- dovecot - dovecot.org

[Dovecot] BUG: mishandling of username if it's a keyword?
by Jack Bates 14 Dec '12

14 Dec '12

Dec 14 14:33:03 test2 dovecot: auth: Debug: auth client connected (pid=24143) Dec 14 14:33:14 test2 dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=pop3#011secured#011session=D6dl6dDQdAAAAAAAAAAAAAAAAAAAAAAB#011lip=::1#011rip=::1#011lport=110#011rport=38004#011resp=<hidden> Dec 14 14:33:14 test2 dovecot: auth: Debug: static(home,::1,<D6dl6dDQdAAAAAAAAAAAAAAAAAAAAAAB>): lookup Dec 14 14:33:14 test2 dovecot: auth: Debug: client passdb out: OK#0111#011user=home Dec 14 14:33:14 test2 dovecot: auth: Debug: master in: REQUEST#0112033451009#01124143#0111#011243997dcca92c2dc1d1e401c78b4ea4f Dec 14 14:33:14 test2 dovecot: auth: Debug: master userdb out: USER#0112033451009#011uid=503#011gid=503#011home=/nfs/maildir/vmail/home#011mail_location=maildir:~/Maildir Dec 14 14:33:14 test2 dovecot: pop3-login: Login: user=<home>, method=PLAIN, rip=::1, lip=::1, mpid=24145, secured, session=<D6dl6dDQdAAAAAAAAAAAAAAAAAAAAAAB> Dec 14 14:33:14 test2 dovecot: pop3: Debug: Added userdb setting: mail_location=maildir:~/Maildir Dec 14 14:33:14 test2 dovecot: pop3(uid=503): Error: user uid=503: Couldn't drop privileges: User is missing UID (see mail_uid setting) Dec 14 14:33:14 test2 dovecot: pop3(uid=503): Error: Internal error occurred. Refer to server log for more information. compared to: Dec 14 14:37:25 test2 dovecot: pop3-login: Login: user=<home2>, method=PLAIN, rip=::1, lip=::1, mpid=24190, secured, session=<5Zdb+NDQdQAAAAAAAAAAAAAAAAAAAAAB> Dec 14 14:37:25 test2 dovecot: pop3: Debug: Added userdb setting: mail_location=maildir:~/Maildir Dec 14 14:37:25 test2 dovecot: pop3(home2): Debug: Effective uid=503, gid=503, home=/nfs/maildir/vmail/home2 userdb { args = uid=vmail gid=vmail home=/nfs/maildir/vmail/%u mail_location=maildir:~/Maildir driver = static } This was tested on a static passdb/userdb on a test server as well as production. version 2.1.10. When I have time, I'll dig into it myself after an upgrade to 2.1.12. Jack

2 5

[Dovecot] can't connect to server
by Bernics Gábor | Penta Unió Zrt. 14 Dec '12

14 Dec '12

Hello, I can't connect to a dovecot server (Debian 6.0, default version of Dovecot), I started the daemon but I didn't see errors on console. dovecot-lda works. logs: 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: Loading modules from directory: /usr/lib/dovecot/modules/lda 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: Module loaded: /usr/lib/dovecot/modules/lda/lib10_quota_plugin.so 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: Module loaded: /usr/lib/dovecot/modules/lda/lib90_sieve_plugin.so 2012-12-14 12:47:10 auth(default): Info: master in: USER<------>1<----->bernics.gabor(a)penta.hu<>service=deliver 2012-12-14 12:47:10 auth-worker(default): Info: sql(bernics.gabor(a)penta.hu): query: SELECT email AS user, password FROM users WHERE email 2012-12-14 12:47:10 auth(default): Info: password(bernics.gabor(a)penta.hu): Credentials: 54617661737a69737a656c 2012-12-14 12:47:10 auth(default): Info: master out: USER<----->1<----->bernics.gabor(a)penta.hu 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: Quota root: name=user backend=dict args=:proxy::quotadict 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: dict quota: user=bernics.gabor(a)penta.hu, uri=proxy::quotadict, noenforcing=0 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: maildir: data=/home/vmail/mail/penta.hu/bernics.gabor(a)penta.hu/Maildir 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: maildir++: root=/home/vmail/mail/penta.hu/bernics.gabor(a)penta.hu/Maildir, inde 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: dict quota: user=bernics.gabor(a)penta.hu, uri=proxy::quotadict, noenforcing=0 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: sieve: user's script path /home/vmail/penta.hu/bernics.gabor(a)penta.hu/Maildir/ 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: sieve: using sieve path for user's script: /etc/dovecot/dovecot.sieve 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: sieve: executed before user's script(1): /etc/dovecot/dovecot.sieve.before 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: sieve: opening script /etc/dovecot/dovecot.sieve.before 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: sieve: opening script /etc/dovecot/dovecot.sieve 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: Namespace : Using permissions from /home/vmail/mail/penta.hu/bernics.gabor@pen 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: sieve: msgid=<20121214114708.5BD7917402D(a)mail2.penta.hu>: stored mail into mai config: http://pastebin.com/4imMFZSi Best Regards, Gabor

2 1

[Dovecot] Copying just the folders to new Dovecot server?
by Bjørn T Johansen 14 Dec '12

14 Dec '12

I am setting up a new Dovecot server and I want to start from scratch, i.e. with an empty mailbox. But I want to have the same folders in my new mailbox that I have in my old. Is there a way to create these folders without manually creating one by one? Regards, BTJ -- ----------------------------------------------------------------------------------------------- Bjørn T Johansen btj(a)havleik.no ----------------------------------------------------------------------------------------------- Someone wrote: "I understand that if you play a Windows CD backwards you hear strange Satanic messages" To which someone replied: "It's even worse than that; play it forwards and it installs Windows" ----------------------------------------------------------------------------------------------- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

2 2

[Dovecot] Dovecote Warnings
by anarchos78 14 Dec '12

14 Dec '12

Greetings, I have setup Postfix/Dovecote on Ubuntu 12.04 (apt-get install mail-stack-delivery). While everything is working fine in the mail server I have niticed the following errors: srv dovecot: config: Warning: NOTE: You can get a new clean config file with: doveconf -n > dovecot-new.conf: 2 Time(s) srv dovecot: config: Warning: Obsolete setting in /etc/dovecot/conf.d/01-mail-stack-delivery.conf:13: listen=..:port has been replaced by service { inet_listener { port } }: 2 Time(s) srv dovecot: config: Warning: Obsolete setting in /etc/dovecot/conf.d/01-mail-stack-delivery.conf:13: protocol { listen } has been replaced by service { inet_listener { address } }: 2 Time(s) srv dovecot: config: Warning: Obsolete setting in /etc/dovecot/conf.d/01-mail-stack-delivery.conf:14: protocol { ssl_listen } has been replaced by service { inet_listener { address } }: 2 Time(s) srv dovecot: config: Warning: Obsolete setting in /etc/dovecot/conf.d/01-mail-stack-delivery.conf:14: ssl_listen=..:port has been replaced by service { inet_listener { port } }: 2 Time(s) srv dovecot: config: Warning: Obsolete setting in /etc/dovecot/conf.d/01-mail-stack-delivery.conf:21: listen=..:port has been replaced by service { inet_listener { port } }: 2 Time(s) srv dovecot: config: Warning: Obsolete setting in /etc/dovecot/conf.d/01-mail-stack-delivery.conf:21: protocol { listen } has been replaced by service { inet_listener { address } }: 2 Time(s) srv dovecot: config: Warning: Obsolete setting in /etc/dovecot/conf.d/01-mail-stack-delivery.conf:22: protocol { ssl_listen } has been replaced by service { inet_listener { address } }: 2 Time(s) *The "01-mail-stack-delivery.conf" file looks like this:* # Some general options protocols = imap pop3 sieve disable_plaintext_auth = yes ssl = yes ssl_cert = </etc/ssl/certs/ssl-mail.pem ssl_key = </etc/ssl/private/ssl-mail.key ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM mail_location = maildir:~/Maildir auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ # IMAP configuration protocol imap { listen = *:143 ssl_listen = *:993 mail_max_userip_connections = 10 imap_client_workarounds = delay-newmail } # POP3 configuration protocol pop3 { listen = *:110 ssl_listen = *:995 mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } # LDA configuration protocol lda { postmaster_address = postmaster mail_plugins = sieve quota_full_tempfail = yes deliver_log_format = msgid=%m: %$ rejection_reason = Your message to <%t> was automatically rejected:%n%r } # Plugins configuration plugin { sieve=~/.dovecot.sieve sieve_dir=~/sieve } # Authentication configuration auth_mechanisms = plain login service auth { # Postfix smtp-auth unix_listener /var/spool/postfix/private/dovecot-auth { mode = 0660 user = postfix group = postfix } } What is going wrong with Dovecote. I am a newcomer and i need little help. Many thanks, Tom Greece -- View this message in context: http://dovecot.2317879.n4.nabble.com/Dovecote-Warnings-tp39221.html Sent from the Dovecot mailing list archive at Nabble.com.

2 3

[Dovecot] More detail re dovecot-uidlist and -uidvalidity files
by Dale Gallagher 13 Dec '12

13 Dec '12

Regarding the dovecot-uidlist header (first line) - I've tried to search for and figure out what exactly is meant by the "mailbox global uid" and once I do, how to manually generate the 128 bit hex variation of it? Could someone elaborate on this, please. How would omitting the global uid field, beginning with G, affect remote clients' syncing of mail? Is this field mandatory? Would "3 V$uid_validity N$next_uid" be sufficient to ensure that clients don't re-download everything? I also see that Dovecot's dovecot-uidvalidity is of the form 4df8a4e2, whereas the IMAP syncing utility which I'm using (isync) uses an integer. I'd appreciate it if someone could elaborate on what Dovecot uses and whether I need to convert one to the other (ie. after syncing with isync, do I need to convert it to work with Dovecot? Thanks.

2 1

Re: [Dovecot] number of imap connection
by Joseph Tam 13 Dec '12

13 Dec '12

<klimenko.n(a)theitidea.ru> writes: > how to calculate the expected number of imap processes? Set your mail_max_userip_connections to a large value (~20) and run "doveadm who" periodically to look at your user's actual connection counts. > how many imap processes must be used for each user? > i have 6-7 connection for each one user > is it normal behavior? It's typical. Some popular mail readers open about 5, some more, some less. I set my mail_max_userip_connections at 12 even though there are some users who regularly bump up against this. They don't seem to notice -- dovecot probably bumps off the least recently used connection and their mail reader reconnects if it needs to open that mailbox again. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] number of imap connection
by Николай Клименко 13 Dec '12

13 Dec '12

Hi to all. how to calculate the expected number of imap processes? how many imap processes must be used for each user? i have 6-7 connection for each one user is it normal behavior? thx.

3 2

[Dovecot] rare ssl issue
by Eduardo Casarero 12 Dec '12

12 Dec '12

I'am having a rare situation with ssl connections. I can connect to 993/995 but the connection never starts. >From the client side i test with: $ openssl s_client -connect example.com:993 CONNECTED(00000003) and stays like that... waiting. In the other side i see in dovecot logs: Disconnected: Inactivity (no auth attempts): rip=x.x.x.x, lip=x.x.x.x, TLS handshaking this happens from some networks only, so i think that mi isp (where the server is hosted) is doing some kind of shaping. But if i try to connect to port 465 for example, or 443 it works like a charm. i am talking to my isp, but i thougth that someone may have a hint or any comment that could help. regards, eduardo.

1 0

[Dovecot] [vnd.dovecot.pipe] - timeout settings
by kjonca＠o2.pl 12 Dec '12

12 Dec '12

In install file we can read that: sieve_<extension>_exec_timeout = 10s set timeout for executing program. But regardless of setting this value (say sieve_pipe_exec_timeout=86000) I got: --8<---------------cut here---------------start------------->8--- 2012-12-10 20:55:33 LDA(kjonca): Debug: sieve: action pipe: running program: maildrop.sh 2012-12-10 20:55:43 LDA(kjonca): Debug: program `/home/kjonca/sieve/bin/maildrop.sh' execution timed out: sending TERM signal --8<---------------cut here---------------end--------------->8--- What am I doing wrong? KJ -- http://modnebzdury.wordpress.com/2009/10/01/niewiarygodny-list-prof-majewsk… When does summertime come to Minnesota, you ask? Well, last year, I think it was a Tuesday.

2 1

[Dovecot] dovcot+offlineimap+gmail: INBOX empty, mail doubled
by Uwe Brauer 11 Dec '12

11 Dec '12

Hello I have used for years offlineimap-6.2.0 dovecot-imapd 1:1.2.9 in Kubuntu 10.04 Together with a imap server of my university. Yesterday we switched to google, which I know, is not a real imap server. I have 2 problems and the first I think has to do with either an old version of offlineimap or a bad configuration file: - All folders are downloaded+ Gmail[All Mail] so doubling my mail. - My INBOX folder is empty, however this is the only folder for which offlinemap gives the following warning: Syncing INBOX: Gmail -> MappedIMAP WARNING: UID validity problem for folder INBOX (repo UniLocal) (saved 1309334376; got 1355232397); skipping it So maybe this is also a offlineimap fault. In any case I have googled around and found out that I am not the only person suffering this problem. I have attached my configuration file in the hope that may be somebody could give me a hint. Thanks in advance Uwe Brauer --8<------------------------schnipp------------------------->8--- [general] accounts = Uni ui = Noninteractive.Basic maxsyncaccounts = 1 [Account Uni] localrepository = UniLocal remoterepository = UniRemote [Repository UniLocal] type = IMAP ssl = no remotehost = localhost remoteuser = myuser remotepass = mypasswd maxconnections = 2 [Repository UniRemote] type = Gmail # ssl =no ssl =yes #remotehost = ucimap.ucm.es remotehost = imap.gmail.com remoteuser = myuser remotepass = mypasswd # nametrans = lambda foldername: re.sub ('^\[gmail\]', 'bak', # re.sub ('sent_mail', 'sent', # re.sub ('starred', 'flagged', # re.sub (' ', '_', foldername.lower())))) folderfilter = lambda foldername: foldername in ['INBOX'] idlefolders = ['INBOX'] folderfilter = lambda foldername: foldername not in '[Gmail]/All Mail' sslcacertfile = /etc/ssl/certs/ca-certificates.crt maxconnections = 1 realdelete = yes # Don't sync shared folders # folderfilter = lambda foldername: not re.search('Shared Folders', foldername) # automatic stuff maxsyncaccounts = 1 quick = 10 autorefresh = 5 keepalive = 60 holdconnectionopen = yes # This will suppress anything but errors ui = quiet --8<------------------------schnapp------------------------->8--- --8<------------------------schnipp------------------------->8--- version_ignore=yes first_valid_uid = 1 log_path = /var/log/dovecot.log ssl_cert_file = /etc/ssl/certs/dovecot.pem ssl_key_file = /etc/ssl/private/dovecot.pem # mail_location = maildir:/var/spool/mail/%u # not sure about the following mail_location = maildir:/var/spool/mail/%u:INBOX=/var/spool/mail/%u maildir_copy_with_hardlinks = yes protocol imap { listen = 127.0.0.1:143 ssl_listen = 127.0.0.1:943 } auth default { mechanisms = plain # defines users/passwords passdb passwd-file { args = /etc/dovecot/passwd } userdb static { args = uid=mail gid=mail home=/var/spool/mail/%u } } --8<------------------------schnapp------------------------->8---

1 0

Re: [Dovecot] Automatically Cleaning Kerberos Credential Cache Files
by Maura Dailey 11 Dec '12

11 Dec '12

On 12/10/2012 05:31 PM, Ben Morrow wrote: > At 3PM -0500 on 10/12/12 you (Maura Dailey) wrote: >> I'm in a situation here at work where I'm trying to support a mixed >> network of OS X and RHEL desktop machines with a Postfix/Dovecot >> combination. >> - user account information is stored in LDAP >> - user credentials are in MIT Kerberos >> - server is running RHEL 6/Dovecot 2.0.9/Postfix 2.6.6 >> >> I am currently using the PAM passdb module to authenticate my users (I >> began to have trouble with using GSSAPI directly). After I implemented >> it, a few weeks later, I noticed that some users were no longer getting >> their mail if they hadn't logged in during the past day. Postfix's mailq >> showed that hundreds of messages were backing up in the queue. I >> eventually tracked it down to leftover Kerberos credential cache files >> (/tmp/krb5cc_????) sitting in /tmp on the mail server. The presence of >> expired credential files was preventing Postfix from delivering mail to >> those users' mail spools. If I delete the credential files manually, >> Postfix immediately delivers the queued emails. > This is rather odd. Is krb5-authenticated NFS involved here, or does > Postfix's delivery make any other use of Kerberos? The only other thing > I can think of is that so many expired ccaches are accumulating that the > user goes over their inode quota. Each user has one credential cache file in /tmp on the mail server after logging into Dovecot. We aren't using randomized names, so everything is in the standard format /tmp/krb5cc_uid. We do use KRB5 authenticated (and encrypted) NFS, but we don't deliver mail to home directories. Since all users are "real" users, and our office size is small, everyone has a mail spool directory on the mail server. Postfix is configured to use Dovecot for Kerberos. The relevant lines in its /etc/postfix/main.cf are as follows: smtpd_sasl_type = dovecot smtpd_sasl_path = private/auth smtpd_sasl_auth_enable = yes smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated, reject smtpd_sasl_security_options = noanonymous >> Currently, I have a cron job deleting the files manually every night. >> Obviously, this is a cruddy solution. > Well, I don't know about that: obviously, it would be a good idea to > work out what's going on here, in case it causes anything else to go > wrong, but a cronjob clearing out /tmp is a good idea in any case. Fair enough. And of course, I get a cache file every time I use sudo or log in through a GUI. Those aren't cleaned up either! Maybe I should be deleting credential cache files on all the machines every night. Those cache files have never given me a problem, though. >> I have Dovecot configured on a >> RHEL 6 box. The Pam stack on a RHEL 6 machine uses sssd (pam_sss.so) for >> authentication with Kerberos, not pam_krb5.so. I'm trying to track down >> which piece of the puzzle is responsible for cleaning up leftover >> credential caches. Is there a configuration option I can pass to >> Dovecot's passdb directly to clean up these cache files? > There are two relevant Dovecot settings: passing setcred=yes to the pam > passdb will make Dovecot call pam_setcred, and passing session=yes will > make it open and immediately close a PAM session. (Probably it ought to > wait until the IMAP user logs out to close the session, but currently it > can't do that because of the way the passdb lookups are done.) Changing > either of these may have an effect, depending on when exactly your PAM > module creates and destroys ccaches. I've tried session=yes by itself, but I don't think I've tried it with setcred=yes. I'll throw it in there and give it a try after I send this email. >> Do others >> generally have more success using a custom PAM stack with pam_krb5.so >> instead of pam_sss.so? > Well, I don't use RH (I use FreeBSD), but I use and would recommend Russ > Allbery's pam_krb5.so, which may or may not be the same as the normal > pam_krb5.so provided by your system. It has options to control whether > and where ccaches are created; assuming Dovecot doesn't need krb5 creds > (say, for NFS), you would probably be better off telling it not to > create a permanent ccache at all. > > http://www.eyrie.org/~eagle/software/pam-krb5/ I haven't had to configure pam_krb5.so directly before (we use the Red Hat/Fedora configured default, pam_sss.so, which claims to be a one stop shop for LDAP/Kerberos/NIS,etc.), but it does seem to have more options. We certainly don't need credential caches to stick around for email users. All the mail spools are stored on locally mounted storage on the mail server. >> Poring over sssd's configuration options didn't >> reveal anything useful. I'm still not sure why Postfix even cares if >> there are expired credential cache files in /tmp at all. >> >> I'm back to trying GSSAPI directly again as well in the meantime on a >> few test clients. When I used that in the past, users were getting >> issued duplicate Kerberos tickets and users were forced to log into the >> mail server directly using SSH after a day in order to get their mail to >> work (seemingly a related issue). If I get those same errors again, I'll >> start another thread. > This certainly does all sound related. What are the ccache files called: > are they just /tmp/krb5cc_UID or is there a random portion as well? Are > they being created with the correct permissions, and are there any > security policies (SELinux or ACLs of some kind) set up which might > interfere with their creation or destruction? No random portion (the only application we have configured with random ccache names is SSH), just the usual /tmp/krb5cc_uid. Permissions appear correct, they belong to the appropriate user and group accounts. The SELinux permissions are set to: system_u:object_r:user_tmp_t:s0. This is different from the machine's credential cache (system_u:object_r:gssd_tmp_t:s0), but I've disabled and re-enabled SELinux during different parts of my testing and didn't notice any errors. Using GSSAPI directly doesn't create any cached credential files on the server. However, I just verified that I'm still sporadically getting the duplicate tickets (two lines for imap/hostname.server.com(a)SERVER.COM, with identical expiration dates). It comes and goes. I have a few users testing it for me, and they'll let me know if their logins break tomorrow like they have in the past once the normal log in period elapses. Since the "fix" for that problem is to log into the mail server, I have a hard time testing for the problem myself (being logged into the mail server nearly continuously just now). > What happens if you log in as an ordinary user (preferably using the > same PAM stack as Dovecot uses), use klist to find the ccache name and > 'ls -i' to find its inode number, then manually kinit again? Does the > kinit succeed, and does the new ccache have a different inode number > from before? Does the ccache file get removed when you log out? I've noticed that the ccache files for regular users do not get deleted when they log out. On another user's workstation, I found a ccache file for my account from a week ago (my current session was using a randomly generated SSH ccache file). I ran a command with sudo to force it to reauthenticate with pam_sss, and the timestamp on the ccache file was updated and the inode changed. My best guess is that pam_sss.so just doesn't do ccache cleanup. > Ben > Thanks for taking a look, I appreciate all the suggestions. This problem's been driving me up a wall for weeks now. I only just managed to narrow down the cause in the last few days. If I can't get a fix working in Dovecot, I'll try tackling it from a different perspective. I understand why Dovecot might not be cleaning up credential files (especially if it's just calling PAM normally), but I definitely do not understand why Postfix is behaving the way it does. If I can just get GSSAPI to work, I could probably bypass the problem as well. - Maura Dailey maura(a)eclipse.ncsc.mil

2 2

[Dovecot] Switch from MySQL/CourierMail to MySQL/Dovecot
by Robert Moskowitz 11 Dec '12

11 Dec '12

Hello, new here. I am a Centos/Fedora user, and for the past 3 years have been running my mail server using Postfix/MySQL/CourierMail/Squirrelmail on Fedora. The current incantation of the tutorial is at: http://www.howtoforge.com/virtual-users-and-domains-with-postfix-courier-my… Well it is time to rebuild my mailserver; this time on Centos 6.3. My goal is to use supplied rpms, not to build my own (and rebuild everytime there is an important update). So I am pulling quotas which has been a pain anyway, and I am investigating using Dovecot in place of CourierMail. In Centos 6.3, the version of Dovecot is: 2.0.9-2 I am looking for a tutorial to assist in the setup, as I am nowhere an expert on any of this (I am a communications security expert in the IETF and IEEE 802). There are a couple items that I have come to depend on in my current setup that are musts in anything new: Virtual user/domain That is, not only virtual domains, but also users defined by domain. So in the MySQL user table, the email value is set to user@domain. Thus a user can receive/send mail from multiple domains with the same addr and only those domains defined for the user in the user table. Obviously there is no coupling of Linux user accounts and email accounts. CourierMail is storing mail under /home/vmail/domain/user/... Encrypted passwords The passwords in the user table in MySQL are encrypted. This will be used to auth the user for POPing or IMAPing and sending their mail. I have encountered a few tutorials where it seems like passwords are stored in the clear? Anyway, not much else! Well as far as the user interface is concerned. Postfix with clamav and spamassassin and maybe one or two extras. And SquirrelMail for Webmail. A better gui than phpMyAdmin for maintaining the tables would be nice, but I don't have a lot of users, so it works well enough. Can someone point me to a tutorial best suited to my needs? Also any firewall rules, as I don't want to turn off iptables (and ip6tables) and any SELinux policy rules to add. Oh, and IPv6 will be a must in the near future, so anything needed to ensure IPv6 working right as well. Thanks

2 3

[Dovecot] Automatically Cleaning Kerberos Credential Cache Files
by Maura Dailey 11 Dec '12

11 Dec '12

I'm in a situation here at work where I'm trying to support a mixed network of OS X and RHEL desktop machines with a Postfix/Dovecot combination. - user account information is stored in LDAP - user credentials are in MIT Kerberos - server is running RHEL 6/Dovecot 2.0.9/Postfix 2.6.6 I am currently using the PAM passdb module to authenticate my users (I began to have trouble with using GSSAPI directly). After I implemented it, a few weeks later, I noticed that some users were no longer getting their mail if they hadn't logged in during the past day. Postfix's mailq showed that hundreds of messages were backing up in the queue. I eventually tracked it down to leftover Kerberos credential cache files (/tmp/krb5cc_????) sitting in /tmp on the mail server. The presence of expired credential files was preventing Postfix from delivering mail to those users' mail spools. If I delete the credential files manually, Postfix immediately delivers the queued emails. Currently, I have a cron job deleting the files manually every night. Obviously, this is a cruddy solution. I have Dovecot configured on a RHEL 6 box. The Pam stack on a RHEL 6 machine uses sssd (pam_sss.so) for authentication with Kerberos, not pam_krb5.so. I'm trying to track down which piece of the puzzle is responsible for cleaning up leftover credential caches. Is there a configuration option I can pass to Dovecot's passdb directly to clean up these cache files? Do others generally have more success using a custom PAM stack with pam_krb5.so instead of pam_sss.so? Poring over sssd's configuration options didn't reveal anything useful. I'm still not sure why Postfix even cares if there are expired credential cache files in /tmp at all. I'm back to trying GSSAPI directly again as well in the meantime on a few test clients. When I used that in the past, users were getting issued duplicate Kerberos tickets and users were forced to log into the mail server directly using SSH after a day in order to get their mail to work (seemingly a related issue). If I get those same errors again, I'll start another thread. The output of doveconf -N: # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.14.1.el6.x86_64 x86_64 Red Hat Enterprise Linux Server release 6.3 (Santiago) ext4 auth_cache_size = 10 k auth_cache_ttl = 5 hours auth_default_realm = server.com auth_gssapi_hostname = hostname.server.com auth_krb5_keytab = /etc/dovecot/dovecot.keytab auth_mechanisms = gssapi plain auth_realms = server.com auth_username_format = %n auth_verbose = no disable_plaintext_auth = yes listen = * mail_location = maildir:/var/spool/mail/%u mail_privileged_group = mail mbox_read_locks = fcntl mbox_write_locks = fcntl namespace { inbox = yes location = prefix = separator = / type = private } passdb { driver = pam } protocols = pop3 imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } ssl = yes ssl_cert = </usr/share/ssl/private/mail.server.com.pem ssl_key = </usr/share/ssl/private/mail.server.com.pem userdb { driver = passwd } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_plugins = " listescape" } Thanks for any pointers, Maura Dailey maura(a)eclipse.ncsc.mil

2 1

[Dovecot] dsync help?
by Torbjorn Astlind 10 Dec '12

10 Dec '12

Hi all, I have dovecot serving aprox 200 users through mbox, but the time has come to migrate to a new server, and to use Maildir. Using rsync from the old server I get all user data, i.e /home/*, and inboxes i.e /var/mail/* to a new server. This has worked well for some time as backup. The dsync should convert everything to Maildir, and it does... to an extent. (linebrakes for easy viewing) What I see, is that often, the /home/mail/xxx is NOT resulting in /home/xxx/Maildir/cur All mailboxes from /home/xxx, are properly converted to /home/xxx/Maildir/.name_of_ box Am I misunderstanding something? I get it to work sometimes if I delete the ~/Maildir completely before doing the dsync. All, and any help most welcome, Torbjörn for i in `cat /home2/torbjorn/SCRIPTS/userlist.txt`; do dsync -D -v -f -u $i -c /etc/dovecot/alt_config/10-mail.MBOX.conf backup maildir:~/Maildir; done > /home2/torbjorn/SCRIPTS/mb2mdRES.txt 2>&1 the -c 10.mail.MBOX.conf contains, the parts I think are relevant for the dsync operation: mail_location = mbox:~/home:INBOX=/home/mail/%u namespace { type = private separator = '/' inbox = yes } dsync(root): Debug: Effective uid=501, gid=501, home=/home/torbjorn dsync(root): Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:~/home:INBOX=/home/mail/torbjorn dsync(root): Debug: fs: root=/home/torbjorn/home, index=, control=, inbox=/home/mail/torbjorn, alt= dsync(root): Debug: Effective uid=501, gid=501, home=/home/torbjorn dsync(root): Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir dsync(root): Debug: maildir++: root=/home/torbjorn/Maildir, index=, control=, inbox=/home/torbjorn/Maildir, alt= dsync(root): Debug: Namespace : /home/torbjorn/Maildir doesn't exist yet, using default permissions dsync(root): Debug: Namespace : Using permissions from /home/torbjorn/Maildir: mode=0700 gid=-1 dsync(torbjorn): Debug: Namespace : Using permissions from /home/torbjorn/home: mode=0700 gid=-1

1 0

[Dovecot] IMAP instead of Maildir on Ubuntu Precise
by Thufir 10 Dec '12

10 Dec '12

Why is dovecot using Maildir and not IMAP. Or is it using even using Maildir at all? Currently I'm using mailman, postfix and dovecot to manage a mailing list. Mail is sent to thufir(a)dur.bounceme.net which the "mail server delivery agent stack provided by Ubuntu server team" of dovecot-postfix handles fine, keeping it locally, so far as it goes. The mail ends up in /home/thufir/Maildir, which the balsa mail client reads fine, as it handles Maildir fine. However, I would like to use dovecot-imapd which is installed. However, it's not clear quite how to switch over to IMAP. I see: root@dur:~# root@dur:~# nl /usr/share/dovecot/protocols.d/imapd.protocol 1 protocols = $protocols imap root@dur:~# root@dur:~# grep protocol /etc/dovecot/dovecot.conf # Enable installed protocols !include_try /usr/share/dovecot/protocols.d/*.protocol root@dur:~# which indicates to me that IMAP is configured. So, why is mail showing up using Maildir? I'm looking at: "Once you have chosen, amend the following line in the file /etc/dovecot/dovecot.conf: protocols = pop3 pop3s imap imaps" https://help.ubuntu.com/community/Dovecot Admittedly, I've not looked too closely into Dovecot man pages as I don't want to get too deep into the weeds on that if it's not even Dovecot I need to configure. I'm assuming that it's dovecot which is using Maildir: root@dur:/etc/postfix# root@dur:/etc/postfix# grep dovecot main.cf smtpd_sasl_type = dovecot smtpd_sasl_path = private/dovecot-auth mailbox_command = /usr/lib/dovecot/deliver -c /etc/dovecot/conf.d/01-mail-stack-delivery.conf -m "${EXTENSION}" root@dur:/etc/postfix# Can I force dovecot to only ever use IMAP and never use anything else? Is it maybe postfix which is using Maildir, and this is why my mail shows up as Maildir type mail? thanks, Thufir thufir@dur:~$ thufir@dur:~$ head .balsa/config -n 20 [mailbox-Inbox] Path=/var/mail/thufir Type=LibBalsaMailboxMbox Name=Inbox [mailbox-Outbox] Path=/home/thufir/Maildir/outbox Type=LibBalsaMailboxMbox Name=Outbox [mailbox-Sentbox] Path=/home/thufir/Maildir/sentbox Type=LibBalsaMailboxMbox Name=Sentbox [mailbox-Draftbox] Path=/home/thufir/Maildir/draftbox Type=LibBalsaMailboxMbox Name=Draftbox thufir@dur:~$

3 5

[Dovecot] Copying mailbox from one mailserver to another?
by Bjørn T Johansen 10 Dec '12

10 Dec '12

I see there is a tool called dsync that can do this but what are the cons of using dsync compared to just package the mailbox using tar and then untar the mailbox on the new server? Regards, BTJ -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

3 2

[Dovecot] Performance problems while running doveadm purge
by Jost Krieger 08 Dec '12

08 Dec '12

I have a rather large and active mdbox (28 GB, 3M mess, 1200 deliveries/day). I usually have no problems working with those mails, and there is some batch processing going on (via doveadm). Every few weeks I try my luck running doveadm purge, and this a) crunches about 5GB (to be expected), b) takes rather long (ok), c) leads to long stretches of blocked mdbox, which is the problem. I always turn off the batch processing, but deliveries take so long that they sometimes give up after timeout (they will come back later), and the IMAP clients get blocked for long minutes. Sometimes even the purge run aborts because of 3-minute-timeouts. What could be going on here (2.1.10)? Jost -- | Jost.Krieger+sig(a)ruhr-uni-bochum.de Please help stamp out spam! | | Postmaster, JAPH, resident answer machine at RUB Comp. Center | | Sincere words are not sweet, sweet words are not sincere. | | Lao Tse, Tao Te King 81 |

3 2

[Dovecot] Dovecot director doveadm with switch "-A" error
by Ramon Frontera 08 Dec '12

08 Dec '12

Hi, we have a problem with our director proxy configuration. When we run on proxy server the doveadm command with -A switch, fails with the error: # doveadm -D quota get -A doveadm(user1): Debug: auth input: user=user1 proxy starttls=any-cert doveadm(user1): Error: Proxy is missing destination host doveadm: Error: Failed to iterate through some users If we execute the command with a single user, director assigns host and goes well, Example: # doveadm -D quota get -u user1 doveadm(user1): Debug: auth input: user=user1 proxy starttls=any-cert host=xx.xx.xx.xx proxy_refresh=450 Quota name Type Value Limit % User quota STORAGE 159401 2621440 6 User quota MESSAGE 341 - 0 We have tried different configurations and all goes wrong with this "-A" switch, Timo please, could you tell us if we have a missconfiguration or its a possible director bug ?? We really want execute the expire plugin on ours directors and them redirect to the backends servers of every user. thanks in advance. Our doveconf -n: # dovecot -n # 2.1.10: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.14.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) auth_cache_size = 3 k auth_cache_ttl = 15 mins auth_debug = yes auth_verbose = yes base_dir = /var/run/dovecot/ default_client_limit = 30000 default_process_limit = 5000 dict { expire = mysql:/etc/dovecot/dovecot-dict-expire.conf.ext } director_doveadm_port = 990 director_mail_servers = mailserver1 mailserver2 director_servers = proxy1 doveadm_proxy_port = 24245 lmtp_proxy = yes mail_debug = yes mail_plugins = expire quota managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-ldap-users.conf.ext driver = ldap } plugin { expire = Trash expire2 = Trash/* expire_dict = proxy::expire } postmaster_address = postmaster<at>company protocols = imap pop3 lmtp sieve service auth { client_limit = 27048 unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-userdb { group = dovecot mode = 0660 } } service director { fifo_listener login/proxy-notify { mode = 0600 user = $default_login_user } inet_listener { port = 9090 } unix_listener director-userdb { mode = 0660 } unix_listener login/director { mode = 0666 } } service doveadm { executable = doveadm-server director inet_listener doveadm-server { port = 24245 } } service imap-login { executable = imap-login director inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service ipc { unix_listener ipc { user = dovecot } } service lmtp { client_limit = 1 inet_listener lmtp { port = 30025 } } service managesieve-login { executable = managesieve-login director } service pop3-login { executable = pop3-login director inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } ssl = required ssl_cert = </etc/pki/tls/certs/imap.crt ssl_key = </etc/pki/tls/private/imap.uib.es_privatekey.pem syslog_facility = local1 userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-ldap-users.conf.ext driver = ldap } verbose_proctitle = yes protocol lmtp { auth_socket_path = director-userdb mail_plugins = expire quota sieve quota passdb { args = /etc/dovecot/dovecot-ldap-pass.conf.lmtp driver = ldap } } protocol doveadm { auth_socket_path = director-userdb } protocol imap { mail_max_userip_connections = 20 mail_plugins = expire quota } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } local ip/24/24 { doveadm_password = supersecretpassword } -- ------------------------------------------ Ramon Frontera Gallardo Universitat de les Illes Balears

2 9

[Dovecot] Dovecot G+ community
by Patrick Ben Koetter 08 Dec '12

08 Dec '12

For those who own a G+ account and don't mind seeing colors in a browser once in a while instead of staring at a black/white terminal all day long, join the Dovecot G+ community <https://plus.google.com/communities/112967413753095884716> p@rick -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Joerg Heidrich

1 0

Re: [Dovecot] imap-login - where does the user get filled in from?
by Ben Morrow 07 Dec '12

07 Dec '12

At 3PM -0800 on 6/12/12 Jeff Lacki wrote: > Ben Morrow <ben(a)morrow.me.uk> wrote: > > > > imap-login: Disconnected (no auth attempts in 60 secs): user=<>, > > > rip=192.168.1.1, lip=192.168.1.22, TLS handshaking: Disconnected > > > > Just to be sure: you have replaced the self-signed certificate Dovecot > > installs with one which is signed by a public CA? > > I created my own self-signed certificate with mkcert.sh that comes with > dovecot. Changed my hostname to mail.myhostname.com and the other > stuff, installed etc. An iPhone won't accept a self-signed certificate unless you install it in the system trusted certificate list. I don't know how you do that, or even if it's possible... Ben

3 3

[Dovecot] Cannot STORE \Seen flag on some mails
by Frerich Raabe 07 Dec '12

07 Dec '12

Hi, I'm running Dovecot 1.2.17 on FreeBSD (exact output of 'dovecot -n' is atttached to this mail). The machine is serving a public mailinglist archive which is read-only; all mail arriving for the archive is marked as \Seen using Sieve script. This setup works well most of the time, but I noticed that for *some* mails, the \Seen flag doesn't seem to be stored. Right now I have 31255 mails in one of my folders and I can't seem to mark five of them as \Seen - the others work just fine. I first suspected a client issue so I did a little IMAP session by hand: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready. . LOGIN "xxxxxx" "yyyyyy" . OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS ACL RIGHTS=texk] Logged in . SELECT "Lists/Archive/squish" * FLAGS (\Answered \Flagged \Deleted \Seen \Draft $NotJunk) * OK [PERMANENTFLAGS ()] Read-only mailbox. * 31250 EXISTS * 0 RECENT * OK [UNSEEN 27126] First unseen. * OK [UIDVALIDITY 1350573750] UIDs valid * OK [UIDNEXT 31265] Predicted next UID * OK [HIGHESTMODSEQ 9512] Highest . OK [READ-ONLY] Select completed. . SEARCH UNSEEN * SEARCH 27126 27127 28484 29835 29838 . OK Search completed (0.000 secs). . STORE 27126 FLAGS \SEEN . OK Store completed. . SEARCH UNSEEN * SEARCH 27126 27127 28484 29835 29838 . OK Search completed (0.000 secs). . LOGOUT * BYE Logging out . OK Logout completed. Note how the first 'SEARCH UNSEEN' command shows that '27126' is unseen, the subsequent 'STORE' command succeeds - but then 'SEARCH UNSEEN' still shows 27126 as unseen! I have all four logging levels being piped to /var/log/maillog (I verified this by running dovecot --log-error) but the file does not show any problems. I checked the file permissions of the Maildir directories, and it all looks dandy to me. Does anybody have some suggestions how to debug this further, or what the reason for this may be? -- Frerich Raabe - raabe(a)froglogic.com www.froglogic.com - Multi-Platform GUI Testing

2 4

[Dovecot] dsync: error with hierarchy separator
by Jakub Jedelsky 07 Dec '12

07 Dec '12

Hi list! I have a problem with transfering mails from mbox to maildir format. On dovecot wiki I found a dsync tool, which looks good, but returns me an error: # dsync -u mail(a)example.com mirror mbox:~/mail:INBOX=/var/mail/virtuser_808 dsync(root): Fatal: Mail locations must use the same virtual mailbox hierarchy separator (specify separator for the default namespace) I found a solution with namespaces, but it doesn't work for me, there is still same error - I tried to add "-o separator=/" as option or add it to config file as mentioned there [1]. Can you push me to any solution? My dovecot -n: # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.5.2.el6.x86_64 x86_64 CentOS release 6.3 (Final) auth_mechanisms = plain login digest-md5 cram-md5 disable_plaintext_auth = no mail_location = maildir:~/.maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl passdb { args = scheme=CRYPT username_format=%Lu /etc/dovecot/dovecot.passwd driver = passwd-file } plugin { autocreate = Spam autosubscribe = Spam sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = username_format=%Lu /etc/dovecot/dovecot.passwd driver = passwd-file } protocol imap { mail_plugins = autocreate } [1] http://www.dovecot.org/list/dovecot/2010-September/053186.html Thanks a lot. -jj

1 1

[Dovecot] imap-login - where does the user get filled in from?
by jeep＠rahul.net 07 Dec '12

07 Dec '12

Sorry to ask such a basic question, but I finally got some major hurdles working for imaps on port 993 and Im getting the following when I try to connect from my iphone: imap-login: Disconnected (no auth attempts in 60 secs): user=<>, rip=192.168.1.1, lip=192.168.1.22, TLS handshaking: Disconnected Im using SQL and SSL over 993. I cant seem to find where my user comes from that its blank? Your help is appreciated. Thanks /mf/home/jeep/shell/.signature

3 5

[Dovecot] Message Flag definitions
by Chris Dutton 07 Dec '12

07 Dec '12

Hello, I am in charge of migrating our mail system from dovecot to another server, and I am having to write a script to do this as tools like imapsync are too slow. What I am trying to find is the definitions of the flags that dovecot adds to the Maildir file name it uses for the IMAP messages. For example what the a and b mean in the following: 1176236036.P7260Q1438.sucia:2,RSab I am looking for all definitions not just a and b. Thanks Chris chris(a)rosepointnav.com

2 1

[Dovecot] How can I force FTS reindexing?
by Dave Abrahams 06 Dec '12

06 Dec '12

I threw out my lucene-indexes folder because it seemed to be missing something, and I figured it would get regenerated. Unfortunately, dovecot is only FTS-indexing new mails that come in. Is there a way to get it to reindex everything? -- Dave Abrahams BoostPro Computing Software Development Training http://www.boostpro.com Clang/LLVM/EDG Compilers C++ Boost

1 1

Re: [Dovecot] dovecot Digest, Vol 116, Issue 11
by Erik A Johnson 06 Dec '12

06 Dec '12

On December 5, 2012 2:07:14 AM PST, Ben Morrow <ben(a)morrow.me.uk> wrote: > At 1AM -0800 on 5/12/12 Erik A Johnson wrote: >> FYI, the tcpdump I sent previously was with one of our >> previously-discussed patches in place: >> >> if (!proxy->client_proxy && net_geterror(proxy->fd_ssl) == EBADF) { >> >> I'm attaching that dump again (as >> tcpdump_output_witholdpatch_headeronly.txt), as well as a dump without >> any of the patches (tcpdump_output_withoutpatches_headeronly.txt) in >> case there is any difference. > > Well, they're certainly different. Are you sure the second trace > (withoutpatches) was of a session which went into an infinite loop? > The only thing peculiar about that trace is that the server closes the > connection after receiving the first packet from the client, but it does > so perfectly properly: it ACKs the client's data packet, and does the > FIN-FIN/ACK exchance properly. You will notice there are no [R] packets, > which indicate something odd is happening at the server end. I'm pretty sure, but I've run it again, confirmed that the imap-login process is using 100% of a CPU until I kill it, and have attached the tcpdump. Looks like one packet from SERVER to CLIENT shifted slightly in chronology, but otherwise the same. >>> #ifdef SO_ISDEFUNCT >>> + if (getsockopt(proxy->fd_ssl, SOL_SOCKET, SO_ISDEFUNCT, >>> + (void *)&err, sizeof(err)) == 0 && err) { >>> + errstr = t_strdup_printf( >>> + "%s: socket is defunct", func_name); >>> + break; >>> + } >>> +#endif >> >> Nope, SO_ISDEFUNCT isn't defined. > > Oh, sorry, that needs > > #include <sys/socket.h> > > at the top. If that doesn't work, then which version of the OS are you > building for? AFAICT the DEFUNCT socket flag has been present since at > least 10.5, but the SO_ISDEFUNCT option was only introduced in 10.7. > This is irritating, actually: it means that to properly fix this on all > versions of Mac OS Dovecot would need to include the previous ENOTCONN > code #ifndef SO_ISDEFUNCT. I've got both 10.7 and 10.8 SDKs in Xcode and neither have SO_ISDEFUNCT defined in sys/socket.h (or anywhere else in the usr/include directories) -- there's a SS_DEFUNCT mask defined in sys/socketvar.h -- is that what you're looking for?

