51 +0400]: [4419] S: A0008 OK Delete completed. [02-Jul-2013 15:47:51 +0400]: [4419] C: A0009 UNSUBSCRIBE &BCAEMAQxBD4ERwQ4BDk- [02-Jul-2013 15:47:51 +0400]: [4419] S: A0009 OK Unsubscribe completed. [02-Jul-2013 15:47:51 +0400]: [4419] C: A0010 LOGOUT [02-Jul-2013 15:47:51 +0400]: [4419] S: * BYE Logging out [02-Jul-2013 15:47:51 +0400]: [4419] S: A0010 OK Logout completed. Test2 - create calendar ASCII mailbox: [02-Jul-2013 15:51:20 +0400]: [2611] S: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Welcome to TU FKP IMAP server. [02-Jul-2013 15:51:20 +0400]: [2611] C: A0001 ID ("name" "Roundcube" "version" "1.0-git" "php" "5.4.4-14+deb7u2" "os" "Linux" "command" "/?_task=calendar&_action=calendar") [02-Jul-2013 15:51:20 +0400]: [2611] S: * ID ("name" "Dovecot") [02-Jul-2013 15:51:20 +0400]: [2611] S: A0001 OK ID completed. [02-Jul-2013 15:51:20 +0400]: [2611] C: A0002 AUTHENTICATE PLAIN [02-Jul-2013 15:51:20 +0400]: [2611] S: A0002 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE METADATA ANNOTATEMORE] Logged in [02-Jul-2013 15:51:20 +0400]: [2611] C: A0003 CREATE Work [02-Jul-2013 15:51:20 +0400]: [2611] S: A0003 OK Create completed. [02-Jul-2013 15:51:20 +0400]: [2611] C: A0004 SUBSCRIBE Work [02-Jul-2013 15:51:20 +0400]: [2611] S: A0004 OK Subscribe completed. [02-Jul-2013 15:51:20 +0400]: [2611] C: A0005 SETMETADATA Work (/shared/vendor/kolab/folder-type event /private/vendor/kolab/folder-type NIL) [02-Jul-2013 15:51:50 +0400]: [2611] S: A0005 NO Setting entry failed. [02-Jul-2013 15:51:50 +0400]: [2611] C: A0006 SETMETADATA Work (/private/vendor/kolab/folder-type event) [02-Jul-2013 15:52:20 +0400]: [2611] S: A0006 NO Setting entry failed. [02-Jul-2013 15:52:20 +0400]: [2611] C: A0007 LIST "" "Work/*" [02-Jul-2013 15:52:20 +0400]: [2611] S: A0007 OK List completed. [02-Jul-2013 15:52:20 +0400]: [2611] C: A0008 DELETE Work [02-Jul-2013 15:52:20 +0400]: [2611] S: A0008 OK Delete completed. [02-Jul-2013 15:52:20 +0400]: [2611] C: A0009 UNSUBSCRIBE Work [02-Jul-2013 15:52:20 +0400]: [2611] S: A0009 OK Unsubscribe completed. [02-Jul-2013 15:52:20 +0400]: [2611] C: A0010 LOGOUT [02-Jul-2013 15:52:20 +0400]: [2611] S: * BYE Logging out [02-Jul-2013 15:52:20 +0400]: [2611] S: A0010 OK Logout completed. root@mail:/var/log/dovecot# cat dovecot-errors.log 2013-07-02 15:51:50 imap(admin(a)tufkp.ru): Error: read(/var/run/dovecot//dict) failed: Timeout after 30 seconds 2013-07-02 15:51:50 imap(admin(a)tufkp.ru): Error: metadata: dict commit failed 2013-07-02 15:52:20 imap(admin(a)tufkp.ru): Error: read(/var/run/dovecot//dict) failed: Timeout after 30 seconds 2013-07-02 15:52:20 imap(admin(a)tufkp.ru): Error: metadata: dict commit failed 2013-07-02 15:53:21 dict: Error: file dict commit: file_dotlock_open(/var/lib/dovecot/shared-metadata/) failed: Resource temporarily unavailable 2013-07-02 15:53:53 dict: Error: file dict commit: file_dotlock_open(/var/lib/dovecot/shared-metadata/) failed: Resource temporarily unavailable root@mail:/etc/dovecot# doveconf # 2.2.4: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.1 ext4 # NOTE: Send doveconf -n output instead when asking for help. auth_anonymous_username = anonymous auth_cache_negative_ttl = 10 secs auth_cache_size = 10 M auth_cache_ttl = 2 mins auth_debug = no auth_debug_passwords = no auth_default_realm = auth_failure_delay = 2 secs auth_gssapi_hostname = auth_krb5_keytab = auth_master_user_separator = * auth_mechanisms = plain login auth_proxy_self = auth_realms = auth_socket_path = auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Lu auth_username_translation = auth_verbose = no auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 4096 base_dir = /var/run/dovecot/ config_cache_size = 1 M debug_log_path = default_client_limit = 8192 default_idle_kill = 1 mins default_internal_user = dovecot default_login_user = dovenull default_process_limit = 2048 default_vsz_limit = 2 G deliver_log_format = msgid=%m: %$ dict { expire = pgsql:/etc/dovecot/dovecot-dict-expire.conf metadata = file:/var/lib/dovecot/shared-metadata/ } dict_db_config = director_doveadm_port = 0 director_mail_servers = director_servers = director_user_expire = 15 mins director_username_hash = %u disable_plaintext_auth = yes dotlock_use_excl = yes doveadm_allowed_commands = doveadm_password = doveadm_port = 0 doveadm_socket_path = doveadm-server doveadm_worker_count = 0 dsync_alt_char = _ dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u -U first_valid_gid = 8 first_valid_uid = 8 hostname = imap_capability = imap_client_workarounds = imap_id_log = imap_id_send = name * imap_idle_notify_interval = 2 mins imap_logout_format = in=%i out=%o imap_max_line_length = 64 k imap_urlauth_host = imap_urlauth_logout_format = in=%i out=%o imap_urlauth_port = 143 imap_urlauth_submit_password = imap_urlauth_submit_user = submission imapc_features = imapc_host = imapc_list_prefix = imapc_master_user = imapc_max_idle_time = 29 mins imapc_password = imapc_port = 143 imapc_rawlog_dir = imapc_ssl = no imapc_ssl_verify = yes imapc_user = import_environment = TZ info_log_path = /var/log/dovecot/dovecot.log instance_name = dovecot last_valid_gid = 8 last_valid_uid = 8 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lda_original_recipient_header = libexec_dir = /usr/lib/dovecot listen = *, [::] lmtp_address_translate = lmtp_proxy = no lmtp_rcpt_check_quota = no lmtp_save_to_detail_mailbox = no lock_method = fcntl log_path = /var/log/dovecot/dovecot-errors.log log_timestamp = "%Y-%m-%d %H:%M:%S " login_access_sockets = login_greeting = Welcome to IMAP server. login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c login_trusted_networks = 127.0.0.1 mail_access_groups = mail_always_cache_fields = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_attribute_dict = mail_cache_fields = flags mail_cache_min_mail_count = 0 mail_chroot = mail_debug = no mail_fsync = optimized mail_full_filesystem_access = no mail_gid = 8 mail_home = mail_location = maildir:/var/mail/%d/%n:LAYOUT=fs:INBOX=/var/mail/%d/%n/maildirfolder:DIRNAME=maildirfolder:INDEX=/var/mail/indexes/%d/%n mail_log_prefix = "%s(%u): " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 1024 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /usr/lib/dovecot/modules mail_plugins = virtual expire metadata mail_prefetch_count = 0 mail_privileged_group = mail mail_save_crlf = no mail_shared_explicit_inbox = no mail_temp_dir = /tmp mail_temp_scan_interval = 1 weeks mail_uid = 8 mailbox_idle_check_interval = 30 secs mailbox_list_index = no maildir_broken_filename_sizes = no maildir_copy_with_hardlinks = yes maildir_stat_dirs = no maildir_very_dirty_syncs = no managesieve_client_workarounds = managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave master_user_separator = mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_md5 = apop3d mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = dotlock fcntl mdbox_preallocate_space = no mdbox_rotate_interval = 0 mdbox_rotate_size = 2 M mmap_disable = no namespace { disabled = no hidden = no ignore_on_failure = no inbox = yes list = yes location = maildir:/var/mail/%d/%n:LAYOUT=fs:INBOX=/var/mail/%d/%n/maildirfolder:DIRNAME=maildirfolder:INDEX=/var/mail/indexes/%d/%n:UTF-8 mailbox Archive { auto = subscribe driver = special_use = \Archive } mailbox Drafts { auto = subscribe driver = special_use = \Drafts } mailbox Junk { auto = subscribe driver = special_use = \Junk } mailbox Sent { auto = subscribe driver = special_use = \Sent } mailbox Trash { auto = subscribe driver = special_use = \Trash } prefix = separator = / subscriptions = yes type = private } namespace { disabled = no hidden = no ignore_on_failure = no inbox = no list = yes location = virtual:/etc/dovecot/virtual:CONTROL=/var/mail/controls/%d/%n/Вся почта:INDEX=/var/mail/indexes/%d/%n/Вся почта:UTF-8 mailbox { auto = subscribe driver = special_use = \All } prefix = Вся почта/ separator = / subscriptions = no type = private } passdb { args = /etc/dovecot/dovecot-pgsql-master.conf default_fields = deny = no