- dovecot - dovecot.org

[Dovecot] Imap segfault on login with version 2.0.8 & 2.0.11
by Nicholas VonHollen 09 Apr '11

09 Apr '11

Hi everyone, I'm trying to upgrade/test our configuration files from Dovecot 1.2 to 2.0.11. I used the Dovecot config convert command, created a RHEL 5 x86_64 rpm, and tested it. I can connect, but once I login, the IMAP service segfaults. I've also reproduced this on version 2.0.8. I installed the debug RPM (for the stripped symbols), took a look at the core dump in gdb, and just got the _start method in ld_preload and a broken pointer in the backtrace. I tried to strace everything but the segfault doesn't happen then :-). I'm not sure what to do to get better information. I attached my client session, dovecot -n output, gdb trace, maillog, and the core dump. I published the RPMs I made at: http://c3205012.r12.cf0.rackcdn.com/dovecot-2.0.11-1_125.x86_64.rpm http://c3205012.r12.cf0.rackcdn.com/dovecot-debuginfo-2.0.11-1_125.x86_64.r… My platform is RHEL 5 with kernel 2.6.18 on x86_64. Is there anything else I can provide for more info? Thanks, Nick Nick VonHollen Rackspace Software Developer Desk: 540-443-2003 (internal 505-2003) Personal Cell: 757-710-7038

4 7

[Dovecot] restarting director
by Cor Bosman 08 Apr '11

08 Apr '11

Hi all, anyone having any problems with restarting the director? Every time I bring down 1 of the director servers, reboot it, or just restart it for whatever reason, im seeing all kinds of problems. Dovecot generally always gives me this error: Jan 20 22:49:55 imapdirector3 dovecot: director: Error: Director 194.109.26.173:444/right disconnected before handshake finished It seems the directors cant agree on forming a ring anymore, and this may be leading to problems with clients. I mostly have to resort to bringing down all directors, and restarting them all at once. Not really a workable solution. As an example, last night for a few hours we were getting complaints from customers about being disconnected, and the only obvious error in the log was the one above, after one of my colleagues had to restart a director because of some changes in the syslog daemon. After I restarted all directors withing a few seconds of each other, all complaints disappeared. Timo, i know ive asked similar questions before, but the answer just eludes me. If I have 3 director servers, and need to take one down and restart it, what is the proper method to reconnect the ring? In practice, I cant seem to work it out and I mostly end up with the above error until I just restart them all. Not fun with 20.000 clients connected. Cor

3 4

[Dovecot] Thunderbird 3.1 unable to delete subfolder of Trash under mdbox
by William Blunn 08 Apr '11

08 Apr '11

Thunderbird 3.1.9 over Windows 7. Dovecot 2.0.11 (2:2.0.11-0~auto+41 from http://xi.rename-it.nl/debian/ source on 8 Apr 2011) over Ubuntu 10.04 LTS. Trying to set up a Dovecot system with mdbox. But I also wanted to keep some Maildir. So I ended up with both mdbox and Maildir side-by-side and noticed an issue. On this system, Dovecot's global mail location is configured with maildir:~/Maildir I have a two users configured in a password-file passdb/userdb: One using the Dovecot global mail location (maildir:~/Maildir) the other with an override mail location (userdb_mail) of mdbox:~/mdbox (The only other configurations different to the default were to turn off the default system password passdb and userdb, and enable my local password-file-format passdb and userdb.) I have configured two IMAP accounts in Thunderbird 3.1.9, one to access each of the two users above. The test procedure is: In Thunderbird, create a folder at the top level (i.e. alongside Inbox), say "foo". In Thunderbird, delete the folder just created. This results in Thunderbird "moving" the folder to "Trash", resulting in a folder "Trash/foo". Up to this point, both the Maildir and mdbox users behave OK. Then in Thunderbird, delete the trashed folder "Trash/foo". At this point, things start to happen differently. With the Maildir user, the folder "Trash/foo" deletes successfully. But with the mdbox user, Thunderbird pops up an error: The current command did not succeed. The mail server for account <accountname> responded: Invalid mailbox name: Trash/foo/. The folder does disappear from the Thunderbird folder pane, but if Thunderbird is "prodded" to refresh what folders it thinks are there, then the folder reappears. If we check the user's mdbox directory, we can see that indeed the mailbox has not been deleted. Whatever I then do, I am unable to delete this folder in the mdbox user through Thunderbird. The only way I have found to safely delete the folder is to use "doveadm mailbox delete", but this requires root privilege on the server, which is not really a practical solution. It maybe a Thunderbird problem, but the question then arises: Why does it work under Maildir but doesn't work under mdbox? Any ideas? Bill

2 4

[Dovecot] fstat no such file or directory error
by Mark Dieterich 08 Apr '11

08 Apr '11

Periodically, we will have users IMAP sessions get hung. Their client sees a message like: The server responded: 'SERVERBUG] Internal error occurred. Refer to server log for more information On the server, we see the following in the logs: IMAP(<username>): Transaction log dovecot.index.log: duplicate transaction log sequence (37) IMAP(<username>): fscking index file dovecot.index IMAP(<username>): fstat() failed with index file dovecot.index: No such file or directory After the fstat message shows up, there doesn't appear to be anything on the user side that can be done to fix the problem. We've seen multiple instances where the file dovecot is complaining about not existing is visible, readable, and writable by the user in question, but dovecot is convinced it's not. The only way we've found to fix this issue is to kill off all user connections. When the user reconnects, then all appears to work fine. We have not found a way to recreate this problem. Some details: # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-686 i686 Debian 5.0.8 Mail files are stored on NFS. All imap connections for a given user are are mapped to a particular server at any given time. We have a script in place that watches our logs for this order of events, so the problem self corrects relatively quickly. But it would certainly be nice not have this happen at all. Thanks, Mark -- ---------- I'd rather be burning carbohydrates than hydrocarbons

2 4

[Dovecot] a strange doveadm behavior
by fakessh ＠ 08 Apr '11

08 Apr '11

hi timo very very good job you realize for the community here I have a very strange problem with doveadm I actually use a configuration file parameters in which the parameters are placed carefully My problem appears when I run this command doveadm expunge -A mailbox Trash savedbefore 30d i post command and result to the terminal [fakessh@r13151 ~]$ doveadm expunge -A mailbox Trash savedbefore 30d doveadm(fakessh): Error: userdb lookup: connect(/var/run/dovecot//auth-userdb) failed: Permission denied (euid=514(fakessh) egid=100(users) missing +r perm: /var/run/dovecot//auth-userdb, euid is not dir owner) doveadm: Error: Failed to iterate through some users [root@r13151 ~]$ chmod +r /var/run/dovecot/auth-userdb [fakessh@r13151 ~]$ doveadm expunge -A mailbox Trash savedbefore 30d doveadm(fakessh): Error: userdb lookup: connect(/var/run/dovecot//auth-userdb) failed: Permission denied (euid=514(fakessh) egid=100(users) missing +w perm: /var/run/dovecot//auth-userdb, euid is not dir owner) doveadm: Error: Failed to iterate through some users [root@r13151 ~]# chmod og+w /var/run/dovecot/auth-userdb [fakessh@r13151 ~]$ doveadm expunge -A mailbox Trash savedbefore 30d doveadm(dkimproxy): Fatal: seteuid(0) failed: Operation not permitted [fakessh@r13151 ~]$ any kind of discussion would be welcome -- gpg --keyserver pgp.mit.edu --recv-key 092164A7 http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x092164A7

2 5

[Dovecot] quota_exceeded_message
by Jim Knuth 08 Apr '11

08 Apr '11

Nevertheless, there is this option: plugin { quota_exceeded_message = Quota exceeded, please go to http://www.example.com/over_quota_help for instructions on how to fix this. } If one can write even more text, with word wrap? As an example: plugin { quota_exceeded_message = Quota exceeded, please go to http://www.example.com/over_quota_help for instructions on how to fix this. Please call: +49 0000 00000000 between 10:00 - 15:00 } -- Mit freundlichen Grüßen, Jim Knuth P.S.: Bitte HTML-Mails! Zufallszitat: Aus der Kriegsschule des Lebens: Was mich nicht umbringt, macht mich härter. [Nietzsche]

5 8

[Dovecot] shared folder: messages become invisible
by Burckhard Schmidt 08 Apr '11

08 Apr '11

Hello, after dealing with shared folder within version 2.0 rc* I started using it with a group of users. user1 shares a folder to user2. user2 has access to messages of this shared folder. After a "random" time (minutes up to several days) user2 doesn't see those messages anymore. user1 (the owner) hasn't changed anything inside this folder. All messages are still in place and normal visible for him. If user1 copies (whit TB) a messages into that folder user2 can see sometimes all messages again. But after a "random" time it happens again. user2 sees an empty shared folder. Deleting dovecot.index.log and dovecot.index.cache does not help. I have version 2.0.11 (2.0.10 same problem). mail_gid = sysdov mail_uid = sysdov namespace { inbox = yes list = yes location = prefix = separator = / subscriptions = yes type = private } namespace { list = yes location = maildir:%%h/maildir:CONTROL=~/control/FremdeOrdner/%%u:LAYOUT=fs prefix = FremdeOrdner/%%u/ separator = / subscriptions = no type = shared } mail_location = maildir:~/maildir:INDEX=/addons/index/%u:CONTROL=~/control:LAYOUT=fs I checked in a dialog: user1: 1 login user1 ... 1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS ACL RIGHTS=texk] Logged in 1 list "" "*" ... * LIST (\HasChildren) "/" "94ssl" #this one is shared to user2 * LIST (\HasNoChildren) "/" "94ssl/ansicht" #this one too user2: 1 login user2 ... 1 OK [CAPABILITY ... 1 list "" "*" ... * LIST (\HasChildren) "/" "FremdeOrdner/user1/94ssl" * LIST (\HasNoChildren) "/" "FremdeOrdner/user1/94ssl/ansicht" ... user1: 1 examine 94ssl * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS ()] Read-only mailbox. * 2 EXISTS # 2 messages * 0 RECENT * OK [UIDVALIDITY 1301570235] UIDs valid * OK [UIDNEXT 3] Predicted next UID * OK [HIGHESTMODSEQ 4] Highest 1 OK [READ-ONLY] Select completed. 1 examine 94ssl/ansicht * OK [CLOSED] Previous mailbox closed. * FLAGS (\Answered \Flagged \Deleted \Seen \Draft unknown-0) * OK [PERMANENTFLAGS ()] Read-only mailbox. * 6 EXISTS # 6 messages * 0 RECENT * OK [UIDVALIDITY 1301570236] UIDs valid * OK [UIDNEXT 7] Predicted next UID * OK [HIGHESTMODSEQ 14] Highest 1 OK [READ-ONLY] Select completed. user2 1 examine FremdeOrdner/user1/94ssl * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS ()] Read-only mailbox. * 0 EXISTS # no message, should be 2 * 0 RECENT * OK [UIDVALIDITY 1301570944] UIDs valid * OK [UIDNEXT 6] Predicted next UID * OK [HIGHESTMODSEQ 11] Highest 1 OK [READ-ONLY] Select completed. 1 examine FremdeOrdner/user1/94ssl/ansicht * OK [CLOSED] Previous mailbox closed. * FLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk unknown-0) * OK [PERMANENTFLAGS ()] Read-only mailbox. * 0 EXISTS # no message, shold be 6 * 0 RECENT * OK [UIDVALIDITY 1301570943] UIDs valid * OK [UIDNEXT 33] Predicted next UID * OK [HIGHESTMODSEQ 37] Highest 1 OK [READ-ONLY] Select completed. user1/control/94ssl/dovecot-uidlist: 3 V1301570235 N1 G8406fb358864944d710300000cd09d4f 1 :1301570819.M719509P910.suncom2,S=1319,W=1348 2 :1301585261.M338176P881.suncom2,S=23758,W=24220 user1/control/94ssl/ansicht/dovecot-uidlist: 3 V1301570236 N1 G3e8f0f00b862944d6f0300000cd09d4f 1 :1301570366.M22178P901.suncom2,S=1149,W=1173 2 :1301575917.M12924P1028.suncom2,S=1035,W=1055 3 :1301576897.M502460P1043.suncom2,S=1156,W=1183 4 :1301580697.M399644P1089.suncom2,S=1147,W=1174 5 :1285149220.M287482P15434.suncom2,S=1122,W=1149 6 :1301582382.M287792P1196.suncom2,S=1019,W=1039 user2/control/FremdeOrdner/user1/dovecot-uidvalidity: 4d946580 user2/control/FremdeOrdner/user1/dovecot-uidvalidity.4d946580 user2/control/FremdeOrdner/user1/94ssl/dovecot-uidlist: 3 V1301570944 N6 G9536eb178474944db10300000cd09d4f 3 :1301585261.M338176P881.suncom2,S=23758,W=24220 4 :1301570819.M719509P910.suncom2,S=1319,W=1348 user2/control/FremdeOrdner/user1/94ssl/ansicht/dovecot-uidlist: 3 V1301570943 N33 G5efdb6247f65944d880300000cd09d4f 21 :1301570366.M22178P901.suncom2,S=1149,W=1173 22 :1301575917.M12924P1028.suncom2,S=1035,W=1055 23 :1301576897.M502460P1043.suncom2,S=1156,W=1183 24 :1301580697.M399644P1089.suncom2,S=1147,W=1174 25 :1301582382.M287792P1196.suncom2,S=1019,W=1039 26 :1285149220.M287482P15434.suncom2,S=1122,W=1149 -- regards --- Burckhard Schmidt