2 2

[Dovecot] Update configuration for separate mail directory
by eehmke 06 Dec '12

06 Dec '12

I have a small mail server with virtual users. In my /etc/dovecot/conf.d/10- mail.conf I have this setting: mail_location = maildir:/var/mail/vhosts/%d/%u which is also the home location of each user. Now I learned that this is not the prefered configuration, and in fact some of my sieve subdirectories are mistaken as mail directories. While I understand that I have to create separate mail subdirectories in each user folder, I am not sure where I have to adapt the dovecot configuration files. I could not find a guide, only some scattered hints and of course http://wiki2.dovecot.org/VirtualUsers/Home I guess I have to shut down the server for the reconfiguration, or is there a way to do it on a life system? Eggert -- View this message in context: http://dovecot.2317879.n4.nabble.com/Update-configuration-for-separate-mail… Sent from the Dovecot mailing list archive at Nabble.com.

1 0

[Dovecot] When are search indexes updated?
by David Abrahams 06 Dec '12

06 Dec '12

I noticed that occasionally searching in my huge archive mailbox can be really slow, so I tried doveadm index on it and it seemed to do a lot of work, which seemed strange given, for example, that dovecot-lda says it keeps Dovecot index files up-to-date. Then I thought, "maybe these are different files than the search indices." If so, that's not entirely clear from the docs and Wiki. So, questions: * When are search indexes updated? * Are they updated incrementally? * If not, why not? * If so, why would a mailbox's index drift out-of-date, as mine had? BTW, I'm using the clucene search backend. -- Dave Abrahams BoostPro Computing Software Development Training http://www.boostpro.com Clang/LLVM/EDG Compilers C++ Boost

6 16

[Dovecot] "no longer mounted" warnings
by Dave Abrahams 06 Dec '12

06 Dec '12

Dovecot seems to be warning about every volume it's ever seen in the past. Is this normal? Can I make it stop? --8<---------------cut here---------------start------------->8--- 12/4/12 12:33:38.148 PM dovecot[2658]: master: Warning: /Volumes/fs is no longer mounted. See http://wiki2.dovecot.org/Mountpoints 12/4/12 12:33:38.148 PM dovecot[2658]: master: Warning: /Volumes/dave is no longer mounted. See http://wiki2.dovecot.org/Mountpoints 12/4/12 12:33:38.149 PM dovecot[2658]: master: Warning: /Volumes/Groups is no longer mounted. See http://wiki2.dovecot.org/Mountpoints 12/4/12 12:33:38.149 PM dovecot[2658]: master: Warning: /Volumes/Public is no longer mounted. See http://wiki2.dovecot.org/Mountpoints 12/4/12 12:33:38.149 PM dovecot[2658]: master: Warning: /Volumes/Users is no longer mounted. See http://wiki2.dovecot.org/Mountpoints 12/4/12 12:33:38.149 PM dovecot[2658]: master: Warning: /Volumes/GPGTools is no longer mounted. See http://wiki2.dovecot.org/Mountpoints 12/4/12 12:33:38.149 PM dovecot[2658]: master: Warning: /private/tmp/ccc_dmg_mount.weHZmz is no longer mounted. See http://wiki2.dovecot.org/Mountpoints --8<---------------cut here---------------end--------------->8--- -- Dave Abrahams BoostPro Computing Software Development Training http://www.boostpro.com Clang/LLVM/EDG Compilers C++ Boost

4 4

Re: [Dovecot] imap-login hanging when firewall blocks ssl handshaking
by Erik A Johnson 06 Dec '12

06 Dec '12

On December 4, 2012 at 4:43:53 AM PST, Ben Morrow <ben(a)morrow.me.uk> wrote: > So, it looks to me as though you have a firewall problem. You may be > able to get more information by setting the kern.ipc.sodefunctlog sysctl > to 1: this should make the kernel log to syslog (or wherever the OSX > kernel logs go) when sockets are made DEFUNCT and when reads fail for > that reason. sudo sysctl -w kern.ipc.sodefunctlog=1 gives the following in the log: 12/5/12 9:10:00.000 PM kernel[0]: sosetdefunct[60169]: (target pid 60169 level 0) so 0xffffff803159c738 [2,1] marked as defunct 12/5/12 9:10:00.000 PM kernel[0]: sodefunct[60169]: (target pid 60169 level 0) so 0xffffff803159c738 [2,1] is now defunct [rcv_si 0x0, snd_si 0x0, rcv_fl 0x9400, snd_fl 0x1400] 12/5/12 9:10:00.000 PM kernel[0]: soreceive[60169]: defunct so 0xffffff803159c738 [2,1] (57) The last line is repeated about once every 4 microseconds until I kill it.

1 0

[Dovecot] log_path - expansion possible?
by Robert Blayzor 06 Dec '12

06 Dec '12

Does (or can) the ability to use expansion variables in Dovecot's log_path exist? ie: log_path = /var/log/dovecot/dovecot-%Y%m%d -- Robert Blayzor INOC, LLC rblayzor(a)inoc.net http://www.inoc.net/~rblayzor/

3 5

[Dovecot] dotlock error
by Muhammad Yousuf Khan 05 Dec '12

05 Dec '12

i finally manage to control access on public folder by File system permission. i have 3 test users. 1. tom 2. fmaster 3 . testmail tom and fmaster are a group called "news-own" and testmail user is a readonly one. here is my folder structure ill share dovecot -n output at the end of this email. drwxrwxr-t 2 tom news-own 4.0K Dec 4 19:08 tmp drwxrwxr-t 2 tom news-own 4.0K Dec 4 19:08 new -rwxrwxrwx 1 tom news-own 68 Dec 4 19:08 dovecot-uidlist -rw-rw-r-T 1 fmaster news-own 16K Dec 4 19:10 dovecot.index.cache drwxrwxr-t 2 tom news-own 4.0K Dec 4 19:15 cur -rw-rw-r-T 1 tom news-own 1.1K Dec 4 19:16 dovecot.index.log everything works fine as far as user fmaster and tom is concern as they are member of "news-own" and this group own the mailbox now the problem i face with readonly users. i am getting this error in /var/log/mail.info (against user testmail) file_dotlock_create(/public/.News/dovecot-uidlist) failed: Permission denied (euid=1002(testmail) egid=1002(testmail) missing +w perm: /public/.News at first point i saw this error and i could not subscribe to the folder. and the said log has been generated. now on second stage i change the dovecot-uidlist file permission to "1666" so that testmail user can also write to the file. now problem starts from here, i see two folder one is News and second one is News-1 and i don't know from where the second folder showed up. and when i click on any of the folder my /var/log/mail.info start to show below massage continuously. until i restart the dovecot service. file_dotlock_create(/public/.News/dovecot-uidlist) failed: Permission denied (euid=1002(testmail) egid=1002(testmail) missing +w perm: /public/.News i search google and i saw that people suggested to set stickey bit on which i already did or suggested to stop "dot locking" so i am here to ask is there any way to solve my said problem with out disabling dot locking? or if i stop dot locking what are the consequences? here i my dovcecot -n root@mailsrv:/public/.News# dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.6 log_timestamp: %Y-%m-%d %H:%M:%S ssl_cert_file: /etc/ssl/certs/postfix.pem ssl_key_file: /etc/ssl/private/postfix.key login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mail_location: maildir:~/Maildir:INBOX=~/Maildir/:INDEX=~/Maildir/index mail_debug: yes mbox_write_locks: fcntl dotlock namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: public separator: / prefix: Shared folders/ location: maildir:/public list: yes auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix Thanks in advance, any help or suggestion would be highly appreciated.

2 5

[Dovecot] dovecot backend on director ?
by Thomas Hummel 05 Dec '12

05 Dec '12

Hello Timo, The last time I checked my understanding about director was that : 1. backend/"real" imap servers should not be on the same host (or the same dovecot instance) to avoid proxying loops. Is it still the case with the latest 2.1 stable release ? Is there a plan to be able to run director and real server on the same host, thus requiring only 2 hosts instead of 4 to have load balancing and a redundant director ? 2. director itself was not able or meant to check if one of the real server was down (some script was pointed long time ago in this list). Same questions. 3. you'll have to use dovecot lmtp instead of let's say procmail. Would deliver be still a choice or is lmtp the only deliver compatible choice ? In what case would lmtp be more useful than deliver ? To have some sort of "remote LDA" ? By the way, what gets indexed on deposit on the mailbox since, by definition, the user has not done any request yet ? Thanks. -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Groupe Exploitation et Infrastructure

2 2

Re: [Dovecot] imap-login hanging when firewall blocks ssl handshaking
by Erik A Johnson 05 Dec '12

05 Dec '12

FYI, the tcpdump I sent previously was with one of our previously-discussed patches in place: if (!proxy->client_proxy && net_geterror(proxy->fd_ssl) == EBADF) { I'm attaching that dump again (as tcpdump_output_witholdpatch_headeronly.txt), as well as a dump without any of the patches (tcpdump_output_withoutpatches_headeronly.txt) in case there is any difference. On December 4, 2012 6:18:23 AM PST, Ben Morrow <ben(a)morrow.me.uk> wrote: > At 12PM +0000 on 4/12/12 Ben Morrow wrote: >> Well, it looks to me as though xnu/bsd/kern/uipc_socket.c:soreceive will >> indeed return ENOTCONN for a socket which was once successfully >> connected but has now been disconnected. This happens when the socket is >> in the DEFUNCT state, which is a state that doesn't exist in FreeBSD; >> it's not completely clear but I suspect firewalls may be able to put >> arbitrary sockets into that state. > > Investigating a little further, it should be possible to test for this > situation directly. Assuming I'm correct about what's going on here, > this should be both cleaner and safer than mucking about looking for > ENOTCONN and guessing about what's happening. > > Erik, does this make the problem go away? I left out the > proxy->client_proxy test, since AFAICT this is just as likely to happen > on a client socket. > > Ben > > #ifdef SO_ISDEFUNCT > + if (getsockopt(proxy->fd_ssl, SOL_SOCKET, SO_ISDEFUNCT, > + (void *)&err, sizeof(err)) == 0 && err) { > + errstr = t_strdup_printf( > + "%s: socket is defunct", func_name); > + break; > + } > +#endif Nope, SO_ISDEFUNCT isn't defined.

2 1

[Dovecot] Quotas 2.1clarification
by Nick Edwards 05 Dec '12

05 Dec '12

Timo, I have much suspicion that our quota system is not working correctly since we migrate to 2.1 Currently using 2.1.10 Previously we had for issue of warnings quota_warning = storage=90%% /scripts/dqwarn-90.sh quota_warning2 = storage=75%% /scripts/dqwarn-75.sh worked great, these lines also migrated to new conf upon conversion. But quota conf example shows plugin { #quota_warning = storage=95%% quota-warning 95 %u #quota_warning2 = storage=80%% quota-warning 80 %u } # Example quota-warning service. The unix listener's permissions should be # set in a way that mail processes can connect to it. Below example assumes # that mail processes run as vmail user. If you use mode=0666, all system users # can generate quota warnings to anyone. #service quota-warning { # executable = script /usr/local/bin/quota-warning.sh # user = dovecot # unix_listener quota-warning { # user = vmail # } #} So this seems to indicate /scripts/dqwarn-75.sh should be a service name, which then calls the service quota-warning with that script in it etc etc etc surely this old 4 line method has not been replaced into a 20 line mess? Is this old way still functioning as I suspect it is not, and we need to write up two separate new quota warning services given our warnings are worded differently, or should the old methods still be working as they did in 1.2 and we have an error elsewhere? Niki

2 2

[Dovecot] [OT] MS Exchange Alternative?
by Marc Perkel 05 Dec '12

05 Dec '12

Just wondering if there's an open source Linux alternative to MS Exchange so that all the features of outlook work?

12 14

[Dovecot] doveadm fts optimize undocumented
by Dave Abrahams 04 Dec '12

04 Dec '12

Subject says all. Timo, would you write something up where the world will find it? Also, it would be great if doveadm fts was covered in the doveadm manpage. Thanks, -- Dave Abrahams BoostPro Computing Software Development Training http://www.boostpro.com Clang/LLVM/EDG Compilers C++ Boost

2 6

[Dovecot] Maidir layout : why and how ?
by Thomas Hummel 04 Dec '12

04 Dec '12

Hello Timo, I've been using dovecot from many years now using Maildir mailbox format with default layout (Maildir++, everthing in a single directory). What would be the reason(s) to convert to Layout=fs ? I can only think of one : to allow dots in mailbox names. And even in that case, I guess I still have the option to use the litescape plugin. Besides, how would one process to do the conversion ? Using dsync ? Thanks. -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Groupe Exploitation et Infrastructure

2 1

[Dovecot] CVE-2012-5620
by Timo Sirainen 04 Dec '12

04 Dec '12

This CVE isn't worthy of existence. A user can crash his/her own IMAP session by issuing a specific SEARCH command, which is just slightly worse than user issuing a LOGOUT command. It took years for people to notice this bug, because just about no IMAP client issues such a command.

1 0

[Dovecot] imap-login hanging when firewall blocks ssl handshaking
by Erik A Johnson 04 Dec '12

04 Dec '12

imap-login processes are hanging (using 100% of CPU) when connected from a client that is partially blocked by a firewall. It appears that imap-login is stuck in a loop trying to complete an ssl handshake. imap-login is working fine for other clients not blocked by the firewall (including localhost). This is dovecot 2.1.10 under Mac OS X 10.8.2 (compiled from sources); the firewall is Little Snitch 3.0.1 blocking port 993, which appears to let the connection initiate but then squashes and disconnects the socket during ssl handshaking. gdb backtrace and Activity Monitor's "Sample Process" show that imap-login is stuck calling ioloop-kqueue's io_loop_handler_run -> io_loop_call_io -> ssl_step repeatedly; dtruss shows that it is repeatedly making system calls to kevent and read, the latter returning -1 with errno 57=ENOTCONN="Socket is not connected". (I also tried ./configure --with-ioloop=poll and --with-iopoll=select instead of the default best = kqueue but the results were the same; --with-iopoll=epoll didn't work because epoll is not available on this machine.) The client, initiated by the command "openssl s_client -connect SERVER:993", first responds "CONNECTED(00000003)" but then immediately the error "60278:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:/SourceCache/OpenSSL098/OpenSSL098-44/src/ssl/s23_lib.c:182:". The infinite loop is in src/lib/ioloop.c in the function "io_loop_run" where the statement "while (ioloop->running) io_loop_handler_run(ioloop)" is executed. While I think the firewall is not doing the right thing (i.e., it lets a connection start but then kills it), it seems that imap-login should fail gracefully when the socket is no longer connected. Ideas? Thanks. ----------------------------------- /usr/local/sbin/dovecot -n # 2.1.10: /usr/local/etc/dovecot/dovecot.conf # OS: Darwin 12.2.0 x86_64 default_internal_user = _dovecot default_login_user = _dovenull namespace { hidden = no list = yes location = mbox:/Users/%u/Documents/Mailboxes prefix = mbox/ separator = / type = private } namespace { inbox = yes location = maildir:/Users/%u/Documents/Maildir mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { driver = pam } protocols = imap lmtp ssl = required ssl_cert = </usr/local/etc/dovecot/dovecot.pem ssl_key = </usr/local/etc/dovecot/dovecot.pem userdb { driver = passwd } protocol imap { mail_plugins = " zlib imap_zlib" } ----------------------------------- gdb's "bt full" gives various results depending on where in the loop, but they are they same from ssl23_accept on down. (gdb) bt full #0 0x00007fff92d19f63 in sha1_block_data_order () #1 0x00007fff92d1a4ae in SHA1_Final () #2 0x00007fff92d45430 in EVP_DigestFinal_ex () #3 0x00007fff92d17d7a in ssleay_rand_add () #4 0x00007fff974529be in ssl23_accept () #5 0x000000010cac0729 in ssl_handshake [inlined] () at /private/tmp/johnsone/dovecot-2.1.10/src/login-common/ssl-proxy-openssl.c:465 ret = -949939536 #6 0x000000010cac0729 in ssl_step (proxy=0x7fff53152b90) at ssl-proxy-openssl.c:528 ret = -949939536 #7 0x000000010cb11bd1 in io_loop_call_io (io=0x7f7fa0c1c240) at ioloop.c:379 ioloop = (struct ioloop *) 0x7f7fa0c03b00 t_id = 2 #8 0x000000010cb12c69 in io_loop_handler_run (ioloop=0x0) at ioloop-kqueue.c:148 tv = { tv_sec = 130, tv_usec = 124797 } ctx = (struct ioloop_handler_context *) 0x7f7fa0c1a890 ret = 1 ts = { tv_sec = 130, tv_nsec = 124797000 } events = (struct kevent *) 0x10cb4ee78 #9 0x000000010cb11b88 in io_loop_run (ioloop=0x7fff53152b90) at ioloop.c:398 No locals. #10 0x000000010cafde9b in master_service_run (service=0x7f7fa0c039f0, callback=0x7f7fa0c1c2d8) at master-service.c:543 No locals. #11 0x000000010cabdcd1 in main_deinit [inlined] () at /private/tmp/johnsone/dovecot-2.1.10/src/login-common/main.c:406 set_pool = (pool_t) 0x7f7fa100b420 login_socket = 0x10cb4f7f8 "?9??" #12 0x000000010cabdcd1 in login_binary_run (argc=1, argv=0x7f7fa0c037c0, binary=0x7fff53152b90) at main.c:407 set_pool = (pool_t) 0x7f7fa100b420 login_socket = 0x10cb4f7f8 "?9??" #13 0x00007fff8ac847e1 in start () (gdb) bt full #0 0x00007fff96e4c110 in malloc_zone_malloc () #1 0x00007fff96e4cba7 in malloc () #2 0x00007fff92d2c9e2 in CRYPTO_malloc () #3 0x00007fff92d4535f in EVP_DigestInit_ex () #4 0x00007fff92d17caa in ssleay_rand_add () #5 0x00007fff974529be in ssl23_accept () ... #0 0x00007fff94775ffa in read () #1 0x00007fff92cf41e6 in sock_read () #2 0x00007fff92d15598 in BIO_read () #3 0x00007fff9745294a in ssl23_read_bytes () #4 0x00007fff97452c3e in ssl23_get_client_hello () #5 0x00007fff97452b4d in ssl23_accept () ... -----------------------------------

4 14

[Dovecot] clucene (in)stability
by Dave Abrahams 04 Dec '12

04 Dec '12

Considering two crashing bugs, which have got no response (https://sourceforge.net/tracker/?func=detail&aid=3587525&group_id=80013&ati… and https://sourceforge.net/tracker/?func=detail&aid=3592291&group_id=80013&ati…) and the lack of activity in its Git repository, I am inclined to think that CLucene's current release series (e.g. 2.3.3.4) should be considered unsuitable for serious use (including with Dovecot). I'm going to try CLucene 0.9.21, which they claim has been "proven to be stable over time" (see http://clucene.sourceforge.net) and see how it works out. I wonder if there's a future envisioned for FTS with Dovecot that's suitable for small installations (i.e. doesn't require a Solr server) and has a good chance of correctness and stability? -- Dave Abrahams BoostPro Computing Software Development Training http://www.boostpro.com Clang/LLVM/EDG Compilers C++ Boost

2 2

[Dovecot] Store mailbox usage in mysql not just the limit
by tibby＠tibby.hu 03 Dec '12

03 Dec '12

Hello! I have dovecot working using mysql for auth and mailbox quota. in the mail database I have a user table with colums for: email, password, quota_kb, quota_messages I want to make a php script that would get the quota_kb and substract the usage to display the total free space left for mail usage. How can I do this? Is there a function in dovecot to store the current usage per mailbox ? Thanks!

2 1

[Dovecot] Gmail style conversations
by Romer Ventura 03 Dec '12

03 Dec '12

Hello, I am wondering if there is any way to support Gmail style conversation when using Dovecot? Someway of associating all inbound and sent emails..? I know that some clients let you display the emails in "conversation" which kinda does what Gmail does, however, it does not associate the Sent emails with it. Thanks for any information. <BR CLEAR="ALL"> <hr style="border: 1px solid #CCC;"> <p style="font-style:italic; font-size:8pt; font-family:verdana; color:gray;">This document and attachments may contain technical data controlled under the U.S. International Traffic in Arms Regulations (ITAR) or the Export Administration Regulations (EAR) and may not be exported to a Foreign Person, either in the U.S. or abroad, without the proper authorization by the U.S. Department of State or Department of Commerce, whichever is applicable. CONFIDENTIALITY NOTE: This electronic transmission, including all attachments, is directed in confidence solely to the person(s) to whom it is addressed, or an authorized recipient, and may not otherwise be distributed, copied or disclosed. The contents of the transmission may also be subject to intellectual property rights and such rights are expressly claimed and are not waived. If you have received this transmission in error, please notify the sender immediately by return electronic transmission and then immediately delete this transmission, including all attachments, without copying, distributing or disclosing same. The recipient should check this e-mail and any attachments for the presence of viruses. Houston Sigma Technologies L.P. accepts no liability for any damage caused by any virus transmitted by this e-mail.</p>

3 2

[Dovecot] pop3-login: Error: SSL: Stacked error:
by Frank Bonnet 03 Dec '12

03 Dec '12

Hello again I have few messages in dovecot.log like the following : Dec 03 15:52:07 pop3-login: Error: SSL: Stacked error: error:140943F2:SSL routines:SSL3_READ_BYTES:sslv3 alert unexpected message: SSL alert number 10 Anyone could tell what does this means ? Thank you

1 0

[Dovecot] conversion MBOX -->Maildir
by Frank Bonnet 03 Dec '12

03 Dec '12

Hello I would like to start MBOX to Maildir conversion at 2.1.12 what would be the safest method to perform this ? wiki2 says the following , is it up to date ? mbox -> maildir migration. Set mail_location=maildir:~/Maildir and run dsync -u username mirror mbox:~/mail:INBOX=/var/mail/username thank you

1 0

[Dovecot] sieve problem after upgrade to 2.1.12
by Daniel Funke 03 Dec '12

03 Dec '12

Hi, I have a sieve filter for a mailbox with amavisd-admin mails. if header :regex "Subject" "^INVALID HEADER" { fileinto "INVALID HEADER"; } After the upgrade to dovecot 2.1.12 this filter doesn't work for some (16) messages with this subject. For 424 messages it worked correct. Any ideas where to look? Bye Daniel

2 2

[Dovecot] Thunderbird SSL/TLS client authentication fails
by Roger Hunen 03 Dec '12

03 Dec '12

Hi, This is my first post to the list, so greetings to you all! I am seeking your help with SSL/TLS client authentication. I currently have the following setup: * Server: - Debian Squeeze (fully patched) - OpenSSL 0.9.8o - Dovecot v2.1.10 (Debian backport package from Wheezy) - SSL listener on port 993 with the Dovecot selfsigned certificate that was created during installation - Virtual users (user(a)domain.net) with password in passwd style file * Client: - Windows XP SP3 (fully patched) - Thunderbird 17.0 - IMAP account using "Normal password" authentication - Roundcube webmail (to be added soon) This works just fine :) ==> I now want to set Thunderbird to use "TLS certificate" authentication so that I can safely expose port 993 to the internet for mobile use. The idea is that clients with a trusted client certificate do not need a password so that I can change my password for Roundcube without having to change passwords on other IMAP clients (Roundcube will connect to localhost without SSL). To do so I did the following: - use XCA (v0.9.3, Windows version) to setup a private root CA with a CRL - export root CA certificate and CRL in PEM format and join them into a ca.pem file (order: certificate, CRL) - configure Dovecot to use the ca.pem file and require a client certificate - use XCA to generate a private key and certificate for commonName=user(a)mydomain.net - import certificate and private key into Thunderbird - change IMAP account setting in Thunderbird to use "TLS Certificate" authentication - When prompted, select the imported certificate to be used for authentication. Unfortunately the authentication fails :( Using "verbose_ssl=yes" I can see in the Dovecot logfile that Thunderbird connects and that the SSL handshake completes successfully. "Valid certificate" is logged for both client certificate and root CA certificate. This looks "so far so good" to me :) The Dovecot log has the following lines at the point of failure: imap-login: Warning: SSL alert: where=0x4004, ret=256: warning close notify [<IP>] imap-login: Warning: SSL alert: where=0x4008, ret=256: warning close notify [<IP>] imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=<IP>, lip=<IP>, TLS, session=<ID> (IP address and TLS session ID removed) The last log line ("user=<>") suggests that Dovecot does not try to use the commonName from the client certificate as the username even though (I think) I have configured Dovecot to do so. The relevant lines in the Dovecot configuration are: <config> auth_mechanisms = plain auth_ssl_require_client_cert = yes auth_ssl_username_from_cert = yes disable_plaintext_auth = yes protocols = imap ssl = yes ssl_ca = </etc/dovecot/ssl/ca.pem ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cert_username_field = commonName ssl_key = </etc/ssl/private/dovecot.pem ssl_parameters_regenerate = 0 ssl_require_crl = yes ssl_verify_client_cert = yes service imap-login { chroot = login process_min_avail = 1 service_count = 1 inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } </config> Observation: with "auth_ssl_require_client_cert = yes" Dovecot requires Thunderbird to send the client certificate even when Thunderbird uses "Normal password" authentication (authentication only fails if I delete the certificate from Thunderbird). So the SSL part looks OK to me. It seems that Dovecot is waiting for the client to logon over the established SSL/TLS connection instead of taking the username from the commonName in the certificate. ==> What could be going wrong here? I can post full config and logfile lines if you wnt to. Except for some possible oversight on my behalf there is nothing secret in there (I just didn't want to add too many lines to this already long post). Regards, -Roger

2 2

[Dovecot] Connection closed by foreign host.
by 张昊 03 Dec '12

03 Dec '12

hi, when i telnet 127.0.0.1 110,input the username and password,echo the error: Connection closed by foreign host. THE CONFIG: [root@www fuse-dfs]# dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.el6.i686 i686 CentOS Linux release 6.0 (Final) listen = * login_trusted_networks = 10.12.0.0/16 mail_location = mbox:~/mail:INBOX=/var/mail/%u mbox_write_locks = fcntl passdb { driver = pam } protocols = pop3 ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } THE LOG: Dec 3 14:29:13 www dovecot: pop3-login: Aborted login (auth failed, 1 attempts): user=<zhanghao(a)zhanghao.com>, method=PLAIN, rip=10.12.3.1, lip=10.12.3.101, secured Dec 3 14:29:17 www dovecot: auth: Error: userdb(zhanghao,10.12.3.1): user not found from userdb passwd Dec 3 14:29:17 www dovecot: pop3: Error: Authenticated user not found from userdb, auth lookup id=3926917121 (client-pid=8774 client-id=1) Dec 3 14:29:17 www dovecot: pop3-login: Internal login failure (pid=8774 id=1) (auth failed, 1 attempts): user=<zhanghao>, method=PLAIN, rip=10.12.3.1, lip=10.12.3.101, mpid=8775, secured thank you very much! Best Regards 北京信联云通科技有限责任公司 Beijing Octopus link Co. Ltd 北京市海淀区北四环中路257号科群大厦西区 607 技术服务部张昊手机：13810705782 Email: support(a)octlink.com

1 0

[Dovecot] IMAP+SSL
by jugree＠lavabit.com 03 Dec '12

03 Dec '12

Hi. I've already posted on the list (0), but I can't access that account. I don't want to hijack that thread that's why I decided to create this one. > Please don't trim the doveconf -n output... > It shows the version of dovecot (so no one has to ask)... I'm using 1.2.15. (0) http://dovecot.org/pipermail/dovecot/2012-November/069665.html

1 0

[Dovecot] 回复： 2.1.12 - Pigeonhole 0.3.3 build failed: /usr/bin/ld: cannot find -lssl -lcrypto
by Sam DWH 01 Dec '12

01 Dec '12

Did you installed openssh? Tobias Hachmer <lists(a)kokelnet.de>编写： >Hello list, > >Although timos bugfix release this morning I can't build pigeonhole 0.3.3 for >dovecot 2.1.12 successfully. I don't know if it is a new bug or if I do >something wrong but with dovecot 2.1.10 all worked fine, with the same configure >options. > >configure options (out of debian/rules for building debian package): > >./configure --with-dovecot=/usr/lib/dovecot \ > --host=$(DEB_HOST_GNU_TYPE) \ > --build=$(DEB_BUILD_GNU_TYPE) \ > --prefix=/usr \ > --sysconfdir=/etc \ > --libexecdir=\$${prefix}/lib \ > --localstatedir=/var \ > --mandir=\$${prefix}/share/man \ > --infodir=\$${prefix}/share/info \ > --with-moduledir=\$${prefix}/lib/dovecot/modules > > >buildlogextraction with error, the full log is available here: >https://launchpadlibrarian.net/124478979/buildlog_ubuntu-precise- >amd64.dovecot-2.1-pigeonhole_0.3.3-7~kokelnet~precise_FAILEDTOBUILD.txt.gz > >Thanks in advance for any help, >Tobias Hachmer > >Making all in lib-sieve-tool >make[4]: Entering directory `/build/buildd/dovecot-2.1- >pigeonhole-0.3.3/src/lib-sieve-tool' >/bin/bash ../../libtool --tag=CC --mode=compile x86_64-linux-gnu-gcc - >DHAVE_CONFIG_H -I. -I../.. -I../../src/lib-sieve -I/usr/include/dovecot - >D_FORTIFY_SOURCE=2 -std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer- >size=4 -Wformat -Wformat-security -Wall -W -Wmissing-prototypes -Wmissing- >declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast >-fno-builtin-strftime -Wstrict-aliasing=2 -MT sieve-tool.lo -MD -MP -MF >.deps/sieve-tool.Tpo -c -o sieve-tool.lo sieve-tool.c >libtool: compile: x86_64-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. - >I../../src/lib-sieve -I/usr/include/dovecot -D_FORTIFY_SOURCE=2 -std=gnu99 -g >-O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat-security - >Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar- >subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict- >aliasing=2 -MT sieve-tool.lo -MD -MP -MF .deps/sieve-tool.Tpo -c sieve-tool.c >-fPIC -DPIC -o .libs/sieve-tool.o >libtool: compile: x86_64-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. - >I../../src/lib-sieve -I/usr/include/dovecot -D_FORTIFY_SOURCE=2 -std=gnu99 -g >-O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat-security - >Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar- >subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict- >aliasing=2 -MT sieve-tool.lo -MD -MP -MF .deps/sieve-tool.Tpo -c sieve-tool.c >-o sieve-tool.o >/dev/null 2>&1 >mv -f .deps/sieve-tool.Tpo .deps/sieve-tool.Plo >/bin/bash ../../libtool --tag=CC --mode=compile x86_64-linux-gnu-gcc - >DHAVE_CONFIG_H -I. -I../.. -I../../src/lib-sieve -I/usr/include/dovecot - >D_FORTIFY_SOURCE=2 -std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer- >size=4 -Wformat -Wformat-security -Wall -W -Wmissing-prototypes -Wmissing- >declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast >-fno-builtin-strftime -Wstrict-aliasing=2 -MT mail-raw.lo -MD -MP -MF >.deps/mail-raw.Tpo -c -o mail-raw.lo mail-raw.c >libtool: compile: x86_64-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. - >I../../src/lib-sieve -I/usr/include/dovecot -D_FORTIFY_SOURCE=2 -std=gnu99 -g >-O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat-security - >Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar- >subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict- >aliasing=2 -MT mail-raw.lo -MD -MP -MF .deps/mail-raw.Tpo -c mail-raw.c -fPIC >-DPIC -o .libs/mail-raw.o >libtool: compile: x86_64-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. - >I../../src/lib-sieve -I/usr/include/dovecot -D_FORTIFY_SOURCE=2 -std=gnu99 -g >-O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat-security - >Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar- >subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict- >aliasing=2 -MT mail-raw.lo -MD -MP -MF .deps/mail-raw.Tpo -c mail-raw.c -o >mail-raw.o >/dev/null 2>&1 >mv -f .deps/mail-raw.Tpo .deps/mail-raw.Plo >/bin/bash ../../libtool --tag=CC --mode=link x86_64-linux-gnu-gcc - >std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat- >security -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith >-Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime - >Wstrict-aliasing=2 -Wl,-Bsymbolic-functions -Wl,-z,relro -o libsieve-tool.la >sieve-tool.lo mail-raw.lo -lrt >libtool: link: ar cru .libs/libsieve-tool.a .libs/sieve-tool.o .libs/mail- >raw.o >libtool: link: ranlib .libs/libsieve-tool.a >libtool: link: ( cd ".libs" && rm -f "libsieve-tool.la" && ln -s "../libsieve- >tool.la" "libsieve-tool.la" ) >make[4]: Leaving directory `/build/buildd/dovecot-2.1- >pigeonhole-0.3.3/src/lib-sieve-tool' >Making all in sieve-tools >make[4]: Entering directory `/build/buildd/dovecot-2.1- >pigeonhole-0.3.3/src/sieve-tools' >x86_64-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib-sieve - >I../../src/lib-sieve-tool -I./debug -I/usr/include/dovecot - >D_FORTIFY_SOURCE=2 -std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer- >size=4 -Wformat -Wformat-security -Wall -W -Wmissing-prototypes -Wmissing- >declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast >-fno-builtin-strftime -Wstrict-aliasing=2 -MT sievec.o -MD -MP -MF >.deps/sievec.Tpo -c -o sievec.o sievec.c >mv -f .deps/sievec.Tpo .deps/sievec.Po >/bin/bash ../../libtool --tag=CC --mode=link x86_64-linux-gnu-gcc - >std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat- >security -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith >-Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime - >Wstrict-aliasing=2 -export-dynamic -Wl,-Bsymbolic-functions -Wl,-z,relro -o >sievec sievec.o ../../src/lib-sieve/libdovecot-sieve.la ../../src/lib-sieve- >tool/libsieve-tool.la -ldovecot-storage -lssl -lcrypto -ldovecot-lda - >L/usr/lib/dovecot -ldovecot -lrt >libtool: link: x86_64-linux-gnu-gcc -std=gnu99 -g -O2 -fstack-protector -- >param=ssp-buffer-size=4 -Wformat -Wformat-security -Wall -W -Wmissing- >prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 >-Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -Wl,-Bsymbolic- >functions -Wl,-z -Wl,relro -o .libs/sievec sievec.o -Wl,--export-dynamic >../../src/lib-sieve/.libs/libdovecot-sieve.so ../../src/lib-sieve- >tool/.libs/libsieve-tool.a /usr/lib/dovecot/libdovecot-storage.so -lssl - >lcrypto /usr/lib/dovecot/libdovecot-lda.so -L/usr/lib/dovecot >/usr/lib/dovecot/libdovecot.so -lrt -Wl,-rpath -Wl,/usr/lib/dovecot >/usr/bin/ld: cannot find -lssl >/usr/bin/ld: cannot find -lcrypto >collect2: ld returned 1 exit status >make[4]: *** [sievec] Error 1 >make[4]: Leaving directory `/build/buildd/dovecot-2.1- >pigeonhole-0.3.3/src/sieve-tools' >make[3]: *** [all-recursive] Error 1 >make[3]: Leaving directory `/build/buildd/dovecot-2.1-pigeonhole-0.3.3/src' >make[2]: *** [all-recursive] Error 1 >make[2]: Leaving directory `/build/buildd/dovecot-2.1-pigeonhole-0.3.3' >make[1]: *** [all] Error 2 >make[1]: Leaving directory `/build/buildd/dovecot-2.1-pigeonhole-0.3.3' >make: *** [build-stamp] Error 2

2 1

[Dovecot] Redelivery of mdbox messages to pass through sieve
by Hugh Davenport 01 Dec '12

01 Dec '12

Hey, I've been slack and haven't updated my sieve script for yonks, and finally got round to it. What I was wondering is whether there was a way to basically take all the messages from a folder and pass it through sieve again. I've found earlier messages in this list, but they were for Maildir format, not mdbox which I use now. Does anyone know of a way to do this? Cheers, Hugh

2 2

[Dovecot] Maildir conversion
by Aristidis Fesarlis 30 Nov '12

30 Nov '12

Hi all, I am using Dovecot 1.2.7, and trying to do my first Mbox to Maildir conversion. So I created a small script: > #!/bin/bash > > ls > userlist.txt > > for i in `cat userlist.txt`; do > echo "---------------------"; > echo "Converting user $i..."; > echo "---------------------"; > > su - $i -s /bin/bash -c "/opt/scripts/mb2md.pl -s mail -R"; > su - $i -s /bin/bash -c "/opt/scripts/mb2md.pl -m -s > /var/mail/$i"; > su - $i -s /bin/bash -c "cp ~$i/mail/.subscriptions > ~$i/Maildir/subscriptions"; > done > > rm -f userlist.txt I would like some help with the following: 1. Trying it, I get multiple warnings for some mailboxes like this: > "WARNING: UID from X-UID: header too low. Ignoring it Is this a problem? Or I can ignore it? 2. I understand that I also have to instruct my MDA (procmail) to deliver mail to the new location. I found that I have to create an /etc/procmailrc with the following line: > DEFAULT=$HOME/Maildir/ My question is: Some users have their own .procmailrc file inside their home directory, to filter mail etc. Their file does not contain the above statement. Would the default procmailrc file be processed for them as well? Or their file takes precedence, causing the default file not to be processed at all? Thank you

2 1

[Dovecot] Newbie Basic ACL issue
by Muhammad Yousuf Khan 30 Nov '12

30 Nov '12

i can not impliment a basic acl to a /public/.News folder. however with out ACL it works great but after implementing acl "Public" folder can be seen while subscribing but i can not create folder inside it nor i can view already created ".News" folder. when i restart dovecot it shows me some thing like this root@mailsrv:/public/.News# /etc/init.d/dovecot restart Restarting IMAP/POP3 mail server: dovecotILoading modules from directory: /usr/lib/dovecot/modules/imap IModule loaded: /usr/lib/dovecot/modules/imap/lib01_acl_plugin.so IModule loaded: /usr/lib/dovecot/modules/imap/lib02_imap_acl_plugin.so IEffective uid=65534, gid=65534, home=/tmp Iacl: No acl_shared_dict setting - shared mailbox listing is disabled root@mailsrv:/public/.News# dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.6 log_timestamp: %Y-%m-%d %H:%M:%S ssl_cert_file: /etc/ssl/certs/postfix.pem ssl_key_file: /etc/ssl/private/postfix.key login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mail_location: maildir:~/Maildir:INBOX=~/Maildir/:INDEX=~/Maildir/index mail_debug: yes mbox_write_locks: fcntl dotlock mail_plugins: acl imap_acl namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: public separator: / prefix: Public/ location: maildir:/public:INDEX=/public/index list: yes subscriptions: yes lda: mail_plugins: acl auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix plugin: acl: vfile as i read in few howto's that "dovecot-acl" file should be placed in the mail publish folder like in my case "/public/.News/dovecot-acl" here is the output of my file root@mailsrv:/public/.News# cat dovecot-acl owner lrwstipekxa anyone= lr now after this implimentation i can see the folder "Public" in subscription now when i try to create a new folder inside ".News" folder via outlook 2007 it says "cannot move the item. the server responded: 'NOPERM] Permission denied" i think i am messed up permission actually i have 2 users "tom" and "fmaster" both doing the same thing. weather i write this "anyone lrwstpekxa" or "user=tom lrwstpekxa" it does the same for both user what i want is just a simple thing. i want tom to be the owner of .News and fmaster has read only. so he can only read the news but can not delete even can not change the flag to read or unread. Note: both are system users (not virtual users) Nov 30 20:50:42 mailsrv dovecot: IMAP(fmaster): open(/public/.News/dovecot-uidlist) failed: Permission denied Nov 30 20:50:42 mailsrv dovecot: IMAP(fmaster): open(/public/.News/dovecot-uidlist) failed: Permission denied Nov 30 20:54:45 mailsrv dovecot: IMAP(fmaster): open(/public/index/.News/dovecot.index.log) failed: Permission denied (euid=1001(fmaster) egid=1001(fmaster) missing +w perm: /public/index/.News/dovecot.index.log) Nov 30 20:54:50 mailsrv dovecot: IMAP(fmaster): open(/public/index/.News/dovecot.index.log) failed: Permission denied (euid=1001(fmaster) egid=1001(fmaster) missing +w perm: /public/index/.News/dovecot.index.log) i thought its a system level permission issue so i pass this command "chmod 777 /public -R" but still i receive the same outlook error but no errors in /var/log/mail.err. please hell me what kind of user right should be on the .News folder. for example, tom or root which one should have the "rwx" rights on the folder. and what kind of changes should i made in deovecot-acl any help, tip would be highly appreciated. Thanks,

1 0

[Dovecot] 2.1.12 - Pigeonhole 0.3.3 build failed: /usr/bin/ld: cannot find -lssl -lcrypto
by Tobias Hachmer 30 Nov '12

30 Nov '12

Hello list, Although timos bugfix release this morning I can't build pigeonhole 0.3.3 for dovecot 2.1.12 successfully. I don't know if it is a new bug or if I do something wrong but with dovecot 2.1.10 all worked fine, with the same configure options. configure options (out of debian/rules for building debian package): ./configure --with-dovecot=/usr/lib/dovecot \ --host=$(DEB_HOST_GNU_TYPE) \ --build=$(DEB_BUILD_GNU_TYPE) \ --prefix=/usr \ --sysconfdir=/etc \ --libexecdir=\$${prefix}/lib \ --localstatedir=/var \ --mandir=\$${prefix}/share/man \ --infodir=\$${prefix}/share/info \ --with-moduledir=\$${prefix}/lib/dovecot/modules buildlogextraction with error, the full log is available here: https://launchpadlibrarian.net/124478979/buildlog_ubuntu-precise- amd64.dovecot-2.1-pigeonhole_0.3.3-7~kokelnet~precise_FAILEDTOBUILD.txt.gz Thanks in advance for any help, Tobias Hachmer Making all in lib-sieve-tool make[4]: Entering directory `/build/buildd/dovecot-2.1- pigeonhole-0.3.3/src/lib-sieve-tool' /bin/bash ../../libtool --tag=CC --mode=compile x86_64-linux-gnu-gcc - DHAVE_CONFIG_H -I. -I../.. -I../../src/lib-sieve -I/usr/include/dovecot - D_FORTIFY_SOURCE=2 -std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer- size=4 -Wformat -Wformat-security -Wall -W -Wmissing-prototypes -Wmissing- declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -MT sieve-tool.lo -MD -MP -MF .deps/sieve-tool.Tpo -c -o sieve-tool.lo sieve-tool.c libtool: compile: x86_64-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. - I../../src/lib-sieve -I/usr/include/dovecot -D_FORTIFY_SOURCE=2 -std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat-security - Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar- subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict- aliasing=2 -MT sieve-tool.lo -MD -MP -MF .deps/sieve-tool.Tpo -c sieve-tool.c -fPIC -DPIC -o .libs/sieve-tool.o libtool: compile: x86_64-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. - I../../src/lib-sieve -I/usr/include/dovecot -D_FORTIFY_SOURCE=2 -std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat-security - Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar- subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict- aliasing=2 -MT sieve-tool.lo -MD -MP -MF .deps/sieve-tool.Tpo -c sieve-tool.c -o sieve-tool.o >/dev/null 2>&1 mv -f .deps/sieve-tool.Tpo .deps/sieve-tool.Plo /bin/bash ../../libtool --tag=CC --mode=compile x86_64-linux-gnu-gcc - DHAVE_CONFIG_H -I. -I../.. -I../../src/lib-sieve -I/usr/include/dovecot - D_FORTIFY_SOURCE=2 -std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer- size=4 -Wformat -Wformat-security -Wall -W -Wmissing-prototypes -Wmissing- declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -MT mail-raw.lo -MD -MP -MF .deps/mail-raw.Tpo -c -o mail-raw.lo mail-raw.c libtool: compile: x86_64-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. - I../../src/lib-sieve -I/usr/include/dovecot -D_FORTIFY_SOURCE=2 -std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat-security - Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar- subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict- aliasing=2 -MT mail-raw.lo -MD -MP -MF .deps/mail-raw.Tpo -c mail-raw.c -fPIC -DPIC -o .libs/mail-raw.o libtool: compile: x86_64-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. - I../../src/lib-sieve -I/usr/include/dovecot -D_FORTIFY_SOURCE=2 -std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat-security - Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar- subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict- aliasing=2 -MT mail-raw.lo -MD -MP -MF .deps/mail-raw.Tpo -c mail-raw.c -o mail-raw.o >/dev/null 2>&1 mv -f .deps/mail-raw.Tpo .deps/mail-raw.Plo /bin/bash ../../libtool --tag=CC --mode=link x86_64-linux-gnu-gcc - std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat- security -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime - Wstrict-aliasing=2 -Wl,-Bsymbolic-functions -Wl,-z,relro -o libsieve-tool.la sieve-tool.lo mail-raw.lo -lrt libtool: link: ar cru .libs/libsieve-tool.a .libs/sieve-tool.o .libs/mail- raw.o libtool: link: ranlib .libs/libsieve-tool.a libtool: link: ( cd ".libs" && rm -f "libsieve-tool.la" && ln -s "../libsieve- tool.la" "libsieve-tool.la" ) make[4]: Leaving directory `/build/buildd/dovecot-2.1- pigeonhole-0.3.3/src/lib-sieve-tool' Making all in sieve-tools make[4]: Entering directory `/build/buildd/dovecot-2.1- pigeonhole-0.3.3/src/sieve-tools' x86_64-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib-sieve - I../../src/lib-sieve-tool -I./debug -I/usr/include/dovecot - D_FORTIFY_SOURCE=2 -std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer- size=4 -Wformat -Wformat-security -Wall -W -Wmissing-prototypes -Wmissing- declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -MT sievec.o -MD -MP -MF .deps/sievec.Tpo -c -o sievec.o sievec.c mv -f .deps/sievec.Tpo .deps/sievec.Po /bin/bash ../../libtool --tag=CC --mode=link x86_64-linux-gnu-gcc - std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat- security -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime - Wstrict-aliasing=2 -export-dynamic -Wl,-Bsymbolic-functions -Wl,-z,relro -o sievec sievec.o ../../src/lib-sieve/libdovecot-sieve.la ../../src/lib-sieve- tool/libsieve-tool.la -ldovecot-storage -lssl -lcrypto -ldovecot-lda - L/usr/lib/dovecot -ldovecot -lrt libtool: link: x86_64-linux-gnu-gcc -std=gnu99 -g -O2 -fstack-protector -- param=ssp-buffer-size=4 -Wformat -Wformat-security -Wall -W -Wmissing- prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -Wl,-Bsymbolic- functions -Wl,-z -Wl,relro -o .libs/sievec sievec.o -Wl,--export-dynamic ../../src/lib-sieve/.libs/libdovecot-sieve.so ../../src/lib-sieve- tool/.libs/libsieve-tool.a /usr/lib/dovecot/libdovecot-storage.so -lssl - lcrypto /usr/lib/dovecot/libdovecot-lda.so -L/usr/lib/dovecot /usr/lib/dovecot/libdovecot.so -lrt -Wl,-rpath -Wl,/usr/lib/dovecot /usr/bin/ld: cannot find -lssl /usr/bin/ld: cannot find -lcrypto collect2: ld returned 1 exit status make[4]: *** [sievec] Error 1 make[4]: Leaving directory `/build/buildd/dovecot-2.1- pigeonhole-0.3.3/src/sieve-tools' make[3]: *** [all-recursive] Error 1 make[3]: Leaving directory `/build/buildd/dovecot-2.1-pigeonhole-0.3.3/src' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/build/buildd/dovecot-2.1-pigeonhole-0.3.3' make[1]: *** [all] Error 2 make[1]: Leaving directory `/build/buildd/dovecot-2.1-pigeonhole-0.3.3' make: *** [build-stamp] Error 2

2 2

[Dovecot] v2.1.12 released
by Timo Sirainen 30 Nov '12

30 Nov '12

http://dovecot.org/releases/2.1/dovecot-2.1.12.tar.gz http://dovecot.org/releases/2.1/dovecot-2.1.12.tar.gz.sig The dovecot-config file installed by v2.1.11 was missing quotes, which broke building Pigeonhole. This release fixes that.

