- dovecot - dovecot.org

Re: [Dovecot] Bus factor of dovecot / GIT
by Peer Heinlein 09 Nov '11

09 Nov '11

Am Mittwoch, 9. November 2011, 10:29:37 schrieb Thomas Koch: Hi, > somebody from the kolab groupware project recently explained me that the > Bus- Factor[1] of around 1 would be one of their primary reasons not to > use Dovecot and stick with Cyrus. The problem is: Even it Timo will be hitten by a bus, everybody could stay on the actual Dovecot-version and everything's fine. Cyrus will IMO never reach the level, that Dovecot already has. :-) Peer P.S.: Timo! Don't leave your house. It's too dangerous for you. -- Heinlein Professional Linux Support GmbH Linux: Akademie - Support - Hosting http://www.heinlein-support.de Tel: 030/405051-42 Fax: 030/405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

1 0

[Dovecot] Multiple Patitions with with mdbox
by Peer Heinlein 09 Nov '11

09 Nov '11

Having > 10 TByte mailstore filesystem-checks takes too much time. At the moment we have four different partitions, but I don't like to set symlinks or LDAP-flags to sort customers and their domains to there individual mount-point. I'd like to work with mdbox:/mail/%d/%n to calculate the path automatically. How do you handle >> 10 TB mailstore? I'm very interested in the feature "alternative mailstore" with mdbox, because that makes it very easy to use at least TWO filesystems without any tricky configuration. I think I'd love to have <n> alternative mailstores. Why does dbox doesn't look for its m.*-files in more then two directorys? Sure, looking in 4 directorys would lead to four disc operations, but maybe it could be very helpful. Peer -- Heinlein Professional Linux Support GmbH Linux: Akademie - Support - Hosting http://www.heinlein-support.de Tel: 030/405051-42 Fax: 030/405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

3 2

[Dovecot] another sizeof tweak
by Mike Abbott 08 Nov '11

08 Nov '11

Line 776 of dovecot-2.0.15/src/lib-storage/index/maildir/maildir-sync-index.c reads: memcmp(old_rec, &new_rec, sizeof(old_rec)) != 0) { Should that be sizeof(*old_rec)?

2 2

[Dovecot] Dovecot alias and mailbox problem
by Jeroen Grusewski 08 Nov '11

08 Nov '11

Hi All, My Postfix / Dovecot / MySQL is running fine but I have the following issue: When I create the following mailboxes test(a)example.com and test1(a)example.com it is working fine. I can create an alias test2(a)examples.com => test1(a)example.com that is also working without a problem, only when I create test(a)example.com => test1(a)example.com email is only delivered to test1@.... instead to both test@.... and test1@.... I believe it is properly just a setting but please help me out here ! Let me know if you need any more information before I post configs etc. Best regards, Jeroen

2 1

[Dovecot] dsync and zlib
by Peer Heinlein 08 Nov '11

08 Nov '11

Will dsync also use zlib-compression when copying mails from one side to another? Wouldn't this be a good way to compress existing mails? http://wiki2.dovecot.org/Plugins/Zlib says, there's no way to do that. But dsync should respect the zlib-Plugin... Peer -- Heinlein Professional Linux Support GmbH Linux: Akademie - Support - Hosting http://www.heinlein-support.de Tel: 030/405051-42 Fax: 030/405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

2 1

[Dovecot] Failing to share folders when listescape is enabled (2.0.14)
by mailing lists 08 Nov '11

08 Nov '11

Hello, How I can share a folder with dots when the listescape plugin is enabled? In this example user001 is sharing two foders named "docs-abc" and "docs-a.b.c" to user002. The first folder (without dots) is seen by user002 but the second is not found by dovecot because it search a system folder named ".docs-a.b.c" but the system folder is ".docs-a\2eb\2ec" Nov 8 11:03:52 imap2 dovecot: imap(user002): Debug: acl vfile: file /var/virtual-maildir/user001/.docs-a.b.c/dovecot-acl not found drwx------ 2 vmail vmail 4096 2011-11-08 10:54 cur drwx------ 5 vmail vmail 4096 2011-11-08 10:57 .docs-a\2eb\2ec drwx------ 5 vmail vmail 4096 2011-11-08 10:57 .docs-abc -rw------- 1 vmail vmail 20 2011-11-08 10:57 dovecot-acl-list -rw------- 1 vmail vmail 248 2011-11-08 10:55 dovecot.index.log -rw------- 1 vmail vmail 96 2011-11-08 10:54 dovecot.mailbox.log -rw------- 1 vmail vmail 51 2011-11-08 10:55 dovecot-uidlist -rw------- 1 vmail vmail 8 2011-11-08 10:57 dovecot-uidvalidity -r--r--r-- 1 vmail vmail 0 2011-11-08 10:54 dovecot-uidvalidity.4eb8fc5b drwx------ 5 vmail vmail 4096 2011-11-08 10:57 .Drafts -rw------- 1 vmail vmail 15 2011-11-08 10:54 maildirsize drwx------ 2 vmail vmail 4096 2011-11-08 10:54 new drwx------ 5 vmail vmail 4096 2011-11-08 10:54 .Sent drwx------ 5 vmail vmail 4096 2011-11-08 10:54 .Spam -rw------- 1 vmail vmail 23 2011-11-08 10:54 subscriptions drwx------ 2 vmail vmail 4096 2011-11-08 10:54 tmp drwx------ 5 vmail vmail 4096 2011-11-08 10:54 .Trash # cat /var/virtual-maildir/user001/subscriptions Trash Sent Drafts Spam docs-abc docs-a\2eb\2ec # telnet localhost 143 Trying ::1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. . login user001 XXXXX . OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS QUOTA ACL RIGHTS=texk] Logged in . create docs-abc . OK Create completed. . create docs-a.b.c . OK Create completed. . setacl docs-abc user002 lrsw . OK Setacl complete. . setacl docs-a.b.c user002 lrsw . OK Setacl complete. . subscribe docs-abc . OK Subscribe completed. . subscribe docs-a.b.c . OK Subscribe completed. . logout * BYE Logging out . OK Logout completed. Connection closed by foreign host. # telnet localhost 143 Trying ::1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. . login user002 XXXXXX . OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS QUOTA ACL RIGHTS=texk] Logged in . subscribe shared/user001/docs-abc . OK Subscribe completed. . subscribe shared/user001/docs-a.b.c . NO Mailbox doesn't exist: shared/user001/docs-a.b.c . logout * BYE Logging out . OK Logout completed. Connection closed by foreign host. /-----------------/ # dovecot -n # 2.0.14: /etc/dovecot/dovecot.conf # OS: Linux 2.6.34.7-0.7-xen x86_64 openSUSE 11.3 (x86_64) auth_debug = yes auth_verbose = yes base_dir = /var/run/dovecot/ dict { expire = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no doveadm_proxy_port = 24244 doveadm_socket_path = localhost:24244 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_debug = yes mail_fsync = always mail_gid = 5000 mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = acl quota notify expire listescape mail_uid = 5000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mmap_disable = yes namespace { inbox = yes list = yes location = prefix = separator = / subscriptions = yes type = private } namespace { list = children location = maildir:/var/virtual-maildir/%%n:INDEX=~/shared.%%n prefix = shared/%%n/ separator = / subscriptions = no type = shared } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = file:/var/maildir/vol00/shared-mailboxes autocreate = Trash autocreate2 = Sent autocreate3 = Drafts autocreate4 = Spam autosubscribe = Trash autosubscribe2 = Sent autosubscribe3 = Drafts autosubscribe4 = Spam expire = Trash expire2 = Trash/* expire5 = Spam expire6 = Spam/* expire_dict = proxy::expire mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid from subject size vsize flags mail_plugins = " mail_log notify" quota = maildir:Quota quota_exceeded_message = Quota limit reached quota_rule2 = Trash:storage=+50M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=90%% quota-warning 90 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } service auth { unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service dict { unix_listener dict { group = vmail mode = 0600 user = vmail } } service doveadm { inet_listener { port = 24244 } } service lmtp { inet_listener lmtp { port = 24 } unix_listener lmtp { group = vmail mode = 0666 user = vmail } } service pop3-login { inet_listener pop3 { port = 110 } } service quota-warning { executable = script /etc/dovecot/quota-warning.sh unix_listener quota-warning { user = vmail } } ssl = no userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes protocol lmtp { mail_plugins = acl quota notify expire listescape sieve } protocol lda { mail_plugins = acl quota notify expire listescape sieve } protocol imap { mail_max_userip_connections = 100 mail_plugins = acl quota notify expire listescape imap_acl autocreate imap_quota } protocol pop3 { pop3_uidl_format = %v-%u } local 10.1.245.101/28/28 { doveadm_password = secret }

2 1

[Dovecot] Attachements with SIS : shauld all the same files share the same inode ?
by Yann Dupont 08 Nov '11

08 Nov '11

Hello. I configured SIS , and all seems to work well, but I noticed something strange : For exemple, this attachement : 6e/2d# ls -al 6e2df299* | sort -n 104 instance of -rw------- 104 vmail vmail 346584 16 oct. 17:47 6e2df299fa96daec9b4735d07c494046429be4d6-ffd0d1xxxx The files are hardlinked, so it seems ok, but I also see 9 others files in the same directory : -rw------- 1 vmail vmail 346584 16 oct. 17:47 6e2df299fa96daec9b4735d07c494046429be4d6-0519df2a94fc9a4e1f4100008a6b99b6 -rw------- 1 vmail vmail 346584 16 oct. 17:47 6e2df299fa96daec9b4735d07c494046429be4d6-1790b92994fc9a4e1a4100008a6b99b6 as you can see, same prefix, If I compare them with diff, they are all the same files. ls -i show that 104 have the same inode, as expected, and the 9 remaining files have different inodes. I expected all the files share the same inodes. Is there something wrong here ? My setup is debian squeeze + auto packages from http://xi.rename-it.nl/debian/ dovecot is 2:2.0.15-0~auto+21 thanks, -- Yann Dupont - Service IRTS, DSI Université de Nantes Tel : 02.53.48.49.20 - Mail/Jabber : Yann.Dupont(a)univ-nantes.fr

2 2

[Dovecot] How to define ldap connection idle
by Aliet Santiesteban Sifontes 08 Nov '11

08 Nov '11

I'm having a problem with dovecot ldap connection when ldap server is in another firewall zone, firewall kills the ldap connection after a determined period of inactivity, this is good from the firewall point of view but is bad for dovecot because it never knows the connections has been dropped, this creates longs timeouts in dovecot and finally it reconnects, meanwhile many users fails to authenticate, I have seen this kind of post in the list for a while but can't find a solution for it, so my question is how to define a idle ldap time in dovecot so it can reconnect before the firewall has dropped the connection or just close the connection under inactivity so when a user authenticate doesn't fails for a while until dovecot detects that the connection has hanged. Is this a feature request or there is already a configuration for this??? Thank's in advance and congrats tu Timo for this great app.

2 4

[Dovecot] POP3/IMAPv4 CRAM-MD5 Authentication failed.(Re-post)
by Yuuichi Ikeda (SKLC) 07 Nov '11

07 Nov '11

Hi, I'm Yuuichi Ikeda from Japan User. OS:Solaris 10 9/10 s10x_u9wos_14a X86 Mem:8GB HDD:3TB gcc:gcc (GCC) 4.1.2 gcc-prefix:/unsupported/gcc Dovecot Version:2.0.15 configure:./configure --prefix=/opt/dovecot_2 --sysconfdir=/opt/dovecot_2/conf --mandir=/opt/man --enable-shared --with-mysql --with-zlib --with-sqlite --with-sql=plugin --with-ssldir=/opt/openssl --with-rundir=/var/run --with-libiconv-prefix=/opt/libiconv Dovecot Configuration > # 2.0.15: /opt/dovecot_2/conf/dovecot/dovecot.conf > # OS: SunOS 5.10 i86pc > auth_debug = yes > auth_mechanisms = cram-md5 > auth_ssl_require_client_cert = yes > auth_ssl_username_from_cert = yes > auth_verbose = yes > base_dir = /var/run/dovecot/ > doveadm_worker_count = 10 > log_path = /var/log/dovecot/dovecot.log > login_greeting = ready. > login_trusted_networks = 192.168.1.0/24 > mail_location = maildir:~/Maildir > passdb { > driver = pam > } > passdb { > args = /opt/dovecot_2/conf/dovecot/passwd > driver = passwd-file > } > plugin { > acl = vfile:/opt/dovecot_2/conf/dovecot/global-acls:cache_secs=300 > acl_shared_dict = file:/var/lib/dovecot/shared-mailboxes > } > protocols = imap pop3 > service auth { > executable = /opt/dovecot_2/libexec/dovecot/auth > unix_listener /var/spool/postfix/private/auth { > mode = 0666 > } > } > service imap-login { > executable = /opt/dovecot_2/libexec/dovecot/rawlog /opt/dovecot_2/libexec/dovecot/imap-login > inet_listener imap { > port = 143 > ssl = no > } > inet_listener imaps { > port = 993 > ssl = yes > } > } > service imap { > executable = /opt/dovecot_2/libexec/dovecot/rawlog /opt/dovecot_2/libexec/dovecot/imap > } > service lmtp { > unix_listener lmtp { > mode = 0666 > } > } > service pop3-login { > executable = /opt/dovecot_2/libexec/dovecot/rawlog /opt/dovecot_2/libexec/dovecot/pop3-login > inet_listener pop3 { > port = 110 > ssl = no > } > inet_listener pop3s { > port = 995 > ssl = yes > } > } > service pop3 { > executable = /opt/dovecot_2/libexec/dovecot/rawlog /opt/dovecot_2/libexec/dovecot/pop3 > } > ssl_ca = </opt/dovecot_2/conf/dovecot/ca-c.pem > ssl_cert = </opt/dovecot_2/conf/dovecot/ns-c.pem > ssl_key = </opt/dovecot_2/conf/dovecot/ns-p.pem > ssl_verify_client_cert = yes > userdb { > args = blocking=yes > driver = passwd > } > protocol imap { > imap_logout_format = bytes=%i/%o > imap_max_line_length = 64 k > mail_max_userip_connections = 10 > mail_plugins = > } > protocol lda { > hostname = mailsv.sklc.co.jp > info_log_path = /var/log/dovecot/deliver.log > log_path = /var/log/dovecot/deliver.log > mail_plugins = > postmaster_address = postmaster(a)sklc.co.jp > sendmail_path = /usr/lib/sendmail > } > protocol lmtp { > mail_plugins = > } > protocol pop3 { > mail_plugins = > pop3_save_uidl = yes > pop3_uidl_format = %v-%u > } If it attests by connecting by POP3 or IMAPv4, the following messages will be displayed and attestation will go wrong. > Nov 07 23:12:40 auth: Debug: auth client connected (pid=20018) > Nov 07 23:12:40 auth: Debug: client in: AUTH 1 CRAM-MD5 service=pop3 secured no-penalty lip=192.168.1.1 rip=192.168.1.110 lport=110 rport=57054 > Nov 07 23:12:40 auth: Info: CRAM-MD5(?,192.168.1.110): Client didn't present valid SSL certificate > Nov 07 23:12:40 auth: Debug: client out: FAIL 1 reason=Client didn't present valid SSL certificate > Nov 07 23:12:40 pop3-login: Info: Aborted login (cert required, client didn't start TLS): method=CRAM-MD5, rip=192.168.1.110, lip=192.168.1.1, secured > Nov 07 23:16:32 auth: Debug: auth client connected (pid=20126) > Nov 07 23:16:32 auth: Debug: client in: AUTH 1 CRAM-MD5 service=imap secured no-penalty lip=192.168.1.1 rip=192.168.1.1 lport=143 rport=58734 > Nov 07 23:16:32 auth: Info: CRAM-MD5(?,192.168.1.1): Client didn't present valid SSL certificate > Nov 07 23:16:32 auth: Debug: client out: FAIL 1 reason=Client didn't present valid SSL certificate > Nov 07 23:16:32 imap-login: Info: Aborted login (cert required, client didn't start TLS): method=CRAM-MD5, rip=192.168.1.1, lip=192.168.1.1, secured What will you do and will become like this? If some people know ways of coping, please let me know. ============================================================= Information-system part. Sankei-Koumuten Co.,Ltd. Yuuichi Ikeda Mail:yuichi@sklc.co.jp Tel.+81-3-3623-6474 Fax.+81-3-3623-6475 Our company promotes "Team minus 6 percent" jus, Hatena Joined member. LPIC-2 Certified. =============================================================

2 1

[Dovecot] Accessing a strange mailbox
by Micah Anderson 07 Nov '11

07 Nov '11

I have a user who has a mailbox called: A----->B It seemed to work in courier fine, they managed to create it, and there are mails in it. However, dovecot is not letting the user access it, the IMAP server gives an error. I tried to rename it but I would also get an error: # doveadm mailbox rename A-----\>B AtoB doveadm(root): Error: Can't rename mailbox A----->B to AtoB: Mailbox doesn't exist: A----->B # doveadm mailbox rename A----->B AtoB doveadm(root): Error: Can't rename mailbox A----- to AtoB: Mailbox doesn't exist: A----- # doveadm mailbox rename 'A----->B' AtoB doveadm(root): Error: Can't rename mailbox A----->B to AtoB: Mailbox doesn't exist: A----->B # doveadm mailbox rename "A----->B" AtoB doveadm(root): Error: Can't rename mailbox A----->B to AtoB: Mailbox doesn't exist: A----->B # How can I deal with this mailbox (using mdbox here)? Thanks! --

3 2

[Dovecot] Problems with password verification on a BSD box against PAM
by Michael Schinhammer 07 Nov '11

07 Nov '11

Spam detection software, running on the system "ns.089.at", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email. If you have any questions, see The administrator of that system for details. Content preview: Hi ML, i want to use my local users database on my Freebsd 8.2 box and got the following error in the maillog. The password is ok and it working on the console. i can establish the ssl connection after login "a login ux password" the error occures i cant login. [...] Content analysis details: (6.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in headers 0.6 J_CHICKENPOX_65 BODY: 6alpha-pock-5alpha 0.6 J_CHICKENPOX_73 BODY: 7alpha-pock-3alpha 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 NO_RDNS2 Sending MTA has no reverse DNS 3.5 TO_NO_BRKTS_DIRECT To: misformatted and direct-to-MX

1 0

[Dovecot] Converting from 1.12 to 2.0 questions about mail location?
by Knute Johnson 06 Nov '11

06 Nov '11

I'm building a new server and using a newer version of ubuntu server that uses Dovecot 2.0. I thought I would like to use Maildir instead of the mbox that was used in the previous server. What do I have to do to convert my mbox mail to Maildir? Or should I just use mbox and copy it over :-)? Thanks, -- Knute Johnson

2 1

[Dovecot] Safely restoring backups
by Micah Anderson 05 Nov '11

05 Nov '11

I'm trying to determine what the best way to restore mail with mdbox is. Restoring using maildir was trivial, I just used rsync --ignore-existing which wrote any mails that were removed and didn't touch things that already existed[1]. With mdbox things have become more complicated, and I haven't found a way to restore mail that doesn't result in many message duplicates. My backup setup is simple, I'm doing daily rsync backups of user's mailstores, as well as weekly backups, so I end up having on my backup server daily.1, daily.2, daily.3, daily.4, weekly.1, weekly.2... each containing the entire contents of the user's mdbox. The different restore methods I've tried are: 1. I tried rsyncing the different backup directories back to the mail storage host, and then doing: 'dsync -R backup -u $user mdbox:/path/to/to/daily.1/mdbox'[2] 'dsync -R backup -u $user mdbox:/path/to/to/daily.2/mdbox' This works ok, but it gives duplicates of every mail that already exists for every daily/weekly I dsync. This is what the rsync --ignore-existing avoided. This is particularly annoying if I restore the weekly, and multiple daily directories, because then you get a copy for every one you restore. I had thought that the individual message's GIDs would keep them from being duplicated? 2. I also tried to use 'doveadm import' in two different ways. The first way I created a 'restored_from_backups' folder and then import each of the daily.#, weekly.# mdboxes into their own subfolder within that folder, for example: 'doveadm import -u $username mdbox:/path/to/daily.1/mdbox restored_from_backups/daily1 all' 'doveadm import -u $username mdbox:/path/to/daily.2/mdbox restored_from_backups/daily2 all' ... etc. I then go through and subscribe the new folders[3] and the user ends up with a folder structure like this: restored_from_backups/ daily.1/ INBOX Trash folder1 folder2 daily.2 INBOX Trash folder1 folder2 etc. This works fine, except that it results in the user having a entire duplicate copies of their mailbox for each daily/weekly that I restore. That will quickly bring people over quota. 3. I also tried to use 'doveadm import' to import all the different directories all into the same restored_from_backups directory, so there are no subdirectories for each daily/weekly under restored_from_backups, like so: 'doveadm mailbox create -u $user -s restored_from_backups' 'doveadm -v -D import -u $user mdbox:/path/to/daily.1/mdbox restored_from_backups all' I then go through and subscribe the folders[3]. Using this method, the 'restored_from_backups' mailbox is created, and populated with the folders. The only problem with this method is the same as method #1: for every backup I restore, mails are duplicated. Is there a way I can restore things from backup and avoid duplicates? Is there another method I should try? thanks for any ideas, pointers, suggestions for improvement, etc. micah 1. this would of course bring back mails that were deleted, but that was fine as the user could deal with that. 2. yes, I know I could setup dsync on the backup server, and use dsync directly to pull the mails from there, but this is complicated in my situation due to how the backupserver works. 3. why doesn't doveadm import have a -s option to subscribe? --

2 1

[Dovecot] Newbie Question/Feature Request
by Michael Papet 05 Nov '11

05 Nov '11

Hi, I'm working on a plugin for qpsmtpd (a perl smtp frontend) that delivers mail via dovecot's LDA. I can only get mail delivered by writing the email to file, then calling 'deliver -d someone -f someone-else < /path/to/temp/email' All good, expected behavior. A perl snippet: local $/=undef; open FH, "< ./demo.mail"; my $stringified = <FH>; # this is roughly equivalent to how other LDA queues work. close FH; open (CMD_OUT, " /usr/lib/dovecot/deliver -f somedude\(a)someplace.com -d anotherdude\(a)destination.dom $stringified |"); my $test = <CMD_OUT>; print $test; The above code errors out because the expected behavior is $stringified is supposed to be a file name. It would be great if deliver could be fed the email as a string so I don't have to add a step of writing to file. Or, maybe there's an undocumented method? Thanks. mpapet

2 1

[Dovecot] dsync with quotas
by Micah Anderson 05 Nov '11

05 Nov '11

I have been working on converting people from courier maildir -> dovecot mdbox and during some of the dsync runs I'm seeing the quota_exceeded_message be printed as an Error: dsync(<user>): Error: Can't save message to mailbox INBOX: You are over quota. To avoid losing mail, immediately empty your Trash and Sent folders and \ delete emails with large attachments. dsync(<user>): Info: INBOX: Couldn't keep all uids^M Its possible the user was over quota on the originating courier side, but I would still like to migrate their mail proprely to mdbox, but it seems like being over quota is inhibiting that. Are the quota calculations including both the maildir files as well as the converted mdbox files, resulting in a double counting? I'm not entirely sure if the messages above indicate that the migration failed for that user or not, so I've been manually increasing their quota, then redoing the dsync mirror until it works properly. I wonder if it would be better if I turned off quota entirely during migration so I don't run into this problem? thanks, micah --

2 2

[Dovecot] Group ACL
by Daniel L. Miller 05 Nov '11

05 Nov '11

Using Dovecot 2.0, LDAP userdb & passdb, with prefetch: hosts = myhost.mydomain dn = cn=x,cn=y dnpass = xyz123 auth_bind = yes auth_bind_userdn = uid=%n,ou=users,dc=x ldap_version = 3 base = ou=Users, dc=x user_attrs = =home=/var/mail/%d/%n, \ =mail=mdbox:/var/mail/%d/%n/mdbox, \ =uid=vmail, \ =gid=mail user_filter = (&(objectClass=inetOrgPerson)(mail=%u)) pass_attrs = mail=user, \ userPassword=password, \ =userdb_home=/var/mail/%d/%n, \ =userdb_mail=mdbox:/var/mail/%d/%n/mdbox, \ =userdb_uid=vmail, \ =userdb_gid=mail, \ =userdb_acl_groups='allshared' pass_filter = (&(objectClass=inetOrgPerson)(mail=%u)) iterate_attrs = mail=user iterate_filter = (&(objectClass=inetOrgPerson)(mail=*)) default_pass_scheme = plain I have added permissions for "$allshared" to a mailbox's Inbox. It does not appear in the shared folders list. Other mailboxes, with explicit permission for a given username, work fine. What am I doing wrong? -- Daniel

2 1

Re: [Dovecot] Dot Lock timestmap, users disconnections from roundcube
by Maria Arrea 05 Nov '11

05 Nov '11

Timo, we are not using NFS, we use remote iSCSI volumes with ext4. Regards Maria ----- Original Message ----- From: Timo Sirainen Sent: 11/04/11 09:59 PM To: Maria Arrea Subject: Re: [Dovecot] Dot Lock timestmap, users disconnections from roundcube On Thu, 2011-11-03 at 10:54 +0100, Maria Arrea wrote: > Hello. > > We are running dovecot 2.0.13 with mdbox+zlib on RHEL 5.7 x64, ext4. We use NTP. Indexes are in a iSCSI raid 10, mailboxes in raid5. No NFS. We have detected that sometimes all users get disconnected from roundcube at the same time. In dovecot logs we hundreds of lines like this: > > Nov 3 09:23:07 buzon dovecot: imap(mcrivero@mydomain): Warning: Created dotlock file's timestamp is different than current time (1320308587 vs 1320308542): /buzones/mydomain/03/67/mcrivero/subscriptions I did several fixes related to this, but they were already in v2.0.10. Note the time difference of 45 seconds. > Nov 3 09:23:07 buzon dovecot: imap(mcrivero@mydomain): Connection closed bytes=0/295 The dotlock warning isn't related to this. My guess: NFS was being extremely slow here, some operation took 45 seconds and Roundcube decided to abort before that. The "timestamp is different" check doesn't work 100% correctly if the filesystem operations take more than a second.

2 1

[Dovecot] Bad creation timestamp of migrated mails (maildir format)?
by Lukas Weiß 05 Nov '11

05 Nov '11

Hello everybody, ive just switched to dovecot imap because dbmail i used before is not developed any further and sql storage is difficult to backup. Ive done that, by setting up dovecot with maildir format and copy mails from old dbmail to new dovecot imap server with my mail client (thunderbird). Unfortunately migrating to dovecot brought me some problems with my Android K9 Mail client: Sync with IMAP-Server shows me only the oldest mails. I think the problem is, that K9 only fetches the newest mails (25) from the server (to save memory etc). Which mail is "new" is probably determined by creation timestamp of the email-files in my mailbox, which was copied newest first on migration from dbmail to dovecot. So the older mails have the newer creation timestamp on file system. Do you have any suggestions how to fix that problem? Maybe migrate to dbox mailbox format? BTW: New mails show up correctly, as the creation timestamp is new. Thanks Lukas

3 6

[Dovecot] fts-lucene vs SEARCH header Re: 2.1: problems compiling fts-lucene - CLucene git version necessary?
by Lutz Preßler 05 Nov '11

05 Nov '11

On Tue, 20 Sep 2011, Lutz Preßler wrote: > On Mo, 19 Sep 2011, Timo Sirainen wrote: > > > On Sun, 2011-09-18 at 13:27 +0200, Lutz Preßler wrote: > > > Hello, > > > On So, 11 Sep 2011, Timo Sirainen wrote: > > > dovecot: imap(...): Error: fts_lucene: default_language set, but Dovecot built without stemmer support > > > > Fixed: http://hg.dovecot.org/dovecot-2.1/rev/02c84406c661 > Without stemmer support it works nicely now though. Next problem :-) side effect: my test setup (some commits ago) with fts = lucene in plugin section (ftps_lucene plugin without stemmer support): SEARCH header is not working (empty result sets, no logging). Tested in different circumstances (and also happening with virtual folders). Simply disable fts option (while module is still loaded) or use fts=sqat to have header search working correctly again. Lutz

2 1

[Dovecot] dovecot: 2011-11-04 16:58:01 Error: IMAP(<user>): FETCH for mailbox Trash UID 42022 got too little data: 90900 vs 1529791
by Noah 05 Nov '11

05 Nov '11

Hi there I keep getting the following errors scrolling in my dovecot logs. I am wondering how I can nail down what is creating that problem. dovecot: 2011-11-04 16:58:01 Error: IMAP(<usr>): FETCH for mailbox Trash UID 42022 got too little data: 90900 vs 1529791 also I have a trash folder with over 100k messages in mbox format. I am wondering if migrating to Maildir format would make it easier and quicker for dovecot to index my mail. I am getting these types of errors from time to time. dovecot: 2011-10-30 20:32:58 Error: IMAP(<user>): Timeout while waiting for lock for transaction log file /home/<user>/mail/.imap/INBOX/dovecot.index.log Cheers, Noah

2 1

[Dovecot] [PATCH] Use SSL_MODE_RELEASE_BUFFERS if available to keep memory usage low
by Cristian Rodríguez 05 Nov '11

05 Nov '11

# HG changeset patch # User Cristian Rodríguez <crrodriguez(a)opensuse.org> # Date 1318533592 10800 # Node ID c15d6befe20082009cb40926afa208ab4b684818 # Parent 962df5d9413a4a0fcc68aacc1df0dca7a44a0240 Use SSL_MODE_RELEASE_BUFFERS if available to keep memory usage low. diff -r 962df5d9413a -r c15d6befe200 src/login-common/ssl-proxy-openssl.c --- a/src/login-common/ssl-proxy-openssl.c Wed Oct 12 17:16:10 2011 +0300 +++ b/src/login-common/ssl-proxy-openssl.c Thu Oct 13 16:19:52 2011 -0300 @@ -925,6 +925,9 @@ STACK_OF(X509_NAME) *xnames = NULL; SSL_CTX_set_options(ssl_ctx, SSL_OP_ALL | SSL_OP_NO_SSLv2); +#ifdef SSL_MODE_RELEASE_BUFFERS + SSL_CTX_set_mode(ssl_ctx, SSL_MODE_RELEASE_BUFFERS); +#endif if (*set->ssl_ca != '\0') { /* set trusted CA certs */ store = SSL_CTX_get_cert_store(ssl_ctx);

2 1

Re: [Dovecot] lmtp performance
by Juan Carlos Sanchez 04 Nov '11

04 Nov '11

A particular reply (not to the list) has told me to try: " Add to service lmtp: process_min_avail = 20 " And yes, it works (unless for me), so I want to share it with everybody. Have not exactly measured performance but this morning have seen over 1400 messages/minute with lmtp under heavy load. What the "process_min_avail = 20" in service lmtp (or anywhere else) exactly imply? cannot find a reference in wiki2 . I suppose it means than 20 lmtp processes are always open waiting for new connections and so reducing startup latency, isn't it? Thank you. > > On Mon, Oct 17, 2011 at 6:06 AM, Juan Carlos Sanchez > <juancarlos.sanchez(a)upm.es <mailto:juancarlos.sanchez@upm.es>> wrote: > > Hello: > > In the process of migration from version 1.2 to 2.0 have tried to > use lmtp instead of lda as delivery agent. > > But unfortunately througput we get is poor with lmtp compared to lda. > In peak times with lda we are able to deliver over 1800 > messages/minute (high I/O but not affecting service) but if we > switch to lmtp cannot deliver more than 300 mess/minute (very low > I/O). > > This is enough for normal work but low under heavy load > (distribution lists messages sometimes stay queued for 4 hours > before deliver). > > We have arround 50000 boxes and use postfix as MTA > > How to increase lmtp performance? > > > dovecot config for lda and lmtp: > > protocol lda { > auth_socket_path = /usr/local/var/run/dovecot/auth-master > info_log_path = /var/log/mail/dovecot_deliver.log > log_path = /var/log/mail/dovecot_deliver.log > mail_plugins = quota sieve zlib > postmaster_address = postmaster(a)upm.es <mailto:postmaster@upm.es> > sendmail_path = /usr/lib/sendmail > } > > protocol lmtp { > info_log_path = /var/log/mail/dovecot_deliver.log > log_path = /var/log/mail/dovecot_deliver.log > mail_plugins = quota sieve zlib > postmaster_address = postmaster(a)upm.es <mailto:postmaster@upm.es> > sendmail_path = /usr/lib/sendmail > } > > In postfix I have: > > mailbox_transport = lmtp:unix:private/dovecot-lmtp > > > > Thanks in advance. > > -- > > ------------------------------------------------------ > Juan Carlos Sanchez Hernandez > Universidad Politecnica de Madrid > ------------------------------------------------------ > > > -- ------------------------------------------------------ Juan Carlos Sanchez Hernandez Universidad Politecnica de Madrid ------------------------------------------------------

3 2

[Dovecot] imap proxy for Gmail
by Jumping Mouse 04 Nov '11

04 Nov '11

Hello, b I have a situation were I want to be able to give teachers access to their Google apps for education email through Squirrelmail. The network that they are on blocks gmail. I am able to get Squirrelmail to communicate with Gmail via imap. I am looking at getting persistant imap connections to improve the user experience. I have looked at IMAPPROXY but this application is not compatible with the gmail imaps (ssl-encrypted imap over port 993). I recall reading somewhere that Dovecot has a built in imapproxy that could be used for this. Can someone please point me to documentation or other information on how I might achieve the above stated goal? Thanks, Kafriki

3 2

[Dovecot] Proxy and Virtual IMAP Folders
by Pedro Paixao 04 Nov '11

04 Nov '11

Hi all I am a newbie to dovecot and I would like some help clarifying a feature to determine if I can use it in my project. Is is posible to use the virtual plugin, in a IMAP proxy configuration, in a way that the virtual plugin searches messages on the real server? Here's my scenario: [Client]----[Dovecot Proxy]-----[Real Imap Server] Client connects to Dovecot Proxy and gets all the folders that are on the Real Imap Server, plus some virtual ones (generated by Dovecot Proxy) that search for messages on the real server. In my config the Dovecot Proxy has no email messages, real folders, or local delivery. I would like to thank you in advance for ant help and support. All the best Pedro

2 1

[Dovecot] doveadm segfaults on TCP connect - version 2.0.15
by ghandidrivesahumvee＠rocketfish.com 04 Nov '11

04 Nov '11

Hi list, I just recently installed Dovecot 2.0.15. Unfortunately, doveadm segfaults when I attempt to connect to the local dovecot instance. When this occurs, my logs show: 2011-10-19T12:31:23-07:00 mail02 dovecot: doveadm: Error: doveadm client not compatible with this server (mixed old and new binaries?) I am using the settings listed on the wiki page http://wiki2.dovecot.org/Director [root@mail02 ~]# /opt/dovecot/bin/doveadm who -a 10.10.5.220:544 Segmentation fault (core dumped) doveconf and gdb output are below. If there is any more information I can provide please let me know. Thanks! [root@mail02 ~]# /opt/dovecot/bin/doveconf -n # 2.0.15: /opt/dovecot-2.0.15/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.17.4.el5 x86_64 CentOS release 5.5 (Final) auth_mechanisms = plain login auth_verbose = yes auth_worker_max_count = 60 default_client_limit = 2048 disable_plaintext_auth = no doveadm_proxy_port = 544 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = 10.10.5.220, 127.0.0.1 lmtp_save_to_detail_mailbox = yes mail_fsync = always mail_log_prefix = "%r mpid=%p %s(%u): " mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = " notify mail_log" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes passdb { args = /opt/dovecot/etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } plugin { mail_log_events = delete expunge mailbox_delete mail_log_fields = msgid box from mail_log_group_events = yes sieve = ~/MainSieve sieve_before = /storage03/sieve/before/ sieve_dir = ~/sieve sieve_max_actions = 32 sieve_max_redirects = 4 sieve_max_script_size = 2M } quota_full_tempfail = yes service anvil { client_limit = 2000 } service auth { client_limit = 7000 unix_listener /var/spool/postfix/private/auth { mode = 0600 user = postfix } unix_listener auth-userdb { group = mailowner mode = 0600 user = mailowner } } service doveadm { inet_listener { port = 544 } } service imap-login { inet_listener imap { port = 143 } process_min_avail = 4 service_count = 0 vsz_limit = 128 M } service imap {%0

5 6

[Dovecot] Rewrite the ostream output method, to save messages in another directory.
by Alex Baule 04 Nov '11

04 Nov '11

Hi Timo, I Trying to integrate my antispam with dovecot, using the imap folder to do certain actions. I Do almost every thing, but i have some problems saving the message. Explaining this function, i try to use a imap folder like a "collector folder", the user append a message from outside (ie another imap or pop message) to this folder, and i don't want to copy this message, i need to redirect it to another folder outside from user's maildir. Well, i try to base it in zlib plugin, with was the o_stream_create_gz(). Inside the o_stream_create_gz has the Output, it's a copy from the original output. I Try to replace this output, with another one, that i try to create to another location, without sucessfull. struct ostream * o_stream_create_X_list(struct ostream *output, struct istream *input, const char *type) { struct emexis_ostream *X_stream; struct ostream *new_output; int fd; fd = open("/tmp/email",O_WRONLY); new_output = o_stream_create_fd_file(fd, 0, TRUE); o_stream_cork(new_output); emexis_stream = i_new(struct emexis_ostream, 1); emexis_stream->ostream.sendv = o_stream_X_sendv; emexis_stream->ostream.flush = o_stream_X_flush; emexis_stream->ostream.iostream.close = o_stream_X_close; emexis_stream->output = new_output; emexis_stream->input = input; o_stream_ref(new_output); return o_stream_create(&X_stream->ostream); } With this new o_stream, i got this error. Oct 27 15:14:24 brc dovecot: imap(alex(a)exemplo.com.br): Error: o_stream_send_istream(/storage/gss/emexis/messages/ exemplo.com.br/alex/Maildir/.Emexis.Ext-Blacklist/tmp/1319735664.M568409P30815.brc) failed: Bad file descriptor Oct 27 15:14:24 brc dovecot: imap(alex(a)exemplo.com.br): Error: o_stream_flush(/storage/gss/emexis/messages/ exemplo.com.br/alex/Maildir/.Emexis.Ext-Blacklist/tmp/1319735664.M568409P30815.brc) failed: Bad file descriptor Oct 27 15:14:24 brc dovecot: imap(alex(a)exemplo.com.br): Error: write(/storage/gss/emexis/messages/ exemplo.com.br/alex/Maildir/.Emexis.Ext-Blacklist/tmp/1319735664.M568409P30815.brc) failed: Bad file descriptor There is something wrong Timo ? Like missing something or i need to rewrite another funcion ? Tks !!!