2 1

[Dovecot] Debug messages
by Tolga 08 Apr '11

08 Apr '11

Here's everything after I enabled auth_verbose, auth_debug_passwords and auth_debug. Apr 06 16:20:47 auth(default): Info: new auth connection: pid=27885 Apr 06 16:20:47 auth(default): Info: client in: AUTH 1 PLAIN service=imap secured lip=184.82.40.118 rip=193.255.135.1 lport=143 rport=52150 Apr 06 16:20:47 auth(default): Info: client out: CONT 1 Apr 06 16:20:47 auth(default): Info: client in: CONT 1 AGJpbGdpAGJpbGdpOTg3 Apr 06 16:20:47 auth(default): Info: passwd-file(bilgi,193.255.135.1): lookup: user=bilgi file=/etc/dovecot/passwd Apr 06 16:20:47 auth(default): Info: passwd-file(bilgi,193.255.135.1): unknown user Apr 06 16:20:49 auth(default): Info: client out: FAIL 1 user=bilgi Apr 06 16:20:54 auth(default): Info: client in: AUTH 2 PLAIN service=imap secured lip=184.82.40.118 rip=193.255.135.1 lport=143 rport=52150 resp=AGJpbGdpAGJpbGdpOTg3 Apr 06 16:20:54 auth(default): Info: passwd-file(bilgi,193.255.135.1): lookup: user=bilgi file=/etc/dovecot/passwd Apr 06 16:20:54 auth(default): Info: passwd-file(bilgi,193.255.135.1): unknown user Apr 06 16:20:56 auth(default): Info: client out: FAIL 2 user=bilgi Apr 06 16:21:06 imap-login: Info: Disconnected (auth failed, 2 attempts): user=<bilgi>, method=PLAIN, rip=193.255.135.1, lip=184.82.40.118, TLS

2 1

[Dovecot] doveadm search doesn't update fts
by metro_domain_admin＠fastmail.fm 08 Apr '11

08 Apr '11

Hello, Doveadm search is failing to update our Squat indexes. The search itself works fine but the dovecot.index.search* files remain unchanged. I tried: doveadm search -u test mailbox INBOX body sometext doveadm search -u test mailbox INBOX text sometext I also tried the exact syntax Timo expressed in an earlier post: doveadm search -A body asdf If I run the same search through IMAP, the index files update as expected. The searches finish with a clean exit status and nothing shows up in the logs. I upgraded from 2.0.0 to 2.0.11 but the problem remains. >From doveconf -n: plugin { fts = squat } protocol imap { mail_max_userip_connections = 16 mail_plugins = $mail_plugins fts fts_squat } Thank you, Tony

2 1

[Dovecot] Permission Denied - cannot create inbox
by Joseph Tam 08 Apr '11

08 Apr '11

tlmoore(a)gmail.com writes: > Apr 7 07:44:51 fs1 dovecot: imap(tim): Error: > chown(/home/tim/mail/.imap/INBOX, -1, 97(dovecot)) failed: Operation not > permitted (egid=500(tim), group based on /var/mail/tim) > > How do I give permissions to dovecot program to create these? I am trying > not to chmod 777 every mailbox. I was going to write about the same problem. This got me over the hump: chmod 0600 /var/spool/mail/* All my user's mailboxes used to be group=mail mode=0660. I think these settings were left over from Solaris' mail.local: I can't reproduce these permissions now, even for new mailboxes. Maybe it's because the spool directory is now mode=1777 (not g+s mail). Not too keen on these permissions either, but it seems to work. Dovecot seems to transfer group permissions of the mailbox to its corresponding cache. If it can't set group ownership, you get the fatal error message above. If the original mailbox is mode 0600, dovecot is smart enough not to set group ownership. I couldn't find this information: shouldn't it be documented here? http://wiki2.dovecot.org/SharedMailboxes/Permissions This situation could also happen if a user is revoked from a group's membership. Would it be useful to make this a configurable behaviour whereby a chgrp() failure of cache files will fall back to chown'ing to user=owner, mode=0600 instead? Or just leave the user to scratch their head? Joseph Tam <tam(a)math.ubc.ca>

3 3

[Dovecot] LDA vs LMTP, Cyrus SASL, verbose_proctitle
by Joseph Tam 08 Apr '11

08 Apr '11

Is there a reason I should prefer LMTP over LDA for local delivery? Performance? Security? The Wiki doesn't differentiates LMTP vs LDA with respect to sendmail configuration, so am I correct that I just need to replace mail.local with dovecot-lda, which will choose LDA/LMTP based on dovecot.conf? Also, can I consolidate authentication by configuring dovecot to use what sendmail uses (Cyrus SASL) or vice versa? The Wiki hints this is in the works. Lastly, toggling verbose_proctitle seems to have no effect on the output of ps. Is verbose_proctitle broken for Solaris? Thanks, Joseph Tam <jtam.home(a)gmail.com>

3 3

[Dovecot] configure: error: unrecognized option: --docdir=/usr/share/doc/dovecot-2.0.11
by Bruce Cheng 07 Apr '11

07 Apr '11

Hi, I tried to use ATrpms (http://dl.atrpms.net/all/dovecot-2.0.11-1_126.src.rpm) to rebuild the rpms. It is shown the error message as following: configure: error: unrecognized option: --docdir=/usr/share/doc/dovecot-2.0.11 Try `./configure --help' for more information. I checked `./configure --help', it did contain the '--docdir' option. I don't know how to fix it. Then I tried to remove ' --docdir=%{_docdir}/%{name}-%{version} \' and rebuild it again. It is shown another error message as following: mv: cannot stat `/var/tmp/dovecot-2.0.11-1_126-root//usr/share/doc/dovecot-2.0.11': No such file or directory I tried to modify dovecot.spec again, replace 'mv $RPM_BUILD_ROOT/%{_docdir}/%{name}-%{version} %{_builddir}/%{name}-%{version}/docinstall ' with 'mv $RPM_BUILD_ROOT/%{_docdir}/%{name} %{_builddir}/%{name}-%{version}/docinstall' and rebuild it again. Antoher error shown 'File must begin with "/": %{_initddir}/dovecot', therefore I add '%define _initddir /etc/rc.d/init.d' Finally, I can rebuild the RPMS, but it is shown error message again while I install RPMS: [root@testmail SPECS]# rpm -ivh ../RPMS/x86_64/dovecot-2.0.11-1_126.x86_64.rpm Preparing... ########################################### [100%] 1:dovecot ########################################### [100%] /var/tmp/rpm-tmp.13056: line 3: syntax error near unexpected token `fi' /var/tmp/rpm-tmp.13056: line 3: `fi' error: %post(dovecot-2.0.11-1_126.x86_64) scriptlet failed, exit status 2 Please advise me how to fix the problem and thank you in advance. -- Best Regards, Bruce

2 4

[Dovecot] Permission Denied - cannot create inbox
by tl511 07 Apr '11

07 Apr '11

I cant figure out permissions with Dovecot. I am new with this program and have tried setting the mail group to "mail" which is the group of my mailboxes which are located in /var/spool/mail. Here's the error I get. fs1 dovecot: imap(tl511insight): Error: chown(/home/tl511insight/mail/.imap/INBOX, -1, 12(mail)) failed: Operation not permitted (egid=504(tl511insight), group based on /var/mail/tl511insight) Apr 7 07:44:51 fs1 dovecot: imap(tl511insight): Error: mkdir(/home/tl511insight/mail/.imap/INBOX) failed: Operation not permitted Apr 7 07:44:51 fs1 dovecot: imap(tim): Error: chown(/home/tim/mail/.imap/INBOX, -1, 97(dovecot)) failed: Operation not permitted (egid=500(tim), group based on /var/mail/tim) Apr 7 07:44:51 fs1 dovecot: imap(tim): Error: mkdir(/home/tim/mail/.imap/INBOX) failed: Operation not permitted How do I give permissions to dovecot program to create these? I am trying not to chmod 777 every mailbox. -- View this message in context: http://old.nabble.com/Permission-Denied---cannot-create-inbox-tp31341777p31… Sent from the Dovecot mailing list archive at Nabble.com.

1 0

[Dovecot] Change/add mail header via IMAP
by Алексей Сундуков 06 Apr '11

06 Apr '11

Hello. I create RoundCube plugin and I have question. I want add mail header and I see 2 way: 1) change file via filesystem (mailbox in maildir format); 2) change header via dovecot. I think 1) bad way. But I do not know dovecot support change head information or not? My by via IMAP commant? same programm (LDA?)? May be it impossible via dovecot?

3 8

[Dovecot] Virtual users
by Tolga 06 Apr '11

06 Apr '11

Hello, I am using postfix and virtual accounts. So far, I have been able to get postfix to deliver to the correct location, but I don't know how to get dovecot to pick up the mail. My mails are at /srv/vmail/domain/user, below is my dovecot -n output and the relevant error. Can you help me please? Regards, dovecot -n: # 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.8.1.el5.028stab070.5 i686 Ubuntu 10.04 LTS log_path: /var/log/dovecot.log protocols: imap listen: *:143 login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_location: mbox:/srv/vmail/%d/%u mbox_write_locks: fcntl dotlock auth default: passdb: driver: passwd-file args: /etc/dovecot/passwd userdb: driver: static args: uid=vmail gid=vmail home=/srv/vmail/%d/%u userdb: driver: passwd Log: Apr 06 16:09:32 imap-login: Info: Disconnected (auth failed, 2 attempts): user=<bilgi>, method=PLAIN, rip=193.255.135.1, lip=184.82.40.118, TLS Tolga

1 0

[Dovecot] dovecot: auth(default): Can't open configuration file /etc/dovecot/dovecot-sql.conf: Permission denied
by Kevin P. McDonough 05 Apr '11

05 Apr '11

Hello, I have been searching all day for help on an issue I am having after installing and just having begun to configure dovecot. Whenever I try to start the dovecot daemon I receive the following errors in the syslog: Apr 4 13:15:03 ***** dovecot: auth(default): Can't open configuration file /etc/dovecot/dovecot-sql.conf: Permission denied Apr 4 13:15:03 *****dovecot: dovecot: Fatal: Auth process died too early - shutting down Now, I have gone through the config file (see below) trying various settings for auth including running it as root and as vmail. I have tried a number of permutations for the permissions and ownership on the file specified above from 600 root -> 777 vmail and everything in between, yet always the same issue. If I rename the file and try to start dovecot it notices that the file is missing and gives an appropriate error. I cannot figure out how the permissions can be wrong on the file, I am starting to assume it is a problem elsewhere. (One other note, I was initially getting an error regarding the rawlog permissions, and just removed the rawlog part of the IMAP config to work around that). ---cut--- *****:~ # l /etc/dovecot/ total 160 drwxr-xr-x 2 root root 4096 Apr 4 14:18 ./ drwxr-xr-x 98 root root 12288 Apr 4 17:41 ../ -rw-r--r-- 1 root root 52110 Apr 4 14:18 dovecot.conf -rw-r--r-- 1 root root 51576 Mar 16 13:31 dovecot.conf~ -rw-r--r-- 1 root root 410 Feb 22 19:03 dovecot-db-example.conf -rw-r--r-- 1 root root 782 Feb 22 19:03 dovecot-dict-sql-example.conf -rw-r--r-- 1 root root 4986 Feb 22 19:03 dovecot-ldap-example.conf -rw-r--r-- 1 root root 5589 Apr 4 13:25 dovecot-sql.backup -rw------- 1 root root 5589 Mar 16 13:31 dovecot-sql.conf -rw-r--r-- 1 root root 5097 Feb 22 19:03 dovecot-sql-example.conf ---cut--- ---cut--- *****:~ # dovecot -n # 1.2.16: /etc/dovecot/dovecot.conf Error: setmntent(/etc/mtab) failed: Permission denied # OS: Linux 2.6.37.1-1.2-desktop i686 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s ssl: no disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login first_valid_uid: 5000 last_valid_uid: 5000 first_valid_gid: 5000 last_valid_gid: 5000 mail_location: maildir:/var/vmail/%d/%n/Maildir mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/rawlog /usr/lib/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 lda: postmaster_address: postmaster(a)example.com mail_plugins: sieve quota mail_plugin_dir: /usr/lib/dovecot/modules/lda auth_socket_path: /var/run/dovecot/auth-master auth default: mechanisms: plain login passdb: driver: pam passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: passwd userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail plugin: quota: maildir sieve: ~/.dovecot.sieve sieve_dir: ~/sieve ---cut--- I just noticed that setmntent error above, I havent seen that anywhere else previously. Any help would be _greatly_ appreciated. Sincerely, Kevin M.