2 1

[Dovecot] v2.1.11 released
by Timo Sirainen 30 Nov '12

30 Nov '12

http://dovecot.org/releases/2.1/dovecot-2.1.11.tar.gz http://dovecot.org/releases/2.1/dovecot-2.1.11.tar.gz.sig * lmtp/lda: dovecot.index.cache file is no longer fully mapped to memory, allowing mail deliveries to work even if the file is huge. * auth: userdb passwd lookups are now done by auth worker processes instead of auth master process (as it was documented, but accidentally didn't work that way). + lmtp: lmtp_rcpt_check_quota=yes setting checks quota on RCPT TO. - lmtp: After successful proxying RCPT TO, the next one to a nonexistent user gave tempfail error instead of "user not found". - lmtp proxy: Fixed hanging if remote server was down. - imap: Fixed crash when SEARCH contained multiple KEYWORD parameters. - doveadm: Various fixes to handling doveadm-server connections. - -i <instance name> parameter for Dovecot tools didn't work correctly. - director was somewhat broken in v2.1.10. This version also includes various reliability enhancements. - auth: passdb imap was broken in v2.1.10.

2 1

Re: [Dovecot] Tcpflow capture
by Daniel L. Miller 30 Nov '12

30 Nov '12

On 11/29/2012 9:32 PM, Daniel L. Miller wrote: > > I (hopefully) fixed my config - put 'zlib' into 10-mail.conf and > removed it from the others. Re-indexing is now good on some mailboxes > that were broken before - but I still have a fault on others. > Using the tcpflow dump, I found a couple bad messages that I didn't care about storing - so I deleted them. Then, after no change - I remembered to do a "compact" in my MUA. That cleared up one mailbox - then dovecot complained about various errors & corruption on another mailbox. So I'll start a new thread for that as it looks like the solr interface is now good! -- Daniel

2 2

[Dovecot] mdbox corruption
by Daniel L. Miller 30 Nov '12

30 Nov '12

Trying to clean up the last of the corruption caused by my own stupidity. I now have two mailboxes for one user that give errors such as: doveadm(fax(a)amfes.com): Error: zlib.read(/var/mail/amfes.com/fax/mdbox/storage/m.9): gz trailer has wrong CRC value at 20065618 doveadm(fax(a)amfes.com): Error: read(/var/mail/amfes.com/fax/mdbox/storage/m.9) failed: Invalid argument (uid=238) doveadm(fax(a)amfes.com): Error: zlib.read(/var/mail/amfes.com/fax/mdbox/storage/m.9): corrupted data at 20145217 [...] doveadm(fax(a)amfes.com): Error: read(/var/mail/amfes.com/fax/mdbox/storage/m.20) failed: Invalid argument (uid=5155) doveadm(fax(a)amfes.com): Error: zlib.read(/var/mail/amfes.com/fax/mdbox/storage/m.20): corrupted data at 24779604 doveadm(fax(a)amfes.com): Error: Cached message size smaller than expected (1259 < 1260) doveadm(fax(a)amfes.com): Error: Corrupted index cache file /var/mail/amfes.com/fax/mdbox/mailboxes/INBOX/2010/dbox-Mails/dovecot.index.cache: Broken physical size for mail UID 5158 'doveadm force-resync' does not appear to fix these. There appear to be only the two mdbox files affected and I see about 40 errors. I would prefer to salvage as much as possible of these. What options do I have? Do a dsync to another location and take whatever I get? -- Daniel

2 1

Re: [Dovecot] Tcpflow capture
by Daniel L. Miller 30 Nov '12

30 Nov '12

On 11/29/2012 12:49 PM, Timo Sirainen wrote: > On 29.11.2012, at 18.06, Daniel L. Miller wrote: > >> On 11/28/2012 10:37 PM, Timo Sirainen wrote: >>> On 29.11.2012, at 7.47, Daniel L. Miller wrote: >>> >>>>> doveadm fetch text -u amiller(a)amfes.com mailbox-guid a47e4e264aa1c94cc35100003bc41c5f uid 12891 >>>>> >>>> The result of that, when adding a "> test", generates a 11 byte file. >>>> >>>> Hexedit shows me that as: >>>> 74 65 78 74 3A 0A 1F 8B 08 0C 0A >>>> >>>> Otherwise a simple 'less' give me: >>>> text: >>>> ^_<8B>^H^L >>>> >>>> Does this tell you anything? >>> First of all it tells me that you either have some very corrupted messages in your mailbox, or you have some compressed messages but without zlib plugin enabled. >> 10-mail.conf - mail_plugins = fts fts_solr acl >> 15-lda.conf - mail_plugins = $mail_plugins sieve >> 20-imap.conf - mail_plugins = $mail_plugins zlib imap_acl >> 20-lmtp.conf - mail_plugins = $mail_plugins sieve > OK, so all of the compressed mails will be indexed as garbage. > >> My intent was to be able to read zlib mails, but not write new ones. I may change this to just have zlib in 10-mail and start writing compressed. Unless this is/will cause corruption. > Enabling zlib plugin doesn't enable compression on writing. plugin { zlib_save=yes } is required for that. > I (hopefully) fixed my config - put 'zlib' into 10-mail.conf and removed it from the others. Re-indexing is now good on some mailboxes that were broken before - but I still have a fault on others. -- Daniel

1 0

[Dovecot] cmd-vacation.c:4:17: fatal error: lib.h: No such file or directory && ./configure: line 11410: -lssl: command not found
by Tobias Hachmer 29 Nov '12

29 Nov '12

Hello Timo, Building 2.1.11 was ok, but rebuilding pigeonhole 0.3.3 for dovecot 2.1.11 show up the following errors: checking for dovecot-config in "/usr/lib/dovecot"... /usr/lib/dovecot/dovecot- config ./configure: line 11410: -lssl: command not found checking whether OS supports plugin dependencies... yes configure: creating ./config.status config.status: creating Makefile config.status: creating doc/Makefile config.status: creating doc/man/Makefile config.status: creating doc/example-config/Makefile config.status: creating doc/example-config/conf.d/Makefile config.status: creating doc/rfc/Makefile config.status: creating src/Makefile config.status: creating src/lib-sieve/Makefile config.status: creating src/lib-sieve/plugins/Makefile config.status: creating src/lib-sieve/plugins/vacation/Makefile config.status: creating src/lib-sieve/plugins/subaddress/Makefile config.status: creating src/lib-sieve/plugins/comparator-i-ascii- numeric/Makefile config.status: creating src/lib-sieve/plugins/relational/Makefile config.status: creating src/lib-sieve/plugins/regex/Makefile config.status: creating src/lib-sieve/plugins/imap4flags/Makefile config.status: creating src/lib-sieve/plugins/copy/Makefile config.status: creating src/lib-sieve/plugins/include/Makefile config.status: creating src/lib-sieve/plugins/body/Makefile config.status: creating src/lib-sieve/plugins/variables/Makefile config.status: creating src/lib-sieve/plugins/enotify/Makefile config.status: creating src/lib-sieve/plugins/enotify/mailto/Makefile config.status: creating src/lib-sieve/plugins/notify/Makefile config.status: creating src/lib-sieve/plugins/environment/Makefile config.status: creating src/lib-sieve/plugins/mailbox/Makefile config.status: creating src/lib-sieve/plugins/date/Makefile config.status: creating src/lib-sieve/plugins/spamvirustest/Makefile config.status: creating src/lib-sieve/plugins/ihave/Makefile config.status: creating src/lib-sieve/plugins/editheader/Makefile config.status: creating src/lib-sieve/plugins/vnd.dovecot/Makefile config.status: creating src/lib-sieve/plugins/vnd.dovecot/debug/Makefile config.status: creating src/lib-sieve/plugins/vnd.dovecot/duplicate/Makefile config.status: creating src/lib-sieve-tool/Makefile config.status: creating src/lib-sievestorage/Makefile config.status: creating src/lib-managesieve/Makefile config.status: creating src/plugins/Makefile config.status: creating src/plugins/lda-sieve/Makefile config.status: creating src/sieve-tools/Makefile config.status: creating src/managesieve/Makefile config.status: creating src/managesieve-login/Makefile config.status: creating src/testsuite/Makefile config.status: creating stamp.h config.status: creating dummy-config.h config.status: creating pigeonhole-config.h config.status: executing depfiles commands config.status: executing libtool commands dh_testdir # Add here commands to compile the package. /usr/bin/make make[1]: Entering directory `/home/tobias/pighole_test/dovecot-2.1- pigeonhole-0.3.3' /usr/bin/make all-recursive make[2]: Entering directory `/home/tobias/pighole_test/dovecot-2.1- pigeonhole-0.3.3' Making all in src make[3]: Entering directory `/home/tobias/pighole_test/dovecot-2.1- pigeonhole-0.3.3/src' Making all in lib-sieve make[4]: Entering directory `/home/tobias/pighole_test/dovecot-2.1- pigeonhole-0.3.3/src/lib-sieve' Making all in plugins make[5]: Entering directory `/home/tobias/pighole_test/dovecot-2.1- pigeonhole-0.3.3/src/lib-sieve/plugins' Making all in vacation make[6]: Entering directory `/home/tobias/pighole_test/dovecot-2.1- pigeonhole-0.3.3/src/lib-sieve/plugins/vacation' /bin/bash ../../../../libtool --tag=CC --mode=compile x86_64-linux-gnu-gcc - DHAVE_CONFIG_H -I. -I../../../.. -I./../../ -D_FORTIFY_SOURCE=2 -std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat-security - Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar- subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict- aliasing=2 -MT cmd-vacation.lo -MD -MP -MF .deps/cmd-vacation.Tpo -c -o cmd- vacation.lo cmd-vacation.c libtool: compile: x86_64-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../../../.. - I./../../ -D_FORTIFY_SOURCE=2 -std=gnu99 -g -O2 -fstack-protector --param=ssp- buffer-size=4 -Wformat -Wformat-security -Wall -W -Wmissing-prototypes - Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad- function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -MT cmd-vacation.lo - MD -MP -MF .deps/cmd-vacation.Tpo -c cmd-vacation.c -fPIC -DPIC -o .libs/cmd- vacation.o cmd-vacation.c:4:17: fatal error: lib.h: No such file or directory compilation terminated. make[6]: *** [cmd-vacation.lo] Error 1 make[6]: Leaving directory `/home/tobias/pighole_test/dovecot-2.1- pigeonhole-0.3.3/src/lib-sieve/plugins/vacation' make[5]: *** [all-recursive] Error 1 make[5]: Leaving directory `/home/tobias/pighole_test/dovecot-2.1- pigeonhole-0.3.3/src/lib-sieve/plugins' make[4]: *** [all-recursive] Error 1 make[4]: Leaving directory `/home/tobias/pighole_test/dovecot-2.1- pigeonhole-0.3.3/src/lib-sieve' make[3]: *** [all-recursive] Error 1 make[3]: Leaving directory `/home/tobias/pighole_test/dovecot-2.1- pigeonhole-0.3.3/src' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/home/tobias/pighole_test/dovecot-2.1- pigeonhole-0.3.3' make[1]: *** [all] Error 2 make[1]: Leaving directory `/home/tobias/pighole_test/dovecot-2.1- pigeonhole-0.3.3' make: *** [build-stamp] Error 2 my configure options: ./configure --with-dovecot=/usr/lib/dovecot --prefix=/usr --sysconfdir=/etc -- libexecdir=/usr/lib --localstatedir=/var --mandir=/usr/share/man -- infodir=/usr/share/info --with-moduledir=/usr/lib/dovecot/modules Regards, Tobias Hachmer

2 4

[Dovecot] Missing Messages on IOS device
by David Morsberger 29 Nov '12

29 Nov '12

Resending because I didn't get any responses from my first post: I just converted my old server running UW/Panda to a Mac Mini Server running Mountain Lion (ML) Server. I'm using the postfix / dovecot setup provided by Apple. My IMAP clients are not showing all my emails. The Mail App on my iPhone and iPad is behaving the worse. I can see the emails that are not showing up in the cur directory. The ML Mail App is stating there are 3854 emails in my INBOX. There are 3948 files in the 'cur' directory ('ls cur | wc -l' returns 3948). Other mailboxes and directories have the same behavior. I'm not sure what to expect here. My method of conversion was to bulk copy (drag and drop) all the messages from one the UW server to the Dovecot server using the Apple Desktop Mail App in Mountain Lion. Any idea why these messages are not showing up on my devices and how I can get them to show up? bash-3.2# /Applications/Server.app/Contents/ServerRoot/usr/sbin/dovecotd --version 2.0.19apple1 bash-3.2# /Applications/Server.app/Contents/ServerRoot/usr/sbin/dovecotd -n # 2.0.19apple1: /Library/Server/Mail/Config/dovecot/dovecot.conf # OS: Darwin 12.2.1 x86_64 hfs aps_topic = com.apple.mail.XServer.fc3bb7c3-c8ef-4fe2-aff3-95ecd927fb11 auth_mechanisms = cram-md5 x-plain-submit plain login apop digest-md5 auth_socket_path = /var/run/dovecot/auth-userdb auth_username_format = %n default_internal_user = _dovecot default_login_user = _dovenull disable_plaintext_auth = no first_valid_gid = 6 first_valid_uid = 6 mail_access_groups = mail mail_location = maildir:/Library/Server/Mail/Data/mail/%u mail_log_prefix = "%s(pid %p user %u): " mail_plugins = quota zlib fts fts_sk managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mdbox_rotate_size = 200 M passdb { args = /Library/Server/Mail/Config/dovecot/submit.passdb driver = passwd-file pass = yes submit = yes } passdb { driver = od } plugin { fts = sk quota = maildir:User quota quota_warning = storage=100%% quota-exceeded %u sieve = /Library/Server/Mail/Data/rules/%u/dovecot.sieve sieve_dir = /Library/Server/Mail/Data/rules/%u } postmaster_address = postmaster(a)mini.mmpcrofton.com protocols = imap pop3 lmtp sieve quota_full_tempfail = yes service auth { extra_groups = _keytabusers idle_kill = 15 mins unix_listener auth-userdb { user = _dovecot } } service dns_client { unix_listener dns-client { mode = 0600 } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } service_count = 0 } service imap { client_limit = 5 process_limit = 200 service_count = 0 } service lmtp { unix_listener lmtp { mode = 0600 } } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service pop3 { client_limit = 5 process_limit = 200 service_count = 0 } service quota-exceeded { executable = script /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/quota-exceeded.sh unix_listener quota-exceeded { group = mail mode = 0660 user = _dovecot } user = _dovecot } service quota-warning { executable = script /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/quota-warning.sh unix_listener quota-warning { group = mail mode = 0660 user = _dovecot } user = _dovecot } ssl_ca = </etc/certificates/*.chain.pem ssl_cert = </etc/certificates/*.cert.pem ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL:!ADH:!eNULL ssl_key = </etc/certificates/*.key.pem ssl_key_path = /etc/certificates/*.key.pem syslog_facility = local6 userdb { args = partition=/Library/Server/Mail/Config/dovecot/partition_map.conf enforce_quotas=no driver = od } verbose_proctitle = yes protocol lmtp { mail_plugins = quota zlib fts fts_sk sieve push_notify } protocol lda { mail_plugins = quota zlib fts fts_sk sieve push_notify } protocol imap { imap_id_log = * imap_id_send = "name" * "version" * mail_max_userip_connections = 20 mail_plugins = quota zlib fts fts_sk imap_quota imap_zlib imap_fts urlauth } protocol pop3 { mail_max_userip_connections = 6 }

3 3

[Dovecot] Problem with mail_location and INDEX location
by Matt Jones 29 Nov '12

29 Nov '12

HI, I'm pulling my hair out a little trying to get dovecot to save it's index locally rather than in the NFS mount. No matter what I do it seems to save the indices in the Maildir on the NFS. I'm using dovecot 2.0.18 on CentOS 6.3. The relevant config I'm using: mmap_disable = no dotlock_use_excl = no # only needed with NFSv2, NFSv3+ supports O_EXCL and it's faster mail_fsync = always mail_nfs_storage = yes mail_nfs_index = no lock_method = dotlock # Mail location and mailbox format. mail_location = maildir:/%Lh/Maildir/:INDEX=/var/indexes/%Ld/%Lu/ Dovecot runs under the user:group vmail:vmail, and the user has write access to those directories. [root@tay var]# ls -al total 96 drwxr-xr-x. 24 root root 4096 Nov 29 09:36 . dr-xr-xr-x. 23 root root 4096 Nov 28 15:26 .. drwxr-x--- 5 amavis amavis 4096 Nov 29 09:21 amavis drwxr-xr-x. 10 root root 4096 Nov 28 15:14 cache drwxr-xr-x. 2 clamav clamav 4096 Nov 29 03:49 clamav drwxr-xr-x. 3 root root 4096 Nov 28 14:21 db drwxr-xr-x. 3 root root 4096 Nov 28 13:35 empty drwxr-xr-x. 2 root root 4096 Sep 23 2011 games drwx------ 2 vmail vmail 4096 Nov 29 10:42 indexes drwxr-xr-x. 25 root root 4096 Nov 28 15:15 lib drwxr-xr-x. 2 root root 4096 Sep 23 2011 local drwxrwxr-x. 5 root lock 4096 Nov 29 03:49 lock drwxr-xr-x. 5 root root 4096 Nov 29 04:10 log lrwxrwxrwx. 1 root root 10 Nov 28 13:34 mail -> spool/mail drwxr-xr-x. 2 root root 4096 Sep 23 2011 nis drwxr-xr-x. 2 root root 4096 Sep 23 2011 opt drwxr-xr-x. 2 root root 4096 Sep 23 2011 preserve drwxr-xr-x. 20 root root 4096 Nov 29 09:51 run drwxr-xr-x. 9 root root 4096 Nov 28 15:14 spool drwxrwxrwt. 3 root root 4096 Nov 29 09:22 tmp drwxr-x--- 2 amavis amavis 4096 Jun 8 15:39 virusmails drwx------. 5 vmail vmail 4096 Nov 29 09:35 vmail drwx------. 3 root bin 4096 Nov 29 09:22 webmin drwxr-xr-x. 12 root root 4096 Nov 28 15:17 www drwxr-xr-x. 2 root root 4096 Sep 23 2011 yp After restarting dovecot, and logging in via imap, I see the following under the Maildir: [root@tay Maildir]# ls -al /var/vmail/vmail1/orphans.co.uk/m/a/t/matt-2011.07.06.09.41.05/Maildir total 56 drwx------ 9 vmail vmail 4096 Nov 29 10:57 . drwx------ 3 vmail vmail 4096 Nov 29 10:17 .. drwx------ 2 vmail vmail 4096 Nov 29 10:41 cur -rw------- 1 vmail vmail 248 Nov 29 10:41 dovecot.index.log -rw------- 1 vmail vmail 120 Nov 29 10:41 dovecot.mailbox.log -rw------- 1 vmail vmail 51 Nov 29 10:41 dovecot-uidlist -rw------- 1 vmail vmail 8 Nov 29 10:41 dovecot-uidvalidity -r--r--r-- 1 vmail vmail 0 Nov 29 10:41 dovecot-uidvalidity.50b73be3 drwx------ 5 vmail vmail 4096 Nov 29 10:41 .Drafts drwx------ 5 vmail vmail 4096 Nov 29 10:41 .Junk drwx------ 2 vmail vmail 4096 Nov 29 10:41 new drwx------ 5 vmail vmail 4096 Nov 29 10:41 .Sent -rw------- 1 vmail vmail 29 Nov 29 10:41 subscriptions drwx------ 2 vmail vmail 4096 Nov 29 10:41 tmp drwx------ 5 vmail vmail 4096 Nov 29 10:41 .Trash [root@tay Maildir]# ls -al /var/indexes/ total 8 drwx------ 2 vmail vmail 4096 Nov 29 10:42 . drwxr-xr-x. 24 root root 4096 Nov 29 09:36 .. Any ideas? Matt

2 1

[Dovecot] Missing quotes in dovecot-config causes pigeonhole to failed.
by nanashi 29 Nov '12

29 Nov '12

I had to manually quote in dovecot-config LIBDOVECOT_LOGIN='-ldovecot-login -lssl -lcrypto ' by default was LIBDOVECOT_LOGIN=-ldovecot-login -lssl -lcrypto That cause pigeonhole to failed. Regards nanashi

2 1

[Dovecot] Shutting down my Dovecot server?
by Bjørn T Johansen 29 Nov '12

29 Nov '12

I am planning to shut down my own Dovecot server and start using the other Dovecot server I am administering together with a friend.. And I was thinking that I don't want to copy the emails I have on my server so I want to start from scratch on the other server.. But I would like to be able to look at the old emails if I need to, so was wondering if there is a way to do this without using an imap server? Can I convert my mails stored in the maildir format to mbox or is there a better way to solve my problem? Regards, BTJ -- ----------------------------------------------------------------------------------------------- Bjørn T Johansen btj(a)havleik.no ----------------------------------------------------------------------------------------------- Someone wrote: "I understand that if you play a Windows CD backwards you hear strange Satanic messages" To which someone replied: "It's even worse than that; play it forwards and it installs Windows" ----------------------------------------------------------------------------------------------- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

5 10

Re: [Dovecot] Umask of Homedir
by sobotka karel 29 Nov '12

29 Nov '12

Hi, I know it's a while since you've had this issue, but still do you remember by any chance how you solved this? I'm having the same problems, when all the directories are created with 700 and I need a group permissions to be at least 750. Thanks! regards,

1 0

Re: [Dovecot] panic fts_solr for bad attachment
by Daniel L. Miller 28 Nov '12

28 Nov '12

On 11/28/2012 8:49 AM, Daniel L. Miller wrote: > On 11/28/2012 12:55 AM, Timo Sirainen wrote: >> On 28.11.2012, at 10.50, Daniel L. Miller wrote: >> >>> On 11/27/2012 6:45 PM, Timo Sirainen wrote: >>>> On 28.11.2012, at 4.43, Daniel L. Miller wrote: >>>> >>>>>> I did go through the code looking for that a few times already >>>>>> but didn't notice anything. I went through it once more, and >>>>>> finally found the problem. :) >>>>>> http://hg.dovecot.org/dovecot-2.1/rev/6a97faf3e500 >>>>>> >>>>> :( Mine still breaks. Both UTF-8 and Control-Char errors. >>>> Can you grab the network traffic between Dovecot and Solr and find >>>> the problematic stream? >>>> >>> Tell me how and I'll be happy to! >> Maybe the easiest would be to use tcpflow. It outputs different TCP >> streams to different files. From them you can then grep for the error >> and look closer into it. I guess something like wireshark would work >> too, but I've never been able to use its GUI in a useful way. >> > Would I just do "tcpflow -i lo port 8983"? Or something else? > Stream capture sent to you. -- Daniel

1 0

Re: [Dovecot] panic fts_solr for bad attachment
by Daniel L. Miller 28 Nov '12

28 Nov '12

On 11/27/2012 7:28 AM, Daniel L. Miller wrote: > On 11/26/2012 10:08 PM, Timo Sirainen wrote: >> On 27.11.2012, at 7.50, Timo Sirainen wrote: >> >>>> Nov 26, 2012 8:49:29 PM org.apache.solr.common.SolrException log >>>> SEVERE: org.apache.solr.common.SolrException: Illegal character >>>> ((CTRL-CHAR, code 8)) >>>> at [row,col {unknown-source}]: [1011144,197790] >>> Something's wrong. The Solr code was already supposed to catch all >>> of these. >> I was taking a brief scan of the code - and as usual I'm probably wrong - but I believe the protection comes from the xml_encode functions. Could it be that there are some solr writes that don't go through that function - because it is assumed that the data in question doesn't need that processing? Like mailbox names, field names, or uids - that SHOULDN'T have any garbage but maybe something is creeping in? -- Daniel

2 6

[Dovecot] shared mailboxes and indexes
by Angel L. Mateo 28 Nov '12

28 Nov '12

Hello, We are deploying shared mailboxes in our mail system. We are running 2.1.9 and mail backend is maildir. As described at http://wiki.dovecot.org/SharedMailboxes/Shared when shared namespace is configured as namespace shared { separator = / prefix = shared/%%u/ location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u subscriptions = no list = children } each user accessing this folder has its own index, stored in ~/Maildir/shared/%%u/<shared mailbox>, hasn't it? Our mail is store in NFS disks so we are very concerned about indexes optimizations (we had performance problems until we got all of our indexes and nfs tunned). So, is there any way so those indexes could be shared for all users (and they always would be updated). Regarding this... if we'd use dbox instead of maildir, indexes are a really important part of the mailbox and they can't be re-constructed when they are outdated. So, how do shared mailboxes work with dbox backend? Do I have to configure indexes in any particular way? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

4 10

[Dovecot] problems with quota and clients
by Marco Sacchetto 28 Nov '12

28 Nov '12

Hi, I had configured dovecot in a pretty standard way and had it working nicely enough with maildir quotas (no tests done apart for reaching the quota and looking at mails coming back). Still I wanted to have the quota and the actual quota usage displayed in postfixadmin (3.5) but I think I messed with something. Now I can connect to the mailbox, send mail, receive mail, see the quota usage in postfixadmin but: * thunderbird: can create a subfolder if i do so by hand from the client. But if I try sending a mail i get a [TRYCREATE] mailbox error as it seems that thunderbird can't create the Sent box anymore by its own; * thunderbird: when i delete mail, it goes in the trash folder. I try then to delete it from there. In thunderbird indeed I see no mail anymore but the quota level remain the same. Then I try to browser the mail directory and... yep, all the messages are still there! How come? This is the output of dovecot -n and the relevant sql configuration : # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-33-generic i686 Ubuntu 12.04.1 LTS ext4 auth_mechanisms = plain login auth_realms = yyyyyyyyy.it aaaaaaa.com xxxxx.it auth_verbose_passwords = plain debug_log_path = syslog dict { quotadict = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext sqlquota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } first_valid_uid = 150 info_log_path = /var/log/syslog last_valid_uid = 150 listen = * mail_debug = yes mail_gid = mail mail_location = maildir:/var/vmail/%d/%u mail_plugins = " quota" mail_uid = vmail passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = dict:User quota::proxy::sqlquota quota_rule = *:storage=50M quota_rule2 = Trash:storage=+10M } postmaster_address = xxxxxxxx(a)yyyyyyyyy.it protocols = " imap pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = mail mode = 0600 user = vmail } } service dict { unix_listener dict { group = mail mode = 0660 user = vmail } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = quota } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota } >>grep -v '^ *$#.*$\?$' dovecot-dict-sql.conf.ext connect = host=127.0.0.1 dbname=mail user=mail password=xxxxxxx map { pattern = priv/quota/storage table = quota2 username_field = username value_field = bytes } map { pattern = priv/quota/messages table = quota2 username_field = username value_field = messages } >>grep -v '^ *$#.*$\?$' dovecot-sql.conf.ext driver = mysql connect = host=localhost dbname=mail user=mail password=xxxxxxx default_pass_scheme = MD5-CRYPT password_query = \ SELECT username as user, password, '/var/vmail/%d/%u' as userdb_home, \ 'maildir:/var/vmail/%d/%u' as userdb_mail, 150 as userdb_uid, 8 as userdb_gid \ FROM mailbox WHERE username = '%u' AND active = '1' user_query = \ SELECT '/var/vmail/%d/%u' as home, 'maildir:/var/vmail/%d/%u' as mail, \ 150 AS uid, 8 AS gid, CONCAT('*:storage=',ROUND(mailbox.quota / 1024)) AS quota_rule \ FROM mailbox WHERE username = '%u' AND active = '1' iterate_query = SELECT username AS user FROM mailbox -- -- Questo messaggio è di carattere riservato ed è indirizzato esclusivamente al destinatario specificato. L'accesso, la divulgazione, la copia o la diffusione sono vietate a chiunque altro ai sensi delle normative vigenti, e possono costituire una violazione penale. Nel caso abbiate ricevuto questo messaggio per errore siete tenuti a cancellarlo immediatamente confermando al mittente, a mezzo e-mail, l'avvenuta cancellazione. (Legge Italiana 196/2003).

1 0

[Dovecot] Vacation messages come from POSTMASTER, not user
by cfowler 28 Nov '12

28 Nov '12

Problem : All vacation autoreplies come from the postmaster address. Expected behavior : vacation notice comes from the user who set the vacation. Platform : Dovecot 2.1.7 on Debian Squeeze ( See below for example reply, sieve script and dovecot -n output) Any help appreciated! ---------------------------------------------------------------------------------------- Sieve script used: if true { vacation :days 2 :subject "Out of Office" "I am currently out of the office"; stop; } ---------------------------------------------------------------------------------------- Return-Path: <> X-Original-To: teststff(a)mydomain.com Delivered-To: teststff(a)mydomain.com Received: from localhost (localhost [127.0.0.1]) by quicksilver.mydomain.com (Postfix) with ESMTP id 12591BE16 for <teststff(a)mydomain.com>; Mon, 26 Nov 2012 16:54:16 +0000 (GMT) X-Virus-Scanned: Debian amavisd-new at mydomain.com X-Spam-Flag: NO X-Spam-Score: -0.501 X-Spam-Level: X-Spam-Status: No, score=-0.501 required=5 tests=[BAYES_05=-0.5, NO_RELAYS=-0.001] autolearn=no Received: from quicksilver.mydomain.com ([127.0.0.1]) by localhost (quicksilver.mydomain.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DNM8HKzR4d0t for <teststff(a)mydomain.com>; Mon, 26 Nov 2012 16:54:06 +0000 (GMT) Received: by quicksilver.mydomain.com (Postfix, from userid 15099) id DA3DABE1B; Mon, 26 Nov 2012 16:54:06 +0000 (GMT) X-Sieve: Pigeonhole Sieve 0.3.0 Message-ID: <dovecot-sieve-1353948846-837692-0(a)quicksilver.mydomain.com> Date: Mon, 26 Nov 2012 16:54:06 +0000 From: Postmaster <root(a)mydomain.com> To: <teststff(a)mydomain.com> Subject: Out of Office In-Reply-To: <ac0fe0e6de81129e7499aba9aa67697a@localhost> References: <ac0fe0e6de81129e7499aba9aa67697a@localhost> Auto-Submitted: auto-replied (vacation) Precedence: bulk MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit I am currently out of the office ---------------------------------------------------------------------------------------- # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.6 ext3 auth_debug = yes auth_debug_passwords = yes auth_verbose = yes listen = *, [::] log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/var/maildirs/%n/Maildir mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { home = /var/maildirs/%u mail_debug = yes sieve = /var/maildirs/%u/deliver.sieve sieve_dir = /var/maildirs/%n/sieve sieve_global_dir = /etc/sieve/ sieve_global_path = /etc/sieve/deliver.sieve sieve_vacation_dont_check_recipient = yes } protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { mode = 0600 } user = root } service imap-login { client_limit = 256 process_min_avail = 16 service_count = 0 vsz_limit = 256 M } service managesieve-login { client_limit = 256 process_min_avail = 16 service_count = 0 vsz_limit = 256 M } service pop3-login { client_limit = 256 process_min_avail = 16 service_count = 0 vsz_limit = 256 M } ssl_cert = </var/certs/wildcard.mydomain.ie-including-chain.pem ssl_key = </var/certs/wildcard.mydomain.ie.key userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 20 } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } protocol lda { auth_socket_path = /var/run/dovecot/auth-master mail_debug = yes mail_plugins = sieve postmaster_address = root(a)mydomain.ie }

5 7

[Dovecot] Any chance to access read-only mdboxes?
by Jost Krieger 28 Nov '12

28 Nov '12

We would like to provide a self-service restore function to our users using their IMAP client of choice.. Our idea was to use a snapshot (under ZFS, btrfs, whatever) and have it available to the user in a namespace. Unfortunately, but understandably, dovecot doesn't like the mdbox structure to be read-only. Is there any chance to change that? In the meantime, we could use a read-write snapshot, but we wouldn't like the users to really do changes to that snapshot. Our next attempt is to use ACLs, but it's a bit hard to gt the ACLs to the correct place in the snapshots, at least for thousands of users. Our currents solution (in test) is a quick and dirty patch to introduce inheritance to the ACLs by walking up the directory tree, so we need only one ACL. A cleaner solution would be very much appreciated. Yours Jost Krieger -- | Helft Spam ausrotten! HTML in Mail ist unhöflich. | | Postmaster, JAPH, manchmal Wahrsager am RZ der RUB | | Wahre Worte sind nicht gefällig, gefällige Worte sind nicht wahr.| | Lao Tse, Tao Te King 81 |

4 4

[Dovecot] Dovecot sieve with postfix.
by /#!/JoePea 28 Nov '12

28 Nov '12

Hi all, I can't get dovecot working with postfix. If I leave virtual_transport set to "virtual", I can send and receive messages just fine in roundcube. If I set virtual_transport to "dovecot", I can only send messages in roundcube, but incoming messages never arrive. Seems I can't get dovecot-lda to work. I need dovecot-lda in order for sieve filters to work. Any idea what I'm doing wrong? Here's `doveconf -n`: http://pastie.org/5401133 `postconf -n`: http://pastie.org/5401157 and `postconf -M`: http://pastie.org/5401177 Note: All I have to do is change virtual_transport = dovecot to virtual_transport = virtual and all will be fine, except for that I won't have sieve filtering which is what I really want. */#!/*JoePea

4 10

[Dovecot] panic fts_solr for bad attachment
by Robert Strötgen 27 Nov '12

27 Nov '12

Hi! I use dovecot 2.1.7 on Ubuntu 12.10 with fts_solr und decode2text.sh for indexing attachments. This works great in general. Just for one user there is a problem with an unknown bad attachment. I run "doveadm index -A '*'". After a while I receive: doveadm(xyz): Error: fts_solr: Invalid XML input at line 1: mismatched tag doveadm(xyz): Panic: file solr-connection.c: line 545 (solr_connection_post_more): assertion failed: (maxfd >= 0) doveadm(xyz): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x3c14a) [0x7f7ce2c1714a] -> /usr/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x2a) [0x7f7ce2c1720a] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f7ce2bee81a] -> /usr/lib/dovecot/modules/lib21_fts_solr_plugin.so(solr_connection_post_more+0x249) [0x7f7ce11913a9] -> /usr/lib/dovecot/modules/lib21_fts_solr_plugin.so(+0x4597) [0x7f7ce118e597] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0x6f57) [0x7f7ce159df57] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(fts_build_mail+0xf5) [0x7f7ce159e085] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0xba70) [0x7f7ce15a2a70] -> doveadm(+0x15309) [0x7f7ce35cc309] -> doveadm(+0x11f36) [0x7f7ce35c8f36] -> doveadm(+0x12bf1) [0x7f7ce35c9bf1] -> doveadm(doveadm_mail_try_run+0x161) [0x7f7ce35c9ed1] -> doveadm(main+0x3d1) [0x7f7ce35c8ae1] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xed) [0x7f7ce283d76d] -> doveadm(+0x11d15) [0x7f7ce35c8d15] In catalina out I find: Nov 18, 2012 2:59:09 PM org.apache.solr.common.SolrException log SEVERE: org.apache.solr.common.SolrException: Invalid UTF-8 start byte 0xfc (at char #25214836, byte #26687495) at org.apache.solr.handler.XMLLoader.load(XMLLoader.java:81) at org.apache.solr.handler.ContentStreamHandlerBase.handleRequestBody(ContentStreamHandlerBase.java:58) at org.apache.solr.handler.RequestHandlerBase.handleRequest(RequestHandlerBase.java:129) at org.apache.solr.core.SolrCore.execute(SolrCore.java:1376) at org.apache.solr.servlet.SolrDispatchFilter.execute(SolrDispatchFilter.java:365) at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:260) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191) at org.apache.catalina.valves.RequestFilterValve.process(RequestFilterValve.java:316) at org.apache.catalina.valves.RemoteAddrValve.invoke(RemoteAddrValve.java:81) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293) at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:859) at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:602) at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489) at java.lang.Thread.run(Thread.java:722) Caused by: com.ctc.wstx.exc.WstxIOException: Invalid UTF-8 start byte 0xfc (at char #25214836, byte #26687495) at com.ctc.wstx.sr.StreamScanner.constructFromIOE(StreamScanner.java:625) at com.ctc.wstx.sr.StreamScanner.loadMore(StreamScanner.java:994) at com.ctc.wstx.sr.StreamScanner.getNext(StreamScanner.java:754) at com.ctc.wstx.sr.BasicStreamReader.nextFromTree(BasicStreamReader.java:2691) at com.ctc.wstx.sr.BasicStreamReader.next(BasicStreamReader.java:1065) at org.apache.solr.handler.XMLLoader.readDoc(XMLLoader.java:309) at org.apache.solr.handler.XMLLoader.processUpdate(XMLLoader.java:156) at org.apache.solr.handler.XMLLoader.load(XMLLoader.java:79) ... 19 more Caused by: java.io.CharConversionException: Invalid UTF-8 start byte 0xfc (at char #25214836, byte #26687495) at com.ctc.wstx.io.UTF8Reader.reportInvalidInitial(UTF8Reader.java:303) at com.ctc.wstx.io.UTF8Reader.read(UTF8Reader.java:189) at com.ctc.wstx.io.ReaderSource.readInto(ReaderSource.java:87) at com.ctc.wstx.io.BranchingReaderSource.readInto(BranchingReaderSource.java:57) at com.ctc.wstx.sr.StreamScanner.loadMore(StreamScanner.java:988) ... 25 more doveadm index stops after this error. How can I make doveadm just to skip the error and to continue indexing? Thanks Robert -- Robert Strötgen Abteilungsleiter Informationsmanagement und Publikationen Georg-Eckert-Institut für internationale Schulbuchforschung Celler Str. 3 38114 Braunschweig Tel. +49 (0)531 59099-47 & +49 (0)531 123103-205 Fax +49 (0)531 59099-99 http://www.gei.de/

3 6

[Dovecot] IMAP over SSL
by petsy12＠lavabit.com 27 Nov '12

27 Nov '12

Hello. I've never tried Dovecot. Here is my attempt to enable IMAP over SSL on port 993. (BTW, I don't want to use port 143 at all.) # dovecot -n log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps listen: *:143,[::]:143 ssl_listen: *:993,[::]:993 ssl: required ssl_cert_file: /etc/dovecot/keycert.pem ssl_key_file: /etc/dovecot/keycert.pem ssl_cipher_list: TLSv1+HIGH:!SSLv2:!aNULL:!eNULL:!NULL:@STRENGTH login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mail_location: maildir:~/Maildir mbox_write_locks: fcntl dotlock auth default: passdb: driver: pam userdb: driver: passwd 1. Here is a snippet from dovecot.conf. Is it correct? Should I change something? (Note that I don't want to enable IMAP on port 143.) protocols = imaps protocol imap { listen = *:143,[::]:143 ssl_listen = *:993,[::]:993 } disable_plaintext_auth = yes ssl_listen = *:993,[::]:933 ssl = required ssl_cert_file = /etc/dovecot/keycert.pem ssl_key_file = /etc/dovecot/keycert.pem ssl_cipher_list = TLSv1+HIGH:!SSLv2:!aNULL:!eNULL:!NULL:@STRENGTH 2. I don't understand the syntax connected with auth. What auth options are enabled by default? dovecot.conf: No sections (e.g. namespace {}) or plugin settings are added by default, they're listed only as examples. Does it mean that passdb pam will use defaults (e.g. session=yes, setrcred=yes)? passdb pam { # [session=yes] [setcred=yes] [failure_show_msg=yes] [max_requests=<n>] # [cache_key=<key>] [<service name>] # # session=yes makes Dovecot open and immediately close PAM session. Some # PAM plugins need this to work, such as pam_mkhomedir. # # setcred=yes makes Dovecot establish PAM credentials if some PAM plugins # need that. They aren't ever deleted though, so this isn't enabled by # default. # # max_requests specifies how many PAM lookups to do in one process before # recreating the process. The default is 100, because many PAM plugins # leak memory. # # cache_key can be used to enable authentication caching for PAM # (auth_cache_size also needs to be set). It isn't enabled by default # because PAM modules can do all kinds of checks besides checking password, # such as checking IP address. Dovecot can't know about these checks # without some help. cache_key is simply a list of variables (see # /usr/share/doc/dovecot-common/wiki/Variables.txt) which must match # for the cached data to be used. # Here are some examples: # %u - Username must match. Probably sufficient for most uses. # %u%r - Username and remote IP address must match. # %u%s - Username and service (ie. IMAP, POP3) must match. # # The service name can contain variables, for example %Ls expands to # pop3 or imap. # # Some examples: # args = session=yes %Ls # args = cache_key=%u dovecot #args = dovecot } 3. Here is the output of `openssl s_client -tls1 -connect mail.example.com:993`. Is it OK? [snip] New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA Server public key is 2048 bit Secure Renegotiation IS supported Compression: zlib compression Expansion: zlib compression [snip] Verify return code: 18 (self signed certificate) --- * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE AUTH=PLAIN] Dovecot ready. Also, where can I read about these options? Any comments are appreciated.