2 1

[Dovecot] doveadm delete-user ?
by Jan-Frode Myklebust 04 Nov '11

04 Nov '11

IMHO it would be great if we could both provision and un-provision users without having the provisioning system mess with files in the filesystem. Provisioning new users works fine since dovecot will create all files/directories on first login, but I haven´t found the tools to un-provison them. I see "doveadm mailbox delete" can delete individual mailboxes, but what about indexes, sieve-scripts and home-directories? Are there any tools to clean out these ? -jf

2 3

[Dovecot] Restricting IMAP access
by Thierry de Montaudry 04 Nov '11

04 Nov '11

Hi list, I have a setup with postfix+dovecot+mysql unser CentOS 5, running 50 odd domains with virtual users. Access is allowed for public POP3, and a webmail on apache+PHP solution through local IMAP. I'm not gonna give you the long story about the why, but I'm looking for a way to give public IMAP access only to one domain, knowing that users log in with full email (user(a)domain.tld) Anybody has a trick for that? Running dovecot 2.0.13. I know there should be a way to do it through the database, but quite heavy change on our side for a million odd users. Regards, Thierry

3 2

[Dovecot] Dot Lock timestmap, users disconnections from roundcube
by Maria Arrea 04 Nov '11

04 Nov '11

Hello. We are running dovecot 2.0.13 with mdbox+zlib on RHEL 5.7 x64, ext4. We use NTP. Indexes are in a iSCSI raid 10, mailboxes in raid5. No NFS. We have detected that sometimes all users get disconnected from roundcube at the same time. In dovecot logs we hundreds of lines like this: Nov 3 09:23:07 buzon dovecot: imap(mcrivero@mydomain): Warning: Created dotlock file's timestamp is different than current time (1320308587 vs 1320308542): /buzones/mydomain/03/67/mcrivero/subscriptions Nov 3 09:23:07 buzon dovecot: imap(mcrivero@mydomain): Connection closed bytes=0/295 Nov 3 09:23:07 buzon dovecot: imap(delolmo@mydomain): Warning: Created dotlock file's timestamp is different than current time (1320308587 vs 1320308542): /buzones/mydomain/15/77/delolmo/subscriptions Nov 3 09:23:07 buzon dovecot: imap(delolmo@mydomain): Connection closed bytes=0/295 I have been googling but I only see problems with remote NFS, our setup does not use NFS. I give you doveconf -n output & mount options, if more info es needed, please ask. doveconf -n output # 2.0.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-274.el5 x86_64 Red Hat Enterprise Linux Server release 5.7 (Tikanga) ext4 auth_cache_negative_ttl = 10 secs auth_cache_size = 10 M auth_cache_ttl = 2 mins auth_master_user_separator = * auth_mechanisms = plain login auth_worker_max_count = 3500 base_dir = /var/run/dovecot/ default_client_limit = 5000 default_process_limit = 6500 disable_plaintext_auth = no imap_client_workarounds = tb-extra-mailbox-sep delay-newmail tb-lsub-flags lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_fsync = never mail_gid = entrega mail_home = /buzones/mydomain/%2.26Hn/%2.200Hn/%n/home_usuario/ mail_location = mdbox:/buzones/mydomain/%2.26Hn/%2.200Hn/%n:INDEX=/indices_dovecot/indices/%2.26Hn/%2.200Hn/%n mail_max_userip_connections = 15000 mail_plugins = " zlib acl quota autocreate" mail_uid = entrega managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mdbox_rotate_interval = 1 days mdbox_rotate_size = 60 M passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } passdb { args = /etc/usuario_maestro.txt driver = passwd-file master = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { acl = vfile autocreate = SPAM autocreate2 = Sent autocreate3 = Drafts autocreate4 = Trash autosubscribe = SPAM autosubscribe2 = Sent autosubscribe3 = Drafts autosubscribe4 = Trash lda_mailbox_autosubscribe = yes quota = dict:Cuota de usuario::file:/buzones/cuotas/%n quota_rule2 = Trash:storage=+10%% quota_warning = storage=90%% aviso_cuota 90 %u sieve = /buzones/mydomain/%2.26Hn/%2.200Hn/%n/home_usuario/dovecot.sieve sieve_dir = /buzones/mydomain/%2.26Hn/%2.200Hn/%n/home_usuario/sieve/ zlib_save = gz zlib_save_level = 9 } pop3_no_flag_updates = yes protocols = pop3 imap sieve service anvil { client_limit = 25000 } service auth { client_limit = 28000 unix_listener auth-master { user = entrega } unix_listener auth-userdb { user = entrega } user = root } service aviso_cuota { executable = script /usr/local/bin/quota-warning.sh unix_listener aviso_cuota { mode = 0666 } user = entrega } service imap-login { executable = /usr/libexec/dovecot/imap-login group = dovenull service_count = 0 } service imap { executable = /usr/libexec/dovecot/imap process_limit = 6000 } service managesieve-login { executable = /usr/libexec/dovecot/managesieve-login inet_listener sieve { port = 2000 } process_limit = 2000 } service managesieve { executable = /usr/libexec/dovecot/managesieve process_limit = 5000 } service pop3-login { executable = /usr/libexec/dovecot/pop3-login process_limit = 4000 service_count = 0 } service pop3 { executable = /usr/libexec/dovecot/pop3 process_limit = 4000 } ssl_ca = </etc/pki/generico/cacert.crt.pem ssl_cert = </etc/pki/generico/wildcard-us_es.crt ssl_key = </etc/pki/generico/wildcard-key.pem userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf driver = ldap } verbose_proctitle = yes protocol sieve { managesieve_implementation_string = dovecot managesieve_logout_format = bytes=%i/%o managesieve_max_line_length = 65536 } protocol lda { hostname = mydomain info_log_path = log_path = mail_fsync = optimized mail_plugins = sieve zlib quota postmaster_address = evcorreo@mydomain syslog_facility = mail } protocol imap { mail_plugins = zlib autocreate quota imap_quota } protocol pop3 { mail_plugins = zlib pop3_enable_last = yes pop3_uidl_format = %g } mount points: /dev/mapper/Volumen_0-Logico_0 on / type ext3 (rw) proc on /proc type proc (rw) sysfs on /sys type sysfs (rw) devpts on /dev/pts type devpts (rw,gid=5,mode=620) /dev/sda1 on /boot type ext3 (rw) tmpfs on /dev/shm type tmpfs (rw) none on /proc/sys/fs/binfmt_misc type binfmt_misc (rw) sunrpc on /var/lib/nfs/rpc_pipefs type rpc_pipefs (rw) /dev/mapper/Buzon_mydomain-buzones on /buzones type ext4 (rw,noatime,nodiratime,nobarrier,commit=15,data=writeback) Indexes are located somewhere in "/" mount point.

3 2

[Dovecot] IMP, Dovecot and multiple namespaces
by Rick Romero 04 Nov '11

04 Nov '11

Hey guys, I'm wondering what the best way is to be backwards compatible with Courier mailbox formats and not duplicate mailbox trees with Dovecot. Is anyone doing this right now? My Dovecot 2.0.13 is configured as follows for Namespaces: namespace { inbox = yes location = prefix = separator = . } namespace { hidden = yes inbox = no list = no location = prefix = INBOX. separator = . } So I should have an INBOX, plus additional root folders - rather than the Courier default of all folders being subfolders of the INBOX. So when I run LIST in IMAP I get - 08 LIST "" % * LIST (\HasChildren) "." "INBOX" * LIST (\HasChildren) "." "Spam" * LIST (\HasNoChildren) "." "Sent" * LIST (\HasNoChildren) "." "Trash" * LIST (\HasNoChildren) "." "Junk" * LIST (\HasNoChildren) "." "Drafts" Which looks fine. The problem is, IMP (old and new) show two sets of mailboxes (one for each namespace) like so: INBOX Spam Spam.Over10 Sent INBOX.Spam INBOX.Spam.Over10 INBOX.Sent (etc) I assume IMP is walking the INBOX because it says it has Children, and displaying those Children - The Horde team is telling me that's the root of the problem. It makes sense, but I'm not sure what the real solution is. Is it possible to disable Children for a mailbox when an alternate hidden namespace matches the mailbox name? Does that make sense? Or, is there another option I change change in the dovecot config to accomplish the same? Rick

2 1

[Dovecot] Different default realm per listener
by Kai Arif 04 Nov '11

04 Nov '11

Hi all! I want create a large IMAP server setup where dovecot is listening on multiple interfaces and needs a different default realm on each interface. I'm using dovecot 2.0.5 on FreeBSD9 and authenticate against a LDAP database. I found an old mail thread from 2007 that said I'm basically screwed. Has that change since than? Is there any way to use different default realms per listener? Best regards Kai -- Kai Arif - System Administrator Inter.net Germany GmbH Knesebeckstraße 59-61 10719 Berlin Germany Fon +49 30 25430 0 Fax +49 30 25430 499 arif(a)team.de.inter.net www.de.inter.net Legal-Information: Inter.net Germany GmbH, HRB #79136, Amtsgericht Berlin Charlottenburg, UST-IdNr:: DE 813 165 159 FA für Körperschaften I Berlin, Geschäftsführer: Jörn Lubkoll Zuständige Regulierungsbehörde: Bundesnetzagentur Chemnitz, Liselotte-Herrmann-Str. 20a, 09127 Chemnitz, Registriernummer: 06/164

2 1

[Dovecot] LDAP w/SASL "Active Directory" authentication failing.
by David Varela 04 Nov '11

04 Nov '11

Hello, I am running a Dovecot server (version 1.2.17) on FreeBSD 8.2, using LDAP to authenticate Active Directory users. I can successfully bind and authenticate using PLAIN and LDAP without SASL, but obviously passwords for the bind user and the user being authenticated are being passed in plain text. I've attempted to configure my server to us SASL however when I attempt to authenticate a user I see authentication failures. I reviewed the security log on my domain controller and see that the bind user is binding properly, so the issue appears to be orginating from the user authentication, however I cannot determine what the issue is. Here is all the information regarding my configuration, along with the logs from the server: Dovecot -n # 1.2.17: /usr/local/etc/dovecot.conf # OS: FreeBSD 8.2-RELEASE i386 ufs log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot_info.log protocols: imap pop3 imaps pop3s ssl_cert_file: /etc/ssl/dovecot/cert.pem ssl_key_file: /etc/ssl//dovecot/key.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login valid_chroot_dirs: /usr/data/vmail verbose_proctitle: yes first_valid_uid: 1001 last_valid_uid: 1001 first_valid_gid: 1001 last_valid_gid: 1001 mail_privileged_group: mail mail_location: maildir:/usr/data/vmail/%u mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh lda: sendmail_path: /usr/sbin/sendmail auth default: mechanisms: plain gssapi ntlm login username_format: %Ln winbind_helper_path: /usr/local/bin/ntlm_auth verbose: yes debug: yes debug_passwords: yes use_winbind: yes passdb: driver: ldap args: /usr/local/etc/dovecot-ldap.conf userdb: driver: static args: uid=vmail gid=vmail home=/usr/data/vmail/%u socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 dovecot-ldap.conf hosts = 192.168.0.240:3268 dn = cn=PostfixBind,ou=IT,ou=Central Office,ou=LMC,dc=smallmountain,dc=Local dnpass = y0urm0mma sasl_bind = yes #sasl_mech = GSSAPI #sasl_realm = smallmountain.local #sasl_authz_id = debug_level = -1 #auth_bind = yes ldap_version = 3 base = dc=smallmountain,dc=Local deref = never scope = subtree user_filter = (&(objectClass=person)(mail=%u)) pass_attrs = mail=user pass_filter = (&(objectClass=person)(sAMAccountName=%n)) dovecot.log Nov 01 09:09:48 dovecot: Warning: Killed with signal 15 (by pid=99758 uid=0 code=kill) Nov 01 09:09:48 auth(default): Error: ldap_pvt_sasl_getmech Nov 01 09:09:48 auth(default): Error: ldap_search Nov 01 09:09:48 auth(default): Error: put_filter: "(objectclass=*)" Nov 01 09:09:48 auth(default): Error: put_filter: simple Nov 01 09:09:48 auth(default): Error: put_simple_filter: "objectclass=*" Nov 01 09:09:48 auth(default): Error: ldap_build_search_req ATTRS: supportedSASLMechanisms Nov 01 09:09:48 auth(default): Error: ldap_send_initial_request Nov 01 09:09:48 auth(default): Error: ldap_new_connection 1 1 0 Nov 01 09:09:48 auth(default): Error: ldap_int_open_connection Nov 01 09:09:48 auth(default): Error: ldap_connect_to_host: TCP 192.168.0.240:3268 Nov 01 09:09:48 auth(default): Error: ldap_new_socket: 11 Nov 01 09:09:48 auth(default): Error: ldap_prepare_socket: 11 Nov 01 09:09:48 auth(default): Error: ldap_connect_to_host: Trying 192.168.0.240:3268 Nov 01 09:09:48 auth(default): Error: ldap_pvt_connect: fd: 11 tm: -1 async: 0 Nov 01 09:09:48 auth(default): Error: ldap_open_defconn: successful Nov 01 09:09:48 auth(default): Error: ldap_send_server_request Nov 01 09:09:48 auth(default): Error: ldap_result ld 0x18611700 msgid 1 Nov 01 09:09:48 auth(default): Error: wait4msg ld 0x18611700 msgid 1 (infinite timeout) Nov 01 09:09:48 auth(default): Error: wait4msg continue ld 0x18611700 msgid 1 all 1 Nov 01 09:09:48 auth(default): Error: ** ld 0x18611700 Connections: Nov 01 09:09:48 auth(default): Error: * host: 192.168.0.240 port: 3268 (default) Nov 01 09:09:48 auth(default): Error: refcnt: 2 status: Connected Nov 01 09:09:48 auth(default): Error: last used: Tue Nov 1 09:09:48 2011 Nov 01 09:09:48 auth(default): Error: Nov 01 09:09:48 auth(default): Error: Nov 01 09:09:48 auth(default): Error: ** ld 0x18611700 Outstanding Requests: Nov 01 09:09:48 auth(default): Error: * msgid 1, origid 1, status InProgress Nov 01 09:09:48 auth(default): Error: outstanding referrals 0, parent count 0 Nov 01 09:09:48 auth(default): Error: ld 0x18611700 request count 1 (abandoned 0) Nov 01 09:09:48 auth(default): Error: ** ld 0x18611700 Response Queue: Nov 01 09:09:48 auth(default): Error: Empty Nov 01 09:09:48 auth(default): Error: ld 0x18611700 response count 0 Nov 01 09:09:48 auth(default): Error: ldap_chkResponseList ld 0x18611700 msgid 1 all 1 Nov 01 09:09:48 auth(default): Error: ldap_chkResponseList returns ld 0x18611700 NULL Nov 01 09:09:48 auth(default): Error: ldap_int_select Nov 01 09:09:48 auth(default): Error: read1msg: ld 0x18611700 msgid 1 all 1 Nov 01 09:09:48 auth(default): Error: read1msg: ld 0x18611700 msgid 1 message type search-entry Nov 01 09:09:48 auth(default): Error: wait4msg continue ld 0x18611700 msgid 1 all 1 Nov 01 09:09:48 auth(default): Error: ** ld 0x18611700 Connections: Nov 01 09:09:48 auth(default): Error: * host: 192.168.0.240 port: 3268 (default) Nov 01 09:09:48 auth(default): Error: refcnt: 2 status: Connected Nov 01 09:09:48 auth(default): Error: last used: Tue Nov 1 09:09:48 2011 Nov 01 09:09:48 auth(default): Error: Nov 01 09:09:48 auth(default): Error: Nov 01 09:09:48 auth(default): Error: ** ld 0x18611700 Outstanding Requests: Nov 01 09:09:48 auth(default): Error: * msgid 1, origid 1, status InProgress Nov 01 09:09:48 auth(default): Error: outstanding referrals 0, parent count 0 Nov 01 09:09:48 auth(default): Error: ld 0x18611700 request count 1 (abandoned 0) Nov 01 09:09:48 auth(default): Error: ** ld 0x18611700 Response Queue: Nov 01 09:09:48 auth(default): Error: * msgid 1, type 100 Nov 01 09:09:48 auth(default): Error: ld 0x18611700 response count 1 Nov 01 09:09:48 auth(default): Error: ldap_chkResponseList ld 0x18611700 msgid 1 all 1 Nov 01 09:09:48 auth(default): Error: ldap_chkResponseList returns ld 0x18611700 NULL Nov 01 09:09:48 auth(default): Error: ldap_int_select Nov 01 09:09:48 auth(default): Error: read1msg: ld 0x18611700 msgid 1 all 1 Nov 01 09:09:48 auth(default): Error: read1msg: ld 0x18611700 msgid 1 message type search-result Nov 01 09:09:48 auth(default): Error: read1msg: ld 0x18611700 0 new referrals Nov 01 09:09:48 auth(default): Error: read1msg: mark request completed, ld 0x18611700 msgid 1 Nov 01 09:09:48 auth(default): Error: request done: ld 0x18611700 msgid 1 Nov 01 09:09:48 auth(default): Error: res_errno: 0, res_error: <>, res_matched: <> Nov 01 09:09:48 auth(default): Error: ldap_free_request (origid 1, msgid 1) Nov 01 09:09:48 auth(default): Error: adding response ld 0x18611700 msgid 1 type 101: Nov 01 09:09:48 auth(default): Error: ldap_parse_result Nov 01 09:09:48 auth(default): Error: ldap_get_values Nov 01 09:09:48 auth(default): Error: ldap_msgfree Nov 01 09:09:48 auth(default): Error: ldap_sasl_interactive_bind: server supports: GSSAPI GSS-SPNEGO EXTERNAL DIGEST-MD5 Nov 01 09:09:48 auth(default): Error: ldap_int_sasl_bind: GSSAPI GSS-SPNEGO EXTERNAL DIGEST-MD5 Nov 01 09:09:48 auth(default): Error: ldap_int_sasl_open: host=adminserver-1.smallmountain.local Nov 01 09:09:48 auth(default): Error: ldap_sasl_bind Nov 01 09:09:48 auth(default): Error: ldap_send_initial_request Nov 01 09:09:48 auth(default): Error: ldap_send_server_request Nov 01 09:09:48 auth(default): Error: ldap_msgfree Nov 01 09:09:48 auth(default): Error: ldap_result ld 0x18611700 msgid 2 Nov 01 09:09:48 auth(default): Error: wait4msg ld 0x18611700 msgid 2 (infinite timeout) Nov 01 09:09:48 auth(default): Error: wait4msg continue ld 0x18611700 msgid 2 all 1 Nov 01 09:09:48 auth(default): Error: ** ld 0x18611700 Connections: Nov 01 09:09:48 auth(default): Error: * host: 192.168.0.240 port: 3268 (default) Nov 01 09:09:48 auth(default): Error: refcnt: 2 status: Connected Nov 01 09:09:48 auth(default): Error: last used: Tue Nov 1 09:09:48 2011 Nov 01 09:09:48 auth(default): Error: Nov 01 09:09:48 auth(default): Error: Nov 01 09:09:48 auth(default): Error: ** ld 0x18611700 Outstanding Requests: Nov 01 09:09:48 auth(default): Error: * msgid 2, origid 2, status InProgress Nov 01 09:09:48 auth(default): Error: outstanding referrals 0, parent count 0 Nov 01 09:09:48 auth(default): Error: ld 0x18611700 request count 1 (abandoned 0) Nov 01 09:09:48 auth(default): Error: ** ld 0x18611700 Response Queue: Nov 01 09:09:48 auth(default): Error: Empty Nov 01 09:09:48 auth(default): Error: ld 0x18611700 response count 0 Nov 01 09:09:48 auth(default): Error: ldap_chkResponseList ld 0x18611700 msgid 2 all 1 Nov 01 09:09:48 auth(default): Error: ldap_chkResponseList returns ld 0x18611700 NULL Nov 01 09:09:48 auth(default): Error: ldap_int_select Nov 01 09:09:48 auth(default): Error: read1msg: ld 0x18611700 msgid 2 all 1 Nov 01 09:09:48 auth(default): Error: read1msg: ld 0x18611700 msgid 2 message type bind Nov 01 09:09:48 auth(default): Error: read1msg: ld 0x18611700 0 new referrals Nov 01 09:09:48 auth(default): Error: read1msg: mark request completed, ld 0x18611700 msgid 2 Nov 01 09:09:48 auth(default): Error: request done: ld 0x18611700 msgid 2 Nov 01 09:09:48 auth(default): Error: res_errno: 14, res_error: <>, res_matched: <> Nov 01 09:09:48 auth(default): Error: ldap_free_request (origid 2, msgid 2) Nov 01 09:09:48 auth(default): Error: ldap_int_sasl_bind: <null> Nov 01 09:09:48 auth(default): Error: ldap_parse_sasl_bind_result Nov 01 09:09:48 auth(default): Error: ldap_parse_result Nov 01 09:09:48 auth(default): Error: sasl_client_step: 2 Nov 01 09:09:48 auth(default): Error: sasl_client_step: 1 Nov 01 09:09:48 auth(default): Error: ldap_sasl_bind Nov 01 09:09:48 auth(default): Error: ldap_send_initial_request Nov 01 09:09:48 auth(default): Error: ldap_send_server_request Nov 01 09:09:48 auth(default): Error: ldap_msgfree Nov 01 09:09:48 auth(default): Error: ldap_result ld 0x18611700 msgid 3 Nov 01 09:09:48 auth(default): Error: wait4msg ld 0x18611700 msgid 3 (infinite timeout) Nov 01 09:09:48 auth(default): Error: wait4msg continue ld 0x18611700 msgid 3 all 1 Nov 01 09:09:48 auth(default): Error: ** ld 0x18611700 Connections: Nov 01 09:09:48 auth(default): Error: * host: 192.168.0.240 port: 3268 (default) Nov 01 09:09:48 auth(default): Error: refcnt: 2 status: Connected Nov 01 09:09:48 auth(default): Error: last used: Tue Nov 1 09:09:48 2011 Nov 01 09:09:48 auth(default): Error: Nov 01 09:09:48 auth(default): Error: Nov 01 09:09:48 auth(default): Error: ** ld 0x18611700 Outstanding Requests: Nov 01 09:09:48 auth(default): Error: * msgid 3, origid 3, status InProgress Nov 01 09:09:48 auth(default): Error: outstanding referrals 0, parent count 0 Nov 01 09:09:48 auth(default): Error: ld 0x18611700 request count 1 (abandoned 0) Nov 01 09:09:48 auth(default): Error: ** ld 0x18611700 Response Queue: Nov 01 09:09:48 auth(default): Error: Empty Nov 01 09:09:48 auth(default): Error: ld 0x18611700 response count 0 Nov 01 09:09:48 auth(default): Error: ldap_chkResponseList ld 0x18611700 msgid 3 all 1 Nov 01 09:09:48 auth(default): Error: ldap_chkResponseList returns ld 0x18611700 NULL Nov 01 09:09:48 auth(default): Error: ldap_int_select Nov 01 09:09:48 auth(default): Error: read1msg: ld 0x18611700 msgid 3 all 1 Nov 01 09:09:48 auth(default): Error: read1msg: ld 0x18611700 msgid 3 message type bind Nov 01 09:09:48 auth(default): Error: read1msg: ld 0x18611700 0 new referrals Nov 01 09:09:48 auth(default): Error: read1msg: mark request completed, ld 0x18611700 msgid 3 Nov 01 09:09:48 auth(default): Error: request done: ld 0x18611700 msgid 3 Nov 01 09:09:48 auth(default): Error: res_errno: 14, res_error: <>, res_matched: <> Nov 01 09:09:48 auth(default): Error: ldap_free_request (origid 3, msgid 3) Nov 01 09:09:48 auth(default): Error: ldap_int_sasl_bind: <null> Nov 01 09:09:48 auth(default): Error: ldap_parse_sasl_bind_result Nov 01 09:09:48 auth(default): Error: ldap_parse_result Nov 01 09:09:48 auth(default): Error: sasl_client_step: 0 Nov 01 09:09:48 auth(default): Error: ldap_sasl_bind Nov 01 09:09:48 auth(default): Error: ldap_send_initial_request Nov 01 09:09:48 auth(default): Error: ldap_send_server_request Nov 01 09:09:48 auth(default): Error: ldap_msgfree Nov 01 09:09:48 auth(default): Error: ldap_result ld 0x18611700 msgid 4 Nov 01 09:09:48 auth(default): Error: wait4msg ld 0x18611700 msgid 4 (infinite timeout) Nov 01 09:09:48 auth(default): Error: wait4msg continue ld 0x18611700 msgid 4 all 1 Nov 01 09:09:48 auth(default): Error: ** ld 0x18611700 Connections: Nov 01 09:09:48 auth(default): Error: * host: 192.168.0.240 port: 3268 (default) Nov 01 09:09:48 auth(default): Error: refcnt: 2 status: Connected Nov 01 09:09:48 auth(default): Error: last used: Tue Nov 1 09:09:48 2011 Nov 01 09:09:48 auth(default): Error: Nov 01 09:09:48 auth(default): Error: Nov 01 09:09:48 auth(default): Error: ** ld 0x18611700 Outstanding Requests: Nov 01 09:09:48 auth(default): Error: * msgid 4, origid 4, status InProgress Nov 01 09:09:48 auth(default): Error: outstanding referrals 0, parent count 0 Nov 01 09:09:48 auth(default): Error: ld 0x18611700 request count 1 (abandoned 0) Nov 01 09:09:48 auth(default): Error: ** ld 0x18611700 Response Queue: Nov 01 09:09:48 auth(default): Error: Empty Nov 01 09:09:48 auth(default): Error: ld 0x18611700 response count 0 Nov 01 09:09:48 auth(default): Error: ldap_chkResponseList ld 0x18611700 msgid 4 all 1 Nov 01 09:09:48 auth(default): Error: ldap_chkResponseList returns ld 0x18611700 NULL Nov 01 09:09:48 auth(default): Error: ldap_int_select Nov 01 09:09:48 auth(default): Error: read1msg: ld 0x18611700 msgid 4 all 1 Nov 01 09:09:48 auth(default): Error: read1msg: ld 0x18611700 msgid 4 message type bind Nov 01 09:09:48 auth(default): Error: read1msg: ld 0x18611700 0 new referrals Nov 01 09:09:48 auth(default): Error: read1msg: mark request completed, ld 0x18611700 msgid 4 Nov 01 09:09:48 auth(default): Error: request done: ld 0x18611700 msgid 4 Nov 01 09:09:48 auth(default): Error: res_errno: 0, res_error: <>, res_matched: <> Nov 01 09:09:48 auth(default): Error: ldap_free_request (origid 4, msgid 4) Nov 01 09:09:48 auth(default): Error: ldap_int_sasl_bind: <null> Nov 01 09:09:48 auth(default): Error: ldap_parse_sasl_bind_result Nov 01 09:09:48 auth(default): Error: ldap_parse_result Nov 01 09:09:48 auth(default): Error: ldap_pvt_sasl_generic_install Nov 01 09:09:48 auth(default): Error: ldap_msgfree Nov 01 09:10:13 auth(default): Error: ldap_search Nov 01 09:10:13 auth(default): Error: put_filter: "(&(objectClass=person)(sAMAccountName=davidv))" Nov 01 09:10:13 auth(default): Error: put_filter: AND Nov 01 09:10:13 auth(default): Error: put_filter_list "(objectClass=person)(sAMAccountName=davidv)" Nov 01 09:10:13 auth(default): Error: put_filter: "(objectClass=person)" Nov 01 09:10:13 auth(default): Error: put_filter: simple Nov 01 09:10:13 auth(default): Error: put_simple_filter: "objectClass=person" Nov 01 09:10:13 auth(default): Error: put_filter: "(sAMAccountName=davidv)" Nov 01 09:10:13 auth(default): Error: put_filter: simple Nov 01 09:10:13 auth(default): Error: put_simple_filter: "sAMAccountName=davidv" Nov 01 09:10:13 auth(default): Error: ldap_build_search_req ATTRS: mail Nov 01 09:10:13 auth(default): Error: ldap_send_initial_request Nov 01 09:10:13 auth(default): Error: ldap_send_server_request Nov 01 09:10:13 auth(default): Error: ldap_result ld 0x18611700 msgid -1 Nov 01 09:10:13 auth(default): Error: wait4msg ld 0x18611700 msgid -1 (timeout 0 usec) Nov 01 09:10:13 auth(default): Error: wait4msg continue ld 0x18611700 msgid -1 all 1 Nov 01 09:10:13 auth(default): Error: ** ld 0x18611700 Connections: Nov 01 09:10:13 auth(default): Error: * host: 192.168.0.240 port: 3268 (default) Nov 01 09:10:13 auth(default): Error: refcnt: 2 status: Connected Nov 01 09:10:13 auth(default): Error: last used: Tue Nov 1 09:10:13 2011 Nov 01 09:10:13 auth(default): Error: Nov 01 09:10:13 auth(default): Error: Nov 01 09:10:13 auth(default): Error: ** ld 0x18611700 Outstanding Requests: Nov 01 09:10:13 auth(default): Error: * msgid 5, origid 5, status InProgress Nov 01 09:10:13 auth(default): Error: outstanding referrals 0, parent count 0 Nov 01 09:10:13 auth(default): Error: ld 0x18611700 request count 1 (abandoned 0) Nov 01 09:10:13 auth(default): Error: ** ld 0x18611700 Response Queue: Nov 01 09:10:13 auth(default): Error: Empty Nov 01 09:10:13 auth(default): Error: ld 0x18611700 response count 0 Nov 01 09:10:13 auth(default): Error: ldap_chkResponseList ld 0x18611700 msgid -1 all 1 Nov 01 09:10:13 auth(default): Error: ldap_chkResponseList returns ld 0x18611700 NULL Nov 01 09:10:13 auth(default): Error: ldap_int_select Nov 01 09:10:13 auth(default): Error: read1msg: ld 0x18611700 msgid -1 all 1 Nov 01 09:10:13 auth(default): Error: read1msg: ld 0x18611700 msgid 5 message type search-entry Nov 01 09:10:13 auth(default): Error: read1msg: ld 0x18611700 msgid 5 message type search-result Nov 01 09:10:13 auth(default): Error: read1msg: ld 0x18611700 0 new referrals Nov 01 09:10:13 auth(default): Error: read1msg: mark request completed, ld 0x18611700 msgid 5 Nov 01 09:10:13 auth(default): Error: request done: ld 0x18611700 msgid 5 Nov 01 09:10:13 auth(default): Error: res_errno: 0, res_error: <>, res_matched: <> Nov 01 09:10:13 auth(default): Error: ldap_free_request (origid 5, msgid 5) Nov 01 09:10:13 auth(default): Error: adding response ld 0x18611700 msgid 5 type 101: Nov 01 09:10:13 auth(default): Error: ldap_parse_result Nov 01 09:10:13 auth(default): Error: ldap_first_attribute Nov 01 09:10:13 auth(default): Error: ldap_get_values Nov 01 09:10:13 auth(default): Error: ldap_next_attribute Nov 01 09:10:13 auth(default): Error: ldap_msgfree Nov 01 09:10:13 auth(default): Error: ldap_result ld 0x18611700 msgid -1 Nov 01 09:10:13 auth(default): Error: wait4msg ld 0x18611700 msgid -1 (timeout 0 usec) Nov 01 09:10:13 auth(default): Error: wait4msg continue ld 0x18611700 msgid -1 all 1 Nov 01 09:10:13 auth(default): Error: ** ld 0x18611700 Connections: Nov 01 09:10:13 auth(default): Error: * host: 192.168.0.240 port: 3268 (default) Nov 01 09:10:13 auth(default): Error: refcnt: 1 status: Connected Nov 01 09:10:13 auth(default): Error: last used: Tue Nov 1 09:10:13 2011 Nov 01 09:10:13 auth(default): Error: Nov 01 09:10:13 auth(default): Error: Nov 01 09:10:13 auth(default): Error: ** ld 0x18611700 Outstanding Requests: Nov 01 09:10:13 auth(default): Error: Empty Nov 01 09:10:13 auth(default): Error: ld 0x18611700 request count 0 (abandoned 0) Nov 01 09:10:13 auth(default): Error: ** ld 0x18611700 Response Queue: Nov 01 09:10:13 auth(default): Error: Empty Nov 01 09:10:13 auth(default): Error: ld 0x18611700 response count 0 Nov 01 09:10:13 auth(default): Error: ldap_chkResponseList ld 0x18611700 msgid -1 all 1 Nov 01 09:10:13 auth(default): Error: ldap_chkResponseList returns ld 0x18611700 NULL Nov 01 09:10:13 auth(default): Error: ldap_int_select Nov 01 09:13:26 auth(default): Error: ldap_search Nov 01 09:13:26 auth(default): Error: put_filter: "(&(objectClass=person)(sAMAccountName=davidv))" Nov 01 09:13:26 auth(default): Error: put_filter: AND Nov 01 09:13:26 auth(default): Error: put_filter_list "(objectClass=person)(sAMAccountName=davidv)" Nov 01 09:13:26 auth(default): Error: put_filter: "(objectClass=person)" Nov 01 09:13:26 auth(default): Error: put_filter: simple Nov 01 09:13:26 auth(default): Error: put_simple_filter: "objectClass=person" Nov 01 09:13:26 auth(default): Error: put_filter: "(sAMAccountName=davidv)" Nov 01 09:13:26 auth(default): Error: put_filter: simple Nov 01 09:13:26 auth(default): Error: put_simple_filter: "sAMAccountName=davidv" Nov 01 09:13:26 auth(default): Error: ldap_build_search_req ATTRS: mail Nov 01 09:13:26 auth(default): Error: ldap_send_initial_request Nov 01 09:13:26 auth(default): Error: ldap_send_server_request Nov 01 09:13:26 auth(default): Error: ldap_result ld 0x18611700 msgid -1 Nov 01 09:13:26 auth(default): Error: wait4msg ld 0x18611700 msgid -1 (timeout 0 usec) Nov 01 09:13:26 auth(default): Error: wait4msg continue ld 0x18611700 msgid -1 all 1 Nov 01 09:13:26 auth(default): Error: ** ld 0x18611700 Connections: Nov 01 09:13:26 auth(default): Error: * host: 192.168.0.240 port: 3268 (default) Nov 01 09:13:26 auth(default): Error: refcnt: 2 status: Connected Nov 01 09:13:26 auth(default): Error: last used: Tue Nov 1 09:13:26 2011 Nov 01 09:13:26 auth(default): Error: Nov 01 09:13:26 auth(default): Error: Nov 01 09:13:26 auth(default): Error: ** ld 0x18611700 Outstanding Requests: Nov 01 09:13:26 auth(default): Error: * msgid 6, origid 6, status InProgress Nov 01 09:13:26 auth(default): Error: outstanding referrals 0, parent count 0 Nov 01 09:13:26 auth(default): Error: ld 0x18611700 request count 1 (abandoned 0) Nov 01 09:13:26 auth(default): Error: ** ld 0x18611700 Response Queue: Nov 01 09:13:26 auth(default): Error: Empty Nov 01 09:13:26 auth(default): Error: ld 0x18611700 response count 0 Nov 01 09:13:26 auth(default): Error: ldap_chkResponseList ld 0x18611700 msgid -1 all 1 Nov 01 09:13:26 auth(default): Error: ldap_chkResponseList returns ld 0x18611700 NULL Nov 01 09:13:26 auth(default): Error: ldap_int_select Nov 01 09:13:26 auth(default): Error: read1msg: ld 0x18611700 msgid -1 all 1 Nov 01 09:13:26 auth(default): Error: read1msg: ld 0x18611700 msgid 6 message type search-entry Nov 01 09:13:26 auth(default): Error: read1msg: ld 0x18611700 msgid 6 message type search-result Nov 01 09:13:26 auth(default): Error: read1msg: ld 0x18611700 0 new referrals Nov 01 09:13:26 auth(default): Error: read1msg: mark request completed, ld 0x18611700 msgid 6 Nov 01 09:13:26 auth(default): Error: request done: ld 0x18611700 msgid 6 Nov 01 09:13:26 auth(default): Error: res_errno: 0, res_error: <>, res_matched: <> Nov 01 09:13:26 auth(default): Error: ldap_free_request (origid 6, msgid 6) Nov 01 09:13:26 auth(default): Error: adding response ld 0x18611700 msgid 6 type 101: Nov 01 09:13:26 auth(default): Error: ldap_parse_result Nov 01 09:13:26 auth(default): Error: ldap_first_attribute Nov 01 09:13:26 auth(default): Error: ldap_get_values Nov 01 09:13:26 auth(default): Error: ldap_next_attribute Nov 01 09:13:26 auth(default): Error: ldap_msgfree Nov 01 09:13:26 auth(default): Error: ldap_result ld 0x18611700 msgid -1 Nov 01 09:13:26 auth(default): Error: wait4msg ld 0x18611700 msgid -1 (timeout 0 usec) Nov 01 09:13:26 auth(default): Error: wait4msg continue ld 0x18611700 msgid -1 all 1 Nov 01 09:13:26 auth(default): Error: ** ld 0x18611700 Connections: Nov 01 09:13:26 auth(default): Error: * host: 192.168.0.240 port: 3268 (default) Nov 01 09:13:26 auth(default): Error: refcnt: 1 status: Connected Nov 01 09:13:26 auth(default): Error: last used: Tue Nov 1 09:13:26 2011 Nov 01 09:13:26 auth(default): Error: Nov 01 09:13:26 auth(default): Error: Nov 01 09:13:26 auth(default): Error: ** ld 0x18611700 Outstanding Requests: Nov 01 09:13:26 auth(default): Error: Empty Nov 01 09:13:26 auth(default): Error: ld 0x18611700 request count 0 (abandoned 0) Nov 01 09:13:26 auth(default): Error: ** ld 0x18611700 Response Queue: Nov 01 09:13:26 auth(default): Error: Empty Nov 01 09:13:26 auth(default): Error: ld 0x18611700 response count 0 Nov 01 09:13:26 auth(default): Error: ldap_chkResponseList ld 0x18611700 msgid -1 all 1 Nov 01 09:13:26 auth(default): Error: ldap_chkResponseList returns ld 0x18611700 NULL Nov 01 09:13:26 auth(default): Error: ldap_int_select dovecot_info.log Nov 01 09:09:48 dovecot: Info: Dovecot v1.2.17 starting up Nov 01 09:09:49 auth(default): Info: new auth connection: pid=99773 Nov 01 09:09:49 auth(default): Info: new auth connection: pid=99774 Nov 01 09:09:49 auth(default): Info: new auth connection: pid=99775 Nov 01 09:09:49 auth(default): Info: new auth connection: pid=99776 Nov 01 09:09:49 auth(default): Info: new auth connection: pid=99777 Nov 01 09:09:49 auth(default): Info: new auth connection: pid=99778 Nov 01 09:10:09 auth(default): Info: new auth connection: pid=99782 Nov 01 09:10:13 auth(default): Info: client in: AUTH 1 PLAIN service=imap secured lip=127.0.0.1 rip=127.0.0.1 lport=993 rport=55010 resp=AGRhdmlkdgBlbGkqNDJ0dW4= Nov 01 09:10:13 auth(default): Info: ldap(davidv,127.0.0.1): pass search: base=dc=smallmountain,dc=Local scope=subtree filter=(&(objectClass=person)(sAMAccountName=davidv)) fields=mail Nov 01 09:10:13 auth(default): Info: auth(davidv,127.0.0.1): username changed davidv -> davidv(a)smallmountain.net Nov 01 09:10:13 auth(default): Info: ldap(davidv(a)smallmountain.net,127.0.0.1): result: mail(user)=davidv(a)smallmountain.net Nov 01 09:10:13 auth(default): Info: ldap(davidv(a)smallmountain.net,127.0.0.1): No password returned (and no nopassword) Nov 01 09:10:15 auth(default): Info: client out: FAIL 1 user=davidv(a)smallmountain.net Nov 01 09:13:13 imap-login: Info: Disconnected: Inactivity (auth failed, 1 attempts): user=<davidv(a)smallmountain.net>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, TLS Nov 01 09:13:21 auth(default): Info: new auth connection: pid=99797 Nov 01 09:13:26 auth(default): Info: client in: AUTH 1 PLAIN service=imap secured lip=127.0.0.1 rip=127.0.0.1 lport=993 rport=61080 resp=AGRhdmlkdgBlbGkqNDJ0dW4= Nov 01 09:13:26 auth(default): Info: ldap(davidv,127.0.0.1): pass search: base=dc=smallmountain,dc=Local scope=subtree filter=(&(objectClass=person)(sAMAccountName=davidv)) fields=mail Nov 01 09:13:26 auth(default): Info: auth(davidv,127.0.0.1): username changed davidv -> davidv(a)smallmountain.net Nov 01 09:13:26 auth(default): Info: ldap(davidv(a)smallmountain.net,127.0.0.1): result: mail(user)=davidv(a)smallmountain.net Nov 01 09:13:26 auth(default): Info: ldap(davidv(a)smallmountain.net,127.0.0.1): No password returned (and no nopassword) Nov 01 09:13:28 auth(default): Info: client out: FAIL 1 user=davidv(a)smallmountain.net Nov 01 09:13:36 imap-login: Info: Aborted login (auth failed, 1 attempts): user=<davidv(a)smallmountain.net>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, TLS Your assistance is greatly appreciated, David

2 1

[Dovecot] post login script
by Osvaldo Alvarez Pozo 04 Nov '11

04 Nov '11

Hello all, I am testing postlogin script with dovecot 2. I works but i would like that the imap and pop session get executed even if the post-login script fail. my postlogin script is very simple: #/etc/dovecot/conf.d/10-master.conf service imap { executable = imap imap-postlogin } # service imap-postlogin { executable = script-login /usr/local/bin/postlogin.sh unix_listener imap-postlogin { } } service pop3 { executable = pop3 imap-postlogin } #/usr/local/bin/postlogin.sh echo "UPDATE mailbox SET last_login = now() WHERE username = '$USER'" | mysql -upostlogin -pXXXXXXXX postfixadmin exec "$@" Thanks in advance Osvaldo

3 4

[Dovecot] What owner/permissions for virtual homes?
by sean darcy 04 Nov '11

04 Nov '11

VirtualUsers.Home.txt: The directory layouts for home and mail directories could look like one of these (in the preferred order): 1. Mail directory under home, for example: home='/var/vmail/domain/user/' mail='/var/vmail/domain/user/mail/' Who should be the owner of these directories, with that permissions? Does it make a difference if it's /home/vmail rather than /var/vmail? Thanks, Jay

2 2

[Dovecot] doveadm 'proxy list' or 'who' not working ?
by de Lafond Guillaume 04 Nov '11