2 3

[Dovecot] squirrelmail doesn't display share
by Eric Broch 05 Apr '11

05 Apr '11

Hello list, I have dovecot 2.0.11 installed on a client's server and Squirrelmail as the webmail client. I created the share below in dovecot.conf and it appears in Thunderbird and Outlook but not in Squirrelmail. What setting do I need to adjust in order for the share to appear in squirrelmail? Below are dumps of /etc/dovecot.conf and /etc/squirrelmail/local_config.conf # dovecot -n # 2.0.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.32.1.el5 i686 CentOS release 5.5 (Final) auth_cache_size = 32 M auth_mechanisms = plain login digest-md5 cram-md5 auth_username_format = %Lu disable_plaintext_auth = no first_valid_uid = 89 log_path = /var/log/dovecot.log login_greeting = Dovecot toaster ready. namespace { inbox = yes location = prefix = INBOX. separator = . type = private } namespace { location = maildir:/home/vpopmail/domains/mydomain.com/shared/projects prefix = projects. separator = . type = shared } passdb { args = cache_key=%u webmail=127.0.0.1 driver = vpopmail } plugin/quota = maildir protocols = imap ssl_cert = </var/qmail/control/servercert.pem ssl_key = </var/qmail/control/servercert.pem userdb { args = cache_key=%u quota_template=quota_rule=*:backend=%q driver = vpopmail } protocol imap { imap_client_workarounds = delay-newmail } # cat config_local.php <?php #################### # Local configuration for Qmail Toaster # configure to suit your requirements $hide_sm_attributions = true; $useSendmail = false; $imap_server_type = 'courier'; $optional_delimiter = '.'; $default_folder_prefix = 'INBOX.'; $show_prefix_option = false; $show_contain_subfolders_option = false; $delete_folder = true; $plugins[] = 'calendar'; $plugins[] = 'notes'; $plugins[] = 'filters'; $plugins[] = 'quota_usage'; $plugins[] = 'unsafe_image_rules'; $plugins[] = 'qmailadmin_login'; ?>

2 2

[Dovecot] imap-login: Panic: file ioloop.c: line 35 (io_add): assertion failed:
by Jan-Frode Myklebust 05 Apr '11

05 Apr '11

My dovecot directors (v2.0.8) had 3 instances of these yesterday: imap-login: Panic: file ioloop.c: line 35 (io_add): assertion failed: (fd >= 0) master: Error: service(imap-login): child 17374 killed with signal 6 (core dumps disabled) imap-login: Panic: file ioloop.c: line 35 (io_add): assertion failed: (fd >= 0) master: Error: service(imap-login): child 1780 killed with signal 6 (core dumps disabled) imap-login: Panic: file ioloop.c: line 35 (io_add): assertion failed: (fd >= 0) master: Error: service(imap-login): child 10349 killed with signal 6 (core dumps disabled) dovecot "assertion failed" normally scares me quite a bit, but I don't think this can be very bad, since it's only on the directors and we're not doing lmtp here yet.. More of a FYI, and please let me know if I should enable something to get better debug data if/when it happens again. -jf

2 2

[Dovecot] Master credentials for sieve
by Edgar Fuß 05 Apr '11

05 Apr '11

Is there a method for using master credentials for sieve only? We sometimes need to install/edit sieve script for some of our users. Currently, we just edit the files on the file server, but that doesn't appear the most sensible way for me

2 4

[Dovecot] Invalid old index files
by Reinhard Vicinus 05 Apr '11

05 Apr '11

Hi, i'm in the process of evaluating dovecot. I have a rather big testing environment with four dovecot director frontend instances and four dovecot backend instances. Mailboxes are all in mdbox format and stored on nfs. Indexes are stored locally. dovecot nfs setup for high performance is used (mmap_disable = no, dotlock_use_excl = yes, mail_nfs_storage = yes, mail_nfs_index = no). The remaining problem is, if i disable a backend server and the backend server which took over the connection already has some old index files, this index files aren't updated. If there aren't any index files all is fine and the index files are created anew. I can solve this by regularly deleting old index files via a cronjob. But i'm not sure if i made a configuration mistake and dovecot somehow can detect old index files automatically and invalidate them? Thanks in advance Reinhard

2 1

[Dovecot] is it posible to autocreate imap folders with non ascii chars?
by Igor Zinovik 05 Apr '11

05 Apr '11

Hello. I'm migrating from cyrus to dovecot and now after i converted mailboxes to Maildir. Some users already has imap folders with cyrillic chars. How could i autocreate folders with cyrillic chars? When i type something like: ... autocreate = utf8_chars autosubscribe = utf8_chars ... In logs i see that dovecot complains: Apr 05 16:21:43 imap(pavelkor): Debug: autocreate: Failed to create mailbox utf8_chars: Invalid mailbox name It is even possible to achieve?

2 2

[Dovecot] Latest Quota Optimizations and Sieve
by Thomas Leuxner 05 Apr '11

05 Apr '11

With the latest HG Quota code cleanups there seem to be hicups with Sieve/LMTP. Please see excerpt below. Sieve processing fails, though quota is within limits: [...] sieve: info: started log at Apr 05 09:06:36. error: msgid=<20110405070128.315AF3173F0(a)eul0300650.eu.verio.net>: failed to store into mailbox 'INBOX': Quota exceeded (mailbox for user is full). [...] Apr 5 09:06:36 spectre dovecot: lmtp(32005, alias(a)domain.tld) Error: 3X25MXy/mk0FfQAAqZii3w: sieve: script /var/vmail/domains/domains.tld/alias/.dovecot.sieve failed with unsuccessful implicit keep (user logfile /var/vmail/domains/domains.tld/alias/.dovecot.sieve.log may reveal additional details) Fetch User quota: $ doveadm quota get -u alias(a)domain.tld Quota name Type Value Limit % user STORAGE 151085 5242880 2 user MESSAGE 4118 - 0 [ doveconf -n ] # 2.0.11 (230458801916): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.1 auth_verbose = yes mail_location = mdbox:~/mdbox mail_plugins = acl quota namespace { hidden = no inbox = yes location = prefix = separator = / type = private } namespace { list = yes location = mdbox:/var/vmail/public prefix = Public/ separator = / subscriptions = no type = public } passdb { args = username_format=%u /var/vmail/auth.d/%d/passwd driver = passwd-file } plugin { acl = vfile:/var/vmail/conf.d/%d/acls:cache_secs=300 mail_log_events = expunge mailbox_delete quota = dict:user::file:%h/mdbox/dovecot-quota quota_rule = *:storage=1GB quota_rule2 = Trash:storage=+10%% sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_dir = /var/vmail/conf.d/%d/sieve } protocols = imap lmtp quota_full_tempfail = yes service auth-worker { user = doveauth } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = doveauth } service imap-login { inet_listener imap { address = 1.2.3.4 port = 143 } inet_listener imaps { port = 0 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/ssl/certs/host_domain_tld_2010.crt ssl_key = </etc/ssl/private/host_domain_tld_2010.key syslog_facility = local1 userdb { args = username_format=%u /var/vmail/auth.d/%d/passwd driver = passwd-file } verbose_proctitle = yes protocol lmtp { mail_plugins = acl quota sieve } protocol imap { mail_plugins = acl quota imap_acl imap_quota mail_log notify }

2 2

[Dovecot] Quota has none effect
by Jim Knuth 05 Apr '11

05 Apr '11

Hello, I have a user who has 153600 kBytes max. storage space. Now, however, he has used already 167396 kBytes and he can receive e-mails and can send. How can this be? # 2.0.11 (0ce50c22f84c): /etc/dovecot/dovecot.conf # OS: Linux 2.6.29.4 i686 Debian wheezy/sid -- Mit freundlichen Grüßen, Jim Knuth P.S.: Bitte HTML-Mails! Zufallszitat: Ist das Leben nicht hundert Mal zu kurz, sich in ihm - zu langweilen? [Nietzsche]

4 24

[Dovecot] IMAP Client Not Recieving Email (DoveCot + PostFix + IMAP Client)
by ShepN 05 Apr '11

05 Apr '11

- Postfix is doing its job sending and receiving email. It puts the email in the unix user mailboxes (MBOX). - My Outlook client is authenticating with DoveCot using IMAP protocol without issue. The Problem: The mail that is placed my system users mailbox by postfix is not being transmitted to my outlook client by dovecot. /etc/postfix/main.cf: ------------------------------------------------------------------ smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu) biff = no append_dot_mydomain = no readme_directory = no smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key smtpd_use_tls=yes smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache myhostname = mail.somewhere.org #alias_maps = hash:/etc/aliases #alias_database = hash:/etc/aliases myorigin = /etc/mailname mydestination = somewhere.org, somewhere.home, localhost.home, , localhost mynetworks = 127.0.0.0/8 192.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 mailbox_command = procmail -a "$EXTENSION" mailbox_size_limit = 0 recipient_delimiter = + inet_interfaces = all relayhost = outgoing.verizon.net:587 smtp_sasl_auth_enable=yes smtp_sasl_password_maps=hash:/etc/postfix/sasl_passwd smtp_sasl_security_options= --------------------------------------------------------- dovecot -n -------------------------------------------------------- # 1.2.12: /etc/dovecot/dovecot.conf # OS: Linux 2.6.35-28-server x86_64 Ubuntu 10.10 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login first_valid_uid: 1000 mail_privileged_group: mail mail_location: mbox:~/mail:INBOX=/var/mail/%u mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 auth default: passdb: driver: pam args: dovecot userdb: driver: passwd ------------------------------------------------------ I would appreciate any input :) -- View this message in context: http://old.nabble.com/IMAP-Client-Not-Recieving-Email-%28DoveCot-%2B-PostFi… Sent from the Dovecot mailing list archive at Nabble.com.

3 2

[Dovecot] Dsync & random delete problem
by Antoine Millet 04 Apr '11

04 Apr '11

Hello, I've updated my home mail server with dovecot 2.0.11 with idea of using dsync to synchronize two master servers (one at home behind an ADSL connection, and another in a DC with a gigabit connection). Dsync is launched every minutes by a cron job for each hosted mailboxes (in Maildir format). Obviously, a lock prevents to launch more than one dsync process at time. On a test mailbox, it worked perfectly, but when I decided to use it on my own mailbox: big drama :-). Some trashed messages reappear after the next sync, by dint of insisting, sometime it are duplicated. Occasionally, the synchronization has the desired effect, but messages reappear few hours later... So, my questions are: * Dsync is it supposed to be used to synchronize two mailboxes on continuously? * Are these problems known? I've found one thread about a random delete problem, so it seem to be? Do you need more informations to debug it? My informations: * Dovecot version: 2.0.11 * Distro: Debian Squeeze amd64 * FS: ext4 * Mailbox format: Maildir * Dsync command: "dsync -u {account} mirror ssh -i /var/vmail/sync/id_vmail -C {dest} dsync -u {account}" * Bug happen randomly, I haven't found a way to reproduce it. * Dovecot configuration: A part in particular is interesting? Thanks in advance, -- Antoine Millet http://inaps.org

3 2

[Dovecot] imaptest assertion failure
by Mike Abbott 04 Apr '11

04 Apr '11

While trying to use imaptest (-20100922, from http://dovecot.org/nightly/imaptest/imaptest-latest.tar.gz) with the included tests directory, it assert-crashes after a suspicious connect() failure: $ ./imaptest user=foo pass=bar host=localhost test=tests Error: connect() failed: No route to host Panic: file test-exec.c: line 903 (test_send_lstate_commands): assertion failed: (ctx->clients_waiting > 0) Error: Raw backtrace: 2 libdovecot.0.dylib 0x0000000102afadfd default_fatal_finish + 35 -> 3 libdovecot.0.dylib 0x0000000102af9b87 i_set_error_handler + 0 -> 4 libdovecot.0.dylib 0x0000000102afa986 default_handler + 0 -> 5 imaptest 0x0000000102ac2966 test_send_lstate_commands + 1016 -> 6 imaptest 0x0000000102ab7acd client_send_more_commands + 28 -> 7 imaptest 0x0000000102ab7f42 client_input + 394 -> 8 libdovecot.0.dylib 0x0000000102b01112 io_loop_call_io + 70 -> 9 libdovecot.0.dylib 0x0000000102b003ba io_loop_handler_run + 227 -> 10 libdovecot.0.dylib 0x0000000102b010bf io_loop_run + 72 -> 11 imaptest 0x0000000102abce4c main + 2538 -> 12 imaptest 0x0000000102ab6aa0 start + 52 Abort trap: 6 This seems to happen with any test which uses more than one connection. Tests with "connections: 1" at the top work fine.