2 1

[Dovecot] Default fallback behaviour
by Nikita Koshikov 27 Nov '12

27 Nov '12

Hello list, Here is the problem: I have few: passdb { #1 } passdb { #2 } And relative userdb sections. If user not found in 1) section it fallbacks to next one - it's expected and right, IMHO. But when the user exists in both section and password verification fails on 1) database it successfully authenticated on next one. I think this behaviour should be configured. The main goal of 1) section for this server is to overwrite users in main (section2) database. Maybe I missed something and this option is already in dovecot code and I can't find it ? Or if not - will it be added in the future ? Dovecot version 2.1.10.

3 6

[Dovecot] lmtp_rcpt_check_quota working somewhere?
by Steffen Kaiser 27 Nov '12

27 Nov '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I'm running Dovecot v2.1 and enabled the lmtp_rcpt_check_quota option in conf.d/20-lmtp.conf, because I just found it in the sample config. Is this option working somewhere? When I have the option enabled, I get _no_ response in the RCPT TO phase, if the user is under quota. If I go on and enter the DATA keyword eventually, I get "554 5.5.1 No valid recipients", so it looks like, the user is really ignored at all. For an user over quota, I get: 552 5.2.2 <user> Quota exceeded (mailbox for user is full) Without lmtp_rcpt_check_quota LMTP works fine. For the user over quota I get the error after DATA phase, the user under quota gets the message delivered. Regards, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBULOTyWoxLS8a3A9mAQITfggAoC0ujUXE53ePUEsTUHXlL2S0/hQCdAgA ppZnUPv9Gjh2oZjjrOmPa+zYVnd+6xK9m58bV4b7FPC+uz1otaS205WMIeZCuy5l kTtCpNpxxNfsUDzMM8zrRf+AZODAwUzwx7yknGdpXtezIGYg7kTKIXxs3KShgI3i ML/kbj4j+YkpdR0wUnZCIVM7MBukAJ3rhSqvfcY0ekZo8+ownqVjCE1PLhFy6oGE OsN8qY272nuvY9dLjflUjOKsvPVnviIu0kgRAZEsqPPp27Jp4GMsSpqqdAhjgbzH D8n9AnxVc6KYhq8qVpsWBCNy3/CwERsadZcRnl/4zcZmq19VsLLZMQ== =Nyqj -----END PGP SIGNATURE-----

2 2

[Dovecot] Feature request: add information to error message: client doesn't have lookup permissions for this user: userdb reply doesn't contain uid (change userdb socket permissions)
by Steffen Kaiser 27 Nov '12

27 Nov '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Please add the information to this error, which socket has the problem and which uid access is and what is expected. For instance, when the quota dict request fails, because of permission problems, you get a very detailed info about the current problem. And, further more, hints to solve it. BTW: I'm trying to configure shared mailboxes for a virtual user system, when one user with ACLs on other mailboxes requests a LIST, I get this error. In my case, I solved the problem by chmod u+x auth-userdb . Kind regards, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBUJPs/2oxLS8a3A9mAQLQxwf/ZkhmER1q/+rlZCIdQ70x6TDwS1nwJI6J FHyr8UFgV0xXBeX8OW+UDl8N4OzXOiReygHnrcpYE4BCEQmeQC9YUU7mCcC6tpqG cg+uYMAPap3Zx8WkAqsmDnnqHe4xX7GUscoiVh1vxYdiRkHwikiKEfuve+SwTpyj wmAK5CMGLBifWPk6bmFP7YR+sJnG/E1vKxEUMEKEKjMfubsCCqc95NNCOiVTwCTG Y15eIhyJTBBjrGuLSeiHb40sPnOE/OgO9r00+OXrZOtuouYZlsMENsDXSFFLoC7v MpABu57w3GRC0p33bjSuX8ZGinEd8fFz9mbUCSvBmLLL7rOZVR6FDw== =Rf46 -----END PGP SIGNATURE-----

2 2

[Dovecot] Rebuilding indexes fails on inconsistent mdbox
by Milan Holzäpfel 27 Nov '12

27 Nov '12

Hello all, I have a problem with an incosistent mdbox: Oct 24 10:43:23 two dovecot: imap-login: Login: user=<...>, method=PLAIN, rip=..., lip=..., mpid=4977, TLS Oct 24 10:43:23 two dovecot: imap(listen(a)mjh.name): Error: mdbox map .../mdbox/storage/dovecot.map.index corrupted: Unexpectedly lost INBOX uid=638 map_uid=809891 Oct 24 10:43:23 two dovecot: imap(listen(a)mjh.name): Error: mdbox map .../mdbox/storage/dovecot.map.index corrupted: Unexpectedly lost INBOX uid=638 map_uid=809891 Oct 24 10:43:23 two dovecot: imap(listen(a)mjh.name): Disconnected: Internal error occurred. Refer to server log for more information. [2012-10-24 10:43:23] bytes=115/53726 Oct 24 10:43:23 two dovecot: imap(listen(a)mjh.name): Warning: mdbox .../mdbox/storage: Inconsistency in map index (467,31960 != 467,36768) Oct 24 10:43:23 two dovecot: imap(listen(a)mjh.name): Warning: mdbox .../mdbox/storage: rebuilding indexes Oct 24 10:45:19 two dovecot: imap(listen(a)mjh.name): Panic: file mdbox-storage-rebuild.c: line 773 (rebuild_update_refcounts): assertion failed: (map_uid < msgs[i]->map_uid) Oct 24 10:45:19 two dovecot: imap(listen(a)mjh.name): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x380ca) [0x7f99cf35b0ca] -> /usr/lib/dovecot/libdovecot.so.0(+0x3810e) [0x7f99cf35b10e] -> /usr/li b/dovecot/libdovecot.so.0(i_fatal+0) [0x7f99cf334a67] -> /usr/lib/dovecot/libdovecot-storage.so.0(mdbox_storage_rebuild_in_context+0x10a5) [0x7f99cf5f42d5] -> /usr/lib/dovecot/libdovecot-storage.so.0(mdbox_s torage_rebuild+0x24) [0x7f99cf5f4414] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x53565) [0x7f99cf5f4565] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_close+0x1a) [0x7f99cf5c8caa] -> /usr/lib/dovec ot/libdovecot-storage.so.0(mailbox_free+0x13) [0x7f99cf5c8cf3] -> dovecot/imap(client_destroy+0x109) [0x7f99cfaa69e9] -> dovecot/imap(client_input+0xaa) [0x7f99cfaa6dba] -> /usr/lib/dovecot/libdovecot.so.0(i o_loop_call_io+0x48) [0x7f99cf366c98] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x7f99cf367d27] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f99cf366c28] -> /usr/lib/dovecot /libdovecot.so.0(master_service_run+0x13) [0x7f99cf354e33] -> dovecot/imap(main+0x304) [0x7f99cfa9e554] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xed) [0x7f99cef8576d] -> dovecot/imap(+0x95e5) [0 x7f99cfa9e5e5] Oct 24 10:45:19 two dovecot: master: Error: service(imap): child 4977 killed with signal 6 (core dumps disabled) I use: Dovecot 2.0.19-0ubuntu1 Ubuntu 12.04, x86-64, Kernel 3.2.0-32-generic local XFS filesystem for the mdbox The problem appeared out of nowhere. Many messages been continously delivered to this mailbox on this installation since May 2012, and the mdbox was only accessed with deliver and imap/pop3 from dovecot. About four hours after the problem initially appeared, I did a hard reset of the system because it was unresponsive. The error message is exactly the same before and after the hard reset. The problem is triggered by both IMAP access and dovecot deliver access. The whole mdbox is 6.6 GiB large and I guess that it contains about 300k-600k messages. It's an archive of public mailing lists, so I could give access to the files. Can anybody say something about this? May the mdbox be repaired? Regards, Milan Holzäpfel -- Milan Holzäpfel <listen(a)mjh.name>

5 15

[Dovecot] Dovecot IMAP/POP3 auto creating maildir
by Dominic Malolepszy 27 Nov '12

27 Nov '12

Hi I have observed that after deleting a mailbox and removing the user from the userdb, immediately accessing the mail account via POP3/IMAP causes Dovecot to auto create an empty mailbox, because the userdb/passdb details are still cached for 10minutes. Is there any option to tell Dovecot POP3/IMAP not to auto create the mailbox if it does not exist? Alternatively and less desirably is there a mechanism for telling Dovecot to expire a userdb/passdb cached entry? Running Dovecot 2.1.9 Dominic

2 1

[Dovecot] memory allocation issues
by Kelsey Cummings 27 Nov '12

27 Nov '12

One of our dovecot backend servers ran into a problem with it's auth process a few days ago. This doesn't appear to be the error logged when dovecot hits its internal limit so I'm not sure what is going on here. auth: Error: malloc: 58012: Cannot allocate memory auth: Error: Unable to allocate memory for mutexes from the region auth: Error: PANIC: Cannot allocate memory auth: passwd(test,1.1.1.1,<8HTlNHzNIQBAjhKC>): unknown user pop3: Error: Authenticated user not found from userdb, auth lookup +id=2509111297 (client-pid=4781 client-id=1) pop3-login: Internal login failure (pid=4781 id=1) (internal failure, 1 +succesful auths): user=<test>... There was at least 10+GB free RAM on the server and no indication of a system level issue at the same time. The server is running 2.1.9. There were about 3,200 active sessions, with something like 12 new sessions/sec. The other identical servers are/were handling virtually identical load with the same service uptime and haven't had any issues so far. (Crash happened 7 days ago.) -- Kelsey Cummings - kgc(a)corp.sonic.net sonic.net, inc. System Architect 2260 Apollo Way 707.522.1000 Santa Rosa, CA 95407

2 4

[Dovecot] fs_flush_file_handle_cache_dir: rmdir(/var/mail) AGAIN
by Ken Mandelberg 27 Nov '12

27 Nov '12

We are running Dovecot 2.0.12. It runs on only one server and /var/mail is local where all the INBOX's are stored. Users other IMAP folders are NFS mounted on the server. We see frequent Error: nfs_flush_file_handle_cache_dir: rmdir(/var/mail) failed: Device busy I know this error message has been around a long time. Should we still be seeing it on 2.0.12 with a local /var/mail. Perhaps the message is misleading and really complaining about folders other than INBOX that are NFS mounted. Our config has dovecot.conf:mail_nfs_index = no dovecot.conf:mail_nfs_storage = yes is that correct given the above? Also, does the flush error messages have any real consequences? My understanding is that the rmdir is meant to fail, just to force a flush.

2 1

[Dovecot] Filesystem quotas
by Andreas Kasenides 27 Nov '12

27 Nov '12

I could not determine if when using filesystem quotas (http://wiki2.dovecot.org/Quota/FS) Dovecot will use the reported quota and limits without the need of configuring them via "quota_rules". Is this possible somehow? Such a feature would determine the quota limits automatically from the filesystem quotas thereby allowing to make use of them in quota warnings. Dovecot already knows the quota settings and limits. Here is evidence from the logs > Nov 21 19:24:22 iolaos dovecot: imap(user): Debug: box=/Mail/ank > mount=/newmail match=yes > Nov 21 19:24:22 iolaos dovecot: imap(user): Debug: quota-fs: > host=xxxx.xxxx.ucy.xx.cy, path=/mail, uid=211, bytes > Nov 21 19:24:22 iolaos dovecot: imap(user): Debug: quota-fs: uid=211, > value=2779115520, limit=8388608000 I am using (testing) version 2.2alpha1. Thankx. -- Andreas Kasenides Senior IT Officer University of Cyprus, Dept. of Computer Science Tel: 22892714, Fax: 22892701

2 1

[Dovecot] Plugin help, number of messages in mailbox
by Richard Platel 27 Nov '12

27 Nov '12

Hi, We use Dovecot for IMAP and POP (but not LDA), we want to do something when a user has an INBOX that becomes empty, or becomes not empty (set a flag in memcached, but that's not really important). I'm writing a plugin (for Dovecot 2.1.7). On mailbox_open() I can use mailbox_get_status() to get a count of messages in the mailbox, and then decrement this in expunge() or increment it in mailbox save_finish() (for IMAP APPEND or COPY commands). However in expunge() and mailbox_save_finish, even after calling the super function, mailbox_get_status doesn't update the number of messages in the mailbox. This is a problem if (for example) there are concurrent POP sessions. Two POP sessions could get all the messages in INBOX, one could logout, calling expunge a few times, eventually causing my plugin to note that the inbox is empty, then our LDA could deliver a message, mark the INBOX not empty, then the other POP session could log out, call expunge and cause my plugin to mark the INBOX empty, when it's not. So in summation: how can a plugin be notified of changes to a mailbox, and then accurately get the real number of messages in that mailbox?

2 1

[Dovecot] Folder layout after Cyrus to Dovecot migration
by Keith Edmunds 27 Nov '12

27 Nov '12

# dovecot --version 1.2.15 We're trying to migrate a server from Cyrus to Dovecot, and we're mostly there. On Cyrus, the folder layout in the MUA is: INBOX subfolder subfolder ... Sent Drafts Queue Trash Users cannot create sibling folders to the Inbox, only subfolders (and sub-subfolders, etc). We've replicated that with: -------------------------------------------------------------------------------- mail_location = maildir:/shared/imapmail/users/%u:INBOX=/shared/imapmail/users/%u:LAYOUT=fs namespace private { separator = / prefix = "INBOX/" inbox = yes } -------------------------------------------------------------------------------- ...however, the Sent/Drafts/Queue/Trash folders are now subfolders of Inbox. Cyrus seems to default to the above layout (at least, I can't find anywhere that defines it). There are no special settings in the MUA to achieve the abovev. Is there a way of replicating the above within Dovecot? We can probably go to V2 if we have to, but 1.2.15 would be preferable. Thanks, Keith

3 5

[Dovecot] cannot update mailbox - unable to lock for exclusive access
by 1st WebDesigns 27 Nov '12

27 Nov '12

Hi there, We're using Dovecot version 1.0.7 and Postfix, and since upgrading our Linux box we're getting this in the maillog: Nov 8 07:49:11 server1 postfix/local[27901]: 04B8E7081DA: to=<xyz(a)xyz.com>, orig_to=<abc(a)abc.com>, relay=local, delay=19, delays=0.07/0/0/19, dsn=4.2.0, status=deferred (cannot update mailbox /var/spool/mail/abc for user abc. unable to lock for exclusive access: Resource temporarily unavailable) Postfix is currently set to: mailbox_delivery_lock = fcntl, dotlock Dovecot has this: mbox_read_locks = fcntl mbox_write_locks = fcntl dotlock I've scoured the web and tried all kinds of different locking mechanisms and combinations to no avail. The mail is eventually delivered but on a busy day this can take several hours. In the evening it generally doesn't happen, which leads me to believe it occurs during the day when people have their mail clients open. However, this particular issue doesn't affect every user that has their mail client open, only some! We currently have the mailboxes in mbox format - yes I know we should upgrade to maildir which we will eventually, however we've been using mbox for the last 10 years and this has only become an issue since upgrading. What I have discovered this morning is a Dovecot connection that is open for 6 minutes before disconnection. During this 6 minutes the above problem occurs (new mail cannot get an exclusive lock). The same user will have connected and disconnected several times before and after, with a connection taking no more than a few seconds. But it seems sometimes the connection is taking longer than it should and I suspect the problem lies here. Please can anyone help! Thank you, G

3 15

[Dovecot] sieve + dkim
by Николай Клименко 26 Nov '12

26 Nov '12

message sent from the sieve-vacation does not contain dkim signature how to configure sieve to send messages via smtp transport with signing?

3 4

[Dovecot] IMAP proxy - can it detect parodying to itself?
by Graham Leggett 26 Nov '12

26 Nov '12

Hi all, I have some IMAP servers fronted with separate perdition processes, and it would be ideal if I could collapse this down to having dovecot do both the IMAP proxying and the IMAP serving at the same time on the same IP addresses. One of the fields in my LDAP entries contains the canonical name of the server that hosts their mailbox, and if I follow the manual at http://wiki2.dovecot.org/PasswordDatabase/ExtraFields#LDAP I could add the host field to enable proxying. My question is whether dovecot has the ability to notice whether dovecot is being asked to proxy to itself, in other words the value of "host" is the current dovecot server, and when this happens, ignore the proxy and just be a straight IMAP server, because the user has connected to the right box already. Is this possible? Regards, Graham --

2 2

Re: [Dovecot] doveadm fails with passdb authentication binds (dovecot 2.0.16)
by mailing lists 26 Nov '12

26 Nov '12

Hello, >> # doveadm mailbox list -u user001 >> doveadm(user001): Error: user user001: Auth PASS lookup failed >> doveadm(user001): Fatal: passdb lookup failed > Are you running this on a Dovecot proxy? It looks like doveadm wants to do a passdb lookup to find out which server should handle this user. Passdb lookups don't work with LDAP binding. But if everything else works then I think you simply shouldn't have enabled doveadm proxying. So, set doveadm_proxy_port back to 0? thank you Timo, setting doveadm_proxy_port to 0 did the trick.

1 0

[Dovecot] Missing Messages on IOS device
by David Morsberger 26 Nov '12

26 Nov '12

I just converted my old server running UW/Panda to a Mac Mini Server running Mountain Lion (ML) Server. I'm using the postfix / dovecot setup provided by Apple. My IMAP clients are not showing all my emails. The Mail App on my iPhone and iPad is behaving the worse. I can see the emails that are not showing up in the cur directory. The ML Mail App is stating there are 3854 emails in my INBOX. There are 3948 files in the 'cur' directory ('ls cur | wc -l' returns 3948). Other mailboxes and directories have the same behavior. I'm not sure what to expect here. My method of conversion was to bulk copy (drag and drop) all the messages from one the UW server to the Dovecot server using the Apple Desktop Mail App in Mountain Lion. Any idea why these messages are not showing up on my devices and how I can get them to show up? bash-3.2# /Applications/Server.app/Contents/ServerRoot/usr/sbin/dovecotd --version 2.0.19apple1 bash-3.2# /Applications/Server.app/Contents/ServerRoot/usr/sbin/dovecotd -n # 2.0.19apple1: /Library/Server/Mail/Config/dovecot/dovecot.conf # OS: Darwin 12.2.1 x86_64 hfs aps_topic = com.apple.mail.XServer.fc3bb7c3-c8ef-4fe2-aff3-95ecd927fb11 auth_mechanisms = cram-md5 x-plain-submit plain login apop digest-md5 auth_socket_path = /var/run/dovecot/auth-userdb auth_username_format = %n default_internal_user = _dovecot default_login_user = _dovenull disable_plaintext_auth = no first_valid_gid = 6 first_valid_uid = 6 mail_access_groups = mail mail_location = maildir:/Library/Server/Mail/Data/mail/%u mail_log_prefix = "%s(pid %p user %u): " mail_plugins = quota zlib fts fts_sk managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mdbox_rotate_size = 200 M passdb { args = /Library/Server/Mail/Config/dovecot/submit.passdb driver = passwd-file pass = yes submit = yes } passdb { driver = od } plugin { fts = sk quota = maildir:User quota quota_warning = storage=100%% quota-exceeded %u sieve = /Library/Server/Mail/Data/rules/%u/dovecot.sieve sieve_dir = /Library/Server/Mail/Data/rules/%u } postmaster_address = postmaster(a)mini.mmpcrofton.com protocols = imap pop3 lmtp sieve quota_full_tempfail = yes service auth { extra_groups = _keytabusers idle_kill = 15 mins unix_listener auth-userdb { user = _dovecot } } service dns_client { unix_listener dns-client { mode = 0600 } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } service_count = 0 } service imap { client_limit = 5 process_limit = 200 service_count = 0 } service lmtp { unix_listener lmtp { mode = 0600 } } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service pop3 { client_limit = 5 process_limit = 200 service_count = 0 } service quota-exceeded { executable = script /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/quota-exceeded.sh unix_listener quota-exceeded { group = mail mode = 0660 user = _dovecot } user = _dovecot } service quota-warning { executable = script /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/quota-warning.sh unix_listener quota-warning { group = mail mode = 0660 user = _dovecot } user = _dovecot } ssl_ca = </etc/certificates/*.chain.pem ssl_cert = </etc/certificates/*.cert.pem ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL:!ADH:!eNULL ssl_key = </etc/certificates/*.key.pem ssl_key_path = /etc/certificates/*.key.pem syslog_facility = local6 userdb { args = partition=/Library/Server/Mail/Config/dovecot/partition_map.conf enforce_quotas=no driver = od } verbose_proctitle = yes protocol lmtp { mail_plugins = quota zlib fts fts_sk sieve push_notify } protocol lda { mail_plugins = quota zlib fts fts_sk sieve push_notify } protocol imap { imap_id_log = * imap_id_send = "name" * "version" * mail_max_userip_connections = 20 mail_plugins = quota zlib fts fts_sk imap_quota imap_zlib imap_fts urlauth } protocol pop3 { mail_max_userip_connections = 6 }

1 0

[Dovecot] sieve-extprograms strips Return-Path headers
by Ben Morrow 25 Nov '12

25 Nov '12

The sieve-extprograms extension strips Return-Path headers before passing mail off to the external program. The patch to remove this behavious is trivial (and attached), but since it appears to be deliberate I felt I should investigate further. I believe this is basically a cut-and-paste error. The code to strip Return-Path has been there since the sieve-pipe plugin for Dovecot 1.x, and I believe it was copied from the equivalent code in the 'redirect' action for passing mail off to sendmail(8). In that case, stripping Return-Path is correct, since the message is being resubmitted for delivery (by SMTP or otherwise), and the last step of the new delivery will (should) add a new Return-Path header with the new envelope information. In the case of sieve-extprograms, though, the filtering is happening post-delivery, so a stripped Return-Path will never be replaced. Ben

2 1

[Dovecot] SSL certificates
by The Doctor 24 Nov '12

24 Nov '12

Who is the best CA Certificate provider for Dovecot? -- Member - Liberal International This is doctor(a)nl2k.ab.ca Ici doctor(a)nl2k.ab.ca God,Queen and country!Never Satan President Republic!Beware AntiChrist rising! http://www.fullyfollow.me/rootnl2k Merry Christmas 2012 and Happy New Year 2013 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

3 2

[Dovecot] dovecot trying to update my sieve directory
by Mathieu R. 23 Nov '12

23 Nov '12

Hello, i got an error in maillog, dovecot trying tu update my sieve directory : 2012-11-23T11:01:33.943047+00:00 localhost dovecot: imap(mathieu(a)400iso.net): Error: stat(/srv/vmail/400iso.net/mathieu@400iso.net/.dovecot.sieve/tmp) failed: Not a directory this cause no problem but i probably misconfigured something... here is my dovecot.conf : protocols = imap pop3 sieve mail_home = /srv/vmail/%d/%u mail_location = maildir:~ mail_plugins = $mail_plugins quota ssl_cert = </etc/ssl/private/server.crt ssl_key = </etc/ssl/private/server.key service auth { unix_listener auth-client { group = postfix mode = 0660 user = postfix } user = root } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol lda { mail_plugins = $mail_plugins sieve postmaster_address = postmaster(a)400iso.net hostname = 400iso.net } managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve # sieve_global_dir = /srv/vmail/sieve/ quota = fs:vm quota quota_rule = *:storage=5G } protocol imap { mail_plugins = $mail_plugins imap_quota } -- Mathieu Rousseau http://400iso.net/

2 4

[Dovecot] Proxy to join two accounts
by Tomek 23 Nov '12

23 Nov '12

Hello, I have server with IMAP on dovecot for user mails and second server on archiveopteryx as mail archive. I'm wondering if it's possible to make some sort of proxy to these two servers in way where: - dovecot server will be main IMAP service with INBOX, etc - I want archiveopteryx account to be something like shared folder with read only access (no delete, no move, etc) in path ex. /archive/user.name - this proxy mappings should allow adding few archive accounts to one user (in case of people replacement) + it will be cool if this mappings could be defined in database so I could write tools to manage archive access for bosses. Is such case possible to achieve with dovecot (any howto or example would be very helpful)? If not - do you know any proxy tools that could allow such configuration? Thanks for any help. Regards, Tomek.

2 2

[Dovecot] v2.1.10: Director director_servers order issue
by Bertrand Jacquin 23 Nov '12

23 Nov '12

Hi, I'm setting up an IMAP/POP cluster using dovecot director for some NFS reasons and I'm getting some troubles with director_servers directive. Configuration is shared on both nodes : director_servers = 10.0.50.50 10.0.50.51 director_mail_servers = 192.168.0.150 192.168.0.151 director_user_expire = 15 min service director { unix_listener login/director { mode = 0666 } fifo_listener login/proxy-notify { mode = 0600 user = $default_login_user } unix_listener director-userdb { mode = 0600 } inet_listener { port = 9090 } } service ipc { unix_listener ipc { user = $default_login_user } } Here 10.0.50.50 is node1, 10.0.50.51 is node2 # ring status on node1 director ip port type last failed 10.0.50.50 9090 self never 10.0.50.51 9090 never # ring status on node2 director ip port type last failed 10.0.50.50 9090 self never 10.0.50.51 9090 never self is the same on both nodes, and that generate some cases that can be observed on logs : # logs on node1 dovecot: director: Error: Remote director thinks it's someone else (connected to 10.0.50.51:9090, remote says it's 10.0.50.50:9090) And this is true, TCP packet contain bad DATA : # tcpdump -i eth0 -nn src host 10.0.50.51 and port 9090 -s 0 -w - -l | strings | egrep '^ME' ME 10.0.50.50 9090 # logs on node2 dovecot: director: Error: connect(10.0.50.51:9090) failed: Invalid argument Invalid argument is present as bind() is not done with the appropriate IP : # strace -p 6063 -fF -s 1024 -e trace=bind,connect bind(28, {sa_family=AF_INET, sin_port=htons(0), sin_addr=inet_addr("10.0.50.50")}, 16) = 0 connect(28, {sa_family=AF_INET, sin_port=htons(9090), sin_addr=inet_addr("10.0.50.51")}, 16) = -1 EINVAL (Invalid argument) Also, during this time, CPU is ~100% used. bind() is done with node1 IP address. I also tested using a DNS : director_servers = director-all director-all is two A entries, first containing 10.0.50.50, second 10.0.50.51 and the result here is exactly the same. Using two configurations : # director_servers on node1 director_servers = 10.0.50.50 10.0.50.51 # director_servers on node2 director_servers = 10.0.50.51 10.0.50.50 Give the same result as showed before : # ring status on node1 director ip port type last failed 10.0.50.50 9090 self never 10.0.50.51 9090 never # ring status on node2 director ip port type last failed 10.0.50.50 9090 self never 10.0.50.51 9090 never It seems that first sorted entry in director_servers is considered as "self". I'm using dovecot 2.1.10-0~auto+55 debian package from rename-it repository. Thanks for your help. -- Beber

2 3

[Dovecot] doveadm fails with passdb authentication binds (dovecot 2.0.16)
by mailing lists 23 Nov '12

23 Nov '12

Hello, I'm testing passdb auth binds with dovecot 2.0.16, but for some reason dovedm fails to work with the configuration showed below. The network trace shows the successful bind for the administrative user (uid=mailapp), but nothing for the mail user (uid=user001). what am i missing here? # doveadm mailbox list -u user001 doveadm(user001): Error: user user001: Auth PASS lookup failed doveadm(user001): Fatal: passdb lookup failed 10-auth.conf: ==================== disable_plaintext_auth = no auth_cache_size = 0 auth_cache_ttl = 0 auth_cache_negative_ttl = 0 auth_mechanisms = plain !include auth-ldap.conf.ext auth-ldap.conf.ext: ===================================== passdb { driver = ldap args = /etc/dovecot/passdb-dovecot-ldap.conf.ext } userdb { driver = ldap args = /etc/dovecot/userdb-dovecot-ldap.conf.ext } passdb-dovecot-ldap.conf.ext: ===================================== uris = ldap://ldap.example.com dn = uid=mailapp,ou=People,dc=example,dc=com dnpass = xxxxxxxxxx sasl_bind = no tls = no auth_bind = yes ldap_version = 3 base = dc=example,dc=com deref = never scope = subtree pass_attrs = uid=user pass_filter = (uid=%n) userdb-dovecot-ldap.conf.ext: ==================================== uris = ldap://ldap.example.com dn = uid=mailapp,ou=People,dc=example,dc=com dnpass = xxxxxxxxxx sasl_bind = no tls = no auth_bind = yes ldap_version = 3 base = dc=example,dc=com deref = never scope = subtree user_attrs = mailbox=mail=maildir:/var/maildir/%$,homeFilter=home,mailQuota=quota_rule=*:bytes=%$ user_filter = (&(objectClass=posixAccount)(uid=%n)) pass_attrs = uid=user,userPassword=password,\ mailbox=userdb_mail=maildir:/var/maildir/%$,homeFilter=userdb_home,mailQuota=userdb_quota_rule=*:bytes=%$ pass_filter = (&(objectClass=posixAccount)(uid=%n)) iterate_attrs = uid=user iterate_filter = (objectClass=posixMailAccount)

2 1

[Dovecot] whoson plugin for 2.0
by Chuck Cochems 23 Nov '12

23 Nov '12

I have found a plugin at ftp://ftp.ufanet.ru/pub/boco/dovecot/whoson-plugin/ I was able to make it function on a dovecot 1.2.8 server, by changing __attr_unused__ to ATTR_UNUSED and strlcpy to i_strocpy (since glibc doesn't HAVE strlcpy, on purpose). However, it doesn't work with 2.1 this is, of course, because getenv() no longer functions lie it used to in plugins. so i need a replacement for getenv("IP") and getenv("USER") to make this work. i know, pop before SMTP is stupid, but the isp i'm doing this for hs customers that have used pop before smtp for ages. so I MUST make a whoson plugin. as i said, the remote ip and the email address are required to interface with whoson. (this is superior to DRAC, which just opens the IP)

3 6

[Dovecot] Initial status notification not received
by Nicolas KOWALSKI 23 Nov '12

23 Nov '12

Hello, We have SLES-11 SP2 Xen VMs running dovecot as IMAP proxies. At VMs startup, dovecot almost always shows these errors: Nov 16 14:29:19 server dovecot: master: Dovecot v2.1.10 starting up (core dumps disabled) Nov 16 14:29:55 server dovecot: master: Error: service(anvil): Initial status notification not received in 30 seconds, killing the process Nov 16 14:29:55 server dovecot: master: Error: service(log): Initial status notification not received in 30 seconds, killing the process Nov 16 14:29:55 server dovecot: master: Error: service(ssl-params): Initial status notification not received in 30 seconds, killing the process Nov 16 14:29:55 server dovecot: master: Error: service(log): child 3591 killed with signal 9 As the last line tells, dovecot stops logging information. We have to restart the dovecot processes to get back normal behaviour. I also tried to set idle_kill values to services definitions, without success. Is there a way to prevent these errors? Here is the dovecot -n output: # 2.1.10: /etc/dovecot/dovecot.conf # OS: Linux 3.0.42-0.7-xen x86_64 SUSE Linux Enterprise Server 11 (x86_64) default_client_limit = 4096 default_idle_kill = 5 mins default_process_limit = 16384 listen = 10.254.251.18 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap sieve service anvil { client_limit = 65536 idle_kill = 0 } service auth { client_limit = 32768 } service imap-login { inet_listener imap { port = 0 } } service imap { process_limit = 0 } service log { idle_kill = 0 } service managesieve { process_limit = 0 } service ssl-params { idle_kill = 0 } ssl_ca = </etc/dovecot/ssl/ca.pem ssl_cert = </etc/dovecot/ssl/server-crt.pem ssl_key = </etc/dovecot/ssl/server-key.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol sieve { passdb { args = /etc/dovecot/dovecot-ldap-sieve.conf.ext driver = ldap } } Thanks, -- Nicolas

2 3

[Dovecot] User iteration with static userdb
by Radek Novotný 23 Nov '12

23 Nov '12

Hi all, can someone explain me, please, why user iteration (iterate_query) doesn't work with static userdb? There isn't reason why it shouldn't work. In my opinion. However static userdb doesn't mean that user list not exist. Thanks Radek

2 1

[Dovecot] Is there a hook for a plugin to do some transient operation on the mail body ...
by Jay 23 Nov '12

23 Nov '12

... when the MUA has issued a FETCH? I am a Dovecot newbie ... so please bear with me if this is obvious. Basically what I am trying to do is process the mail body (in my own specific way) before Dovecot serves it up to the MUA. I want to do it as a transient operation in memory. So think of the scenario as ... - the MUA issues a FETCH - Dovecot intercepts the FETCH - Dovecot internally gets the mail from the storage into a buffer in memory ----> This is where I'd like to apply a function to the mail body and modify the mail body in the buffer (not in the storage) - Dovecot serves up the (modified) mail to the MUA Looking for a hook that allows me to do it using a plugin. Looks like the zlib plugin does something similar ... applies a decompression function ... but I am not 100% sure. Thanks for your help. -- J.

2 1

[Dovecot] Hardlink with Maildir a brief help
by Davide 23 Nov '12

23 Nov '12

Hi to all, my question is: Is possible implementing SIS (with hardlink) with maildir instead of *dbox format? If yes in dovecot.conf it's only necessary the below parameters or what else? mail_attachment_dir = /var/qmail/attachments I have also acting the zlib plugin it is not a problem isn't it? Thanks in advance for any response -- */Davide Marchi /Teorema Ferrara Srl /(Tel: /**/+39 0532 783161)/**/ (Fax: +/**/39 0532 783368/**/)/**//**/ /**//**/Davide.Marchi(a)mail.cgilfe.it <mailto:davide.marchi@mail.cgilfe.it?subject=Info> /CONFIDENZIALITA’ *** Questo messaggio, inclusi gli eventuali allegati, è indirizzato solo ai destinatari e può contenere informazioni riservate e confidenziali. Se avete ricevuto il messaggio senza esserne un destinatario, siete pregati di non utilizzare, copiare o distribuire questo messaggio o i suoi allegati. Se avete ricevuto il messaggio per errore, siete pregati di cancellarlo dal vostro sistema, assieme a tutti gli allegati, e di informare immediatamente il mittente,sia ai sensi dell'art. 616 c.p., sia ai sensi del DL n. 196/03. *CONFIDENTIALITY*** This message and any attachments are intended only for the use of the addressee(s) and may contain information that is privileged and/or confidential. If the reader of the message is not the intended recipient(s) or an authorized representative of the intended recipient(s), please do not use, copy, distribute this email or its attachments or take action based on them. If you have received this communication in error, please notify us immediately by email and delete the message and any attachments from your system. *Teorema FerraraSrl - Via Spronello, 7 - 44121 Ferrara Italia - P. IVA 01244490387** P**S**tampa questo messaggio solo se veramente necessario, pensa alla natura! - Please consider whether it is necessary to print this e-mail*

2 1

[Dovecot] IMAP session state inconsistent
by list＠airstreamcomm.net 23 Nov '12

23 Nov '12

Running Dovecot 1.2.12 (we are in the process of upgrading to 2.1.x) Didn't find much in old threads, but we are seeing the following in the logs this morning: dovecot: imap-login: Login: user=<wajabrun>, method=PLAIN, rip=x.x.x.x, lip=y.y.y.y dovecot: IMAP(wajabrun): Disconnected: IMAP session state is inconsistent, please relogin. bytes=443/1146 dovecot: imap-login: Login: user=<wajabrun>, method=PLAIN, rip=x.x.x.x, lip=y.y.y.y dovecot: IMAP(wajabrun): Disconnected: IMAP session state is inconsistent, please relogin. bytes=561/1637 dovecot: imap-login: Login: user=<wajabrun>, method=PLAIN, rip=x.x.x.x, lip=y.y.y.y dovecot: IMAP(wajabrun): file_dotlock_open() failed with file /mail/w/a/wajabrun/Maildir/.INBOX.02 ORDERS.Gaiam/dovecot.index.log: No such file or directory dovecot: IMAP(wajabrun): file_dotlock_open() failed with file /mail/w/a/wajabrun/Maildir/.INBOX.02 ORDERS.Gaiam/dovecot.index.log: No such file or directory Not sure what to make of this sequence?

2 1

[Dovecot] maildir and end-of-line encoding
by Christoph Anton Mitterer 23 Nov '12

23 Nov '12

Hi. I just wondered, the following: My MDA may get mails that use LF or CR/LF end of line encodings and deliver them into maildirs. I couldn't find any information about, whether one should or must convert all into one format, cause AFAIK at least on the IMAP side, CR/LF is always used? How does this work on the maildir/backend side of dovcot? Can it work with both and simply automatically convert LF into CR/LF? Thanks, Chris.

2 3

[Dovecot] Is there any Documentation or Howto/Guide for Dovecot Replication or do i have to wait for dovecot 2.2.x?
by weber＠zackbummfertig.de 23 Nov '12

23 Nov '12

dear timo, can you help me? best regards marko, from hamburg

3 2

[Dovecot] imap_acl and osx 10.7
by Piero Zucchi 22 Nov '12

22 Nov '12

Hello everybody, I'm trying to setup public folder with ACLs on a Lion Server 10.7.5 unfortunately it seems that the imap_acl plugin is not loaded properly do you have any advice? cheers Piero This is what i get from the log with imap_acl plugin enabled in protocol imap { } Log file: imap: Debug: Loading modules from directory: /usr/lib/dovecot Nov 22 09:08:14 xserve04 dovecot[87688]: imap: Error: dlopen(/usr/lib/dovecot/lib02_imap_acl_plugin.so) failed: dlopen(/usr/lib/dovecot/lib02_imap_acl_plugin.so, 10): Symbol not found: _acl_user_module Nov 22 09:08:14 xserve04 dovecot[87688]: imap: Error: Referenced from: /usr/lib/dovecot/lib02_imap_acl_plugin.so Nov 22 09:08:14 xserve04 dovecot[87688]: imap: Error: Expected in: flat namespace Nov 22 09:08:14 xserve04 dovecot[87688]: imap: Error: in /usr/lib/dovecot/lib02_imap_acl_plugin.so Nov 22 09:08:14 xserve04 dovecot[87688]: imap: Fatal: Couldn't load required plugins Nov 22 09:08:14 xserve04 dovecot[43220]: master: Error: service(imap): command startup failed, throttling dovecot config # 2.0.16apple1: /etc/dovecot/dovecot.conf # OS: Darwin 11.4.2 x86_64 acfs auth_debug = yes auth_debug_passwords = yes auth_gssapi_hostname = $ALL auth_mechanisms = cram-md5 x-plain-submit apop gssapi plain login auth_socket_path = /var/run/dovecot/auth-userdb auth_username_format = %n default_internal_user = _dovecot default_login_user = _dovenull disable_plaintext_auth = no first_valid_gid = 6 first_valid_uid = 6 hostname = mail.customer.com mail_access_groups = mail mail_debug = yes mail_location = maildir:/Volumes/XsanVolume/Mail/%u mail_log_prefix = "%s(pid %p user %u): " mail_plugins = quota zlib fts fts_sk acl managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mdbox_rotate_size = 200 M namespace { inbox = yes location = prefix = separator = / type = private } namespace { hidden = yes list = children location = maildir:/Volumes/XsanVolume/Mail/Condivise/Interno:CONTROL=/Volumes/XsanVolume/Mail/Condivise/Indexes/%u/shared_Interno:INDEX=/Volumes/XsanVolume/Mail/Condivise/Indexes/%u/shared_Interno prefix = Interno/ separator = / subscriptions = no type = public } passdb { args = /etc/dovecot/submit.passdb driver = passwd-file pass = yes submit = yes } passdb { driver = od } plugin { acl = vfile fts = sk quota = maildir:User quota quota_warning = storage=100%% quota-exceeded %u quota_warning2 = storage=80%% quota-warning %u sieve = /Library/Server/Mail/Data/rules/%u/dovecot.sieve sieve_dir = /Library/Server/Mail/Data/rules/%u } postmaster_address = postmaster(a)xserve04.customer.com protocols = imap pop3 lmtp sieve quota_full_tempfail = yes service auth { extra_groups = _keytabusers idle_kill = 15 mins } service dns_client { unix_listener dns-client { mode = 0600 } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } service_count = 0 } service imap-postlogin { executable = script-login -d /etc/dovecot/acl_groups.sh unix_listener imap-postlogin { group = mail mode = 0600 user = _dovecot } user = _dovecot } service imap { client_limit = 5 executable = imap imap-postlogin process_limit = 200 service_count = 0 } service lmtp { unix_listener lmtp { mode = 0600 } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service pop3 { client_limit = 5 process_limit = 200 service_count = 0 } service quota-exceeded { executable = script /usr/libexec/dovecot/quota-exceeded.sh unix_listener quota-exceeded { group = mail mode = 0660 user = _dovecot } user = _dovecot } service quota-warning { executable = script /usr/libexec/dovecot/quota-warning.sh unix_listener quota-warning { group = mail mode = 0660 user = _dovecot } user = _dovecot } ssl_ca = </etc/certificates/xserve04.customer.com.AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA.chain.pem ssl_cert = </etc/certificates/xserve04.customer.com.AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA.cert.pem ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL:!ADH:!eNULL ssl_key = </etc/certificates/xserve04.customer.com.AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA.key.pem ssl_key_path = /etc/certificates/xserve04.customer.com.AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA.key.pem syslog_facility = local6 userdb { args = partition=/etc/dovecot/partition_map.conf enforce_quotas=yes driver = od } verbose_proctitle = yes protocol lmtp { mail_plugins = quota zlib fts fts_sk sieve } protocol lda { mail_plugins = quota zlib fts fts_sk sieve } protocol imap { imap_id_log = * imap_id_send = "name" * "version" * mail_max_userip_connections = 20 mail_plugins = quota zlib fts fts_sk imap_quota imap_zlib imap_fts imap_acl urlauth } protocol pop3 { mail_max_userip_connections = 6 } -- Piero Zucchi Apple Certified Trainer Apple Certified Specialist Professional 10.8 Apple Certified Technical Coordinator 10.7 Apple Certified System Administrator 10.6 Apple Certified Technical Coordinator 10.6 Apple Certified Specialist - Mac Os X Directory Services 10.6 Apple Certified Specialist - Mobility and Security 10.6 Apple Certified System Administrator 10.5 Apple Certified Technical Coordinator 10.5 Apple Certified Support Professional 10.5 Apple Certified Pro - Final Cut Pro 7, Level 1

4 6

Re: [Dovecot] users mail folders have to be subscribed
by Andre Bischof 22 Nov '12

22 Nov '12

Daniel, Am 19.11.2012 23:32 schrieb "Daniel Parthey" < daniel.parthey(a)informatik.tu-chemnitz.de>: > > Andre Bischof wrote: > > doveadm mailbox subscribe -u user(a)example.com "*" > > > > Should the user for "-u" be the system user the > > mailboxes belong to or has the user to be written in form of an email > > adress (user@localhost / user(a)n.dyndns.org)? > > It should be the same userdb username as used for imap login. Thank you. One thing that still doesn't work is subscribing to all mailboxes via "*", I guess because the folder names start with "." but dovecot mailbbox subscribe wants it without a starting "." Any clues how that can be solved? Regards Andre

2 2

[Dovecot] XMLRPC anyone?
by Egbert 21 Nov '12

21 Nov '12

Hi, Is there any code around that lets Dovecot (2.x) aauthenticate via a XMLRPC server (which connects to a LDAP server) instead of going directly to a LDAP server? It could give much more flexibility. TIA Egbert Jan, NL

1 0

[Dovecot] Autocreate No namespace for Problem
by tibby＠tibby.hu 21 Nov '12

21 Nov '12

Hi! I see this in the log: autocreate: No namespace found for Trash autocreate: No namespace found for Spam autocreate: No namespace found for Sent autocreate: No namespace found for Trash autocreate: No namespace found for Spam autocreate: No namespace found for Sent Why do I get this error ? Do I need to create a separate namespace for every folder? The config file looks like this: namespace private { separator = . prefix = INBOX. inbox = yes subscriptions = yes list = yes } ... plugin { autocreate = Trash autocreate2 = Spam autocreate3 = Sent autosubscribe = Trash autosubscribe2 = Spam autosubscribe3 = Sent } Thanks!