driver = sql master = yes override_fields = pass = no result_failure = continue result_internalfail = continue result_success = return-ok skip = never } passdb { args = /etc/dovecot/dovecot-pgsql.conf default_fields = deny = no driver = sql master = no override_fields = pass = no result_failure = continue result_internalfail = continue result_success = return-ok skip = never } plugin { expire = Trash expire2 = Trash/* expire3 = Junk expire_dict = proxy::expire metadata_dict = proxy::metadata sieve = /var/mail/%d/%n/dovecot.sieve sieve_before = /var/lib/dovecot/sieve/ sieve_dir = /var/mail/%d/%n/maildirfolder sieve_max_actions = 32 sieve_max_redirects = 4 sieve_max_script_size = 1M } pop3_client_workarounds = pop3_deleted_flag = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_duplicates = allow pop3_uidl_format = %08Xu%08Xv pop3c_host = pop3c_master_user = pop3c_password = pop3c_port = 110 pop3c_rawlog_dir = pop3c_ssl = no pop3c_ssl_verify = yes pop3c_user = %u postmaster_address = protocols = imap sieve quota_full_tempfail = no recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s replication_full_sync_interval = 1 days replication_max_conns = 10 replicator_host = replicator replicator_port = 0 sendmail_path = /usr/sbin/sendmail service aggregator { chroot = . client_limit = 0 drop_priv_before_exec = no executable = aggregator extra_groups = fifo_listener replication-notify-fifo { group = mode = 0600 user = } group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replication-notify { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 4096 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 2048 process_min_avail = 10 protocol = service_count = 0 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 1 G } service auth { chroot = client_limit = 10240 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = unix_listener auth-client { group = mail mode = 0660 user = mail } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mail mode = 0664 user = mail } unix_listener auth-userdb { group = mode = 0666 user = $default_internal_user } unix_listener login/login { group = mode = 0666 user = } unix_listener token-login/tokenlogin { group = mode = 0666 user = } user = dovecot vsz_limit = 1 G } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = dovecot mode = 0666 user = mail } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = . client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 4096 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = port = 143 ssl = no } inet_listener imaps { address = port = 993 ssl = yes } privileged_group = process_limit = 2048 process_min_avail = 10 protocol = imap service_count = 0 type = login user = dovecot vsz_limit = 1 G } service imap-urlauth-login { chroot = token-login client_limit = 0 drop_priv_before_exec = no executable = imap-urlauth-login extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login unix_listener imap-urlauth { group = mode = 0666 user = } user = $default_login_user vsz_limit = 18446744073709551615 B } service imap-urlauth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener imap-urlauth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service imap-urlauth { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener token-login/imap-urlauth { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service imap { chroot = client_limit = 4096 drop_priv_before_exec = no executable = imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 2048 process_min_avail = 10 protocol = imap service_count = 0 type = unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 1 G } service indexer-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = indexer-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 10 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service indexer { chroot = client_limit = 0 drop_priv_before_exec = no executable = indexer extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service ipc { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = ipc extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener ipc { group = mode = 0600 user = } unix_listener login/ipc-proxy { group = mode = 0600 user = $default_login_user } user = $default_internal_user vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 1 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log unix_listener log-errors { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service managesieve-login { chroot = login client_limit = 4096 drop_priv_before_exec = no executable = /usr/lib/dovecot/managesieve-login extra_groups = group = idle_kill = 0 inet_listener sieve { address = port = 4190 ssl = no } privileged_group = process_limit = 2048 process_min_avail = 10 protocol = sieve service_count = 0 type = login user = dovecot vsz_limit = 1 G } service managesieve { chroot = client_limit = 4096 drop_priv_before_exec = no executable = /usr/lib/dovecot/managesieve extra_groups = group = idle_kill = 0 privileged_group = process_limit = 2048 process_min_avail = 10 protocol = sieve service_count = 0 type = unix_listener login/sieve { group = mode = 0666 user = } user = vsz_limit = 1 G } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 110 ssl = no } inet_listener pop3s { address = port = 995 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service replicator { chroot = client_limit = 0 drop_priv_before_exec = no executable = replicator extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replicator-doveadm { group = mode = 00 user = $default_internal_user } unix_listener replicator { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } unix_listener ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0600 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service submission-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = submission-login extra_groups = group = idle_kill = 0 inet_listener submission { address = port = 587 ssl = no } privileged_group = process_limit = 0 process_min_avail = 0 protocol = submission service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service submission { chroot = client_limit = 1 drop_priv_before_exec = no executable = submission extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = submission service_count = 1 type = unix_listener login/submission { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service tcpwrap { chroot = client_limit = 1 drop_priv_before_exec = no executable = tcpwrap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = user = $default_internal_user vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_ca = ssl_cert = </etc/ssl/dovecot/example.com.ca.crt ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2 ssl_client_ca_dir = ssl_client_ca_file = ssl_client_cert = ssl_client_key = ssl_crypto_device = ssl_key = </etc/ssl/dovecot/example.com.key ssl_key_password = ssl_parameters_regenerate = 1 hours ssl_protocols = !SSLv2 ssl_require_crl = yes ssl_verify_client_cert = no state_dir = /var/lib/dovecot stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_session_min_time = 15 mins stats_user_min_time = 1 hours submission_host = submission_relay_host = submission_relay_master_user = submission_relay_max_idle_time = 29 mins submission_relay_password = submission_relay_port = 25 submission_relay_rawlog_dir = submission_relay_send_xclient = no submission_relay_ssl = no submission_relay_ssl_verify = yes submission_relay_user = syslog_facility = mail userdb { args = /etc/dovecot/dovecot-pgsql.conf default_fields = driver = sql override_fields = } valid_chroot_dirs = /var/mail/ verbose_proctitle = yes verbose_ssl = no version_ignore = no protocol imap { mail_max_userip_connections = 1024 mail_plugins = expire virtual metadata imap_metadata imap_annotatemore } protocol lda { hostname = mail.example.com info_log_path = /var/log/dovecot/dovecot-local-deliver.log log_path = /var/log/dovecot/dovecot-local-deliver-errors.log mail_plugins = expire sieve virtual postmaster_address = admin(a)example.com } protocol sieve { managesieve_max_line_length = 65536 }