04 Nov '11

Hi, I switched from dovecot 1.2.* to 2.0.* for a mail proxy. I try to play with the new cool utility doveadm, but I don't manage to get results from it. # /usr/local/dovecot-2.0.15/bin/doveadm proxy list username proto src ip dest ip port # As 'proxy list' does not return anything, I tried with 'who' # /usr/local/dovecot-2.0.15/bin/doveadm who -a /var/run/dovecot-socket-auth/anvil username # proto (pids) (ips) # I think it should display something as I have many user connected : #ps axww | grep imap ... 21194 ? S 0:11 dovecot/imap-login [13 connections (8 TLS)] 21195 ? S 3:38 dovecot/imap-login [47 connections (38 TLS)] 29463 ? S 1:00 dovecot/imap-login [210 connections (183 TLS)] ... I should have something that is not well configured.. but I don't manage to find it. Does anybody have an idea where I should look to solve this ? Here is my dovecot.conf : # /usr/local/dovecot-2.0.15/bin/doveadm config # 2.0.15: /usr/local/dovecot-2.0.15/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.2 auth_anonymous_username = anonymous auth_cache_negative_ttl = 0 auth_cache_size = 1 k auth_cache_ttl = 15 mins auth_debug = no auth_debug_passwords = no auth_default_realm = auth_failure_delay = 2 secs auth_first_valid_uid = 500 auth_gssapi_hostname = auth_krb5_keytab = auth_last_valid_uid = 0 auth_master_user_separator = auth_mechanisms = plain login apop cram-md5 auth_realms = auth_socket_path = auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = auth_username_translation = auth_verbose = no auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 30 base_dir = /var/run/dovecot-proxy config_cache_size = 1 M debug_log_path = default_client_limit = 1000 default_idle_kill = 60 default_internal_user = dovecot default_login_user = dovenull default_process_limit = 100 default_vsz_limit = 256 M deliver_log_format = msgid=%m: %$ dict_db_config = director_doveadm_port = 0 director_mail_servers = director_servers = director_user_expire = 15 mins disable_plaintext_auth = no dotlock_use_excl = yes doveadm_allowed_commands = doveadm_password = doveadm_proxy_port = 0 doveadm_socket_path = doveadm-server doveadm_worker_count = 0 first_valid_gid = 1 first_valid_uid = 89 hostname = imap_capability = imap_client_workarounds = imap_id_log = imap_id_send = imap_idle_notify_interval = 2 mins imap_logout_format = bytes=%i/%o imap_max_line_length = 64 k import_environment = TZ info_log_path = /var/log/mail/dovecot_info-proxy.log last_valid_gid = 0 last_valid_uid = 0 lda_mailbox_autocreate = no lda_mailbox_autosubscribe = no lda_original_recipient_header = libexec_dir = /usr/local/dovecot-2.0.15/libexec/dovecot listen = * lmtp_proxy = no lmtp_save_to_detail_mailbox = no lock_method = fcntl log_path = /var/log/mail/dovecot-proxy.log log_timestamp = "%b %d %H:%M:%S " login_access_sockets = login_greeting = Proxy POP/IMAP login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c login_trusted_networks = mail_access_groups = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_cache_fields = flags mail_cache_min_mail_count = 0 mail_chroot = mail_debug = no mail_fsync = optimized mail_full_filesystem_access = no mail_gid = mail_home = mail_location = mail_log_prefix = "%s(%u): " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 10 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /usr/local/dovecot-2.0.15/lib/dovecot mail_plugins = mail_privileged_group = mail_save_crlf = no mail_temp_dir = /tmp mail_uid = mailbox_idle_check_interval = 30 secs mailbox_list_index_disable = no maildir_copy_with_hardlinks = yes maildir_stat_dirs = no maildir_very_dirty_syncs = no master_user_separator = mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = dotlock fcntl mdbox_preallocate_space = no mdbox_rotate_interval = 0 mdbox_rotate_size = 2 M mmap_disable = yes namespace { hidden = no inbox = yes list = yes location = prefix = separator = / subscriptions = yes type = private } namespace { hidden = yes inbox = no list = no location = prefix = INBOX/ separator = / subscriptions = yes type = private } passdb { args = /usr/local/dovecot/etc/dovecot-sql-proxy.conf deny = no driver = sql master = no pass = no } plugin { quota = maildir } pop3_client_workarounds = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_format = %08Xu%08Xv postmaster_address = protocols = imap pop3 quota_full_tempfail = no recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s sendmail_path = /usr/sbin/sendmail service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 4096 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener auth-client { group = mode = 0600 user = } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = } unix_listener auth-userdb { group = mode = 0600 user = } unix_listener login/login { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } unix_listener login/dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 256 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = * port = 143 ssl = no } inet_listener imaps { address = * port = 993 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 20 protocol = imap service_count = 0 type = login user = mail vsz_limit = 64 M } service imap { chroot = client_limit = 1 drop_priv_before_exec = yes executable = imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 256 M } service ipc { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = ipc extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener ipc { group = mode = 0600 user = } unix_listener login/ipc-proxy { group = mode = 0600 user = $default_login_user } user = $default_internal_user vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 0 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 0 } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log user = vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 256 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = * port = 110 ssl = no } inet_listener pop3s { address = * port = 995 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 20 protocol = pop3 service_count = 0 type = login user = mail vsz_limit = 64 M } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = yes executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 256 M } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_ca = </etc/ssl/certificat_2011/ssl.inter.crt ssl_cert = </etc/ssl/certificat_2011/ssl.crt ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL ssl_key = </etc/ssl/certificat_2011/ssl.key ssl_key_password = ssl_parameters_regenerate = 168 ssl_verify_client_cert = no submission_host = syslog_facility = mail userdb { args = uid=0 gid=0 driver = static } valid_chroot_dirs = verbose_auth = no verbose_proctitle = yes verbose_ssl = no version_ignore = no protocol imap { imap_client_workarounds = delay-newmail mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %f } -- de Lafond Guillaume

2 1

[Dovecot] POP server migration and duplicate messages.
by Ernie Dunbar 04 Nov '11

04 Nov '11

I'm having trouble with Dovecot where my mail client (if it matters, I'm using Evolution) collects some duplicate messages when switching between POP servers that have the same messages on them. I'm doing this as a test for server migration for all of our clients. Here's my procedure: 1. set up Dovecot and Exim on the new server so that everything works like on the old server. The old server also uses Dovecot and Exim, so very few things changed. 2. On the new server, use NFS to access the users' Maildirs on a remote NFS server. 3. Sync the Maildirs on the NFS store from the old server with SCP (and I do a quick SCP sync on my own Maildir during testing to ensure that this process is quick). 4. Check mail in Evolution on the old server. 5. Change Evolution's server settings to use the new server. 6. Check mail again. Evolution is set to keep messages on the server for one week, and about 20 of the 184 messages on the server keep getting re-downloaded. From a random sampling, the UIDL of the messages checks out between both servers, so I really don't understand what's going on here. If this is just a bug in Evolution, then that means I can just go ahead with the full migration and hope that people aren't going to be stuck with re-downloading their entire mailbox which in some cases, means hundreds or thousands of messages.

2 1

[Dovecot] GSSAPI and deny=yes passdb
by Sergey Urushkin 04 Nov '11

04 Nov '11

Hi. Is it possible to use GSSAPI authentication and deny passdb together? Seems it doesn't work as I expect: GSSAPI doesn't check deny passdb, so I'm not able to restrict access to GSSAPI-users. I can see these in logs when user tries to connect with PLAIN authentication (via pam_krb5): Oct 4 11:14:31 vm03 auth: Debug: passwd-file(testuser,172.17.0.123): lookup: user=testuser file=/etc/dovecot/auth.d/.passwd-deny Oct 4 11:14:31 vm03 dovecot: auth: passdb(tesetuser,172.17.0.123): User found from deny passdb But that's what I see if user logs in with GSSAPI: ... Oct 4 11:21:38 vm03 dovecot: auth: Debug: gssapi(testuser(a)REALM.LAN,172.17.0.123): Negotiated security layer Oct 4 11:21:38 vm03 dovecot: auth: Debug: client out: CONT#0111#011BQQF/wAMAAAAAAAAKSUwaQH///+3JRmZMw01WMX+CHM= Oct 4 11:21:38 vm03 dovecot: auth: Debug: client in: CONT<hidden> Oct 4 11:21:38 vm03 dovecot: auth: Debug: client out: OK#0111#011user=testuser Oct 4 11:21:38 vm03 dovecot: auth: Debug: passwd-file(testuser,172.17.0.123): lookup: user=testuser file=/etc/dovecot/auth.d/.passwd-ldap Oct 4 11:21:38 vm03 dovecot: auth: Debug: master out: USER#0111632763905#011testuser#011home=/var/mail/realm.lan/testuser Oct 4 11:21:38 vm03 dovecot: imap-login: Login: user=<testuser>, method=GSSAPI, rip=172.17.0.123, lip=172.25.0.35, mpid=1085 Here is my auth configuration: auth_mechanisms = plain login apop gssapi # Kerberos auth_realms = REALM.LAN auth_gssapi_hostname = vm03.realm.lan auth_krb5_keytab = /etc/dovecot/dovecot.keytab ###### # PASSDB # Denied users passdb { driver = passwd-file deny = yes args = username_format=%n /etc/dovecot/auth.d/%d.passwd-deny } # Internal manual passwd-file passdb { driver = passwd-file args = scheme=CRAM-MD5 username_format=%n /etc/dovecot/auth.d/%d.passwd # override_fields = allow_nets=127.0.0.0/8,172.16.0.0/12 } # External passwd-file passdb { driver = passwd-file args = scheme=CRAM-MD5 username_format=%n /etc/dovecot/auth.d/%d.passwd-ext } # Internal kerberos pam passdb { driver = pam args = max_requests=100 cache_key=%u%r dovecot # override_fields = allow_nets=127.0.0.0/8,172.16.0.0/12 } ###### #USERDB # Manual passwd-file userdb { driver = passwd-file args = username_format=%n /etc/dovecot/auth.d/%d.passwd # default_fields = home=/var/mail/%d/%n } # External passwd-file userdb { driver = passwd-file args = username_format=%n /etc/dovecot/auth.d/%d.passwd-ext # default_fields = home=/var/mail/%d/%n } # Automatic passwd-file, imported from LDAP. UserDB only userdb { driver = passwd-file args = username_format=%n /etc/dovecot/auth.d/%d.passwd-ldap # default_fields = home=/var/mail/%d/%n } ### END #### /etc/dovecot/auth.d/realm.lan.passwd-ldap: testuser:::::/var/mail/realm.lan/testuser:: testuser2:::::/var/mail/realm.lan/testuser:: ... /etc/dovecot/auth.d/realm.lan.passwd-deny: testuser /etc/dovecot/auth.d/realm.lan.passwd* are symlinked to /etc/dovecot/auth.d/.passwd* to allow users without domain part (auth_default_realm doesnt work with pam) I know that in my case I can just exclude denied users from .passwd-ldap file, and even use .passwd-deny as filter file:) But problem exists and should be solved, I think. Thanks. -- Best regards, Sergey Urushkin

2 2

[Dovecot] dovecot evaluation on a 30 gb mailbox
by Rajesh M 04 Nov '11

04 Nov '11

hi all i use qmail toaster. i recently changed over to dovecot. posting below my evaluation on the same my machine dual core dual xeon 5140 processor, with 4 gb ram, centos linux with qmailtoaster i had setup a qmail tap account which backups up data for a client of mine mailbox size over 30 gb setup dovecot with squirrelmail and logged in it had over one hundred and thirty nine thousand emails 139019 emails in the 30 gb mailbox Reports 1) first login : took 7 minutes to parse 139019 mails but never timed out. this was simply impossible with courier 2) the next login it took 5 seconds by which time the mail numbers increased to 139045 3) next i changed squirrelmail display preference to list 500 mails per page and then clicked on inbox ... expecting dovecot to take atleast around 1-2 mins to show the mails ... the mails were displayed in just 8 seconds .. awesome performance qmailtoaster is simply waiting for a dovecot integration i am evaluating the stability of dovecot now in the next 2-3 weeks i post stability report rajesh

19 43

[Dovecot] Expire plugin not executing for sieve plugin?
by Dan Swartzendruber 04 Nov '11

04 Nov '11

Running dovecot 1.2.12 on ubuntu 10.10. Here is the problem: I have mysql backend for expire. I am using the dovecot-postfix package which creates /etc/dovecot/conf.d/01-mail-stack-delivery.conf which looks like this: # Some general options protocols = imap imaps managesieve disable_plaintext_auth = no ssl = yes ssl_cert_file = /etc/ssl/certs/ssl-mail.pem ssl_key_file = /etc/ssl/private/ssl-mail.key ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM mail_location = maildir:~/Maildir auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ # IMAP configuration protocol imap { mail_max_userip_connections = 10 imap_client_workarounds = outlook-idle delay-newmail mail_plugins = expire } # LDA configuration protocol lda { postmaster_address = postmaster mail_plugins = sieve expire quota_full_tempfail = yes deliver_log_format = msgid=%m: %$ rejection_reason = Your message to <%t> was automatically rejected:%n%r } # Plugins configuration plugin { sieve=~/.dovecot.sieve sieve_dir=~/sieve # If the user has no personal active script (i.e. if the file # indicated in sieve= does not exist), use this one: sieve_global_path = /var/lib/dovecot/sieve/default.sieve } The sieve is: require "fileinto"; require "imap4flags"; if header :contains "X-Spam-Flag" "YES" { setflag "\\Seen"; fileinto "SPAM"; stop; } Originally, this did not have the setflag or stop - I added them hoping to fix the problem, but no luck. The problem is this: when spam assassin has flagged a message as spam, the sieve runs and the message is in fact filed into the SPAM folder, but no expire entry is added to the database. If I move such a message from the SPAM folder to the Inbox and then back to SPAM, voila, I *do* get the entry created. Here is the mysql table before and after I did the move/move: mysql> select * from expires; +----------+---------------+--------------+ | username | mailbox | expire_stamp | +----------+---------------+--------------+ | dswartz | Deleted Items | 1319720163 | | dswartz | Sent | 1319120165 | | denise | Trash | 1319139920 | | samantha | Trash | 1319136146 | | denise | Sent | 1319655872 | | danielle | Sent | 1319192230 | | samantha | Sent | 1319268855 | | dswartz | Trash | 1319725884 | | samantha | SPAM | 1321504531 | +----------+---------------+--------------+ 9 rows in set (0.00 sec) mysql> select * from expires; +----------+---------------+--------------+ | username | mailbox | expire_stamp | +----------+---------------+--------------+ | dswartz | Deleted Items | 1319720163 | | dswartz | Sent | 1319120165 | | denise | Trash | 1319139920 | | samantha | Trash | 1319136146 | | denise | Sent | 1319655872 | | danielle | Sent | 1319192230 | | samantha | Sent | 1319268855 | | dswartz | Trash | 1319725884 | | samantha | SPAM | 1321504531 | | dswartz | SPAM | 1321714666 | +----------+---------------+--------------+ 10 rows in set (0.00 sec) It's almost like the fileinto stuff is not running the plugin code at all, or am I totally on drugs? If I can't get a fix for this, I at least now can think of a hack to "fix" it. e.g. every night, run a script that adds a "now" timestamp for everyone's SPAM folder to trick the periodic expire tool code into checking that folder, but obviously I'd rather have a real fix :) If this is just 'how it works', is it better in 2.0?

3 3

[Dovecot] iterate_query not working
by Piotr NetExpert 04 Nov '11

04 Nov '11

Hi, I have got iterate_query defined in dovecot-sql.conf.ext. However when I run a command like: doveadm search -A BEFORE 10d I receive an error message (Failed to iterate ...) There is an error message in a log file too: Error: Trying to iterate users, but userdbs don't support it The problem is that monitoring a database server shows that dovecot does not try to execute any query. What I am doing wrong? password_query lookups work fine. -- pozdrawiam Piotr Szafarczyk http://www.netexpert.pl

2 2

[Dovecot] Getting the SMTP envelope through IMAP?
by Hadmut Danisch 04 Nov '11

04 Nov '11

Hi, just a simple question about dovecot: The mbox file format contains the SMTP envelope sender and transmission date in a FROM ... line preceding the RFC822 mail header and body. As far as I see at the moment, the IMAP protocol does not support transmission of that SMTP envelope data in either way, but confusingly uses the term „envelope” for a structure describing the RFC822 mail header. My question is, whether there is any way to retrieve the SMTP envelope through dovecot's IMAP anyway, maybe through some extension. regards Hadmut

5 12

Re: [Dovecot] Auth Worker failures
by Timo Sirainen 04 Nov '11

04 Nov '11

On Wed, 2011-10-12 at 10:24 -0400, Simon Brereton wrote: > > > Of all the accounts on the box, it's only mine that throws this up. > Since its LIP is localhost, it could really only be for webmail - but > I don't always leave the webmail open, so I'm curious to know how this > gets there and what it is. > > Any suggestions? I find it difficult to believe I have an IMAP > process in a script somewhere (especially with my user account - the > postmaster account, I could believe, but not with my personal one).. > You could enable auth_debug_passwords=yes and see what password it tries.

2 2

[Dovecot] doveadm altmove -r
by Lars Täuber 04 Nov '11

04 Nov '11

Hi there, there is the ubuntu version 2.0.13 ov dovecot installed on our server. But in contrast to http://wiki2.dovecot.org/Tools/Doveadm/Altmove the option -r isn't supported in this version. altmove: invalid option -- 'r' doveadm altmove [-u <user>|-A] [-S <socket_path>] <search query> In which version of dovecot is this option supported? Thanks Lars

2 3

Re: [Dovecot] Dot Lock timestmap, users disconnections from roundcube
by Maria Arrea 04 Nov '11

04 Nov '11

We follow the guidelines about timekeeping RHEL in vmware vsphere located here http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=di… These problems happens in peak hours. Any dovecot config parameter I could set to mitigate this problem? Regards Maria ----- Original Message ----- From: Ed W Sent: 11/03/11 11:57 AM To: Maria Arrea, Dovecot Mailing List Subject: Re: [Dovecot] Dot Lock timestmap, users disconnections from roundcube On 03/11/2011 10:49, Maria Arrea wrote: > All the ESXs hosts and all the VM use the same NTP server. > > Any other idea? > Doesn't ESX have issues with the time drifting when certain kernel options are set? Something to do with it rescheduling machines and them not counting idle ticks or something..? Does this problem happen during idle hours or peak hours? I should home in on clock problems... Probably vmware related issues to the kernel you are using? Good luck Ed W

2 1

[Dovecot] Difference between LOGIN and PLAIN
by Simon Brereton 04 Nov '11

04 Nov '11

Hi Could someone explain to me the difference between LOGIN and PLAIN? I've been googling for a while, but haven't found anything. Thanks. Simon

4 6

[Dovecot] How can we horizontally scale Dovecot across multiple servers?
by Arlin 04 Nov '11

04 Nov '11

Hi, How can we horizontally scale Dovecot across multiple servers? Do we require to install independent instances of Dovecot on each server? We are planning to use a NAS/SAN device using ZFS or EFS for email storage. Each logical unit will be of 10TB and similarly as the no: of user increases we are planning to add multiple 10TB units. In this case how we can manage the email storage on multiple volumes from Dovecot. The configuration of our existing system is:- Dovecot 1.0.15 / Maildirs Postfix 2.5.5 Debian 5.0.9 (Lenny) MySQL 5.0.15 Please advise. Thanks in advance. Creative Regards, Arlin

2 1

[Dovecot] looking for Dovecot-code + SQL consultants
by Rich 03 Nov '11

03 Nov '11

Hi, We're using Dovecot2. Trying, given our own spread-too-thin bandwidth, to make it work within our evolving SQL application environment. When there's a problem, we post to this list (e.g., http://www.dovecot.org/list/dovecot/2011-October/061609.html) but aren't getting any/timely responses. We've decided to look for a consultant (hourly or retainer) that can be available for working with our in-house staff to straighten these issues out -- by helping us identify & fix our own mess, and by working to get fixes pushed to Dovecot project code, where appropriate. If you provide these services, rather than simply deployment or hosting, and are available, please drop me a line *offlist*. We're in the San Francisco area, and local is best, but remote work is certainly an option. Thanks, Rich

1 1

Re: [Dovecot] Dot Lock timestmap, users disconnections from roundcube
by Maria Arrea 03 Nov '11

03 Nov '11

All the ESXs hosts and all the VM use the same NTP server. Any other idea? Regards Maria ----- Original Message ----- From: Giulio Casella Sent: 11/03/11 11:38 AM To: dovecot(a)dovecot.org Subject: Re: [Dovecot] Dot Lock timestmap, users disconnections from roundcube This could be the problem. Double check the time also on your host system(s), not only on guest. Bye, gc Il 03/11/2011 11.30, Maria Arrea ha scritto: > We use ntpd daemon, all our systems are configured equal. Another thing, this is VM on vmware vsphere 4.1 > > Regards > > Maria > > ----- Original Message ----- > From: Ed W > Sent: 11/03/11 11:25 AM > To: dovecot(a)dovecot.org > Subject: Re: [Dovecot] Dot Lock timestmap, users disconnections from roundcube > > Hi> We are running dovecot 2.0.13 with mdbox+zlib on RHEL 5.7 x64, ext4. We use NTP. Quick check, but by "NTP" you mean the background daemon and you don't have some cron job running ntpdate or similar every so often? No idea, but since it looks like a clock related curiousity, then knowing if the clock is spot on accurate or drifting would be interesting to know? Simple comparison against other machines over a similar period to you having problems might be accurate enough? Good luck Ed W > -- Giulio Casella giulio at dsi.unimi.it System and network manager Computer Science Dept. - University of Milano

2 1

Re: [Dovecot] How can we horizontally scale Dovecot across multiple servers?
by Arlin 03 Nov '11

03 Nov '11

Could anyone please respond to this query. Thank you! From: Arlin [mailto:arlin@mvs.us] Sent: 28 October 2011 17:06 To: 'dovecot(a)dovecot.org' Subject: How can we horizontally scale Dovecot across multiple servers? Hi, How can we horizontally scale Dovecot across multiple servers? Do we require to install independent instances of Dovecot on each server? We are planning to use a NAS/SAN device using ZFS or EFS for email storage. Each logical unit will be of 10TB and similarly as the no: of user increases we are planning to add multiple 10TB units. In this case how we can manage the email storage on multiple volumes from Dovecot. The configuration of our existing system is:- Dovecot 1.0.15 / Maildirs Postfix 2.5.5 Debian 5.0.9 (Lenny) MySQL 5.0.15 Please advise. Thanks in advance. Creative Regards, Arlin

4 7

Re: [Dovecot] Dot Lock timestmap, users disconnections from roundcube
by Maria Arrea 03 Nov '11

03 Nov '11

We use ntpd daemon, all our systems are configured equal. Another thing, this is VM on vmware vsphere 4.1 Regards Maria ----- Original Message ----- From: Ed W Sent: 11/03/11 11:25 AM To: dovecot(a)dovecot.org Subject: Re: [Dovecot] Dot Lock timestmap, users disconnections from roundcube Hi > We are running dovecot 2.0.13 with mdbox+zlib on RHEL 5.7 x64, ext4. We use NTP. Quick check, but by "NTP" you mean the background daemon and you don't have some cron job running ntpdate or similar every so often? No idea, but since it looks like a clock related curiousity, then knowing if the clock is spot on accurate or drifting would be interesting to know? Simple comparison against other machines over a similar period to you having problems might be accurate enough? Good luck Ed W

2 1

Re: [Dovecot] Imap/pop gateway
by Maria Arrea 03 Nov '11

03 Nov '11

If you are going to use an imap proxy for security reasons, consider using a software DIFFERENT than in your real mailboxes. If you use dovecot in your backend, you could use perdition in the frontend. Regards Maria ----- Original Message ----- From: Ed W Sent: 11/03/11 11:31 AM To: Dovecot Mailing List Subject: Re: [Dovecot] Imap/pop gateway On 31/10/2011 22:20, nuno marques wrote: > > > > Hello, > How can i make a imap/pop gateway? that is, putting the mailboxes on a server on the internal network and put the gateway in the dmz. > The question isn't entirely clear, but I *think* you just want to use the normal "proxy" feature of dovecot. This accepts connections on one machine, examines them until the end of the auth stage and passes them onto some other machine based on the results of the auth process Also there are other imap/pop proxies such as nginx That said I'm not sure how much security this really buys you versus port forwarding POP/IMAP ports to your real server? If the proxy machine were to get hacked (over imap?) then the same hack can jump from the proxy to the real server. Also your only exposure in each case is via POP/IMAP, which means you would be mainly chasing buffer overflow vulnerabilities and the like. These can also be mitigated by chrooting the server machine (please consider virtualisation options, it's usually simpler/faster/saner, eg see my favourite: linux-vservers), MAC controls on the dovecot process (grsec/selinux, etc), and compiler extensions (gcc hardened) Good luck Ed W

1 0

[Dovecot] Imap/pop gateway
by nuno marques 03 Nov '11

03 Nov '11

Hello, How can i make a imap/pop gateway? that is, putting the mailboxes on a server on the internal network and put the gateway in the dmz. regards

2 1

[Dovecot] Thunderbird slow in talking with dovecot IMAP AND to sendmail
by Linda Walsh 03 Nov '11

03 Nov '11

I'm trying to find out what's causing this slowdown -- it's INTOLERABLE.... over 1 minute and less than 1% done. (400MB file)... After trying 3 times, I gave up and logged in using X to the server and ran Tbird from there.... Mail sent out in < 1 minute, though the copy to dovecot took about 50% longer. So... I looked at the network trace. and everyfrackin' body was using 4K packet sizes (at the application level!, the window size on TCP was over 64K...but no one was using it)....especially galling with my network's MTU at 9K, BTW, because small packets are really bad on a 1Gb network. sendmail -- 4K, dovecot /ssl, 4K... wazzup .. is t-bird forcing this, or is there some ssl requirement? but it can't just be ssl -- as it's talking to sendmail on port 25 unencrypted (it's a local net anyway)... I could see the entire binary going out in text form... 1 line at a time...a "C" line in sendmail, with lens of 4096...is that some max? I don't see it in the sendmail.cf files...wanted to see if anyone knew of dovecot restrictions that might limit packets to 4k, before I lamblasted the thunderbird people for another act of mindless stupidity (the first being when they decided to cache all your IMAP store on every local client in the client's ROAMING profile...*brilliant*!!!... sides, if I wanted it on local I would have set 'store on local', but in TB3, they know better and change that for me... Something about them being too stupid to use indexing and searching on an imap server? Maybe I just imagined hearing that...

3 3

Re: [Dovecot] doveadm delete-user ?
by Joseph Tam 03 Nov '11

03 Nov '11

Jan-Frode Myklebust writes: > IMHO it would be great if we could both provision and un-provision users > without having the provisioning system mess with files in the > filesystem. Provisioning new users works fine since dovecot will create > all files/directories on first login, but I haven?t found the tools to > un-provison them. > I see "doveadm mailbox delete" can delete individual > mailboxes, but what about indexes, sieve-scripts and home-directories? > Are there any tools to clean out these ? I coundn't find any, so I wrote my own executable cron job that scans the index cache and checks if the corresponding mailbox exists. If not, it echo the commands to remove the stale indices. From there, you can review it, or pipe it into sh. I can post it if there's any interest, but it's not that hard to write. This is only necessary, of course, if you store the indices in a different place than the mail folder. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Upgrading dovecot 1.0.7 -> 2.0.14 / Redhat EL 5.7
by Götz Reinicke 02 Nov '11

02 Nov '11

Hi, recently I debugged some load and performance and 'log out' problems and found an error in the dovecot logs: Error: pipe() failed: Too many open files Googling around and reading some posts led to the conclusion, that my problem is a bug, which will not be removed. So I'm thinking of upgrading to the latest prebuild rpm from here: http://packages.atrpms.net/dist/el5/dovecot/ As far as I understand the upgrading instructions, I'll be save as we dont use special setting, but I'll check all changes. My question: Dose anybody has done such an upgrade yet? Or are there any suggestion or hints? Thanks a lot and best regards. Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Jürgen Walter MdL Staatssekretär im Ministerium für Wissenschaft, Forschung und Kunst Baden-Württemberg Geschäftsführer: Prof. Thomas Schadt

1 0

[Dovecot] antispam for dovecot 2.0
by Lars Täuber 01 Nov '11

01 Nov '11

Hi! Is there anybody out there who has ported the antispam-storage-1.x.c to antispam-storage-2.0.c? Or is there an alternative to the antispam plugin? Thanks Lars

2 2

[Dovecot] dsync should sync sieve-dirs to!
by Peer Heinlein 01 Nov '11

01 Nov '11

Having dsync to make backups from existing mail-spaces, it would be nice to make dsync syncing the sieve-dirs too. -Otherweise backups aren't complete... Peer -- Heinlein Professional Linux Support GmbH Linux: Akademie - Support - Hosting http://www.heinlein-support.de Tel: 030 / 40 50 51 - 0 Fax: 030 / 40 50 51 - 19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

8 15

[Dovecot] Problems with permissions on mail_location
by Vlad 31 Oct '11

31 Oct '11

Hi, All! I have 2.0.beta6 (3156315704ef) Trying to set up Dovecot with virtual users. mail_uid=mail mail_gid=mail mail_location = maildir:/var/mail/%n /var/mail owner is mail:mail, permissions is 777 From error log: Oct 31 13:34:17 imap(test): Error: user test: Initialization failed:Initializing mail storage from mail_location setting failed: mkdir(/var/mail/test) failed: Permission denied (euid=8(mail) egid=12(mail) missing +w perm: /var/mail, euid is not dir owner) but /var/mail owner is mail:mail (same the euid, egid). In what may be the problem? (With full rights to the directory dovecot does not want to write it :-\ ) If I change /var/mail to /tmp/mail (for testing), then everything works fine, dovecot can write to this directory. But if i create /test/mail, or /mail with chmod 777 and chown mail:mail - again the same error :-( -- С уважением, Vlad mailto:vladsol@ukr.net

2 2

[Dovecot] dovecot creating literal %d/%n/ folders
by sean darcy 31 Oct '11

31 Oct '11

I have a virtual user test1. cat /etc/dovecot/users test1@<mydomain>:{PLAIN}test1pass:504:504::/home/vmail/%d/%n catchall@<mydomain>:{PLAIN}password:504:504::/home/vmail/%d/%n @<mydomain>:{PLAIN}password:504:504::/home/vmail/<mydomain>/catchall test1@example.com:{PLAIN}test1pass:504:504::/home/vmail/%d/%n ls /home/vmail/%d/%n/mail cur dovecot.index.cache dovecot.index.log dovecot-uidlist dovecot-uidvalidity dovecot-uidvalidity.4eab20a7 new tmp and mail to test1@<mydomain> goes into this %d/%n folder. In fact dovecot created the folder - at least I didn't. from dovecot-info.log Oct 28 17:43:11 auth: Debug: master in: USER 4 test1@<mydomain> service=lmtp Oct 28 17:43:11 auth: Debug: passwd(test1@<mydomain>): lookup Oct 28 17:43:11 auth: Info: passwd(test1@<mydomain>): unknown user Oct 28 17:43:11 auth: Debug: passwd-file(test1@<mydomain>): lookup: user=test1@<mydomain> file=/etc/dovecot/users Oct 28 17:43:11 auth: Debug: master out: USER 4 test1@<mydomain> uid=504 gid=504 home=/home/vmail/%d/%n Oct 28 17:43:11 lmtp(4533, test1@<mydomain>): Info: l6DnLacgq061EQAABoXEcA: msgid=<4EAB21EC.9070905(a)gmail.com>: saved mail to INBOX I would have expected dovecot to expand this to /home/vmail/<mydomain>/test1. Or are the %u %d variables only expanded in certain files? sean

2 1

[Dovecot] Manage dovecot maildir on multiple servers
by Arlin 31 Oct '11

31 Oct '11

Any suggestions on how to implement dovecot maildir on multiple servers. Does this required independent installation of Dovecot on each servers, or a single instance of Dovecot with shared MailDir would serve the purpose? Thanks, Arlin

1 0

[Dovecot] how to tell dovecot v2.0.1 not to listen on port 143
by Lars Täuber 28 Oct '11

28 Oct '11

Hi. Sorry for breaking this thread, but I just subscribed from a different address. I made a mistake. I didn't mean »imaps« but »imap2« How can I configure dovecot not to listen for imap connections on port 143. I want dovecot to listen only on port 993. And ssl = required is already set. So this is not the right solution. I just comemnted the whole inet_listener imap {...} section out. But this seems to be some kind of default setting. I tried to set: inet_listener { address = none } I tried to leave the address variable blank. But no succes. Good night Lars

2 2

[Dovecot] how to tell dovecot v2.0.1 not to listen on port 143
by Lars Täuber 28 Oct '11

28 Oct '11

Hi there. How can I configure dovecot not to listen for imaps connections on port 143. Thanks Lars

6 6

[Dovecot] Are you successfully using using SQL queries to manage Dovecot2 Quota Values & Limits?
by Rich 28 Oct '11

28 Oct '11

On Mon, Oct 24, 2011 at 11:14 AM, Rich <pgnet.dev+rich-dovecot(a)gmail.com> wrote: > I'm able to consistently reproduce this problem/behavior, but not > workaround or fix it, yet. > > Rich > > On Wed, Oct 19, 2011 at 7:41 AM, Rich <pgnet.dev+rich-dovecot(a)gmail.com> wrote: >> I've made some progress, but quota 'Limit' is still not fully >> functioning for me. >> >> A couple of changes have helped: >> >> Specifying a "%u% as username format, >> >> /etc/dovecot/conf.d/90-quota.conf >> plugin { >> - quota = dict:User Quota::proxy::quota >> + quota = dict:User Quota:%u:proxy::quota >> quota_rule = *:bytes=1073741824:messages=10000 >> quota_rule2 = Trash:storage=+10%% >> } >> >> using 'username' rather than 'user' in the user iteration query >> >> /etc/dovecot/sql/virtmail-userdb-sql.cf >> driver = mysql >> connect = host=/var/run/mysql/mysql.sock dbname=my_db user=my_user >> password=my_pass >> user_query = CALL UserDBQuery('%n','%d'); >> - iterate_query = SELECT `MAILBOX_user_domain` AS user FROM `PARAMS`; >> + iterate_query = SELECT `MAILBOX_user_domain` AS username FROM `PARAMS`; >> >> and adding to my user_query, >> >> CREATE PROCEDURE `UserDBQuery`( >> ... >> SELECT ... >> concat('*:bytes=', quota_bytes, ':messages=10000') AS quota_rule, >> ... >> >> Now, at init, >> >> doveadm quota get -A >> Username Quota name Type Value Limit % >> myuser(a)domain1.com User quota STORAGE 0 0 0 >> myuser(a)domain1.com User quota MESSAGE 0 10000 0 >> myuser(a)domain2.com User quota STORAGE 0 0 0 >> myuser(a)domain2.com User quota MESSAGE 0 10000 0 >> >> mysql> select * from PARAMS; >> +----+------------------------+------------+-------------+ >> | ai | MAILBOX_user_domain | quota_bytes | quota_msgs | >> +----+------------------------+-------------+------------+ >> | 1 | myuser(a)domain1.com | 0 | 0 | >> | 2 | myuser(a)domain2.com | 0 | 0 | >> +----+------------------------+------------+-------------+ >> 2 rows in set (0.00 sec) >> >> and, after sending a single message to 'myuser(a)domain1.com', I do see >> that Dovecot now recognizes/calculates a quota change, and only for >> one domain, >> >> doveadm quota get -A >> Username Quota name Type Value Limit % >> myuser(a)domain1.com User quota STORAGE 3 3 100 >> myuser(a)domain1.com User quota MESSAGE 1 10000 0 >> myuser(a)domain2.com User quota STORAGE 0 0 0 >> myuser(a)domain2.com User quota MESSAGE 0 10000 0 >> >> mysql> select * from PARAMS; >> +----+------------------------+------------+-------------+ >> | ai | MAILBOX_user_domain | quota_bytes | quota_msgs | >> +----+------------------------+-------------+------------+ >> | 1 | myuser(a)domain1.com | 3269 | 1 | >> | 2 | myuser(a)domain2.com | 0 | 0 | >> +----+------------------------+------------+-------------+ >> 2 rows in set (0.00 sec) >> >> >> But, the Limit's wrong. It's not picking up the global Limit from >> >> /etc/dovecot/conf.d/90-quota.conf >> ... >> --> quota_rule = *:bytes=1073741824:messages=10000 >> ... >> >> and once a message quota Value is calculated, the Limit is set == >> Value, resulting in an incorrrect quota %-age of 100%. >> >> Is Limit supposed to be specified per-user? >> >> Rich >> >

1 0

[Dovecot] Quotas with Maildir and mdbox
by Dr Matthew Williams 28 Oct '11

28 Oct '11

Hello, We use LDAP to store our Maildir++ quota information for our Maildir mailboxes. I notice in the documentation that only SQL and flat files are supported by the dictionary quota if I want to use quota with mdbox? Are there any plans to allow LDAP to be used as the store? Regards, Matthew. -- Dr Matthew Williams MEng PhD MBCS Systems Administrator - IT Services - Bangor University Prifysgol Bangor Tel: (44) (0)1248 382414 Adeilad Deiniol Mob: (44) (0)7979 778269 Ffordd Deiniol URL: www.bangor.ac.uk Bangor, Gwynedd LL57 2UX EMail: matthew.williams(a)bangor.ac.uk -- Gall y neges e-bost hon, ac unrhyw atodiadau a anfonwyd gyda hi, gynnwys deunydd cyfrinachol ac wedi eu bwriadu i'w defnyddio'n unig gan y sawl y cawsant eu cyfeirio ato (atynt). Os ydych wedi derbyn y neges e-bost hon trwy gamgymeriad, rhowch wybod i'r anfonwr ar unwaith a dilëwch y neges. Os na fwriadwyd anfon y neges atoch chi, rhaid i chi beidio â defnyddio, cadw neu ddatgelu unrhyw wybodaeth a gynhwysir ynddi. Mae unrhyw farn neu safbwynt yn eiddo i'r sawl a'i hanfonodd yn unig ac nid yw o anghenraid yn cynrychioli barn Prifysgol Bangor. Nid yw Prifysgol Bangor yn gwarantu bod y neges e-bost hon neu unrhyw atodiadau yn rhydd rhag firysau neu 100% yn ddiogel. Oni bai fod hyn wedi ei ddatgan yn uniongyrchol yn nhestun yr e-bost, nid bwriad y neges e-bost hon yw ffurfio contract rhwymol - mae rhestr o lofnodwyr awdurdodedig ar gael o Swyddfa Cyllid Prifysgol Bangor. www.bangor.ac.uk This email and any attachments may contain confidential material and is solely for the use of the intended recipient(s). If you have received this email in error, please notify the sender immediately and delete this email. If you are not the intended recipient(s), you must not use, retain or disclose any information contained in this email. Any views or opinions are solely those of the sender and do not necessarily represent those of the Bangor University. Bangor University does not guarantee that this email or any attachments are free from viruses or 100% secure. Unless expressly stated in the body of the text of the email, this email is not intended to form a binding contract - a list of authorised signatories is available from the Bangor University Finance Office. www.bangor.ac.uk

2 1

[Dovecot] adding dovecot to webmin list of services
by Spyros Tsiolis 28 Oct '11

28 Oct '11

Hello , I am playing with webmin these days and find it really fun to install and use everyday. However, on the services option, amongst other services, the dovecot service is not shown. Does anyone out there have similar experience with webmin and dovecot and know how to make it appear there ? I am using CentOS (5.5/5.6/5.7) 32-bit Dovecot was installed manually and not from yum (.rpm) Dovecot v1.2.15 TIA, s. ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

1 1

[Dovecot] IMAP shows forwarding and vacation files
by Nico Suhl 28 Oct '11

28 Oct '11

Hello, I'm migrating our mailserver from a linux machine to solaris and got some small problems with our forwarding and vacation files, which are stored in the maildir of each user. I'm now using 2.0.15, on the old machine there was a dovecot 1. Now the problem is, that the .forward and .vacation files, which are used by exim, are shown as folders (they have a point...) in imap lists. This problem only occurs on the new solaris machine and not on the old linux system (with dovecot v1) or another testing machine with dovecot 2, which runs also under linux. userdb lookups are static with system account/group of exim. Is there any way to "hide" the .forward and .vacation files or do i have to rename or move them? Why are they shown here and not on our testsystems? regards, Nico Suhl