2 3

[Dovecot] SiS: Attachment file larger than expected
by Andrew Lewis 04 Apr '11

04 Apr '11

I recently set up SiS and imported a large chunk of mail. I've noticed one or two instances of this in the logs: Mar 28 09:03:50 mail dovecot: imap(xxx(a)yyy.zz): Error: Attachment file /mailstore/attachments/ce/73/ce737a45fe07495e2ae6466f9e381a30d5ec300406f11269d79bd5608cc0c922-822b3d2df67f8e4d7f5000009501e12a larger than expected (252218) Mar 28 14:52:34 mail dovecot: pop3(zzz(a)xxx.yy): Error: Attachment file /mailstore/attachments/c5/e1/c5e13d671d1d796680ae7166363afcb819af3d9cd04e01de7d65031b2f732bdf-b2ecf918b910904d826200009501e12a larger than expected (143959) Could that be an indication of a hash collision? No problem reports from the affected users. Output of du -b below: 186572 /mailstore/attachments/ce/73/ce737a45fe07495e2ae6466f9e381a30d5ec300406f11269d79bd5608cc0c922-822b3d2df67f8e4d7f5000009501e12a 106489 /mailstore/attachments/c5/e1/c5e13d671d1d796680ae7166363afcb819af3d9cd04e01de7d65031b2f732bdf-b2ecf918b910904d826200009501e12a Both attachments are PDF documents. I'm using Dovecot 2.0.11 + changesets d3d6ed6d268b and 890a46b3ab63 from git. -- Andrew Lewis <andrew(a)sybaweb.com>

2 4

[Dovecot] doveadm mailbox status - getting the size in bytes
by Patrick McLean 04 Apr '11

04 Apr '11

Hi, doveadm has an option to get the "vsize" of mailboxes, which is calculated by counting the number of linefeeds, but there does not appear to be way to simply get the size in bytes of a mailbox. I was wondering if there is something I am missing (I am using mdbox), or if not is it possible to implement this. Thanks

2 1

[Dovecot] dovecot ldap failed to recover
by Jan-Frode Myklebust 04 Apr '11

04 Apr '11

One of our backend pop/imap-server running dovecot v1.2.16 experienced some problems yesterday. It suddenly couldn't authenticate users anymore, flooding the logs with: pop3-login: Disconnected (auth failed, 1 attempts): user=<user1(a)example.com>, method=PLAIN, rip=192.168.42.15, lip=192.168.42.28 The problem seemed to start with this log entry: Mar 29 18:57:21 popimap1 dovecot: auth(default): ldap(userX(a)example.com,192.168.42.15): Connection appears to be hanging, reconnecting and this suspicious entry a few seconds later: Mar 29 18:57:41 popimap1 dovecot: auth(default): LDAP: Reply with unknown msgid 2 Afterward 18:57:21 it was unable to authenticate any users before I restarted the dovecot service. Also some of our postfix servers reported ldap lookup failures between 18:56-18:58, but then recovered. Looking at the ldap server side, we saw no problems logged, but netstat reports there being 3 active ldap sessions towards the dovecot server that failed yesterday, while the dovecot server only has 1: ldap1$ netstat -na |grep 192.168.42.28 tcp 0 0 192.168.43.2:389 192.168.42.28:44408 ESTABLISHED tcp 0 0 192.168.43.2:389 192.168.42.28:36464 ESTABLISHED tcp 0 0 192.168.43.2:389 192.168.42.28:60580 ESTABLISHED popimap1$ netstat -na| grep 192.168.43.2 tcp 0 0 192.168.42.28:60580 192.168.43.2:389 ESTABLISHED So it looks to us like there was some problem with either the network, or the ldap-server for a short periode, and that dovecot then wasn't able to recover from this. -jf

2 1

[Dovecot] mbox sync: Expunged message reappeared in mailbox
by Stanisław Findeisen 04 Apr '11

04 Apr '11

Mar 29 10:57:02 k8ux dovecot: POP3(stf): mbox sync: Expunged message reappeared in mailbox /var/mail/stf (UID 123 < 60016, seq=2, idx_msgs=0) Mar 29 10:57:02 k8ux dovecot: pop3-login: Login: user=<stf>, method=... Mar 29 10:57:03 k8ux dovecot: POP3(stf): mbox sync: UID inserted in the middle of mailbox /var/mail/stf (60016 > 123, seq=2, idx_msgs=1) Mar 29 10:57:03 k8ux dovecot: POP3(stf): Disconnected: Logged out top=0/0, retr=1/15968, del=1/1, size=15950 What is it??! $ dovecot --version 1.0.15 -- Eisenbits - proven software solutions: http://www.eisenbits.com/ OpenPGP: DFD9 0146 3794 9CF6 17EA D63F DBF5 8AA8 3B31 FE8A

3 2

[Dovecot] SIS: Corrupted dbox file /dane/...../m.1 (around offset=98692): uid=44 points to broken data at offset=98662
by Marcin Mirosław 04 Apr '11

04 Apr '11

Hi! I'm not sure is it the same as described by Andrew Lewis, this is whay i'm posting. Log is: 2011-03-31T17:40:08.369598+02:00 hermes dovecot: imap-login: Login: user=<marcin(a)mejor.pl>, method=PLAIN, rip=62.121.127.119, lip=193.238.12.139, mpid=19221, TLS 2011-03-31T17:40:08.684562+02:00 hermes dovecot: imap(marcin(a)mejor.pl): Error: Corrupted dbox file /dane/domeny/mejor.pl/mail/marcin/mdbox/storage/m.1 (around offset=98692): Ext refs metadata corrupted: 3604 3311 - a5/2f/a52fbe2094a0f68cdb403d696b313d9e3fba6978-f722212d1ea0944daf4a0000a95b0854 2011-03-31T17:40:08.684891+02:00 hermes dovecot: imap(marcin(a)mejor.pl): Error: Corrupted dbox file /dane/domeny/mejor.pl/mail/marcin/mdbox/storage/m.1 (around offset=98692): uid=44 points to broken data at offset=98662 2011-03-31T17:40:08.685728+02:00 hermes dovecot: imap(marcin(a)mejor.pl): Disconnected: Internal error occurred. Refer to server log for more information. [2011-03-31 17:40:08] bytes=343/66007 2011-03-31T17:40:08.686229+02:00 hermes dovecot: imap(marcin(a)mejor.pl): Warning: mdbox /dane/domeny/mejor.pl/mail/marcin/mdbox/storage: rebuilding indexes This is reproducible by me. I've made test namespace, then in Thunderbird i've created new subfolder, then i copy (ctrl+ mose move ;) ) ~700 mails from other folder. When i try to go inside this subfolder i gets those errors, thunderbird shows only 33 emails. Those emails can't be deleted. Regards! # doveconf -n # 2.0.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.36-hardened-r9 i686 Gentoo Base System release 1.12.14 ext4 auth_cache_size = 1 k auth_mechanisms = plain login digest-md5 cram-md5 default_vsz_limit = 32 M deliver_log_format = msgid=%m: from=%f: phys=%p: virt=%w %$ first_valid_uid = 8 last_valid_uid = 8 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_attachment_dir = /dane/domeny/zalaczniki mail_attachment_min_size = 3 k mail_cache_min_mail_count = 20 mail_gid = mail mail_location = maildir:/dane/domeny/%d/mail/%n/.maildir mail_plugins = autocreate quota fts fts_squat zlib mail_privileged_group = mail mail_uid = mail maildir_stat_dirs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mdbox_rotate_interval = 1 days namespace { inbox = yes location = prefix = separator = . } namespace { location = mdbox:/dane/domeny/%d/mail/%n/mdbox prefix = tescik. separator = . subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin/autocreate = Trash plugin/autocreate2 = Spam plugin/autocreate3 = Sent plugin/autocreate4 = Drafts plugin/autosubscribe = Trash plugin/autosubscribe2 = Spam plugin/autosubscribe3 = Sent plugin/autosubscribe4 = Drafts plugin/fts = squat plugin/fts_squat = partial=4 full=10 plugin/quota = maildir:User quota plugin/sieve = /dane/domeny/%d/mail/%n/.maildir/.dovecot.sieve plugin/sieve_dir = /dane/domeny/%d/mail/%n/.maildir/sieve plugin/zlib_save = bz2 postmaster_address = postmaster@localhost protocols = imap pop3 sieve service auth { unix_listener auth-userdb { group = mail mode = 0660 user = root } } service managesieve-login { inet_listener sieve_deprecated { port = 2000 } vsz_limit = 4 M } ssl_cert = </etc/ssl/gwiazdka.mejor.pl.pem ssl_key = </etc/ssl/gwiazdka.mejor.pl.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol lda { mail_plugins = autocreate quota fts fts_squat zlib sieve } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_max_userip_connections = 25 mail_plugins = autocreate quota fts fts_squat zlib imap_zlib }

2 4

[Dovecot] install question
by Gerard Ranke 04 Apr '11

04 Apr '11

Dear list, I'm trying to build a dovecot-2.0.11 package for our systems, and so I would like to install it to a temporary directory. But when I use "gmake DESTDIR=/tmp/build install", instead of binaries, it's wrapper scripts that get installed for dovecot, doveconf and doveadm. When I install to the default location all is well. Does anybody know how how to install to a temp location? Thanks in advance for your answer! Best regards, Gerard Ranke

2 1

[Dovecot] Does Dovecot 2 need more ressources than 1 ?
by Frank Bonnet 04 Apr '11

04 Apr '11

Hello Switching for Dovecot 1 to 2, I noticed the machine respond slower to users requests , of course it works but response times are a bit longer. Does Dovecot 2 need more system ressources ? ( the machine is the same ) Thanks

3 6

[Dovecot] [solved] Re: pigeonhole and roundcube install problem
by Selcuk MIYNAT 04 Apr '11

04 Apr '11

On 24.03.2011 13:56, Selcuk MIYNAT wrote: > Hi, > > I've installed sieve and managesieve(pigeonhole) on qmail and > dovecot(v2.0.11). > > I've install sieverules on Roundcube. I can see the plugin on the > webinterface, and i can add rules. > > But there is a problem: > > I've put this .qmail file on "deneme" user's home directory according to > [1]. > > |/var/qmail/bin/preline -f /usr/local/libexec/dovecot/dovecot-lda -d > $EXT@$USER > > Then I got this message on qmail log: > > deferral: /var/qmail/bin/preline:_line_1:_test:_too_many_arguments/ Just copied another preline binary from a different machine and problem solved. -- Selcuk MIYNAT Endersys Ltd. Sistem Destek Muhendisi / System Support Engineer Phone : +90 216-4709423 | Fax : +90 216-4709508 Web : http://www.endersys.com.tr Blog : http://blog.endersys.com Twitter : http://www.twitter.com/endersys LPI : The #1 Linux Certification for IT Professionals LPI (Linux Professional Institute) Turkey http://www.lpi-turkey.com Endersys is the first Advanced Business Partner of Red Hat in Turkey ! http://www.europe.redhat.com/partners/endersys/

1 0

[Dovecot] Segmentation fault with vpopmail auth
by Samuel Montosa 04 Apr '11

04 Apr '11

Hi. I am new in the list. First, excuse my english. I am not native speaker. A few hours ago I had a problem with process dovecot-auth and vpopmail. Versions I had using, working, were: vpopmail 5.4.28 dovecot-1.1.12 I tried to compile dovecot-1.2.16. Compilation was well but in execution system said: kernel: dovecot-auth[2842]: segfault at 645f20 ip 0000000000645f20 sp 00007fff69bd3708 error 15 in dovecot-auth[645000+1000] and so. Then, I tried to recompile dovecot-1.1.12 (original version I had working) but system said the same. After investigation, I saw I had mixed of vpopmail versions. Problem was I had /home/vpopmail/lib/libvpopmail.so in my system. When this file is present, compilation of dovecot link dovocot-auth to dynamic library libvpopmail.so, but it is not necessary since I had my system working using vpopmail without this .so. What I recommend is to compile a fresh vpopmail. Now I am using vpopmail-5.4.32 (at now, stable version) and dovecot-1.2.16. First, compile vpopmail and make sure you purge /home/vpopmail/lib/ of libvpopmail.so. Fresh installations of vpopmail, from tar.gz (not from SVN) _doesn't_ build libvpopmail.so, so make sure this file doesn't exist before you compile dovecot. For me, library dependencies are: mymachine:/usr/local/src/dovecot-1.2.16# ldd src/auth/dovecot-auth linux-vdso.so.1 => (0x00007fff63df5000) libpam.so.0 => /lib/libpam.so.0 (0x00007f9f925e1000) libcrypt.so.1 => /lib/libcrypt.so.1 (0x00007f9f923aa000) libdl.so.2 => /lib/libdl.so.2 (0x00007f9f921a5000) librt.so.1 => /lib/librt.so.1 (0x00007f9f91f9d000) libc.so.6 => /lib/libc.so.6 (0x00007f9f91c3c000) /lib64/ld-linux-x86-64.so.2 (0x00007f9f927f7000) libpthread.so.0 => /lib/libpthread.so.0 (0x00007f9f91a1f000) I hope this helps. It was a strange "bug". Regards. -- Samuel Montosa