2 1

[Dovecot] v2.1 memory usage
by Timo Sirainen 21 Nov '12

21 Nov '12

v2.1's imap/pop3 processes are linked with OpenSSL by default, because of imapc/pop3c storages. I wonder if you notice any actual (system-global) memory usage reduction when compiling without those and you have thousands of imap processes? ./configure --with-storages=mdbox sdbox maildir mbox cydir I guess I could try it myself also but maybe someone else wanting to reduce memory usage is quicker? :) Related to that, you can look at where imap processes' memory goes with: http://dovecot.org/tools/linux-maps-parse-imap.pl I don't know how much memory those (writable!) file-backed memory areas actually use per-process. Maybe nothing, maybe something..

8 13

[Dovecot] Need help for configure sieve
by Mathieu R. 21 Nov '12

21 Nov '12

Hello, i just did set up a mail server with postfix+dovecot+mysql+roundcube everything work fine. Now i'm trying to configure dovecot to get sieve working, and i probably missing something, cause i can not get it to fall in work... Thanks in advance, if you can help me a bit... here is my dovecot (2.1.10) conf : 20:07 root@curzio /home/mathieu # dovecot -n # 2.1.10: /etc/dovecot/dovecot.conf # OS: Linux 3.2.30-xenU-7157-x86_64 x86_64 Arch Linux mail_home = /srv/vmail/%d/%u mail_location = maildir:~ managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 sieve service auth { unix_listener auth-client { group = postfix mode = 0660 user = postfix } user = root } ssl_cert = </etc/ssl/private/server.crt ssl_key = </etc/ssl/private/server.key userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol lda { mail_plugins = " sieve" } here is my postfix conf : 20:07 root@curzio /home/mathieu # postconf -n alias_database = $alias_maps alias_maps = hash:/etc/postfix/aliases broken_sasl_auth_clients = yes command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/lib/postfix data_directory = /var/lib/postfix debug_peer_level = 2 debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5 html_directory = no inet_protocols = ipv4 local_recipient_maps = $virtual_mailbox_maps local_transport = virtual mail_owner = postfix mailq_path = /usr/bin/mailq manpage_directory = /usr/share/man newaliases_path = /usr/bin/newaliases queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix relay_domains = * sample_directory = /etc/postfix/sample sendmail_path = /usr/sbin/sendmail setgid_group = postdrop smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = $mydomain smtpd_sasl_path = /var/run/dovecot/auth-client smtpd_sasl_security_options = noanonymous smtpd_sasl_tls_security_options = $smtpd_sasl_security_options smtpd_sasl_type = dovecot smtpd_tls_auth_only = yes smtpd_tls_cert_file = /etc/ssl/private/server.crt smtpd_tls_key_file = /etc/ssl/private/server.key smtpd_tls_loglevel = 1 transport_maps = hash:/etc/postfix/transport unknown_local_recipient_reject_code = 550 virtual_alias_maps = proxy:mysql:/etc/postfix/virtual_alias_maps.cf virtual_gid_maps = static:5000 virtual_mailbox_base = /srv/vmail virtual_mailbox_domains = proxy:mysql:/etc/postfix/virtual_domains_maps.cf virtual_mailbox_limit = 512000000 virtual_mailbox_maps = proxy:mysql:/etc/postfix/virtual_mailbox_maps.cf virtual_minimum_uid = 5000 virtual_transport = virtual virtual_uid_maps = static:5000 i use the roundcube plugin managesieve, wich seems to work correctly. -- Mathieu R.

2 8

[Dovecot] ACL and SSL
by Dave Shariff Yadallee - System Administrator a.k.a. The Root of the Problem 20 Nov '12

20 Nov '12

Finally got Dovecot to work on ports 100 and 143. I would like to a) Learn about ACL esp on port 110 as there are still yodellaks that try to brake in on port 110. b) Setting up separate SSL cert for imaps and pop3s. -- For effective Internet Etiquette and communications read http://catb.org/jargon/html/T/top-post.html, http://idallen.com/topposting.html & http://www.caliburn.nl/topposting.html -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

4 6

[Dovecot] FYI: News about Mark Crispin
by Timo Sirainen 20 Nov '12

20 Nov '12

Begin forwarded message: > From: Barry Leiba <barryleiba(a)computer.org> > Date: 20. marraskuuta 2012 2.44.51 UTC+2.00 > To: imap5(a)ietf.org, imapext(a)ietf.org, imap-protocol(a)u.washington.edu, imap-use(a)u.washington.edu > Subject: [imapext] News about Mark Crispin > Reply-To: imap5(a)ietf.org > > Everyone here knows Mark Crispin -- or at least knows who he is: Mark is the author of the original IMAP specification, and has taken it through its different versions to the present IMAP4rev1. He's written reference implementations of both server and client, and has been a vocal participant on all the mailing lists I'm posting this to. > > I'm sad to have to report that Mark is now terminally ill, and is in hospice care. > > For now, at least, I'm told that Mark is at least somewhat aware. If anyone has brief well-wishing messages they'd like to send him, please post them to the <imap5(a)ietf.org> mailing list, and I'll forward them to Mark's long-term companion, Annie. I will also post updates to that list as I get them. > > [The Reply-To for this message is set to <imap5(a)ietf.org>, so that replies will go there. You will have to subscribe to that mailing list in order to post to it. You can do that here: > http://www.ietf.org/mailman/listinfo/imap5 ] > > Barry Leiba > > _______________________________________________ > imapext mailing list > imapext(a)ietf.org > https://www.ietf.org/mailman/listinfo/imapext >

2 1

[Dovecot] users mail folders have to be subscribed
by Andre Bischof 20 Nov '12

20 Nov '12

Hi, I did a migration from cyrus 2.2 to dovecot (fresh installation, details below) via cyrus2dovecot from FU Berlin. That worked, but I first was missing mails in subfolders ander Inbox. No I detected that they are in the users Maildir in folders in his directory. They are listed when using telnet: * LIST (\HasChildren) "." "INBOX.ebay" * LIST (\HasNoChildren) "." "INBOX.ebay.xj" But they are not shown in thunderbird, I have to subscribe to them one by one. I probably did something wrong and maybe messed up with namespace and seperator settings - it would be great if one could lead me out of that. The wiki was a great help installing and configuring everything, but now I'm stuck. I use dovecot 2.1.7 under Ubuntu 12.10: # dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.5.0-18-generic x86_64 Ubuntu 12.10 auth_verbose = yes mail_debug = yes mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation s ubaddress comparator-i;ascii-numeric relational regex imap4flags copy include variab les body enotify environment mailbox date ihave namespace inbox { inbox = yes list = yes location = prefix = separator = . type = private } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster@localhost protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } Any help is greatly appreciated! Regards Andre

3 6

[Dovecot] Unsuscribe
by Hendrik 19 Nov '12

19 Nov '12

Please unsubscribe me

3 2

[Dovecot] Data Store Synchronization
by Roman Gelfand 19 Nov '12

19 Nov '12

Is there a way to synchronize dovecote mail store with another mail store, like zarafa, via imap or pop3? Thanks in advance

2 1

[Dovecot] upgrade 1.0.15 -> 2.1.7: MBOX index compatibility and performance
by Benoit Branciard 19 Nov '12

19 Nov '12

Hi, we just upgraded our mailserver from Dovecot 1.0.15 to Dovecot 2.1.7. We use MBOX format (due to legacy compatibility), system users, PAM+GSSAPI auth, filesystem quotas, and indexes located on a separate filesystem: mail_location = mbox:~/mail:INBOX=~/mail/INBOX:INDEX=/var/cache/dovecot/indexes/%16Hu/%u The 2.1.7 configuration files have been rewritten based on default templates instead of converting it from 1.0.15. The server has ~8000 mailboxes and about ~2000 simultaneous IMAP/POP active connexions. The problem is: - indexes seem to be rebuilt: first IMAP/POP connexion for each user thows lots of error messages in the log, and the global index size decreases. Example error log: Nov 19 08:56:38 myhost dovecot: imap(myuser): Error: Cached message size larger than expected (27884 > 27855) Nov 19 08:56:38 myhost dovecot: imap(myuser): Error: Corrupted index cache file /var/cache/dovecot/indexes/4/myuser/.imap/INBOX/dovecot.index.cache: Broken physical size for mail UID 4414 Nov 19 08:56:38 myhost dovecot: imap(myuser): Error: Cached message size larger than expected (27884 > 27855) Nov 19 08:56:38 myhost dovecot: imap(myuser): Error: Corrupted index cache file /var/cache/dovecot/indexes/4/myuser/.imap/INBOX/dovecot.index.cache: Broken physical size for mail UID 4414 Nov 19 08:56:38 myhost dovecot: imap(myuser): Error: Cached message size larger than expected (27884 > 27855) Nov 19 08:56:38 myhost dovecot: imap(myuser): Error: Corrupted index cache file /var/cache/dovecot/indexes/4/myuser/.imap/INBOX/dovecot.index.cache: Broken physical size for mail UID 4414 Nov 19 08:56:38 myhost dovecot: imap(myuser): Error: Cached message size larger than expected (27884 > 27855) Nov 19 08:56:38 myhost dovecot: imap(myuser): Error: Corrupted index cache file /var/cache/dovecot/indexes/4/myuser/.imap/INBOX/dovecot.index.cache: Broken physical size for mail UID 4414 Nov 19 08:56:38 myhost dovecot: imap(myuser): Error: copy: i_stream_read() failed: Input/output error Nov 19 08:56:38 myhost dovecot: imap(myuser): Error: Cached message size larger than expected (27884 > 27855) Nov 19 08:56:38 myhost dovecot: imap(myuser): Error: Corrupted index cache file /var/cache/dovecot/indexes/4/myuser/.imap/INBOX/dovecot.index.cache: Broken physical size for mail UID 4414 - load average is extremely high (more than 10x the usual one), resulting from an significant increase of disk I/O, and for now (4h after the "monday rush") this doesn't seem to decrease. Questions: - are 1.05 indexes supposed to be backward compatible with Dovecot 2.1.7 ? - are there some technical reasons which could explain the increase of disk I/O, apart from index rebuild ? -- Benoit BRANCIARD Service InfraStructures (SIS) - Direction du Système d'Information (DSI) Université Paris 1 Panthéon-Sorbonne Centre Pierre Mendès France B 406 - 90, rue de Tolbiac - 75634 Paris cedex 13 - France Tél : +33 1 44 07 89 68 - Fax : +33 1 44 07 89 66 Accueil tél. : +33 1 44 07 89 65 Assistance : assistance-dsi(a)univ-paris1.fr Web : http://dsi.univ-paris1.fr -- Ce message a ete verifie par MailScanner pour des virus ou des polluriels et rien de suspect n'a ete trouve.

1 0

[Dovecot] advices for a new installation
by Surviet Amine 18 Nov '12

18 Nov '12

hello everyone, first of all, please forgive my bad english skill, I live in France. On our "old" Dovecot 1.x architecture, we have NFS shares between the front servers (MTA, IMAP...) and mail storage server. I've read some wiki2 pages that present the new director and imap proxy. But I'm still don't see things clearly, so I post here to have your advices to set-up a new mail architecture. The hardware we have : - 24x hard drives in a SAS bay - this bay is directly attached via SAS to a server that I'll call : mail storage server - 2 others servers run ProxMox Virtual Environment The PVE will help us to get many virtual servers : - MX : "mail in" servers - IMAP/POP : our hosted clients services These clients may come from webmail (RoundCube) and others clients (Outlook, Thunderbird, mobile clients...) - RoundCube webmail - MySQL server (hosts in databases accounts and settings for Postfix, Dovecot and RoundCube) - maybe antivirus and antispam servers I've read several threads about NFS and IMAP issues. So I decided to not keeping it. In this scenario, I've tried for the mail receiving part : - front-end (postfix lmtp-client) to mail storage server (lmtp server) that seems to runs fine, now i'll must try to add antispam and antivirus scans Now, for the IMAP part, could you, please tell me, if it is better to : - have several IMAP frontend servers that proxy to the mail storage server or - still keeps NFS between the mail storage server and the frontends Dovecot ? On our Dovecot 1.x webmail use imapproxy. I've read that others proxies exist. We have used for a limited time Perdition. What is the differences between imapproxy, Perdition, nginx imap proxy and Dovecot proxy ? Thanks for sharing your experience of "large mail service" that are solid enought to be scaled.

1 0

[Dovecot] Different Mechanism for POP3
by Tim Smith 18 Nov '12

18 Nov '12

Just wondered if there was a way of making the PLAIN an authentication method for POP3S transactions only without making this an option for IMAP? I am attempting to connect to a POP3S server through the GMail interface available through "Accounts and Import". The issue is that there does not seem to be an option to specify the type of mechanism within their interface so I think I have to offer PLAIN along with SSL. Has anyone else had any experience of using the GMail import settings? -- Tim Smith Tel: 01423 564 078 Mob: 07984 398 299 Email: info(a)titan21.co.uk Web: www.titan21.co.uk

3 2

[Dovecot] couple questions about dovecot
by Raan Young 18 Nov '12

18 Nov '12

I am attempting to migrate an ancient IMAP server to Dovecot 2.0.9 running on CentOS 6.3, while trying to minimize the impact on users. Most are using Outlook. I have everything working, but have run into a couple of problems, neither horrible, but both weird. It started when I noticed Outlook shows the .subscriptions file in the folder listing. I figured out a way to prevent that (see below), but then decided to attempt the same tactic to move the .imap index structure out of the folder tree and ran into an interesting side-effect. The .subscriptions issue would seem to be a bug, since the documentation I found implies Dovecot should be hiding it from list requests - as it does for the .imap index structure. I made a workaround by using the below mail_location setting. This puts the .subscriptions file above the imap folder structure and hence outside the list scope. mail_location = mbox:~/imap:INBOX=~/mbox:CONTROL=~:INDEX=~/.imap You'll note I have also moved the .imap index. This works, but the full path to the index files has extra layers of .imap. For example, if a folder tree of imap/A/B/C/D exists, where D is the actual mbox format message file, then the index files are stored in .imap/A/B/C/.imap/D. Don't know if this is a bug or I'm misunderstanding something. Can you provide any insight or better solutions for either issue? Some clients are also using iPhones and/or roundcubemail for web access. Those do not have the .subscriptions issue. Raan

1 0

[Dovecot] dovecot: lda(root): Fatal: Invalid user settings. Refer to server log for more information.
by Thufir 17 Nov '12

17 Nov '12

I ran dovecot -a and the blizzard of data seemed ok to my limited knowledge. Is there another log I should look into to trace this error down? Dovecot and system info: thufir@dur:~$ thufir@dur:~$ dovecot --version 2.0.19 thufir@dur:~$ thufir@dur:~$ cat /etc/lsb-release DISTRIB_ID=Ubuntu DISTRIB_RELEASE=12.04 DISTRIB_CODENAME=precise DISTRIB_DESCRIPTION="Ubuntu 12.04.1 LTS" thufir@dur:~$ testing postfix & dovecot (http://packages.ubuntu.com/precise/dovecot-postfix) root@dur:/etc/postfix# root@dur:/etc/postfix# telnet localhost 25 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. 220 dur.bounceme.net ESMTP Postfix (Ubuntu) helo me 250 dur.bounceme.net mail from:foo@bar.com 250 2.1.0 Ok rcpt to:root@dur.bounceme.net 250 2.1.5 Ok data 354 End data with <CR><LF>.<CR><LF> subject:ping 3 blah blah . 250 2.0.0 Ok: queued as 35EC92A0D72 quit 221 2.0.0 Bye Connection closed by foreign host. root@dur:/etc/postfix# root@dur:/etc/postfix# tail /var/log/mail.log Nov 16 12:30:07 dur postfix/smtpd[4113]: connect from localhost[127.0.0.1] Nov 16 12:30:40 dur postfix/smtpd[4113]: 35EC92A0D72: client=localhost[127.0.0.1] Nov 16 12:30:52 dur postfix/cleanup[4133]: 35EC92A0D72: message-id=<20121116203040.35EC92A0D72(a)dur.bounceme.net> Nov 16 12:30:52 dur postfix/qmgr[1681]: 35EC92A0D72: from=<foo(a)bar.com>, size=321, nrcpt=1 (queue active) Nov 16 12:30:52 dur dovecot: lda(root): Error: chdir(/root/) failed: Permission denied (euid=65534(nobody) egid=65534(nogroup) missing +x perm: /root, dir owned by 0:0 mode=0700) Nov 16 12:30:52 dur dovecot: lda(root): Error: chdir(/root) failed: Permission denied Nov 16 12:30:52 dur dovecot: lda(root): Error: user root: Initialization failed: Initializing mail storage from mail_location setting failed: stat(/root/Maildir) failed: Permission denied (euid=65534(nobody) egid=65534(nogroup) missing +x perm: /root, dir owned by 0:0 mode=0700) Nov 16 12:30:52 dur dovecot: lda(root): Fatal: Invalid user settings. Refer to server log for more information. Nov 16 12:30:52 dur postfix/local[4134]: 35EC92A0D72: to=<root(a)dur.bounceme.net>, relay=local, delay=25, delays=25/0.02/0/0.12, dsn=4.3.0, status=deferred (temporary failure) Nov 16 12:30:56 dur postfix/smtpd[4113]: disconnect from localhost[127.0.0.1] root@dur:/etc/postfix# thanks, Thufir

3 6

[Dovecot] Change errors to spanish
by Yago Alonso - Ityd 15 Nov '12

15 Nov '12

Hello, i have dovecot version 1.2.17 and i need to translate all the errors that my users receive when a mail fails to send. Were and how should i change it? Thanks a lot! -- Yago Alonso

2 1

[Dovecot] emails are not displayed
by Daniel Fischer 15 Nov '12

15 Nov '12

Hello, i have a problem with some public folders in my testing environment. But after the series, here is my konfiguraion: doveconf -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-3-amd64 x86_64 Debian wheezy/sid hostname = ......................................... lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = * mail_debug = no mail_gid = 5000 mail_location = maildir:~:INDEX=/var/mail/indexes/%d/%n mail_plugins = acl mail_privileged_group = vmail mail_uid = 5000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { list = children location = maildir:/var/mail/vhosts/%d/public:INDEX=/var/mail/indexes/%d/public:CONTROL=/var/mail/controls/%d/public prefix = Public. separator = . subscriptions = no type = public } namespace inbox { hidden = no inbox = yes list = yes location = prefix = separator = . subscriptions = yes type = private } passdb { args = scheme=CRAM-MD5 username_format=%u /var/mail/vhosts/auth.d/%d/shadow driver = passwd-file } plugin { acl = vfile antispam_allow_append_to_spam = no antispam_backend = pipe antispam_pipe_program = /usr/local/bin/sa-learn-pipe.sh antispam_pipe_program_notspam_arg = --ham antispam_pipe_program_spam_arg = --spam antispam_pipe_tmpdir = /tmp antispam_spam = Spam antispam_trash = Trash sieve = /var/mail/vhosts/sieve/users/%d/%n/.dovecot.sieve sieve_before = /var/mail/vhosts/sieve/%d/before sieve_dir = /var/mail/vhosts/sieve/users/%d/%n sieve_global_dir = /var/mail/vhosts/sieve/%d/global sieve_user_log = /var/mail/vhosts/sieve/users/%d/%n/.dovecot.sieve.log } postmaster_address = postmaster@..... protocols = " imap lmtp sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-userdb { mode = 0660 user = vmail } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl_cert = </etc/ssl/private/................................. ssl_key = </etc/ssl/private/......................... userdb { args = username_format=%u /var/mail/vhosts/auth.d/%d/passwd driver = passwd-file } protocol lmtp { mail_plugins = acl sieve } protocol lda { log_path = /var/log/sieve.log mail_plugins = acl sieve } protocol imap { imap_idle_notify_interval = 24 mins mail_plugins = acl imap_acl antispam } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o } the problem is that any, not all public folder appear empty. if I delete the index files, I see the emails again for a while(1-2 hours) until they're gone again sometime. The directories change their content not for weeks. It is a test environment. but in one of the folders are more than 13000 mails (the Faxbox). Currently 3 of 13 folders are affected. I thought that it may be due to the size, but it is not the largest folders. For normal mail boxes I have not observed this effect. a3 EXAMINE Public.faxe * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS ()] Read-only mailbox. * 0 EXISTS * 0 RECENT * OK [UIDVALIDITY 1349419566] UIDs valid * OK [UIDNEXT 141737] Predicted next UID * OK [HIGHESTMODSEQ 5] Highest Delete indexes.... /var/mail/indexes/........../public# rm -r .faxe/ a3 EXAMINE Public.faxe * OK [CLOSED] Previous mailbox closed. * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS ()] Read-only mailbox. * 13778 EXISTS * 0 RECENT * OK [UIDVALIDITY 1349419566] UIDs valid * OK [UIDNEXT 141737] Predicted next UID * OK [NOMODSEQ] No permanent modsequences i would like to show you log files but i didn't see any error message. Does Have anyone an idea? Thanks for comment... Daniel

1 0

[Dovecot] auth attempts errors
by burak gürer 15 Nov '12

15 Nov '12

i have install 2.1.1 and configured in dovecot log this error is coming every 20 seconds: dovecot: imap-login: Disconnected (no auth attempts in 0 secs): rip=**********, lip=**********, TLS handshaking: SSL_accept() syscall failed: Connection reset by peer and this error every 2 seconds: dovecot: imap-login: Disconnected (no auth attempts in 0 secs): rip=**********, lip=********** what can be the problem? thanks..

3 7

[Dovecot] multiple users to same e-mail account with ldap authentication
by Marco Gatti 14 Nov '12

14 Nov '12

Hi, I was looking for a particular case of dovecot configuration I cannot find anywhere. Is there a way dovecot can authenticate via ldap different windows 2008 AD users that have access to the same e-mail account (like user authorization in ms exchange)? For example I want to extend AD schema to let users have 10 email accounts (with multiple domain support). If they are private accounts I think there is no problem at all. But if I want two or more users to access the same mail account what happens? Can I do it with dovecot? Or should I create AD groups and add members to that, to let user access the same mail account? Cheers -- Marco

4 9

Re: [Dovecot] IPhone wont delete IMAP messages from dovecot mailbox
by tibby＠tibby.hu 14 Nov '12

14 Nov '12

Hello! I've got dovecot running with postfix. Have virtual users under vmail folder. When I connect with outlook, I can read, delete messages. When I sign on with webmail, also can delete messages, Mutt is working as well on the mail server, can delete messages. Once the message is deleted it moves to the trash. Works as it supposed to. But on Iphone, when I add a mail user, got the mailbox synced with IMAP I can see the INBOX, but when I delete a message, get this error: "Unable to Move Message The message could not be moved to the mailbox Trash." http://www.netchimp.co.uk/webdesign/wp-content/uploads/2011/12/iphone_unabl… What causing this problem? Please Help.

6 9

[Dovecot] Dovecot 2.1.10
by Ralf Zimmermann 14 Nov '12

14 Nov '12

Hi all, I've a problem with dovecot-2.1.10. At time we use dovecot-1.2 without zlib. We setup a new server with dovecot 2.1.10. After syncing the emails everything looks fine. But if we use zlib plugin all new emails have no content. There are a lot of "Error: Maildir filename has wrong S value" log entrys. So we have compiled dovecot-2.0.18 and we use exactly the same configuration. Everything works. What can be our problem with version 2.1.10? Greets Ralf

3 4

[Dovecot] dovecot lost mail! Cause?
by Lukas Haase 14 Nov '12

14 Nov '12

Hi, After using dovecot for several years now, today happend something which makes me really feel unconfortable: An email received was just not delivered properly, or, is lost! The mail (from an external server) was sent to two local mailboxes, user1 and user2. user1 received the message but for user2, it *magically* disappeared. MTA is exim4 which definitely processed the messages and handed over to dovecot deliver: 2012-11-12 07:28:21 1TXnVG-00053I-GD SA: [...] id=8644593.887351352701 685934.JavaMail 2012-11-12 07:28:21 1TXnVG-00053I-GD => user1 <user1(a)example.com> R=dovecot T=dovecot_pipe 2012-11-12 07:28:21 1TXnVG-00053I-GD => user2 <user2(a)example.com> R=dovecot T=dovecot_pipe 2012-11-12 07:28:21 1TXnVG-00053I-GD Completed Also, the log of dovecot tells that the mail should have been stored: Nov 12 07:28:21 mail dovecot: deliver(user1): sieve: msgid=<8644593.887351352701685934.JavaMail>: stored mail into mailbox 'INBOX' Nov 12 07:28:21 mail dovecot: deliver(user2): sieve: msgid=<8644593.887351352701685934.JavaMail.orbitz>: stored mail into mailbox 'INBOX' user1 received the mail but user2 not. Since user2 is myself, I *know* that I did not accidently delete any mail or something like that. It was just never received! Disk space is 3GB left, so enough. So I grepped the whole Maildir of user2 for the message ID. There is only one match in the dovecot.index.cache and within that, the most important data of the mail (Message ID, Date, Sender, Receiver, Subject) appears. But apart from that, not a single file! Is there hope to ever find out why what was going wrong here? It feels me veeeeeeeeery unconfortable because from now on I can never be sure any more that all my mails are really received :( :( However, as I said, my mail system processed maybe millions of messages the past 8 years. Although, I can not be sure if that was the case ... :( And help greatly appreciated! Luke PS: Dovecot version 1.2.15 (Debian 6.0.6) with Maildir backend on local harddrive. No NFS, nothing which can go wrong ... PPS: Original log files, just named replaced for privacy.

4 5

[Dovecot] Dovecot newbie (migrating from qmail)
by Ajai Khattri 13 Nov '12

13 Nov '12

Ive been using qmail+vpopmail+courier-imap for many years but its time to retire that server so I thought this might be an opportunity to see how I could use Postfix and Dovecot to provide the same services. Im running Dovecot 2.1.9 and Postfix 2.9.4. I have spent a few days reading through some of the docs on the wiki (there's doesn't seem to be any large overview of Dovecot concepts or books so bear with me). Im thinking something simple like passwd-file setup would suffice for me. I want to use completely virtual users. Id like to store mail under /home/vmail/$domain/$user. I think Ive figured out how to do that. But how do I create the maildir? I understand the need to have a mail directory but also a directory for things like sieve - how to specify that? Im thinking the structure would be something like: /home/vmail/$domain/$user/mail <-- mail stored here /home/vmail/$domain/$user/ <-- sieve and other sundry store here Or should the sieve stuff also be under its own folder alongside the maildir? Is it possible to have a separate passwd file per domain? It is possible to combine password and userdb files into one per domain? (I prefer to keep all files related to each domain in its own folder). Also would like to configure Postfix to use dovecot-sasl and I want to use dovecot-lmtp for deliveries. Any good docs / example on those? Later on, I think I want to integrate some kind of virus and spam filtering (amavisd and maybe dspam - anybody used those? would I configure Postfix to handle that or dovecot-lmtp?) Im sure Ill have more questions as I get more complicated but baby steps for now. -- Aj.

3 5

[Dovecot] Problem importing messages with lazy_expunged configured
by Angel L. Mateo 13 Nov '12

13 Nov '12

Hello, I have a problem importing messages since I have configured lazy_expunge. My lazy_expunge configuration (that is correctly working when a message is expunged) is: plugin { lazy_expunge = BORRADOS. } namespace { hidden = yes list = no location = maildir:~/Maildir/expunged prefix = BORRADOS. separator = . } but when I try to import messages I get: amateo_adm@myotis31:~$ sudo doveadm -vD import -u angel.luis maildir:/tmp/angel.luis '' mailbox INBOX doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib02_lazy_expunge_plugin.so doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib20_zlib_plugin.so doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm doveadm(root): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentional, so just ignore this message) doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_zlib_plugin.so doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_backend_rescan (this is usually intentional, so just ignore this message) doveadm(root): Debug: Effective uid=0, gid=0, home=/home/amateo_adm doveadm(root): Debug: Quota root: name=User quota backend=dict args=:file:/home/amateo_adm/Maildir/dovecot.quota doveadm(root): Debug: Quota rule: root=User quota mailbox=* bytes=10737418240 messages=0 doveadm(root): Debug: Quota rule: root=User quota mailbox=Trash bytes=+1073741824 messages=0 doveadm(root): Debug: dict quota: user=doveadm, uri=file:/home/amateo_adm/Maildir/dovecot.quota, noenforcing=0 doveadm(root): Debug: maildir++: root=/tmp/angel.luis, index=, control=, inbox=/tmp/angel.luis, alt= doveadm(root): Fatal: lazy_expunge: Unknown namespace: 'BORRADOS.' in /tmp/<user> I don't have any "expunged" folder, it is just a maildir. In order to use it I have to deactivate this plugin in the running command with something like "sudo doveadm -vD -o mail_plugins='quota zlib' import -u <user> maildir:/tmp/<user> '' mailbox INBOX". Any idea? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

1 0

[Dovecot] older gcc don't know --as-needed
by Andreas Schulze 13 Nov '12

13 Nov '12

Hi, I have to build dovecot-2.1.10 for SuSE SLES9. /bin/sh ../../libtool --tag=CC --mode=link gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -no-undefined -Wl,--as-needed -o test-lib test_lib-test-lib.o test_lib-test-array.o test_lib-test-aqueue.o test_lib-test-base64.o test_lib-test-bsearch-insert-pos.o test_lib-test-buffer.o test_lib-test-crc32.o test_lib-test-hash-format.o test_lib-test-hex-binary.o test_lib-test-istream-base64-encoder.o test_lib-test-istream-concat.o test_lib-test-istream-crlf.o test_lib-test-istream-seekable.o test_lib-test-istream-tee.o test_lib-test-llist.o test_lib-test-mempool-alloconly.o test_lib-test-network.o test_lib-test-ostream-file.o test_lib-test-primes.o test_lib-test-priorityq.o test_lib-test-seq-range-array.o test_lib-test-strescape.o test_lib-test-strfuncs.o test_lib-test-str-find.o test_lib-test-str-sanitize.o test_lib-test-time-util.o test_lib-test-utc-mktime.o test_lib-test-var-expand.o ../lib-test/libtest.la liblib.la -lrt libtool: link: gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wl,--as-needed -o test-lib test_lib-test-lib.o test_lib-test-array.o test_lib-test-aqueue.o test_lib-test-base64.o test_lib-test-bsearch-insert-pos.o test_lib-test-buffer.o test_lib-test-crc32.o test_lib-test-hash-format.o test_lib-test-hex-binary.o test_lib-test-istream-base64-encoder.o test_lib-test-istream-concat.o test_lib-test-istream-crlf.o test_lib-test-istream-seekable.o test_lib-test-istream-tee.o test_lib-test-llist.o test_lib-test-mempool-alloconly.o test_lib-test-network.o test_lib-test-ostream-file.o test_lib-test-primes.o test_lib-test-priorityq.o test_lib-test-seq-range-array.o test_lib-test-strescape.o test_lib-test-strfuncs.o test_lib-test-str-find.o test_lib-test-str-sanitize.o test_lib-test-time-util.o test_lib-test-utc-mktime.o test_lib-test-var-expand.o ../lib-test/.libs/libtest.a ./.libs/liblib.a -lrt /usr/lib/gcc-lib/i586-suse-linux/3.3.3/../../../../i586-suse-linux/bin/ld: unrecognized option '--as-needed' /usr/lib/gcc-lib/i586-suse-linux/3.3.3/../../../../i586-suse-linux/bin/ld: use the --help option for usage information gcc version is 3.3.3 Is there a special option to disable ithe ld option or do I have to apply a special patch? Are there other suggestions? Thanks -- Andreas Schulze Internetdienste | P252 DATEV eG 90329 Nürnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196 E-Mail info @datev.de | Internet www.datev.de Sitz: 90429 Nürnberg, Paumgartnerstr. 6-14 | Registergericht Nürnberg, GenReg Nr.70 Vorstand Prof. Dieter Kempf (Vorsitzender) Dipl.-Kfm. Wolfgang Stegmann (stellvertretender Vorsitzender) Dipl.-Kfm. Michael Leistenschneider Dipl.-Kfm. Dr. Robert Mayr Jörg Rabe v. Pappenheim Dipl.-Vw. Eckhard Schwarzer Vorsitzender des Aufsichtsrates: Reinhard Verholen

1 0

[Dovecot] Commercial features in Dovecot future: Object storage, archive
by Timo Sirainen 13 Nov '12

13 Nov '12

Hi all, Dovecot Oy’s web pages at www.dovecot.fi have been updated. The products page lists two features that will be available for commercial licensing, extending the functionality of the basic open-source version of Dovecot. * Storing emails to (high-latency) object storage, initially supporting Amazon S3, Caringo CAStor and Scality. * Email archive storage. See http://www.dovecot.fi/products/index.html for details. I’ve been developing Dovecot for over 10 years now. For a long time it was my primary motivation in life to create the best IMAP server available :) I think I've pretty much accomplished that by now. The future is looking very bright for Dovecot: we will continue the open source development stronger than ever, but in addition, for the long term it needs some additional licensed components that bring the money to cover the cost for future Dovecot development and to be able to build up the support in a professional way. These new features will be added as plugins on top of Dovecot to extend the functionality. Note that I’m not just randomly choosing which features will be open and which will be licensed. Only some specific features will be licensed where my company is going to make money with partnerships and in other measurable ways.

5 6

[Dovecot] mbox vs. maildir storage block waste
by Christoph Anton Mitterer 13 Nov '12

13 Nov '12

Hi. I recently mentioned in several posts, that I'd tended to use mbox rather than maildir, because you don't loose so much space (due to always allocating full blocks per maildir file and thus per mail). I made some tests of my archive, which consists of some 3,4 million mails at a total of 42GB). Most of these mails are probably normal sized, but there are also some with bigger attachments. For those who are interested here are the results: I used a 53687091200 B image file (via loop device) and tested ext4 only. btrfs is IMHO not yet ready, I have had often issues with XFS (corruptions), reiser4 is more or less dead and reiser3 is said to have issues (see e.g. its wikipedia article, even though it has that mode for small files which would fit nicely). As you see the number of mails increased a bit, cause I tested over several days... but this is only a very small increase so it shouldn't change the numbers a lot. 1) Original mbox archives (right now in Evolution) mbox exact space: 38122676224 (does not include meta-data) mbox guess space: 44625670144 (includes Evolution meta-data which is several GBs) mbox num mails: 3412999 (occurances of From_ lines) In the following: - image file, 1B-blocks, Used_begin, Used_end, Available_begin, Available_end result out of df -B 1 - mdir exact used space is the sum of du -B 1 for each regular file (i.e. each mdir file) - mdir guess used space du -B 1 on the root dir of the filesystem - mdir num mails: find . type -f | wc -l on the root dir of the filesystem 2) EXT4 with 4096 blocks: image file: 53687091200 1B-blocks: 52844687360 Used_begin: 188555264 Used_end: 45198778368 Available_begin: 49971777536 Available_end: 2444972032 mdir exact used space: 44810866688 mdir guess used space: 45010243584 mdir num mails: 3423296 delta: 6.688190464 G delta / mail: 1953 B 3) EXT4 with 2048 blocks: image file: 53687091200 1B-blocks: 50324295680 Used_begin: 82857984 Used_end: 41598846976 Available_begin: 47557083136 Available_end: 6041094144 mdir exact used space: 41323991040 mdir guess used space: 41516007424 mdir num mails: 3425033 delta: 3.201314816 G delta / mail: 934 B 4) EXT4 with 1024 blocks: image file: 53687091200 1B-blocks: 50314834944 Used_begin: 38287360 Used_end: 39909360640 Available_begin: 47592193024 Available_end: 7721119744 mdir exact used space: 39683908608 mdir guess used space: 39871086592 mdir num mails: 3425033 delta: 1.561232384 G delta / mail: 455 B As you can see, the delta per mail is rather close to the statistically expected values of 2048B, 1024B and 512B. In the end I probably changed my opinion. ~7GB of wasted block space for all my mails is actually quite a lot, but in days of cheap disk space it's acceptable. And with mbox one has IMHO the major disadvantage that mailservers (including dovecot) store some meta-data _in_ it (i.e. in the mails themselves) , which I don't like a lot. I still think about reports that mbox is much faster with full text search (which sounds reasonable)... but therefore one needs probably and database backend anyway. HTH, Chris.

7 21

[Dovecot] Invalid Managesieve commands are counted twice
by Christoph Bußenius 12 Nov '12

12 Nov '12

Hi, the Managesieve server closes the connection if it receives an unknown command before authentication: "IMPLEMENTATION" "Dovecot Pigeonhole" "SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave" "NOTIFY" "mailto" "SASL" "PLAIN" "STARTTLS" "VERSION" "1.0" OK "Dovecot ready." --> BOGUS NO "Error in MANAGESIEVE command received by server." NO "Error in MANAGESIEVE command received by server." BYE "Too many invalid MANAGESIEVE commands." Connection closed by foreign host. Note that only one bogus command has been sent by the client, however the server sends two identical error messages. This seems to be a bug in Pigeonhole 0.3.3. In version 0.2.6, the connection was kept open after the error message. This is actually important to us because we use the "sieveshell" utility which is shipped with the Python "managesieve" package. The managesieve.py module always sends a BOGUS command after the TLS handshake. According to its comments, this is done to work around problems with other server implementations: # Some servers send capabilities after TLS handshake, some # do not. We send a bogus command, and expect a NO. If you # get something else instead, read the extra NO to clear # the buffer. typ, data = self._command('BOGUS') (The full source is at http://pydoc.net/managesieve/0.4.2/managesieve) As a result, sieveshell cannot be used with TLS and a current Dovecot/Pigeonhole server. Cheers, Christoph -- Christoph Bußenius Rechnerbetriebsgruppe der Fakultäten Informatik und Mathematik Technische Universität München +49 89-289-18519 <> Raum 00.05.040 <> Boltzmannstr. 3 <> Garching

2 2

[Dovecot] Help me with IMAP config
by Tibby 12 Nov '12

12 Nov '12

Hello! I have dovecot running. Imap works fine. When i connect with outlook an when i delete a message it gets crossed out but still stays in my mailbox. I want to disable this feature. I want it once its deleted then go to trash folder on the mail server and thats it. Is there an option for this? I'm running dovecot 1.2.15 Thanks!