2 1

Re: [Dovecot] newbie: can't login as virtual user
by Joseph Tam 28 Oct '11

28 Oct '11

sean darcy writes: > Oct 22 21:45:55 auth: Debug: passwd(test1(a)example.com, ): lookup > Oct 22 21:45:55 auth: Info: passwd(test1(a)example.com, ): unknown user > Oct 22 21:45:55 auth: Debug: passwd-file(test1(a)example.com, ): > lookup: user=test1(a)example.com file=/etc/dovecot/users > Oct 22 21:45:55 auth: Debug: master out: USER 2303328257 test1(a)example.com > Oct 22 21:45:55 imap-login: Info: Login: user=<test1(a)example.com>, > method=PLAIN, rip= , lip= , mpid=27062, TLS I think up to now it's OK (not quite sure about "master out" log entry but it looks innocuous enough). Dovecot reports to have looked in the system password file, failed, then looked in /etc/dovecot/users and found the user and logged them in. I think the problem happens later and you will have to show the subsequent log entries. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Temporary Failure that's Permanent!
by Jack Fredrikson 28 Oct '11

28 Oct '11

Hi; I continue to be plagued with this error: Oct 25 10:49:18 myserver postfix/pipe[3712]: 0423257901AB: to=<foo(a)bar.com>, relay=dovecot, delay=109318, delays=109318/0.14/0/0.1, dsn=4.3.0, status=deferred (temporary failure It's been a week that I've been working day and night to get this fixed. I forgot to add this information: [root]# doveconf -n auth_mechanisms = plain login first_valid_gid = 12 first_valid_uid = 86 mail_location = maildir:/var/vmail/%d/%u passdb { args = /usr/local/etc/dovecot/sql.conf driver = sql } plugin { quota = maildir:storage=10240:messages=1000 trash = /usr/local/etc/dovecot/trash.conf } protocols = imap pop3 service auth { unix_listener auth-userdb { group = postfix mode = 0660 user = postfix } user = root } ssl_cert = </etc/pki/tls/certs/mail.myserver.com.cert ssl_cipher_list = ALL:!LOW:!SSLv2 ssl_key = </etc/pki/tls/private/mail.myserver.com.key ssl_key_password = passwd userdb { args = /usr/local/etc/dovecot/sql.conf driver = sql } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { hostname = myserver.com info_log_path = /var/log/dovecot-deliver.log log_path = /var/log/dovecot-deliver.log mail_plugins = quota postmaster_address = postmaster(a)creative.vi sendmail_path = /usr/sbin/sendmail.postfix } [root] # vi main.cf queue_directory = /var/spool/postfix myorigin = $mydomain command_directory = /usr/sbin daemon_directory = /usr/libexec/postfix mail_owner = postfix inet_interfaces = all unknown_local_recipient_reject_code = 550 debug_peer_list = sendmail_path = /usr/sbin/sendmail.postfix newaliases_path = /usr/bin/newaliases mailq_path = /usr/bin/mailq setgid_group = postdrop html_directory = no manpage_directory = /usr/local/man sample_directory = /etc/postfix readme_directory = no mydomain = myserver.com mydestination = $mydomain, $myhostname, localhost.$mydomain mail_spool_directory = /var/spool/mail home_mailbox = Mailbox disable_vrfy_command = yes show_user_unknown_table_name = no data_directory = /var/lib/postfix # --------------- local settings ------------------ myhostname = myserver.com inet_interfaces = localhost, $myhostname mynetworks = $config_directory/mynetworks #mydestination = localhost.$mydomain, localhost, $myhostname #uncomment if you need relay_domains... do not list domains in both relay and virtual relay_domains = proxy:mysql:$config_directory/mysql_relay_domains_maps.cf # ---------------------- VIRTUAL DOMAINS START ---------------------- virtual_mailbox_base = /var/vmail virtual_mailbox_domains = proxy:mysql:$config_directory/mysql_virtual_domains_maps.cf virtual_mailbox_maps = proxy:mysql:$config_directory/mysql_virtual_mailbox_maps.cf virtual_alias_maps = proxy:mysql:$config_directory/mysql_virtual_alias_maps.cf virtual_mailbox_limit_maps = proxy:mysql:/etc/postfix/mysql_virtual_mailbox_limit_maps.cf virtual_minimum_uid = 89 virtual_uid_maps = static:89 virtual_gid_maps = static:89 virtual_transport = dovecot dovecot_destination_recipient_limit = 1 # ---------------------- VIRTUAL DOMAINS END ---------------------- # ---------------------- SASL PART START ---------------------- smtpd_sasl_auth_enable = yes smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_sasl_security_options = noanonymous broken_sasl_auth_clients = yes smtpd_sasl_type = dovecot smtpd_sasl_path = /var/spool/postfix/private/auth smtpd_sasl_application_name = smtpd # ---------------------- SASL PART END ---------------------- smtpd_soft_error_limit = 10 smtpd_hard_error_limit = 20 smtpd_helo_required = yes disable_vrfy_command = yes non_fqdn_reject_code = 504 invalid_hostname_reject_code = 450 maps_rbl_reject_code = 554 alias_maps = hash:/etc/aliases reject_unknown_client = false reject_unknown_hostname = false mailbox_command = /usr/local/libexec/dovecot/deliver -f "$SENDER" -a "$RECIPIENT" [root] # vi master.cf smtp inet n - n - - smtpd submission inet n - - - - smtpd -D -o smtpd_tls_security_level=encrypt -o smtpd_sasl_auth_enable=yes -o smtpd_sasl_type=dovecot -o smtpd_sasl_path=private/auth -o smtpd_sasl_security_options=noanonymous -o smtpd_sasl_local_domain=$myhostname -o smtpd_client_restrictions=permit_sasl_authenticated,reject -o smtpd_sender_login_maps=hash:/etc/postfix/virtual -o smtpd_sender_restrictions=reject_sender_login_mismatch -o smtpd_recipient_restrictions=reject_unknown_recipient_domain,reject_non_fqdn_recipient,permit_sasl_authenticated,reject amavisfeed unix - - n - 2 lmtp -o lmtp_data_done_timeout=1200 -o lmtp_send_xforward_command=yes -o disable_dns_lookups=yes -o max_use=20 587 inet n - n - - smtpd pickup fifo n - n 60 1 pickup cleanup unix n - n - 0 cleanup qmgr fifo n - n 300 1 qmgr tlsmgr unix - - n 1000? 1 tlsmgr rewrite unix - - n - - trivial-rewrite bounce unix - - n - 0 bounce defer unix - - n - 0 bounce trace unix - - n - 0 bounce verify unix - - n - 1 verify flush unix n - n 1000? 0 flush proxymap unix - - n - - proxymap smtp unix - - n - - smtp relay unix - - n - - smtp -o fallback_relay= showq unix n - n - - showq error unix - - n - - error discard unix - - n - - discard local unix - n n - - local virtual unix - n n - - virtual lmtp unix - - n - - lmtp anvil unix - - n - 1 anvil scache unix - - n - 1 scache maildrop unix - n n - - pipe flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} uucp unix - n n - - pipe flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) ifmail unix - n n - - pipe flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) bsmtp unix - n n - - pipe flags=Fq. user=foo argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient retry unix - - n - - error proxywrite unix - - n - 1 proxymap dovecot unix - n n - - pipe flags=DRhu user=dovecot argv=/usr/local/libexec/dovecot/dovecot-lda -f ${sender} ${recipient} spamfilter unix - n n - - pipe flags=Rq user=spamfilter argv=/usr/local/bin/spamfilter -f ${sender} -- ${recipient} TIA, Jack

9 15

[Dovecot] newbie: can't login as virtual user
by sean darcy 28 Oct '11

28 Oct '11

dovecot -n # 2.0.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.38.8-32.fc15.i686.PAE i686 Fedora release 15 (Lovelock) auth_debug_passwords = yes disable_plaintext_auth = no info_log_path = /var/log/dovecot-info.log log_path = /var/log/dovecot.log mail_access_groups = mail mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u mail_privileged_group = mail mbox_write_locks = fcntl passdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0666 user = postfix } } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } protocol lmtp { mail_plugins = quota sieve } cat /etc/dovecot/users .......... test1@example.com:{PLAIN}test1pass BUT, . OK Pre-login capabilities listed, post-login capabilities have more. a login test1(a)example.com test1pass * BYE Internal error occurred. Refer to server log for more information. closed From the server: Oct 22 21:45:53 auth-worker: Debug: passwd-file /etc/dovecot/users: Read 5 users Oct 22 21:45:53 auth-worker: Debug: pam(test1(a)example.com,www.xx.yy.zz): lookup service=dovecot Oct 22 21:45:53 auth-worker: Debug: pam(test1(a)example.com, ): #1/1 style=1 msg=Password: Oct 22 21:45:55 auth-worker: Info: pam(test1(a)example.com, ): unknown user Oct 22 21:45:55 auth: Debug: passwd-file(test1(a)example.com, ): lookup: user=test1(a)example.com file=/etc/dovecot/users Oct 22 21:45:55 auth: Debug: client out: OK 1 user=test1(a)example.com Oct 22 21:45:55 auth: Debug: master in: REQUEST 2303328257 27060 1 964b20421c19356f1cbdefbf976467e0 Oct 22 21:45:55 auth: Debug: passwd(test1(a)example.com, ): lookup Oct 22 21:45:55 auth: Info: passwd(test1(a)example.com, ): unknown user Oct 22 21:45:55 auth: Debug: passwd-file(test1(a)example.com, ): lookup: user=test1(a)example.com file=/etc/dovecot/users Oct 22 21:45:55 auth: Debug: master out: USER 2303328257 test1(a)example.com Oct 22 21:45:55 imap-login: Info: Login: user=<test1(a)example.com>, method=PLAIN, rip= , lip= , mpid=27062, TLS What's wrong with my configuration? Thanks, sean

1 0

[Dovecot] Configuring mbox and maildir formats - dovecot-1.2.15
by Albert E. Whale 28 Oct '11

28 Oct '11

I am transitioning an existing server from using exclusively mbox, to being able to support both mbox and then fully maildir formats. I need to support the mbox format until I can get everyone switched over to maildir. What do I need to to use in the config of /etc/dovecot.conf to support the default of mbox, and then the new Maildir format (users will get upgraded individually from mbox to Maildir, and need to be upgraded). Thank you. -- Albert E. Whale, CHS CISA CISSP Senior Technology & Security Director *ABS Computer Technology, Inc. * 412-635-7488 ext 100 aewhale(a)ABS-CompTech.com <mailto:aewhale@ABS-CompTech.com> www.ABS-CompTech.com <http://www.ABS-CompTech.com>

2 1

[Dovecot] variable for gid
by Limperis Antonis 26 Oct '11

26 Oct '11

Hi Is possible for a variable for gid of each user, such as %ifor uid . Thanks for your attention Antonis

2 1

[Dovecot] Marathon Day 6 of First Install: MySQL Connection Problem
by Jack Fredrikson 25 Oct '11

25 Oct '11

Hi; This is my 6th day installing my first Postfix/Dovecot installation. The Postfix mailing list indicates I've got the MTA under control so now I'm seeking your help with the MDA. I get these errors with legitimate email addresses: Oct 24 11:47:38 myserver dovecot: auth-worker: Error: mysql(localhost): Connect failed to database (postfix): Access denied for user 'dovecot'@'localhost' (using password: YES) - waiting for 25 seconds before retry Now I've logged in myself: mysql -u dovecot -p Enter password: xxx and succeeded. What am I doing wrong? I've noticed that every time I restart dovecot I get this error in the dovecot-deliver.log: Oct 24 11:31:11 lda: Error: userdb lookup: connect(/usr/local/var/run/dovecot/auth-userdb) failed: Permission denied (euid=512(vmail) egid=512(vmail) missing +r perm: /usr/local/var/run/dovecot/auth-userdb, dir owned by 0:0 mode=0755) Oct 24 11:31:11 lda: Fatal: Internal error occurred. Refer to server log for more information. Every time I go to chmod 666 on that file, restarting dovecot wipes those permissions. How fix? Even when I fix that, I still get the "temporary failure". Please advise. TIA, Jack

7 20

Re: [Dovecot] sieve-pipe Error
by Stephan Bosch 25 Oct '11

25 Oct '11

Op 25-10-2011 9:33, Ian Barton schreef: > On 24/10/11 23:33, Stephan Bosch wrote: >> On 10/24/2011 12:00 PM, Ian Barton wrote: >>> I am using Dovecot 2.0.15 on Arch. I have cloned the hg repo and >>> compiled the plugin using the following options: >>> >>> ./configure --with-dovecot=/usr/lib/dovecot >>> --with-pigeonhole=/usr/include/dovecot/sieve/ >>> >>> The relevant section of my dovecot.conf looks like: >>> >>> plugin { >>> sieve = ~/.dovecot.sieve >>> sieve_global_path = /home/vmail/globalsieverc >>> sieve_dir = ~/ >>> >>> sieve_plugins = sieve_pipe >>> # This directory contains the scripts that are available. >>> sieve_pipe_bin_dir = /usr/lib/dovecot/sieve-pipe >>> } >>> >>> When I restart Dovecot I get the following error: >>> >>> ian:dovecot/ $ sudo rc.d restart dovecot [10:50:53] >>> :: Stopping dovecot daemon [DONE] >>> :: Starting dovecot daemon [BUSY] managesieve: Fatal: >>> opendir(/usr/lib/dovecot/modules/sieve) failed: No such file or >>> directory >>> doveconf: Error: managesieve-login: dump-capability process returned 89 >> >> Apparently, the plugin is not installed in the correct location. Try >> supplying a --with-moduledir=/usr/lib/dovecot/modules . >> >> After make install, the /usr/lib/dovecot/modules/sieve directory should >> contain lib90_sieve_pipe_plugin.so. >> > > Thank you that worked. Now to test if it's working:) Please reply to the mailing list as well. Regards, Stephan.

1 0

[Dovecot] sieve-pipe Error
by Ian Barton 25 Oct '11

25 Oct '11

I am using Dovecot 2.0.15 on Arch. I have cloned the hg repo and compiled the plugin using the following options: ./configure --with-dovecot=/usr/lib/dovecot --with-pigeonhole=/usr/include/dovecot/sieve/ The relevant section of my dovecot.conf looks like: plugin { sieve = ~/.dovecot.sieve sieve_global_path = /home/vmail/globalsieverc sieve_dir = ~/ sieve_plugins = sieve_pipe # This directory contains the scripts that are available. sieve_pipe_bin_dir = /usr/lib/dovecot/sieve-pipe } When I restart Dovecot I get the following error: ian:dovecot/ $ sudo rc.d restart dovecot [10:50:53] :: Stopping dovecot daemon [DONE] :: Starting dovecot daemon [BUSY] managesieve: Fatal: opendir(/usr/lib/dovecot/modules/sieve) failed: No such file or directory doveconf: Error: managesieve-login: dump-capability process returned 89 Ian.

2 1

[Dovecot] xi.rename-it.nl down?
by Jim Knuth 25 Oct '11

25 Oct '11

Hello, is http://xi.rename-it.nl down? Apticron shows me permanently errors. -- Mit freundlichen Grüßen, with kind regards, Jim Knuth --------- Wenn ein wirklich großer Geist in der Welt erscheint, kann man ihn untrüglich daran erkennen, daß sich alle Dummköpfe gegen ihn verbünden. (Jonathan Swift)

3 5

[Dovecot] [bug] Changing dovecot 'quota' Value incorrectly overwrites Limit with same value
by Rich 24 Oct '11

24 Oct '11

I'm able to consistently reproduce this problem/behavior, but not workaround or fix it, yet. Rich On Wed, Oct 19, 2011 at 7:41 AM, Rich <pgnet.dev+rich-dovecot(a)gmail.com> wrote: > I've made some progress, but quota 'Limit' is still not fully > functioning for me. > > A couple of changes have helped: > > Specifying a "%u% as username format, > > /etc/dovecot/conf.d/90-quota.conf > plugin { > - quota = dict:User Quota::proxy::quota > + quota = dict:User Quota:%u:proxy::quota > quota_rule = *:bytes=1073741824:messages=10000 > quota_rule2 = Trash:storage=+10%% > } > > using 'username' rather than 'user' in the user iteration query > > /etc/dovecot/sql/virtmail-userdb-sql.cf > driver = mysql > connect = host=/var/run/mysql/mysql.sock dbname=my_db user=my_user > password=my_pass > user_query = CALL UserDBQuery('%n','%d'); > - iterate_query = SELECT `MAILBOX_user_domain` AS user FROM `PARAMS`; > + iterate_query = SELECT `MAILBOX_user_domain` AS username FROM `PARAMS`; > > and adding to my user_query, > > CREATE PROCEDURE `UserDBQuery`( > ... > SELECT ... > concat('*:bytes=', quota_bytes, ':messages=10000') AS quota_rule, > ... > > Now, at init, > > doveadm quota get -A > Username Quota name Type Value Limit % > myuser(a)domain1.com User quota STORAGE 0 0 0 > myuser(a)domain1.com User quota MESSAGE 0 10000 0 > myuser(a)domain2.com User quota STORAGE 0 0 0 > myuser(a)domain2.com User quota MESSAGE 0 10000 0 > > mysql> select * from PARAMS; > +----+------------------------+------------+-------------+ > | ai | MAILBOX_user_domain | quota_bytes | quota_msgs | > +----+------------------------+-------------+------------+ > | 1 | myuser(a)domain1.com | 0 | 0 | > | 2 | myuser(a)domain2.com | 0 | 0 | > +----+------------------------+------------+-------------+ > 2 rows in set (0.00 sec) > > and, after sending a single message to 'myuser(a)domain1.com', I do see > that Dovecot now recognizes/calculates a quota change, and only for > one domain, > > doveadm quota get -A > Username Quota name Type Value Limit % > myuser(a)domain1.com User quota STORAGE 3 3 100 > myuser(a)domain1.com User quota MESSAGE 1 10000 0 > myuser(a)domain2.com User quota STORAGE 0 0 0 > myuser(a)domain2.com User quota MESSAGE 0 10000 0 > > mysql> select * from PARAMS; > +----+------------------------+------------+-------------+ > | ai | MAILBOX_user_domain | quota_bytes | quota_msgs | > +----+------------------------+-------------+------------+ > | 1 | myuser(a)domain1.com | 3269 | 1 | > | 2 | myuser(a)domain2.com | 0 | 0 | > +----+------------------------+------------+-------------+ > 2 rows in set (0.00 sec) > > > But, the Limit's wrong. It's not picking up the global Limit from > > /etc/dovecot/conf.d/90-quota.conf > ... > --> quota_rule = *:bytes=1073741824:messages=10000 > ... > > and once a message quota Value is calculated, the Limit is set == > Value, resulting in an incorrrect quota %-age of 100%. > > Is Limit supposed to be specified per-user? > > Rich >

1 0

[Dovecot] userdb with NoSQL database
by Francisco Wagner C. Freire 24 Oct '11

24 Oct '11

Hi, I'm searching, but not found nothing about using userb with NoSQL databases: http://wiki2.dovecot.org/UserDatabase Are there any plans to implement this option? Thanks

2 1

[Dovecot] execute command in quota warning
by nuno marques 23 Oct '11

23 Oct '11

hi, I cant run any script in "quota_warning = storage=95%% quota-warning 95 %u". Any ideia? Thanks # 2.0.14: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.29.1.el6.x86_64 x86_64 CentOS Linux release 6.0 (Final) auth_debug = yes auth_debug_passwords = yes auth_username_format = %Lu auth_verbose = yes disable_plaintext_auth = no mail_debug = yes mail_location = maildir:~/Maildir mail_plugins = " quota" mbox_write_locks = fcntl passdb { driver = pam } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid from subject size vsize flags quota = maildir:User quota quota_exceeded_message = Quota exceeded, please go to http://www.example.com/over_quota_help for instructions on how to fix this. quota_rule = fs:storage=+10M quota_rule2 = Trash:ignore quota_rule3 = SPAM:ignore quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=50%% quota-warning 50 %u } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { group = root mode = 0666 user = root } user = root } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol lda { mail_plugins = " quota quota" } protocol imap { mail_plugins = " quota imap_quota" }

1 0

[Dovecot] Temporary Failures
by Jack Fredrikson 23 Oct '11

23 Oct '11

Hi; I keep getting errors like this one: Oct 22 16:51:08 example postfix/pipe[12021]: C2F705790169: to=<soandso(a)yup.com>, relay=dovecot, delay=2.1, delays=2/0.01/0/0.08, dsn=4.3.0, status=deferred (temporary failure. Command output: doveconf: Warning: NOTE: You can get a new clean config file with: doveconf -n > dovecot-new.conf doveconf: Warning: Obsolete setting in /usr/local/etc/dovecot/dovecot.conf:5: imap_client_workarounds=outlook-idle is no longer necessary doveconf: Warning: Obsolete setting in /usr/local/etc/dovecot/dovecot.conf:17: add auth_ prefix to all settings inside auth {} and remove the auth {} section completely doveconf: Warning: Obsolete setting in /usr/local/etc/dovecot/dovecot.conf:19: passdb pam {} has been replaced by passdb { driver=pam } doveconf: Warning: Obsolete setting in /usr/local/etc/dovecot/dovecot.conf:21: userdb passwd {} has been replaced by userdb { driver=passwd } doveconf: Warning: Obsolete setting in /usr/local/etc/dovecot/dovecot.conf:23: auth_user has been replaced by service auth { user } doveconf: Why don't they get delivered? Also, I've tried to follow the advice in the warnings and it never works. I've tried the doveconf -n > dovcot-new.conf command and the same conf file I've been using pops up. Can someone post some code that reflects how the new conf file should look? TIA, Jack

2 3

[Dovecot] off topic question, ammended
by Spyros Tsiolis 23 Oct '11

23 Oct '11

Sorry chaps, I meant MUA not MTA. I am trying to find a mail reader doing LDAP writes. Regards, s. ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

1 0

[Dovecot] off topic question
by Spyros Tsiolis 22 Oct '11

22 Oct '11

Hello list, Is anybody out there who knows of an MTA that can do LDAP writes ? I apologize for bringing this to the list, however, I did some googling and cannot find any answer to this. Thank you all, spyros ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

1 0

[Dovecot] First Installation, Problems...
by Jack Fredrikson 22 Oct '11

22 Oct '11

Hi; [root@example jack]# /usr/local/sbin/dovecot --version 2.0.15 [root@example jack]# /usr/local/bin/doveconf -n # 2.0.15: /usr/local/etc/dovecot/dovecot.conf doveconf: Warning: NOTE: You can get a new clean config file with: doveconf -n > dovecot-new.conf doveconf: Warning: Obsolete setting in /usr/local/etc/dovecot/dovecot.conf:5: imap_client_workarounds=outlook-idle is no longer necessary doveconf: Warning: Obsolete setting in /usr/local/etc/dovecot/dovecot.conf:17: add auth_ prefix to all settings inside auth {} and remove the auth {} section completely doveconf: Warning: Obsolete setting in /usr/local/etc/dovecot/dovecot.conf:21: passdb sql {} has been replaced by passdb { driver=sql } doveconf: Warning: Obsolete setting in /usr/local/etc/dovecot/dovecot.conf:24: userdb sql {} has been replaced by userdb { driver=sql } doveconf: Warning: Obsolete setting in /usr/local/etc/dovecot/dovecot.conf:27: userdb prefetch {} has been replaced by userdb { driver=prefetch } doveconf: Warning: Obsolete setting in /usr/local/etc/dovecot/dovecot.conf:29: auth_user has been replaced by service auth { user } # OS: Linux 2.6.18-028stab094.3 x86_64 CentOS release 5.4 (Final) vzfs auth_mechanisms = plain login mail_location = maildir:/var/vmail/%d/%u passdb { args = /usr/local/etc/dovecot/sql.conf driver = sql } plugin { quota = maildir:storage=10240:messages=1000 trash = /usr/local/etc/dovecot/trash.conf } service auth { unix_listener /var/run/dovecot/auth-master { group = mail mode = 0660 user = vmail } unix_listener /var/spool/postfix/private/auth { group = mail mode = 0660 user = postfix } user = nobody } ssl = no userdb { args = /usr/local/etc/dovecot/sql.conf driver = sql } userdb { driver = prefetch } protocol imap { imap_client_workarounds = delay-newmail mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { info_log_path = /var/log/dovecot-deliver.log log_path = /var/log/dovecot-deliver.log mail_plugins = quota postmaster_address = postmaster(a)creative.vi } It appears that I have postfix at least partially working: postfix/pipe[5280]: 9FDE0579012F: to=<uhuh(a)yup.com>, relay=spamfilter, delay=6, delays=3/0.01/0/3, dsn=2.0.0, status=sent (delivered via spamfilter service) I don't know where it ended up :-} There's nothing in /var/vmail, the dovecot destination. This is true even before I set the postfix content_filter to spamassassin (when it said "delivered to Maildir" or some such). Please advise. TIA, Jack

1 0

[Dovecot] Quota warning
by nuno marques 22 Oct '11

22 Oct '11

Hi, I cant run quota warning or other script. any suggestions? Oct 22 10:02:52 userseuac dovecot: imap(user4): Debug: Effective uid=1002, gid=1002, home=/home/user4 Oct 22 10:02:52 userseuac dovecot: imap(user4): Debug: Quota root: name=User quota backend=maildir args= Oct 22 10:02:52 userseuac dovecot: imap(user4): Debug: Quota rule: root=User quota mailbox=* bytes=10485760 messages=0 Oct 22 10:02:52 userseuac dovecot: imap(user4): Debug: Quota rule: root=User quota mailbox=Trash bytes=+1048576 messages=0 Oct 22 10:02:52 userseuac dovecot: imap(user4): Debug: Quota warning: bytes=9961472 (95%) messages=0 reverse=no command=script /etc/dovecot/conf.d/teste 95 user4 Oct 22 10:02:52 userseuac dovecot: imap(user4): Debug: Quota warning: bytes=8388608 (80%) messages=0 reverse=no command=script /etc/dovecot/conf.d/teste 80 user4 Oct 22 10:02:52 userseuac dovecot: imap(user4): Debug: Quota warning: bytes=7340032 (70%) messages=0 reverse=no command=script /etc/dovecot/conf.d/teste 70 user4 Oct 22 10:02:52 userseuac dovecot: imap(user4): Debug: maildir++: root=/home/user4/Maildir, index=, control=, inbox=/home/user4/Maildir, alt= # 2.0.14: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.29.1.el6.x86_64 x86_64 CentOS Linux release 6.0 (Final) auth_debug = yes auth_debug_passwords = yes auth_username_format = %Lu auth_verbose = yes disable_plaintext_auth = no mail_debug = yes mail_location = maildir:~/Maildir mail_plugins = " quota" mbox_write_locks = fcntl passdb { driver = pam } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid from subject size vsize flags quota = maildir:User quota quota_exceeded_message = Quota exceeded!!!!!!!!!!!!!! quota_rule = *:storage=10M quota_rule2 = Trash:storage=+1M quota_warning = storage=95%% script /etc/dovecot/conf.d/teste 95 %u quota_warning2 = storage=80%% script /etc/dovecot/conf.d/teste 80 %u quota_warning3 = storage=70%% script /etc/dovecot/conf.d/teste 70 %u } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol imap { mail_plugins = " quota imap_quota" } protocol pop3 { mail_plugins = " quota quota" pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } The system as a whole is composed of: dovecot-2.0.14-1_130.el6.x86_64 openldap-servers-2.4.19-15.el6_0.2.x86_64 postfix-2.6.6-2.1.el6_0.x86_64 mailscanner-4.84.3-1.noarch spamassassin-3.3.1-2.el6.x86_64 centos 6 2.6.32-71.29.1.el6.x86_64 #1 SMP Mon Jun 27 19:49:27 BST 2011 x86_64 x86_64 x86_64 GNU/Linux

1 0

[Dovecot] Quota fs
by nuno marques 22 Oct '11

22 Oct '11

Hi, I have the following error, any help? imap(user4): Error: quotactl(Q_GETQUOTA, /dev/mapper/VolGroup-lv_root) failed: Permission denied The system as a whole is composed of: dovecot-2.0.14-1_130.el6.x86_64 openldap-servers-2.4.19-15.el6_0.2.x86_64 postfix-2.6.6-2.1.el6_0.x86_64 mailscanner-4.84.3-1.noarch spamassassin-3.3.1-2.el6.x86_64 centos 6 2.6.32-71.29.1.el6.x86_64 #1 SMP Mon Jun 27 19:49:27 BST 2011 x86_64 x86_64 x86_64 GNU/Linux # 2.0.14: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.29.1.el6.x86_64 x86_64 CentOS Linux release 6.0 (Final) auth_username_format = %Lu disable_plaintext_auth = no mail_location = maildir:~/Maildir mail_plugins = " quota" mbox_write_locks = fcntl passdb { driver = pam } plugin { quota = fs:User quota quota_rule = *:storage=10M quota_rule2 = Trash:storage=+1M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=10%% quota-warning 10 %u } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol imap { mail_plugins = " quota imap_quota" } protocol pop3 { mail_plugins = " quota quota" pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv

1 0

[Dovecot] can not receive email upgrading from ubuntu 11.4 to 11.10
by Nikolaos Petronikolos 21 Oct '11

21 Oct '11

Dear all, I have the following error when i am sending an email to my email server postfix + dovecot. #5.3.0 x-unix; /usr/lib/dovecot/deliver: invalid option -- 'n' Usage: dovecot-lda [-c <config file>] [-a <address>] [-d <username>] [-p <path>] [-f <envelope sender>] [-m <mailbox>] [-e] [-k]> #SMTP# The problem occurred after i upgraded my server from ubuntu 11.4 to 11.10. i kindly ask you if you can help me thank you in advance for your kind attention. -- View this message in context: http://old.nabble.com/can-not-receive-email-upgrading-from-ubuntu-11.4-to-1… Sent from the Dovecot mailing list archive at Nabble.com.

2 2

[Dovecot] Don't Know Where Emails Are Or What's Happening
by Jack Fredrikson 21 Oct '11

21 Oct '11

Hi; I'm new to Dovecot and Postfix. I'm trying to enable these with MySQL support and postfixadmin. I've got all those services up and running (finally!); however, I can't figure out if the emails are being received and/or stored. I'm pretty sure Postfix is receiving them because I dealt with certain errors and they're now gone. Here's some data: Dovecot ver. 0.91 [root@example postfix]# /sbin/service dovecot -n doveconf: Warning: NOTE: You can get a new clean config file with: doveconf -n > dovecot-new.conf doveconf: Warning: Obsolete setting in /usr/local/etc/dovecot/dovecot.conf:5: imap_client_workarounds=outlook-idle is no longer necessary doveconf: Warning: Obsolete setting in /usr/local/etc/dovecot/dovecot.conf:17: add auth_ prefix to all settings inside auth {} and remove the auth {} section completely doveconf: Warning: Obsolete setting in /usr/local/etc/dovecot/dovecot.conf:21: passdb sql {} has been replaced by passdb { driver=sql } doveconf: Warning: Obsolete setting in /usr/local/etc/dovecot/dovecot.conf:24: userdb sql {} has been replaced by userdb { driver=sql } doveconf: Warning: Obsolete setting in /usr/local/etc/dovecot/dovecot.conf:27: userdb prefetch {} has been replaced by userdb { driver=prefetch } doveconf: Warning: Obsolete setting in /usr/local/etc/dovecot/dovecot.conf:29: auth_user has been replaced by service auth { user } Usage: /etc/init.d/dovecot {start|stop|reload|restart|force-reload} tail /var/log/maillog Oct 20 10:13:59 example postfix/smtpd[28141]: warning: problem talking to service rewrite: Success Oct 20 10:13:59 example postfix/master[4000]: warning: process /usr/libexec/postfix/trivial-rewrite pid 30178 exit status 1 Oct 20 10:13:59 example postfix/master[4000]: warning: process /usr/libexec/postfix/trivial-rewrite pid 30179 exit status 1 Oct 20 10:13:59 example postfix/smtpd[28458]: warning: problem talking to service rewrite: Success Oct 20 10:13:59 example postfix/master[4000]: warning: process /usr/libexec/postfix/trivial-rewrite pid 30180 exit status 1 Oct 20 10:13:59 example postfix/master[4000]: warning: process /usr/libexec/postfix/trivial-rewrite pid 30181 exit status 1 Oct 20 10:13:59 example postfix/smtpd[28483]: warning: problem talking to service rewrite: Success Oct 20 10:13:59 example postfix/smtpd[28460]: warning: problem talking to service rewrite: Success Oct 20 10:13:59 example postfix/master[4000]: warning: process /usr/libexec/postfix/trivial-rewrite pid 30182 exit status 1 Oct 20 10:13:59 example postfix/smtpd[28455]: warning: problem talking to service rewrite: Success Oct 20 10:13:59 example postfix/master[4000]: warning: process /usr/libexec/postfix/trivial-rewrite pid 30183 exit status 1 Oct 20 10:13:59 example postfix/smtpd[28484]: warning: problem talking to service rewrite: Success Oct 20 10:13:59 example postfix/master[4000]: warning: process /usr/libexec/postfix/trivial-rewrite pid 30184 exit status 1 Oct 20 10:13:59 example postfix/smtpd[29917]: warning: problem talking to service rewrite: Success Oct 20 10:13:59 example postfix/master[4000]: warning: process /usr/libexec/postfix/trivial-rewrite pid 30185 exit status 1 Oct 20 10:13:59 example postfix/smtpd[29953]: warning: problem talking to service rewrite: Success Oct 20 10:13:59 example postfix/master[4000]: warning: process /usr/libexec/postfix/trivial-rewrite pid 30186 exit status 1 Oct 20 10:13:59 example postfix/smtpd[28485]: warning: problem talking to service rewrite: Success Oct 20 10:13:59 example postfix/master[4000]: warning: process /usr/libexec/postfix/trivial-rewrite pid 30187 exit status 1 Oct 20 10:14:15 example postfix/smtpd[30152]: connect from unknown[66.248.165.32] Oct 20 10:14:15 example postfix/smtpd[30152]: lost connection after EHLO from unknown[66.248.165.32] Oct 20 10:14:15 example postfix/smtpd[30152]: disconnect from unknown[66.248.165.32] I also get this in there: Oct 20 10:13:15 example postfix/smtpd[30152]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled Oct 20 10:13:15 example postfix/smtpd[30152]: cannot load Certificate Authority data: disabling TLS support Oct 20 10:13:15 example postfix/smtpd[30152]: warning: TLS library problem: 30152:error:02001002:system library:fopen:No such file or directory:bss_file.c:122:fopen('/etc/pki/tls/c erts/cert.pem','r'): Oct 20 10:13:15 example postfix/smtpd[30152]: warning: TLS library problem: 30152:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:125: Oct 20 10:13:15 example postfix/smtpd[30152]: warning: TLS library problem: 30152:error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib:by_file.c:279: Oct 20 10:13:15 example postfix/smtpd[30152]: connect from unknown[66.248.165.32] Oct 20 10:13:15 example postfix/smtpd[30152]: lost connection after EHLO from unknown[66.248.165.32] Oct 20 10:13:15 example postfix/smtpd[30152]: disconnect from unknown[66.248.165.32] Oct 20 10:13:57 example postfix/proxymap[28446]: warning: mysql query failed: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version f or the right syntax to use near '??gifteatszone.com??? AND active = 1' at line 1 Oct 20 10:13:57 example postfix/trivial-rewrite[30154]: fatal: proxy:mysql:/etc/postfix/mysql_virtual_alias_maps.cf(0,lock|fold_fix): table lookup problem Oct 20 10:13:57 example postfix/trivial-rewrite[30155]: fatal: proxy:mysql:/etc/postfix/mysql_virtual_alias_maps.cf(0,lock|fold_fix): table lookup problem Oct 20 10:13:57 example postfix/proxymap[28444]: warning: mysql query failed: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version f or the right syntax to use near '??awakelunch.info??? AND active = 1' at line 1 I reckon the failing of mysql inquiries just has to do with hackers trying to hack me. The TLS problem isn't mission-critical since it's just getting disabled. [root@example jack]# ps wax|grep dovecot 20223 ? Ss 0:00 /usr/local/sbin/dovecot 20224 ? S 0:00 dovecot/anvil 20225 ? S 0:00 dovecot/log 31832 ? S 0:00 dovecot/config 31833 ? S 0:00 dovecot/auth 31836 pts/2 S+ 0:00 grep dovecot [root@example jack]# ps wax|grep postfix 4000 ? Ss 0:01 /usr/libexec/postfix/master 31839 pts/2 S+ 0:00 grep postfix [root@example jack]# ps wax|grep postfixadmin 31842 pts/2 S+ 0:00 grep postfixadmin [root@example jack]# ps wax|grep saslauthd 16337 ? Ss 0:00 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam -n 2 16338 ? S 0:00 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam -n 2 25718 ? S 0:00 /usr/sbin/saslauthd -d -a pam 25719 ? S 0:00 /usr/sbin/saslauthd -d -a pam 25720 ? S 0:00 /usr/sbin/saslauthd -d -a pam 25721 ? S 0:00 /usr/sbin/saslauthd -d -a pam 25722 ? S 0:00 /usr/sbin/saslauthd -d -a pam 32052 pts/2 S+ 0:00 grep saslauthd I also tried this: First send a test mail to yourself (as your own non-root user): echo "Hello me" | mail -s "Dovecot test" $USER Now, find where the mail went. Here's a simple script which checks the most common locations: for mbox in /var/mail/$USER /var/spool/mail/$USER ~/mbox ~/mail/* ~/*; do grep -q "Dovecot test" $mbox && echo "mbox: $mbox" done grep -q "Dovecot test" ~/Maildir/new/* 2>/dev/null && echo "Maildir: ~/Maildir" and the mail was not found. This from my dovecot.conf file: mail_location = maildir:/var/vmail/%d/%u #but there's nothing there. ... auth default { # Having "login" also as a mechanism make sure outlook can use the auth smtpd as well # http://wiki.dovecot.org/Authentication/Mechanisms mechanisms = plain login passdb sql { args = /usr/local/etc/dovecot/sql.conf } userdb sql { args = /usr/local/etc/dovecot/sql.conf } userdb prefetch { } user = nobody socket listen { master { path = /var/run/dovecot/auth-master mode = 0660 user = vmail group = mail } client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = mail } } } Telnetting to port 25 brings up Postfix, to port 110 brings up Dovecot TIA,Jack

2 6

[Dovecot] Quota
by nuno marques 21 Oct '11

21 Oct '11

hi, I'm having some difficulty understanding the connection between postfix, dovecot and quota. What is the best way to set up quotas? through the file system quota and maildir? Need the dovecot lda working? The postfix needs a patch? I was thinking about setting quotas on file system, then configure Postfix to connect to dovecot-lda. Any suggestion? The system as a whole is composed of:dovecot-2.0-0.10.beta6.20100630.el6.x86_64 -> 2.0.beta6 (3156315704ef)openldap-servers-2.4.19-15.el6_0.2.x86_64postfix-2.6.6-2.1.el6_0.x86_64mailscanner-4.84.3-1.noarchspamassassin-3.3.1-2.el6.x86_64centos 6 2.6.32-71.29.1.el6.x86_64 #1 SMP Mon Jun 27 19:49:27 BST 2011 x86_64 x86_64 x86_64 GNU/Linux

4 4

[Dovecot] Email filters
by Jos Chrispijn 21 Oct '11

21 Oct '11

Can someone tell me how I can configure Dovecot to use message filters on incoming email? When I now activate my mail account on my mobile phone and Thunderbird (or any other mail client with message filters) is not online, I get a huge pile of email in my INBOX that I have to go thru, while 90% is not that interesting to read as they belong to Spam messages, newsletters etc. Thanks in advance Jos Chrispijn

2 3

[Dovecot] Expire plugin not executing for sieve plugin?
by Dan Swartzendruber 20 Oct '11

20 Oct '11

Running dovecot 1.2.12 on ubuntu 10.10. Here is the problem: I have mysql backend for expire. I am using the dovecot-postfix package which creates /etc/dovecot/conf.d/01-mail-stack-delivery.conf which looks like this: # Some general options protocols = imap imaps managesieve disable_plaintext_auth = no ssl = yes ssl_cert_file = /etc/ssl/certs/ssl-mail.pem ssl_key_file = /etc/ssl/private/ssl-mail.key ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM mail_location = maildir:~/Maildir auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ # IMAP configuration protocol imap { mail_max_userip_connections = 10 imap_client_workarounds = outlook-idle delay-newmail mail_plugins = expire } # LDA configuration protocol lda { postmaster_address = postmaster mail_plugins = sieve expire quota_full_tempfail = yes deliver_log_format = msgid=%m: %$ rejection_reason = Your message to <%t> was automatically rejected:%n%r } # Plugins configuration plugin { sieve=~/.dovecot.sieve sieve_dir=~/sieve # If the user has no personal active script (i.e. if the file # indicated in sieve= does not exist), use this one: sieve_global_path = /var/lib/dovecot/sieve/default.sieve } The sieve is: require "fileinto"; require "imap4flags"; if header :contains "X-Spam-Flag" "YES" { setflag "\\Seen"; fileinto "SPAM"; stop; } Originally, this did not have the setflag or stop - I added them hoping to fix the problem, but no luck. The problem is this: when spam assassin has flagged a message as spam, the sieve runs and the message is in fact filed into the SPAM folder, but no expire entry is added to the database. If I move such a message from the SPAM folder to the Inbox and then back to SPAM, voila, I *do* get the entry created. Here is the mysql table before and after I did the move/move: mysql> select * from expires; +----------+---------------+--------------+ | username | mailbox | expire_stamp | +----------+---------------+--------------+ | dswartz | Deleted Items | 1319720163 | | dswartz | Sent | 1319120165 | | denise | Trash | 1319139920 | | samantha | Trash | 1319136146 | | denise | Sent | 1319655872 | | danielle | Sent | 1319192230 | | samantha | Sent | 1319268855 | | dswartz | Trash | 1319725884 | | samantha | SPAM | 1321504531 | +----------+---------------+--------------+ 9 rows in set (0.00 sec) mysql> select * from expires; +----------+---------------+--------------+ | username | mailbox | expire_stamp | +----------+---------------+--------------+ | dswartz | Deleted Items | 1319720163 | | dswartz | Sent | 1319120165 | | denise | Trash | 1319139920 | | samantha | Trash | 1319136146 | | denise | Sent | 1319655872 | | danielle | Sent | 1319192230 | | samantha | Sent | 1319268855 | | dswartz | Trash | 1319725884 | | samantha | SPAM | 1321504531 | | dswartz | SPAM | 1321714666 | +----------+---------------+--------------+ 10 rows in set (0.00 sec) It's almost like the fileinto stuff is not running the plugin code at all, or am I totally on drugs? If I can't get a fix for this, I at least now can think of a hack to "fix" it. e.g. every night, run a script that adds a "now" timestamp for everyone's SPAM folder to trick the periodic expire tool code into checking that folder, but obviously I'd rather have a real fix :) If this is just 'how it works', is it better in 2.0?