1 0

[Dovecot] IMAPS: Disable SSL connection without client certificate
by Ireneusz Szcześniak 02 Jul '13

02 Jul '13

I've been using Dovecot 2.1.8 on OpenBSD 5.2 i386 for about a month. It works great. Dovecot serves IMAPS only, and I'm using Thunderbird to access my mail. I configured Dovecot to allow clients that present a valid certificate when establishing SSL connection. I configure my Thunderbird for SSL/TLS connection with normal password. It works fine. However, with my config anybody can connect to my server without presenting a certificate: > openssl s_client -connect server:993 > (...) > * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS > ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. Luckily, after connecting without a certificate logging fails: > a001 login iszczesniak password > a001 NO [ALERT] Client didn't present valid SSL certificate *QUESTION: Is there a way in Dovecot to disable establishing an SSL connection without a client certificate?* My complete config is : # dovecot -n # 2.1.8: /etc/dovecot/dovecot.conf # OS: OpenBSD 5.2 i386 auth_ssl_require_client_cert = yes mail_location = maildir:~/archive/mail mbox_write_locks = fcntl mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Sent { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = bsdauth } protocols = imap service imap-login { inet_listener imap { port = 0 } } ssl_ca = </etc/ssl/certs/cacertcrl.pem ssl_cert = </etc/ssl/cert.pem ssl_key = </etc/ssl/private/key.pem ssl_verify_client_cert = yes userdb { driver = passwd } verbose_ssl = yes protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } -- Ireneusz (Irek) Szczesniak http://www.irkos.org

5 12

[Dovecot] Doubt the relationship between NTLM and Kerberos.
by Maria Jose Yañez Dacosta 01 Jul '13

01 Jul '13

Could someone explain to me what role does the Authenticating Kerberos NTLM in Authenticating NTLM explained in http://wiki.dovecot.org/HowTo/ActiveDirectoryNtlm ? Not understand that relationship between NTLM and Kerberos?. I have to configure thunderbird with simple password method and leave the password to be blank or have to use the gssapi? Although gssapi not supported by windows right? You have to generate a keytab for imap server against AD? I should create in windows and copy it to linux where I have my imap server? I appreciate someone can explain this. Thank you!. -- Maria José

2 1

Re: [Dovecot] Samba4 and user auth
by Pavel Herrmann 01 Jul '13

01 Jul '13

Hi On Monday 01 July 2013 12:36:39 Carsten Laun-De Lellis wrote: > Hi Pavel > > Thankx for your reply. > > When you were setting up your ldap query what kind of password crypto > did you specify plain ntlm gssapi or anything else? The password field > in your query is userPassword or am I wrong here? the password field is hidden (only the user can see it) by default, and not stored as a unix-friendly value (anything a crypt() would understand) what I use is auth_bind (which uses user-supplied password to bind to the LDAP directory). what it means is that on every login there are 2 lookups (first one using your "service" DN to find the user DN, second one with your user DN to check the password) that also means that you need a password format that your LDAP can understand (mostly a plaintext password, or NTLM if your mail server is a Samba domain member). As long as you only offer IMAP/SSL I dont think plaintext (as in "auth_mechanisms = plain") is an issue, security wise. as far as the service account (the one that is used to look up users) goes, I am using the default option (setting "dn" and "dnpass" variables), which I think is a simple bind. it is possible that it only works because Samba4 and dovecot run on the same machine. Pavel Herrmann > > I will try it again. > --- > > Mit freundlichem Gruß > > Carsten Laun-De Lellis > > Hauptstrasse 13 > D-67705 Trippstadt > > Phone: +49 6306 992140 > Fax: +49 6306 992142 > Mobile: +49 151 27530865 > email: carsten.delellis(a)delellis.net > > http://www.linkedin.com/in/carstenlaundelellis [1] > > Am 2013-07-01 11:24, schrieb Pavel Herrmann: > > Hi > > > > On Friday 28 June 2013 07:17:39 Carsten Laun-De Lellis wrote: > >> Hi all I am trying to set up an email Server with a Samba4 AD as user > >> Directory. Does anybody know a good how-to to setup user auth against AD > >> ? Or could anyone tell me how to do it? I am having an email Server up > >> and running with openldap but want to change to Samba4 AD, because of > >> the openchange Integration. I would appreciate any help on this topic.> > > I have an AD/Samba4 auth for dovecot, it works the same as any LDAP would > > (with authenticated lookups and auth_bind) > > > > I would suggest you try it, and ask if there are any issues. > > > > Pavel Herrmann > > Links: > ------ > [1] http://www.linkedin.com/in/carstenlaundelellis