2 1

[Dovecot] Sieve users script problem.
by Eliezer Croitoru 12 Nov '12

12 Nov '12

I am using Dovecot 2.1.9 which seems to solve older bug in sieve. Now I have another problem with users scripts. I want dovecot to run users scripts but it seems to not even see them. Dovecot runs the default sieve script from home dir but wont see the sieve scripts in the sieve subdirectory and some logs: Nov 10 18:35:54 lda(user(a)domain.local): Debug: Quota root: name=User quota backend=maildir args= Nov 10 18:35:54 lda(user(a)domain.local): Debug: Quota rule: root=User quota mailbox=* bytes=1073741824 messages=0 Nov 10 18:35:54 lda(user(a)domain.local): Debug: Quota rule: root=User quota mailbox=Trash bytes=+32212254 (3%) messages=0 Nov 10 18:35:54 lda(user(a)domain.local): Debug: Quota warning: bytes=1020054732 (95%) messages=0 reverse=no command=quota-warning 95 raw mail user Nov 10 18:35:54 lda(user(a)domain.local): Debug: Quota warning: bytes=214748364 (20%) messages=0 reverse=no command=quota-warning 20 raw mail user Nov 10 18:35:54 lda(user(a)domain.local): Debug: none: root=, index=, control=, inbox=, alt= Nov 10 18:35:54 lda(user(a)domain.local): Debug: Destination address: eliezer(a)domain.local (source: user@hostname) Nov 10 18:35:54 lda(user(a)domain.local): Debug: sieve: include: sieve_global_dir is not set; it is currently not possible to include `:global' scripts. Nov 10 18:35:54 lda(user(a)domain.local): Debug: sieve: using the following location for user's Sieve script: /home/vmail/domain.local/eliezer/home/.dovecot.sieve Nov 10 18:35:54 lda(user(a)domain.local): Debug: sieve: opening script /home/vmail/domain.local/eliezer/home/.dovecot.sieve Nov 10 18:35:54 lda(user(a)domain.local): Debug: sieve: script binary /home/vmail/domain.local/eliezer/home/.dovecot.svbin successfully loaded Nov 10 18:35:54 lda(user(a)domain.local): Debug: sieve: binary save: not saving binary /home/vmail/domain.local/eliezer/home/.dovecot.svbin, because it is already stored Nov 10 18:35:54 lda(user(a)domain.local): Debug: sieve: executing script from /home/vmail/domain.local/eliezer/home/.dovecot.svbin Nov 10 18:35:54 lda(user(a)domain.local): Info: sieve: msgid=<XXXX@XXXX>: stored mail into mailbox 'INBOX' So it recognizes the home sir but wont look at the sieve sub directory. My dovecot -n output: # 2.1.9: /etc/dovecot/dovecot.conf # OS: Linux 3.3.8-gentoo x86_64 Gentoo Base System release 2.0.3 ext3 auth_mechanisms = plain login dict { quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no first_valid_uid = 5000 last_valid_uid = 5000 log_path = /var/log/dovecot.log mail_debug = yes mail_gid = 5000 mail_location = maildir:/home/vmail/%d/%n/Maildir/ mail_plugins = " quota" mail_privileged_group = vmail mail_uid = 5000 namespace { inbox = yes list = yes location = prefix = separator = . subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = maildir:User quota quota_rule = *:storage=1G quota_rule2 = Trash:storage=+3%% quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=20%% quota-warning 20 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +include +vnd.dovecot.debug +imapflags +spamtest +spamtestplus +relational +comparator-i;ascii-numeric } postmaster_address = postmastert(a)domain.local service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service dict { unix_listener dict { group = vmail mode = 0600 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service quota-warning { executable = script /etc/dovecot/quota-warning.sh user = vmail } ssl_ca = </etc/ssl/dca.pem ssl_cert = </etc/ssl/ssl.crt ssl_key = </etc/ssl/ssl.key userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = " quota sieve" } protocol imap { mail_plugins = " quota imap_quota" } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } Thanks, Eliezer

2 2

[Dovecot] Solr 4.0 - lucene - FTS
by Charles Marcus 12 Nov '12

12 Nov '12

Hi Timo, As one who is interested in implementing FTS sometime in the future, I'm curious about what is in store as far as improvements go... Specifically, any plans for implementing immediate/automatic index updates at delivery time? The lack of automatically updated indexes is one downside for its implementation... Also, does the release of Solr 4.0 mean anything for the lucene library used by dovecot? http://www.marketwatch.com/story/lucidworks-congratulates-apache-foundation… Thanks, -- Best regards, Charles

3 6

[Dovecot] Sieve puts incoming message into inbox on any problem with submission_host
by Christian Rohmann 12 Nov '12

12 Nov '12

Hello dovecot-users, I have a question/suggestion regarding the submission_host feature of the lda (either via dovecot-lda binary or lmtp) in combination with sieve. When trying to deliver message to a mailbox and this message has a sieve redirect action applied to it, dovecot is using the configured smtp server to forward the message just fine. Unfortunately, if the server configured for submission is unavailable, returns an error or cannot be found via DNS, sieve will simply put the message into the inbox and be done with it: --- dovecot.log --- dovecot: lda(user1): Error: lmtp client: DNS lookup of idonotexist.example.com failed: Name or service not known dovecot: lda(user1): Error: sieve: msgid=unspecified: failed to redirect message to <user2> (refer to server log for more information) dovecot: lda(user1): sieve: msgid=unspecified: stored mail into mailbox 'INBOX' dovecot: lda(user1): Error: sieve: execution of script /mailboxes/user1/.dovecot.sieve failed, but implicit keep was successful (user logfile /mailboxes/user1/.dovecot.sieve.log may reveal additional details) --- /dovecot.log --- The same applies to vacation messages being sent out. Especially with an (unconditional) redirect action, users don't expect to find messages in their inbox. Also problems with the submission_host could very much be temporary and a little delay in delivering a message is better then putting it somewhere the user doesn't expect a message to be. Is there any way to change the behavior of dovecot or the sieve plugin to tempfail in case a message cannot be sent out? I know that with multiple sieve actions it gets more complicated as there could be corner cases were the first message can be sent via the submission server and another message produced by the same sieve script cannot. I'd love sieve to behave like this: a) if submission host is unreachable (hostname wrong, timeout, ...) -> tempfail b) if submission host returns 4xx error -> tempfail c) if submission host returns 5xx error -> fail(-save) and just drop the message into inbox or even have an option to reject the message completely in this case. In case of a tempfail response, the mta simply queues the message and tries again later. In case of a permanent fail the mta will create a bounce message to in form the sender. Regards and have a great weekend, Christian

2 1

Re: [Dovecot] LDA without lookup as non-root?
by E.B. 11 Nov '12

11 Nov '12

Timo, Sorry I didn't see your response until now >> 3) The interesting part -- I am invoking LDA from Maildrop. See: >> http://thread.gmane.org/gmane.mail.imap.dovecot/65473 > So >> when invoked, Maildrop has already dropped to the destination UID/GID >> and the needed paths are available in the environment. However, using >> as many permutations of calling LDA as I can think of (based on >> http://wiki2.dovecot.org/LDA ), I always get this: >> >> (command line usage error. Command output: lda: Fatal: Couldn't lookup >> our username (uid=2500) ) > > Set USER environment. Sorry, would you mind being more specific? If you see my follow-up posts on this thread, I found a source file with this error message in it (link below) and reading that code, there is no way to avoid this error for non-system users (uid's) if you don't use -d. (looking at the "destination" variable) http://hg.dovecot.org/dovecot-sieve-1.1/raw-rev/7d85833eff96

1 0

[Dovecot] doveadm quota get -A via doveadm-proxy director with LDAP
by Ramon Frontera 10 Nov '12

10 Nov '12

Hi, We are running Dovecot 2.1.10 I want configure dovecot to do execute doveadm commands on the proxy server. We have 1 proxy with director and 2 mail servers. we use LDAP when I try to do doveadm quota get -u user it works fine. The problem is when I try to do doveadm quota get -A ON PROXY I have this result: doveadm(first_user): Error: Proxy is missing destination host doveadm: Error: Failed to iterate through some users Username Quota name Type Value Limit % in 10-auth.conf I have "!include auth-ldap.conf.ext" in auth-ldap.conf.ext I hve: passdb { driver = ldap args = /etc/dovecot/dovecot-ldap.conf.ext } userdb { driver = ldap args = /etc/dovecot/dovecot-ldap.conf.ext } and In dovecot-ldap.conf.ext I have: uris = ldap://ldap:port dn = xxxxx dnpass = yyyyy auth_bind = no ldap_version = 3 base =base scope = subtree user_attrs = attributes user_filter = (mail=%u) pass_attrs = userPassword=password,uid=user=%L$,cn=proxy,=starttls=any-cert pass_filter = (mail=%u) iterate_attrs = uid=user iterate_filter = (uid=*) I don't know where is my error!!! Thanks in advance -- ------------------------------------------ Ramon Frontera Gallardo Universitat de les Illes Balears

3 2

[Dovecot] quota recalc does not work
by Adrian Stoica 09 Nov '12

09 Nov '12

Hi I upgraded dovecot from 2.0 to 2.1 , and now i face the quota recalc problem. All settings are keep in mysql Before , after a change in mailbox.quota field, i run doveadm quota recalc and all was ok , but now that command doesn't do anything. After i change a quota for a user , i have to restart dovecot to get the new quota , or do a "doveadm reload" instead of recalc. And the doveadm quota recalc -A" give me back a lot of "doveadm(username): Info: User no longer exists, skipping" Any thoughts ? # 2.1.10: /usr/dovecot21/etc/dovecot/dovecot.conf # OS: Linux 2.6.35.4 i686 auth_cache_negative_ttl = 1 secs auth_cache_size = 2 M auth_failure_delay = 4 secs auth_mechanisms = plain login digest-md5 cram-md5 auth_worker_max_count = 100 base_dir = /var/run/dovecot/ default_client_limit = 4096 default_internal_user = vmail default_login_user = nobody default_process_limit = 256 deliver_log_format = mail delivery from=%f subject=%s msgid=%m: %$ dict { acl = mysql:/usr/dovecot21/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no first_valid_uid = 1 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = * mail_location = maildir:~/Maildir mail_plugins = " quota acl trash notify mail_log" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { hidden = no list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / subscriptions = yes type = private } passdb { args = /usr/dovecot21/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_shared_dict = proxy::acl autocreate = Trash autocreate2 = Drafts autocreate3 = Sent autosubscribe = Trash autosubscribe2 = Drafts autosubscribe3 = INBOX autosubscribe4 = Sent mail_log_events = delete mailbox_delete mailbox_rename mail_log_fields = box subject from msgid size quota = maildir:User quota quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=95%% quota-warning 90 %u quota_warning3 = storage=85%% quota-warning 85 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve trash = /usr/dovecot21/etc/dovecot/dovecot-trash.conf.ext } postmaster_address = postmaster(a)dacris.net protocols = imap quota_full_tempfail = yes rejection_subject = Rejected: %s: %r service auth { unix_listener auth-client { mode = 0666 user = vmail } unix_listener auth-userdb { mode = 0666 user = vmail } } service dict { unix_listener dict { user = vmail } } service imap-login { process_min_avail = 4 } service imap-postlogin { executable = script-login /bin/imap.sh unix_listener imap-postlogin { mode = 01232 } } service imap { executable = imap imap-postlogin process_limit = 1024 vsz_limit = 1 G } service quota-warning { executable = script /bin/quota_warning.sh unix_listener quota-warning { user = vmail } user = vmail } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /usr/dovecot21/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = " quota acl trash notify mail_log sieve autocreate" } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 20 mail_plugins = " quota acl trash notify mail_log imap_quota imap_acl" } dovecot-sql.conf.ext: password_query = SELECT password FROM mailbox WHERE \ username = '%Ln' AND domain = '%Ld' AND \ active = '1' user_query = SELECT CONCAT('/srv/vmail/',mailbox.domain,'/%Ln') AS 'home' ,'98' AS 'uid', '98' AS 'gid' , \ CONCAT('*:storage=', mailbox.quota,'M') AS quota_rule ,"Trash:storage=+50M" AS quota_rule2 FROM mailbox WHERE \ mailbox.username = '%Ln' AND mailbox.domain = '%Ld' AND \ mailbox.active = '1' iterate_query = SELECT username AS user , domain FROM mailbox WHERE active = '1'

1 0

[Dovecot] Mails don't get deleted after POP3
by cullinan＠rocketmail.com 09 Nov '12

09 Nov '12

Hi, there! Well, I am new to dovecot, so please be patient with me: I have a virtual server and want to setup simple mail delivery. postfix, saslauthd and dovecot basically work fine. The only open issue is, that (I guess) dovecot doesn't remove the mail when it's retrieved via pop3 from the server. It keeps sending me the same emails again and again. (The mail client (Thunderbird) is configured to remove the messages from the server - it was working already.) I guess that dovecot cannot write to some files / has problems with write permissions. But it doesn't tell me anything... Can you tell me, what configuration might be wrong or how can I enable more debugging to see what dovecot is doing after the mails got sent out via pop3? Here is the configuration: # dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.38-8-server x86_64 Ubuntu 11.04 log_timestamp: %Y-%m-%d %H:%M:%S protocols: pop3 pop3s login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/pop3-login mail_privileged_group: mail mbox_write_locks: fcntl dotlock mail_executable: /usr/lib/dovecot/pop3 mail_plugin_dir: /usr/lib/dovecot/modules/pop3 auth default: passdb: driver: pam userdb: driver: passwd -----8<----- # dovecot -a # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.38-8-server x86_64 Ubuntu 11.04 base_dir: /var/run/dovecot log_path: info_log_path: log_timestamp: %Y-%m-%d %H:%M:%S syslog_facility: mail protocols: pop3 pop3s listen: * ssl_listen: ssl: yes ssl_ca_file: ssl_cert_file: /etc/ssl/certs/dovecot.pem ssl_key_file: /etc/ssl/private/dovecot.pem ssl_key_password: ssl_parameters_regenerate: 168 ssl_cipher_list: ssl_cert_username_field: commonName ssl_verify_client_cert: no disable_plaintext_auth: yes verbose_ssl: no shutdown_clients: yes nfs_check: yes version_ignore: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/pop3-login login_user: dovecot login_greeting: Dovecot ready. login_log_format_elements: user=<%u> method=%m rip=%r lip=%l %c login_log_format: %$: %s login_process_per_connection: yes login_chroot: yes login_trusted_networks: login_process_size: 64 login_processes_count: 3 login_max_processes_count: 128 login_max_connections: 256 valid_chroot_dirs: mail_chroot: max_mail_processes: 512 mail_max_userip_connections: 10 verbose_proctitle: no first_valid_uid: 500 last_valid_uid: 0 first_valid_gid: 1 last_valid_gid: 0 mail_access_groups: mail_privileged_group: mail mail_uid: mail_gid: mail_location: mail_cache_fields: mail_never_cache_fields: imap.envelope mail_cache_min_mail_count: 0 mailbox_idle_check_interval: 30 mail_debug: no mail_full_filesystem_access: no mail_max_keyword_length: 50 mail_save_crlf: no mmap_disable: no dotlock_use_excl: yes fsync_disable: no mail_nfs_storage: no mail_nfs_index: no mailbox_list_index_disable: yes lock_method: fcntl maildir_stat_dirs: no maildir_copy_with_hardlinks: yes maildir_copy_preserve_filename: no maildir_very_dirty_syncs: no mbox_read_locks: fcntl mbox_write_locks: fcntl dotlock mbox_lock_timeout: 300 mbox_dotlock_change_timeout: 120 mbox_min_index_size: 0 mbox_dirty_syncs: yes mbox_very_dirty_syncs: no mbox_lazy_writes: yes dbox_rotate_size: 2048 dbox_rotate_min_size: 16 dbox_rotate_days: 1 mail_drop_priv_before_exec: no mail_executable: /usr/lib/dovecot/pop3 mail_process_size: 256 mail_plugins: mail_plugin_dir: /usr/lib/dovecot/modules/pop3 mail_log_prefix: %Us(%u): mail_log_max_lines_per_sec: 10 imap_max_line_length: 65536 imap_capability: imap_client_workarounds: imap_logout_format: bytes=%i/%o imap_id_send: imap_id_log: imap_idle_notify_interval: 120 pop3_no_flag_updates: no pop3_enable_last: no pop3_reuse_xuidl: no pop3_save_uidl: no pop3_lock_session: no pop3_uidl_format: %08Xu%08Xv pop3_client_workarounds: pop3_logout_format: top=%t/%p, retr=%r/%b, del=%d/%m, size=%s dict_db_config: dict_process_count: 1 managesieve_max_line_length: 65536 managesieve_logout_format: bytes=%i/%o managesieve_implementation_string: dovecot auth default: mechanisms: plain realms: default_realm: cache_size: 0 cache_ttl: 3600 cache_negative_ttl: 3600 executable: /usr/lib/dovecot/dovecot-auth user: root chroot: username_chars: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ username_translation: username_format: master_user_separator: anonymous_username: anonymous krb5_keytab: gssapi_hostname: winbind_helper_path: /usr/bin/ntlm_auth failure_delay: 2 verbose: no debug: no debug_passwords: no ssl_require_client_cert: no ssl_username_from_cert: no use_winbind: no count: 1 worker_max_count: 30 process_size: 256 passdb: driver: pam args: deny: no pass: no master: no userdb: driver: passwd args: -----8<----- Please let me know if you need more. Thank you in advance! Regards, Rob

3 3

[Dovecot] Dovecot ok for port 110, but not for SSL (beginner asking)
by ycc_Swe 09 Nov '12

09 Nov '12

Hello, I just installed Dovecot. It works for plaintext autorization, port 110. It has connected with Telnet, Thunderbird and an on-line pop3 client. Telnet: +OK Dovecot ready. user nnnnn -ERR Unknown command. user nnnnn +OK pass xxxxxxxxxx +OK Logged in. stat +OK 1 1553 retr 1 +OK 1553 octets Return-path: <sssssss(a)hotmail.com> Envelope-to: nnnnnn(a)mydomain.com Delivery-date: Tue, 06 Nov 2012 12:02:28 +0100 Received: from bay0-xcvxcv-xvxcv.bay333.hotmail.com ([123.123.123.123]) by deb7.pc with esmtp (Exim 4.80) But when I try ssl (port 995) with an on-line pop3 client, it will not work: /var/log/mail.log Nov 7 02:46:55 deb7 dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=12.12.12.7, lip=123.123.123.123, TLS: Disconnected, session=<Iza75N3NlABBNykH> Nov 7 02:46:56 deb7 dovecot: pop3-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=12.12.12.7, lip=123.123.123.123, TLS: Disconnected, session=<nWTF5N3NlQBBNykH> root@deb7:~# doveconf -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-3-686-pae i686 disable_plaintext_auth = no mail_gid = mail mail_location = mbox:~/mail:INBOX=/var/mail/%u namespace inbox { inbox = yes location = prefix = } passdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap pop3" ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } I know very little about mail and ssl. I have assumed that ssl will be set up "automatically" when Dovecot is installed. But maybe I have missed something here. Please give me pointers. The following two files contain ssl keys: ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem I have tried changing the ssl parameter ("yes", "required") in 10-ssl.conf but with no change except that port 110 login becomes disabled. As you can see I am a beginner with Dovecot, I hope it is still OK to ask on this mailing list. Thanks. -- View this message in context: http://dovecot.2317879.n4.nabble.com/Dovecot-ok-for-port-110-but-not-for-SS… Sent from the Dovecot mailing list archive at Nabble.com.

3 5

Re: [Dovecot] cannot update mailbox - unable to lock for exclusive access
by Stan Hoeppner 08 Nov '12

08 Nov '12

Please always reply to the list, not individuals. On 11/8/2012 4:17 AM, 1st WebDesigns wrote: > On 08/11/2012 09:23, Stan Hoeppner wrote: >> On 11/8/2012 2:29 AM, 1st WebDesigns wrote: >>> Hi there, >>> >>> We're using Dovecot version 1.0.7 and Postfix, and since upgrading our >>> Linux box we're getting this in the maillog: >> >> 1.0.7 is absolutely ancient and no longer officially supported. You >> need 1.2.x minimum, 2.x.x even better. And you say you just recently >> upgraded your Linux distro? What planet do you live on son? You're a >> few light years behind current stable software. >> >>> Nov 8 07:49:11 server1 postfix/local[27901]: 04B8E7081DA: >>> to=<xyz(a)xyz.com>, orig_to=<abc(a)abc.com>, relay=local, delay=19, >>> delays=0.07/0/0/19, dsn=4.2.0, status=deferred (cannot update mailbox >>> /var/spool/mail/abc for user abc. unable to lock for exclusive access: >>> Resource temporarily unavailable) >> >> The simple permanent fix to Postfix/Dovecot mbox locking issues is >> switching from Postfix LOCAL to Dovecot LDA for mailbox delivery. 1.0.7 >> is before my time. I do not know if LDA was available then. Upgrade >> and you'll have it, and you'll also fix other problems you're not even >> aware of yet. >> >>> Postfix is currently set to: >>> mailbox_delivery_lock = fcntl, dotlock >>> >>> Dovecot has this: >>> mbox_read_locks = fcntl >>> mbox_write_locks = fcntl dotlock >> >> LDA completely eliminates lock contention. >> >> http://wiki.dovecot.org/LDA/Postfix >> http://wiki2.dovecot.org/LDA/Postfix >> > > Thanks for your reply. We have upgraded from RHEL4 to RHEL5, so 1.0.7 > is the "stable" version that they provide RHEL 5 is also ancient, released in March 2007, over 5 years ago. The current stable release is RHEL 6.3, released in June 2012. What is the valid reason preventing you from upgrading to the 6.x distribution? The packages in general in 6.x are 5 years newer than 5.x. And given the fact that RHEL runs miles behind the bleeding edge, you're way behind the curve even with a recent RHEL distribution. You can probably find a much newer version of Dovecot in an RPM somewhere, and Postfix for that matter. But it would be better for you if you simply upgraded to RHEL 6.3. -- Stan

1 0

[Dovecot] IP/SSL configuration
by James Devine 08 Nov '12

08 Nov '12

Is there a way I can have something like the following setup: 192.168.0.2 port 110/143, with no starttls/ssl 192.168.0.3 port 110,995/143,993 with starttls/ssl 192.168.0.4 port 110,995/143,993 with starttls/ssl I am looking to setup dovecot so that some IPs will run without any notion of SSL whereas other IPs will run with with ssl/starttls available, each with its own certs

1 0

[Dovecot] pop3 exim4 dovecot
by Patrick Shirkey 08 Nov '12

08 Nov '12

Hi, I have an exim4 and dovecot system. The system has multiple accounts. Exim4 is receiving emails in the /var/mail/user files and dovecot is configured to use /home/user/mail (mbox) folder. I have one account that dovecot is not processing replies/bounces/etc... The data is being written in the /var/mail/user file by exim4 but as far as dovecot is aware there is nothing in the pop3 inbox. Can anyone suggest how I can enable dovecot to know that the data is in the /var/mail/user file and deliver it to the pop3 inbox for this account? -- Patrick Shirkey Boost Hardware Ltd

4 5

Re: [Dovecot] pop3 exim4 dovecot
by Patrick Shirkey 08 Nov '12

08 Nov '12

On Fri, November 9, 2012 1:10 am, Odhiambo Washington wrote: > On Thu, Nov 8, 2012 at 5:03 PM, Patrick Shirkey > <pshirkey(a)boosthardware.com>wrote: > >> >> On Fri, November 9, 2012 12:13 am, Odhiambo Washington wrote: >> > On Thu, Nov 8, 2012 at 11:36 AM, Patrick Shirkey >> > <pshirkey(a)boosthardware.com >> >> wrote: >> > >> >> >> >> On Thu, November 8, 2012 7:21 pm, Robert Schetterer wrote: >> >> > Am 08.11.2012 08:48, schrieb Patrick Shirkey: >> >> >> Hi, >> >> >> >> >> >> I have an exim4 and dovecot system. The system has multiple >> accounts. >> >> >> Exim4 is receiving emails in the /var/mail/user files and dovecot >> is >> >> >> configured to use /home/user/mail (mbox) folder. >> >> >> >> >> >> I have one account that dovecot is not processing >> >> replies/bounces/etc... >> >> >> The data is being written in the /var/mail/user file by exim4 but >> as >> >> far >> >> >> as dovecot is aware there is nothing in the pop3 inbox. >> >> >> >> >> >> Can anyone suggest how I can enable dovecot to know that the data >> is >> >> in >> >> >> the /var/mail/user file and deliver it to the pop3 inbox for this >> >> >> account? >> >> >> >> >> >> >> >> >> >> >> >> -- >> >> >> Patrick Shirkey >> >> >> Boost Hardware Ltd >> >> >> >> >> > >> >> > show logs >> >> > and config like doveconf -n >> >> > >> >> > >> >> >> >> There is nothing in the dovecot logs afaict >> >> >> >> echo "my test" | mail -s "test message" test@xxx >> >> >> >> 2012-11-08 08:34:38 1TWNZO-0000TG-8s <= root@xxx U=root P=local S=398 >> >> 2012-11-08 08:34:38 1TWNZO-0000TG-8s => xxx <test@xxx> R=local_user >> >> T=mail_spool >> >> 2012-11-08 08:34:38 1TWNZO-0000TG-8s Completed >> >> >> >> >> >> exim -bt test@xxx >> >> R: system_aliases for xxx@localhost >> >> R: userforward for xxx@localhost >> >> R: procmail for xxx@localhost >> >> R: maildrop for xxx@localhost >> >> R: lowuid_aliases for xxx@localhost (UID 1238) >> >> R: local_user for xxx@localhost >> >> xxx@localhost >> >> <-- test@xxx >> >> router = local_user, transport = mail_spool >> >> >> >> >> >> - Here's the dovecot config: >> >> >> >> # dovecot -n >> >> # 1.2.15: /etc/dovecot/dovecot.conf >> >> # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.6 >> >> log_timestamp: %Y-%m-%d %H:%M:%S >> >> protocols: pop3 pop3s >> >> listen: 127.0.0.1 >> >> login_dir: /var/run/dovecot/login >> >> login_executable: /usr/lib/dovecot/pop3-login >> >> mail_privileged_group: mail >> >> mail_location: mbox:~/mail >> >> mail_debug: yes >> >> mbox_write_locks: fcntl dotlock >> >> mail_executable: /usr/lib/dovecot/pop3 >> >> mail_plugin_dir: /usr/lib/dovecot/modules/pop3 >> >> auth default: >> >> debug: yes >> >> passdb: >> >> driver: pam >> >> userdb: >> >> driver: passwd >> >> >> >> >> >> >> > You are telling dovecot that mails are in mbox format (why you even >> use >> > mbox instead of Maildir++ beats me, but that's not what you asked for >> help >> > with) and are stored in /home/$user/mbox so go ahead at also tell Exim >> to >> > deliver to the same location! >> > If you want Exim to deliver to /var/mail/$user then change your >> > mail_location in dovecot.conf to point to this too. >> > >> > >> >> >> Thanks for your advice. I inherited this system and it is a live B2B >> system so I am trying not to break it as well as to keep it running :-) >> >> I have seen some unusual behaviour now. >> >> 1: According to my script to process the inbox for each account the pop3 >> account was empty. The code was previously working for many months. I >> thought it might be related to the missing mail_location directive >> because >> the home/xxx/mail folder was missing for the specific account that was >> having a problem so I added it as above but it didn't appear to fix the >> problem. >> > > You DO NOT need to add it manually. All you have to do is to send a test > mail to the user and the mbox will be created with the correct > permissions. > > >> >> 2: I modified it as suggested : mail_location = INBOX=/var/mail/%u >> >> That gave me an error >> >> Nov 8 13:47:03 mail dovecot: POP3(xxx): mail_location: Ambiguous mail >> location setting, don't know what to do with it: INBOX=/var/mail/xxx >> (try >> prefixing it with mbox: or maildir:) >> Nov 8 13:47:03 mail dovecot: POP3(xxx): Fatal: Namespace initialization >> failed >> > > > You must RTFM. The examples are in conf.d/10-mail.conf and they have the > following text: > > <quote> > ## Mailbox locations and namespaces > ## > > # Location for users' mailboxes. The default is empty, which means that > Dovecot > # tries to find the mailboxes automatically. This won't work if the user > # doesn't yet have any mail, so you should explicitly tell Dovecot the > full > # location. > # > # If you're using mbox, giving a path to the INBOX file (eg. /var/mail/%u) > # isn't enough. You'll also need to tell Dovecot where the other mailboxes > are > # kept. This is called the "root mail directory", and it must be the first > # path given in the mail_location setting. > # > # There are a few special variables you can use, eg.: > # > # %u - username > # %n - user part in user@domain, same as %u if there's no domain > # %d - domain part in user@domain, empty if there's no domain > # %h - home directory > # > # See doc/wiki/Variables.txt for full list. Some examples: > # > # mail_location = maildir:~/Maildir > # mail_location = mbox:~/mail:INBOX=/var/mail/%u > # mail_location = mbox:/var/mail/%d/%1n/%n:INDEX=/var/indexes/%d/%1n/%n > # > # <doc/wiki/MailLocation.txt> > </quote> > > ... make sense? > Starting to now. My first attempt to *not* break the existing system was to try with the following: mail_location = mbox:~/mail But that didn't work so I asked here and according to your first email it seemed this config was necessary: mail_location = INBOX=/var/mail/%u But after re reading the docs it appears that *both* locations are required: mail_location = mbox:~/mail:INBOX=/var/mail/%u -- Patrick Shirkey Boost Hardware Ltd

2 1

[Dovecot] v2.2.alpha1 released
by Timo Sirainen 08 Nov '12

08 Nov '12

http://dovecot.org/releases/2.2/alpha/dovecot-2.2.alpha1.tar.gz http://dovecot.org/releases/2.2/alpha/dovecot-2.2.alpha1.tar.gz.sig I wanted to start stabilizing v2.2 release some months ago already, but I somehow got stuck adding more and more features. Now it looks like all of the necessary API changes are done, so everything I'm planning on near future can still be added to v2.2 without major changes. The redesigned dsync hasn't had much testing yet, so avoid running it with important mails. Would be nice if people started testing and reporting any bugs. I was going to create some kind of a test suite for testing all the possible syncing combinations and also doing some random stress testing, but I haven't had time for that yet. The new dsync supports doing very fast syncs by saving the resulting state and giving it as command line parameter to the next sync. So for example doveadm sync -s "" > new-state saves the state and doveadm sync -s `cat new-state` continues from the saved state. The replicator code doesn't yet support this. * When creating home directories, the permissions are copied from the parent directory if it has setgid-bit set. For full details, see http://wiki2.dovecot.org/SharedMailboxes/Permissions * "doveadm auth" command was renamed to "doveadm auth test" * IMAP: ID command now advertises server name as Dovecot by default. It was already trivial to guess this from command replies. + Implemented IMAP MOVE and BINARY extensions + Implemented IMAP CATENATE, URLAUTH and URLAUTH=BINARY extensions (by Stephan Bosch). + Implemented IMAP NOTIFY extension. Requires mailbox_list_index=yes to be enabled. + Redesigned and rewritten dsync. The new design makes the syncing faster, more reliable and more featureful. The new dsync protocol isn't backwards compatible with old dsync versions (but is designed to be forwards compatible with future versions). + All mailbox formats now support per-user message flags for shared mailboxes by using a private index. It can be enabled by adding :INDEXPVT=<path> to mail location. This should be used instead of :INDEX also for Maildir/mbox to improve performance. + Improved mailbox list indexes. They should be usable now, although still disabled by default. + Added LAYOUT=index. The mailbox directories are created using their GUIDs in the filesystem, while the actual GUID <-> name mapping exists only in the index. + LMTP proxy: Implemented XCLIENT extension for passing remote IP address through proxy.

2 4

Re: [Dovecot] Android ICS stock client and IMAP Capability issue.
by Massimiliano Cianelli 08 Nov '12

08 Nov '12

Hi, Yes w/o prefix work as expected, try to add a prefix like courier does (eg. Inbox.) It will not work as expected. Due I'm upgrading an old installed server, I've to keep everything as much transparent I can... it includes IMAP folder and subscription. Looking at that I've encountered that issue, and analyzed for fix it (thank you open source), not everyone will want to use/use k9.. but you can be 100% sure the stock client is there. Due that Google act like BlackBerry, Microsoft,etc.. (hovewer they will not fix it soon, or really respect the rfc), it's much simple add Namespace on prelogin banner then wait or have to tell someone to install another client for that mailbox. I didn't know the history, but looking at change log seems that idle as been put back to prelogin client for some kind of compatibility with their service. Anyway, the most important reason that got me to subscribe the mailing list for write those emails, is share with the community that problem and provide a solution.. for someone in the future that have the same problem and will search on internet for a solution (like I've does.. before analyze it on my own). If the workaround will be added to the wiki or will be put in the source.. the important thing is that there is a solution simple and fast (two.. the source modify, and the configuration file) and someone can find it.. (Sarcastic) And if the mayans were right we can't wait for google to fix it :p Best Regards Sent from Galaxy Nexus Robert Schetterer <rs(a)sys4.de> ha scritto: >Am 07.11.2012 08:13, schrieb Massimiliano Cianelli: >> Hello, >> >> My phone: >> Android ics 4.1.2 on galaxy nexus. >> And yes, stock mean the default client that come with the os in IMAP mode. >> >> I already know about that configuration parameter, but it will display two time namespace in postlogin capabilities, and so I like much more to adjust the source code to fix the issue. >> >> Yes there is k9 but I didn't like it too much, I prefer the stock client and is much important to keep compatibility with stock client then user-installed client. >> >> About the issue on Google code, there is thr issue on google code... but Google is a lot slow in fixing those things. >> http://code.google.com/p/android/issues/detail?id=1811 >> >> In a few hour I'll update the issue noticing where is hidden the problem. >> >> Regards >> Sent from Galaxy Nexus > >Hi , i shortly tested this with android sdk jelly bean 4.1.1 and "my >setup" dovecot 2.1.10 with included orginal android mail app in imap mode, >,leaving IMAP prefix blank, everything works as expected, no double >shown inbox, namespace problems etc >so you might have to fit your namespace setup. >Also you might follow allready given advice from here. > >Anyway , i understand you using "stock client" >but you have to understand that the producers of mail clients >optimize their stuff fitting best in their own server structure >making money with it, therefor their motivation coding better imap code >is not very high, same case is for outlook and microsoft >however, i would say, fixing bugs is on the google site here, looks like >there is patch >at >http://code.google.com/p/android/issues/detail?id=1811 >and the issue seems long known > >i dont see any hard relation to dovecot in this case >meanwhile using k9mail seems the best way to workaround >there are lots of other bugs around android versions >over the years i dont expect google to fix them > > >> >> Robert Schetterer <rs(a)sys4.de> ha scritto: >> >>> Am 06.11.2012 07:08, schrieb Ben Morrow: >>>> At 6AM +0100 on 6/11/12 you (Massimiliano Cianelli) wrote: >>>>> Hi, >>>>> >>>>> My setup: >>>>> Dovecot 2 latest, installed to replace courrier IMAP, and off course >>>>> configured with the dot separator and all folder under INBOX.*. >>>>> >>>>> The problem: >>>>> My phone was driving me mad during the test, due that it will only >>>>> recognize Inbox. >>>>> >>>>> How found the solution: >>>>> I've started sniffing IMAP traffic on my server and ended up with one >>>>> difference: >>>>> On courier it ask for namespace, on dovecot it won't. >>>>> >>>>> I gives a better look, and noticed that courier show namespace >>>>> capability on prelogin banner, adding it too solved the problem. >>>>> >>>>> Reason: >>>>> Android ICS stock client seems do not honor the capability gived after >>>>> the login. >>>> >>>> See http://wiki2.dovecot.org/Upgrading/2.0?highlight=%28capability%29 ; >>>> you need to set imap_capability and/or get your client fixed. >>>> >>>> Ben >>>> >>> >>> Hi, first ,what is the exact meaning of >>> >>> "Android ICS stock client" >>> >>> do you mean default included email client in standard android in imap >>> mode, when yes, which version of Android , i like to test my own >>> however is there changelog/code etc at google for this behave? >>> >>> conf example >>> >>> # Override the IMAP CAPABILITY response. If the value begins with '+', >>> # add the given capabilities on top of the defaults (e.g. +XFOO XBAR). >>> #imap_capability = >>> >>> setting stuff here might be complex , or lead to trouble with other >>> clients, if setting this might fix problems ,with clients it should be >>> advised in the wiki/example-conf and/or Timo >>> >>> or the other way ,for massive used clients there should be >>> a seperate workaround section in the conf >>> >>> But fixing behave clients should be prime option anyway >>> >>> Meanwhile use K9mail in Android as best free option in imap mode servers >>> >>> Best Regards >>> MfG Robert Schetterer >>> >>> -- >>> [*] sys4 AG >>> >>> http://sys4.de, +49 (89) 30 90 46 64 >>> Franziskanerstraße 15, 81669 München >>> >>> Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 >>> Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer >>> Aufsichtsratsvorsitzender: Joerg Heidrich > > > >Best Regards >MfG Robert Schetterer > >-- >[*] sys4 AG > >http://sys4.de, +49 (89) 30 90 46 64 >Franziskanerstraße 15, 81669 München > >Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 >Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer >Aufsichtsratsvorsitzender: Joerg Heidrich

4 11

[Dovecot] dovecot-lda not correct folder
by tony.blue.mailinglist＠gmx.de 07 Nov '12

07 Nov '12

Hello, i use dovecot with maildir. The maildir-folder looks like this: vmail/mail/user1/cur vmail/mail/user1/.Sent vmail/mail/user1/.optionalfolder Procmail should put some definded mails in the "optionalfolder" My uses configuration does not do this: ... DELIVERMAIL="/usr/lib/dovecot/dovecot-lda" IMAP="$DELIVERMAIL -e -d $LOGNAME -m INBOX" ZUSATZORDNER="$DELIVERMAIL -e -d $LOGNAME -m .optionalfolder" ... dovecot-lda puts the mails for the optionalfolder always in the .cur (INBOX). What´s the correct dovecot-lda parameter to put the mails in the optionalfolder? Thank you! Tony

2 2

[Dovecot] No manpage for "doveadm fts" command
by Dave Abrahams 07 Nov '12

07 Nov '12

Just wanted to make sure this issue was registered separately from the overall confusion I'm exploring in another thread, even though I mention this there too. -- Dave Abrahams BoostPro Computing Software Development Training http://www.boostpro.com Clang/LLVM/EDG Compilers C++ Boost

2 2

[Dovecot] 2.2.alpha1 (626a9df21e62): LMTP Core Dump
by Thomas Leuxner 07 Nov '12

07 Nov '12

Please find Backtrace for LMTP Core Dump below: [...] ==> /var/log/dovecot/dovecot.log <== Nov 1 11:16:14 spectre dovecot: lmtp(17245): Connect from local Nov 1 11:16:14 spectre dovecot: lmtp(17245): Fatal: master: service(lmtp): child 17245 killed with signal 11 (core dumped) ==> /var/log/mail.log <== Nov 1 11:16:14 spectre postfix/lmtp[17204]: 3Xsj4G11MrzNY: to=<tlx(a)leuxner.net>, relay=spectre.leuxner.net[private/dovecot-lmtp], delay=0.11, delays=0.06/0/0.01/0.04, dsn=4.4.2, status=deferred (lost connection with spectre.leuxner.net[private/dovecot-lmtp] while sending MAIL FROM) [...] $ gdb /usr/lib/dovecot/lmtp /tmp/core Program terminated with signal 11, Segmentation fault. #0 0x00007f6174db3d35 in mail_storage_service_lookup (ctx=0x1160640, input=0x7fff905265d0, user_r=<value optimized out>, error_r=<value optimized out>) at mail-storage-service.c:1013 1013 mail-storage-service.c: No such file or directory. in mail-storage-service.c (gdb) bt full #0 0x00007f6174db3d35 in mail_storage_service_lookup (ctx=0x1160640, input=0x7fff905265d0, user_r=<value optimized out>, error_r=<value optimized out>) at mail-storage-service.c:1013 flags = 675 user = <value optimized out> username = 0x11540b0 "tlx(a)leuxner.net" user_info = 0x1163718 user_set = <value optimized out> userdb_fields = 0x1173dd8 error = <value optimized out> reply = {uid = 0, gid = 0, home = 0x7f6175249712 "H\211\303d\213\004%\030", chroot = 0x7f6100000001 <Address 0x7f6100000001 out of bounds>, extra_fields = {arr = {buffer = 0x0, element_size = 18170192}, v = 0x0, v_modifiable = 0x0}, anonymous = 0} set_parser = 0x1167500 sets = 0x0 user_pool = 0x11705e0 temp_pool = 0x1173db0 ret = 1 #1 0x0000000000406c16 in cmd_rcpt (client=0x1161e70, args=0x116d623 "") at commands.c:545 rcpt = {address = 0x0, detail = 0x0, service_user = 0x0} input = {module = 0x40823a "lmtp", service = 0x40823a "lmtp", username = 0x11540b0 "tlx(a)leuxner.net", session_id = 0x0, local_ip = {family = 0, u = {ip6 = {__in6_u = { __u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}}, remote_ip = {family = 0, u = {ip6 = {__in6_u = { __u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}}, local_port = 0, remote_port = 0, userdb_fields = 0x0, flags_override_add = 0, flags_override_remove = 0, no_userdb_lookup = 0} address = 0x11540b0 "tlx(a)leuxner.net" username = 0x11540b0 "tlx(a)leuxner.net" detail = 0x4086a3 "" error = 0x0 ret = <value optimized out> #2 0x00000000004055fb in client_input_line (client=0x1161e70) at client.c:60 cmd = <value optimized out> args = 0x116d60f "TO:<tlx(a)leuxner.net>" #3 client_input_handle (client=0x1161e70) at client.c:113 _data_stack_cur_id = 3 output = 0x11610e8 line = <value optimized out> ret = <value optimized out> #4 0x00007f6174afd186 in io_loop_call_io (io=0x1161190) at ioloop.c:387 ioloop = 0x115c670 t_id = 2 #5 0x00007f6174afe1d7 in io_loop_handler_run (ioloop=<value optimized out>) at ioloop-epoll.c:215 ctx = 0x115f4a0 event = 0x115f510 list = 0x11611e0 io = 0x11540b0 tv = {tv_sec = 299, tv_usec = 999016} msecs = <value optimized out> ret = 1 i = 0 call = false #6 0x00007f6174afd128 in io_loop_run (ioloop=0x115c670) at ioloop.c:406 No locals. #7 0x00007f6174ae6473 in master_service_run (service=0x115c510, callback=0x1173e08) at master-service.c:546 No locals. #8 0x0000000000404a06 in main (argc=1, argv=0x115c370) at main.c:122 set_roots = {0x60a8e0, 0x408e20, 0x0} service_flags = <value optimized out> storage_service_flags = 675 c = <value optimized out> [ doveconf -n ] # 2.2.alpha1 (626a9df21e62): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.6 auth_cache_size = 16 k auth_verbose = yes mail_location = mdbox:~/mdbox mail_plugins = acl quota stats namespace { list = yes location = mdbox:/var/vmail/public prefix = Public/ separator = / subscriptions = no type = public } namespace inbox { hidden = no inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { args = username_format=%u /var/vmail/auth.d/%d/passwd driver = passwd-file } plugin { acl = vfile:/var/vmail/conf.d/%d/acls:cache_secs=300 mail_log_events = expunge mailbox_delete quota = dict:user::file:%h/mdbox/dovecot-quota quota_rule = *:storage=1GB quota_rule2 = Trash:storage=+10%% sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_dir = /var/vmail/conf.d/%d/sieve stats_refresh = 30s stats_track_cmds = yes } protocols = " imap lmtp" quota_full_tempfail = yes service auth-worker { unix_listener auth-worker { user = doveauth } user = doveauth } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = doveauth } service imap-login { inet_listener imap { address = 1.2.3.4 port = 143 } inet_listener imaps { port = 0 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service stats { fifo_listener stats-mail { mode = 0600 user = vmail } } ssl_ca = </etc/ssl/certs/SSL123_CA_Bundle.pem ssl_cert = </etc/ssl/certs/host_domain_tld.crt ssl_key = </etc/ssl/private/host_domain_tld.key syslog_facility = local1 userdb { args = username_format=%u /var/vmail/auth.d/%d/passwd driver = passwd-file } verbose_proctitle = yes protocol lmtp { mail_plugins = acl quota stats sieve } protocol imap { mail_max_userip_connections = 20 mail_plugins = acl quota stats imap_acl imap_quota mail_log notify imap_stats }

2 2

[Dovecot] acl and subfolder
by Laurent Foucher 07 Nov '12

07 Nov '12

hello, I'm using dovecot 2.0.16 and i would like to use acl for subfolder. The file dovecot-acl is well written in both folder test and the subfolder test/Test : cat /home/user2/Maildir/.test.Test/dovecot-acl user=user1 ilrws cat /home/user2/Maildir/.test/dovecot-acl user=user1 ilprws When user1 want to list, the folder test is well shown, but not the subfolder test/Test. This is the logs : Debug: acl: acl username = user1 imap(laurent.foucher): Debug: acl: owner = 0 Shuka-a dovecot: imap(user1): Debug: acl vfile: Global ACL directory: (none) Shuka-a dovecot: imap(user1): Debug: acl vfile: reading file /home/user2/Maildir/.test/dovecot-acl [....] imap(user1): Debug: acl: Mailbox not in dovecot-acl-list: Partages/user2/test/Test I don't userstand why the file dovecot-acl is not read from the subfolder, while user1 and user2 have the same gid and write access to the directories. Thanks for your answers. dovecot -n auth_cache_size = 512 M default_client_limit = 8400 disable_plaintext_auth = no mail_access_groups = dovecot mail_debug = yes mail_location = maildir:~/Maildir mail_plugins = acl mail_privileged_group = dovecot managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags notify namespace { inbox = yes location = prefix = separator = / type = private } namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = Partages/%%u/ separator = / subscriptions = no type = shared } passdb { args = cache_key=%u%s * driver = pam } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = file:/var/lib/dovecot/shared-mailboxes.db mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags } postmaster_address = postmaster(a)iut-tlse3.fr protocols = " imap sieve" service auth { client_limit = 8500 unix_listener auth-userdb { group = Personnel_IUT mode = 0666 } } service imap-login { process_limit = 4096 process_min_avail = 16 service_count = 0 vsz_limit = 256 M } service imap { process_limit = 4096 vsz_limit = 3036 M } ssl_cert = </etc/ssl/certs/cert-5383-imaps.iut-tlse3.fr.pem ssl_key = </etc/ssl/private/imaps.iut-tlse3.fr.key userdb { driver = passwd } userdb { driver = prefetch } protocol lda { info_log_path = /var/log/dovecot/dovecot-lda.log log_path = /var/log/dovecot/dovecot-lda-errors.log mail_plugins = acl sieve } protocol imap { imap_id_log = * mail_plugins = acl imap_acl listescape } -- - Laurent Foucher < I U T 'A' Paul Sabatier > laurent.foucher(a)iut-tlse3.fr Enseignant/Chargé de mission Systèmes & Réseau

2 2

[Dovecot] Auth USER lookup failed
by Angel L. Mateo 07 Nov '12

07 Nov '12

Hello, I'm running dovecot 2.1.9 and I'm trying to configure shared folders. So, as described at http://wiki2.dovecot.org/SharedMailboxes/Shared I have configured a namespace like this: namespace { type = shared separator = / prefix = shared/%%u/ location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u subscriptions = no list = yes } In one user (user1) I have configured ACLs so another one (user2) has access to a folder. Now, I want to susbscribe user2 to this folder. The problem I have is that whenever I try to list folders for this user (running thunderbird client) I get a panic and an error in the dovecot server (I have attached the complete log). The error says: Nov 6 11:58:56 myotis30 dovecot: auth: Error: userdb(user1): client doesn't have lookup permissions for this user: userdb uid (113246) doesn't match peer uid (14585) (change userdb socket permissions) Nov 6 11:58:56 myotis30 dovecot: auth: Debug: master out: FAIL#0112 Nov 6 11:58:56 myotis30 dovecot: imap(user2): Error: user user1: Auth USER lookup failed Nov 6 11:58:56 myotis30 dovecot: imap(user2): Debug: auth input: Nov 6 11:58:56 myotis30 dovecot: imap(user2): Error: Couldn't create namespace 'shared/' for user user1: userdb didn't return a home directory, but plugin setting quota used it (%h): dict:User quota::file:%h/Maildir/dovecot.quota It seems that imap process running for user2 is trying to a user lookup that fails. So I have manually tried it root@myotis30:/etc/dovecot/conf.d# sudo -u user2 doveadm user user2 userdb: user2 home : <homeDirectory> uid : 14585 gid : 404 root@myotis30:/etc/dovecot/conf.d# sudo -u user2 doveadm user user1 doveadm(user2): Error: user user1: Auth USER lookup failed doveadm(user2): Error: userdb lookup failed for user1 I have checked the socket permissions, but they are 0666 (if I'm looking the right socket): root@myotis30:/etc/dovecot/conf.d# ls -l /var/run/dovecot/auth-userdb srwxrwxrwx 1 dovecot root 0 nov 6 11:43 /var/run/dovecot/auth-userdb In fact, I have tried to put all sockets with permissions 0666 and 0777, but the error persists. Any idea? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