1 0

[Dovecot] too many open files and v1.2
by Michael Moritz 20 Oct '11

20 Oct '11

Hi I've found an older thread http://www.dovecot.org/list/dovecot/2010-March/047886.html which mentions that this is a bug in version 1. I'm on Debian squeeze (1:1.2.15-7) and got errors like these recently Oct 5 11:29:29 mail dovecot: dovecot: pipe() failed: Too many open files Oct 5 11:29:32 mail dovecot: dovecot: pipe() failed: Too many open files Oct 5 11:29:32 mail dovecot: dovecot: Temporary failure in creating login processes, slowing down for now As a work around I've increased login_max_processes_count from 256 to 512 and it seems to have helped (as I suspected stale opened files). My colleague thinks it's hitting the kernel open file limit ulimit -n (currently at 1024) but I don't see how that could happen if the number of process is nowhere near that. Any ideas? Thanks, Michael

2 2

[Dovecot] Is '*:bytes=" quota specification the quota 'Value', or 'Limit'?
by Rich 19 Oct '11

19 Oct '11

Docs for quota configuration http://wiki2.dovecot.org/Quota/Configuration#Limit_configuration state that the 'bytes=' specification defines the quota **LIMIT** "bytes: Quota limit in bytes, 0 means unlimited" as used in plugin { ... quota_rule = *:bytes=10000000 ... BUT, documentation for quota dict http://wiki2.dovecot.org/Quota/Dict states "MySQL uses the following queries to update the quota" and provides an SQL example of Dovecot decrementing the 'bytes' value, "UPDATE table SET bytes=bytes-14433,messages=messages-2 ..." I'm working on a current problem (http://dovecot.org/list/dovecot/2011-October/061538.html) with 'doveadm' reporting mixing up quote Value & Limit. Question: Is 'bytes' supposed to contain the Value, or the Limit? Rich

1 0

[Dovecot] 'doveadm quota get' dictionary SQL query ignores specified '@domain' part of username. bad config or bug?
by Rich 19 Oct '11

19 Oct '11

Hi, I'm setting up SQL quota usage in Dovecot2. I've created a MAILBOX parameter table, 'PARAMS', that contains unique <user>@<domain> pairs, with quota data. mysql> select * from PARAMS; +----+------------------------+------------+-------------+------------+ | ai | MAILBOX_user_domain | quota | quota_bytes | quota_msgs | +----+------------------------+------------+-------------+------------+ | 1 | myuser(a)domain1.com | 1073741824 | 0 | 0 | | 2 | myuser(a)domain2.com | 1000000000 | 0 | 0 | +----+------------------------+------------+-------------+------------+ 2 rows in set (0.00 sec) I've specified dict usage for quota, /etc/dovecot/dovecot.conf !include conf.d/*.conf protocols = imap lmtp dict { quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } created the maps, /etc/dovecot/dovecot-dict-sql.conf.ext connect = host=/var/run/mysql/mysql.sock dbname=my_db user=my_user password=my_pass map { pattern = priv/quota/storage table = PARAMS username_field = MAILBOX_user_domain value_field = quota_bytes } map { pattern = priv/quota/messages table = PARAMS username_field = MAILBOX_user_domain value_field = quota_msgs } assigned the global values and backend, /etc/dovecot/conf.d/90-quota.conf plugin { quota = dict:User Quota::proxy::quota quota_rule = *:storage=1GB:messages=10000 quota_rule2 = Trash:storage=+10%% } and specified the user iteration query /etc/dovecot/sql/virtmail-userdb-sql.cf driver = mysql connect = host=/var/run/mysql/mysql.sock dbname=my_db user=my_user password=my_pass user_query = CALL UserDBQuery('%n','%d'); iterate_query = SELECT `MAILBOX_user_domain` AS user FROM `PARAMS`; Verifying operation with with `doveadm`, I get a result from a !error query, doveadm quota get -u myuser(a)domain1.com Quota name Type Value Limit % User quota STORAGE 0 1048576 0 User quota MESSAGE 0 10000 0 doveadm quota get -u myuser(a)domain2.com Quota name Type Value Limit % User quota STORAGE 0 1048576 0 User quota MESSAGE 0 10000 0 But notice that there's no specificity by *domain*. Despite being provided the full <user>@<domain>, matched to the map, username_field = MAILBOX_user_domain the Dovecot dict query seems to ignore the <domain> part, and simply matches on the first of the tow identical <user> parts. Specifying "-A" doesn't help, doveadm quota get -A Username Quota name Type Value Limit % myuser(a)domain1.com User quota STORAGE 0 1048576 0 myuser(a)domain1.com User quota MESSAGE 0 10000 0 myuser(a)domain2.com User quota STORAGE 0 1048576 0 myuser(a)domain2.com User quota MESSAGE 0 10000 0 What needs to be done to get domain-specificity in the 'doveadm quota get' query? Is my configuration off, or incomplete, or is this a bug? Thanks, Rich

1 1

Re: [Dovecot] "doveadm log reopen" don't reopen separate lmtp log
by Henrik Larsson 18 Oct '11

18 Oct '11

I still see the issue below. Is there anyone running separate LMTP logging that could check if they experience the same issue? Best regards Henrik Larsson -------- Original Message -------- Subject: "doveadm log reopen" don't reopen separate lmtp log Date: Sun, 25 Sep 2011 00:23:49 +0200 From: Henrik Larsson <dovecot-user(a)spambox.dk> To: dovecot(a)dovecot.org Dear all I have setup separate pop3/imap log "/var/log/dovecot" and lmtp delivery log "/var/log/dovecot-deliver". After rotating logfiles, i run "doveadm log reopen". I see that my pop3/imap log "/var/log/dovecot" is used straight away, but my lmpt log "/var/log/dovecot-deliver" isn't used at first. After some time, usually a few minutes, logs are being written to this file anyway. But if I compare this to my maillog, it misses some deliveries just after the log rotation. Is there any problems with this configuration that should be corrected? --cut-- # doveconf -n # 2.0.15: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.2-STABLE amd64 auth_mechanisms = plain login digest-md5 cram-md5 first_valid_uid = 125 hostname = mail.larsson.it listen = * log_path = /var/log/dovecot mail_plugins = fts fts_squat zlib mail_privileged_group = postfix mail_temp_dir = /var/db/dovecot managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = prefix = separator = . type = private } namespace { hidden = yes inbox = no list = no location = prefix = INBOX. separator = . type = private } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { fts = squat fts_squat = partial=4 full=10 sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 lmtp sieve service auth-worker { user = $default_internal_user } service auth { unix_listener /home/mail/postfix/private/auth { group = postfix mode = 0666 user = postfix } } service lmtp { executable = lmtp -L unix_listener /home/mail/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/ssl/mail-chained.crt ssl_key = </etc/ssl/mail.key userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { log_path = /var/log/dovecot-deliver mail_plugins = fts fts_squat zlib sieve } protocol lda { mail_plugins = fts fts_squat zlib sieve } protocol imap { mail_plugins = fts fts_squat zlib imap_zlib } --cut-- Best regards Henrik Larsson

2 3

[Dovecot] mail_location in LDAP and variables
by Joseba Torre 18 Oct '11

18 Oct '11

Hi, Is it posible to use variables in mail_location when taken from ldap? How? I've tried mdbox:/buzones2/'%n'/mdbox mdbox:/buzones2/"%n"/mdbox mdbox:/buzones2/%n/mdbox but %n is never replaced by its value. Thanks! -- Joseba Torre. Vicegerencia de TICs, área de Explotación

2 2

[Dovecot] LDA/Postfix with quotas and without LMTP
by Steve Fatula 18 Oct '11

18 Oct '11

Reading the wiki page for dovecot2 and LDA/Postfix, the system users section (all mail delivery goes to system users)... It shows you can simply use postfix mailbox_command. There is this additional comment: "This command doesn't do a userdb lookup. If you want that (e.g. for per-user quota lookups) you need to add -d "$USER" parameter." So, i added that. Once adding it, I find I get an error: dovecot: lda: Error: userdb lookup: connect(/var/run/dovecot/auth-userdb) failed: Permission denied Using mailbox_command in Postfix means that dovecot-lda is running as the system user getting the mail. Which means it can't access the socket file. Of course, one can simply use mode 666 on it, but, then people can use it to find out information according to the doc, which I do not want. So, I am not sure why the doc says to add -d for per user quotas, without also mentioning the problem with doing that. I don't see how it can work? Assuming I need per user quotas, and I don't want to use LMTP, is there a good way around this without the security issue? Steve

2 2

[Dovecot] Syntax to specify sdbox: mail_location path?
by mephistopheles＠operamail.com 18 Oct '11

18 Oct '11

I'm implementing sdbox. In conf.d/10-mail.conf, with "maildir:" mail_location = maildir:/my_mailbox_path/%d/%n mail gets stored in /my_mailbox_path/%d/%n/new/ With "sdbox:" mail_location = sdbox:/my_mailbox_path/%d/%n mail gets stored in /my_mailbox_path/%d/%n/mailboxes/INBOX/dbox-Mails. How do I get rid of the '/mailboxes/' and '/dbox-Mails/' path components so sdbox stores in: /my_mailbox_path/%d/%n/INBOX @ wiki2.dovecot.org/MailboxFormat/dbox#Alternate_storage points out that 'ALT=' can change the *lookup* location, and messages can be *moved* to ALT storage using 'doveadm altmove'. Unclear what TAGS are available/used for 'sdbox'.

2 1

[Dovecot] Rare error with concurrent users searching with fts-solr
by Antonio Perez-Aranda 18 Oct '11

18 Oct '11

Hi all, If I start two o more connections with diferent users that make a search text to solr I get this message many times: Error: fts_solr: Query didn't return uid If I repeat the test about 2000 times, with only one user concurrent, with 60 diferent users, without concurrent, I get between 0. If I repeat the test about 2000 times, with 2 users concurrent, I get between 3 or 10 errors. If I repeat the test about 2000 times, with 4 users concurrent, I get between 10-20 errors. After see this error, I set a tcpdump to try to watch the SOLR XML and GET, I can watch that Solr send a xml like this: <response></response> with 200 as http status When the normal response is like this <response> <lst name="responseHeader"> <int name="status">0</int> <int name="QTime">1</int> <lst name="params"> <str name="fl">uid,score</str> <str name="sort">uid asc</str> <str name="q">BLABLABLA</str> <str name="fq">+user:"ANYUSER" +uidv:1208469916 +box:"ANYFOLDER" -ns:[* TO *]</str> <str name="rows">1</str> </lst> </lst> <result name="response" numFound="0" start="0" maxScore="0.0"/> </response> At first, I think that the problems it's in Solr, but after get all GET from tcpdump, I make a python script with urllib2 and send it all to Solr with the same concurrency and I can't get any error or "empty response" Have someone made a intensive concurrency tests over Dovecot + Solr ? -- Antonio Pérez-Aranda Alcaide aperezaranda(a)yaco.es Yaco Sistemas S.L. http://www.yaco.es/ C/ Rioja 5, 41001 Sevilla Teléfono +34 954 50 00 57 Fax +34 954 50 09 29

2 1

[Dovecot] 2.1 Plans
by Steve Fatula 18 Oct '11

18 Oct '11

Back in early 2010, Timo posted about a potential 2.1 feature to in essence reduce the number of imap/pop3 processes using various techniques since the code already supports multiple connections. It even went as far as moving all idle connections. I don't see this on the 2.1 roadmap. Is it still planned perhaps for 2.1? Thousands of imap processes going away is a great thing for me! So, just curious. Reference: http://dovecot.org/list/dovecot/2010-January/046148.html Steve

2 1

[Dovecot] Convert-tool maildir > mbox
by Bertrand Jacquin 18 Oct '11

18 Oct '11

Timo, Is seems that this commit broke convertion from Maildir to Mbox using dovecot 1.2 convert-tool binary : 2009-07-09 Timo Sirainen <tss(a)iki.fi> * src/plugins/convert/convert-storage.c: convert plugin: Fixed changing hierarchy separators in mailbox names when alt_hierarchy_char isn't set. [a9f719f9a509] <HEAD> Since, I get the following : $ convert-tool user1 /var/mail/example.com/user1 Maildir:/var/mail/example.com/user1 mbox:/var/mail/example.com/user1-mbox alt_hierarchy_char=_ Error: Mailbox conversion: Couldn't create mailbox Sent/test: Mailbox doesn't allow inferior mailboxes Error: Internal failure Strace give show me a failure after : access("/var/mail/example.com/user1/.Sent.test/cur", W_OK) = 0 stat("/var/mail/example.com/user1-mbox/Sent/test", 0x7fff843e73b0) = -1 ENOTDIR (Not a directory) write(2, "Error: Mailbox conversion: Couldn"..., 103Error: Mailbox conversion: Couldn't create mailbox Sent/test: Mailbox doesn't allow inferior mailboxes ) = 103 lstat("/var/mail/example.com/user1/.dovecot.convert.lock", {st_mode=S_IFREG|0644, st_size=12, ...}) = 0 unlink("/var/mail/example.com/user1/.dovecot.convert.lock") = 0 Is that somethinh known ? Didn't find anything interesting in archives. Maybe that kind of conversion have evolved since 2.0 ? Thanks, Beber

2 1

[Dovecot] doveadm mailbox list shows file system directories as mailboxes
by Jürgen Obermann 18 Oct '11

18 Oct '11

Hello. In our dovecvot we use mbox format with the default filesystem layout. Therefore it is not possible to have mailboxes which are subfolders of other mailboxes containing messages. The command "doveadm mailbox list" includes the file system directories, that contain only subfolders, as normal mailboxes in the output: archiv archiv/daemon archiv/dovecot Did I miss something in the dovecot configuration or is there a bug in the command "doveadm mailbox list"? # 2.0.13: /opt/local/etc/dovecot/dovecot.conf # OS: SunOS 5.10 sun4v auth_verbose = yes disable_plaintext_auth = no listen = imap.hrz.uni-giessen.de localhost mail_fsync = always mail_location = mbox:~/Mail:INBOX=/var/mail/%u mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = mail_log notify managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mmap_disable = yes namespace { inbox = yes location = prefix = separator = / type = private } namespace { hidden = yes list = no location = prefix = Mail/ separator = / subscriptions = yes type = private } Thanks, Jürgen -- Hochschulrechenzentrum der | Mail: Juergen.Obermann(a)hrz.uni-giessen.de Justus-Liebig-Universitaet | WWW: http://www.uni-giessen.de/obermann/ Heinrich-Buff-Ring 44 | Tel: 0641-99-13054 (0641-99-13001) D-35392 Giessen, Germany | Fax: 0641-99-13009

3 2

Re: [Dovecot] Spammers attempting SASL Auth
by Tom Pawlowski 17 Oct '11

17 Oct '11

Take a look at: http://hg.dovecot.org/dovecot-2.0/file/962df5d9413a/src/auth/auth-request.c on line 536. That's the auth service catching illegal characters and rejecting the attempt. It'll happen with or without a valid user. So, working as it should. As for spammers trying to brute force valid logins, yep, pretty common. Higher rate of success if they can mail from a known good server and account. * Simon Brereton <simon.brereton(a)buongiorno.com> [2011-10-17 11:51:15 -0400]: > On 17 October 2011 11:31, Robert Schetterer <robert(a)schetterer.org> wrote: > > Am 17.10.2011 17:16, schrieb Simon Brereton: > >> Hi > >> > >> This is a new one on me - I've never seen spammers attempt to use to SASL Auth to inject spam. None of the users they are trying (newsletter, dummy, test, etc.) exist, but what worries me is the illegal chars error - is this a known vulnerability in dovecot they are trying to exploit? I'm running 1:1.2.15-7 installed from apt-get.. > >> > >> Oct 17 15:07:16 mail postfix/smtpd[14422]: connect from unknown[208.86.147.92] > >> Oct 17 15:07:16 mail dovecot: auth(default): passdb(newsletter(a)mydomain.net,208.86.147.92): Attempted login with password having illegal chars > >> Oct 17 15:07:17 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<test(a)mydomain.net>, method=PLAIN, rip=208.86.147.92, lip=83.170.64.84 > >> Oct 17 15:07:18 mail postfix/smtpd[14403]: warning: 208.86.147.92: hostname default-208-86-147-92.nsihosting.net verification failed: Name or service not known > >> > >> > >> Simon > >> > > > > this maybe a brute force attack,or more easy someone missconfigured his > > client , you may use fail2ban etc to block it > > not directly related to dovecot > > 17 queries in 30 seconds is not a misconfigured client :) > > And I'm already using Fail2Ban - but as someone on this list pointed > out recently, that doesn't apply if they try X attempts on the same > connection. Although, I don't think that was case here - maybe I > should update my dovecot jail with that illegal chars line. But, be > that as it may - all these attempts failed because the user didn't > exist. What if the user exists though? Does this illegal chars make > a hole for them to enter through? > > Simon > -- Tom Pawlowski OIT-CSS System Administrator office: Hill 147 email: tompru(a)jla.rutgers.edu phone: (732) 445-2634

2 1

Re: [Dovecot] Spammers attempting SASL Auth
by Robert Schetterer 17 Oct '11

17 Oct '11

Am 17.10.2011 17:51, schrieb Simon Brereton: > On 17 October 2011 11:31, Robert Schetterer <robert(a)schetterer.org> wrote: >> Am 17.10.2011 17:16, schrieb Simon Brereton: >>> Hi >>> >>> This is a new one on me - I've never seen spammers attempt to use to SASL Auth to inject spam. None of the users they are trying (newsletter, dummy, test, etc.) exist, but what worries me is the illegal chars error - is this a known vulnerability in dovecot they are trying to exploit? I'm running 1:1.2.15-7 installed from apt-get.. >>> >>> Oct 17 15:07:16 mail postfix/smtpd[14422]: connect from unknown[208.86.147.92] >>> Oct 17 15:07:16 mail dovecot: auth(default): passdb(newsletter(a)mydomain.net,208.86.147.92): Attempted login with password having illegal chars >>> Oct 17 15:07:17 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<test(a)mydomain.net>, method=PLAIN, rip=208.86.147.92, lip=83.170.64.84 >>> Oct 17 15:07:18 mail postfix/smtpd[14403]: warning: 208.86.147.92: hostname default-208-86-147-92.nsihosting.net verification failed: Name or service not known >>> >>> >>> Simon >>> >> >> this maybe a brute force attack,or more easy someone missconfigured his >> client , you may use fail2ban etc to block it >> not directly related to dovecot > > 17 queries in 30 seconds is not a misconfigured client :) > > And I'm already using Fail2Ban - but as someone on this list pointed > out recently, that doesn't apply if they try X attempts on the same > connection. Although, I don't think that was case here - maybe I > should update my dovecot jail with that illegal chars line. But, be > that as it may - all these attempts failed because the user didn't > exist. What if the user exists though? Does this illegal chars make > a hole for them to enter through? > > Simon > as i posted you offlist, this is a smtp attack, look at your i.e fail2ban postfix rules, fail2ban dovecot ruel is for banning pop3/imap brute force -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

1 0

Re: [Dovecot] Spammers attempting SASL Auth
by Robert Schetterer 17 Oct '11

17 Oct '11

Am 17.10.2011 17:16, schrieb Simon Brereton: > Hi > > This is a new one on me - I've never seen spammers attempt to use to SASL Auth to inject spam. None of the users they are trying (newsletter, dummy, test, etc.) exist, but what worries me is the illegal chars error - is this a known vulnerability in dovecot they are trying to exploit? I'm running 1:1.2.15-7 installed from apt-get.. > > Oct 17 15:07:16 mail postfix/smtpd[14422]: connect from unknown[208.86.147.92] > Oct 17 15:07:16 mail dovecot: auth(default): passdb(newsletter(a)mydomain.net,208.86.147.92): Attempted login with password having illegal chars > Oct 17 15:07:17 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<test(a)mydomain.net>, method=PLAIN, rip=208.86.147.92, lip=83.170.64.84 > Oct 17 15:07:18 mail postfix/smtpd[14403]: warning: 208.86.147.92: hostname default-208-86-147-92.nsihosting.net verification failed: Name or service not known > > > Simon > this maybe a brute force attack,or more easy someone missconfigured his client , you may use fail2ban etc to block it not directly related to dovecot -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

2 1

[Dovecot] Spammers attempting SASL Auth
by Simon Brereton 17 Oct '11

17 Oct '11

Hi This is a new one on me - I've never seen spammers attempt to use to SASL Auth to inject spam. None of the users they are trying (newsletter, dummy, test, etc.) exist, but what worries me is the illegal chars error - is this a known vulnerability in dovecot they are trying to exploit? I'm running 1:1.2.15-7 installed from apt-get.. Oct 17 15:07:16 mail postfix/smtpd[14422]: connect from unknown[208.86.147.92] Oct 17 15:07:16 mail dovecot: auth(default): passdb(newsletter(a)mydomain.net,208.86.147.92): Attempted login with password having illegal chars Oct 17 15:07:17 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<test(a)mydomain.net>, method=PLAIN, rip=208.86.147.92, lip=83.170.64.84 Oct 17 15:07:18 mail postfix/smtpd[14403]: warning: 208.86.147.92: hostname default-208-86-147-92.nsihosting.net verification failed: Name or service not known Simon

1 0

[Dovecot] dovecot-antispam – Debian package
by Philipp Haselwarter 17 Oct '11

17 Oct '11

Dovecot2 has been around for a bit now but Eugene Paskevich's antispam plugin unfortunately still doesn't seem to have a tagged release. Has anyone by any chance rolled a .deb for the plugin that works on current Debian sid? -- Philipp Haselwarter

1 0

[Dovecot] lmtp performance
by Juan Carlos Sanchez 17 Oct '11

17 Oct '11

Hello: In the process of migration from version 1.2 to 2.0 have tried to use lmtp instead of lda as delivery agent. But unfortunately througput we get is poor with lmtp compared to lda. In peak times with lda we are able to deliver over 1800 messages/minute (high I/O but not affecting service) but if we switch to lmtp cannot deliver more than 300 mess/minute (very low I/O). This is enough for normal work but low under heavy load (distribution lists messages sometimes stay queued for 4 hours before deliver). We have arround 50000 boxes and use postfix as MTA How to increase lmtp performance? dovecot config for lda and lmtp: protocol lda { auth_socket_path = /usr/local/var/run/dovecot/auth-master info_log_path = /var/log/mail/dovecot_deliver.log log_path = /var/log/mail/dovecot_deliver.log mail_plugins = quota sieve zlib postmaster_address = postmaster(a)upm.es sendmail_path = /usr/lib/sendmail } protocol lmtp { info_log_path = /var/log/mail/dovecot_deliver.log log_path = /var/log/mail/dovecot_deliver.log mail_plugins = quota sieve zlib postmaster_address = postmaster(a)upm.es sendmail_path = /usr/lib/sendmail } In postfix I have: mailbox_transport = lmtp:unix:private/dovecot-lmtp Thanks in advance. -- ------------------------------------------------------ Juan Carlos Sanchez Hernandez Universidad Politecnica de Madrid ------------------------------------------------------

1 0

[Dovecot] Problems Configuring Pigeonhole/Seve
by Ian Barton 17 Oct '11

17 Oct '11

I am moving my email server from Ubuntu Lucid to Arch. The Arch server is running Dovecot V2.0.15. Email is working fine, but I can't get Pigeonhiole/sieve to work. My dovecot.conf is: protocols = imap sieve ssl = yes ssl_cert = </etc/ssl/certs/mail2.wilkesley.net.crt ssl_key = </etc/ssl/private/mail2.wilkesley.net.key first_valid_uid = 5000 first_valid_gid = 5000 auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ namespace { location = maildir:/home/vmail/%d/%n/Maildir type = private prefix = INBOX. inbox = yes hidden = yes } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep } protocol lda { postmaster_address = ian(a)wilkesley.net hostname = wilkesley.org sendmail_path = /usr/sbin/sendmail mail_plugins = $mail_plugins sieve } protocol sieve { # Nothing to do here as defaults are OK } plugin { sieve = ~/.dovecot.sieve sieve_global_path = /home/vmail/globalsieverc sieve_dir = ~/ } passdb { driver = sql args = /etc/dovecot/dovecot-sql.conf } userdb { driver = sql args = /etc/dovecot/dovecot-sql.conf } I have created the sieve dir in the virtual users folder. However sieve doesn't appear to be working. I have tried logging in manually to see if sieve is running, but get the following error: ian:~/ $ gnutls-cli --starttls -p 143 mail2.wilkesley.net [8:32:22] Resolving 'mail2.wilkesley.net'... Connecting to '127.0.0.1:143'... - Simple Client Mode: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN] Dovecot ready. STARTTLS STARTTLS BAD Error in IMAP command received by server. According to the Dovecot wiki this should reply with the capabilities of my server, Note the server sends and receives mail OK using starttls. So what am I doing wrong?

2 1

[Dovecot] Question about ionice & dovecot-deliver
by Maria Arrea 16 Oct '11

16 Oct '11

Hello We are running dovecot 2.0.13 with mdbox on RHEL 5.7 x64, ext4 filesystem. Sometimes we have a big load increase because a mailing list server send 16.000 32k messages in less than 3 minutes. We want to "slow down" delivery, we prefer slow delivery instead of logging out webmail users. I have the following line en /etc/postfix/master.cf: flags=DRhu user=userid argv=/usr/libexec/dovecot/deliver -d ${user} And in /etc/postfix/main.cf mailbox_command = /usr/libexec/dovecot/deliver I would like to add ionice to the equation, prefixing /usr/bin/ionice -c2 -n6 before the deliver lines in postfix config. Is there any other way of slowing down delivery speed vs imap access? Regards Maria

3 2

[Dovecot] Issue after upgrading to Ubuntu Server 11.10
by Chris Vanden Berghe 14 Oct '11

14 Oct '11

Hi all, After upgrading to Ubuntu Server 11.10 my mail setup stopped working. The error message I get is: lda: Error: userdb lookup: connect(/var/run/dovecot/auth-userdb) failed: Permission denied (euid=5000(vmail) egid=5000(vmail) missing +r perm: /var/run/dovecot/auth-userdb, euid is not dir owner) Does anybody have an idea how to solve this? Thanks, Chris. --- # 2.0.13: /etc/dovecot/dovecot.conf # OS: Linux 3.0.0-12-generic x86_64 Ubuntu 11.10 ext3 auth_verbose = yes log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/var/vmail/%u mail_privileged_group = mail maildir_stat_dirs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { fts = squat fts_squat = partial=4 full=10 } protocols = imap service auth { unix_listener /var/spool/postfix/private/auth-client { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = vmail mode = 0600 user = vmail } } service imap-login { inet_listener imap { address = localhost port = 143 } inet_listener imaps { address = * port = 993 } } ssl_cert = </etc/ssl/private/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = uid=5000 gid=5000 home=/var/vmail/%u driver = static } protocol imap { mail_max_userip_connections = 50 mail_plugins = fts fts_squat } protocol lda { mail_plugins = sieve }

1 1

Re: [Dovecot] Dovecot not processing through Sieve
by Stephan Bosch 13 Oct '11

13 Oct '11

Please reply to the list as well. On 10/13/2011 3:28 PM, Steven Kiehl wrote: > > On Thu, Oct 13, 2011 at 9:21 AM, Stephan Bosch <stephan(a)rename-it.nl > <mailto:stephan@rename-it.nl>> wrote: > > Are you sure you are using the Dovecot LDA (deliver)? Did you > follow these instructions in the wiki? > > http://wiki1.dovecot.org/LDA > http://wiki1.dovecot.org/LDA/Postfix > > From the looks of things, your Postfix currently still does its > own mail delivery instead of using the Dovecot LDA. You should see > entries in your log relating to LDA/deliver and Sieve, especially > since you enabled mail_debug. To test whether Sieve is configured > correctly (and to see what the Dovecot LDA normally logs), you can > also manually execute /usr/lib/dovecot/deliver and feed it a message. > > I am using Dovecot deliver to perform mail delivery. I'm absolutely > certain of this because I get spam scores and it is SpamAssassin that > actually hands the mail over to deliver. Here is my postfix master.cf > <http://master.cf> entry for spamc/deliver: > > dovespam unix n n n - - pipe > flags=DRhu user=dovemail:dovemail argv=/usr/bin/spamc -f -e > /usr/lib/dovecot/deliver -c /etc/dovecot/dovecot.conf -f ${sender} -d > ${user}@${nexthop} -n -m ${extension} Ok, then what do your logs say about delivery? Even when things are filed in INBOX, the logs should show that deliver and sieve are being executed and putting the mail there. http://wiki1.dovecot.org/Logging Regards, Stephan

2 1

[Dovecot] Sieve and UserDB/SQL support
by ben＠benweblife.fr 13 Oct '11

13 Oct '11

Hi, I would like to know if plugins of sieve support UserDB/SQL backend. For example, for the vacation plugin, is it possible to retrieve a field like "sieve_vacation_days", "sieve_vacation_reason", and so on.. on user_query? Or, there is a plan for implement this? Thanks ------ dovecot version: 2.0.13

2 1

[Dovecot] Dovecot not processing through Sieve
by Steven Kiehl 13 Oct '11

13 Oct '11

Hello everyone, I'm fairly new to Dovecot, but I've gotten the majority of things working except for Sieve. I'm running Dovecot 1.2.9 coupled with Postfix and SpamAssassin all with a virtual domains setup. I am receiving mail and it is being processed by all the plugins that operate through Postfix. The quota configured in Dovecot appears to be working because my mail client shows the configured quota. But the Sieve rules are not processing. I created a rule as follows to filter spam: require ["fileinto"]; # rule:[global-spam] if anyof (header :contains "Subject" "[SPAM]", header :contains "X-Spam-Flag" "YES") { fileinto "Junk"; } If I mail myself a message with [SPAM] in the title, it goes into my inbox regardless. I've run 'sieve-test' with the same email and it says it will file it into Junk. The Junk folder exists. I even tried adding :create and the "mailbox" plugin, but that didn't do anything either. Here is the relevant majority of my dovecot configuration: login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_privileged_group: mail mail_location: maildir:/home/dovecot/mail/domains/%d/%n/Maildir mail_debug: yes mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve imap_client_workarounds(default): outlook-idle delay-newmail tb-extra-mailbox-sep imap_client_workarounds(imap): outlook-idle delay-newmail tb-extra-mailbox-sep imap_client_workarounds(pop3): imap_client_workarounds(managesieve): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh pop3_client_workarounds(managesieve): namespace: type: private separator: / inbox: yes list: yes subscriptions: yes lda: *mail_plugins: quota sieve* quota_full_tempfail: yes deliver_log_format: msgid=%m: %$ rejection_reason: Your message to <%t> was automatically rejected:%n%r auth default: mechanisms: cram-md5 plain login passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: dovemail group: dovemail socket: type: listen client: path: /var/spool/postfix/private/dovecot-auth mode: 432 user: postfix group: postfix plugin: convert_mail: maildir:/home/dovecot/mail/domains/%d/%u/Maildir * sieve: /etc/dovecot/sieve/domains/%d/%n.sieve* * sieve_global_dir: /etc/dovecot/sieve/global/* quota: maildir:User quota_rule: INBOX:storage=500M quota_rule2: INBOX.Trash:storage=100M The sieve plugin exists in /usr/lib/dovecot/modules/lda/lib90_sieve_plugin.so, so I would assume I'd have to use *mail_plugin: sieve* as my configuration setting. Like I said, I am receiving emails to my domains without any problem, but sieve rules are not being processed. I can see the rules set up by using the Roundcube plugin, and I can create and edit rules through Roundcube, but nothing different happens when I send myself an email. It all just delivers to the inbox. Thanks for your help, Steve K.

2 1

[Dovecot] Auth Worker failures
by Simon Brereton 12 Oct '11

12 Oct '11

Hi I have a script that checks the logs each day and mails me invalid user attempts and authentication failures for the previous day. (I use fail2ban to ban multiple attempts in a short space of time). For some reason, this appears every day: Oct 11 06:25:12 mail dovecot: auth-worker(default): sql(simon(a)mydomain.net,127.0.0.1): Password mismatch Oct 11 06:25:19 mail dovecot: auth-worker(default): sql(simon(a)mydomain.net,127.0.0.1): Password mismatch Oct 11 06:25:31 mail dovecot: auth-worker(default): sql(simon(a)mydomain.net,127.0.0.1): Password mismatch Oct 11 06:25:48 mail dovecot: auth-worker(default): sql(simon(a)mydomain.net,127.0.0.1): Password mismatch Oct 11 06:26:10 mail dovecot: imap-login: Aborted login (auth failed, 4 attempts): user=<simon(a)mydomain.net>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Of all the accounts on the box, it's only mine that throws this up. Since its LIP is localhost, it could really only be for webmail - but I don't always leave the webmail open, so I'm curious to know how this gets there and what it is. Any suggestions? I find it difficult to believe I have an IMAP process in a script somewhere (especially with my user account - the postmaster account, I could believe, but not with my personal one).. The log time is UTC, so watching the process list at 2.24 is less than appealing! Simon

1 0

[Dovecot] dovecot2 auth-worker socket perms ignoring assigned ownership settings in conf.d/10-master.conf?
by mephistopheles＠operamail.com 12 Oct '11

12 Oct '11

I have Dovecot2 auth setup to run as user = doveauth group = dovecot configured in, vi conf.d/10-master.conf ... service auth { unix_listener /var/spool/postfix/private/auth { user = postfix group = postfix mode = 0660 } user = doveauth group = dovecot } service auth-worker { user = doveauth group = dovecot } ... When I start Dovecot, ls -al /var/run/dovecot/auth-* /bin/ls: No match. service dovecot-custom start Starting Dovecot ... done Dovect's auth-process sockets are created with different ownership than what I specified, ls -al /var/run/dovecot/auth-* srw------- 1 root root 0 Oct 11 19:30 /var/run/dovecot/auth-client srw------- 1 dovecot root 0 Oct 11 19:30 /var/run/dovecot/auth-login srw------- 1 root root 0 Oct 11 19:30 /var/run/dovecot/auth-master srw------- 1 root root 0 Oct 11 19:30 /var/run/dovecot/auth-userdb srw------- 1 dovecot root 0 Oct 11 19:30 /var/run/dovecot/auth-worker Which causes problems when I test AUTH, telnet 127.0.0.1 143 Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. a login "xxx(a)domain.loc" "testpass" a NO [UNAVAILABLE] Temporary authentication failure. * OK Waiting for authentication process to respond.. In logs, ==> /var/log/dovecot/dovecot-debug.log <== Oct 11 19:32:11 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/modules/auth Oct 11 19:32:11 auth: Debug: Module loaded: /usr/lib64/dovecot/modules/auth/libauthdb_ldap.so Oct 11 19:32:11 auth: Debug: Module loaded: /usr/lib64/dovecot/modules/auth/libdriver_mysql.so Oct 11 19:32:11 auth: Debug: Module loaded: /usr/lib64/dovecot/modules/auth/libdriver_pgsql.so Oct 11 19:32:11 auth: Debug: Module loaded: /usr/lib64/dovecot/modules/auth/libdriver_sqlite.so Oct 11 19:32:11 auth: Debug: Module loaded: /usr/lib64/dovecot/modules/auth/libmech_gssapi.so Oct 11 19:32:11 auth: Debug: auth client connected (pid=2397) Oct 11 19:32:17 auth: Debug: client in: AUTH 1 PLAIN service=imap secured lip=127.0.0.1 rip=127.0.0.1lport=143 rport=47016 resp=<hidden> ==> /var/log/dovecot/dovecot.log <== Oct 11 19:32:17 auth: Fatal: net_connect_unix(auth-worker) in directory /var/run/dovecot failed: Permission denied (euid=1101(doveauth) egid=305(dovecot) missing +r perm: /var/run/dovecot/auth-worker, dir owned by 305:305 mode=0755) What needs to change to get those sockets created with correct/assigned ownership & perms?