1 0

[Dovecot] Dovecot IMAP repeatedly disconnects
by Edwin Humphries 04 Apr '11

04 Apr '11

Hi, I'm running dovecot-1.0.7-7.el5 on a CentOS 5.5x64 server, accessed through Thunderbird clients. Thunderbird is reporting constant disconnections from the server; the maillog shows constant repeats of Apr 4 16:39:21 holly dovecot: imap-login: Login: user=<?user?>, method=PLAIN, rip=::ffff:172.31.255.193, lip=::ffff:172.31.255.1 Apr 4 16:39:21 holly dovecot: IMAP(?user?): mbox /home/?user?/mail/Trash: seq=1 uid=3469 uid_broken=0 originally needed 17 bytes, now needs 18 bytes Apr 4 16:39:21 holly dovecot: IMAP(?user?): Raw backtrace: imap [0x461b7e] -> imap [0x4618ec] -> imap(mbox_sync_rewrite+0x5e3) [0x4344a3] -> imap [0x42f5c0] -> imap(mbox_sync+0x428) [0x4309a8] -> imap [0x427a5c] -> imap(cmd_copy+0x2f9) [0x411ff9] -> imap(cmd_uid+0x48) [0x4152a8] -> imap [0x4157a7] -> imap [0x415839] -> imap(_client_input+0x6d) [0x415e7d] -> imap(io_loop_handler_run+0x106) [0x466ef6] -> imap(io_loop_run+0x18) [0x4663f8] -> imap(main+0x3f2) [0x41d5c2] -> /lib64/libc.so.6(__libc_start_main+0xf4) [0x36d441d994] -> imap [0x411179] Apr 4 16:39:21 holly dovecot: child 14327 (imap) killed with signal 6 The Thhunderbird custoimisations (login_greeting_capability = yes and imap_client_workarounds = tb-extra-mailbox-sep) are configured -- Regards, ?user? Humphries Mobile: 0419 233 051 NetSense Computers (Ironstone Technology Pty Ltd) 79 Barney St (P. O. Box 423), Kiama, NSW, 2533 Phone: +61 (0)2 4233 2285 Fax: +61 (0)2 4233 2781 Web: http://www.netsensecomputers.com.au -- This email is intended for the named addressee/s only and may contain confidential or privileged information. If you are not a named addressee please delete it and notify the sender. -- "/At every moment he beholdeth a wondrous world, a new creation, and goeth from astonishment to astonishment, and is lost in awe at the works of the Lord of Oneness./" Baha'u'llah, The Seven Valleys "./.. humans are interesting. With all the wonders there are in the Universe, they invented boredom./" Terry Pratchet, Hogfather "/The most beautiful thing we can experience is the mysterious. It is the source of all true art and all science. He to whom this emotion is a stranger, who can no longer pause to wonder and stand rapt in awe, is as good as dead: his eyes are closed./" Albert Einstein /"Stuff your eyes with wonder ... live as if you'd drop dead in ten seconds. See the world. It's more fantastic than any dream made or paid for in factories./" Ray Bradbury

2 1

[Dovecot] Trouble with 2.0.11 debian package
by Gyuris Szabolcs 03 Apr '11

03 Apr '11

I wonder if somebody could help me. If I try clean install of dovecot-common dovecot-imapd dovecot-pop3d from deb http://xi.rename-it.nl/debian stable-auto/dovecot-2.0 main I got: Starting IMAP/POP3 mail server: dovecotdoveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf: service(managesieve-login): executable is empty failed! Setting up dovecot-imapd (2:2.0.11-0~auto+33) ... Replacing config file /etc/dovecot/conf.d/20-imap.conf with new version ucfr: Attempt from package dovecot-imapd to take /etc/dovecot/conf.d/20-imap.conf away from package dovecot-common ucfr: Aborting. dpkg: error processing dovecot-imapd (--configure): subprocess installed post-installation script returned error exit status 4 Setting up dovecot-pop3d (2:2.0.11-0~auto+33) ... configured to not write apport reports Replacing config file /etc/dovecot/conf.d/20-pop3.conf with new version ucfr: Attempt from package dovecot-pop3d to take /etc/dovecot/conf.d/20-pop3.conf away from package dovecot-common ucfr: Aborting. dpkg: error processing dovecot-pop3d (--configure): subprocess installed post-installation script returned error exit status 4 configured to not write apport reports Errors were encountered while processing: dovecot-imapd dovecot-pop3d E: Sub-process /usr/bin/dpkg returned an error code (1) -- Üdvözlettel: Gyuris Szabolcs INTEGRITY Kft. Tel.: +36-1-450-2660 E-mail: gyuris.szabolcs(a)integrity.hu Tudásbázis -- http://tudasbazis.integrity.hu/ Céginformációk -- http://cegismerteto.integrity.hu/

3 3

[Dovecot] Maildir
by Walt Shekrota 01 Apr '11

01 Apr '11

I noticed in Cyrus they seem to address maildir++ recognised by IMAP. I need to know does Dovecot recognise this format? Procmail has an ability to deliver mails to different folders which if unrecognised renders the whole process useless. Does Dovecot have a similar deliver method? Thanks. -Walt

5 4

[Dovecot] inotify and network/cluster filesystems
by Jan-Frode Myklebust 01 Apr '11

01 Apr '11

(dovecot v1.2.16) I've notice the log notices about increasing /proc/sys/fs/inotify/max_user_instances on my servers, and started wondering if inotify works for network/cluster filesystems.. I found this: http://www.ibm.com/developerworks/forums/thread.jspa?threadID=311194 which says that there's no mechanism for one node to tell another node that a directory changed for GPFS.. And I would assume the same applies for NFS and other network filesystems. (Yes I know, we should use director to make users sticky to one host -- but we're not yet ready for that for lmtp). So, are there any recommendations for what settings one should use for for filesystems where inotify woun't work ? Are there settings for disabling it (without recompiling)? And does mailbox_idle_check_interval happen in addition to inotify, so that clients will be notified even with a broken inotify ? -jf

2 2

[Dovecot] Sieve: unknown tagged argument ':create' for the fileinto command
by mailing＠securitylabs.it 01 Apr '11

01 Apr '11

Hello, I've upgraded from dovecot 1.2.x with sieve to dovecot 2.0.11 with sieve. I've noticed that folders are no more created at delivery time now. I've read that I have to do two things: lda_mailbox_autocreate = yes in dovecot.conf and fileinto :create in the sieve script. Now the error message I receive is: error: unknown tagged argument ':create' for the fileinto command (reported only once at first occurence). My sieve script: require ["date", "variables", "fileinto"]; if header :contains "subject" "Bacula:" { if currentdate :matches "month" "*" { set "month" "${1}"; } if currentdate :matches "year" "*" { set "year" "${1}"; } fileinto :create "INBOX.Bacula.${month}-${year}"; } else { # The rest goes into INBOX # default is "implicit keep", we do it explicitly here keep; } My dovecot conf: papua:/usr/local/bin# dovecot -n # 2.0.11: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.1 auth_cache_negative_ttl = 2 mins auth_cache_size = 1000 M auth_cache_ttl = 2 mins auth_mechanisms = plain cram-md5 apop auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@& disable_plaintext_auth = no first_valid_uid = 100 last_valid_uid = 105 lda_mailbox_autocreate = yes lock_method = dotlock log_timestamp = "%Y-%m-%d %H:%M:%S " login_greeting = Server ready. mail_fsync = never mail_gid = Debian-exim mail_location = maildir:~/Maildir mail_privileged_group = Debian-exim mail_uid = Debian-exim managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = prefix = INBOX. separator = . type = private } passdb { args = /usr/local/etc/dovecot-sql.conf driver = sql } plugin/mail_log_events = delete expunge plugin/mail_log_group_events = plugin/quota = maildir plugin/quota_warning = storage=80%% /usr/local/bin/dovecot-quota-warning.sh 80 plugin/quota_warning2 = storage=90%% /usr/local/bin/dovecot-quota-warning.sh 90 plugin/sieve = ~/.dovecot.sieve protocols = imap service auth { unix_listener auth-userdb { group = Debian-exim mode = 0600 user = Debian-exim } } service imap-login { client_limit = 256 process_limit = 128 process_min_avail = 3 service_count = 1 } service imap { drop_priv_before_exec = yes process_limit = 256 vsz_limit = 256 M } service pop3-login { client_limit = 256 process_limit = 128 process_min_avail = 3 service_count = 1 } service pop3 { drop_priv_before_exec = yes process_limit = 256 vsz_limit = 256 M } ssl_cert =</usr/local/etc/dovecot.crt ssl_key =</usr/local/etc/dovecot.key userdb { args = /usr/local/etc/dovecot-sql.conf driver = sql } protocol imap { mail_max_userip_connections = 10 mail_plugins = " notify quota imap_quota mail_log" } protocol lda { mail_plugins = quota sieve postmaster_address = postmaster(a)me.com }

2 2

[Dovecot] Mail_location and formats
by Walt Shekrota 31 Mar '11

31 Mar '11

Hi, Ok I know that the Maildir hierarchical structure works because I saw it intermittantly in my setup. At times I could look at ALL folders in my client. mail_location = maildir:~/Maildir:LAYOUT=fs http://wiki1.dovecot.org/MailLocation/Maildir this says 1.1 only? My maildir folder has a collection of maildir folders ie each has cur new tmp folders. As an experiment I took the cur new tmp out of my INBOX folder and put it in the root of Maildir. This worked with dovecot using the inbox only or the standard maildir++ format. Although it would not see the old mail in the folder not sure why. mail_location = maildir:~/Maildir This setup also ignores the remainder of folders. I know the dovecot support of maildir is shakey due to standards compliance but this is crazy ... and unusable. Does ANYONE have a working maildir setup in the hierarchical layout? Maildir/ inbox mail-sent outbox otherfolder Fred Sue Thanks. -Walt