2 1

[Dovecot] LDAP congestion
by Bernhard Schmidt 07 Nov '12

07 Nov '12

Hello, I've been asked to have a look at a misbehaving mail server of some colleagues today where almost all logins where failing or excessively delayed, while the LDAP database itself was pretty fast. They run Dovecot 1.2.11 (yes, I know, stoneage) against an LDAP server run by a 3rd party, auth_bind=yes (required). The problem is that this third party LDAP server delays bindResponse 3 seconds when the password is wrong. A user wanted to login every 2-3 seconds this morning with the wrong password, which effectively killed the system because the LDAP connection was mostly stalled waiting for the auth timeout. >From a previous discussion with Timo I know that bindRequests cannot be parallelized in LDAP, so the problem does not come completely unexpected. Other than removing the failure delay in the LDAP server, is there anything one can do? If there is any change in newer Dovecot versions about that please tell me so I can encourage them to upgrade, but I haven't seen anything in the changelog. Any way to get several LDAP workers/connections for passdb in parallel? Thanks, Bernhard

2 1

[Dovecot] "starting" dovecot
by Dave Abrahams 07 Nov '12

07 Nov '12

My system never issues the "dovecot start" command. I do, however, run /usr/local/libexec/dovecot/imap on port 9xxx. I talk to the server through port 9xxx and through the preauth tunnel. Is this arrangement OK? Are there some things that will only work if "dovecot" is invoked? Thanks, -- Dave Abrahams BoostPro Computing Software Development Training http://www.boostpro.com Clang/LLVM/EDG Compilers C++ Boost

3 5

[Dovecot] Indexing problems
by Dave Abrahams 07 Nov '12

07 Nov '12

It looks like something is going very wrong here. Any advice? --8<---------------cut here---------------start------------->8--- $ doveadm -vvvD index '*' doveadm(dave): Debug: Loading modules from directory: /usr/local/lib/dovecot doveadm(dave): Debug: Module loaded: /usr/local/lib/dovecot/lib20_fts_plugin.so doveadm(dave): Debug: Module loaded: /usr/local/lib/dovecot/lib20_zlib_plugin.so doveadm(dave): Debug: Module loaded: /usr/local/lib/dovecot/lib21_fts_lucene_plugin.so doveadm(dave): Debug: Loading modules from directory: /usr/local/Cellar/dovecot/2.1.9/lib/dovecot/doveadm doveadm(dave): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: dlopen(/usr/local/Cellar/dovecot/2.1.9/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so, 10): Symbol not found: _acl_user_module Referenced from: /usr/local/Cellar/dovecot/2.1.9/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so Expected in: flat namespace in /usr/local/Cellar/dovecot/2.1.9/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so (this is usually intentional, so just ignore this message) doveadm(dave): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: dlopen(/usr/local/Cellar/dovecot/2.1.9/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so, 10): Symbol not found: _expire_set_deinit Referenced from: /usr/local/Cellar/dovecot/2.1.9/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so Expected in: flat namespace in /usr/local/Cellar/dovecot/2.1.9/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so (this is usually intentional, so just ignore this message) doveadm(dave): Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: dlopen(/usr/local/Cellar/dovecot/2.1.9/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so, 10): Symbol not found: _quota_user_module Referenced from: /usr/local/Cellar/dovecot/2.1.9/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so Expected in: flat namespace in /usr/local/Cellar/dovecot/2.1.9/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so (this is usually intentional, so just ignore this message) doveadm(dave): Debug: Module loaded: /usr/local/Cellar/dovecot/2.1.9/lib/dovecot/doveadm/lib10_doveadm_zlib_plugin.so doveadm(dave): Debug: Module loaded: /usr/local/Cellar/dovecot/2.1.9/lib/dovecot/doveadm/lib20_doveadm_fts_lucene_plugin.so doveadm(dave): Debug: Module loaded: /usr/local/Cellar/dovecot/2.1.9/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.so doveadm(dave): Debug: Effective uid=501, gid=20, home=/Users/dave doveadm(dave): Debug: Namespace inbox: type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=mdbox:/Users/dave/Library/Data/LocalIMAP/mdbox doveadm(dave): Debug: fs: root=/Users/dave/Library/Data/LocalIMAP/mdbox, index=, control=, inbox=, alt= doveadm(dave): Debug: Namespace : Using permissions from /Users/dave/Library/Data/LocalIMAP/mdbox: mode=0700 gid=-1 doveadm(dave): Info: [Gmail].All: Cache is already up to date doveadm(dave): Info: [Gmail].All Mail: Caching mails seq=2..231746 8000/231745Assertion failed: (numDocsInStore*8 == directory->fileLength( (docStoreSegment + "." + IndexFileNames::FIELDS_INDEX_EXTENSION).c_str() )), function closeDocStore, file /tmp/clucene-gmYE/src/core/CLucene/index/DocumentsWriter.cpp, line 210. Abort trap: 6 cone:local dave$ --8<---------------cut here---------------end--------------->8--- -- Dave Abrahams BoostPro Computing Software Development Training http://www.boostpro.com Clang/LLVM/EDG Compilers C++ Boost

2 1

[Dovecot] Modifying mailbox GUIDs?
by Faheem Patel 07 Nov '12

07 Nov '12

Greetings all, I can view a mailbox's GUID like so: doveadm mailbox status -u guid However, how may I *modify* a mailbox GUID? Can this be done using doveadm or some other tool? If not, how may I go about modifying the dovecot.mailbox.log (where I assume GUID data is stored)? My specific use case has to do with me wanting to modify an existing mailbox's GUID so that its messages are mirrored into a folder of the same name using "dsync mirror". (As we know, dsync utilizes GUIDs to determine mailbox uniqueness) Thanks! -- - Faheem

2 2

[Dovecot] Error: Internal quota calculation error
by Micah Anderson 07 Nov '12

07 Nov '12

Hello, I'm using 2.1.7 with seive and mysql quotas. We had an outage the other day where the database server where quotas are stored was not available for a short period of time. In dovecot land, the following types of errors occured in that scenario: Oct 26 22:19:01 grosbeak dovecot: lda(example(a)riseup.net): Error: Internal quota calculation error Oct 26 22:19:01 grosbeak dovecot: lda(example(a)riseup.net): Error: sieve: msgid=<20122132765181x.ABCCE457(a)example.com>: failed to store into mailbox 'Trash': Internal error occurred. Refer to server log for more information. [2012-10-26 22:19:01] Oct 26 22:19:01 grosbeak dovecot: lda(example(a)riseup.net): Error: sieve: script /maildir/e/example/.dovecot.sieve failed with unsuccessful implicit keep (user logfile /maildir/e/example/.dovecot.sieve.log may reveal additional details) I expect that there would be quota calculation errors as dovecot could not reach the database server, but what worried me was the 'failed to store into mailbox' message from sieve. The 'Trash' mailbox in this particular seive script is the correct location for the message to be filed into, but the worrisome message is the 'failed with unsuccessful implicit keep'. I looked through all the message-ids that reported this error and I found that the messages were properly delivered in the end, so this might be some issue interacting between sieve, dovecot and quota and just causing a scary message that can be ignored? thanks for any information you can provide, dovecot is great! micah --

2 1

[Dovecot] backtrace for non-existant %{ldap:attr} on login
by Steffen Kaiser 07 Nov '12

07 Nov '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I'm fetching the user and auth data from LDAP, this is the string: pass_attrs = uid=user,userPassword=password,homeDirectory=userdb_home,mailUidNumber=userdb_uid,mailGidNumber=userdb_gid,mailLocationDovecot=userdb_mail,uid=userdb_user,=userdb_quota_rule=*:bytes=%{ldap:mailQuotaBytes}, =userdb_quota_rule2=Trash:bytes=+%{ldap:mailQuotaBytesTrash} If mailQuotaBytesTrash or mailQuotaBytes is not present, the LOGIN process does not work: 1 login user pwd 1 NO [UNAVAILABLE] Temporary authentication failure. [mailsrv2:2012-10-31 08:56:51] * OK Waiting for authentication process to respond.. If I add those two attributes, the user can login successfully. dovecot-2.1.10/sbin/dovecot --version 2.1.10 (9cdeab12f3e1) The log entries: 2012-10-31 09:56:51 auth: Panic: pool_data_stack_realloc(): stack frame changed 2012-10-31 09:56:51 auth: Error: Raw backtrace: /usr/local/dovecot-2.1.10/lib/dovecot/libdovecot.so.0(+0x4857a) [0x7f2c0528c57a] -> /usr/local/dovecot-2.1.10/lib/dovecot/libdovecot.so.0(+0x485c6) [0x7f2c0528c5c6] -> /usr/local/dovecot-2.1.10/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f2c0525feaf] -> /usr/local/dovecot-2.1.10/lib/dovecot/libdovecot.so.0(+0x58f2e) [0x7f2c0529cf2e] -> /usr/local/dovecot-2.1.10/lib/dovecot/libdovecot.so.0(+0x442f5) [0x7f2c052882f5] -> /usr/local/dovecot-2.1.10/lib/dovecot/libdovecot.so.0(buffer_get_space_unsafe+0x68) [0x7f2c05288728] -> /usr/local/dovecot-2.1.10/lib/dovecot/libdovecot.so.0(str_vprintfa+0x6d) [0x7f2c052a796d] -> /usr/local/dovecot-2.1.10/lib/dovecot/libdovecot.so.0(str_printfa+0x88) [0x7f2c052a7ac8] -> dovecot2.1/auth [0 wait, 1 passdb, 0 userdb]() [0x42682e] -> /usr/local/dovecot-2.1.10/lib/dovecot/libdovecot.so.0(var_expand_with_funcs+0x6fb) [0x7f2c052ac48b] -> dovecot2.1/auth [0 wait, 1 passdb, 0 userdb](db_ldap_result_iterate_next+0x12f) [0x42734f] -> dovecot2.1/auth [0 wait, 1 passdb, 0 userdb]() [0x428974] -> dovecot2.1/auth [0 wait, 1 passdb, 0 userdb]() [0x428f5f] -> dovecot2.1/auth [0 wait, 1 passdb, 0 userdb]() [0x4282a1] -> /usr/local/dovecot-2.1.10/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f2c05298756] -> /usr/local/dovecot-2.1.10/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9f) [0x7f2c0529978f] -> /usr/local/dovecot-2.1.10/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f2c052986f8] -> /usr/local/dovecot-2.1.10/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f2c052840d3] -> dovecot2.1/auth [0 wait, 1 passdb, 0 userdb](main+0x376) [0x41bba6] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7f2c04449c8d] -> dovecot2.1/auth [0 wait, 1 passdb, 0 userdb]() [0x40cf89] 2012-10-31 09:56:51 auth: Fatal: master: service(auth): child 15865 killed with signal 6 (core dumps disabled) 2012-10-31 09:56:51 imap-login: Warning: Auth connection closed with 1 pending requests (max 0 secs, pid=15869, EOF) - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBUJDqe2oxLS8a3A9mAQI+YQf/Qd4IIeM35Hmmpl1IMcQwJFK4854G5Dku yK+GsWhE2gxI6KaLO6DSI/kpN79qhQRkHsUAHzoPiZ7kQpZprNaEP/CIPkTzw//i HyC2Odpfa8fWUOqtH5Cp6X5spF6hQa4mmQyzgXguF9bdjZkNu4vQ78wRuQGG4eHi BOkNL0b93DsN3NSIoXDpiAiJn1aleTLe7mYkfsGewjb+AN+FpR4hLbf32yRRn8J0 Fkn8agEijixGMXEBD4ZprTbX9NbUr92YPfRycMnA2A00MUUlv/iKlqXRpMLafRjL bnHL/QE80xHoKKJUR96/RjruciIolAtlyYvhTU9ibRpLYm5Hcd9bZg== =iPvg -----END PGP SIGNATURE-----

2 1

[Dovecot] copymail deleted
by Christian Rößner 07 Nov '12

07 Nov '12

Hi, I had enabled an option in dovecot. mail_attachment_dir = /var/mail/virtual/copymail/attachments After a while I checked /var/mail/virtual and did some cleanup. I did not remember that copymail was specified in dovecot and erased it. Oct 30 10:56:05 mx0 dovecot: imap(hidden): Error: file_istream.stat(/var/mail/virtual/copymail/attachments/6a/50/6a506530265ef7c9feb396410eaf6946036e9a79-b034401e794009503a0400002cb72ff6) failed: No such file or directory Oct 30 10:56:05 mx0 dovecot: imap(hidden): Error: istream-concat: Failed to get size of stream /var/mail/virtual/copymail/attachments/6a/50/6a506530265ef7c9feb396410eaf6946036e9a79-b034401e794009503a0400002cb72ff6 Oct 30 10:56:05 mx0 dovecot: imap(hidden): Error: read() failed: Invalid argument (FETCH for mailbox INBOX UID 196) Oct 30 10:56:05 mx0 dovecot: imap(hidden): Disconnected: Internal error occurred. Refer to server log for more information. [2012-10-30 10:56:05] in=150 out=950 I have Bacula and have restored most of the stuff, but obviously not all files. That is not too important. But I do not know, how to tell dovecot that it may "forget" about files that produce a "No such file or directory" error. Can I do some "rescan/rebuild" in dovecot? Kind regards -Christian Rößner -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Joerg Heidrich

2 5

[Dovecot] how to best import Evolution/Thunderbird mail into dovecot?
by Christoph Anton Mitterer 07 Nov '12

07 Nov '12

Hi. I'm migrating all my mail archive (some 60 GB) from Evolution (which is really a broken piece of software) into dovecot. Now I face the problem how to do this best... Evolution (which is still a old 2.32.x version) itself uses mbox files, in a special hierarchical structure to allow subfolders and that like. It also stores it's own status info in X-Evolution and X-Evolution-Source mail headers. Unfortunately,... much of the mail was earlier from a Thunderbird installation, which uses it's own status headers (X-Mozilla*) that were not recognised by Evolution. I have no idea which mbox subformat was always used throughout the different programs and versions... 1) Any way to check for that? To make things worse... Thunder(burden) seems to have used a modified From_ line syntax... "^From -<address> <date>$" Ideally I'd like migrate all mail into dovecot (for storage reasons again, mbox) retaining the different status flags (read, forwarded, etc.) and getting rid of the proprietary headers (of course only when they were. First thing I tried was to simply copy mail within Evolution (i.e. dragging&dropping it from the local folders to the IMAP folders from dovecot). - that preserves the status from Evolution, but doesn't restore that from Thunderbird - it clutters up the information of all From_ lines... "<address> <date>" becomes "<address of my default evolution account> <now>" - neither does it handle the special Thunderbird From_ lines - neither does it remove the Thunderbird or the X-Evolution-Source headers - if Evolution has already had corrupted index files (and this is extremely likely... as it happens even immediately during recreating all of them)... so I may loose mail So my idea was that I need a program that: - can parse all the different mbox formats (those that use the quoted ">From" style and those that use Conent-Length) - can differentiate message headers from body (so that I can drop the proprietary headers and replace them by what dovecot uses as headers) - must of course understand multiline message headers 2) Any idea for a tool like that? The meaning of the X-Evolution and X-Mozilla* headers are easy to find on the web.... so I can convert them. So I basically "just" need a tool that parses all kinds of mbox formats... allow me to drop/add headers... and spits out the rest unmodified. 3) dovecot uses some special headers like X-UID and X-IMAPD... will it create these on it's own, the first time it processes the new mbox file? I mean these headers won't be there after creation. 4) Should I drop out (during) conversion... any other mail headers.. that dovecot uses as it's own? Thanks, Chris.

6 13

Re: [Dovecot] Android ICS stock client and IMAP Capability issue.
by Massimiliano Cianelli 07 Nov '12

07 Nov '12

Hello, My phone: Android ics 4.1.2 on galaxy nexus. And yes, stock mean the default client that come with the os in IMAP mode. I already know about that configuration parameter, but it will display two time namespace in postlogin capabilities, and so I like much more to adjust the source code to fix the issue. Yes there is k9 but I didn't like it too much, I prefer the stock client and is much important to keep compatibility with stock client then user-installed client. About the issue on Google code, there is thr issue on google code... but Google is a lot slow in fixing those things. http://code.google.com/p/android/issues/detail?id=1811 In a few hour I'll update the issue noticing where is hidden the problem. Regards Sent from Galaxy Nexus Robert Schetterer <rs(a)sys4.de> ha scritto: >Am 06.11.2012 07:08, schrieb Ben Morrow: >> At 6AM +0100 on 6/11/12 you (Massimiliano Cianelli) wrote: >>> Hi, >>> >>> My setup: >>> Dovecot 2 latest, installed to replace courrier IMAP, and off course >>> configured with the dot separator and all folder under INBOX.*. >>> >>> The problem: >>> My phone was driving me mad during the test, due that it will only >>> recognize Inbox. >>> >>> How found the solution: >>> I've started sniffing IMAP traffic on my server and ended up with one >>> difference: >>> On courier it ask for namespace, on dovecot it won't. >>> >>> I gives a better look, and noticed that courier show namespace >>> capability on prelogin banner, adding it too solved the problem. >>> >>> Reason: >>> Android ICS stock client seems do not honor the capability gived after >>> the login. >> >> See http://wiki2.dovecot.org/Upgrading/2.0?highlight=%28capability%29 ; >> you need to set imap_capability and/or get your client fixed. >> >> Ben >> > >Hi, first ,what is the exact meaning of > >"Android ICS stock client" > >do you mean default included email client in standard android in imap >mode, when yes, which version of Android , i like to test my own >however is there changelog/code etc at google for this behave? > >conf example > ># Override the IMAP CAPABILITY response. If the value begins with '+', > # add the given capabilities on top of the defaults (e.g. +XFOO XBAR). > #imap_capability = > >setting stuff here might be complex , or lead to trouble with other >clients, if setting this might fix problems ,with clients it should be >advised in the wiki/example-conf and/or Timo > >or the other way ,for massive used clients there should be >a seperate workaround section in the conf > >But fixing behave clients should be prime option anyway > >Meanwhile use K9mail in Android as best free option in imap mode servers > >Best Regards >MfG Robert Schetterer > >-- >[*] sys4 AG > >http://sys4.de, +49 (89) 30 90 46 64 >Franziskanerstraße 15, 81669 München > >Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 >Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer >Aufsichtsratsvorsitzender: Joerg Heidrich

2 1

[Dovecot] LMTP benefit vs LDA
by Davide 07 Nov '12

07 Nov '12

Hi to all, my question is what is benefit implementing LMTP service replacing LDA i have dovecot 2.1.8 with vpoipmail+qmail and about 500 users now i'm using LDA and i'm interested on LMTP service. Thanks in advance -- */Davide Marchi /Teorema Ferrara Srl /(Tel: /**/+39 0532 783161)/**/ (Fax: +/**/39 0532 783368/**/)/**//**/ /**//**/Davide.Marchi(a)mail.cgilfe.it <mailto:davide.marchi@mail.cgilfe.it?subject=Info> /CONFIDENZIALITA’ *** Questo messaggio, inclusi gli eventuali allegati, è indirizzato solo ai destinatari e può contenere informazioni riservate e confidenziali. Se avete ricevuto il messaggio senza esserne un destinatario, siete pregati di non utilizzare, copiare o distribuire questo messaggio o i suoi allegati. Se avete ricevuto il messaggio per errore, siete pregati di cancellarlo dal vostro sistema, assieme a tutti gli allegati, e di informare immediatamente il mittente,sia ai sensi dell'art. 616 c.p., sia ai sensi del DL n. 196/03. *CONFIDENTIALITY*** This message and any attachments are intended only for the use of the addressee(s) and may contain information that is privileged and/or confidential. If the reader of the message is not the intended recipient(s) or an authorized representative of the intended recipient(s), please do not use, copy, distribute this email or its attachments or take action based on them. If you have received this communication in error, please notify us immediately by email and delete the message and any attachments from your system. *Teorema FerraraSrl - Via Spronello, 7 - 44121 Ferrara Italia - P. IVA 01244490387** P**S**tampa questo messaggio solo se veramente necessario, pensa alla natura! - Please consider whether it is necessary to print this e-mail*

4 4

[Dovecot] sieve
by Christian Rößner 06 Nov '12

06 Nov '12

Hi, is there a sieve option that can reject a mail directly without creating a new mail and sending that out? I know about reject "Reject message goes here"; but I am looking for a mechanism that can reject Mail. Postfix can use reject_unverified_recipient to connect to LMTP and ask if a mail would successfully be enqueued and will return the status gotten from the LMTP server if not. Chances are high that the mechanism would work, too, if Dovecot would know about the sieve rule, while getting a connection on LMTP. Does Dovecot know all rules at this point or is sieve handled after the mail has already been accepted? Kind regards -Christian Rößner -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Joerg Heidrich

8 10

[Dovecot] doveadm import doesn't work
by Andreas Thomsen 06 Nov '12

06 Nov '12

Hello, we are running dovecot 2.0.4 on openSuse 11.2. mailboxes are in mdbox-format on local filesystem. we had a powerfailure resulting in many corrupted files and i had to restore some mailboxes. as descibed in wiki, i tried : doveadm import -u <username> mdbox:/path/to/backup/<username>/mdbox INBOX all or doveadm import -u <username> mdbox:/path/to/backup/<username>/mdbox mdbox:/path/to/mailbox/<username>/mdbox all all i get is : usage: doveadm [-Dv] [-f <formatter>] <command> [<args>] altmove [-u <user>|-A] <search query> auth [-a <auth socket path>] [-x <auth info>] <user> [<password>] config [doveconf parameters] director add|flush|map|remove|status dump [-t <type>] <path> expunge [-u <user>|-A] <search query> fetch [-u <user>|-A] <fields> <search query> force-resync [-u <user>|-A] <mailbox> help <cmd> kick [-a <anvil socket path>] [-f] <user mask>[|]<ip/bits> log find|reopen|test mailbox create|delete|list|mutf7|rename|status|subscribe|unsubscribe penalty [-a <anvil socket path>] [<ip/bits>] purge [-u <user>|-A] pw [-l] [-p plaintext] [-r rounds] [-s scheme] [-u user] [-V] quota get|recalc reload search [-u <user>|-A] <search query> stop user [-a <userdb socket path>] [-x <auth info>] <user mask> [...] who [-a <anvil socket path>] [-1] [<user mask>] [<ip/bits>] any idea, whats the problem? kind regards Andreas Thomsen -- DAD Deutscher Adressdienst GmbH Alter Wall 65 20457 Hamburg Postfach 11 35 58 20435 Hamburg Deutschland Tel. 0049 (0)40 7511990 Fax 0049 (0)40 75119911 Amtsgericht Hamburg HRB 88115 Geschäftsführerin: Daniela Kunst Steuernummer 48/714/02030 Ust-IdNr. DE813739877

2 2

[Dovecot] Android ICS stock client and IMAP Capability issue.
by Massimiliano Cianelli 06 Nov '12

06 Nov '12

Hi, My setup: Dovecot 2 latest, installed to replace courrier IMAP, and off course configured with the dot separator and all folder under INBOX.*. The problem: My phone was driving me mad during the test, due that it will only recognize Inbox. How found the solution: I've started sniffing IMAP traffic on my server and ended up with one difference: On courier it ask for namespace, on dovecot it won't. I gives a better look, and noticed that courier show namespace capability on prelogin banner, adding it too solved the problem. Reason: Android ICS stock client seems do not honor the capability gived after the login. Request: Maybe is possible to put namespace capability in prelogin banner for the next version? That will solve trouble with a setup like the mine and android stock email client. Thank you, Best regards Sent from Galaxy Nexus

3 2

[Dovecot] Security precautions for remote clients
by Roman Gelfand 06 Nov '12

06 Nov '12

Where can I find something like remote client secure dovecot best practices or, perhaps, if there is not many, if you could list major configuration/setup points. Thanks in advance

2 1

[Dovecot] Quota
by Christian Rößner 05 Nov '12

05 Nov '12

Hi, is it possible to ask Dovecot for a users quota by talking to the Dovecot server over TCP? I know about doveadm quota -u <user>, but I would like to know, if I can query for that over a network connection (on the Postfix ML they suggested writing a policy service that checks quota. Postfix is not always on the same server as Dovecot is). Does the LMTP protocol give that information somehow? I am not so familiar with LMTP. Or some Unix-Socket to query that could also be configured as inet_listener? Thanks in advance -Christian Rößner -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Joerg Heidrich

3 5

[Dovecot] maildir S= and W=
by Christoph Anton Mitterer 05 Nov '12

05 Nov '12

Hi. Even new mails delivered by my MDA don't get the ,S= and ,W= fields set... (but when I "upload" a mail via IMAP to dovecot, they are set) Is there some place in dovecot where I need to enable this? Or would it be the MDA that has to calculate and set this already when placing a file in ./new? Thanks, Chris.

2 6

Re: [Dovecot] LMTP benefit vs LDA
by Joseph Tam 04 Nov '12

04 Nov '12

Daniel Parthey writes: > Davide wrote: >> my question is what is benefit implementing LMTP service replacing >> LDA i have dovecot 2.1.8 with vpoipmail+qmail and about 500 users >> now i'm using LDA and i'm interested on LMTP service. > > with LMTP... > * you dont need to care about mail filesystem permissions > * you can use dovecot lmtp proxy and/or director > * you don't need to spawn a new process for each message One of the (potential) benefit is that a LMTP, because it can handle multiple recipients, has the ability to optimize I/O (or storage?) by using hardlinking to a single copy of a message (deduping). I don't know if Dovecot takes advantage of this in any way though. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] dovecot default service
by mican zhang 03 Nov '12

03 Nov '12

i install dovecot 2 and when i try ps auxw|grep "dovecot" i just get only 5processes, root 21861 0.0 0.0 14884 980 ? Ss 16:53 0:00 /usr/local/sbin /dovecot dovecot 21862 0.0 0.0 12740 968 ? S 16:53 0:00 dovecot/anvil root 21863 0.0 0.0 12872 1088 ? S 16:53 0:00 dovecot/log root 21865 0.0 0.0 15356 1468 ? S 16:53 0:00 dovecot/config root 21945 0.0 0.0 61148 800 pts/0 S+ 17:04 0:00 grep dovecot , my os is redhat 5.4 and i just install like ./configure make &make install i don't what's wrong?i also test on centos 6.2,and result is the same does anyone has the same issue?and what should i do to fix this?

2 3

[Dovecot] sessionid in logout line
by Aleksandar Lazic 03 Nov '12

03 Nov '12

Dear listmembers. I have the following login_log_format_elements = service=%s user=<%u> session=%{session} method=%m rip=%r lip=%l mpid=%e %c %k Maybe I have overseen the config option to add the %{session} also to the logout line. Here a example from my log: ### Nov 3 00:46:43 <HOST> dovecot: imap-login: Login: service=imap, user=<USER>, session=ETV8v4vNfwB/AAAB, method=CRAM-MD5, rip=127.0.0.1, lip=127.0.0.1, mpid=14874, TLS, TLSv1.1 with cipher AES256-SHA (256/256 bits) zlib compression Nov 3 00:46:43 external dovecot: imap(USER): Disconnected: Logged out in=15649 out=80199 ### Thanks for help and answers. Best regards Aleks

2 2

Re: [Dovecot] dovecot dimensioning
by mancyborg＠gmail.com 02 Nov '12

02 Nov '12

Hi Javier, yes i see. Storage for now is just a 3tb sata2 hdd, so i guess that write performance is around 100 MB/s What do you think about that ? Thanks and regards, Mike On Thu, 1 Nov 2012 19:55:35 +0100 Javier de Miguel Rodriguez <javierdemiguel-ext(a)us.es> wrote: > > IMHO, fast storage is the main requirement for dovecot. > > > > El 01/11/2012, a las 16:20, "mancyborg(a)gmail.com" <mancyborg(a)gmail.com> escribió: > > > Hi All, first post here, nice to meet you :) > > > > I've been using dovecot + postfix + clamav + spamassassin for years but always with few users. > > > > Now i must build a server for 1500 users, > > they will use various email software (thunderbird, outlook, ..) > > the webmail (i'm not sure if squirrelmail or roundcube) > > and blackberry devices (with the BIS service). > > > > There will be around 1000 domains (virtual_domains) and postfix will read its users and domains from mysql. > > > > Let's say that they will send and receive around 5000 emails per hour (10K in total per hour). > > > > I was thinking to use karspersky server instead of clamav. > > > > I already have the hardware, it is a server with 4 physical cpu (Intel Xeon E5504 @ 2.00GHz) and 24 gb of ram, > > do you think it is enough ? > > > > > > Thanks for supporting, > > regards and have a nice day, > > Mike

3 3

[Dovecot] dovecot dimensioning
by mancyborg＠gmail.com 01 Nov '12

01 Nov '12

Hi All, first post here, nice to meet you :) I've been using dovecot + postfix + clamav + spamassassin for years but always with few users. Now i must build a server for 1500 users, they will use various email software (thunderbird, outlook, ..) the webmail (i'm not sure if squirrelmail or roundcube) and blackberry devices (with the BIS service). There will be around 1000 domains (virtual_domains) and postfix will read its users and domains from mysql. Let's say that they will send and receive around 5000 emails per hour (10K in total per hour). I was thinking to use karspersky server instead of clamav. I already have the hardware, it is a server with 4 physical cpu (Intel Xeon E5504 @ 2.00GHz) and 24 gb of ram, do you think it is enough ? Thanks for supporting, regards and have a nice day, Mike

1 0

Re: [Dovecot] Pigeonhole 3.3 broken against Dovecot 2.1.10
by Daniel L. Miller 01 Nov '12

01 Nov '12

On 31.10.2012 21:23, Daniel L. Miller wrote: > On 31.10.2012 21:16, Daniel L. Miller wrote: > >> On 31.10.2012 > > 04:26, Timo Sirainen wrote: > >>> I think this is a Dovecot bug, fixed > could also do this by adding -lssl -lcrypto manually to the > > installed > dovecot-config and > >> -left:#1010ff 2px solid; margin-left:5px; width:100%">I see > pto" already in the DOVECOT_SSL_LIBS section of > > /usr/local/lib/dovecot/dovecot-config. What should be changed? > > Ok - I > read the patch, and modified the LIBDOVECOT_STORAGE section accordingly. > Same comp> > >> Thought I'd see if I could guess the next fix - added the parms to LIBDOVECOT_LOGIN as well. Seems to have fixed it. Sorry for the multiple posts - it's been a long day. -- Daniel

1 0

Re: [Dovecot] Pigeonhole 3.3 broken against Dovecot 2.1.10
by Daniel L. Miller 01 Nov '12

01 Nov '12

On 31.10.2012 21:23, Daniel L. Miller wrote: > On 31.10.2012 21:16, Daniel L. Miller wrote: > >> On 31.10.2012 > > 04:26, Timo Sirainen wrote: > >>> I think this is a Dovecot bug, fixed > could also do this by adding -lssl -lcrypto manually to the > > installed > dovecot-config and > >> -left:#1010ff 2px solid; margin-left:5px; width:100%">I see > pto" already in the DOVECOT_SSL_LIBS section of > > /usr/local/lib/dovecot/dovecot-config. What should be changed? > > Ok - I > read the patch, and modified the LIBDOVECOT_STORAGE section accordingly. > Same comp> > >> I take that back - it's not exactly the same compile error. Now it references libdovecot-login.so for the undefined SSL references. -- Daniel

1 0

Re: [Dovecot] Pigeonhole 3.3 broken against Dovecot 2.1.10
by Daniel L. Miller 01 Nov '12

01 Nov '12

On 31.10.2012 21:16, Daniel L. Miller wrote: > On 31.10.2012 04:26, Timo Sirainen wrote: > >> I think this is a Dovecot bug, fixed > > by: http://hg.dovecot.org/dovecot-2.1/rev/7d931927e4ac [1][1] > >> You > > could also do this by adding -lssl -lcrypto manually to the installed > dovecot-config and running configure again for pigeonhole. > > I see "-lssl > -lcrypto" already in the DOVECOT_SSL_LIBS section of > /usr/local/lib/dovecot/dovecot-config. What should be changed? Ok - I read the patch, and modified the LIBDOVECOT_STORAGE section accordingly. Same compile error for Pigeonhole after performing a 'make clean' and 'configure'. -- Daniel Links: ------ [1] http://hg.dovecot.org/dovecot-2.1/rev/7d931927e4ac

1 0

[Dovecot] Pigeonhole 3.3 broken against Dovecot 2.1.10
by Daniel L. Miller 01 Nov '12

01 Nov '12

I'm compiling as I normally do. The config line for Dovecot is: configure --with-ldap --with-ssl --with-bzlib --with-zlib --with-stemmer --with-lucene --with-ldap followed by make & make install Then a 'configure' for Pigeonhole, followed by make, yields: libtool: link: gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -o .libs/sieve-dump sieve-dump.o -Wl,--export-dynamic ../../src/lib-sieve/.libs/libdovecot-sieve.so ../../src/lib-sieve-tool/.libs/libsieve-tool.a /usr/local/lib/dovecot/libdovecot-storage.so /usr/local/lib/dovecot/libdovecot-lda.so -L/usr/local/lib/dovecot /usr/local/lib/dovecot/libdovecot.so -lrt -Wl,-rpath -Wl,/usr/local/lib/dovecot libtool: link: gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -o .libs/sievec sievec.o -Wl,--export-dynamic ../../src/lib-sieve/.libs/libdovecot-sieve.so ../../src/lib-sieve-tool/.libs/libsieve-tool.a /usr/local/lib/dovecot/libdovecot-storage.so /usr/local/lib/dovecot/libdovecot-lda.so -L/usr/local/lib/dovecot /usr/local/lib/dovecot/libdovecot.so -lrt -Wl,-rpath -Wl,/usr/local/lib/dovecot /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `sk_new_null(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_get_error(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_get_peer_certificate(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_CTX_load_verify_locations(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_CTX_use_PrivateKey(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `DH_free(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_set_ex_data(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_CTX_set_tmp_rsa_callback(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_CTX_use_certificate(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_alert_desc_string_long(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_get_ex_data(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_get_ex_new_index(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_CTX_set_client_CA_list(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `X509_get_ext_d2i(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_accept(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `X509_STORE_add_cert(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSLv23_server_method(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `OBJ_txt2nid(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_write(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `sk_num(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `BIO_ctrl_get_write_guarantee(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_set_cipher_list(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `sk_push(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `ERR_get_error(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_alert_type_string_long(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_COMP_get_name(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `ENGINE_by_id(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `BIO_write(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `i2d_DHparams(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `X509_NAME_ENTRY_get_data(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_CIPHER_get_name(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_use_PrivateKey(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_set_info_callback(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `X509_get_subject_name(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `ENGINE_init(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `ERR_clear_error(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_load_error_strings(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `ENGINE_set_default_RSA(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `BIO_free(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_CIPHER_get_bits(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `X509_INFO_free(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `X509_STORE_set_flags(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_new(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `X509_NAME_dup(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `X509_NAME_get_index_by_NID(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `d2i_DHparams(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `X509_NAME_get_text_by_NID(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `OPENSSL_add_all_algorithms_noconf(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `ENGINE_set_default_DSA(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `ENGINE_cleanup(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `X509_NAME_get_entry(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `ASN1_STRING_type(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_library_init(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_get_current_cipher(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_CTX_set_cipher_list(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_connect(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `ERR_error_string_n(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `X509_STORE_CTX_get_ex_data(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_set_verify(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `BIO_new_bio_pair(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSLv23_client_method(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_use_certificate(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `ASN1_STRING_length(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_CTX_get_cert_store(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_CTX_set_tmp_dh_callback(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `ENGINE_set_default_ciphers(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `PEM_read_bio_PrivateKey(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `BIO_new_mem_buf(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_get_ex_data_X509_STORE_CTX_idx(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `sk_pop_free(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `sk_value(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `GENERAL_NAME_free(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `ERR_peek_error(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_get_version(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `RAND_bytes(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_CTX_new(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `BIO_ctrl_pending(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_set_bio(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `ASN1_STRING_data(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `ENGINE_load_builtin_engines(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `PEM_read_bio_X509(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `EVP_cleanup(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `X509_STORE_add_crl(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `BIO_read(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `ENGINE_finish(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_free(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_read(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `X509_NAME_oneline(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_CTX_free(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `ERR_free_strings(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `EVP_PKEY_free(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_get_current_compression(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `X509_verify_cert_error_string(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_CTX_ctrl(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `ERR_peek_last_error(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `RSA_generate_key(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `SSL_state_string_long(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `PEM_X509_INFO_read_bio(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `DH_generate_parameters(a)OPENSSL_1.0.0' /usr/local/lib/dovecot/libdovecot-storage.so: undefined reference to `X509_free(a)OPENSSL_1.0.0' collect2: ld returned 1 exit status make[3]: *** [sieve-dump] Error 1 make[3]: *** Waiting for unfinished jobs.... -- Daniel

3 4

[Dovecot] Out of memory/Managesieve
by Jim Knuth 31 Oct '12

31 Oct '12

Hello, I have here a problem with managesieve. With the login about webmail (roundcube) comes here in the log: --snip dovecot: managesieve-login: Fatal: pool_system_realloc(4294967296): Out of memory dovecot: managesieve-login: Fatal: master: service(managesieve-login): child 10157 returned error 83 (Out of memory (service managesieve-login { vsz_limit=1024 MB }, you may need to increase it)) --snap I've increased of 2048M and the same above. then with 4096 M happens the following --snip dovecot: managesieve-login: Panic: epoll_ctl(add, 61538840) failed: Bad file descriptor dovecot: managesieve-login: Fatal: master: service(managesieve-login): child 9777 killed with signal 6 (core dumps disabled) --snap How can one solve then this? Any ideas greatly appreciated. Thanks. -- Mit freundlichen Grüßen, with kind regards, Jim Knuth --------- Backup interessiert niemanden - Auf Restore kommt es an!