2 5

[Dovecot] To query two SQL tables for user verification over LMTP, should I use (a) two separate lookups? or (b) just one lookup with a boolean query?
by jake0534＠airpost.net 12 Oct '11

12 Oct '11

Hey all I've been running a Dovecot 1X server for awhile. Most of the config was pretty simple using flat files. I'm switching to Dovecot 2X now, and want to switch to using SQL for lookups so I can share info with the Postfix front end. For starters I setup two SIMPLE SQL tables -- a 'users' table and a 'aliases' table, where each user can have many aliases. I want to have Postfix check Dovecot's SASL/LMTP passdb to see if a <user>@<domain> exists. If yes, deliver through LMTP. If NO, reject it. Here are the table definitions so far, CREATE TABLE user ( userid TINYINT, user VARCHAR(64), domain VARCHAR(128), password VARCHAR(64), PRIMARY KEY (userid), UNIQUE (user,domain) ); CREATE TABLE alias ( aliasid TINYINT, alias VARCHAR(64), user VARCHAR(64), domain VARCHAR(128), PRIMARY KEY (aliasid), UNIQUE (domain,user,alias), CONSTRAINT fk_alias1 FOREIGN KEY (user) REFERENCES user (user) ON DELETE NO ACTION ON UPDATE NO ACTION, CONSTRAINT fk_alias2 FOREIGN KEY (domain) REFERENCES user (domain) ON DELETE NO ACTION ON UPDATE NO ACTION ); With flat file and just one table, 'users', I get how to setup LMTP. I can get Postfix delivering/rejecting over LMTP depending on if the user exists in the Dovecot passdb or not. I don't get how to do the SQL query in Dovecot if I have the TWO tables. An inbound <user>@<domain> needs to be auth'd as valid if it exists in EITHER 'user' OR 'alias' table. Do I need to use a single lookup for passdb with some sort of "IF EXISTS IN TABLE 'user' OR TABLE 'alias'" query? Or do I need to have TWO lookups, the main one for 'user' and a fallback one for 'alias' (like talked about here http://wiki2.dovecot.org/Authentication/MultipleDatabases)? Cheers! Jake

2 5

[Dovecot] using ecc-certificates (ellyptic curve) will not establish connection
by Fresel Michal - hi competence e.U. 11 Oct '11

11 Oct '11

hi I want to use ECC(ellyptic curve cryptography) for SSL-connections but somehow dovecot doesn't like my ECC-certificates :( I tried to test using following scenario: machine: debian 6 (x64) dovecot 2.0.15-0~auto+21 ((f6a2c0e8bc03) from http://xi.rename-it.nl/debian openssl 1.0.0e-2 from testing (as the default 0.9.8o-4squeeze3 needs also the parameter -cipher ECCdraft for testing) creating keys+cert for ecc (i.e. curves prime192v1, secp521r1) # openssl ecparam -name prime192v1 -genkey -out prime192v1.key # openssl req -new -key prime192v1.key -out prime192v1.csr # openssl req -x509 -in prime192v1.csr -key prime192v1.key -out prime192v1.crt testing these in 2 windows # openssl s_server -cert prime192v1.crt -key prime192v1.key -www # openssl s_client note: when using the default openssl version 0.9.8o-4squeeze3 you need to append -cipher ECCdraft output (cut) ... New, TLSv1/SSLv3, Cipher is ECDHE-ECDSA-AES256-SHA Server public key is 192 bit Secure Renegotiation IS supported Compression: zlib compression Expansion: zlib compression SSL-Session: Protocol : SSLv3 Cipher : ECDHE-ECDSA-AES256-SHA Session-ID: xxxxx Session-ID-ctx: Master-Key: xxxxx Key-Arg : None PSK identity: None PSK identity hint: None Compression: 1 (zlib compression) Start Time: xxxxx Timeout : 7200 (sec) Verify return code: 18 (self signed certificate) looks promising - also for the secp521r1 curve but when changing dovecot.conf to use these keys and certificates it won't use them and return errors # openssl s_client -port 993 CONNECTED(00000003) 140543456835240:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:s3_pkt.c:1195:SSL alert number 40 140543456835240:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake failure:s3_pkt.c:591: --- no peer certificate available --- No client certificate CA names sent --- SSL handshake has read 7 bytes and written 0 bytes --- New, (NONE), Cipher is (NONE) Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE SSL-Session: Protocol : SSLv3 Cipher : 0000 Session-ID: Session-ID-ctx: Master-Key: Key-Arg : None PSK identity: None PSK identity hint: None Start Time: xxxxx Timeout : 7200 (sec) Verify return code: 0 (ok) --- and the log gives (using verbose_ssl = yes in dovecot.conf) ==> /var/log/mail.log <== dovecot: imap-login: Warning: SSL: where=0x10, ret=1: before/accept initialization [127.0.0.1] ==> /var/log/mail.info <== dovecot: imap-login: Warning: SSL: where=0x10, ret=1: before/accept initialization [127.0.0.1] ==> /var/log/mail.warn <== dovecot: imap-login: Warning: SSL: where=0x10, ret=1: before/accept initialization [127.0.0.1] ==> /var/log/mail.log <== dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: before/accept initialization [127.0.0.1] ==> /var/log/mail.info <== dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: before/accept initialization [127.0.0.1] ==> /var/log/mail.warn <== dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: before/accept initialization [127.0.0.1] ==> /var/log/mail.log <== dovecot: imap-login: Warning: SSL alert: where=0x4008, ret=552: fatal handshake failure [127.0.0.1] ==> /var/log/mail.info <== dovecot: imap-login: Warning: SSL alert: where=0x4008, ret=552: fatal handshake failure [127.0.0.1] ==> /var/log/mail.warn <== dovecot: imap-login: Warning: SSL alert: where=0x4008, ret=552: fatal handshake failure [127.0.0.1] ==> /var/log/mail.log <== dovecot: imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client hello C [127.0.0.1] ==> /var/log/mail.info <== dovecot: imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client hello C [127.0.0.1] ==> /var/log/mail.warn <== dovecot: imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client hello C [127.0.0.1] ==> /var/log/mail.log <== dovecot: imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client hello C [127.0.0.1] dovecot: imap-login: Disconnected (no auth attempts): rip=127.0.0.1, lip=127.0.0.1, TLS handshaking: SSL_accept() failed: error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher ==> /var/log/mail.info <== dovecot: imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client hello C [127.0.0.1] dovecot: imap-login: Disconnected (no auth attempts): rip=127.0.0.1, lip=127.0.0.1, TLS handshaking: SSL_accept() failed: error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher ==> /var/log/mail.warn <== dovecot: imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client hello C [127.0.0.1] from doveconf -a: ssl = required ssl_ca = ssl_cert = </etc/ssl/certs/prime192v1.crt ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL ssl_key = </etc/ssl/certs/prime192v1.key ssl_key_password = ssl_parameters_regenerate = 168 ssl_verify_client_cert = no Has anybody already tested this and made it working? Or do i have just to recompile everything to make it work? Greetings Mike

1 1

[Dovecot] inbox issue
by Eric Broch 10 Oct '11

10 Oct '11

I have dovecot 2.0.11 installed on a CentOS 5.7 email server. Two of the server email clients, one using Outlook and the other Thunderbird, have had all the contents of their inbox disappear only to reappear at a later time. One client's inbox email reappeared upon receiving a test email (to check if it would show up in the inbox) from another user. Has anyone heard of such a thing? Here's a dump of my dovecot configuration. # 2.0.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-238.19.1.el5 i686 CentOS release 5.7 (Final) auth_anonymous_username = anonymous auth_cache_negative_ttl = 1 hours auth_cache_size = 32 M auth_cache_ttl = 1 hours auth_debug = no auth_debug_passwords = no auth_default_realm = auth_failure_delay = 2 secs auth_first_valid_uid = 500 auth_gssapi_hostname = auth_krb5_keytab = auth_last_valid_uid = 0 auth_master_user_separator = auth_mechanisms = plain login digest-md5 cram-md5 auth_realms = auth_socket_path = auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Lu auth_username_translation = auth_verbose = no auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 30 base_dir = /var/run/dovecot config_cache_size = 1 M debug_log_path = default_client_limit = 1000 default_idle_kill = 60 default_internal_user = dovecot default_login_user = dovenull default_process_limit = 100 default_vsz_limit = 256 M deliver_log_format = msgid=%m: %$ dict_db_config = director_doveadm_port = 0 director_mail_servers = director_servers = director_user_expire = 15 mins disable_plaintext_auth = no dotlock_use_excl = yes doveadm_socket_path = doveadm-server doveadm_worker_count = 0 first_valid_gid = 1 first_valid_uid = 89 hostname = imap_capability = imap_client_workarounds = imap_id_log = imap_id_send = imap_idle_notify_interval = 2 mins imap_logout_format = bytes=%i/%o imap_max_line_length = 64 k import_environment = TZ info_log_path = last_valid_gid = 0 last_valid_uid = 0 lda_mailbox_autocreate = no lda_mailbox_autosubscribe = no lda_original_recipient_header = libexec_dir = /usr/libexec/dovecot listen = *, :: lmtp_proxy = no lmtp_save_to_detail_mailbox = no lock_method = fcntl log_path = /var/log/dovecot.log log_timestamp = "%b %d %H:%M:%S " login_access_sockets = login_greeting = Dovecot toaster ready. login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c login_trusted_networks = mail_access_groups = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_cache_fields = flags mail_cache_min_mail_count = 0 mail_chroot = mail_debug = no mail_fsync = optimized mail_full_filesystem_access = no mail_gid = mail_home = mail_location = mail_log_prefix = "%s(%u): " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 10 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /usr/lib/dovecot mail_plugins = mail_privileged_group = mail_save_crlf = no mail_temp_dir = /tmp mail_uid = mailbox_idle_check_interval = 30 secs mailbox_list_index_disable = no maildir_copy_with_hardlinks = yes maildir_stat_dirs = no maildir_very_dirty_syncs = no master_user_separator = mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = dotlock fcntl mdbox_preallocate_space = no mdbox_rotate_interval = 0 mdbox_rotate_size = 2 M mmap_disable = no namespace { hidden = no inbox = yes list = yes location = prefix = INBOX. separator = . subscriptions = yes type = private } namespace { hidden = no inbox = no list = yes location = maildir:/home/vpopmail/domains/acemt.com/shared/projects prefix = projects. separator = . subscriptions = yes type = public } passdb { args = cache_key=%u webmail=127.0.0.1 deny = no driver = vpopmail master = no pass = no } plugin/quota = maildir pop3_client_workarounds = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_format = %08Xu%08Xv postmaster_address = protocols = imap quota_full_tempfail = no recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s sendmail_path = /usr/sbin/sendmail service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 4096 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener auth-client { group = mode = 0600 user = } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = } unix_listener auth-userdb { group = mode = 0600 user = } unix_listener login/login { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } unix_listener login/dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = port = 143 ssl = no } inet_listener imaps { address = port = 993 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login user = $default_login_user vsz_limit = 64 M } service imap { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 0 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 0 } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log user = vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 110 ssl = no } inet_listener pop3s { address = port = 995 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 64 M } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_ca = ssl_cert = </var/qmail/control/servercert.pem ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL ssl_key = </var/qmail/control/servercert.pem ssl_key_password = ssl_parameters_file = ssl-parameters.dat ssl_parameters_regenerate = 168 ssl_verify_client_cert = no submission_host = syslog_facility = mail userdb { args = cache_key=%u quota_template=quota_rule=*:backend=%q driver = vpopmail } valid_chroot_dirs = verbose_auth = no verbose_proctitle = no verbose_ssl = no version_ignore = no protocol imap { imap_client_workarounds = delay-newmail }

3 2

Re: [Dovecot] Filesystem quotas
by Joseph Tam 10 Oct '11

10 Oct '11

Timo Sirainen writes in response to Steve Fatula's query: > With imap_quota plugin it allows IMAP client to see how much quota is > used/left. You could also enable quota warnings. And configure the > quota exceeded error message. It could also prevent the catch-22 situation I wrote about earlier whereby a filesystem out-of-space condition will result in a user not being able get themselves out of that situation, since a mailbox operation (like a delete and expunge) will not be able to create a lockfile. Having quotas handled by the IMAP/LDA will allow extra room to handle this impasse. Disabling dotlock or using dotlock_try locking method are some other workarounds. Joseph Tam <jtam.home(a)gmail.com>

2 1

[Dovecot] Timeout leak in get quota
by Danilo 10 Oct '11

10 Oct '11

Hello! I wrote perl script for read current quota usage, it works but when I run the program I receive a warning in Dovecot log: 2011-09-29 14:45:30 doveadm(guest(a)testmail.com): Warning: Timeout leak: 0x7f14800ad970 This is the script: =============================== #!/usr/bin/perl use strict; use Socket; use IO::Handle; socket(TSOCK, PF_UNIX, SOCK_STREAM,0); connect(TSOCK, sockaddr_un("/var/run/dovecot/doveadm-server")) or print("ERROR!"); print "VERSION\tdoveadm-server\t1\t0\n"; print "\tguest\(a)testmail.com\tquota get\n"; print "=" x 20 . "\n"; if (defined(my $messg = <TSOCK>)) { print $messg; print TSOCK "VERSION\tdoveadm-server\t1\t0\n"; TSOCK->flush; print TSOCK "\tguest\(a)testmail.com\tquota get\n"; TSOCK->flush; $messg = <TSOCK>; print $messg; $messg = <TSOCK>; print $messg; close TSOCK; } ============================= I hope someone could help me to fix the warning. Thanks in advance, Dany

3 3

Re: [Dovecot] Group ACL
by Daniel L. Miller 10 Oct '11

10 Oct '11

On 10/7/2011 11:08 PM, Daniel L. Miller wrote: > On 10/6/2011 8:38 AM, Daniel L. Miller wrote: >> Using Dovecot 2.0, LDAP userdb & passdb, with prefetch: >> >> [..] >> >> I have added permissions for "$allshared" to a mailbox's Inbox. It >> does not appear in the shared folders list. Other mailboxes, with >> explicit permission for a given username, work fine. What am I doing >> wrong? >> > Am I, as usual, doing something wrong? > Is there anything else I should supply to help diagnose the issue? -- Daniel

1 0

[Dovecot] Filesystem quotas
by Steve Fatula 10 Oct '11

10 Oct '11

I am wondering if I really need to use dovecot quota functions or not. Assume for the moment, that, each system user has a quota defined using Linux quotas, and that the Maildir is within their quota limited directory. So, any mail (or files created by the user etc) that would exceed the quota obviously can't be created. In such an environment, is there any advantage to implementing the same quota already defined in the filesystem via dovecot? Or, can I just make things simpler and ignore dovecot quotas? Assuming I keep the index and control files out of the quota limited directories. I presume if exceeding filesystem quota, the mail will not be delivered of course. If using lmtp, I presume it stays in the queue to retry later for some period of time. Steve

4 4

Re: [Dovecot] Group ACL
by Daniel L. Miller 08 Oct '11

08 Oct '11

On 10/6/2011 8:38 AM, Daniel L. Miller wrote: > Using Dovecot 2.0, LDAP userdb & passdb, with prefetch: > > [..] > > I have added permissions for "$allshared" to a mailbox's Inbox. It > does not appear in the shared folders list. Other mailboxes, with > explicit permission for a given username, work fine. What am I doing > wrong? > Am I, as usual, doing something wrong? -- Daniel

1 0

[Dovecot] lazy expunge namespaces
by Micah Anderson 07 Oct '11

07 Oct '11

I turned on lazy_expunge and configured a namespace following the wiki[0] instructions for mdbox configuration: namespace { inbox = yes location = prefix = separator = . } namespace { hidden = yes inbox = no list = no location = prefix = INBOX. separator = . } namespace { location = mdbox:~/mdbox:MAILBOXDIR=expunged prefix = EXPUNGED. separator = . } This created an EXPUNGED mailbox in my client (thunderbird), which was greyed out. When I deleted things, they got put in the EXPUNGED mailbox, as expected, but I could not access them to try and "restore" them. The server would say that the mailbox did not exist. micah 0. http://wiki2.dovecot.org/Plugins/Lazyexpunge --

1 0

[Dovecot] doveadm mailbox subscribe wildcard
by Micah Anderson 07 Oct '11

07 Oct '11

Hi, I noticed that wildcards work like the following, as described in the man page: # doveadm mailbox list -s -u bob dovecot* dovecot dovecot/pigeonhole dovecot/pigeonhole/2.0 however, wildcard subscriptions don't work: # doveadm mailbox subscribe -u bob dovecot* # doveadm mailbox list -s -u bob dovecot* dovecot dovecot* dovecot/pigeonhole dovecot/pigeonhole/2.0 It seems I subscribed the non-existant mailbox called 'dovecot*' -- is there a better way to handle this? thanks! micah --

3 3

[Dovecot] Using dsync to synchronize pop3 mailbox <-> pop3 mailbox
by Tristan Goguen 07 Oct '11

07 Oct '11

Hi All, We're trying to get dsync to synchronize pop3 mailboxes on multiple servers. Is this possible? Any hints are appreciated. Thanks, Tristan Tristan Goguen CEO, ILAP® T: 416-250-5600 ext. 205 F: 416-250-6755 tgoguen(a)ilap.com www.ilap.com

1 0

[Dovecot] I'm the ONLY user that can get mail
by Ed Hochman 06 Oct '11

06 Oct '11

Hi, I'm stumped. I can access the postfix server to read my mail. BUT I'm the only user that can. Everyone else get rejected. Here's the syslog entry for another user: ...dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<jmarino>, method=PLAIN, rip=192.168.0.51, lip=192.168.0.189 And here's an entry for me: ...dovecot: pop3-login: Login: user=<ed>, method=PLAIN, rip=192.168.0.51, lip=192.168.0.189 So ONLY I am able to get my mail. And this is consistent. The other users and passwords are valid. I've re-set them just to be sure. I suspect it's a rights issue but I've checked the rights for all /var/mail files and they're all the same except the owner of the file is the actual owner. I also checked all the rights for the files in /etc/dovecot. They all look OK and they all have root/root for the owner and user. Since I installed the system and did all the editing of the configuration files it's possible, but unlikely, that I'm the owner or group of some key file. I've looked for that but found nothing suspicious. Is it possible I may have given myself root access? I don't see how. My UID is 1000. Does the fact I'm the first user (per my UID) make a difference? I would think not. So I'm stumped. I don't have a clue as to where to look or what to do next. Any thoughts will be greatly appreciated. This is Dovecot 1.2.15 on Ubuntu 11.04. A new/clean install. Plaintext passwords are allowed. Here's dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.38-11-generic i686 Ubuntu 11.04 protocols: pop3 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/pop3-login mail_privileged_group: mail mbox_write_locks: fcntl dotlock mail_executable: /usr/lib/dovecot/pop3 mail_plugin_dir: /usr/lib/dovecot/modules/pop3 auth default: passdb: driver: passwd passdb: driver: passwd-file args: /etc/passwd.dovecot userdb: driver: passwd Thanks

2 1

[Dovecot] Only using LMTP-delivery, where should domain & user aliases be configured, Dovecot or MTA conf?
by mephistopheles＠operamail.com 06 Oct '11

06 Oct '11

I have my MTA (Postfix) check Dovecot2 LMTP for existing users. No other delivery is done; this is a virtual/LMTP-only setup. I define known users in a Dovecot passwd-file, specified in conf.d/10-auth.conf passdb { args = ... username_format=%n /stor01/vmail/auth.d/%d/passwd e.g., vi /stor01/vmail/auth.d/mx1.domain1.com/passwd myuser:{scheme}####:... mail to: myuser(a)mx1.domain1.com is correctly auth'd and stored. I want two things to happen: (1) all mail to existing-users "@domain1.com" gets re-routed to "@mx1.domain1.com", i.e., map: myuser(a)domain1.com -> myuser(a)mx1.domain1.com and is accepted/not-rejected ONLY if 'myuser' is defined as a user in mx1.domain1.com/passwd and, (2) specific 'user' aliasing/remapping within a given domain, i.e. map: whatever(a)mx1.domain1.com -> myuser(a)mx1.domain1.com as long as 'myuser' is a defined user in mx1.domain1.com In these cases, where should I assign domain & mail aliases, Dovecot or the MTA's conf ?

1 0

[Dovecot] trouble setting up director, "invalid argument" for connect() call
by Jim Lawson 05 Oct '11

05 Oct '11

Hi Timo & everyone, I'm trying out a 2-node director setup, but I keep getting the following error: Oct 3 16:11:29 imapdir1 dovecot: master: Dovecot v2.0.15 starting up (core dumps disabled) Oct 3 16:11:34 imapdir1 dovecot: director: Error: connect(132.198.100.150:9090) failed: Invalid argument Oct 3 16:11:41 imapdir1 last message repeated 3 times Both nodes report this error. The director on each node is listening on port 9090 just fine: > [root@imapdir1 ~]# nc imapdir2 9090 > VERSION director 1 0 > ME 127.0.0.1 9090 > [root@imapdir2 ~]# nc imapdir1 9090 > VERSION director 1 0 > ME 127.0.0.1 9090 "doveadm director ring status" always reports failure of the peer: > [root@imapdir1 ~]# doveadm director ring status > director ip port type last > failed > 127.0.0.1 9090 self > never > 132.198.100.150 9090 2011-10-04 > 13:28:55 > [root@imapdir2 ~]# doveadm director ring status > director ip port type last > failed > 127.0.0.1 9090 self > never > 132.198.100.149 9090 2011-10-04 > 13:24:08 Has anyone else seen this? FWIW, a single-node director works fine, proxying IMAP, LMTP and POP. I'm guessing I have a broken config, but if I do I can't figure it out. Hope I'm not missing something *too* obvious... Here's doveconf -n from imapdir1: # 2.0.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-274.3.1.el5 x86_64 Red Hat Enterprise Linux Server release 5.7 (Tikanga) base_dir = /var/run/dovecot/ director_mail_servers = penguina.uvm.edu penguinb.uvm.edu penguinc.uvm.edu director_servers = imapdir1.uvm.edu imapdir2.uvm.edu lmtp_proxy = yes login_trusted_networks = 132.198.101.211,132.198.101.212,132.198.101.213,132.198.101.214,132.198.101.215,132.198.101.216,132.198.100.45,132.198.100.46,132.198.100.47 passdb { args = proxy=y nopassword=y protocol=smtp driver = static } service auth { unix_listener auth-userdb { group = mail mode = 0660 user = dovecot } } service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { port = 9090 } unix_listener director-userdb { mode = 0600 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director } service lmtp { client_limit = 1 inet_listener lmtp { port = 24 } unix_listener /var/lib/dovecot/lmtp-socket { group = root mode = 0600 user = root } } Best, Jim

1 1

[Dovecot] Dovecot + managesieve + ldap not working
by Philip Brechler 05 Oct '11

05 Oct '11

Hi, I want to use managesieve in my dovecot server which uses virtual users and a ldap for the users. This is in my dovecot.conf: # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 3.0.0-x86_64-jb1 x86_64 Debian 6.0.1 ext3 log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot-info.log log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps managesieve listen(default): * listen(imap): * listen(managesieve): *:2000 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_privileged_group: mail mail_uid: 5000 mail_gid: 5000 mail_location: maildir:/var/mail/%u/Maildir mail_debug: yes mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve lda: postmaster_address: pbrechler(a)piratenfraktion-berlin.de mail_plugins: sieve mail_plugin_dir: /usr/lib/dovecot/modules/lda auth default: mechanisms: plain login verbose: yes debug: yes passdb: driver: pam passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail plugin: sieve_dir: /var/mail/sievescript/%u_scripts/ sieve_extensions: +imapflags And my ldap conf: hosts = ldap.piratenfraktion-berlin.de auth_bind = yes auth_bind_userdn = uid=%u,ou=people,dc=domain,dc=de ldap_version = 3 base = dc=domaindc=de deref = never scope = subtree user_attrs = uid=mail=maildir:/var/mail/%$/Maildir/ user_filter = (|(&(objectClass=organizationalPerson)(uid=%Ln))(&(objectClass=organizationalPerson)(mail=%Lu))) pass_attrs = uid=user,userPassword=password pass_filter = (&(objectClass=organizationalPerson)(uid=%u)) If I try to talk to managesieve with telnet this happens: Trying ::1... Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. "IMPLEMENTATION" "dovecot" "SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator- i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date imapflags" "SASL" "PLAIN LOGIN" "STARTTLS" "NOTIFY" "mailto" "VERSION" "1.0" OK "Dovecot ready." # ca. 2 Seconds pause AUTHENTICATE "PLAIN" "xxxxxxxxxxxxx" BYE "Internal error occured. Refer to server log for more information. [2011-10-02 00:48:09]" Connection closed by foreign host. Dies is a log reading 2011-10-02 00:48:09 MANAGESIEVE(user): Fatal: Failed to create sieve storage with data: /var/mail/sievescript/user_scripts But the permissions are 775 dovecot:dovecot and the system tells me that dovecot was the last user who had access to the directory. Can someone help me? Thanks! kind regards Philip Brechler

2 3

[Dovecot] doveadm(user001): Fatal: passdb lookup failed
by mailing lists 05 Oct '11

05 Oct '11

Hello all, why I can run whis command: imap1:~ # doveadm user user001 userdb: user001 mail : maildir:/var/maildir/vol04/4/46/user001 home : /var/mailfilter/vol04/4/46/user001 quota_rule: *:bytes=100000000 but not this one: imap1:~ # doveadm quota get -u user001 doveadm(user001): Error: user user001: Auth PASS lookup failed doveadm(user001): Fatal: passdb lookup failed what I'm missing ? /-------------------/ imap1:/etc/dovecot # grep ^[^#] dovecot-ldap.conf.ext uris = ldap://ldap.example.com dn = cn=admin,dc=example,dc=com dnpass = secret sasl_bind = no tls = no auth_bind = yes ldap_version = 3 base = dc=example,dc=com deref = never scope = subtree user_attrs = mailbox=mail=maildir:/var/maildir/%$,homeFilter=home,mailQuota=quota_rule=*:bytes=%$ user_filter = (&(objectClass=CourierMailAccount)(uid=%n)) pass_attrs = uid=user,userPassword=password pass_filter = (&(objectClass=CourierMailAccount)(uid=%n)) iterate_filter = (objectClass=CourierMailAccount) imap1:/etc/dovecot # dovecot -n # 2.0.14: /etc/dovecot/dovecot.conf # OS: Linux 2.6.34.7-0.7-xen x86_64 openSUSE 11.3 (x86_64) auth_debug = yes auth_verbose = yes base_dir = /var/run/dovecot/ disable_plaintext_auth = no doveadm_proxy_port = 24244 doveadm_socket_path = localhost:24244 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_debug = yes mail_fsync = always mail_gid = 5000 mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = acl quota notify quota = maildir:User Quota quota_exceeded_message = Quota exceded quota_rule2 = Trash:storage=+50M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=90%% quota-warning 90 %u mail_uid = 5000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mmap_disable = yes namespace { inbox = yes list = yes location = prefix = separator = . subscriptions = yes } namespace { hidden = yes inbox = no list = no location = prefix = INBOX. separator = . subscriptions = no } namespace { list = children location = maildir:/var/virtual-maildir/%%n:INDEX=~/shared.%%n prefix = shared.%%n. separator = . subscriptions = no type = shared } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = file:/var/maildir/shared-mailboxes mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid from subject size vsize flags mail_plugins = " mail_log notify" sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = nonresponse(a)example.com service auth { unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service dict { unix_listener dict { group = vmail mode = 0600 user = vmail } } service doveadm { inet_listener { port = 24244 } } service imap { process_limit = 1024 } service lmtp { inet_listener lmtp { port = 24 } unix_listener lmtp { group = vmail mode = 0666 user = vmail } } service pop3-login { inet_listener pop3 { port = 110 } } service pop3 { process_limit = 1024 } service quota-warning { executable = script /etc/dovecot/quota-warning.sh user = vmail } ssl = no userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes protocol lmtp { mail_plugins = acl quota notify sieve } protocol lda { mail_plugins = acl quota notify sieve } protocol imap { mail_max_userip_connections = 100 mail_plugins = acl quota notify imap_acl autocreate imap_quota } protocol pop3 { pop3_uidl_format = %v-%u } local 100.1.245.101/28/28 { doveadm_password = secret }

1 0

[Dovecot] sieve vacation reply
by Wojciech Giel 04 Oct '11

04 Oct '11

Hi, I'm configuring postfix with dovecot and roundcube. I'm using flat files as passwdb userdb. Everything works fine except sieve vacation reply. when i send mail from ex. user dennis to tytus I get "discarding vacation response for message implicitly delivered to". What Am i doing wrong? thanks sieve: using sieve path for user's script: /home/tytus/.dovecot.sieve 2011-05-17 16:56:45 deliver(tytus): Info: sieve: opening script /home/tytus/.dovecot.sieve 2011-05-17 16:56:45 deliver(tytus): Info: sieve: executing compiled script /home/tytus/.dovecot.sieve 2011-05-17 16:56:45 deliver(tytus): Info: sieve: msgid=<20110517155641.GA3452(a)badger.example.com>: discarding vacation response for message implicitly delivered to <tytus@badger> /etc/postfix/main.cf ... mailbox_command = /usr/lib/dovecot/deliver -n -m "${EXTENSION}" ... # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.1 log_path: /var/log/dovecot.log log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps managesieve listen(default): * listen(imap): * listen(managesieve): 127.0.0.1:2000 ssl_ca_file: /etc/postfix/ssl/cacert.pem ssl_cert_file: /etc/postfix/ssl/servercrt.pem ssl_key_file: /etc/postfix/ssl/serverkey.pem ssl_cipher_list: ALL:!LOW:!SSLv2 login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_location: maildir:~/Maildir:INDEX=~/Maildir/indexes mail_debug: yes mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): quota imap_quota autocreate mail_plugins(imap): quota imap_quota autocreate mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve imap_client_workarounds(default): tb-extra-mailbox-sep netscape-eoh delay-newmail outlook-idle imap_client_workarounds(imap): tb-extra-mailbox-sep netscape-eoh delay-newmail outlook-idle imap_client_workarounds(managesieve): lda: postmaster_address: postmaster mail_plugins: sieve quota autocreate quota_full_tempfail: yes deliver_log_format: msgid=%m: %$ rejection_reason: Your message to <%t> was automatically rejected:%n%r log_path: /var/log/sieve.log auth default: mechanisms: plain login cram-md5 verbose: yes debug: yes debug_passwords: yes passdb: driver: pam passdb: driver: passwd-file args: scheme=cram-md5 /etc/dovecot/passwd userdb: driver: passwd-file args: /etc/dovecot/passwd userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/dovecot-auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 plugin: sieve: ~/.dovecot.sieve sieve_dir: ~/sieve autocreate: INBOX autocreate2: Sent autocreate3: Trash autocreate4: Drafts autocreate5: Junk autosubscribe: INBOX autosubscribe2: Sent autosubscribe3: Trash autosubscribe4: Drafts autosubscribe5: Junk quota: maildir:User quota quota_rule: Trash:storage=10M quota_warning: storage=85%% /usr/bin/dovecot-quota-warning.sh 85 quota_warning2: storage=90%% /usr/bin/dovecot-quota-warning.sh 90 quota_warning3: storage=95%% /usr/bin/dovecot-quota-warning.sh 95

5 7

[Dovecot] Missing man page for doveadm move
by Jeetu 04 Oct '11

04 Oct '11

Hi, i cant see man pages for doveadm-move, though the command "doveadm move ..." works on new version of dovecot. http://hg.dovecot.org/dovecot-2.0/rev/d7a02077d91f -- -Jeetu

2 2

[Dovecot] What best decision to make for flatfiles or SQL when I use Dovecot2 + Postfix together?
by terryjames9461＠mm.st 04 Oct '11

04 Oct '11

Hello, I'm moving my mail server from Exchange to an opensource one. After a bunch of reading, I decided on building a Dovecot2 + Postfix server in a VirtualUsers-only + Multiple-domains configuration. Since my messages will be stored by Dovecot, and the documentation is really good, I figured that it's smartest to configure Dovecot, then make Postfix 'fit' to it, sharing the data files that way. I read through lots of the Dovecot wiki for v2. There are many ways for storing the database data. My goal is to only have data in one instances, used by both Postfix & Dovecot. I'm a little confused about: to do that sharing-in-one-place, do I have to use SQL or can I use the flatfiles like passwd-db? I think for sure someone already decided the best approach for this, and maybe I'm not understanding the logic to it. The data I think I need to share are: users (user(a)domain.com) passwords user aliases (mapping user2(a)domain.com -> user1(a)domain.com) domains domain aliases (domain.com also receives email for domain2.com) And I think all of this can be in passwd-db in Dovecot. But I also want to make sure that Postfix ONLY accepts email for users/domains that exist, so it has to read that data too. Can I do this that way with the flatfiles? Or do I have to use the SQL approach? TJ

12 20

Re: [Dovecot] SSL only for external connections
by Joseph Tam 04 Oct '11

04 Oct '11

On Sun, 2 Oct 2011, Simon Brereton writes: > I don't have that file. Part of the problem is that I'm confused > between protocols and wrappers and interfaces :) Dick and Michael have > persuaded me that it's just easier to for Horde not to ask for TLS on > port 143 - because that's in fact what I was doing - and it's > pointless. > > Nonetheless, I think it would be nice to tell Dovecot listen on the > local interface for IMAP. Listen on the external interface for IMAP, > IMAPS, POP and POP3S. But if there's not simple way to do that I don't > have a valid use-case for doing it right now. I got into this thread rather late so maybe I missed something here. If you have different policies for your interface, you can run two different instances of dovecot (with 2 different base directories and sets of configuration files). I haven't tried it, but maybe it's also possible have interface specific CAPA strings and remove STARTTLS. Dovecot will support unencrypted sessions over the localhost interface, but your webmail seems to opportunistcally use it when offered, so don't offer it. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Intermittent authentication failures
by Eric Shubert 03 Oct '11

03 Oct '11

I'm running dovecot with vpopmail. Here's the configuration: [root@wong log]# dovecot -n # 2.0.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-238.9.1.el5 i686 CentOS release 5.6 (Final) auth_cache_size = 32 M auth_mechanisms = plain login digest-md5 cram-md5 auth_username_format = %Lu first_valid_uid = 89 log_path = /var/log/dovecot.log login_greeting = Dovecot toaster ready. mail_fsync = always mail_nfs_index = yes mail_nfs_storage = yes mmap_disable = yes namespace { inbox = yes location = prefix = separator = . type = private } passdb { args = cache_key=%u webmail=127.0.0.1 driver = vpopmail } plugin/quota = maildir protocols = imap ssl_cert = </var/qmail/control/servercert.pem ssl_key = </var/qmail/control/servercert.pem userdb { args = cache_key=%u quota_template=quota_rule=*:backend=%q driver = vpopmail } protocol imap { imap_client_workarounds = delay-newmail } Most clients use TLS and PLAIN login for verification, which works flawlessly. I also run SquirrelMail that is slightly dated and has no TLS capability, so it is using CRAM-MD5. CRAM-MD5 works sometimes: Sep 30 08:15:43 imap-login: Info: Login: user=<userA(a)domain.com>, method=CRAM-MD5, rip=192.168.252.8, lip=192.168.252.14, mpid=20301 but (seemingly more frequently) the authentication fails: Sep 30 08:16:41 imap-login: Info: Aborted login (auth failed, 1 attempts): user=<userA(a)domain.com>, method=CRAM-MD5, rip=192.168.252.8, lip=192.168.252.14 I restarted dovecot, and that apparently cleared the problem for one user, but not others. Is this perhaps a bug in dovecot, or would the problem lie with vpopmail? TIA for any pointers. -- -Eric 'shubes'

2 6

[Dovecot] Multiple LDAP authentication servers
by Romer Ventura 03 Oct '11

03 Oct '11

Hello, We are performing a Domain migration and I was wondering if there was any way to get Dovecot to authenticate to more than 1 LDAP server? Currently dovecot is configure to query the "mail" attribute from Active Directory and when found it binds with the credentials the user provided. This works fine, but when migrating user accounts, they get disabled in the source domain so that the user can no longer log on to it. But disabling the account in the source domain, causes the user to be unable to use his email account. Is there any way to get dovecot to try a second LDAP server if the first one fails to authenticate..? ~# dovecot -n # 1.2.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.29-xs5.5.0.15 i686 Debian 5.0.4 ext3 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps imap ssl_cert_file: /etc/ssl/certs/smtpd.crt ssl_key_file: /etc/ssl/private/smtpd.key login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login login_user: postfix mail_privileged_group: mail mail_uid: vmail mail_gid: vmail mail_location: maildir:/srv/mail/vmail/%Ud/%Ln/Maildir mbox_write_locks: fcntl dotlock imap_client_workarounds: delay-newmail outlook-idle netscape-eoh lda: postmaster_address: postmaster(a)h-st.com auth_socket_path: /var/run/dovecot/auth-master log_path: /var/log/dovecot-deliver.log info_log_path: /var/log/dovecot-deliver-info.log auth default: mechanisms: plain login passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf socket: type: listen client: path: /var/spool/postfix/private/auth-client mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail Thanks -------- Romer Ventura

2 4

[Dovecot] clarifications on shared mailboxes
by Frank Bonnet 03 Oct '11

03 Oct '11

Hello I need some clarifications on shared mailboxes. Actually we use MBOX format with "real" unix users , but I've been asked to create some shared mailboxes for some users who need to have some for their working groups. What would be the best way to create those shared mailboxes ? Would it be possible to create some "shared space" on the server in maildir format to get advantage of the last seen flag ? If yes some config examples would be a great help. See attach the doveconf -n output ( certificates names have been obscured ;-) ) Thank you.

1 0

[Dovecot] 1.2.17 Program terminated with signal 11, Segmentation fault.
by Andrew Hearn 03 Oct '11

03 Oct '11

Hello, We've had seg faults a couple of times a day on our servers, we upgraded to 1.2.17 and still have them. running a coredump through dbg says: Reading symbols from /usr/local/libexec/dovecot/imap-login...done. [New Thread 27962] Reading symbols from /lib64/ld-linux-x86-64.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 warning: no loadable sections found in added symbol-file system-supplied DSO at 0x7fff083f4000 Core was generated by `imap-login -D'. Program terminated with signal 11, Segmentation fault. #0 0x000000000041388b in io_file_unlink (_io=<value optimized out>, closed=true) at ioloop.c:70 70 if (io->next != NULL) dovecot -n is at http://pastebin.ca/SQjrseJD (pass timo) Linux 2.6.18-274.3.1.el5 #1 SMP Tue Sep 6 20:13:52 EDT 2011 x86_64 x86_64 x86_64 GNU/Linux We use NFS for mail store, and ramdisk for dovecot indexes. We do run the mail_log plugin. Let me know if you need any more info though. -- Andrew Hearn. AAISP Technical Support Team Leader Tel: 03333 400999

1 0

[Dovecot] problem with getting outlook to work with IMAP server
by Daminto Lie 03 Oct '11

03 Oct '11

Hi, I am having difficulty in getting the outlook 2010 to connect to my server running on Ubuntu Server 10.04. I can login to Squirrelmail webmail, and am able to send & receive emails through squirrelmail with no problem whatsoever. However, this morning, I was trying to add a new account for the same user on Outlook 2010 and I got the following error from outlook as follows Send test e-mail message: Your outgoing (SMTP) e-mail server has reported an internal error. The server responded: 554 5.7.7 No Spoofing Allowed. I then, went to check /var/log/mail.log and I found the following Oct 3 12:19:27 mymailServer dovecot: auth(default): ldap(sbernett,50.4.39.163): pass search: base=ou=accounts,dc=example,dc=com scope=subtree filter=(&(objectClass=posixAccount)(uid=sbernett)) fields=uid,userPassword,homeDirectory,uidNumber,gidNumber Oct 3 12:19:27 mymailServer dovecot: auth(default): ldap(sbernett,50.4.39.163): result: uid(user)=sbernett uidNumber(userdb_uid)=106 gidNumber(userdb_gid)=106 userPassword(password)={CRYPT}xGHI86Ktls homeDirectory(userdb_home)=/home/vmail/sbernett Oct 3 12:19:27 mymailServer dovecot: auth(default): client out: OK#0111#011user=sbernett Oct 3 12:19:27 mymailServer dovecot: auth(default): master in: REQUEST#0114#0112686#0111 Oct 3 12:19:27 mymailServer dovecot: auth(default): passwd(sbernett,50.4.39.163): lookup Oct 3 12:19:27 mymailServer dovecot: auth(default): passwd(sbernett,50.4.39.163): unknown user Oct 3 12:19:27 mymailServer dovecot: auth(default): master out: USER#0114#011sbernett#011uid=106#011gid=106#011home=/home/vmail/sbernett Oct 3 12:19:27 mymailServer dovecot: imap-login: Login: user=<sbernett>, method=PLAIN, rip=50.4.39.163, lip=50.4.39.164 Oct 3 12:19:27 mymailServer dovecot: IMAP(sbernett): Disconnected in IDLE bytes=9/292 Oct 3 12:19:27 mymailServer postfix/smtpd[2766]: warning: No server certs available. TLS won't be enabled Oct 3 12:19:27 mymailServer postfix/smtpd[2766]: connect from localhost[127.0.0.1] Oct 3 12:19:27 mymailServer postfix/smtpd[2766]: 182292400AE: client=localhost[127.0.0.1] Oct 3 12:19:27 mymailServer postfix/smtpd[2766]: lost connection after DATA (0 bytes) from localhost[127.0.0.1] Oct 3 12:19:27 mymailServer postfix/smtpd[2766]: disconnect from localhost[127.0.0.1] Next, I tried to see if there are any the difference in the mail.log when logging into the squirrelmail (which is working for me) Oct 3 12:31:32 mymailServer dovecot: auth(default): ldap(sbernett,127.0.0.1): pass search: base=ou=accounts,dc=example,dc=com scope=subtree filter=(&(objectClass=posixAccount)(uid=sbernett)) fields=uid,userPassword,homeDirectory,uidNumber,gidNumber Oct 3 12:31:32 mymailServer dovecot: auth(default): ldap(sbernett,127.0.0.1): result: uid(user)=sbernett uidNumber(userdb_uid)=106 gidNumber(userdb_gid)=106 userPassword(password)={CRYPT}xGHI86Ktls homeDirectory(userdb_home)=/home/vmail/sbernett Oct 3 12:31:32 mymailServer dovecot: auth(default): client out: OK#0111#011user=sbernett Oct 3 12:31:32 mymailServer dovecot: auth(default): master in: REQUEST#0114#0112485#0111 Oct 3 12:31:32 mymailServer dovecot: auth(default): passwd(sbernett,127.0.0.1): lookup Oct 3 12:31:32 mymailServer dovecot: auth(default): passwd(sbernett,127.0.0.1): unknown user Oct 3 12:31:32 mymailServer dovecot: auth(default): master out: USER#0114#011sbernett#011uid=1004#011gid=1004#011home=/home/vmail/sbernett Oct 3 12:31:32 mymailServer dovecot: imap-login: Login: user=<sbernett>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured The only thing I noticed different between the two is the IP addresses in rip and lip. Is there a way to tell the IMAP server to allow the remote IP addresses to connect. Here is my dovecot.conf # 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-34-generic-pae i686 Ubuntu 10.04.3 LTS ext4 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap listen: *:143 ssl: no disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login verbose_proctitle: yes first_valid_uid: 106 last_valid_uid: 1000 mail_privileged_group: mail mail_location: maildir:/home/vmail/%u/Maildir mbox_write_locks: fcntl dotlock mail_plugins: quota imap_quota imap_client_workarounds: delay-newmail outlook-idle netscape-eoh lda: postmaster_address: postmaster(a)mailtest.dyndns-free.com mail_plugins: quota sendmail_path: /usr/lib/sendmail rejection_reason: Your message to <%t> was automatically rejected:%n%r auth_socket_path: /var/run/dovecot-auth-master auth default: mechanisms: plain login username_format: %Lu verbose: yes debug: yes debug_passwords: yes passdb: driver: pam passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: passwd userdb: driver: static args: uid=106 gid=106 home=/home/vmail/%u allow_all_users=yes socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: mail master: path: /var/run/dovecot-auth-master mode: 432 user: vmail group: vmail plugin: quota: maildir quota_rule: *:storage=3GB quota_rule2: Trash:storage=20%% quota_rule3: Spam:storage=10%% quota_warning: storage=95%% /usr/local/bin/quota-warning.sh 95 quota_warning2: storage=80%% /usr/local/bin/quota-warning.sh 80 Here is my postfix.cf myhostname = mymailserver mydomain = example.com mydestination = localhost.$mydomain,localhost,$mydomain,$myhostname local_recipient_maps = ldap:/etc/postfix/ldap-user-auth.cf virtual_transport = dovecot virtual_mailbox_domains = vexample.com virtual_mailbox_base = /home/vmail virtual_mailbox_maps = hash:/etc/postfix/virtual_mailboxes virtual_minimum_uid = 100 virtual_uid_maps = static:106 virtual_gid_maps = static:106 relayhost = mynetworks = 127.0.0.0/8, 192.168.1.0/24, 50.4.39.163, 50.4.39.164 mynetworks_style = subnet mailbox_size_limit = 0 recipient_delimiter = + inet_interfaces = all inet_protocols = ipv4 mail_spool_directory = /var/spool/mail smtpd_sasl_type = dovecot smtpd_sasl_path = private/auth smtpd_sasl_auth_enable = yes broken_sasl_auth_clients = yes smtpd_sasl_exceptions_networks = $mynetworks smtpd_sasl_security_options = noanonymous, noplaintext smtpd_sasl_tls_security_options = noanomymous smtpd_tls_auth_only = yes smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination,reject_sender_login_mismatch smtpd_sasl_local_domain = vexample.com dovecot_destination_recipient_limit = 1 Any help would be greatly appreciated. Thank you

1 0

Re: [Dovecot] FTS and compound searches
by Nikolai Schupbach 01 Oct '11

01 Oct '11

>> New subscriber here. I noticed that the FTS index is not used in compound searches. >> Is this expected? Tested in 2.0.0 and 2.0.8: > >Yep. It's been in TODO for a while. I know this thread is quite old, but we have the same issue with v2.0.14 and squat. Would this issue also affect the Solr FTS backend? Thanks, Nikolai.