2 1

[Dovecot] Server shutting down
by Simon B 01 Jul '13

01 Jul '13

Hi I recently moved to Debian Wheezy and installed dovecot from apt-get. root@mail:~# dpkg -l | grep dovecot ii dovecot-common 1:2.1.7-7 all Transitional package for dovecot ii dovecot-core 1:2.1.7-7 amd64 secure mail server that supports mbox, maildir, dbox and mdbox mailboxes ii dovecot-gssapi 1:2.1.7-7 amd64 GSSAPI authentication support for Dovecot ii dovecot-imapd 1:2.1.7-7 amd64 secure IMAP server that supports mbox, maildir, dbox and mdbox mailboxes ii dovecot-ldap 1:2.1.7-7 amd64 LDAP support for Dovecot ii dovecot-managesieved 1:2.1.7-7 amd64 secure ManageSieve server for Dovecot ii dovecot-mysql 1:2.1.7-7 amd64 MySQL support for Dovecot ii dovecot-pgsql 1:2.1.7-7 amd64 PostgreSQL support for Dovecot ii dovecot-pop3d 1:2.1.7-7 amd64 secure POP3 server that supports mbox, maildir, dbox and mdbox mailboxes ii dovecot-sieve 1:2.1.7-7 amd64 sieve filters support for Dovecot ii dovecot-sqlite 1:2.1.7-7 amd64 SQLite support for Dovecot Having previously been on 1.2 on Debian Squeeze the upgrade went flawlessly (and automatically, as I'd already placed the 1.2 dovecot.conf file before installing 2.1.7). And I've been very happy. However, yesterday the server just just shutdown. /var/log/mail.log.1:42890:Jun 30 17:27:04 mail dovecot: imap: Server shutting down. in=14 out=648 /var/log/mail.log.1:42891:Jun 30 17:27:04 mail dovecot: imap: Server shutting down. in=14 out=648 /var/log/mail.log.1:42893:Jun 30 17:27:04 mail dovecot: imap: Server shutting down. in=14 out=648 /var/log/mail.log.1:42895:Jun 30 17:27:34 mail dovecot: imap: Server shutting down. in=739 out=2081 /var/log/mail.log.1:42896:Jun 30 17:27:34 mail dovecot: imap: Server shutting down. in=1764 out=4027 There's no error|panic|warning|fatal messages in any of the logs. root@mail:~# grep -in dovecot /var/log/syslog | grep '(fatal|error|warning|panic)' root@mail:~# grep -in dovecot /var/log/messages | grep '(fatal|error|warning|panic)' root@mail:~# grep -in dovecot /var/log/daemon.log | grep '(fatal|error|warning|panic)' root@mail:~# grep -inr dovecot /var/log/mail* | grep '(fatal|error|warning|panic)' Although everything should log to mail.log if I set up rsyslog properly. The timestamp is not correlated to any of my cron jobs. How can I find out what caused this? Of course with Dovecot shut down Postfix refused to send mail as there was no auth service available. Simon

2 2

[Dovecot] Samba4 and user auth
by Carsten Laun-De Lellis 01 Jul '13

01 Jul '13

Hi all I am trying to set up an email Server with a Samba4 AD as user Directory. Does anybody know a good how-to to setup user auth against AD ? Or could anyone tell me how to do it? I am having an email Server up and running with openldap but want to change to Samba4 AD, because of the openchange Integration. I would appreciate any help on this topic. -- Mit freundlichem Gruß Carsten Laun-De Lellis Hauptstrasse 13 D-67705 Trippstadt Phone: +49 6306 992140 Fax: +49 6306 992142 Mobile: +49 151 27530865 email: carsten.delellis(a)delellis.net http://www.linkedin.com/in/carstenlaundelellis [1] Links: ------ [1] http://www.linkedin.com/in/carstenlaundelellis

2 1

[Dovecot] LIST command -- quoting of folder names
by Eric Abrahamsen 01 Jul '13

01 Jul '13

If I open an imap connection to a local maildir installation like so: /usr/lib/dovecot/imap -o mail_location=maildir:$HOME/.mail/account/:LAYOUT=fs And issue: c list "" * This is the result (this is a gmail account): * LIST (\HasChildren) "/" [Gmail] * LIST (\HasNoChildren) "/" [Gmail]/Spam * LIST (\HasNoChildren) "/" [Gmail]/Starred * LIST (\HasNoChildren) "/" [Gmail]/Trash * LIST (\HasNoChildren) "/" [Gmail]/Drafts * LIST (\HasNoChildren) "/" "[Gmail]/Sent Mail" * LIST (\HasNoChildren) "/" [Gmail]/Important * LIST (\HasNoChildren) "/" INBOX Only "[Gmail]/Sent Mail" is quoted. This is messing up gnus, my MUA, which truncates other folder names after the / separator. Examples of testing I've seen online have shown all folder names quoted, which would allow things to work correctly here. Is this something I can affect with local configuration, or is there some other solution? Would removing "LAYOUT=fs" affect this issue? Thanks! Eric Output of dovecot -n: # 2.2.4: /etc/dovecot/dovecot.conf # OS: Linux 3.9.7-1-ARCH i686 Arch Linux info_log_path = /var/log/dovecot-info.log log_path = /var/log/dovecot.log protocols = imap

2 2

Re: [Dovecot] Passdb + single sing on + NTLM + Thunderbird.
by Luis Binotto HOTMAIL 28 Jun '13

28 Jun '13

Hello I have configured Dovecot against AD, using outlook with NTLM and is working like a charm... Try the following this link... http://wiki.dovecot.org/HowTo/ActiveDirectoryNtlm I hope this will help you... -----Original Message----- From: dovecot-bounces(a)dovecot.org [mailto:dovecot-bounces@dovecot.org] On Behalf Of Maria Jose Yañez Dacosta Sent: viernes, 28 de junio de 2013 02:59 p.m. To: Dovecot Mailing List Subject: Re: [Dovecot] Passdb + single sing on + NTLM + Thunderbird. "Notificación Automática: Este mensaje ha sido recibido desde la Internet, no se garantiza la autenticidad del remitente. " Thank you very much for the reply :) I try with that. 2013/6/27 Stan Hoeppner <stan(a)hardwarefreak.com> > On 6/27/2013 7:48 AM, Maria Jose Yañez Dacosta wrote: > > Thanks!!. > > I have a little question, > > This page explains AUTH = GSSAPI but I'm interested in AUTH = NTLM. > > I want to get single sign on with clients in Windows against a > > Windows Active Directory. > > For NTLM should use another library like pam_krb5.so? > > Sorry for so many questions and thanks again > > http://wiki2.dovecot.org/Authentication/Mechanisms/Winbind > http://wiki2.dovecot.org/Authentication/Mechanisms/NTLM > > > 2013/6/26 Stan Hoeppner <stan(a)hardwarefreak.com> > > > >> On 6/26/2013 1:17 PM, Maria Jose Yañez Dacosta wrote: > >> > >>> I want to use single sign on from Windows with Thunderbird or > >>> Outlook > >> using > >>> NTLM. > >> > >> http://wiki2.dovecot.org/Authentication/Kerberos > > -- Maria José