2 1

[Dovecot] POP3 connection issue & SASL not compiled in
by sunhux G 31 Mar '11

31 Mar '11

After I've configured dovecot for SSL according to the info given in the link below: https://access.redhat.com/kb/docs/DOC-6671 (tried both POP3 & secure POP3 & got the same result) I tested POP3 access from my unblocked (no firewall rule for outgoing) broadband PC's Outlook to connect to the postfix/dovecot server & got the following : Tasks Status ===================== ======== Establish network connection Completed Find outgoing mail server (SMTP) Completed Find incoming mail server (POP3) Completed Log onto incoming mail server (PO... Send test e-mail message Completed (yep, this email was received in postfix mailbox) & seconds later, the following messages returned: Log onto incoming mail server (POP3): The specified server was found, but there was no response from the server. Please verify that the port and SSL information is correct. To access these settings close this dialog, then click More Settings and click on the Advanced tab. Find incoming mail server (POP3): Outlook could not connect to the incoming mail server (POP3). The problem could be the server name or port, or your server may not support SSL. Verify your port and SSL settings in More Settings under the Advanced tab. Q1: What do I need to provide to this list for further troubleshooting? Q2: I have the following log entry in /var/log/mailog : Mar 31 10:48:36 hostname postfix/smtpd[22258]: warning: smtpd_sasl_auth_enable is true, but SASL support is not compiled in Is this related to my POP3 connection issue? Q3: Is the following related to the sasl issue in Q2 & the POP3 connection issue ? [root@host /etc/sysconfig]# saslauthd -v <== expectg postfix to be listed below saslauthd 2.1.19 authentication mechanisms: getpwent kerberos5 pam rimap shadow ldap [root@host /etc/sysconfig]# rpm -qa | grep -i sasl cyrus-sasl-md5-2.1.19-5.EL4 cyrus-sasl-devel-2.1.19-5.EL4 cyrus-sasl-ntlm-2.1.19-5.EL4 cyrus-sasl-2.1.19-5.EL4 cyrus-sasl-plain-2.1.19-5.EL4 cyrus-sasl-gssapi-2.1.19-5.EL4 warning: only V3 signatures can be verified, skipping V4 signature cyrus-sasl-sql-2.1.19-5.EL4 The above cyrus/sasl rpms are old existing packages that were already there in the server a couple of years ago & well before I installed postfix & dovecot in this server. Wondering if they interfere with postfix sasl authentication. There's no issue with this postfix+dovecot box sending & receiving emails. " saslfinger -s " output: # saslfinger -s saslfinger - postfix Cyrus sasl configuration Thu Mar 17 18:10:18 SGT 2011 version: 1.0.2 mode: server-side SMTP AUTH -- basics -- Postfix: 2.5.6 System: Red Hat Enterprise Linux ES release 4 (Nahant Update 2) -- smtpd is linked to -- libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0x47b72000) -- active SMTP AUTH and TLS parameters for smtpd -- smtpd_sasl_auth_enable = yes smtpd_sasl_security_options = noanonymous -- listing of /usr/lib/sasl -- total 560 -rw-r--r-- 1 root root 4634 Dec 2 2004 libanonymous.a -rwxr-xr-x 1 root root 871 Dec 2 2004 libanonymous.la -rwxr-xr-x 1 root root 5748 Dec 2 2004 libanonymous.so -rwxr-xr-x 1 root root 5748 Dec 2 2004 libanonymous.so.1 -rwxr-xr-x 1 root root 5748 Dec 2 2004 libanonymous.so.1.0.17 -rw-r--r-- 1 root root 9758 Dec 2 2004 libcrammd5.a -rwxr-xr-x 1 root root 857 Dec 2 2004 libcrammd5.la -rwxr-xr-x 1 root root 9884 Dec 2 2004 libcrammd5.so -rwxr-xr-x 1 root root 9884 Dec 2 2004 libcrammd5.so.1 -rwxr-xr-x 1 root root 9884 Dec 2 2004 libcrammd5.so.1.0.19 -rw-r--r-- 1 root root 34264 Dec 2 2004 libdigestmd5.a -rwxr-xr-x 1 root root 880 Dec 2 2004 libdigestmd5.la -rwxr-xr-x 1 root root 30804 Dec 2 2004 libdigestmd5.so -rwxr-xr-x 1 root root 30804 Dec 2 2004 libdigestmd5.so.0 -rwxr-xr-x 1 root root 30804 Dec 2 2004 libdigestmd5.so.0.0.20 -rw-r--r-- 1 root root 11322 Dec 2 2004 libgssapiv2.a -rwxr-xr-x 1 root root 906 Dec 2 2004 libgssapiv2.la -rwxr-xr-x 1 root root 11952 Dec 2 2004 libgssapiv2.so -rwxr-xr-x 1 root root 11952 Dec 2 2004 libgssapiv2.so.1 -rwxr-xr-x 1 root root 11952 Dec 2 2004 libgssapiv2.so.1.0.19 -rw-r--r-- 1 root root 6598 Dec 2 2004 liblogin.a -rwxr-xr-x 1 root root 847 Dec 2 2004 liblogin.la -rwxr-xr-x 1 root root 7248 Dec 2 2004 liblogin.so -rwxr-xr-x 1 root root 7248 Dec 2 2004 liblogin.so.0 -rwxr-xr-x 1 root root 7248 Dec 2 2004 liblogin.so.0.0.7 -rw-r--r-- 1 root root 6150 Dec 2 2004 libplain.a -rwxr-xr-x 1 root root 849 Dec 2 2004 libplain.la -rwxr-xr-x 1 root root 7000 Dec 2 2004 libplain.so -rwxr-xr-x 1 root root 7000 Dec 2 2004 libplain.so.1 -rwxr-xr-x 1 root root 7000 Dec 2 2004 libplain.so.1.0.16 -- listing of /usr/lib/sasl2 -- total 3152 -rwxr-xr-x 1 root root 875 Dec 2 2004 libanonymous.la -rwxr-xr-x 1 root root 12820 Dec 2 2004 libanonymous.so -rwxr-xr-x 1 root root 12820 Dec 2 2004 libanonymous.so.2 -rwxr-xr-x 1 root root 12820 Dec 2 2004 libanonymous.so.2.0.19 -rwxr-xr-x 1 root root 863 Dec 2 2004 libcrammd5.la -rwxr-xr-x 1 root root 15216 Dec 2 2004 libcrammd5.so -rwxr-xr-x 1 root root 15216 Dec 2 2004 libcrammd5.so.2 -rwxr-xr-x 1 root root 15216 Dec 2 2004 libcrammd5.so.2.0.19 -rwxr-xr-x 1 root root 884 Dec 2 2004 libdigestmd5.la -rwxr-xr-x 1 root root 42964 Dec 2 2004 libdigestmd5.so -rwxr-xr-x 1 root root 42964 Dec 2 2004 libdigestmd5.so.2 -rwxr-xr-x 1 root root 42964 Dec 2 2004 libdigestmd5.so.2.0.19 -rwxr-xr-x 1 root root 911 Dec 2 2004 libgssapiv2.la -rwxr-xr-x 1 root root 22292 Dec 2 2004 libgssapiv2.so -rwxr-xr-x 1 root root 22292 Dec 2 2004 libgssapiv2.so.2 -rwxr-xr-x 1 root root 22292 Dec 2 2004 libgssapiv2.so.2.0.19 -rwxr-xr-x 1 root root 851 Dec 2 2004 liblogin.la -rwxr-xr-x 1 root root 13296 Dec 2 2004 liblogin.so -rwxr-xr-x 1 root root 13296 Dec 2 2004 liblogin.so.2 -rwxr-xr-x 1 root root 13296 Dec 2 2004 liblogin.so.2.0.19 -rwxr-xr-x 1 root root 854 Dec 2 2004 libntlm.la -rwxr-xr-x 1 root root 29104 Dec 2 2004 libntlm.so -rwxr-xr-x 1 root root 29104 Dec 2 2004 libntlm.so.2 -rwxr-xr-x 1 root root 29104 Dec 2 2004 libntlm.so.2.0.19 -rwxr-xr-x 1 root root 851 Dec 2 2004 libplain.la -rwxr-xr-x 1 root root 13360 Dec 2 2004 libplain.so -rwxr-xr-x 1 root root 13360 Dec 2 2004 libplain.so.2 -rwxr-xr-x 1 root root 13360 Dec 2 2004 libplain.so.2.0.19 -rwxr-xr-x 1 root root 931 Dec 2 2004 libsasldb.la -rwxr-xr-x 1 root root 784960 Dec 2 2004 libsasldb.so -rwxr-xr-x 1 root root 784960 Dec 2 2004 libsasldb.so.2 -rwxr-xr-x 1 root root 784960 Dec 2 2004 libsasldb.so.2.0.19 -rwxr-xr-x 1 root root 875 Dec 2 2004 libsql.la -rwxr-xr-x 1 root root 21348 Dec 2 2004 libsql.so -rwxr-xr-x 1 root root 21348 Dec 2 2004 libsql.so.2 -rwxr-xr-x 1 root root 21348 Dec 2 2004 libsql.so.2.0.19 -- content of /etc/postfix/sasl/smtpd.conf -- pwcheck_method: saslauthd mech_list: LOGIN PLAIN CRAM-MD5 DIGEST-MD5 log_level: 5 -- active services in /etc/postfix/master.cf -- . . . . -- mechanisms on localhost -- -- end of saslfinger output --

1 1

[Dovecot] How to grant a kerberos ticket after successful imap authentication from dovecot
by André Rodier 31 Mar '11

31 Mar '11

Hello everybody, I hope this question is appropriate for this list. Apologies if not. I am running a set of virtual machines under debian 6, to build a mail/collaboration server. I am mainly using dovecot, postfix, openldap and heimdal. Mails are stored using maildir, on a NFSv4 share. My users are system users, but using LDAP and libpam-ldap and libnss-ldap for caching credentials information. Everything is working as expected, well, /almost/. Since NFS is using kerberos, by defaults, my users are not able to access their mail storage if they have not received their kerberos ticket. For instance, if I do nothing, this is the errors I have from dovecot when trying to logon using any imap client: Mar 31 09:33:07 titan dovecot: imap-login: Login: user=, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Mar 31 09:33:07 titan dovecot: dovecot: Fatal: chdir(/home/emails/team/arodier/) failed: Permission denied (euid=1003(arodier) egid=1001(red2team) missing +x perm: /home/emails) Mar 31 09:33:07 titan dovecot: dovecot: child 5089 (imap) returned error 89 (Fatal failure) However, if I just login on a console for the user "/arodier/", I see that I have received a ticket, and I can see it with klist: Credentials cache: FILE:/tmp/krb5cc_1001_ywvktf Principal: arodier(a)RED2.SRV Issued Expires Principal Mar 31 09:25:55 Mar 31 19:25:53 krbtgt/RED2.SRV(a)RED2.SRV Mar 31 09:25:57 Mar 31 19:25:53 nfs/ananke.red2.srv(a)RED2.SRV Once I have simply logged myself on a console, I can access my emails using any IMAP client. The question is: How should I configure libpam (or dovecot ?) to initialise/receive a kerberos ticket after successful authentication ? Thanks for your answers.

2 4

[Dovecot] debugging mail_location issues
by Walt Shekrota 31 Mar '11

31 Mar '11

Type of Maildir structure I am using came from KDE. No '.'s just folders. something like Maildir/ INBOX mail-sent outbox other where each has cur new and tmp folders. if I access this directory with IMAP it creates cur new and tmp in the root. ie Maildir/ INBOX cur new tmp mail-sent outbox other This implies to me 1. it finds the Maildir directory 2. it apparently does not have access to the directories like INBOX so it makes its own in the root? or is this a side effect I'm misunderstanding? The resulting IMAP session shows an empty INBOX only (this must be the cur new tmp it added) The real INBOX is not accessible but still intact. In a session this morning I could access all the folders just not the real INBOX. INBOX was as is here empty with cur new tmp in the root of the Maildir folder. This behavior makes no sense. I'm using the hierarchical structure as pointed to in. http://wiki1.dovecot.org/MailLocation/Maildir It appears my grief surrounds dovecot's detection of mailbox. This is kind of what I said days ago. Setting up requires you to know expected states. Something in my environmment I haven't been able to identify (yet) is influencing recognising that hierarchical maildir structure. -Walt

2 1

[Dovecot] WiKi V2
by Jim Knuth 31 Mar '11

31 Mar '11

Hi, small question: Will the WiKi of the version 2 be updated shortly? Many things are not right at all. This would be really very nice. Many thanks in advance. -- Mit freundlichen Grüßen, Jim Knuth P.S.: Bitte senden Sie KEINE HTML-Mails! Zufallszitat: Das Schweigen von gestern rechtfertigt nie das Schweigen von heute. (Otto Schily)

8 11

[Dovecot] Message file prefetching to memory
by Timo Sirainen 31 Mar '11

31 Mar '11

I added a new mail_prefetch_count setting to Dovecot v2.1 (http://hg.dovecot.org/dovecot-2.1/) Its main purpose is to avoid unnecessary latency while waiting for replies from remote server with imapc, i.e. instead of doing (FETCH, wait, FETCH, wait, ...) it can do (FETCH, FETCH, .., wait). For the same reason it's also going to be very useful once I add support for key-value databases / other high latency cloud filesystems. It also works with Maildir, single-dbox and cydir backends by calling posix_fadvise(POSIX_FADV_WILLNEED) for the files. This syscall is apparently only implemented by Linux. It should tell the kernel to start reading the files from disk to page cache. By calling this for multiple files, it should help the kernel optimize disk I/O. For example if 10 files are prefetched, the kernel might figure out that it should read them in a different order to avoid extra disk seeks. Perhaps it also does something useful with NFS, I don't know. I'm not sure if it would be a good idea to use this for mbox or multi-dbox files, since they already have multiple messages in same file so kernel probably already did some prefetching. With mdbox I guess it could be useful if the message file changes.. This optimization currently works only for FETCH command (and POP3 RETR and TOP). SEARCH/THREAD/SORT commands will hopefully implement it soon also. I'd be interested in knowing what the effects of this setting are if anyone tests this some day.