2 1

Re: [Dovecot] Error message in log
by Joseph Tam 01 Oct '11

01 Oct '11

On Fri, 30 Sep 2011, Knute Johnson wrote: > I'm getting the following message in my log; > > dovecot: IMAP(knute): > fchown(/home/knute/mail/.imap/INBOX/dovecot.index.tmp, -1, 8(mail)) > failed: Operation not permitted (egid=1000(knute), group based on > /var/mail/knute): 4 Time(s) > > I got these once before on the /var/mail/user files and changed the > permissions to 600. /home/knute/mail/.imap/INBOX is 770 and the index > files are 600. Is this a problem with the directory privilege? Probably. This was discussed a few times before. Check the mailing list archives. Dovecot tries to retain the same file access for the indices as the mailbox/message file it indexes; if the permissions allow access to the group, but the owner is not part of that group, then the dovecot process (which sets UID to the owner) cannot recreate the same permissions, hence the error. Either change the group ownership of "/var/mail/knute", put user "knute" in group "mail", or chmod it to 0600. The last one is probably the best solution. And fix the problem that created these permissions in the first place. Check your other users (if you have any) for the same situation. Joseph Tam <jtam.home(a)gmail.com>

1 0

Re: [Dovecot] SSL only for external connections
by Dick Middleton 30 Sep '11

30 Sep '11

On 09/30/11 20:25, Simon Brereton wrote: > But the question remains - if only because it's now there - how does one limit services effectively in Dovecot. In Courier it was fairly easy and well documented. There's no reason for me to offer IMAPS or POP3S to localhost (because of the certificate issue) and there's also no reason for me to offer POP3 to localhost either. > > For posterity and for my own edification it would be nice to know how to do that. I don't think you can do that. However if you don't want to use tls/ssl just connect to port 143 plain. I don't know about horde but Roundcube you use tls://localhost, ssl://locahost or just localhost. i.e the choice is with the client not the server. Dick

3 2

Re: [Dovecot] SSL only for external connections
by Michael M Slusarz 30 Sep '11

30 Sep '11

Quoting Simon Brereton <simon.brereton(a)buongiorno.com>: >> -----Original Message----- >> From: dovecot-bounces(a)dovecot.org [mailto:dovecot- >> bounces(a)dovecot.org] On Behalf Of Stan Hoeppner >> On 9/30/2011 12:34 PM, Simon Brereton wrote: >> >> -----Original Message----- >> >> From: dovecot-bounces(a)dovecot.org [mailto:dovecot- >> >> bounces(a)dovecot.org] On Behalf Of Terry Carmen >> > >> >> >> >> If SSL/TLS works from the outside, but not the inside, you should >> >> probably find out why and fix that instead. >> > >> > You'd think so - but since I don't actually need TLS from the >> inside, >> > and given my skill level - disabling it seems easier :) >> >> You don't need TLS/SSL from the outside either, if this is strictly a >> webmail box. In this case, configure Apache/lighttpd+Horde to only >> accept HTTPS connections from the outside, and configure Horde to >> connect via the Dovecot localhost:143 listener. This is how I've >> been doing it with Roundcube for years. Works like a champ. > > It's not strictly a webmail box though. IMAP clients (fixed and > mobile) connect to it. So what I'd like is IMAP, IMAPS, POP3 and > POP3S on the outside and IMAP only on the local host (there's no > actual reason to offer POP to the localhost either... You can also configure the MUA (e.g. Horde) to not use a secure connection, as opposed to turning off features on the server level. michael

2 1

Re: [Dovecot] SSL only for external connections
by Michael M Slusarz 30 Sep '11

30 Sep '11

Quoting Simon Brereton <simon.brereton(a)buongiorno.com>: > But the question remains - if only because it's now there - how does > one limit services effectively in Dovecot. In Courier it was fairly > easy and well documented. There's no reason for me to offer IMAPS > or POP3S to localhost (because of the certificate issue) and there's > also no reason for me to offer POP3 to localhost either. > > For posterity and for my own edification it would be nice to know > how to do that. At a minimum, you can't disable TLS. If you disable TLS support in dovecot, the server is no longer IMAP 4rev1 compliant (see RFC 3501 [6.1.1] - STARTTLS MUST be supported by server). michael

1 0

[Dovecot] SSL only for external connections
by Terry Carmen 30 Sep '11

30 Sep '11

If SSL/TLS works from the outside, but not the inside, you should probably find out why and fix that instead. What is the actual error text? Terry -- Terry Carmen CNY Support, LLC https://www.cnysupport.com

3 3

Re: [Dovecot] SSL only for external connections
by Stan Hoeppner 30 Sep '11

30 Sep '11

On 9/30/2011 12:34 PM, Simon Brereton wrote: >> -----Original Message----- >> From: dovecot-bounces(a)dovecot.org [mailto:dovecot- >> bounces(a)dovecot.org] On Behalf Of Terry Carmen > >> >> If SSL/TLS works from the outside, but not the inside, you should >> probably find out why and fix that instead. > > You'd think so - but since I don't actually need TLS from the inside, and given my skill level - disabling it seems easier :) You don't need TLS/SSL from the outside either, if this is strictly a webmail box. In this case, configure Apache/lighttpd+Horde to only accept HTTPS connections from the outside, and configure Horde to connect via the Dovecot localhost:143 listener. This is how I've been doing it with Roundcube for years. Works like a champ. With encrypted sessions between browser and web server, and both Horde and Dovecot running on the same host, you don't need to, nor want to, use IMAPS. -- Stan

2 1

[Dovecot] SSL only for external connections
by Simon Brereton 30 Sep '11

30 Sep '11

Hi I'm running dovecot 1:1.2.15-7 and php webmail application is throwing errors when connecting to IMAP with TLS. Is there away to disable SSL/TLS for localhost connections? I googled, but didn't see anything specific. Can I assume that it's as simple as setting ssl_listen = to the external IP address(es) and leaving listen = * as it is? Thanks. Simon

1 0

[Dovecot] Panic: file lmtp-proxy.c: line 370 (lmtp_proxy_output_timeout): assertion failed: (proxy->data_input->eof)
by mailing lists 30 Sep '11

30 Sep '11

Hello all, today I got this crash from dovecot (2.0.14) Sep 29 14:09:32 imap1 dovecot: lmtp(17693): Panic: file lmtp-proxy.c: line 370 (lmtp_proxy_output_timeout): assertion failed: (proxy->data_input->eof) Sep 29 14:09:32 imap1 dovecot: lmtp(17693): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x3f9aa) [0x7f18f10299aa] -> /usr/lib64/dovecot/libdovecot.so.0(+0x3f9f6) [0x7f18f10299f6] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7f18f1003211] -> dovecot/lmtp(+0x7a4f) [0x7f18f1982a4f] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handle_timeouts+0xcb) [0x7f18f103590b] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x5b) [0x7f18f103680b] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f18f1035768] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f18f1023423] -> dovecot/lmtp(main+0x183) [0x7f18f197fa93] -> /lib64/libc.so.6(__libc_start_main+0xfd) [0x7f18f0ca8b7d] -> dovecot/lmtp(+0x4819) [0x7f18f197f819] Sep 29 14:09:32 imap1 dovecot: master: Error: service(lmtp): child 17693 killed with signal 6 (core dumps disabled) /-----------------/ # dovecot -n -c /etc/dovecot-director/dovecot.conf # 2.0.14: /etc/dovecot-director/dovecot.conf # OS: Linux 2.6.34.7-0.7-xen x86_64 openSUSE 11.3 (x86_64) auth_debug = yes auth_verbose = yes base_dir = /var/run/dovecot-director/ director_mail_servers = 100.1.245.101 100.1.245.105 director_servers = 100.1.245.101:9091 100.1.245.105:9091 100.1.241.204:9091 disable_plaintext_auth = no doveadm_proxy_port = 24245 lmtp_proxy = yes mail_debug = yes mail_fsync = always mail_gid = 5000 mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = acl mail_uid = 5000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mmap_disable = yes passdb { args = proxy=y nopassword=y driver = static } plugin { acl = vfile sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap lmtp pop3 service auth { unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { port = 9091 } unix_listener director-userdb { mode = 0666 } unix_listener login/director { mode = 0666 } } service doveadm { inet_listener { port = 24245 } } service imap-login { executable = imap-login director inet_listener imap { port = 10143 } } service lmtp { inet_listener lmtp { port = 1024 } } service pop3-login { executable = pop3-login director inet_listener pop3 { port = 10110 } } ssl = no verbose_proctitle = yes protocol lmtp { auth_socket_path = director-userdb passdb { args = proxy=y nopassword=y port=24 driver = static } } protocol imap { mail_max_userip_connections = 100 } local 100.1.245.101/28/28 { doveadm_password = secret }

2 1

[Dovecot] Error message in log
by Knute Johnson 30 Sep '11

30 Sep '11

I'm getting the following message in my log; dovecot: IMAP(knute): fchown(/home/knute/mail/.imap/INBOX/dovecot.index.cache.lock, -1, 8(mail)) failed: Operation not permitted (egid=1000(knute), group based on /var/mail/knute): 1 Time(s) dovecot: IMAP(knute): fchown(/home/knute/mail/.imap/INBOX/dovecot.index.log.newlock, -1, 8(mail)) failed: Operation not permitted (egid=1000(knute), group based on /var/mail/knute): 2 Time(s) dovecot: IMAP(knute): fchown(/home/knute/mail/.imap/INBOX/dovecot.index.tmp, -1, 8(mail)) failed: Operation not permitted (egid=1000(knute), group based on /var/mail/knute): 4 Time(s) I got these once before on the /var/mail/user files and changed the permissions to 600. /home/knute/mail/.imap/INBOX is 770 and the index files are 600. Is this a problem with the directory privilege? Thanks, -- Knute Johnson knute2011(a)knutejohnson.com

1 0

[Dovecot] Broken mail clients? [MIME] Long attachment encoded filenames (for non-ASCII characters etc)
by Andrew Richards 30 Sep '11

30 Sep '11

Hi, I've noticed a possible minor issue with long encoded filenames for attachments where these filenames are split across multiple lines. My understanding of character encoding and MIME is not as good as it should be, so I may easily have got this all mixed up, in which case sorry for the noise... Although I understand the preferred method for handling filenames split across multiple lines (because they're too long to fit on one line in the message) is that suggested in RFC2184/2231, so for example, filename*0*=iso-8859-1''accented_characters_here_%EA%CA%E6 filename*1=etc%2Epdf I find that some mail clients do this instead, filename="=?ISO-8859-1?Q?accented_characters_here_=EA=CA=E6?= =?ISO-8859-1?Q?etc=2Epdf?=" In Dovecot this results in, 0 fetch 25 body * 25 FETCH (BODY (("text" "plain" ("charset" "ISO-8859-1") NIL NIL "7bit" 239 8)("application" "pdf" ("name" "=?ISO-8859-1?Q?accented_characters_here_=EA=CA=E6?= =?ISO-8859-1?Q?etc=2Epdf?=") NIL NIL "base64" 219130) "mixed")) esp. note the unwanted space - or in fact the sequence ?= =? between the two sections of the filename. I think a possible tweak for Dovecot would be to combine the filename parts in this situation to remove the ?= =?. I'm not sure if an IMAP client should know to combine the parts in their current format. FWIW I see that Courier does the same as Dovecot in this situation. I think the 'alternative' method of splitting filenames I'm raising breaks RFC2047 (details below), but unfortunately this method is used by some large email generators like gmail - also details below. Key bits from RFC2047 section 5 part (3) re. only a single encoded-word ('phrase') being allowed for a MIME Content-Type / Content-Disposition: phrase = 1*( encoded-word / word ) An 'encoded-word' MUST NOT be used in parameter of a MIME Content-Type or Content-Disposition field, or in any structured field body except within a 'comment' or 'phrase'. Here are the mail clients I noted this issue with (original filenames destroyed because I've been examining my client's emails for this issue - with their permission), (AOL) X-Mailer: Webmail 33953-STANDARD Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="=?utf-8?Q?abcde?= =?utf-8?Q?abcde=C3=A9abcde.jpg?=" Content-Type: image/jpeg; name="=?utf-8?Q?abcde?= =?utf-8?Q?abcde=C3=A9abcde.jpg?=" Gmail: Content-Type: application/pdf; name="=?ISO-8859-1?Q?with_a_=EA=CA=E6_super=2Dlong_name_that=27s_bound?= =?ISO-8859-1?Q?_to_overflow_a_line_boundary_to_test_gmail=2Epdf?=" Content-Disposition: attachment; filename="=?ISO-8859-1?Q?with_a_=EA=CA=E6_super=2Dlong_name_that=27s_bound?= =?ISO-8859-1?Q?_to_overflow_a_line_boundary_to_test_gmail=2Epdf?=" X-Mailer: YahooMailWebService/0.8.113.313619 Content-Type: application/vnd.openxmlformats- officedocument.wordprocessingml.document; name="=?utf-8?B?base64encodedstring?= =?utf-8?B?base64encodedstring?=" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="=?utf-8?B?base64encodedstring?= =?utf-8?B?base64encodedstring?=" X-Mailer: Lotus Notes Release 6.5.5 November 30, 2005: Content-type: application/pdf; name="=?ISO-8859-1?Q?abcde=E9abcde=E9abcde=E9?= =?ISO-8859-1?Q?abcde=2Cl=2Epdf?=" Content-Disposition: attachment; filename="=?ISO-8859-1?Q?abcde=E9abcde=E9_abcde=E9?= =?ISO-8859-1?Q?abcde=2Cl=2Epdf?=" Content-ID: <20__=snip> Content-transfer-encoding: base64 X-Mailer: Lotus Domino Web Server Release 6.5.5FP1 HF551 November 27, 2007: Content-type: application/pdf; name="=?windows-1252?Q?abcde_=28=E9?= =?windows-1252?Q?=29=2Epdf?=" Content-Disposition: attachment; filename="=?windows-1252?Q?abcde_=28=E9?= =?windows-1252?Q?=29=2Epdf?=" Content-transfer-encoding: base64 Timo also noted the same style of filename encoding in Apple Mail in the previous thread I started, it would be interesting to try Apple Mail with a very long filename to cause it to split across multiple lines and see how it encodes the filename then, > Looks like Apple Mail also sends: > > Content-Type: application/octet-stream; > > name="=?iso-8859-1?Q?p=E4=E4?=" Best regards, Andrew.

2 2

[Dovecot] Long attachment encoded filenames (for non-ASCII characters etc) in MIME headers & corresponding Dovecot behaviour
by Andrew Richards 30 Sep '11

30 Sep '11

(Correction: Subject was confused) Hi, I've noticed a possible minor issue with long encoded filenames for attachments where these filenames are split across multiple lines. My understanding of character encoding and MIME is not as good as it should be, so I may easily have got this all mixed up, in which case sorry for the noise... Although I understand the preferred method for handling filenames split across multiple lines (because they're too long to fit on one line in the message) is that suggested in RFC2184/2231, so for example, filename*0*=iso-8859-1''accented_characters_here_%EA%CA%E6 filename*1=etc%2Epdf I find that some mail clients do this instead, filename="=?ISO-8859-1?Q?accented_characters_here_=EA=CA=E6?= =?ISO-8859-1?Q?etc=2Epdf?=" In Dovecot this results in, 0 fetch 25 body * 25 FETCH (BODY (("text" "plain" ("charset" "ISO-8859-1") NIL NIL "7bit" 239 8)("application" "pdf" ("name" "=?ISO-8859-1?Q?accented_characters_here_=EA=CA=E6?= =?ISO-8859-1?Q?etc=2Epdf?=") NIL NIL "base64" 219130) "mixed")) esp. note the unwanted space - or in fact the sequence ?= =? between the two sections of the filename. I think a possible tweak for Dovecot would be to combine the filename parts in this situation to remove the ?= =?. I'm not sure if an IMAP client should know to combine the parts in their current format. FWIW I see that Courier does the same as Dovecot in this situation. I think the 'alternative' method of splitting filenames I'm raising breaks RFC2047 (details below), but unfortunately this method is used by some large email generators like gmail - also details below. Key bits from RFC2047 section 5 part (3) re. only a single encoded-word ('phrase') being allowed for a MIME Content-Type / Content-Disposition: phrase = 1*( encoded-word / word ) An 'encoded-word' MUST NOT be used in parameter of a MIME Content-Type or Content-Disposition field, or in any structured field body except within a 'comment' or 'phrase'. Here are the mail clients I noted this issue with (original filenames destroyed because I've been examining my client's emails for this issue - with their permission), (AOL) X-Mailer: Webmail 33953-STANDARD Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="=?utf-8?Q?abcde?= =?utf-8?Q?abcde=C3=A9abcde.jpg?=" Content-Type: image/jpeg; name="=?utf-8?Q?abcde?= =?utf-8?Q?abcde=C3=A9abcde.jpg?=" Gmail: Content-Type: application/pdf; name="=?ISO-8859-1?Q?with_a_=EA=CA=E6_super=2Dlong_name_that=27s_bound?= =?ISO-8859-1?Q?_to_overflow_a_line_boundary_to_test_gmail=2Epdf?=" Content-Disposition: attachment; filename="=?ISO-8859-1?Q?with_a_=EA=CA=E6_super=2Dlong_name_that=27s_bound?= =?ISO-8859-1?Q?_to_overflow_a_line_boundary_to_test_gmail=2Epdf?=" X-Mailer: YahooMailWebService/0.8.113.313619 Content-Type: application/vnd.openxmlformats- officedocument.wordprocessingml.document; name="=?utf-8?B?base64encodedstring?= =?utf-8?B?base64encodedstring?=" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="=?utf-8?B?base64encodedstring?= =?utf-8?B?base64encodedstring?=" X-Mailer: Lotus Notes Release 6.5.5 November 30, 2005: Content-type: application/pdf; name="=?ISO-8859-1?Q?abcde=E9abcde=E9abcde=E9?= =?ISO-8859-1?Q?abcde=2Cl=2Epdf?=" Content-Disposition: attachment; filename="=?ISO-8859-1?Q?abcde=E9abcde=E9_abcde=E9?= =?ISO-8859-1?Q?abcde=2Cl=2Epdf?=" Content-ID: <20__=snip> Content-transfer-encoding: base64 X-Mailer: Lotus Domino Web Server Release 6.5.5FP1 HF551 November 27, 2007: Content-type: application/pdf; name="=?windows-1252?Q?abcde_=28=E9?= =?windows-1252?Q?=29=2Epdf?=" Content-Disposition: attachment; filename="=?windows-1252?Q?abcde_=28=E9?= =?windows-1252?Q?=29=2Epdf?=" Content-transfer-encoding: base64 Timo also noted the same style of filename encoding in Apple Mail in the previous thread I started, it would be interesting to try Apple Mail with a very long filename to cause it to split across multiple lines and see how it encodes the filename then, > Looks like Apple Mail also sends: > > Content-Type: application/octet-stream; > > name="=?iso-8859-1?Q?p=E4=E4?=" Best regards, Andrew.

1 0

[Dovecot] Dovecot failing to parse some UTF-8 encoded attachment filenames, returning empty string instead
by Andrew Richards 30 Sep '11

30 Sep '11

Hi, I'm seeing a strange problem with some attachment filenames that are UTF-8 encoded. The problem seems to be related to spaces and/or unusual characters in filenames, like accented characters (or perhaps just to filenames if UTF-8 encoded; I've not explored that fully). These filenames are shown as empty strings in IMAP using Dovecot. I've attached a sample message that exhibits this problem, trimmed down to fairly bare essentials. By comparison I find that (for example) Courier happily returns the filename (still encoded). Although I suspect the problem lies within Dovecot, it may be an underlying Unicode or other component that's at the root of the problem. I can replicate this by putting the attached message in a mailbox (I'm using Maildir format mailboxes, so I just drop the raw file in Maildir/new and change the ownership of the file to match the mailbox owner). Then a pretend IMAP session to show the problem, $ telnet localhost 143 Trying ::1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. 0 login some.one(a)test.domain password 0 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS] Logged in 0 select inbox * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 4 EXISTS * 0 RECENT * OK [UNSEEN 1] First unseen. * OK [UIDVALIDITY 1316621730] UIDs valid * OK [UIDNEXT 8] Predicted next UID * OK [HIGHESTMODSEQ 1] Highest 0 OK [READ-WRITE] Select completed. 0 fetch 4 body * 4 FETCH (BODY (("text" "html" ("charset" "iso-8859-15") NIL NIL "base64" 278 5)("application" "octet-stream" ("name" "") NIL NIL "base64" 18) "mixed")) 0 OK Fetch completed. 0 logout * BYE Logging out 0 OK Logout completed. Connection closed by foreign host. $ especially note the ("name" "") part showing a supposedly empty filename. I've observed this behaviour on the following versions of Dovecot, - 1.2.9 on Ubuntu 10.04LTS (pre-compiled version) - 1.2.17 on Fedora 13 (pre-compiled version) - 2.0.15 on Fedora 13 (from source) I don't think the Dovecot configuration is relevant, but I've put it below for good measure for the 2.0.15 setup. Any ideas on what might be causing this? Best regards, Andrew. # dovecot -n # 2.0.15: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.34.9-69.fc13.i686.PAE i686 Fedora release 13 (Goddard) auth_debug = yes default_login_user = nobody log_path = /var/log/dovecot.log passdb { args = /usr/local/bin/checkcdb driver = checkpassword } protocols = imap pop3 service auth { user = root } service imap-login { inet_listener imap { ssl = no } } service pop3-login { inet_listener pop3 { ssl = no } } ssl = no userdb { driver = prefetch }

2 4

[Dovecot] Virtual Folder configuration problem. [FIXED]
by Terry Carmen 29 Sep '11

29 Sep '11

Well, it took a ton of time and research, but I finally have a working Unread virtual mailbox on Dovecot 2.x on Centos 6.0. I have no idea if it's optimal or correct, but it works perfectly and doesn't raise any errors or warnings. Here's what I ended up with: dovecot.conf: Add the following: mail_plugins = $mail_plugins virtual namespace { type = private prefix = virtual. separator = . location = virtual:~/Maildir/virtual } 10-mail.conf: Add the following: # default namespace namespace { separator = . prefix = inbox = yes } 20-imap.conf: Add the following: protocol imap { mail_plugins = $mail_plugins virtual } 15-lda.conf: Add the following: protocol lda { mail_plugins = $mail_plugins virtual } Restart dovecot. Reload your mail client. Dovecot will create ~/Maildir/virtual cd ~/Maildir/virtual mkdir Unread Use your favorite editor and create a file named "dovecot-virtual" contaiing: # ~/Maildir/virtual/unseen/dovecot-virtual INBOX INBOX.* -INBOX.Trash unseen Save the file and restart your mail client. Go to "Subscriptions" in your mail client and subscribe to the Unseen folder. You should now have a virtual folder that contains all your unread mail, except for the contents of the Trash folder. Enjoy! -- Terry Carmen CNY Support, LLC https://www.cnysupport.com

1 0

[Dovecot] Error message
by Knute Johnson 29 Sep '11

29 Sep '11

I'm getting the following message in my log; dovecot: IMAP(knute): fchown(/home/knute/mail/.imap/INBOX/dovecot.index.cache.lock, -1, 8(mail)) failed: Operation not permitted (egid=1000(knute), group based on /var/mail/knute): 1 Time(s) dovecot: IMAP(knute): fchown(/home/knute/mail/.imap/INBOX/dovecot.index.log.newlock, -1, 8(mail)) failed: Operation not permitted (egid=1000(knute), group based on /var/mail/knute): 2 Time(s) dovecot: IMAP(knute): fchown(/home/knute/mail/.imap/INBOX/dovecot.index.tmp, -1, 8(mail)) failed: Operation not permitted (egid=1000(knute), group based on /var/mail/knute): 4 Time(s) I got these once before on the /var/mail/user files and changed the permissions to 600. /home/knute/mail/.imap/INBOX is 770 and the index files are 600. Is this a problem with the directory privilege? Thanks, -- Knute Johnson

1 0

[Dovecot] "Waiting for authentication process to respond" for invalid users with auth_dovecot
by Ibrahim Harrani 29 Sep '11

29 Sep '11

Hi, I am testing dovecot 2.0.13 and 2.0.14 with qmail-ldap and auth_dovecot patch. If i login to dovecot (pop3/imap) with correct user and password. no problem, I can login immediately. but if I try with nonexistant user, dovecot does not immediate answer, wait for a while and says "Waiting for authentication process to respond." auth_dovecot process remains working in the background. How can I avoid this situation? # telnet 0 143 Trying 0.0.0.0... Connected to 0. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN] Dovecot ready. o login validuser validpass o OK [CAPABILITY IMAP4rev1 LITERAL+ SASL o login validuser wrongpass o NO [UNAVAILABLE] Temporary authentication failure. o login non-existant anypass * OK Waiting for authentication process to respond.. Here is output of dovecot -n # OS: Linux 2.6.32-71.el6.x86_64 x86_64 CentOS Linux release 6.0 (Final) auth_debug = yes auth_verbose = yes base_dir = /var/run/dovecot disable_plaintext_auth = no first_valid_gid = 100 last_valid_gid = 65000 last_valid_uid = 65000 listen = * log_path = /var/log/dovecot mail_debug = yes mail_location = maildir:~/Maildir passdb { args =/opt/qmail/smtp/bin/auth_dovecot ./Maildir/ driver = checkpassword } plugin { mechanisms = plain login quota = maildir } protocols = imap pop3 service imap-login { inet_listener imaps { port = 993 ssl = yes } process_min_avail = 1 } service imap-postlogin { executable = script-login /opt/qmail/scripts/dovecotpostlogin.sh } service imap { executable = imap imap-postlogin } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } process_min_avail = 1 } ssl_cert = </etc/ssl/certs/mail.pem ssl_cipher_list = ALL ssl_key = </etc/ssl/private/mail.pem userdb { driver = prefetch } verbose_proctitle = yes verbose_ssl = yes protocol imap { mail_plugins = quota ssl_cert = </etc/ssl/certs/mail.pem ssl_key = </etc/ssl/private/mail.pem } protocol pop3 { mail_plugins = quota ssl_cert = </etc/ssl/certs/mail.pem ssl_key = </etc/ssl/private/mail.pem }

2 2

[Dovecot] outlook 2007 very slow.
by Kui Zhang 29 Sep '11

29 Sep '11

Hello I have a user with 2500+ sub folders. Total mailboxes size is around 6G. (mdbox, dovecot 2:2.0.14) Syncing/Receiving appears to be slow, with outlook 2007. He does not want to switch to an alternative, due to various reasons. I did not find any error logs indicate issues. during idle, imap process appears to loop at adding inotify watches to all folders. I found outlook-idle in wiki, but it is obsolete. doveconf: Warning: Obsolete setting in /etc/dovecot/conf.d/20-imap.conf:55: imap_client_workarounds=outlook-idle is no longer necessary Any one else having similar issue? Anything else I should do to narrow down the issue? Thanks KuiZ

8 16

[Dovecot] Messages not deleted from mbox
by venom00 29 Sep '11

29 Sep '11

Hello, I've two accounts on my mail server, and from my client (Evolution) I've set up two configurations. If I dowload mail one account at a time everything works fine, but if I download both of them at the same time I'm not able to delete downloaded messages, so I download them twice, three times and counting to infinity. On th client side everything looks good: ----------------------------------------------------- LIST +OK 1 messages: 1 485 . UIDL +OK 1 000000704e57eebd . RETR 1 +OK 485 octets Message here... . DELE 1 +OK Marked to be deleted. QUIT +OK Logging out, messages deleted. ----------------------------------------------------- On the server side I've enabled debug logging but nothing relevant comes up, except sometimes an error: Panic: Message unexpectedly expunged from index Full log: http://pastebin.com/raw.php?i=bBizx9tm But most of the times there are no errors and simply the message is not deleted. I'm using mbox format in /var/spool/mail/%u. The dovecot user has read-write access to the folder (even because, as I said, if download an account at once everything works fine). I think it's about locking, I've tried several lock methods but always the same result and I can't see dead locks from lsof, fuser or ls (for dotlocks). Thanks in advance, venom00

1 0

[Dovecot] Dovecot and NTLM problem
by Pavel Obr 28 Sep '11

28 Sep '11

Hallo, i am trying setup dovecot 2.0.9 with NTLM. I tested succesfully winbind with winbind -k, ntlm-auth with ntlm_auth --username=pavel. But I cannot authenticate in Dovecot. My log show these lines: Sep 28 22:16:25 srv-pat dovecot: auth: Debug: auth client connected (pid=6002) Sep 28 22:16:25 srv-pat dovecot: auth: Debug: client in: AUTH#0111#011NTLM#011service=imap#011lip=192.168.7.67#011rip=192.168.100.141#011lport=143#011rport=5109 Sep 28 22:16:25 srv-pat dovecot: auth: Debug: client out: CONT#0111#011 Sep 28 22:16:25 srv-pat dovecot: auth: Fatal: execv(/usr/bin/ntlm_auth) failed: Permission denied Sep 28 22:16:25 srv-pat dovecot: auth: Error: winbind: ntlm_auth exited with exit code 84 Sep 28 22:16:25 srv-pat dovecot: auth: Debug: client in: CONT#0111#011TlRMTVNTUAABAAAAB4IIAAAAAAAAAAAAAAAAAAAAAAA= Sep 28 22:16:25 srv-pat dovecot: auth: Error: winbind(?,192.168.100.141): write(out_pipe) failed: Broken pipe Sep 28 22:16:27 srv-pat dovecot: auth: Debug: client out: FAIL#0111 Do you know what that is mean "Fatal: execv(/usr/bin/ntlm_auth) failed: Permission denied" ? What is exit code 84 - "Error: winbind: ntlm_auth exited with exit code 84"? My dovecot -n: # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-131.12.1.el6.x86_64 x86_64 Scientific Linux release 6.1 (Carbon) auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain ntlm login auth_use_winbind = yes auth_username_format = %n mail_home = /data/vmail/%d/%n mail_location = mdbox:~/mail mbox_write_locks = fcntl passdb { driver = pam } protocols = pop3 imap lmtp ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = uid=501 gid=501 home=/data/vmail/%d/%n allow_all_users=yes driver = static } Thank you, Pavel

1 0

[Dovecot] deliver LDA issue with setuid-root
by Daminto Lie 28 Sep '11

28 Sep '11

Hi, I am getting the following error message when trying to implement LDA Dovecot 1.2.9 with virtual users: Sep 28 15:59:33 server1 postfix/pipe[3041]: 28BEC2400A1: to=<msmith(a)example.com>, relay=dovecot, delay=2361, delays=2361/0.01/0/0.03, dsn=4.3.0, status=deferred (temporary failure. Command output: /usr/lib/dovecot/deliver must not be both world-executable and setuid-root. This allows root exploits. See http://wiki.dovecot.org/LDA#multipleuids ) I do not know if I need to change the group to secmail. Currently, I have as follows -rwsr-xr-x 1 root root 933796 2011-06-10 05:36 deliver Can I change it to any other group apart from secmail? and what does it mean by world-executable? Sorry if I ask a silly question here but keen to learn more about linux. Here is my dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap listen: *:143 ssl: no disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login verbose_proctitle: yes first_valid_uid: 106 last_valid_uid: 200 mail_privileged_group: mail mail_location: maildir:/home/vmail/%u/Maildir mbox_write_locks: fcntl dotlock mail_plugins: quota imap_quota imap_client_workarounds: outlook-idle delay-newmail netscape-eoh tb-extra-mailbox-sep lda: postmaster_address: postmaster(a)example.com mail_plugins: quota sendmail_path: /usr/lib/sendmail rejection_reason: Your message to <%t> was automatically rejected:%n%r auth default: mechanisms: plain login username_format: %Lu verbose: yes debug: yes debug_passwords: yes passdb: driver: pam passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: prefetch userdb: driver: passwd userdb: driver: static args: uid=106 gid=1010 home=/home/vmail/%u socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: mail master: path: /var/run/dovecot-auth-master mode: 432 user: vmail group: vmail plugin: quota: maildir quota_rule: *:storage=3GB quota_rule2: Trash:storage=20%% quota_rule3: Spam:storage=10%% quota_warning: storage=95%% /usr/local/bin/quota-warning.sh 95 quota_warning2: storage=80%% /usr/local/bin/quota-warning.sh 80 Here is my master.cf # delivery through dovecot dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${recipient} Any help would be greatly appreciated. Thank you

2 1

[Dovecot] Dsync Removing Subscriptions Entries
by Asai 28 Sep '11

28 Sep '11

Greetings, In learning to get Dsync to work, I see a lot of this type of warning in the logs: dsync-remote(user(a)domain.org): Warning: Subscriptions file /vmail/domain/user/subscriptions: Removing invalid entry: INBOX/SOME folder When I ran a test this morning on the backed up emails on the remote server with Thunderbird, I did indeed see that many of the subscribed folders were not present in TB, although the directories and data were indeed present on the remote server. The subscriptions file on the remote server had the omissions which Dsync warned about. These maildir folders seem to work fine on the main server. Can someone help me to understand how to make the sync without omissions in the subscriptions file? -- *Asai* Global Change Multi-Media Internet Application Development IT and Networking Services 520-398-2542

1 0

[Dovecot] Controling users access ?
by Frank Bonnet 28 Sep '11

28 Sep '11

Hello We are going to split our mailhub in two :-) one for students and one for the others Does Dovecot 2 provide some mechanisms to filter users's' login ? a flat file would be enough for my usage ( I use pam_ldap nss_ldap with nsswitch ) thanks

1 0

[Dovecot] 2.0.14 IPC client_limit reached error
by Tom Pawlowski 28 Sep '11

28 Sep '11

Hi Timo, Upgraded to 2.0.14 last night for the director-related features and I noticed an oddity in the logs: Sep 28 09:53:21 director2 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped Sep 28 09:53:56 director1 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped Sep 28 09:54:23 director2 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped Sep 28 09:55:07 director1 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped Sep 28 09:55:24 director2 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped Sep 28 09:56:08 director1 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped Sep 28 09:56:25 director2 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped Sep 28 09:57:10 director1 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped Sep 28 09:57:26 director2 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped These warnings are only being printed out by the directors. Both the directors and imap/pop3 servers have init scripts with the following ulimits set in the start sections: ulimit -s unlimited ulimit -n 30000 ulimit -u 30000 (We'd get alerts long before resource consumption became an issue) I've been watching the established imap/pop3 connection count on both directors for the past hour and a half and despite these warnings, those counts have grown continuously. The other weird thing is, according the configuration (attached), the ipc service has a client_limit of 0 by default, so we shouldn't be hitting a ceiling anyway, correct? So are these false warnings or something to be concerned about? -- Tom Pawlowski OIT-CSS System Administrator office: Hill 147 email: tompru(a)jla.rutgers.edu phone: (732) 445-2634

1 0

[Dovecot] Problems running Dovecot 1.2.17 on AIX
by ra＠rz.uni-frankfurt.de 28 Sep '11

28 Sep '11

Hello, we have a problem getting Dovecot 1.2.17 to work on one of our AIX-Machines (AIX 5.3). Dovecot compiles fine, but if we try to run it we get strange library dependency problems such as the following: [root@localhost dovecot-test]# /local/dovecot-test/sbin/dovecot -F -c /local/dovecot-test/etc/dovecot.clients.conf Edlopen(/local/dovecot-test/lib/dovecot/imap/lib01_acl_plugin.so) failed: rtld: 0712-001 Symbol bsearch_strcmp was referenced from module /local/dovecot-test/lib/dovecot/imap/lib01_acl_plugin.so(), but a runtime definition of the symbol was not found. rtld: 0712-001 Symbol safe_mkstemp_group was referenced from module /local/dovecot-test/lib/dovecot/imap/lib01_acl_plugin.so(), but a runtime definition of the symbol was not found. rtld: 0712-001 Symbol mail_user_module_register was referenced from module /local/dovecot-test/lib/dovecot/imap/lib01_acl_plugin.so(), but a runtime definition of the symbol was not found. rtld: 0712-001 Symbol dict_iterate_init was referenced from module /local/dovecot-test/lib/dovecot/imap/lib01_acl_plugin.so(), but a runtime definition of the symbol was not found. rtld: 0712-001 Symbol dict_iterate was referenced from module /local/dovecot-test/lib/dovecot/imap/lib01_acl_plugin.so(), but a runtime definition of the symbol was not found. rtld: 0712-001 Symbol dict_iterate_deinit was referenced from module /local/dovecot-test/lib/dovecot/imap/lib01_acl_plugin.so(), but a runtime definition of the symbol was not found. rtld: 0712-001 Symbol i_strcmp_p was referenced from module /local/dovecot-test/lib/dovecot/imap/lib01_acl_plugin.so(), but a runtime definition of the symbol was not found. Additional errors occurred but are not reported. FCouldn't load required plugins We tried to use the compiler-script as described on the wiki (http://wiki1.dovecot.org/AixPluginsSupport) and we tried to compile dovecot with gcc instead of xlc. We even tried it on another host running AIX 5.3 but dovecot still fails with the runtime linker complaining about missing runtime definitions. Any hint/help would be appreciated. Thanks in advance Manuel

1 0

[Dovecot] Virtual Folder configuration problem.
by Terry Carmen 28 Sep '11

28 Sep '11

I'm attempting to create a virtual inbox that contains all unread messages from the user's Maildir. I created a conf file called 80-virtual.conf containing: mail_plugins = $mail_plugins virtual namespace { prefix = virtual/ separator = / location = virtual:~/Maildir/virtual } And created the /home/username/Maildir/virtual/unseen/dovecot-virtual file which contains: # ~/Maildir/virtual/unseen/dovecot-virtual * unseen However it doesn't work and the maillog file contains: dovecot: imap(username): Error: user username: Initialization failed: namespace configuration error: inbox=yes namespace missing This is with dovecot 2.0.beta6 (3156315704ef) Does anybody have any suggestions? Thanks! Terry

3 4

[Dovecot] Duplicates when switching from Qpopper to Dovecot pop3
by Tristan Goguen 28 Sep '11

28 Sep '11

Hi All, Our test users re-download the mail they've left on the server when they switch from Qpopper to Dovecot. Qpopper includes the X-UIDL header - X-UIDL: X8V"!E)<"!58?"!"9C"! - on read messages. Any suggestions are appreciated. I've included my dovecot configuration. Thank you, Tristan --- Tristan Tristan Goguen CEO, ILAP® T: 416-250-5600 ext. 205 F: 416-250-6755 tgoguen(a)ilap.com www.ilap.com --- # 2.0.14: /etc/dovecot.conf # OS: SunOS 5.10 sun4v auth_cache_size = 1048575 B auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.+-_@ auth_username_format = %Ln auth_verbose = yes base_dir = /usr/local/var/run/dovecot/ disable_plaintext_auth = no first_valid_uid = 100 log_path = /var/log/dovecot.log login_greeting = mail_access_groups = mail mail_fsync = never mail_location = mbox:~/mail:INBOX=/var/mail/%1u/%1.1u/%u mbox_dotlock_change_timeout = 1 mins mbox_min_index_size = 1 B mbox_read_locks = dotlock mbox_write_locks = dotlock mmap_disable = yes passdb { driver = shadow } protocols = pop3 service pop3-login { client_limit = 10 inet_listener pop3 { address = 216.223.136.7 port = 110 } process_limit = 128 process_min_avail = 5 service_count = 0 vsz_limit = 512 M } shutdown_clients = no ssl = no userdb { args = blocking=yes driver = passwd } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_enable_last = yes pop3_lock_session = yes pop3_reuse_xuidl = yes pop3_save_uidl = yes }

1 1

[Dovecot] Create userdir on dovecot login --- solved
by Andreas Cieslak 27 Sep '11

27 Sep '11

Sorted out the problem, which was already solved in an older forum post of dovecot. In the file /usr/local/etc/dovecot/conf.d/auth-system.conf.ext I set Passdb { Driver = pam args = session=yes dovecot } Unfortunately this didnt work because when I log in with a user xy, the user dovecot became the owner of the userdir. When I modified the file /usr/local/etc/dovecot/conf.d/auth-system.conf.ext like this: Passdb { Driver = pam # args = session=yes dovecot } And gave anyone (for testing) the permission to write to home. That worked! At least put the ldap-users in a group and gave that group writing permissions to home. Finished! -----Ursprüngliche Nachricht----- Von: dovecot-bounces(a)dovecot.org [mailto:dovecot-bounces@dovecot.org] Im Auftrag von Andreas Cieslak Gesendet: Donnerstag, 22. September 2011 15:41 An: dovecot(a)dovecot.org Betreff: [Dovecot] Create userdir on dovecot login Hi List, I am trying to set up automated userdir-creation on login via squirrelmail or email-client with a dovecot backend. The users are first imported on an openldap directory on the same server as the dovecot runs on. Authentication on the dovecot mail system via pam_ldap works properly. Tried already to integrate some advices from the dovecot wiki like Passdb { Driver = pam args = session=yes dovecot } But the homedir creation works only when the user logs onto the machine. When I try to log in via Squirrel on the dovecot no homedir is created and there is following message in the logs: auth: Error: pam(cieslak,193.175.157.121): pam_open_session() failed: Permission denied I think its something about the user rights, but dont really know where to search for the needle Here is the config of my environment root@server:/home# dovecot -n # 2.0.13: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 6.0.2 auth_debug = yes auth_mechanisms = login plain auth_verbose = yes first_valid_uid = 1000 hostname = server info_log_path = /var/log/dovecot-info last_valid_uid = 10000 listen = * log_path = /var/log/dovecot mail_access_groups = mail mail_debug = yes mail_full_filesystem_access = yes mail_location = maildir:~/Maildir mbox_write_locks = fcntl passdb { args = session=yes dovecot driver = pam } postmaster_address = mailaddress service auth-worker { group = shadow user = $default_internal_user } service auth { user = $default_internal_user } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 0 service_count = 0 vsz_limit = 256 M } service lmtp { unix_listener lmtp { mode = 0666 } } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } ssl_ca = </usr/local/etc/dovecot/ca ssl_cert = </usr/local/etc/dovecot/crt ssl_key = </usr/local/etc/dovecot/key userdb { driver = passwd } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } dovecot --version 2.0.13 The configuration of the pam module /etc/pam.d/dovecot looks like @include common-auth @include common-account @include common-session The common session has the line session required pam_mkhomedir.so skel=/etc/skel umask=0077 I would appreciate any hints. Andreas

1 0

[Dovecot] deliver agent and index/control files
by Nerijus Kislauskas 27 Sep '11

27 Sep '11

Hi Timo and others, We use Dovecot in Kaunas University of Technology in Lithuania. For now our LDA is Postfix and POP/IMAP server is Dovecot. We would like to implement dovecot deliver as LDA. Everything is ok exept one small thing: deliver is creating dovecot.index.log in wrong place In dovecot config files we have: ... mail_location = maildir:/var/mail/%Ln:INDEX=/var/indexes/%Ln:CONTROL=/var/indexes/%Ln ... As you can see, mail and index/control files are in different partitions. and deliver log: deliver(nerijus.kislauskas(a)ktu.lt): maildir: data=/var/mail/nerkisl deliver(nerijus.kislauskas(a)ktu.lt): maildir++: root=/var/mail/nerkisl, index=, control=, inbox=/var/mail/nerkisl That is why dovecot.index.log is created in /var/mail/nerkisl, and not in /var/indexes/nerkisl. How can we fix this? -- Sincerely, Nerijus Kislauskas KTU ITPI, LitNET NOC Studentu g. 48a - 101, Kaunas tel.: (8~37) 30 06 45 mob. tel.: 8-614-93889 e-mail.: nerijus.kislauskas(a)ktu.lt

1 1

[Dovecot] Subscription File
by Carlos Mennens 26 Sep '11

26 Sep '11

I had a use lose 20 folders on their mail account. I was able to pull them back from a restore and dumped them all back on the server in her Maildir. The problem is she doesn't see them on her Thunderbird or Outlook client. I checked to make sure I put them back into the correct directory and I did as well as verify permissions aren't weird. I then noticed a file called 'subscriptions' in her Maildir directory. She appears to only be seeing folders that are listed in this 'subscriptions' file. My question is how do I update this file? If I delete it, will Dovecot re-generate the file with the correct subscription entries? I don't understand what to do but I'm hoping I don't have to edit the file by hand...that seems way too cumbersome.