1 0

Re: [Dovecot] Passdb + single sing on + NTLM + Thunderbird.
by Stan Hoeppner 28 Jun '13

28 Jun '13

On 6/27/2013 7:48 AM, Maria Jose Yañez Dacosta wrote: > Thanks!!. > I have a little question, > This page explains AUTH = GSSAPI but I'm interested in AUTH = NTLM. > I want to get single sign on with clients in Windows against a Windows > Active Directory. > For NTLM should use another library like pam_krb5.so? > Sorry for so many questions and thanks again http://wiki2.dovecot.org/Authentication/Mechanisms/Winbind http://wiki2.dovecot.org/Authentication/Mechanisms/NTLM > 2013/6/26 Stan Hoeppner <stan(a)hardwarefreak.com> > >> On 6/26/2013 1:17 PM, Maria Jose Yañez Dacosta wrote: >> >>> I want to use single sign on from Windows with Thunderbird or Outlook >> using >>> NTLM. >> >> http://wiki2.dovecot.org/Authentication/Kerberos

2 1

[Dovecot] Issues when compiling dovecot antispam on debian wheezy
by Joan 28 Jun '13

28 Jun '13

I've been trying to compile the latest version of dovecot-antispam, and it doesn't work, the latest patch fixes compilation for dovecot versions greater than 2.1.16 but the packaged version in debian is 2.1.7 and doesn't provide the DOVECOT_PREREQ macro. It seems there are some solutions: 1) Rollback to the last working version so it can be used on wheezy 2) Open a bug report in debian to see if they can backport the macro here ( http://www.dovecot.org/list/dovecot-cvs/2013-March/022903.html) 3) Use the packaged version from debian 4) .. What's your opinion?

2 1

[Dovecot] Zero-sized Maildir files and index corruption on over-quota
by Edgar Fuß 28 Jun '13

28 Jun '13

We are using Postfix as an MTA delivering via Dovecot's LDA (with sieve). We also use Dovecot as a POP/IMAP server. Mail storage is Maildir on NFS, indexes are stored locally. Quotas are FS quotas enforced by the NFS server. The Dovecot version is 1.2.11. Recently, for one user being over quota, some attempts to deliver mail bounced as expected while some others resulted in zero-sized Maildir files. I can verify zero-sized files in cur, while I cannot tell whether they were already zero-sized in new. However, since nobody except Dovecot is accessing the mail storage, it's either Dovecot's LDA or Dovecot's IMAP producing the zero-sized files. Logs show successful delivery (deliver: stored mail into mailbox 'INBOX') but ,,Corrupted index cache file /var/db/dovecot/indexes/XXX/.INBOX/dovecot.index.cache: Corrupted virtual size for uid=YYY: 0 != NNNN'' alerts on IMAP access. It looks like all mails which correctly got bounced are >64KB while those resulting in zero-sized files are <64KB (there is one >32KB). My first guess would be that maybe for large files, write() fails, while for small ones, close() fails or there is some buffering involved for large files.

3 10

[Dovecot] traffic statistics
by Martin Waschbüsch 28 Jun '13

28 Jun '13

Hi all, Does anyone know a good tool to gather traffic statistics for imap? And what level of logging would I need to set for dovecot to make it happen. Ideally this would be able to filter per domain, too. ;-) Thanks a lot, Martin -- Martin Waschbüsch IT-Dienstleistungen Lautensackstr. 16 80687 München Telefon: +49 89 57005708 Fax: +49 89 57868023 Mobil: +49 170 2189794 martin(a)waschbuesch.de http://martin.waschbuesch.de