1 0

[Dovecot] Increase /proc/sys/fs/inotify/max_user_instances
by Adrian Stoica 31 Mar '11

31 Mar '11

Hi I allready have set 256 on max_user_instances , and in the log i keep seeing Mar 28 10:08:44 mail dovecot: imap(some.username): Warning: Inotify instance limit for user 98 (UID vmail) exceeded, disabling. Increase /proc/sys/fs/inotify/max_user_instances All users use thunderbird 3.1.9 , and from time to time this show in log , with a random user. What can i do to resolve this issue ? my doveconf-n : # 2.0.11: /usr/dovecot2/etc/dovecot/dovecot.conf # OS: Linux 2.6.35.4 i686 auth_cache_negative_ttl = 10 secs auth_cache_size = 10 M auth_cache_ttl = 1 mins auth_mechanisms = plain login cram-md5 auth_socket_path = /var/run/dovecot/auth-userdb auth_verbose_passwords = plain base_dir = /var/run/dovecot/ default_client_limit = 5000 default_internal_user = vmail default_login_user = nobody default_process_limit = 200 deliver_log_format = mail from=%f subject=%s msgid=%m: %$ dict { acl = mysql:/usr/dovecot2/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no first_valid_uid = 1 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = * mail_location = maildir:~/Maildir mail_plugins = " quota acl trash notify mail_log" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = prefix = separator = / subscriptions = yes type = private } namespace { hidden = no list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%u/ separator = / subscriptions = no type = shared } passdb { args = /usr/dovecot2/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_shared_dict = proxy::acl autocreate = Trash autocreate2 = Drafts autocreate3 = Sent autosubscribe = Trash autosubscribe2 = Drafts autosubscribe3 = INBOX autosubscribe4 = Sent mail_log_events = delete mailbox_delete mailbox_rename mail_log_group_events = yes quota = maildir:User quota quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=95%% quota-warning 90 %u quota_warning3 = storage=85%% quota-warning 85 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve trash = /usr/dovecot2/etc/dovecot/dovecot-trash.conf.ext } postmaster_address = postmaster(a)mydomain.com protocols = imap rejection_subject = Rejected: %s: %r service auth { unix_listener auth-userdb { mode = 0660 user = vmail } } service dict { unix_listener dict { user = vmail } } service imap-login { process_min_avail = 16 service_count = 1 } service imap { process_limit = 2048 vsz_limit = 512 M } service quota-warning { executable = script /bin/quota_warning.sh unix_listener quota-warning { user = vmail } user = vmail } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /usr/dovecot2/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = " quota acl trash notify mail_log sieve autocreate" } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_max_userip_connections = 16 mail_plugins = " quota acl trash notify mail_log imap_quota imap_acl" }

2 2

[Dovecot] log
by Walt Shekrota 30 Mar '11

30 Mar '11

does the following indicate TLS is configured? 2011-03-30 10:37:07 auth(default): Info: client out: OK 1 user=wshek 2011-03-30 10:37:07 auth(default): Info: master in: REQUEST 2 13371 1 2011-03-30 10:37:07 auth(default): Info: passwd(wshek,127.0.0.1): lookup 2011-03-30 10:37:07 auth(default): Info: master out: USER 2 wshek system_groups_user=wshek uid=1000 gid=1000 home=/home/wshek 2011-03-30 10:37:07 imap-login: Info: Login: user=<wshek>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, TLS If it is I do not intend it. How can I turn it off? Thanks. -Walt

2 2

[Dovecot] v1.2.12 and debug
by Walt Shekrota 30 Mar '11

30 Mar '11

Is there some kind of extended debug that might show why my maildir is not foundat login? It has worked off and on, once briefly today then no more. I'm going around twiddling knobs guessing at this point which is foolish. I need some real bread crumbs to indicate what is going wrong. I've tried all kinds of .conf file ... example file etc. I figured using the least number of settings should get me somewhere but I still have no luck. I'd love to just give up and load that PPA for 2.x but I have no idea what package to install in debian. (I have the PPA update) Thanks. -Walt

2 1

[Dovecot] dovecot.conf
by Walt Shekrota 30 Mar '11

30 Mar '11

In 1.2.12 or there abouts how do changes in the dovecot.conf happen? After doing the sig HUP I have noted there is generally a delay in the recognition of items in my .conf. An example I had logging set off, turned it on and it was several restarts before I again saw logging? This delay is driving me nuts in trying to figure out what needs to change. Thanks. -Walt

2 2

[Dovecot] dovecot-lda can not find home dir
by Pete 30 Mar '11

30 Mar '11

Hello, Running dovecot 2.0.11 and pigeonhole on Fedora 14 x86_64. The lda can not seem to find the user's home directory, yet other parts of dovecot (pop3, imap, managesieve) can. Grepping "Effective uid" from /var/log/maillog: Mar 29 11:21:34 new-eagle dovecot: pop3(pete): Debug: Effective uid=726, gid=726, home=/home/pete Mar 29 11:23:18 new-eagle dovecot: imap(pete): Debug: Effective uid=726, gid=726, home=/home/pete Mar 29 11:23:52 new-eagle dovecot: managesieve(pete): Debug: Effective uid=726, gid=726, home=/home/pete Mar 29 11:24:53 new-eagle dovecot: managesieve(pete): Debug: Effective uid=726, gid=726, home=/home/pete Mar 29 11:26:15 new-eagle dovecot: lda(pete): Debug: Effective uid=726, gid=726, home= Although mail does get delivered, the .dovecot.lda-dupes file can not be created because of this: Mar 29 11:26:15 new-eagle dovecot: lda: Debug: Loading modules from directory: /usr/lib64/dovecot Mar 29 11:26:15 new-eagle dovecot: lda: Debug: Module loaded: /usr/lib64/dovecot/lib90_sieve_plugin.so Mar 29 11:26:15 new-eagle dovecot: lda(pete): Debug: Effective uid=726, gid=726, home= Mar 29 11:26:15 new-eagle dovecot: lda(pete): Debug: fs: root=/home/pete/mail, index=, control=, inbox=/var/spool/mail/pete Mar 29 11:26:15 new-eagle dovecot: lda(pete): Debug: userdb lookup skipped, username taken from passwd lookup for process euid Mar 29 11:26:15 new-eagle dovecot: lda(pete): Debug: none: root=, index=, control=, inbox= Mar 29 11:26:15 new-eagle dovecot: lda(pete): Error: User pete doesn't have home dir set, disabling duplicate database Mar 29 11:26:15 new-eagle dovecot: lda(pete): Debug: sieve: using sieve path for user's script: /home/pete/.dovecot.sieve Mar 29 11:26:15 new-eagle dovecot: lda(pete): Debug: sieve: opening script /home/pete/.dovecot.sieve Mar 29 11:26:15 new-eagle dovecot: lda(pete): Debug: sieve: script /home/pete/.dovecot.sieve successfully compiled Mar 29 11:26:15 new-eagle dovecot: lda(pete): Debug: sieve: executing script from /home/pete/.dovecot.sieve Mar 29 11:26:15 new-eagle dovecot: lda(pete): sieve: msgid=<FF641E3CEA3748B5B7D678ABE85F1A7B@pete1>: stored mail into mailbox 'INBOX' Dovecot seems to be able to determine the user's home directory, but I do not know how to tell dovecot-lda where it is. Running "doveadm user pete" produces: userdb: pete system_groups_user: pete uid : 726 gid : 726 home : /home/pete In /home/pete, the .forward file is: | "/usr/libexec/dovecot/dovecot-lda" Entry from /etc/passwd: pete:x:726:726:Peter:/home/pete:/bin/false Output of dovecot -n: # 2.0.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.35.11-83.fc14.x86_64 x86_64 Fedora release 14 (Laughlin) ext4 auth_cache_size = 10 M auth_debug = yes auth_mechanisms = login plain auth_verbose = yes disable_plaintext_auth = no listen = * mail_debug = yes mail_location = mbox:/home/%u/mail:INBOX=/var/spool/mail/%u:INDEX=MEMORY managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl passdb { driver = pam } plugin/sieve = /home/%u/.dovecot.sieve plugin/sieve_dir = /home/%u/sieve protocols = pop3 imap sieve rejection_reason = Sorry, your message was automatically rejected:%n%r rejection_subject = failure notice re: %s service managesieve-login { inet_listener sieve { port = 4190 } } ssl = no userdb { driver = passwd } protocol lda { mail_plugins = sieve I did update from dovecot-2.0.9 (which the lda could find the home directory) but I also had to change the mail_location from: mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u:INDEX=MEMORY to: mail_location = mbox:/home/%u/mail:INBOX=/var/spool/mail/%u:INDEX=MEMORY Also had to change: plugin/sieve = ~/.dovecot.sieve plugin/sieve_dir = ~/sieve To: plugin/sieve = /home/%u/.dovecot.sieve plugin/sieve_dir = /home/%u/sieve ... in order for 2.0.11 to function. Any thoughts on how to get the home dir passed correctly to lda ? Thanks, Pete

2 3

[Dovecot] service auth { client_limit=4096 } is lower than required under max. load (5720
by Frank Bonnet 30 Mar '11

30 Mar '11

Hello Since I started up dovecot2 this morning I get this kind of warning message when I start Dovecot Help appreciated thanks doveconf: Warning: service auth { client_limit=4096 } is lower than required under max. load (5720) Stopping dovecot. Waiting for PIDS: 79978, 79978. doveconf: Warning: service auth { client_limit=4096 } is lower than required under max. load (5720) Starting dovecot. doveconf: Warning: service auth { client_limit=4096 } is lower than required under max. load (5720) Warning: service auth { client_limit=4096 } is lower than required under max. load (5720)

2 1

[Dovecot] migrating to dovecot
by Alexandre Chapellon 30 Mar '11

30 Mar '11

Hello, I am trying to setup a migration scenario from an proprietary solution to dovecot IMAP/POP3. Whereas am only at the strating point, things appear quite complicated because of the following reasons: - The proprietary solution uses special/own/proprietary mailbox format (wich is more like maildir but is not maildir) - I don't have direct access to the filesystem where the mails are stored. The best I could do would be a snapshots of the filesystem - I have about 1,5TB of mail data. - Having users to be forced to empty their mailbox before migration or re-download their whole mailbox after migration would be something hard for me to present as a correct option. Am looking for advices that would avoid me loosing time searching in bad directions. Or even point me to a miraculous tool thatdoes all magic while i have a beer :) Best regards. -- horoa: la voie est libre

4 6

[Dovecot] dovecot.conf settings vs 'dovecot-n' output
by Walt Shekrota 30 Mar '11

30 Mar '11

I am curious why these do not seem to match? It especially bothers me that the modes set are different. Am I missing something? Thanks. -Walt

2 1

[Dovecot] 1.2 problem 'dovecot -n' vs dovecot.conf
by Walt Shekrota 30 Mar '11

30 Mar '11

To elaborate, if there is a database associated with this setup it is really fubar. note: tail of dovecot -n lda: postmaster_address: postmaster mail_plugins: sieve quota_full_tempfail: yes deliver_log_format: msgid=%m: %$ rejection_reason: Your message to <%t> was automatically rejected:%n%r auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/run/dovecot/auth-client mode: 504 socket: type: listen client: path: /var/spool/postfix/private/dovecot-auth mode: 432 user: postfix group: postfix plugin: sieve: ~/.dovecot.sieve sieve_dir: ~/sieve This in no way represents the settings in my dovecot.conf. It seems to have rembered old .conf settings and mixed them. At no time was mode 504 set or even 432. What am I doing wrong? Thanks. -Walt I'm also toying with the idea of loading 2.x if I can figure out the PPA stuff.

2 1

[Dovecot] doveadm
by Walt Shekrota 30 Mar '11

30 Mar '11

Hi Where does this utility reside for installation. I use Ubuntu and installed dovecot-imapd and dovecot-pop3d so far. Does it now ship in the regular dovecot installation packages? Thanks. -Walt

4 3

[Dovecot] Dovecot-2.0.11 searches in all LDAP directory
by Басов Евгений 29 Mar '11

29 Mar '11

Hello. I have some users IDs in different OUs with different passwords. Base OU for mail server is 'ou=Mail, dc=ph, dc=com' Trying manual search: # ldapsearch -b 'ou=Mail, dc=ph, dc=com' -D 'cn=bind, ou=Users, dc=ph, dc=com' -w XXX -s sub -h mainserv.ph.com '(&(objectClass=qmailUser)(uid=someuser))' uid mailMessageStore … # extended LDIF … uid: someuser mailMessageStore: /var/mail/someuser/Maildir/ # search result search: 2 result: 0 Success # numResponses: 2 # numEntries: 1 It works fine. My dovecot configuration: # 2.0.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.36-gentoo-r5 x86_64 Gentoo Base System release 2.0.1 base_dir = /var/run/dovecot/ listen = * login_trusted_networks = 192.168.1.0/24 mail_location = maildir:~/.maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = * driver = pam } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin/sieve = ~/.dovecot.sieve plugin/sieve_dir = ~/sieve protocols = imap ssl_cert = </etc/ssl/dovecot/server.pem ssl_key = </etc/ssl/dovecot/server.key userdb { driver = passwd } userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes protocol lda { mail_plugins = sieve } My /etc/dovecot/dovecot-ldap.conf.ext: hosts = mainserv.ph.com dn = cn=bind, ou=Users, dc=ph, dc=com dnpass = XXX debug_level = 255 auth_bind = yes ldap_version = 3 base = ou=Mail, dc=ph, dc=com scope = subtree user_attrs = mailMessageStore=home user_filter = (&(objectClass=qmailUser)(uid=%u)) pass_attrs = uid=user,userPassword=password pass_filter = (&(objectClass=qmailUser)(uid=%u)) I tested IMAP over telnet: $ telnet mainserv.ph.com 143 Trying 192.168.1.252... Connected to mainserv.ph.com. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN] Dovecot ready. a001 LOGIN someuser password1 Two passwords are tested: for uid from ou=Mail and ou=Users. LDAP logs of searches: slapd[1917]: filter: (&(objectClass=posixAccount)(uid=someuser)) slapd[1917]: attrs: slapd[1917]: uid slapd[1917]: userPassword slapd[1917]: uidNumber slapd[1917]: gidNumber… and etc after this: slapd[1917]: => access_allowed: search access to "cn=John Smith,ou=Mail,dc=ph,dc=com" "objectClass" requested slapd[1917]: => dn: [2] ou=mail,dc=ph,dc=com slapd[1917]: => acl_get: [2] matched slapd[1917]: => acl_get: [2] attr objectClass… and etc I have some questions: 1. Why is it searches in another LDAP places, not only ou=Mail, dc=ph, dc=com? 2. It not put mailMessageStore from ou=Mail, dc=ph, dc=com. Why? 3. How disable lookup in another LDAP places exept ou=Mail, dc=ph, dc=com? Thanks for answers.