3 7

[Dovecot] IMAP proxy between Office 365 client/Sun Messaging Server
by John Dalbec 31 Oct '12

31 Oct '12

I would like to be able to migrate messages from existing end-user accounts on Sun Messaging Server to Office 365 using an administrator login and password. Unfortunately the migration tool for Office 365 doesn't support SASL AUTHENTICATE PLAIN login. The online documentation I've found suggests that I should be able to configure dovecot as an IMAP proxy and have it log in to Sun Messaging Server with AUTHENTICATE PLAIN and encode_base64("user\0admin\0adminpw") in response to a login from the Office 365 migration tool. I'd like to configure dovecot to run only the IMAP proxy if possible. I was thinking of setting all accounts to use the same (strong) password in the proxy. Would anyone be willing to share a sample configuration? Thanks, John Dalbec ellucian Luminis system administrator Youngstown State University

2 1

[Dovecot] Unable to get Managesieve working
by Cliff Dunn 31 Oct '12

31 Oct '12

I have Roundcube webmail (v. 0.8.2) running with the managesieve plugin (v. 5.1). I am able to create sieve rules without any problems in Roundcube, but incoming mail is not being processed with the rule I specify. I suspect there is something that isn't configured correctly in dovecot, but unfortunately I am unable to find a resolution online and my very limited knowledge of dovecot isn't allowing me to solve this problem on my own. I am including my dovecot config below. Please keep my knowledge level in mind when suggesting options and let me know if there is any other information I can provide to help troubleshoot the problem. Thanks for any assistance! # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.6 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps managesieve ssl_cert_file: /etc/ssl/certs/postfix.pem ssl_key_file: /etc/ssl/private/postfix.key ssl_cipher_list: ALL:!LOW:!SSLv2 login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_privileged_group: mail mail_location: maildir:~/mail:LAYOUT=fs:INBOX=~/mail/ mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve auth default: mechanisms: plain login passdb: driver: pam passdb: driver: pam userdb: driver: passwd userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix plugin: sieve: ~/.dovecot.sieve sieve_dir: ~/mail/sieve

3 5

[Dovecot] Dovecot stops to work - anvil problem
by FABIO FERRARI 31 Oct '12

31 Oct '12

Hi all, we have a problem about anvil, it seems that when we have a high load the dovecot stops to work. Sometimes it is sufficient to make a dovecot reload, but sometimes we have to restart it. These are the lines related to anvil in the dovecot.log: [root@secchia ~]# grep anvil /var/log/dovecot.log | more Oct 26 11:13:55 anvil: Error: net_accept() failed: Too many open files Oct 26 11:14:32 imap-login: Error: net_connect_unix(anvil) failed: Resource temporarily unavailable Oct 26 11:14:32 imap-login: Fatal: Couldn't connect to anvil Oct 26 11:14:33 pop3-login: Error: net_connect_unix(anvil) failed: Resource temporarily unavailable Oct 26 11:14:33 pop3-login: Fatal: Couldn't connect to anvil [...] (many lines like these) Oct 26 12:01:10 pop3-login: Fatal: Couldn't connect to anvil Oct 26 12:01:18 auth: Error: read(anvil-auth-penalty) failed: Connection reset by peer Oct 26 12:01:18 auth: Error: read(anvil-auth-penalty) failed: Connection reset by peer Oct 26 12:01:18 auth: Error: net_connect_unix(anvil-auth-penalty) failed: Connection refused Oct 26 12:01:18 auth: Error: net_connect_unix(anvil-auth-penalty) failed: Connection refused Oct 26 12:01:18 auth: Error: read(anvil-auth-penalty) failed: Connection reset by peer Oct 26 12:01:18 auth: Error: net_connect_unix(anvil-auth-penalty) failed: Connection refused And this is the output of the doveconf -n: [root@secchia ~]# doveconf -n # 2.0.1: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-308.11.1.el5 x86_64 Red Hat Enterprise Linux Server release 5.8 (Tikanga) xfs auth_cache_size = 1024 auth_cache_ttl = 21600 s auth_debug = yes auth_debug_passwords = yes auth_master_user_separator = * auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-userdb auth_verbose = yes base_dir = /var/run/dovecot/ disable_plaintext_auth = no hostname = mail.unimore.it info_log_path = /var/log/dovecot.log lda_mailbox_autocreate = yes log_path = /var/log/dovecot.log mail_debug = yes mail_location = maildir:/cl/mail/vhosts/sms.unimo.it/%Ln/Maildir mail_plugins = $mail_plugins quota mailbox_idle_check_interval = 60 s mbox_write_locks = fcntl namespace { inbox = yes location = prefix = INBOX. separator = . type = private } passdb { args = /usr/local/etc/dovecot.masterusers driver = passwd-file master = yes } passdb { args = dovecot driver = pam } plugin { quota = maildir:User quota quota_exceeded_message = Quota exceeded (mailbox is full) quota_rule = *:storage=200MB quota_rule2 = *:messages=100000 quota_rule3 = INBOX.Trash:storage=+100M quota_warning = storage=90%% quota-warning 90 %u quota_warning2 = storage=85%% quota-warning 85 %u quota_warning3 = messages=95%% quota-warning 95 %u quota_warning4 = messages=80%% quota-warning 80 %u setting_name = quota } postmaster_address = postmaster(a)unimore.it quota_full_tempfail = yes service anvil { client_limit = 199999 process_limit = 199999 } service auth { client_limit = 14500 unix_listener auth-userdb { mode = 0600 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 } process_limit = 5000 } service imap { process_limit = 5000 } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 } } service pop3 { process_limit = 1024 } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { group = vmail user = vmail } user = dovecot } ssl_ca = </etc/pki/tls/certs/ca_unimore_tcs.pem ssl_cert = </etc/pki/tls/certs/cert-852-mail.unimore.it-cluster.pem ssl_key = </etc/pki/tls/certs/mailcluster.key userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_ssl = yes protocol lda { mail_plugins = $mail_plugins quota } protocol imap { mail_plugins = $mail_plugins imap_quota } protocol pop3 { mail_plugins = $mail_plugins quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } [root@secchia ~]# And these are the limit settings in the OS: * soft nofile 131072 * hard nofile 131072 Have someone had the same problem? thanks in advance Fabio Ferrari

2 2

[Dovecot] lmtp out of memory - raw backtrace
by Daniel Parthey 31 Oct '12

31 Oct '12

Hi, Our setup: - 4 hosts with director and mailbox instance - delivery via director lmtp into mailbox lmtp - mailbox format: mdbox - storage on NFS - OS: Linux 2.6.32-44-server x86_64 Ubuntu 10.04.4 LTS - Dovecot 2.1.10 - Pigeonhole 0.3.3 We're getting strange "out of memory" lmtp errors/backtrace with dovecot 2.1.10 accompanied by high load caused caused by a lot of lmtp deliveries to one user. First action would be to increase vsz_limit to a higher value, but I just want to make sure there is no bug - before blindly increasing this limit. I think it should not crash and corrupt mdbox, even if memory limit is reached: Oct 29 20:14:56 10.129.3.249 dovecot: lmtp(26698, user1(a)example.org) Fatal: pool_system_realloc(16777216): Out of memory Oct 29 20:14:56 10.129.3.249 dovecot: lmtp(26698, user1(a)example.org) Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4271a) [0x7f6dcbae971a] -> /usr/lib/dovecot/libdovecot.so.0(+0x42766) [0x7f6dcbae 9766] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f6dcbabd158] -> /usr/lib/dovecot/libdovecot.so.0(+0x53690) [0x7f6dcbafa690] -> /usr/lib/dovecot/libdovecot.so.0(+0x3e6f5) [0x7f6dcbae56f5] -> /usr/lib/dove cot/libdovecot.so.0(buffer_write+0x7c) [0x7f6dcbae5e7c] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xa8033) [0x7f6dcbdda033] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_record_map_move_to_private+0x3 c) [0x7f6dcbdda4ec] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_sync_get_atomic_map+0x18) [0x7f6dcbde9c88] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xb7cf9) [0x7f6dcbde9cf9] -> /usr/lib/dovecot/lib dovecot-storage.so.0(mail_index_sync_record+0x7e6) [0x7f6dcbdea626] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_sync_map+0x23c) [0x7f6dcbdeae4c] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_m ap+0xa8) [0x7f6dcbddc2b8] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xb42da) [0x7f6dcbde62da] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xb458a) [0x7f6dcbde658a] -> /usr/lib/dovecot/libdovecot-storage.so.0( mail_index_sync_begin_to+0x4f) [0x7f6dcbde6ecf] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_sync_begin+0x1e) [0x7f6dcbde6f4e] -> /usr/lib/dovecot/libdovecot-storage.so.0(mdbox_map_atomic_lock+0x5e) [0x 7f6dcbd6115e] -> /usr/lib/dovecot/libdovecot-storage.so.0(mdbox_transaction_save_commit_pre+0x46) [0x7f6dcbd64fb6] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x9d4f3) [0x7f6dcbdcf4f3] -> /usr/lib/dovecot/libdov ecot-storage.so.0(mail_index_transaction_commit_full+0x9f) [0x7f6dcbddd97f] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_transaction_commit+0x8a) [0x7f6dcbdcf18a] -> /usr/lib/dovecot/modules/lib10_quota_plug in.so(+0xba7f) [0x7f6dca4eca7f] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_transaction_commit_get_changes+0x3d) [0x7f6d Oct 29 20:14:56 10.129.3.249 dovecot: lmtp(26698, user1(a)example.org) Fatal: master: service(lmtp): child 26698 returned error 83 (Out of memory (service lmtp { vsz_limit=256 MB }, you may need to increase it)) Oct 30 01:15:49 10.129.3.249 dovecot: lmtp(17927, user1(a)example.org) Error: mmap_anon(216690688) failed: Cannot allocate memory Oct 30 01:15:49 10.129.3.249 dovecot: lmtp(17927, user1(a)example.org) Error: mmap_anon(216690688) failed: Cannot allocate memory Oct 30 10:32:27 10.129.3.249 dovecot: mailbox: mail: imap(user1(a)example.org): <nURUbUPNBgAKgQPI>: Error: Corrupted dbox file /mail/dovecot/example.org/user1/mail/storage/m.3577 (around offset=1844402): EOF reading msg header (got 0/30 bytes) Oct 30 10:33:44 10.129.3.249 dovecot: mailbox: mail: imap(user1(a)example.org): <ZZ0pYkPN+wAKgQPp>: Error: /mail/dovecot/example.org/user1/mail/mailboxes/Lists/Cron/dbox-Mails/dovecot.index reset, view is now inconsistent Oct 30 10:33:44 10.129.3.249 dovecot: mailbox: mail: imap(user1(a)example.org): <CcYCYkPNkAAKgQPV>: Error: /mail/dovecot/example.org/user1/mail/mailboxes/Lists/postfix/dbox-Mails/dovecot.index reset, view is now inconsistent Oct 30 10:33:44 10.129.3.249 dovecot: mailbox: mail: imap(user1(a)example.org): <t+gLYkPNVQAKgQPV>: Error: /mail/dovecot/example.org/user1/mail/mailboxes/Lists/Dovecot/dbox-Mails/dovecot.index reset, view is now inconsistent Oct 30 10:33:46 10.129.3.249 dovecot: mailbox: mail: imap(user1(a)example.org): <YElVbUPNKwAKgQO/>: Error: /mail/dovecot/example.org/user1/mail/mailboxes/INBOX/dbox-Mails/dovecot.index reset, view is now inconsistent Oct 30 10:36:16 10.129.3.249 dovecot: lmtp(21404, user1(a)example.org) Error: Timeout (180s) while waiting for lock for transaction log file /mail/dovecot/example.org/user1/mail/storage/dovecot.map.index.log Oct 30 10:36:16 10.129.3.249 dovecot: lmtp(21405, user1(a)example.org) Error: Timeout (180s) while waiting for lock for transaction log file /mail/dovecot/example.org/user1/mail/storage/dovecot.map.index.log Oct 30 10:36:16 10.129.3.249 dovecot: lmtp(21410, user1(a)example.org) Error: Timeout (180s) while waiting for lock for transaction log file /mail/dovecot/example.org/user1/mail/storage/dovecot.map.index.log Oct 30 10:36:16 10.129.3.249 dovecot: lmtp(21419, user1(a)example.org) Error: Timeout (180s) while waiting for lock for transaction log file /mail/dovecot/example.org/user1/mail/storage/dovecot.map.index.log Oct 30 10:36:16 10.129.3.249 dovecot: lmtp(21404, user1(a)example.org) Error: 2ZCXNsuej1CcUwAAk4785w: sieve: mailbox: deliver: session=<session}> msgid=<201210300932.q9U9URHO029943(a)common.example-hosting.net> from=MAILER-DAEMON(a)common.example-hosting.net: failed to store into mailbox 'INBOX': Internal error occurred. Refer to server log for more information. [2012-10-30 10:32:59] Oct 30 10:36:16 10.129.3.249 dovecot: lmtp(21404, user1(a)example.org) Error: 2ZCXNsuej1CcUwAAk4785w: sieve: script /mail/dovecot/example.org/user1/.dovecot.sieve failed with unsuccessful implicit keep (user logfile /mail/dovecot/example.org/user1/.dovecot.sieve.log may reveal additional details) Oct 30 10:36:16 10.129.3.249 dovecot: lmtp(21405, user1(a)example.org) Error: PFBjN8uej1CdUwAAk4785w: sieve: mailbox: deliver: session=<session}> msgid=<201210300932.q9U9URHP029943(a)common.example-hosting.net> from=MAILER-DAEMON(a)common.example-hosting.net: failed to store into mailbox 'INBOX': Internal error occurred. Refer to server log for more information. [2012-10-30 10:32:59] Oct 30 10:36:16 10.129.3.249 dovecot: lmtp(21410, user1(a)example.org) Error: spYhE82ej1CiUwAAk4785w: sieve: mailbox: deliver: session=<session}> msgid=<201210300932.q9U9URHQ029943(a)common.example-hosting.net> from=MAILER-DAEMON(a)common.example-hosting.net: failed to store into mailbox 'INBOX': Internal error occurred. Refer to server log for more information. [2012-10-30 10:33:01] Oct 30 10:36:16 10.129.3.249 dovecot: lmtp(21419, user1(a)example.org) Error: sOscMs2ej1CrUwAAk4785w: sieve: mailbox: deliver: session=<session}> msgid=<201210300932.q9U9URHS029943(a)common.example-hosting.net> from=MAILER-DAEMON(a)common.example-hosting.net: failed to store into mailbox 'INBOX': Internal error occurred. Refer to server log for more information. [2012-10-30 10:33:01] Oct 30 10:36:16 10.129.3.249 dovecot: lmtp(21410, user1(a)example.org) Error: spYhE82ej1CiUwAAk4785w: sieve: script /mail/dovecot/example.org/user1/.dovecot.sieve failed with unsuccessful implicit keep (user logfile /mail/dovecot/example.org/user1/.dovecot.sieve.log may reveal additional details) Oct 30 10:36:16 10.129.3.249 dovecot: lmtp(21405, user1(a)example.org) Error: PFBjN8uej1CdUwAAk4785w: sieve: script /mail/dovecot/example.org/user1/.dovecot.sieve failed with unsuccessful implicit keep (user logfile /mail/dovecot/example.org/user1/.dovecot.sieve.log may reveal additional details) Oct 30 10:36:16 10.129.3.249 dovecot: lmtp(21419, user1(a)example.org) Error: sOscMs2ej1CrUwAAk4785w: sieve: script /mail/dovecot/example.org/user1/.dovecot.sieve failed with unsuccessful implicit keep (user logfile /mail/dovecot/example.org/user1/.dovecot.sieve.log may reveal additional details) Oct 30 10:36:46 10.129.3.249 dovecot: lmtp(21538, user1(a)example.org) Error: Timeout (180s) while waiting for lock for transaction log file /mail/dovecot/example.org/user1/mail/storage/dovecot.map.index.log Oct 30 10:36:46 10.129.3.249 dovecot: lmtp(21538, user1(a)example.org) Error: +jXqE+uej1AiVAAAk4785w: sieve: mailbox: deliver: session=<session}> msgid=<201210300933.q9U9URHi029943(a)common.example-hosting.net> from=MAILER-DAEMON(a)common.example-hosting.net: failed to store into mailbox 'INBOX': Internal error occurred. Refer to server log for more information. [2012-10-30 10:33:31] Oct 30 10:36:46 10.129.3.249 dovecot: lmtp(21538, user1(a)example.org) Error: +jXqE+uej1AiVAAAk4785w: sieve: script /mail/dovecot/example.org/user1/.dovecot.sieve failed with unsuccessful implicit keep (user logfile /mail/dovecot/example.org/user1/.dovecot.sieve.log may reveal additional details) Oct 30 10:36:46 10.129.3.249 dovecot: lmtp(21543, user1(a)example.org) Error: Timeout (180s) while waiting for lock for transaction log file /mail/dovecot/example.org/user1/mail/storage/dovecot.map.index.log Oct 30 10:36:46 10.129.3.249 dovecot: lmtp(21543, user1(a)example.org) Error: CxDMM+uej1AnVAAAk4785w: sieve: mailbox: deliver: session=<session}> msgid=<201210300933.q9U9URHl029943(a)common.example-hosting.net> from=MAILER-DAEMON(a)common.example-hosting.net: failed to store into mailbox 'INBOX': Internal error occurred. Refer to server log for more information. [2012-10-30 10:33:31] Oct 30 10:36:46 10.129.3.249 dovecot: lmtp(21543, user1(a)example.org) Error: CxDMM+uej1AnVAAAk4785w: sieve: script /mail/dovecot/example.org/user1/.dovecot.sieve failed with unsuccessful implicit keep (user logfile /mail/dovecot/example.org/user1/.dovecot.sieve.log may reveal additional details) Regards Daniel -- https://plus.google.com/103021802792276734820

2 1

[Dovecot] POP3 Proxy : user format not accepted
by Christian Gregoire 30 Oct '12

30 Oct '12

Hello, I want to use Dovecot as a POP3 proxy (http://wiki.dovecot.org/HowTo/ImapProxy) All is working fine on my sample platform, except that I have plenty (several thousands) of users that login using local_part#domain, instead of local_part@domain, which is an old setting on my POP3 server. And in that case, Dovecot returns 'Authentication failed'. Here is my proxy table : mysql> select * from tbl_proxy; +--------------------+-------------+--------------------+ | user | host | destuser | +--------------------+-------------+--------------------+ | christian(a)mydom.fr | 10.10.100.1 | christian(a)mydom.fr | | christian#mydom.fr | 10.10.100.1 | christian(a)mydom.fr | +--------------------+-------------+--------------------+ If I login on the Dovecot proxy with the '@' version, everything is fine : root : ~> telnet 10.10.100.24 110 Trying 10.10.100.24... Connected to 10.10.100.24 (10.10.100.24). Escape character is '^]'. +OK Dovecot ready. user christian(a)mydom.fr +OK pass azerty42 +OK christian#mydom.fr has 3 messages (3561 octets) And MySQL logs show the query : 121030 12:55:28 3 Query SELECT NULL AS password, host, destuser, 'Y' AS nologin, 'Y' AS nodelay, 'Y' AS proxy, 'Y' AS nopassword FROM tbl_proxy WHERE user = 'christian(a)mydom.fr' If I login on the Dovecot proxy with the '#' version, it fails : root : ~> telnet 10.10.100.24 110 Trying 10.10.100.24... Connected to 10.10.100.24 (10.10.100.24). Escape character is '^]'. +OK Dovecot ready. user christian#mydom.fr +OK pass azerty42 -ERR Authentication failed. And nothing shows up the the MySQL logs. If I login directly on the POP server with the same credentials, no problem : root : ~> telnet 10.10.100.1 110 Trying 10.10.100.1... Connected to 10.10.100.1 (10.10.100.1). Escape character is '^]'. +OK Welcome to POP3 Server V 2.06. Authenticate yourself. user christian#mydom.fr +OK Password required for christian#mydom.fr pass azerty42 +OK christian#mydom.fr has 3 messages (3561 octets) Any idea ? Is the '#' not internally supported in the user login by Dovecot ? Thanks in advance. Christian

2 2

[Dovecot] Dovecot does not update acl_shared_dict file
by Chris Smith 30 Oct '12

30 Oct '12

Hi all, Firstly, thanks for all your effort with this software. Much appreciated. I am having a slight issues trying to enable reading of other users mailboxes. The docs are a little sparse for those that aren't mailadmin heros, I wonder if anyone could please help me see where I am going wrong. I would like to allow some users to list and read the mailboxes of others. E.g: When User1 logs in, they are presented with a list of their own folders, and those of User2, User3, etc to which they have (e.g. read/list) access I followed the instructions on the wiki (for Version 1.X)- there are two concepts here: 1. Grant some [e.g. list/read] access on a mailbox folder to a particular user 2. Enable the acl_shared_dict to allow dovecot to track (and display to IMAP clients) the folders to which they have access. This will take the form of a BDB file: /var/lib/dovecot/shared-mailboxes.db This file can only be updated by using the SETACL command. *This is where I have the problem*. The SETACL command does nothing. No matter how hard I try, I cannot get dovecot to update this file. The only indication I have that the file exists and is readable by dovecot is the disappearance from the logs of the line: No acl_shared_dict setting - shared mailbox listing is disabled So I can see that dovecot knows the file is there because it does not complain any more. The file is there (because I created it myself, although it is empty: size = 0), and in a moment of weakness I made sure it could be updated (this will be changed back!): ls -l /var/lib/dovecot/shared-mailboxes.db -rwxrwxrwx 1 dovecot dovecot 0 2012-10-30 12:27 /var/lib/dovecot/shared-mailboxes.db But if I try to update the ACL, absolutely nothing happens: [ > command ] [ < reply ] > telnet localhost 143 < * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS AUTH=CRAM-MD5] Email server > a login [User2] [pass] < a OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH ACL RIGHTS=texk] Logged in > a SETACL Inbox [User 1] rl < a OK Setacl complete. At this time, in the dovecot log (with debug enabled): 2012-10-30 13:55:24 IMAP([User2]): Info: Namespace : Using permissions from /home/mailboxes/[domain]/[User1]: mode=0770 gid=-1 2012-10-30 13:55:24 IMAP([User2]): Info: acl vfile: reading file /home/mailboxes/[domain]/[User1]/dovecot-acl 2012-10-30 13:55:24 IMAP([User2]): Info: acl vfile: reading file /home/mailboxes/[domain]/[USer1]/dovecot-acl Can anyone please help me track down what I'm doing wrong here?! It's driving me mad! Thanks for your time if you've read this far!! As requested: dovecot --version 1.2.9 base_dir: /var/run/dovecot/ log_path: /var/log/dovecot info_log_path: /var/log/dovecot.info log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps imap listen: 127.0.0.1:143 ssl_listen: 37.235.54.98 ssl_cert_file: /etc/ssl/dovecot.crt ssl_key_file: /etc/ssl/private/dovecot.key login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login login_greeting: Email server valid_chroot_dirs: /var/spool/vmail mail_location: maildir:/home/mailboxes/%d/%n mail_debug: yes mbox_write_locks: fcntl dotlock mail_plugins: acl imap_acl lda: postmaster_address: [ valid@ddress ] auth default: mechanisms: plain cram-md5 verbose: yes passdb: driver: passwd-file args: /etc/dovecot/passwd userdb: driver: passwd-file args: /etc/dovecot/users socket: type: listen client: path: /var/spool/postfix/private/auth-client mode: 432 user: postfix group: postfix master: path: /var/spool/postfix/private/auth-master mode: 384 user: postfix group: postfix plugin: acl: vfile acl_shared_dict: file:/var/lib/dovecot/shared-mailboxes.db acl: vfile:/etc/dovecot/acls

1 0

[Dovecot] Problem about SSL for Dovecot.
by sheng-wei.lim 30 Oct '12

30 Oct '12

Hi All, With the below setting (cropped), the ssl certificate(signed by godaddy) don’t seems to work. It will still ask me if I want to accept this certificate. I have use the same certificate for apache host and postfix it works without any prompt. dovecot version : 2.0.19 # OS: Linux 3.2.0-32-generic-pae i686 Ubuntu 12.04.1 LTS Dovecot config: ssl = required ssl_cert = </aaa/4/merged5.crt ssl_key = </certs/proximityjobs.key userdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } verbose_ssl = yes protocol lda { auth_socket_path = /var/run/dovecot/auth-master lda_mailbox_autocreate = yes log_path = /var/log/sieve.log mail_plugins = quota sieve autocreate acl postmaster_address = root } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_plugins = quota imap_quota autocreate acl imap_acl } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } Best Regards, Sheng Wei

1 0

[Dovecot] Save/restore IMAP session state
by Timo Sirainen 30 Oct '12

30 Oct '12

Some future Dovecot version will have "imap-idle" processes where IDLEing IMAP connections get moved, so the system wouldn't waste so much memory for all the IDLEing imap processes. A week ago I thought I'd see how easy it would be to implement this. I got a basic proof of concept working as a "X-STATE" command. Save the state: a x-state * STATE AQDLW45QdwAAAAMAAABuAQAAAAAAAFAcffYAPHnpFctbjlDbYQAAcEmzCwAA a OK State exported. Restore the state: b x-state AQDLW45QdwAAAAMAAABuAQAAAAAAAFAcffYAPHnpFctbjlDbYQAAcEmzCwAA b OK State imported. This could also be used to implement quick session state restoring for webmails (as suggested by Michael Slusarz). For getting the imap-idle process there would have to be code that: * triggers the session saving when process is IDLEing * figures out what filesystem paths the imap-idle should be looking at (i.e. paths to selected mailbox's dovecot.index.log file and maybe for e.g. maildir new/) * send the session state string, paths and imap connection fd to imap-idle process via UNIX socket * implement the actual imap-idle process * implement a way for imap-idle process to send back the state and connection fd to restore the imap process The patch is ugly and still missing many things. Anyway I thought I'd include it here just in case someone was really eager to continue implementing it. :) I'm not sure when I'll have time for it. A full patch would probably have to have some session_save()/session_restore() functions in lib-storage API. But a quick and dirty way is possible to implement for v2.1 as well, as long as some IMAP extensions aren't used (most importantly rfc5267).

2 2

Re: [Dovecot] Changing password for users
by Joseph Tam 30 Oct '12

30 Oct '12

Ben Morrow wrote: >> Maybe replace "/usr/bin/passwd" with htpasswd? > > Try pam_pwdfile with poppwd or some other poppassd that supports PAM. That's it! I was trying to remember the name of this PAM module. >>> and is there another way other than poppassd? >> >> Write your own PHP script -- it couldn't be more than a few dozen lines >> of code for a working skeleton. Or Google "php change password htpasswd". > > It's not as simple as you seem to think. Quite apart from getting the > password-changing itself right (have you considered what happens when > two users change their passwords at the same time? when Dovecot tries to > read the password file at the same time as you are changing it? when the > system crashes when you are halfway through rewriting the password > file?), you really shouldn't be running PHP as a user with write access > to a password file (even a virtual password file) in any case. I did consider it, and you're right, it is tricky to get it absolutely right. If robusteness and security was of utmost importance, I would abandon PHP too. I was scaling the solution to the OP's technical ability and apparent size of their operation -- if poppwd passes muster, this wouldn't be too far off. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] does dovecot interpret any mail headers specially with maildir?
by Christoph Anton Mitterer 30 Oct '12

30 Oct '12

Hi. For mbox, http://wiki2.dovecot.org/MailboxFormat/mbox#Dovecot.27s_Metadata lists a numer of mail headers: - X-IMAPbase - X-IMAP - X-UID - Status - X-Status - X-Keywords - Content-Length that are treated specially by dovecot. It also suggests, that these should be stripped by the LDA (I guess in order that someone sending you such mail cannot set the status or keywords, or even "attack you" by setting a bogus Content-Length). I wondered, when using maildir, are there any headers that dovecote would treat specially, too? And which I therefore should strip? Thanks, Chris.

2 9

[Dovecot] Problems with Virtual and mail-search.c
by Levent Dane 29 Oct '12

29 Oct '12

First, I don't know why but dovecot gots this error. Oct 15 13:24:02 widder dovecot: imap(limon): Panic: file mail-search.c: line 90 (mail_search_args_init_sub): assertion failed: (arg->value.keywords == NULL) Then, when I tried to run SELECT "INBOX/Code" (UNSEEN) virtual plugin got a segfault. Oct 15 13:24:03 widder kernel: imap[22749]: segfault at 2c ip b757f8ec sp bfa3a160 error 4 in lib20_virtual_plugin.so[b7579000+d000][b74b0000+d000] I'm running gentoo with kernel 2.6.32.12. My dovecot version is 2.1.10. I applied http://hg.dovecot.org/dovecot-2.1/raw-diff/0306792cc843/src/lib-storage/mai… But still, i'm getting this problem. Thanks, Levent Dane

2 6

[Dovecot] No failover from director to backend?
by Patrick Westenberg 29 Oct '12

29 Oct '12

Hi everyone, short version: Is there no built in failover mechanism for the director service to handle a backend failure? Long version: I have a frontend server running the director service and two backends. Due to maintenance I had to shut down one of the backends which caused connection errors for the users being directed to this backend. I was very surprised as I expected the director to redirect these users to the remaining backend. Am I wrong or is the director not working as expected? Regards Patrick # 2.1.6: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.5 auth_mechanisms = plain login director_mail_servers = 172.17.1.1 172.17.1.2 director_servers = 172.17.1.3 172.17.1.4 lmtp_proxy = yes log_path = /var/log/dovecot.log managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { user = dovecot } } service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { address = 172.17.1.3 port = 9090 } unix_listener director-userdb { mode = 0600 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director } service lmtp { inet_listener lmtp { address = 172.17.1.3 port = 24 } } service managesieve-login { executable = managesieve-login director inet_listener sieve { port = 4190 } } service pop3-login { executable = pop3-login director } ssl_cert = </etc/ssl/certs/imap.xx.crt ssl_key = </etc/ssl/private/imap.xx.key protocol !smtp { passdb { args = proxy=y nopassword=y starttls=any-cert driver = static } } protocol smtp { passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } } protocol lmtp { auth_socket_path = director-userdb }

4 5

[Dovecot] INBOX permissios woes
by Josep L. Guallar-Esteve 29 Oct '12

29 Oct '12

Hello, I have a dovecot system that uses winbind authentication against Active Directory. I set it up by following the directions in the wiki. That works great. When a new user receives an email, the inbox is created with permissions 600 (rw- --- --) and ownership user:mail , even though I did chmod 02770 /var/spool/mail. And then, when dovecot tries to access the inbox, it throws the error: Oct 29 13:47:59 imap-login: Info: Login: user=<user1>, method=PLAIN, rip=10.0.0.6, lip=10.0.0.26, mpid=29047, secured Oct 29 13:47:59 imap(user1): Error: stat(/var/mail/user1) failed: Permission denied Oct 29 13:47:59 imap(user1): Error: stat(/var/mail/user1) failed: Permission denied Accessing users' Sent, Trash, creating new folders.... all that works fine. I've been looking at the documentation, reading the wiki, searching on google, asking on IRC. If you have any hint or documentation that I've must have overlooked, please let me know. Here's my dovecot information: [josep@testmail ]$ dovecot --version 2.0.9 [josep@testmail ]$ dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.11.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) auth_mechanisms = plain ntlm login auth_use_winbind = yes auth_username_format = %Lu base_dir = /var/run/dovecot/ debug_log_path = /var/log/dovecot-debug.log listen = * log_path = /var/log/dovecot.log mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_privileged_group = mail mbox_write_locks = fcntl passdb { driver = pam } protocols = imap service auth { unix_listener auth-userdb { mode = 0600 } } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = uid=503 gid=503 home=/home/vmail/%u driver = static } userdb { driver = passwd } [josep@testmail ]$ Thank you in advance, Josep This transmission is intended for the use of the entity or individual to which or whom it is addressed. The transmission or any documents accompanying the transmission may contain confidential information. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or action taken in reliance on the contents of the transmission or the documents is strictly prohibited. If you have received this confidential transmission in error, please destroy it and any accompanying documents and notify the sender immediately. Thank you.

1 0

[Dovecot] [dovecot} Invalid mailbox name.
by Alexander Weber 29 Oct '12

29 Oct '12

Hi, I've got some trouble here.. i created some sieve rules, but the debug log says that there is a invalid mailbox name error: msgid=<*>: failed to store into mailbox '/home/shared/.automail.Bugtracker/': Invalid mailbox name. ~/.dovecot.sieve if address :is "to" "mantis-admin@<*>" { fileinto "/home/shared/.automail.Bugtracker/"; } here's my doveconf -n output # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-32-generic x86_64 Ubuntu 12.04.1 LTS base_dir = /var/run/dovecot/ disable_plaintext_auth = no hostname = * mail_debug = yes mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { list = yes location = maildir:/home/shared:CONTROL=~/.Maildir/control/Shared:INDEX=~/.Maildir/index/Shared prefix = shared/ separator = / subscriptions = yes type = public } namespace { inbox = yes location = prefix = separator = / type = private } passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve zlib_save = gz zlib_save_level = 6 } postmaster_address = postmaster@* protocols = imap sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imaps { port = 993 ssl = yes } } ssl_ca = </etc/ssl/* ssl_cert = </etc/ssl/* ssl_cipher_list = HIGH:MEDIUM:+TLSv1:!SSLv2:+SSLv3 ssl_key = </etc/ssl/* userdb { driver = passwd } userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } protocol imaps { imap_client_workarounds = delay-newmail mail_max_userip_connections = 10 } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } protocol imap { mail_plugins = " zlib, acl, imap_zlib" } any idea? Mit freundlichen Gruessen / best regards papaya Software GmbH i.A. Alexander Weber -- papaya Software GmbH | Im MediaPark 5 | 50670 Koeln | Germany Tel./Ph.: +49-221-5743-8070 | Fax: +49-221-5743-8099 mailto:weber@papaya-cms.com | http://www.papaya-cms.com/ -- Geschaeftsfuehrer: Andreas Jacobi, André Schnitzler, Daniel Schäfer Sitz& Registergericht: Koeln | HRB 60030 | USt.-Id.-Nr.: DE 255642963 --

2 4

[Dovecot] Overlapping userdb/passdbs
by James Devine 29 Oct '12

29 Oct '12

I have an ldap server for which each entry includes the email address and the username portion of the email address for authentication. Authentication works by username if the username is unique among all the entries. I need to now add some users which must authenticate even if the username is not unique. I figured one way to do this would be to add a second user/pass db which puts further restrictions on the ldap query to make it unique for those users. This doesn't seem to work however as if the user is found in the first ldap query but the password does not match it does not try the second. I would use the password as part of the query but this setup requires me to allow the client to hash the password. Is there a way to do this? Or maybe I am approaching the problem wrong.

2 1

[Dovecot] dovecot lda - Permission denied
by tony.blue.mailinglist＠gmx.de 29 Oct '12

29 Oct '12

Hallo, please excuse my bad english. But I am not a native speaker. I changed my cyrus to dovecot (alltogehter: fetchmail - procmail - exim4 - dovecot). But I get (I think from /usr/lib/dovecot/deliver) the following error-message in my syslog: ... Oct 25 23:37:13 gustav dovecot: lda: Error: userdb lookup: connect(/var/run/dovecot/auth-userdb) failed: Permission denied (euid=501(andy) egid=100(users) missing +w perm: /var/run/dovecot/auth-userdb, dir owned by 0:0 mode=0755) ... Oct 25 23:37:14 gustav dovecot: lda: Error: userdb lookup: connect(/var/run/dovecot/auth-userdb) failed: Permission denied (euid=500(tony) egid=100(users) missing +w perm: /var/run/dovecot/auth-userdb, dir owned by 0:0 mode=0755) ... Dovecot is installed as !include auth-passwdfile.conf.ext. For all users there is a entry in der /etc/dovecot/users. Usaly the user rights are set to 600. I tryed 755, but I get the same errormessage. ... service auth { unix_listener auth-userdb { mode = 0755 user = mailstore group = mailstore } ... If I try "ls /var/run/dovecot/auth-userdb -la" - i get: srwxr-xr-x 1 mailstore mailstore 0 Okt 25 23:36 /var/run/dovecot/auth-userdb How can I solve this problem? Tony

2 1

[Dovecot] Can Dovecot authenticate against an external email server?
by Marc Perkel 29 Oct '12

29 Oct '12

Just wondering if anyone has done this. I have a spam filtering service where I am now storing spam for users I filter for. It's a filter and forward service so I don't control the recipient's email server. What I would like to do somehow is have the user enter their email address and password and then look up their POP/IMAP server from a database and try to authenticate from it. If sucessful then the user will be able to access their stored spam using Dovecot and Squirrelmail. Any suggestions? Thanks in advance

2 1

[Dovecot] Dovecot sends BYE while fetching X-GM-MSGID
by Loshkovskyi Andrii 29 Oct '12

29 Oct '12

Hello everyone, While using the following set of commands, I am having the error as below: FETCH 7 (X-GM-MSGID) A15 FETCH 7 (X-GM-MSGID) A15 BAD Error in IMAP command FETCH: Unknown parameter X-GM-MSGID Can I somehow disable such errors so that Dovecot won't send BYE on X-GM-MSGID but just proceed with following emails? -- My configuration is below: [root@server ~]# cat /etc/issue CentOS release 6.3 (Final) [root@server ~]# dovecot --version 2.0.9 [root@server ~]# dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-220.17.1.el6.centos.plus.i686 i686 CentOS release 6.3 (Final) ext4 auth_debug = yes auth_mechanisms = plain login cram-md5 auth_verbose = yes default_client_limit = 10000 default_process_limit = 300 disable_plaintext_auth = no listen = * mail_location = maildir:/var/spool/mail/%d/%n/Maildir mbox_write_locks = fcntl passdb { args = scheme=SSHA512 username_format=%u /etc/dovecot/users driver = passwd-file } service imap-login { service_count = 0 vsz_limit = 128 M } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } Thank you for any help.

2 1

[Dovecot] Auth caching and password changes
by Angel L. Mateo 29 Oct '12

29 Oct '12

Hello, In my system I have configured auth caching. The problem I have is that whenever a user changes his password, he/she can't login to dovecot after a while and the scenarios described at http://wiki2.dovecot.org/Authentication/Caching are not applied. I have tried also with "doveadm auth cache flush <login>", but it didn't work. He also could to login again if he waits for a time or if I run "doveadm auth cache flush" in the server, flushing all auth information from cache. I have attached the log I had when I changed my password (and suffered the problem). I have attached my doveconf -n too. -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

2 2

[Dovecot] trash plugin not doing it's job
by Jan-Frode Myklebust 29 Oct '12

29 Oct '12

I enabled the trash plugin yesterday, adding "trash" to mail_plugins, and configuring the plugin setting "trash = /etc/dovecot/dovecot-trash.conf.ext". But I still see users with lots of files in INBOX.Trash getting bounced because of quota exceeded: postfix/lmtp[26273]:: C89F490061: to=<XXXXXXXXXXXXX(a)example.no>, relay=loadbalancers.example.net[192.168.42.15]:24, delay=1.2, delays=0.61/0.02/0/0.54, dsn=5.2.2, status=bounced (host loadbalancers.example.net[192.168.42.15] said: 552 5.2.2 <XXXXXXXXXXXXd(a)example.no> Quota exceeded (mailbox for user is full) (in reply to end of DATA command)) dovecot:: lmtp(19730, XXXXXXX(a)example.no) Error: BErxFCyrf1ASTQAAWNPRnw: sieve: msgid=<e33d481dc9d9442fa79f55e45a516c82@BizWizard>: failed to store into mailbox 'INBOX': Quota exceeded (mailbox for user is full) $ sudo doveadm quota get -u XXXXXXXX(a)example.no Quota name Type Value Limit % UserQuota STORAGE 1048559 1048576 99 UserQuota MESSAGE 4487 - 0 Postfix if delivering via LMTP trough dovecot director. Anybody see anything obvious in my config: ------------------------------------------------------------ # 2.0.14: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.26.1.el5 x86_64 Red Hat Enterprise Linux Server release 5.5 (Tikanga) auth_cache_size = 100 M auth_verbose = yes auth_verbose_passwords = sha1 disable_plaintext_auth = no login_trusted_networks = 192.168.0.0/16 109.247.114.192/27 mail_gid = 3000 mail_home = /srv/mailstore/%256LRHu/%Ld/%Ln mail_location = maildir:~/:INDEX=/indexes/%1u/%1.1u/%u mail_max_userip_connections = 20 c = quota zlib trash mail_uid = 3000 maildir_stat_dirs = yes maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mmap_disable = yes namespace { inbox = yes location = prefix = INBOX. separator = . type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { quota = dict:UserQuota::file:%h/dovecot-quota sieve = /sieve/%1Lu/%1.1Lu/%Lu/.dovecot.sieve sieve_before = /etc/dovecot/sieve/dovecot.sieve sieve_dir = /sieve/%1Lu/%1.1Lu/%Lu sieve_max_script_size = 1M trash = /etc/dovecot/dovecot-trash.conf.ext zlib_save = gz zlib_save_level = 6 } postmaster_address = postmaster(a)example.net protocols = imap pop3 lmtp sieve service auth-worker { user = $default_internal_user } service auth { client_limit = 4521 unix_listener auth-userdb { group = mode = 0600 user = atmail } } service imap-login { inet_listener imap { address = * port = 143 } process_min_avail = 4 service_count = 0 vsz_limit = 1 G } service imap-postlogin { executable = script-login /usr/local/sbin/imap-postlogin.sh } service imap { executable = imap imap-postlogin process_limit = 2048 } service lmtp { client_limit = 1 inet_listener lmtp { address = * port = 24 } process_limit = 25 process_min_avail = 10 } service managesieve-login { inet_listener sieve { address = * port = 4190 } service_count = 1 } service pop3-login { inet_listener pop3 { address = * port = 110 } process_min_avail = 4 service_count = 0 vsz_limit = 1 G } service pop3-postlogin { executable = script-login /usr/local/sbin/pop3-postlogin.sh } service pop3 { executable = pop3 pop3-postlogin process_limit = 2048 } ssl = no userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = quota zlib trash sieve } protocol imap { imap_client_workarounds = delay-newmail mail_plugins = quota zlib trash imap_quota } protocol pop3 { mail_plugins = quota zlib trash pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = UID%u-%v } protocol sieve { managesieve_logout_format = bytes=%i/%o } ------------------------------------------------------------ and my trash config: $ cat /etc/dovecot/dovecot-trash.conf.ext # Spam mailbox is emptied before Trash 1 INBOX.Spam # Trash mailbox is emptied before Sent 2 INBOX.Trash Global sieve script: $ cat /etc/dovecot/sieve/dovecot.sieve require ["comparator-i;ascii-numeric","relational","fileinto","mailbox"]; if allof ( not header :matches "x-spam-score" "-*", header :value "ge" :comparator "i;ascii-numeric" "x-spam-score" "10" ) { discard; stop; } elsif allof ( not header :matches "x-spam-score" "-*", header :value "ge" :comparator "i;ascii-numeric" "x-spam-score" "6" ) { fileinto :create "INBOX.Spam"; } -jf

3 3

[Dovecot] Configuring Dovecot & Snarf plugin for the first time
by Jeffrey Ross 29 Oct '12

29 Oct '12

I've been using uw-imap for some time on my linux system and have been running into issues with it so I've decided to move to Dovecote, so far it seems to have solved the issues I've been having however I need/want to move the incoming emails out of /var/spool/mail/{user} in the same (or similar fashion) that uw-imap did, and I found the snarf plugin. However whenever I enable the snarf plugin using the example on the wiki page my email is not loaded and when I remove my configuration for snarf my email re-appears. Based upon what I can tell the snarf plugin is either not loading (but I see it listed in the logs) or simply not working (which is probably because its not configured properly). The system is Fedora 16 (x86_64), the MTA is Exim, and Dovecot is 2.0.21 (version supplied with Fedora). I know I'm making a newbie mistake. Any guidance would be appreciated. Thanks, Jeff dovecot -n provides the following: [root@xyzzy conf.d]# more /tmp/dovecot.changes # 2.0.21: /etc/dovecot/dovecot.conf # OS: Linux 3.4.11-1.fc16.x86_64 x86_64 Fedora release 16 (Verne) mail_debug = yes mail_location = mbox:~/mail:INBOX=~/mbox mail_plugins = " zlib" mbox_write_locks = fcntl namespace default { inbox = yes location = prefix = separator = / } namespace snarf { hidden = yes list = no location = mbox:/run/dovecot/empty:INBOX=/var/spool/mail/%u prefix = /snarf separator = / } passdb { driver = pam } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename snarf = = /snarf/INBOX } service imap-login { inet_listener imap { address = localhost } } service pop3-login { inet_listener pop3 { address = localhost } } ssl_cert = </etc/pki/tls/certs/XYZZY.pem ssl_key = </etc/pki/tls/certs/XYZZY.pem userdb { driver = passwd } protocol imap { mail_plugins = " zlib imap_zlib snarf" } and the logs (in debug) show the following: Oct 20 21:29:45 xyzzy dovecot: imap-login: Login: user=<jeff>, method=PLAIN, rip=98.109.156.118, lip=132.238.254.34, mpid=19627, TLS Oct 20 21:29:45 xyzzy dovecot: imap: Debug: Loading modules from directory: /usr/lib64/dovecot Oct 20 21:29:45 xyzzy dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib05_snarf_plugin.so Oct 20 21:29:45 xyzzy dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib20_zlib_plugin.so Oct 20 21:29:45 xyzzy dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib30_imap_zlib_plugin.so Oct 20 21:29:45 xyzzy dovecot: imap(jeff): Debug: Effective uid=500, gid=500, home=/home/jeff Oct 20 21:29:45 xyzzy dovecot: imap(jeff): Debug: Namespace default: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:~/mail:INBOX=~/mbox Oct 20 21:29:45 xyzzy dovecot: imap(jeff): Debug: fs: root=/home/jeff/mail, index=, control=, inbox=/home/jeff/mbox, alt= Oct 20 21:29:45 xyzzy dovecot: imap(jeff): Debug: Namespace snarf: type=private, prefix=/snarf, sep=/, inbox=no, hidden=yes, list=no, subscriptions=yes location=mbox:/run/dovecot/empty:INBOX=/var/spool/mail/jeff Oct 20 21:29:45 xyzzy dovecot: imap(jeff): Debug: fs: root=/run/dovecot/empty, index=, control=, inbox=/var/spool/mail/jeff, alt= Oct 20 21:29:46 xyzzy dovecot: imap-login: Login: user=<jeff>, method=PLAIN, rip=98.109.156.118, lip=132.238.254.34, mpid=19629, TLS Oct 20 21:29:46 xyzzy dovecot: imap: Debug: Loading modules from directory: /usr/lib64/dovecot Oct 20 21:29:46 xyzzy dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib05_snarf_plugin.so Oct 20 21:29:46 xyzzy dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib20_zlib_plugin.so Oct 20 21:29:46 xyzzy dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib30_imap_zlib_plugin.so Oct 20 21:29:46 xyzzy dovecot: imap(jeff): Debug: Effective uid=500, gid=500, home=/home/jeff Oct 20 21:29:46 xyzzy dovecot: imap(jeff): Debug: Namespace default: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:~/mail:INBOX=~/mbox Oct 20 21:29:46 xyzzy dovecot: imap(jeff): Debug: fs: root=/home/jeff/mail, index=, control=, inbox=/home/jeff/mbox, alt= Oct 20 21:29:46 xyzzy dovecot: imap(jeff): Debug: Namespace snarf: type=private, prefix=/snarf, sep=/, inbox=no, hidden=yes, list=no, subscriptions=yes location=mbox:/run/dovecot/empty:INBOX=/var/spool/mail/jeff Oct 20 21:29:46 xyzzy dovecot: imap(jeff): Debug: fs: root=/run/dovecot/empty, index=, control=, inbox=/var/spool/mail/jeff, alt=

2 1

[Dovecot] LDA without lookup as non-root?
by E.B. 29 Oct '12

29 Oct '12

Hello, I'm having some problems getting LDA to work without userdb lookups and have a few related questions. This system has all users in MySQL, each user with unique UID/GID, no local users at all. Installation is from apt-get. 1) If LDA is invoked without lookups, is it correct to assume that the "service auth" and "service auth-worker" can be completely removed from dovecot master configuration? (I have tried commenting them out and logging into IMAP, which seems to work, not sure if anyone else needs the auth service) 2) If LDA is invoked without lookups, will I be unable to use Dovecot quota plugin? Does it need to have a user lookup to get quota info? (haven't added quota support, need to take this one step at a time) 3) The interesting part -- I am invoking LDA from Maildrop. See: http://thread.gmane.org/gmane.mail.imap.dovecot/65473 So when invoked, Maildrop has already dropped to the destination UID/GID and the needed paths are available in the environment. However, using as many permutations of calling LDA as I can think of (based on http://wiki2.dovecot.org/LDA ), I always get this: (command line usage error. Command output: lda: Fatal: Couldn't lookup our username (uid=2500) ) The UID is correct for the target user. If I add "-d $LOGNAME" to my LDA callout, I get permission denied on the userdb lookup, which I guess is another issue to work out if I want to go with lookups. But right now I am trying not to. Why does LDA seem to try for a lookup even when I follow the wiki instructions how to call it without a lookup? 3.5) Related question, my users have separate homedir and maildir, both paths are looked up by Maildrop. I think I need to call LDA with "HOME=$DEFAULT dovecot-lda -f $FROM". Is this correct?

2 3