4 5

[Dovecot] Dovecot NTLM Authentication
by Matthew Larsen 27 Jun '13

27 Jun '13

I'm working on getting authentication for Postfix smtpd clients working with Dovecot. I've got both plain text and GSSAPI mechanisms working. Winbind also works for shell access and the command line test work fine. If I can get NTLM authentication working I can use Postfix as a drop in replacement for a MS MTA I want get rid of. I'm hoping the community might be able to offer some insight into what I'm missing to get NTLM authentication working with Dovecot and Postfix. Something related to winbind I suspect. When I use the NTLM mechanism I get this " auth: Debug: client out: FAIL#0112" message in my maillog file. Nothing seems to show up in the winbind files for this. ---- log file from NTLM mechanism used ---- Jun 26 17:02:53 SBSMTPNV05 postfix/smtpd[2221]: connect from nvit01b.mydomain.com[10.20.2.0] Jun 26 17:02:53 SBSMTPNV05 dovecot: auth: Debug: client in: AUTH#0112#011NTLM#011service=smtp#011nologin#011lip=10.20.4.12#011rip=10.20.2.0#011resp=TlRM...A= Jun 26 17:02:53 SBSMTPNV05 dovecot: auth: Debug: client out: CONT#0112#011TlRM....A Jun 26 17:02:53 SBSMTPNV05 dovecot: auth: Debug: client in: CONT#0112#011TlRM....Q= Jun 26 17:02:53 SBSMTPNV05 dovecot: auth: winbind(?,10.20.2.0): user not authenticated: NT_STATUS_UNSUCCESSFUL Jun 26 17:02:55 SBSMTPNV05 postfix/smtpd[2221]: warning: nvit01b.mydomain.com[10.20.2.0]: SASL NTLM authentication failed: TlRM....A Jun 26 17:02:55 SBSMTPNV05 dovecot: auth: Debug: client out: FAIL#0112 Jun 26 17:02:59 SBSMTPNV05 postfix/smtpd[2221]: disconnect from nvit01b.mydomain.com[10.20.2.0] ------------------------------------------ ---- log file from GSSAPI mechanism used ----- Jun 26 17:02:08 SBSMTPNV05 postfix/smtpd[2221]: connect from nvit01b.mydomain.com[10.20.2.0] Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: auth client connected (pid=2221) Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: client in: AUTH#0111#011GSSAPI#011service=smtp#011nologin#011lip=10.20.4.12#011rip=10.20.2.0#011resp=YIIN.... Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: ....g== Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: gssapi(?,10.20.2.0): Obtaining credentials for smtp@ Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: gssapi(myusername(a)MYDOMAIN.COM,10.20.2.0): security context state completed. Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: client out: CONT#0111#011YIGVB....E= Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: client in: CONT#0111#011 Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: gssapi(myusername(a)MYDOMAIN.COM,10.20.2.0): Negotiated security layer Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: client out: CONT#0111#011BQQF/w....M= Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: client in: CONT#0111#011BQQE/w....u Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: client out: OK#0111#011user=myusername Jun 26 17:02:08 SBSMTPNV05 postfix/smtpd[2221]: AE80A80592: client=nvit01b.mydomain.com[10.20.2.0], sasl_method=GSSAPI, sasl_username=myusername Jun 26 17:02:08 SBSMTPNV05 postfix/cleanup[2219]: AE80A80592: message-id=<51CB8100.1010103(a)example.com> Jun 26 17:02:08 SBSMTPNV05 postfix/qmgr[1999]: AE80A80592: from=<matthew(a)example.com>, size=2178, nrcpt=1 (queue active) Jun 26 17:02:08 SBSMTPNV05 postfix/smtpd[2221]: disconnect from nvit01b.mydomain.com[10.20.2.0] Jun 26 17:02:09 SBSMTPNV05 postfix/smtp[2220]: AE80A80592: to=<utegrad(a)gmail.com>, relay=gmail-smtp-in.l.google.com[74.125.129.27]:25, delay=0.93, delays=0.09/0/0.15/0.69, dsn=2.0.0, status=sent (250 2.0.0 OK 1372291329 y9si419401pay.83 - gsmtp) Jun 26 17:02:09 SBSMTPNV05 postfix/qmgr[1999]: AE80A80592: removed ---------------------------------------------- ---- log file from plain text mechanism ----- Jun 26 17:01:08 SBSMTPNV05 postfix/smtpd[2209]: connect from nvit01b.mydomain.com[10.20.2.0] Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: auth client connected (pid=2209) Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=smtp#011nologin#011lip=10.20.4.12#011rip=10.20.2.0#011secured#011resp=AG1sYXJzZW4ASWRvbnR3YW50Mg== Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: pam(myusername,10.20.2.0): lookup service=dovecot Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: pam(myusername,10.20.2.0): #1/1 style=1 msg=Password: Jun 26 17:01:09 SBSMTPNV05 dovecot: auth: Debug: client out: OK#0111#011user=myusername Jun 26 17:01:09 SBSMTPNV05 postfix/smtpd[2209]: 82C3780592: client=nvit01b.mydomain.com[10.20.2.0], sasl_method=PLAIN, sasl_username=myusername Jun 26 17:01:09 SBSMTPNV05 postfix/cleanup[2219]: 82C3780592: message-id=<51CB80C4.6020107(a)example.com> Jun 26 17:01:09 SBSMTPNV05 postfix/qmgr[1999]: 82C3780592: from=<matthew(a)example.com>, size=2728, nrcpt=1 (queue active) Jun 26 17:01:09 SBSMTPNV05 postfix/smtpd[2209]: disconnect from nvit01b.mydomain.com[10.20.2.0] Jun 26 17:01:10 SBSMTPNV05 postfix/smtp[2220]: 82C3780592: to=<utegrad(a)gmail.com>, relay=gmail-smtp-in.l.google.com[74.125.129.27]:25, delay=1.3, delays=0.05/0.04/0.46/0.74, dsn=2.0.0, status=sent (250 2.0.0 OK 1372291270 sb1si125565pbb.232 - gsmtp) Jun 26 17:01:10 SBSMTPNV05 postfix/qmgr[1999]: 82C3780592: removed --------------------------------------------- Here's some of the supporting configuration information: ---- postconf -n ----------- alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix data_directory = /var/lib/postfix debug_peer_level = 1 debug_peer_list = html_directory = no inet_interfaces = all inet_protocols = ipv4 line_length_limit = 6144 mail_owner = postfix mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man mydestination = $myhostname, localhost.$mydomain, localhost myhostname = srvsbsmtp05.mydomain.com newaliases_path = /usr/bin/newaliases.postfix queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES sample_directory = /usr/share/doc/postfix-2.6.6/samples sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop smtpd_recipient_restrictions = permit_sasl_authenticated,reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous,noplaintext smtpd_sasl_type = dovecot unknown_local_recipient_reject_code = 550 ---------------------------------- ---- doveconf -n ---- # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.11.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_debug_passwords = yes auth_mechanisms = plain gssapi ntlm login auth_use_winbind = yes listen = * mbox_write_locks = fcntl passdb { driver = pam } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } ----------------------- ---- Samba configuration ---- [global] workgroup = MYDOMAIN realm = MYDOMAIN.COM server string = Samba Server Version %v security = ADS kerberos method = system keytab log file = /var/log/samba/log.%m max log size = 50 printcap name = /dev/null domain master = No template shell = /bin/bash winbind separator = + winbind use default domain = Yes idmap config * : range = 10000-50000 idmap config * : backend = tdb printing = bsd cups options = raw print command = lpr -r -P'%p' %s lpq command = lpq -P'%p' lprm command = lprm -P'%p' %j ------------------------------

2 3

[Dovecot] Changing location of vmail folder, mail started downloading again
by Manoj Singh 27 Jun '13

27 Jun '13

Dear Team, Due to some reasons I need to move vmail folder to another drive. I tried to do rsync & I was able to copy all the files and structure with same old date and time stamp. I made symbolic link and new mail flow was fine but problem is, all the mail boxes started downloading old mails again . Is there any way where I can copy location of the folder without this problem. Please find the below details. Dovecot Version =============== dovecot-pigeonhole-0.2.6-21.el6.x86_64 dovecot-2.0.18-1_134.el6.x86_64 dovecot-managesieve-0.2.6-21.el6.x86_64 # dovecot –n # 2.0.18: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.el6.x86_64 x86_64 CentOS release 6.3 (Final) auth_mechanisms = PLAIN LOGIN dict { acl = mysql:/etc/dovecot/dovecot-share-folder.conf expire = db:/var/lib/dovecot/expire/expire.db quotadict = mysql:/etc/dovecot/dovecot-used-quota.conf } last_valid_uid = 500 listen = * log_path = /var/log/dovecot.log mail_gid = 500 mail_location = maildir:/%Lh/Maildir/:INDEX=/%Lh/Maildir/ mail_uid = 500 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = prefix = separator = / type = private } namespace { list = children location = maildir:/%%Lh/Maildir/:INDEX=/%%Lh/Maildir/Shared/%%u prefix = Shared/%%u/ separator = / subscriptions = yes type = shared } passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { acl = vfile acl_shared_dict = proxy::acl auth_socket_path = /var/run/dovecot/auth-master autocreate = INBOX autocreate2 = Sent autocreate3 = Trash autocreate4 = Drafts autocreate5 = Junk autosubscribe = INBOX autosubscribe2 = Sent autosubscribe3 = Trash autosubscribe4 = Drafts autosubscribe5 = Junk expire = Trash 7 Trash/* 7 Junk 30 expire_dict = proxy::expire quota = dict:user::proxy::quotadict quota_rule = *:storage=1G quota_warning = storage=85%% quota-warning 85 %u quota_warning2 = storage=90%% quota-warning 90 %u quota_warning3 = storage=95%% quota-warning 95 %u sieve = /%Lh/sieve/dovecot.sieve sieve_dir = /%Lh/sieve sieve_global_dir = /var/vmail/sieve sieve_global_path = /var/vmail/sieve/dovecot.sieve } protocols = pop3 imap sieve service auth { unix_listener /var/spool/postfix/dovecot-auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { group = vmail mode = 0666 user = vmail } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } service dict { unix_listener dict { group = vmail mode = 0660 user = vmail } } service quota-warning { executable = script /usr/local/bin/dovecot-quota-warning.sh unix_listener quota-warning { group = vmail mode = 0660 user = vmail } } ssl = required ssl_cert = </etc/pki/tls/certs/iRedMail_CA.pem ssl_key = </etc/pki/tls/private/iRedMail.key userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } protocol lda { auth_socket_path = /var/run/dovecot/auth-master lda_mailbox_autocreate = yes log_path = /var/log/sieve.log mail_plugins = quota sieve autocreate postmaster_address = root } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_plugins = quota imap_quota autocreate } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } Thanks in advance, Manoj Singh.