3 6

[Dovecot] how to disable quota for second namespace?
by Udo Lembke 26 Sep '11

26 Sep '11

Hi all, I have a second namespace as archive, where no quota should be active (work with type = shared). But if I change the type to private the quota will allways count. My dovecot version is the 2.0.13. I have tried things like this: plugin { quota_rule = *:storage=500M quota_rule2 = Trash:storage=+100M quota_rule3 = Sent:storage=+50M quota_rule4 = ns=archiv/%u/:ignore } It's also doesn't work with "quota_rule4 = archiv/%u/:ignore" The namespace: namespace { type = private separator = / prefix = "archiv/%u/" location = maildir:/var/data/archiv/%d/%n:INDEX=/var/data/indexes/archiv/%u:LAYOUT=fs inbox = no hidden = no subscriptions = no list = yes } Even if I define the namespace for quota I see the quota-value also in the "root": plugin { quota = maildir:User quota quota2 = maildir:Archiv quota:ns=archiv/%u/ } doveadm quota get -u test(a)example.com Quota name Type Value Limit % User quota STORAGE 1587135 512000 309 User quota MESSAGE 13346 - 0 Archiv quota STORAGE 1359379 - 0 Archiv quota MESSAGE 10577 - 0 du -ks /var/data/mail/example.com/test 234364 /var/data/mail/example.com/test du -ks /var/data/archiv/example.com/test 1383792 /var/data/archiv/example.com/test Now is the big question, how can I reach such an output? doveadm quota get -u test(a)example.com Quota name Type Value Limit % User quota STORAGE 227756 512000 44 User quota MESSAGE 2769 - 0 Archiv quota STORAGE 1359379 - 0 Archiv quota MESSAGE 10577 - 0 I can't believe that's only possible with a shared namespace, or? Any hints are welcome. Best regards Udo

1 1

[Dovecot] "doveadm log reopen" don't reopen seperate lmtp log
by Henrik Larsson 25 Sep '11

25 Sep '11

Dear all I have setup separate pop3/imap log "/var/log/dovecot" and lmtp delivery log "/var/log/dovecot-deliver". After rotating logfiles, i run "doveadm log reopen". I see that my pop3/imap log "/var/log/dovecot" is used straight away, but my lmpt log "/var/log/dovecot-deliver" isn't used at first. After some time, usually a few minutes, logs are being written to this file anyway. But if I compare this to my maillog, it misses some deliveries just after the log rotation. Is there any problems with this configuration that should be corrected? --cut-- # doveconf -n # 2.0.15: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.2-STABLE amd64 auth_mechanisms = plain login digest-md5 cram-md5 first_valid_uid = 125 hostname = mail.larsson.it listen = * log_path = /var/log/dovecot mail_plugins = fts fts_squat zlib mail_privileged_group = postfix mail_temp_dir = /var/db/dovecot managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = prefix = separator = . type = private } namespace { hidden = yes inbox = no list = no location = prefix = INBOX. separator = . type = private } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { fts = squat fts_squat = partial=4 full=10 sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 lmtp sieve service auth-worker { user = $default_internal_user } service auth { unix_listener /home/mail/postfix/private/auth { group = postfix mode = 0666 user = postfix } } service lmtp { executable = lmtp -L unix_listener /home/mail/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/ssl/mail-chained.crt ssl_key = </etc/ssl/mail.key userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { log_path = /var/log/dovecot-deliver mail_plugins = fts fts_squat zlib sieve } protocol lda { mail_plugins = fts fts_squat zlib sieve } protocol imap { mail_plugins = fts fts_squat zlib imap_zlib } --cut-- Best regards Henrik Larsson

1 0

[Dovecot] dsync doubts
by Piotr NetExpert 24 Sep '11

24 Sep '11

Hi everyone, I want to backup mailboxes to another server. A usage information for dsync says "... <remote dsync command>". Does it mean I need dsync installed on the other server too? Now when I try to run dsync I receive: # dsync -v -D -u abc backup ssh user(a)other.server dsync(username): Debug: Effective uid=123, gid=123, home=/path/abc dsync(username): Debug: maildir++: root=/path/abc, index=, control=, inbox=/path/abc dsync-local(abc): Debug: Namespace : Using permissions from /path/abc: mode=0700 gid=-1 Password: server: not found dsync-local(abc): Error: read() from worker server failed: EOF What could be wrong? How can I check what it wants to do and cannot? I cannot find more information I need in a wiki page of dsync. -- pozdrawiam Piotr Szafarczyk http://www.netexpert.pl

3 3

[Dovecot] tiny doc bug report
by Jeff Rogers 23 Sep '11

23 Sep '11

First timer, I'm installing dovecot-2.0.15. I ran configure; make; sudo make install The INSTALL file then says: --- Rename configuration file: mv /usr/local/etc/dovecot-example.conf /usr/local/etc/dovecot.conf Read through, and make needed modifications. --- The example configuration file is not installed in that location. Presumably it is now installed as /usr/local/share/doc/dovecot/example-config/dovecot.conf Unless this path difference is a quirk of my local system, the INSTALL directions should be fixed to avoid confusion. Thanks, -J

1 0

[Dovecot] Using Dsync for Incremental Sync
by Asai 23 Sep '11

23 Sep '11

Greetings, We have about 26 GB of email which we're trying to sync nightly to a remote server, but what I just read from a post from Timo awhile back is that it's not possible because dsync relies on message GUIDs which aren't available in the IMAP protocol. It seems that this is still the case, is there anything on the horizon for this to change? -- *Asai* Global Change Multi-Media Internet Application Development IT and Networking Services 520-398-2542

2 3

[Dovecot] How to port this dovecot-1.x configuration file to dovecot-2.x
by forumer＠smartmobili.com 23 Sep '11

23 Sep '11

Hi, I am trying to move from dovecot-1.x to dovecot 2.1 but I have this error : Sep 23 16:04:13 lda: Error: userdb lookup: connect(/var/run/dovecot/auth-master) failed: Permission denied (euid=5000(vmail) egid=5000(vmail) missing +r perm: /var/run/dovecot/auth-master, dir owned by 0:0 mode=0755) and I dont' manage to find information about how to translate this old configuration part: socket listen { master { # Master socket provides access to userdb information. It's typically # used to give Dovecot's local delivery agent access to userdb so it # can find mailbox locations. path = /var/run/dovecot/auth-master mode = 0600 # Default user/group is the one who started dovecot-auth (root) user = vmail #group = } client { # The client socket is generally safe to export to everyone. Typical use # is to export it to your SMTP server so it can do SMTP AUTH lookups # using it. path = /var/run/dovecot/auth-client mode = 0660 } Thanks

2 1

[Dovecot] (2.1 recent:) fts_decoder
by Lutz Preßler 23 Sep '11

23 Sep '11

Hello again, test setup as in previous messages. With fts = lucene, I enabled the adapted decode2text.sh (at least I tried...) as suggested in the comment section. On dovecot-start /var/run/dovecot/decode2text socket is created with sufficiant permissions (rw for anybody), but decode2text.sh is not started (it's rx for anybody). When creating lucene indexes, I cannot see it executed either (and no attachment-only content is findable afterwards). No errors with mail_debug - if I change fts_decoder to a nonexistant value, that's logged. Lutz

2 1

[Dovecot] 64.31.19.48 attempt to break into my computer
by Rick Baartman 23 Sep '11

23 Sep '11

>From my secure log: Sep 19 01:16:44 lin12 dovecot-auth: pam_unix(dovecot:auth): check pass; user unknown Sep 19 01:16:44 lin12 dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser= rhost=::ffff:64.31.19.48 Sep 19 01:16:44 lin12 dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user aaron Sep 19 01:16:45 lin12 dovecot-auth: pam_unix(dovecot:auth): check pass; user unknown Sep 19 01:16:45 lin12 dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser= rhost=::ffff:64.31.19.48 Sep 19 01:16:45 lin12 dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user abby etc. Literally, 30,000 user names attempted. -- rick baartman TRIUMF 4004 Wesbrook Mall Vancouver, BC V6T2A3

10 17

Re: [Dovecot] 64.31.19.48 attempt to break into my computer
by Alex 23 Sep '11

23 Sep '11

It is a great tool. Unfortunately dovecot allows infinate incorrect logins during a single session. When fail2ban has firewalled the ip its pointless as the rule only affects new sessions, not established ones. I am disappointed that the author of dovecot has no interest in adding a feature that closes the session after x auth failures. It would certainly make tools like fail2ban more effective. ----- Reply message ----- From: "John Alexander" <john.alexander(a)preachain.org> Date: Fri, Sep 23, 2011 00:13 Subject: [Dovecot] 64.31.19.48 attempt to break into my computer To: <dovecot(a)dovecot.org> Fail2Ban is an excellent tool to deal with this sort of thing. On Mon, 19 Sep 2011 10:05:47 -0700, Rick Baartman wrote > >From my secure log: > > Sep 19 01:16:44 lin12 dovecot-auth: pam_unix(dovecot:auth): check > pass; user unknown > Sep 19 01:16:44 lin12 dovecot-auth: pam_unix(dovecot:auth): > authentication failure; logname= uid=0 euid=0 tty=dovecot ruser= > rhost=::ffff:64.31.19.48 > Sep 19 01:16:44 lin12 dovecot-auth: pam_succeed_if(dovecot:auth): > error retrieving information about user aaron

3 2

[Dovecot] Dovecot 1.x vs 2.x
by Lee Standen 22 Sep '11

22 Sep '11

Hi All, I'm currently in the planning stages for a technology refresh for a very large mail installation, and looking at using Dovecot with LDA/Sieve/FTS_Solr and a number of other plugins to give our users some great features. Currently, our standard distribution is Ubuntu Lucid, which has Dovecot 1.x included with it in pre-built packages, and Dovecot 2.x is in the upcoming Oneiric beta coming out next month. My question is, are there any compelling reasons why we should gravitate towards running Dovecot 2.x beyond the fact it's the "latest and greatest" version? What features would we miss that we're likely to want or need on a very large installation (i'm talking dozens of VM's, over 1 million mailboxes). Thanks

1 0

[Dovecot] Dovecot 1.2, problem with SQL quota and mail aliases
by Jacek Osiecki 22 Sep '11

22 Sep '11

Hello, I have a small server running dovecot 1.2 (still not balsy enough to switch to 2.0 - virtual sql accounts, managesieve etc.). There are no local users - only ones defined in the SQL database, and everything else (including quota) is defined in SQL db too. Dovecot is used as IMAP daemon, and dovecot-lda is responsible for delivery (in order to make use of sieve and managesieve). I know that my configuration might be a bit ancient, but this is not referring to any bug (at least I think so) and rather to errors I've made in configuration. Several users have reported, that they are running out of quota even though their mailboxes are empty. I thought these were some single cases, but recently I discovered that this situation occurs when: - user john(a)domain.com has a mail alias, eg. john.smith(a)domain.com - he logs in to the imap account (using MUA or webmail) using his alias (john.smith(a)domain.com) In effect, all incoming emails for john(a)domain.com are increasing the counters (both "bytes" and "messages"), but since user logs in using john.smith(a)domain.com - anything he deletes from the mailbox decreases the records for john.smith(a)domain.com. Finally, John has two records: +---------------------------+-----------+----------+ | username | bytes | messages | +---------------------------+-----------+----------+ | john.smith(a)domain.com | -5488133 | -13 | | john(a)domain.com | 341411029 | 1111 | +---------------------------+-----------+----------+ The record for john(a)domain.com finaly reaches the quota limit - and even removing all emails does not help. My /etc/dovecot/dovecot-dict-quota.conf looks like this: map { pattern = priv/quota/storage table = quota username_field = username value_field = bytes } map { pattern = priv/quota/messages table = quota username_field = username value_field = messages } And my question is: what is used as "username"? Always the username given wher user logs in? Is there a way to provide some dictionary to translate all aliases to the real username? Best regards, -- Jacek Osiecki joshua(a)ceti.pl GG:3828944 I don't want something I need. I want something I want.

3 4

[Dovecot] Shared Namespace
by Tom Clark 22 Sep '11

22 Sep '11

Is there anyway of limiting a shared namespace to a domain? E.g. mailbox.com and mailbox2.com are setup with vpopmail. We've got a shared namespace but only want the ability on mailbox.com. Thanks, Tom

2 4

[Dovecot] Trouble getting lda to gzip incomming mails (zlib plugin)
by Helge Milde 22 Sep '11

22 Sep '11

Hi! I've followed the guide at http://wiki2.dovecot.org/Plugins/Zlib to try to make Dovecot gzip incomming mails, but it doesn't seem to work. I've made pop/imap read gzipped files, and this seems to work perfectly, but LDA is still saving incomming mails in plain text. There's not too much information out there regarding the zlib module, so I'm not sure where to start debugging the problem, and was hoping someone could point me in the right direction. The only mention of zlib when LDA is delivering a file: Sep 20 15:51:19 mail dovecot: deliver(helgemil): Module loaded: /usr/lib/dovecot/modules/lda/lib20_zlib_plugin.so The most relevant lines from dovecot.conf: mail_debug = yes protocols = imap pop3 imaps pop3s mail_location = maildir:~/Maildir mail_privileged_group = mail max_mail_processes = 1024 mail_process_size = 512 protocol imap { mail_max_userip_connections = 50 mail_plugins = fts fts_squat zlib } protocol pop3 { pop3_uidl_format = %08Xu%08Xv mail_max_userip_connections = 50 mail_plugins = zlib } protocol lda { postmaster_address = postmaster(a)monsternett.no mail_plugins = sieve zlib mail_plugin_dir = /usr/lib/dovecot/modules/lda sieve_global_dir = /etc/dovecot/sieve/ sieve_global_path = /etc/dovecot/sieve/default.sieve } plugin { zlib_save_level = 6 zlib_save = gz fts = squat sieve = ~/dovecot.sieve sieve_dir = ~/ } -- Helge Milde, 69701808 www.monsternett.no

3 5

[Dovecot] Create userdir on dovecot login
by Andreas Cieslak 22 Sep '11

22 Sep '11

Hi List, I am trying to set up automated userdir-creation on login via squirrelmail or email-client with a dovecot backend. The users are first imported on an openldap directory on the same server as the dovecot runs on. Authentication on the dovecot mail system via pam_ldap works properly. Tried already to integrate some advices from the dovecot wiki like Passdb { Driver = pam args = session=yes dovecot } But the homedir creation works only when the user logs onto the machine. When I try to log in via Squirrel on the dovecot no homedir is created and there is following message in the logs: auth: Error: pam(cieslak,193.175.157.121): pam_open_session() failed: Permission denied I think its something about the user rights, but dont really know where to search for the needle Here is the config of my environment root@server:/home# dovecot -n # 2.0.13: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 6.0.2 auth_debug = yes auth_mechanisms = login plain auth_verbose = yes first_valid_uid = 1000 hostname = server info_log_path = /var/log/dovecot-info last_valid_uid = 10000 listen = * log_path = /var/log/dovecot mail_access_groups = mail mail_debug = yes mail_full_filesystem_access = yes mail_location = maildir:~/Maildir mbox_write_locks = fcntl passdb { args = session=yes dovecot driver = pam } postmaster_address = mailaddress service auth-worker { group = shadow user = $default_internal_user } service auth { user = $default_internal_user } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 0 service_count = 0 vsz_limit = 256 M } service lmtp { unix_listener lmtp { mode = 0666 } } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } ssl_ca = </usr/local/etc/dovecot/ca ssl_cert = </usr/local/etc/dovecot/crt ssl_key = </usr/local/etc/dovecot/key userdb { driver = passwd } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } dovecot --version 2.0.13 The configuration of the pam module /etc/pam.d/dovecot looks like @include common-auth @include common-account @include common-session The common-session has the line session required pam_mkhomedir.so skel=/etc/skel umask=0077 I would appreciate any hints. Andreas

1 0

Re: [Dovecot] IMAP delete logs
by James isolder 22 Sep '11

22 Sep '11

Since enabling the mail_plugins = mail_log. I now get an error. Is there anything else I need to check adn how I can put the dovecot into debug mode so I can get more info about where it is failing. dovecot not running? (check /var/run/dovecot//master.pid). Starting dovecot. Error: imap dump-capability process returned 1 Fkevent(EV_ADD, 0) failed: Operation not supported by device Fatal: Invalid configuration in /usr/local/etc/dovecot.conf # 1.2.17: /usr/local/etc/dovecot.conf # OS: FreeBSD 7.0-RELEASE i386 base_dir: /var/run/dovecot/ protocols: imap pop3 listen(default): *:1143 listen(imap): *:1143 listen(pop3): *:1110 ssl: no disable_plaintext_auth: no login_dir: /var/run/dovecot//login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_log_format_elements: pid=%p rsock=%r:%b lsock=%l:%a proto=%s user=%u auth_method=%m secure=%c login_log_format: role=proxy realm=test %$: %s login_process_per_connection: no login_processes_count: 50 login_max_processes_count: 5120 login_max_connections: 512 max_mail_processes: 6144 mail_max_userip_connections(imap): 8 mail_max_userip_connections(pop3): 10 verbose_proctitle: yes first_valid_uid: 1000 first_valid_gid: 1000 mail_privileged_group: mail mail_location: mbox:~/mail/:INBOX=/var/mail/%u mail_debug: yes maildir_copy_preserve_filename: yes mail_executable(default): /usr/local/libexec/dovecot/rawlog /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/rawlog /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/rawlog /usr/local/libexec/dovecot/pop3 mail_plugins(default): mail_log mail_plugins(imap): mail_log mail_plugins(pop3): mail_plugin_dir: /usr/local/lib/dovecot/pop3 mail_log_max_lines_per_sec: 0 pop3_enable_last(default): yes pop3_enable_last(imap): yes pop3_enable_last(pop3): no pop3_client_workarounds(default): outlook-no-nuls oe-ns-eoh pop3_client_workarounds(imap): outlook-no-nuls oe-ns-eoh pop3_client_workarounds(pop3): auth default: mechanisms: plain login cache_ttl: 0 cache_negative_ttl: 0 worker_max_count: 60 process_size: 512 passdb: driver: sql args: /usr/local/etc/dovecot-proxy.sql socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 master: path: /var/run/dovecot/auth-master mode: 384 plugin: mail_log_events: delete undelete expunge copy mailbox_delete mailbox_rename On Wed, 14 Sep 2011 14:40:21 +0200 "mailing(a)securitylabs.it" <mailing(a)securitylabs.it> wrote > Il 14/09/2011 07:48, James isolder ha scritto: > > Version - 1.2.17 > > > > Is there a way to include message or folder deletion logs in the dovecot > > log > > files. > > > > > > Yes, you can use the mail logger plugin: > > http://wiki.dovecot.org/Plugins/MailLog ____________________________________________________________ South Africas premier free email service - www.webmail.co.za For super low premiums, click here. http://www.dialdirect.co.za/?vdn=15828

2 1

[Dovecot] Create userdir on dovecot login
by Andreas Cieslak 22 Sep '11

22 Sep '11

Hi List, I am trying to set up automated userdir-creation on login via squirrelmail or email-client with a dovecot backend. The users are first imported on an openldap directory on the same server as the dovecot runs on. Authentication on the dovecot mail system via pam_ldap works properly. Tried already to integrate some advices from the dovecot wiki like Passdb { Driver = pam args = session=yes dovecot } But the homedir creation works only when the user logs onto the machine. When I try to log in via Squirrel on the dovecot no homedir is created and there is following message in the logs: auth: Error: pam(cieslak,193.175.157.121): pam_open_session() failed: Permission denied I think its something about the user rights, but dont really know where to search for the needle Here is the config of my environment root@server:/home# dovecot -n # 2.0.13: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 6.0.2 auth_debug = yes auth_mechanisms = login plain auth_verbose = yes first_valid_uid = 1000 hostname = server info_log_path = /var/log/dovecot-info last_valid_uid = 10000 listen = * log_path = /var/log/dovecot mail_access_groups = mail mail_debug = yes mail_full_filesystem_access = yes mail_location = maildir:~/Maildir mbox_write_locks = fcntl passdb { args = session=yes dovecot driver = pam } postmaster_address = mailaddress service auth-worker { group = shadow user = $default_internal_user } service auth { user = $default_internal_user } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 0 service_count = 0 vsz_limit = 256 M } service lmtp { unix_listener lmtp { mode = 0666 } } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } ssl_ca = </usr/local/etc/dovecot/ca ssl_cert = </usr/local/etc/dovecot/crt ssl_key = </usr/local/etc/dovecot/key userdb { driver = passwd } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } dovecot --version 2.0.13 The configuration of the pam module /etc/pam.d/dovecot looks like @include common-auth @include common-account @include common-session The common session has the line session required pam_mkhomedir.so skel=/etc/skel umask=0077 I would appreciate any hints. Andreas

1 0

[Dovecot] Webmail architecture : questions about cache and storage backend
by forumer＠smartmobili.com 22 Sep '11

22 Sep '11

Hi, I have some questions about dovecot-2.1 and need some advice about software architecture. My company plans to develop a kind of Document Managing System (DMS) and one of its module is a webmail that is currently in a pre-alpha stage (if you are curious you can have a look here http://kairos.smartmobili.com/ but don't be surprised if it doesn't work and please do not use IE for now). From my personal analysis that I am sure is incomplete we have the following options to handle emails storage and cache: 1) Do not use a cache and rely on dovecot performance to retrieve email's header in real time. Actually don't know if it's that simple because we might need to have a transformed version of emails to be able to display them more easily in the webmail. In this case this option is not really possible. 2) Use new dovecot-2.1 imap backend and develop a kind of dummy imap server listening to a custom port and storing emails inside a mongoDB database. Advantage is it allow replication very easily. 3) Wait for dovecot2.x to implement a NoSQL storage. Will it happen soon ? If you have other suggestions or ideas I would be happy to hear them. Vincent R.

2 1

[Dovecot] Restoring mail
by Knute Johnson 22 Sep '11

22 Sep '11

I solved it myself, I forgot about the folders in the /home/user/mail directory. So kindly disregard my panicky message from before. -- Knute Johnson

1 0

[Dovecot] Help restoring imap mail
by Knute Johnson 22 Sep '11

22 Sep '11

My mailserver blew up today with a power hit. I've created a new server and have dovecot running and I want to restore my mail. I have a copy of the file that was in /var/mail. I set the new dovecot config up the same as the old one and copied the mail file over. I can see the INBOX mail but none of the rest of it. I'm running 1.2.15 under Ubuntu server 11.04. I'm using Thunderbird as my client running on XP. Any help would be greatly appreciated. Thanks, -- Knute Johnson

1 0

[Dovecot] global ACL inheritances
by Kui Zhang 22 Sep '11

22 Sep '11

Hello I am trying to prevent people from actively delete lazy expunged messages. ACL in following file does not appears to apply to existing or new mailboxes. dovecot/acls/.EXPUNGED/.DEFAULT owner lripk Am I missing something, or is it due to ACL inheritances support? mail_plugins = acl plugin { ... acl = vfile:/etc/dovecot/acls ... } Thank KuiZ

1 0

[Dovecot] Sieve: Vacation, handle and variable
by René Neumann 21 Sep '11

21 Sep '11

Hi *, I am adding a generic way for vacation-replies in my sieve setup. There I set the handle and the reason using variables (see end of mail). My simple question now is: Though variable expansion is not done for subject and reason, is it done for the handle? Because else there seems no way in configuring the vacation action via variables. I tried to read the code for this extension, but ... well ... the whole sieve implementation is way more complicated then I figured ^^. Thus I take the question to the list. Thanks, René ----- default.sieve ----- require [..., "include", "variables"]; # set this to the text you want to get included in the vacation-mail global ["vacation", "vhandle"]; set "vhandle" ""; set "vacation" ""; [...] include :personal "vacation"; ----- vacation.sieve ----- require ["variables", "include", "vacation"]; # this is set in the including script global ["vacation", "vhandle"]; if string :is "${vacation}" "" { return; } # ensure we have a handle if string :is "${vhandle}" "" { set "vhandle" "${vacation}"; } if header :matches "subject" "*" { set "sbj" "Out of office [was: ${1}]"; vacation :addresses [...] :from "..." :days 7 :handle "${vhandle}" :subject "${sbj}" "${vacation}"; } -------------------------

2 4

[Dovecot] About using Dovecot indexes with Thunderbird/kmail
by Anton Aylward 21 Sep '11

21 Sep '11

I have Dovecot running well on my Mandriva mail hub, handing out IMAP to the household LAN. This is 1.2.15. Eventually I'll upgrade the OS and get 2.x, but this is working fine. So this question is really about the mail readers I use and how they make use of Dovecot. I have Thunderbird on my laptop and KMail2 on my desktop. Dovecot indexes. GOOD! The trouble is that the mail readers want their own indexes :-( I wish that Thunderbird would NOT index mail on my laptop, but it does. I wish Kmail2 would not use nepomuk/akonadi to index the mail but it does. Why can't they both believe the indexes used by Dovecot? Is this an unreasonable request? -- "We stand behind all of our products, except for the manure spreader." -- Corporate motto of an equipment manufacturer

3 6

[Dovecot] Login problem via webmail and outlook
by Ankit Gupta 21 Sep '11

21 Sep '11

Hi Mentors, Please help, our users are not able to login into their mailbox account using either outlook or webmail. Please find logs from /var/log/maillog Jan 17 10:45:40 elct dovecot: imap-login: Aborted login: user=<ismail>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Jan 17 10:49:17 elct dovecot: imap-login: Aborted login: user=<ismail>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Jan 17 11:02:57 elct dovecot: imap-login: Aborted login: user=<ismail>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Jan 17 11:03:03 elct dovecot: imap-login: Aborted login: user=<ismail>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Jan 17 11:10:08 elct dovecot: imap-login: Aborted login: user=<ismail>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Jan 17 11:10:14 elct dovecot: imap-login: Aborted login: user=<ismail>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Please help it is urgent. -- Regards Ankit Gupta, Tel: | M: +91 - 9650594790

2 1

[Dovecot] dovecot-virtual folder configuration
by Pierre 21 Sep '11

21 Sep '11

Hi all, Long story short, I'd like to configure a folder containing: INBOX (some other folders) -> unseen emails from these folders + all other emails (also seen) from the same thread -> seen emails from these folders, but only the recent ones + all other emails from the same thread I tried: # inthread refs (or (or recent unseen) recent ) inthread refs unseen # inthread refs (or unseen ( recent seen) ) # inthread refs recent unseen # inthread refs unseen #inthread refs recent (or unseen ) # inthread refs (recent seen (or unseen )) # (inthread refs (or unseen) recent seen) #( inthread refs (or (or recent unseen) flagged) ) without success. Where could I find proper,understandable doc for this? Could anybody help me on configuring such rule(s) ? Thanks a lot in adavance, Pierre

2 3

[Dovecot] Why can NOT login as root
by jana1972＠centrum.cz 20 Sep '11

20 Sep '11

Hi i use Dovecot and it works ok for users except for root user. It is impossible to login as root Here is a log Sep 10 10:15:44 auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Sep 10 10:15:44 auth: Debug: auth client connected (pid=18077) Sep 10 10:15:44 auth: Debug: client in: AUTH 1 PLAIN service=imap secured lip=212.97.133.82 rip=212.97.133.82 lport=143 rport=34645 resp=<hidden> Sep 10 10:15:44 auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Sep 10 10:15:44 auth: Debug: pam(root,212.97.133.82): lookup service=dovecot Sep 10 10:15:44 auth: Debug: pam(root,212.97.133.82): #1/1 style=1 msg=Password: Sep 10 10:15:44 auth: Debug: client out: OK 1 user=root Sep 10 10:15:44 auth: Debug: master in: REQUEST 2889482241 18077 1 3500554cf70742dfc0515671c7671bbd Sep 10 10:15:44 auth: Debug: passwd(root,212.97.133.82): lookup Sep 10 10:15:44 auth: Debug: master out: USER 2889482241 root system_groups_user=root uid=0 gid=0 home=/root Sep 10 10:15:44 imap-login: Info: Login: user=<root>, method=PLAIN, rip=212.97.133.82, lip=212.97.133.82, mpid=18082, secured Sep 10 10:15:44 imap: Error: user root: Invalid settings in userdb: userdb returned 0 as uid Sep 10 10:15:44 imap: Error: Invalid user settings. Refer to server log for more information. Can anyone help? Thanks LL.

7 8

[Dovecot] 2.1: problems compiling fts-lucene - CLucene git version necessary?
by Lutz Preßler 20 Sep '11

20 Sep '11

Hello! I have problems recompiling the Debian squeeze auto build packages with "--with-lecene". Is the git (2.3) version of CLucene necessary? Debian includes 0.9.21b, which does not work. Lutz

2 4

[Dovecot] Default permissions on newly created maildir
by Alex 20 Sep '11

20 Sep '11

Hi Guys, I am setting up SQL auth for mail. Auth works fine, I notice that if no maildir exists for the authenticated user, it is created automatically (depending on the homedir specified in the sql table entry). The problem is that it creates the dir with "700" permissions which is causing grief for my MTA when it comes time for it to try and drop mail there. If I chmod the dir to 770 things work fine. How do I change the default permissions that dovecot uses whenever it creates a new mail account?

1 0

[Dovecot] ODBC support
by list＠airstreamcomm.net 19 Sep '11

19 Sep '11

I was wondering if ODBC support was on the road map for Dovecot, or if it has ever been discussed? Thanks.

1 0

[Dovecot] Deleted mailboxes with lazy_expunge
by Angel L. Mateo 19 Sep '11

19 Sep '11

Hello, I'm trying to configure lazy_expunge plugin (as a way to provide easy backup for mails). This is my configuration (as explained in dovecot wiki): # Default namespace namespace { prefix = separator = / inbox = yes } # namespaces for lazy_expunge plugin: namespace { prefix = .EXPUNGED/ separator = / location = maildir:~/Maildir/expunged } namespace { prefix = .DELETED/ separator = / location = maildir:~/Maildir/deleted } namespace { prefix = .DELETED/.EXPUNGED/ separator = / location = maildir:~/Maildir/deleted/expunged lazy_expunge = .EXPUNGED/ .DELETED/ .DELETED/.EXPUNGED/ I use just one namespace because I don't want to differentiate between deleting mails or deleting mailboxes, but I have the same problem using the 3 namespaces. With this configuration, when a user connects, if he doesn't have the expunged folder, dovecot logs: Sep 16 10:53:35 myotis30 dovecot: imap(angel.luis): Debug: Namespace : type=private, prefix=.EXPUNGED/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir/expunged Sep 16 10:53:35 myotis30 dovecot: imap(angel.luis): Debug: maildir++: root=/home/alumnos/46/113246/Maildir/expunged, index=, control=, inbox= Sep 16 10:53:35 myotis30 dovecot: imap(angel.luis): Debug: Namespace .EXPUNGED/: Permission lookup failed from /home/alumnos/46/113246/Maildir/expunged Sep 16 10:53:35 myotis30 dovecot: imap(angel.luis): Debug: Namespace .EXPUNGED/: Using permissions from /home/alumnos/46/113246/Maildir/expunged: mode=0700 gid=-1 and the expunged folder is created (without the cur, new neither tmp folders). When I delete a message in the INBOX folder (for example), dovecot logs: Sep 16 10:57:19 myotis30 dovecot: imap(angel.luis): Debug: Namespace .EXPUNGED/: Permission lookup failed from /home/alumnos/46/113246/Maildir/expunged/.INBOX Sep 16 10:57:19 myotis30 dovecot: imap(angel.luis): Debug: Namespace .EXPUNGED/: Using permissions from /home/alumnos/46/113246/Maildir/expunged: mode=0700 gid=-1 Sep 16 10:57:19 myotis30 dovecot: imap(angel.luis): Debug: Namespace .EXPUNGED/: Permission lookup failed from /home/alumnos/46/113246/Maildir/expunged/.INBOX Sep 16 10:57:19 myotis30 dovecot: imap(angel.luis): Debug: Namespace .EXPUNGED/: Using permissions from /home/alumnos/46/113246/Maildir/expunged: mode=0700 gid=-1 and the message is stored in the expunge namespace (that is an imap INBOX folder is created in the namespace, with its cur, new and tmp, and the message is stored). But when I try to delete a whole imap folder (in the example I delete it from trash folder because I use thunderbird and it previously move the folder to trash), dovecot logs: Sep 16 11:45:46 myotis30 dovecot: imap(angel.luis): Debug: Namespace .DELETED/: Using permissions from /home/alumnos/46/113246/Maildir/deleted: mode=0700 gid=-1 Sep 16 11:45:46 myotis30 dovecot: imap(angel.luis): Debug: Namespace .DELETED/: Permission lookup failed from /home/alumnos/46/113246/Maildir/deleted/.Trash.kk-20110916-114546 Sep 16 11:45:46 myotis30 dovecot: imap(angel.luis): Debug: Namespace .DELETED/: Using permissions from /home/alumnos/46/113246/Maildir/deleted: mode=0700 gid=-1 Sep 16 11:45:46 myotis30 dovecot: imap(angel.luis): Debug: Namespace .DELETED/: Permission lookup failed from /home/alumnos/46/113246/Maildir/deleted/.Trash.kk-20110916-114546 Sep 16 11:45:46 myotis30 dovecot: imap(angel.luis): Debug: Namespace .DELETED/: Using permissions from /home/alumnos/46/113246/Maildir/deleted: mode=0700 gid=-1 and my mail client reports the error "[CANNOT] Can't rename mailboxes accross specified storages" and the mail folder isn't created in the DELETED namespace. Any idea? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información _o) y las Comunicaciones Aplicadas (ATICA) / \\ http://www.um.es/atica _(___V Tfo: 868887590 Fax: 868888337

2 5

[Dovecot] convert maildrop filter to sieve
by Aleksandar Lazic 19 Sep '11

19 Sep '11

Dear list member, does anybody have a script which can convert maildrop filter to sive filter? BR Aleks

2 2

Re: [Dovecot] v2.0.15 released
by Micah Anderson 19 Sep '11

19 Sep '11

"Simon Brereton" <simon.brereton(a)buongiorno.com> writes: > I'll bite.. But it's probably not your concern. When will we be able > to get stable 2.x packages for Debian? Apt installs 1.2.15-7 2.x packages are available in Debian Wheezy and Sid. A backport to Squeeze (stable) will be made once the 1.x transition packages make it into Wheezy (~10 days from now). micah

1 0

[Dovecot] default_pass_scheme = PLAIN and blank password
by Gary V 18 Sep '11

18 Sep '11

I'm using Dovecot 1.2.15 on Ubuntu, but I think this applies to other versions as well. I store user info and passwords in MySQL. It appears 'default_pass_scheme = PLAIN' allows blank passwords. My question is: Is this a bug or is this by design? If it is by design, is there a setting that I'm not aware of that changes this behavior? Of course let me know if you need additional info on the setup I'm using. Thank you, Gary V

1 0