1 0

[Dovecot] NTLM authentication mechanism with Postfix
by Matthew Larsen 27 Jun '13

27 Jun '13

I'm working on getting authentication for Postfix smtpd clients working with Dovecot. I've got both plain text and GSSAPI mechanisms working. Winbind also works for shell access and the command line test work fine. If I can get NTLM authentication working I can use Postfix as a drop in replacement for a MS MTA I want get rid of. I'm hoping the community might be able to offer some insight into what I'm missing to get NTLM authentication working with Dovecot and Postfix. Something related to winbind I suspect. When I use the NTLM mechanism I get this in my maillog file. Nothing seems to show up in the winbind files for this. ---- log file from NTLM mechanism used ---- Jun 26 17:02:53 SBSMTPNV05 postfix/smtpd[2221]: connect from nvit01b.mydomain.com[10.20.2.0] Jun 26 17:02:53 SBSMTPNV05 dovecot: auth: Debug: client in: AUTH#0112#011NTLM#011service=smtp#011nologin#011lip=10.20.4.12#011rip=10.20.2.0#011resp=TlRM...A= Jun 26 17:02:53 SBSMTPNV05 dovecot: auth: Debug: client out: CONT#0112#011TlRM....A Jun 26 17:02:53 SBSMTPNV05 dovecot: auth: Debug: client in: CONT#0112#011TlRM....Q= Jun 26 17:02:53 SBSMTPNV05 dovecot: auth: winbind(?,10.20.2.0): user not authenticated: NT_STATUS_UNSUCCESSFUL Jun 26 17:02:55 SBSMTPNV05 postfix/smtpd[2221]: warning: nvit01b.mydomain.com[10.20.2.0]: SASL NTLM authentication failed: TlRM....A Jun 26 17:02:55 SBSMTPNV05 dovecot: auth: Debug: client out: FAIL#0112 Jun 26 17:02:59 SBSMTPNV05 postfix/smtpd[2221]: disconnect from nvit01b.mydomain.com[10.20.2.0] ------------------------------------------ ---- log file from GSSAPI mechanism used ----- Jun 26 17:02:08 SBSMTPNV05 postfix/smtpd[2221]: connect from nvit01b.mydomain.com[10.20.2.0] Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: auth client connected (pid=2221) Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: client in: AUTH#0111#011GSSAPI#011service=smtp#011nologin#011lip=10.20.4.12#011rip=10.20.2.0#011resp=YIIN.... Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: ....g== Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: gssapi(?,10.20.2.0): Obtaining credentials for smtp@ Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: gssapi(myusername(a)MYDOMAIN.COM,10.20.2.0): security context state completed. Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: client out: CONT#0111#011YIGVB....E= Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: client in: CONT#0111#011 Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: gssapi(myusername(a)MYDOMAIN.COM,10.20.2.0): Negotiated security layer Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: client out: CONT#0111#011BQQF/w....M= Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: client in: CONT#0111#011BQQE/w....u Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: client out: OK#0111#011user=myusername Jun 26 17:02:08 SBSMTPNV05 postfix/smtpd[2221]: AE80A80592: client=nvit01b.mydomain.com[10.20.2.0], sasl_method=GSSAPI, sasl_username=myusername Jun 26 17:02:08 SBSMTPNV05 postfix/cleanup[2219]: AE80A80592: message-id=<51CB8100.1010103(a)example.com> Jun 26 17:02:08 SBSMTPNV05 postfix/qmgr[1999]: AE80A80592: from=<matthew(a)example.com>, size=2178, nrcpt=1 (queue active) Jun 26 17:02:08 SBSMTPNV05 postfix/smtpd[2221]: disconnect from nvit01b.mydomain.com[10.20.2.0] Jun 26 17:02:09 SBSMTPNV05 postfix/smtp[2220]: AE80A80592: to=<utegrad(a)gmail.com>, relay=gmail-smtp-in.l.google.com[74.125.129.27]:25, delay=0.93, delays=0.09/0/0.15/0.69, dsn=2.0.0, status=sent (250 2.0.0 OK 1372291329 y9si419401pay.83 - gsmtp) Jun 26 17:02:09 SBSMTPNV05 postfix/qmgr[1999]: AE80A80592: removed ---------------------------------------------- ---- log file from plain text mechanism ----- Jun 26 17:01:08 SBSMTPNV05 postfix/smtpd[2209]: connect from nvit01b.mydomain.com[10.20.2.0] Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: auth client connected (pid=2209) Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=smtp#011nologin#011lip=10.20.4.12#011rip=10.20.2.0#011secured#011resp=AG1sYXJzZW4ASWRvbnR3YW50Mg== Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: pam(myusername,10.20.2.0): lookup service=dovecot Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: pam(myusername,10.20.2.0): #1/1 style=1 msg=Password: Jun 26 17:01:09 SBSMTPNV05 dovecot: auth: Debug: client out: OK#0111#011user=myusername Jun 26 17:01:09 SBSMTPNV05 postfix/smtpd[2209]: 82C3780592: client=nvit01b.mydomain.com[10.20.2.0], sasl_method=PLAIN, sasl_username=myusername Jun 26 17:01:09 SBSMTPNV05 postfix/cleanup[2219]: 82C3780592: message-id=<51CB80C4.6020107(a)example.com> Jun 26 17:01:09 SBSMTPNV05 postfix/qmgr[1999]: 82C3780592: from=<matthew(a)example.com>, size=2728, nrcpt=1 (queue active) Jun 26 17:01:09 SBSMTPNV05 postfix/smtpd[2209]: disconnect from nvit01b.mydomain.com[10.20.2.0] Jun 26 17:01:10 SBSMTPNV05 postfix/smtp[2220]: 82C3780592: to=<utegrad(a)gmail.com>, relay=gmail-smtp-in.l.google.com[74.125.129.27]:25, delay=1.3, delays=0.05/0.04/0.46/0.74, dsn=2.0.0, status=sent (250 2.0.0 OK 1372291270 sb1si125565pbb.232 - gsmtp) Jun 26 17:01:10 SBSMTPNV05 postfix/qmgr[1999]: 82C3780592: removed --------------------------------------------- Here's some of the supporting configuration information: ---- postconf -n ----------- alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix data_directory = /var/lib/postfix debug_peer_level = 1 debug_peer_list = html_directory = no inet_interfaces = all inet_protocols = ipv4 line_length_limit = 6144 mail_owner = postfix mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man mydestination = $myhostname, localhost.$mydomain, localhost myhostname = srvsbsmtp05.mydomain.com newaliases_path = /usr/bin/newaliases.postfix queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES sample_directory = /usr/share/doc/postfix-2.6.6/samples sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop smtpd_recipient_restrictions = permit_sasl_authenticated,reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous,noplaintext smtpd_sasl_type = dovecot unknown_local_recipient_reject_code = 550 ---------------------------------- ---- doveconf -n ---- # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.11.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_debug_passwords = yes auth_mechanisms = plain gssapi ntlm login auth_use_winbind = yes listen = * mbox_write_locks = fcntl passdb { driver = pam } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } ----------------------- ---- Samba configuration ---- [global] workgroup = MYDOMAIN realm = MYDOMAIN.COM server string = Samba Server Version %v security = ADS kerberos method = system keytab log file = /var/log/samba/log.%m max log size = 50 printcap name = /dev/null domain master = No template shell = /bin/bash winbind separator = + winbind use default domain = Yes idmap config * : range = 10000-50000 idmap config * : backend = tdb printing = bsd cups options = raw print command = lpr -r -P'%p' %s lpq command = lpq -P'%p' lprm command = lprm -P'%p' %j ------------------------------

1 0

[Dovecot] Passdb + single sing on + NTLM + Thunderbird.
by Maria Jose Yañez Dacosta 26 Jun '13

26 Jun '13

Hi!, I want to use single sign on from Windows with Thunderbird or Outlook using NTLM. Which should be placed in the configuration file for passdb?. Currently I have: passdb { driver = pam } But it generates the following error when trying to check mail: dovecot: auth: pam (pepe, 190 108 101 120): unknown user If I remove imap passdb just does not work and I add at the end of this mail the log. Thank :) ----------------( dovecot -n )------------------------------ # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.6.2.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_debug = yes auth_mechanisms = plain login ntlm auth_use_winbind = yes auth_username_format = %n disable_plaintext_auth = no mbox_write_locks = fcntl passdb { driver = pam } protocols = imap pop3 ssl = no userdb { args = uid=10000 gid=10000 home=/mail/%d/%n driver = static } ----------------( wbinfo -t )------------------------------ checking the trust secret for domain FNR via RPC calls succeeded ----------------( wbinfo -u )------------------------------ list all users ----------------( wbinfo -g )------------------------------ list all groups ------------( /usr/bin/ntlm_auth --username=pepe )--------- password: NT_STATUS_OK: Success (0x0) ------------( tail -n 500 -f /var/log/maillog )------------- Jun 26 14:58:41 prueba-mail dovecot: master: Dovecot v2.0.9 starting up (core dumps disabled) Jun 26 14:59:00 prueba-mail dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jun 26 14:59:00 prueba-mail dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Jun 26 14:59:00 prueba-mail dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Jun 26 14:59:00 prueba-mail dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Jun 26 14:59:00 prueba-mail dovecot: auth: Fatal: No passdbs specified in configuration file. LOGIN mechanism needs one Jun 26 14:59:00 prueba-mail dovecot: master: Error: service(auth): command startup failed, throttling Jun 26 14:59:35 prueba-mail dovecot: imap-login: Error: Timeout waiting for handshake from auth server. my pid=1734, input bytes=0 Jun 26 15:00:00 prueba-mail dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jun 26 15:00:00 prueba-mail dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Jun 26 15:00:00 prueba-mail dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Jun 26 15:00:00 prueba-mail dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Jun 26 15:00:00 prueba-mail dovecot: auth: Fatal: No passdbs specified in configuration file. LOGIN mechanism needs one Jun 26 15:00:00 prueba-mail dovecot: master: Error: service(auth): command startup failed, throttling Jun 26 15:00:30 prueba-mail dovecot: imap-login: Error: Timeout waiting for handshake from auth server. my pid=1734, input bytes=0 -- Maria José

2 1

[Dovecot] Dovecot-2.2.4 compiled error‏
by LauJacky 26 Jun '13

26 Jun '13

I compiled dovecot error, google did not find a solution. and I don't understand the code, how can i do Compiled dovecot-2.2.4 in "Linux OLinux 2.6.32-200.13.1.el5uek #1 SMP Wed Jul 27 21:02:33 EDT 2011 x86_64 x86_64 x86_64 GNU/Linux "environment variables : #CPPFLAGS="-I/usr/include/openssl" LDFLAGS="-L/usr/lib/openssl" ./configure --with-ldap #make........gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-settings -I../../src/lib-master -DPKG_RUNDIR=\""/usr/local/var/run/dovecot"\" -DPKG_STATEDIR=\""/usr/local/var/lib/dovecot"\" -DPKG_LIBEXECDIR=\""/usr/local/libexec/dovecot"\" -DBINDIR=\""/usr/local/bin"\" -I/usr/include/openssl -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -I/usr/kerberos/include -MT capabilities-posix.o -MD -MP -MF .deps/capabilities-posix.Tpo -c -o capabilities-posix.o capabilities-posix.cIn file included from /usr/include/sys/capability.h:34, from capabilities-posix.c:8:/usr/include/linux/capability.h:73: error: expected specifier-qualifier-list before â€˜__le32â€™make[3]: *** [capabilities-posix.o] Error 1make[3]: Leaving directory `/home/ldf/dovecot-2.2.4/src/master'make[2]: *** [all-recursive] Error 1make[2]: Leaving directory `/home/ldf/dovecot-2.2.4/src'make[1]: *** [all-recursive] Error 1make[1]: Leaving directory `/home/ldf/dovecot-2.2.4'make: *** [all] Error 2 Best regardjacky

1 1