2 3

[Dovecot] Upgrade to v2.0 conf file fails
by Nikolaos Milas 29 Mar '11

29 Mar '11

Hi, I am trying to use the command: doveconf -n -c dovecot-1.conf > dovecot-2.conf to upgrade my dovecot.conf file, but it fails (see below). Judging from the message that vsz_limit is the new setting for login_process_size, I have retried using login_process_size=256 rather than login_process_size=64 (which was the initial value), but the error persists. Please advise. Thanks, Nick Output of "doveconf -n -c" command: =========================================================================================================================== doveconf: Warning: NOTE: You can get a new clean config file with: doveconf -n > dovecot-new.conf doveconf: Warning: Obsolete setting in dovecot.conf:1: protocols=imaps is no longer necessary, remove it doveconf: Warning: Obsolete setting in dovecot.conf:1: protocols=pop3s is no longer necessary, remove it doveconf: Warning: Obsolete setting in dovecot.conf:6: ssl_cert_file has been replaced by ssl_cert = <file doveconf: Warning: Obsolete setting in dovecot.conf:7: ssl_key_file has been replaced by ssl_key = <file doveconf: Warning: Obsolete setting in dovecot.conf:8: ssl_ca_file has been replaced by ssl_ca = <file doveconf: Warning: Obsolete setting in dovecot.conf:12: login_process_size has been replaced by service { vsz_limit } doveconf: Warning: Obsolete setting in dovecot.conf:13: login_process_per_connection has been replaced by service { service_count } doveconf: Warning: Obsolete setting in dovecot.conf:25: imap_client_workarounds=outlook-idle is no longer necessary doveconf: Warning: Obsolete setting in dovecot.conf:25: imap_client_workarounds=netscape-eoh is no longer supported doveconf: Warning: Obsolete setting in dovecot.conf:59: add auth_ prefix to all settings inside auth {} and remove the auth {} section completely doveconf: Warning: Obsolete setting in dovecot.conf:62: passdb ldap {} has been replaced by passdb { driver=ldap } doveconf: Warning: Obsolete setting in dovecot.conf:66: userdb ldap {} has been replaced by userdb { driver=ldap } doveconf: Warning: Obsolete setting in dovecot.conf:70: auth_user has been replaced by service auth { user } doveconf: Error: service(pop3-login): vsz_limit is too low doveconf: Fatal: Error in configuration file dovecot.conf: service(pop3-login): vsz_limit is too low ===========================================================================================================================

1 1

[Dovecot] global sieve not working
by Barry Kwok 29 Mar '11

29 Mar '11

My global sieve rule is not working and do not compile. But per-user sieve is working. Here is my dovecot -n: log_path: /var/log/dovecot.log protocols: imap pop3 ssl: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_uid: 501 mail_gid: 501 mail_location: maildir:/var/vmail/%u/Maildir/:INDEX=/var/vmail/%u/Maildir/ mail_debug: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota acl imap_acl mail_plugins(imap): quota imap_quota acl imap_acl mail_plugins(pop3): mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: shared separator: / prefix: shared/%%u/ location: maildir:%%Lh/Maildir:INDEX=%Lh/Maildir/shared/%%Lu list: children lda: postmaster_address: root mail_plugins: sieve quota autocreate expire auth_socket_path: /var/run/dovecot/auth-master sieve_global_path: /var/vmail/sieve/dovecot.sieve log_path: /var/log/sieve.log auth default: mechanisms: plain login default_realm: mydomain.net user: vmail username_chars: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_+@ passdb: driver: pam passdb: driver: sql args: /etc/dovecot-mysql.conf userdb: driver: passwd userdb: driver: sql args: /etc/dovecot-mysql.conf socket: type: listen client: path: /var/spool/postfix/dovecot-auth mode: 438 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 438 user: vmail group: vmail plugin: quota: dict:user::proxy::quota quota: maildir quota_rule: *:storage=0 acl: vfile acl_shared_dict: file:/var/spool/dovecot/shared-mailboxes.db expire: Trash 7 Trash/* 7 Junk 30 expire_dict: proxy::expire sieve: /var/vmail/sieve/%Ld/%Ln/dovecot.sieve dict: quota: mysql:/etc/dovecot-dict-quota.conf expire: db:/var/lib/dovecot/expire.db By reading sieve.log, it simple ignore sieve_global_path: /var/vmail/sieve/dovecot.sieve but the per user sieve /var/vmail/sieve/%Ld/%Ln/dovecot.sieve is working --barry

4 6

[Dovecot] file permissions
by Walt Shekrota 29 Mar '11

29 Mar '11

Dovecot 1.2.12 maildir format using :LAYOUT=fs (my Mail dir came from KDE) I can't remember the permissions of the /Mail/ directory because I haven't been concerned with it too much until now. I think they were user:user or user:mail. Now a new mail ends up 600 root:mail. (in alternate directories) When I start my mutt client to the imap server it gets an error for any folder containing a root:mail new mail file. I think the root ownership is a procmail side effect? If I chmod 760 Mail/folder/* (then the new emails show in dovecot without the access error) It appears mail comes to the INBOX fine just not individual folders On the initial access, dovecot gets a "missing +r perm" or "+x" in the log. 1: What permission structure should permeate my Mail dir? 2: What might affect the incoming mail file getting wrong permissions/ownership? I'm thinking the later may be a procmail issue unless it is related to initial incorrect permissions? Thanks for any insight. -Walt

3 4

[Dovecot] Trouble with password scheme module
by Ian R. Justman 29 Mar '11

29 Mar '11

Hi, all. About two and a half years ago, I wrote a hack to add an additional MD5-based password scheme to Dovecot, but I wrote it as a hack to src/auth/password_scheme.c since it was relatively easy to do, and I needed to get a machine running since the machine I was replacing, a Sun Ultra 5 running Post.Office, had dying hard drives. Now, I'm actually sitting down and adapting it as a module and am having trouble getting it to work. The code tarball itself can be picked up here: http://www.ian-justman.com/code/dovecot/password_scheme_po_smd5.tar.gz Before I continued, I made sure that a system-level account worked: # telnet <server IP> 110 Trying <server IP>... Connected to <server IP>. Escape character is '^]'. +OK Dovecot ready. user <username> +OK pass <password> +OK Logged in. quit +OK Logging out. Connection closed by foreign host. I then enabled the module, which introduces the password scheme "PO-SMD5". I have Dovecot's default scheme set to SMD5. If I get a password hash whose value has a {PO-SMD5} tag on it, the session looks like the following: # telnet <server IP> 110 Trying <server IP>... Connected to <server IP>. Escape character is '^]'. +OK Dovecot ready. user <user with PO-SMD5 password> +OK pass <user's password> -ERR Authentication failed. quit +OK Logging out Connection closed by foreign host. The following entry is deposited into the system log: Mar 28 17:44:51 <hostname> dovecot: auth: Error: sql(<username>,<server IP>): Unknown scheme PO-SMD5 However, when I try using an account covered by the system (which does work when the plugin isn't loaded in dovecot.conf), the session looks like the following: mikuru# telnet <server IP> 110 Trying <server IP>... Connected to <server IP>. Escape character is '^]'. +OK Dovecot ready. user <user with system password> +OK pass <user's password> Connection closed by foreign host. The following entry is deposited into the system log: Mar 28 17:45:13 <hostname> dovecot: pop3: Error: dlopen(/usr/local/lib/dovecot/lib_password_scheme_po_smd5.so) failed: /usr/local/lib/dovecot/lib_password_scheme_po_smd5.so: Undefined symbol "password_scheme_unregister" Otherwise, the patch I developed under 1.x applies cleanly to 2.0.x's password_scheme.c and works perfectly as a builtin. This work was done under FreeBSD 8.1-RELEASE amd64. Any ideas? --Ian. -- Ian R. Justman UNIX hacker. Anime fan. Any questions? ianj (at) ian-justman.com

1 2

[Dovecot] xi.rename-it.nl problems
by Robert Schetterer 28 Mar '11

28 Mar '11

Hi , i know there were errors reported before with autobuild packs from xi.rename-it.nl , hint was purge and remove old dovecot packs, but at reinstall i ever get such ucfr: Attempt from package dovecot-pop3d to take /etc/dovecot/conf.d/20-pop3.conf away from package dovecot-common ucfr: Aborting. on a few packs ,any idea? -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

2 2

[Dovecot] dovecot auth password mismatch
by david＠davidwbrown.name 28 Mar '11

28 Mar '11

Hello dovecot gods, after using Postfix with webmail for 8 years the new gen of email smartphones forces me to consider using IMAP. Actually, for several months I was successfully using IMAP. I believe the reason why IMAP worked previously (before migrating to the Cloud) the hosting server and the client machines were considered local by the system. Now, I have moved everything to a Cloud service. And, now attempts to use my Ubuntu Evolution or iPhone generates the following error condition in my logs: dovecot: auth(default): client in: AUTH 1 PLAIN service=imap lip=xxx.yyy.www.zzz rip=75.214.160.72 lport=143 rport=59107 resp=AGRhdmlkAGx1dGVmaXNr dovecot: auth(default): passwd(kilroy,75.214.160.72): lookup dovecot: auth(default): passwd(kilroy,75.214.160.72): Password mismatch dovecot: auth(default): passwd(kilroy,75.214.160.72): CRYPT(mypass) != 'x' dovecot: auth(default): new auth connection: pid=15522 dovecot: auth(default): client out: FAIL 1 user=kilroy ******************* dovecot -n ******************* 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.34.1-rscloud x86_64 Ubuntu 10.04.2 LTS log_timestamp: %Y-%m-%d %H:%M:%S disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mail_location: maildir:~/Maildir mbox_write_locks: fcntl dotlock auth default: realms: myname.name, hisname.name, hername.name default_realm: myrealm.com username_format: %n verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd userdb: driver: passwd

1 0

[Dovecot] Support not compiled in for passdb driver ldap
by Stéphane Wartel 28 Mar '11

28 Mar '11

Hello, From repo, the lastest release 2.0.11-0~auto+32 does not have ldap support :/ auth: Fatal: Support not compiled in for passdb driver 'ldap' Regards, Stephane

1 1

[Dovecot] Errors logged from 2.0.11
by Andreas Kossack 28 Mar '11

28 Mar '11

Hi all, we use dovecot 2.0.11 with local (LDAP based) users and see (occasionally) error messages like "Mar 15 09:29:26 MailServ local3:err|error dovecot: imap(xxxx): Error: creat(/dovecot.mailbox.log) failed: Permission denied (euid=1985(xxxx) egid=219(yyyy) stat() failed: No such file or directory, euid is not dir owner) but all (filesystem) permissions are correct and the user doesn't report any errors. All works as expected. What can be the reason for such messages? -- Mit freundlichen Grüßen A. Kossack _______________________________________________________________________________ Andreas Kossack Andreas.Kossack(a)TU-Cottbus.De BTU Cottbus, Brandenburg, Germany, Walther-Pauer-Str.2, 03046 Cottbus http://wwwca.telesec.de/cgi-bin/caservice/Common/InstallRoot/DT-Root-CA-2.d… _______________________________________________________________________________ Diese Nachricht wurde aus 100% wiederverwerteten Elektronen erstellt. _______________________________________________________________________________

2 4

[Dovecot] IMAP move extension support
by Nikolay Shopik 28 Mar '11

28 Mar '11

Hi Timo, Any chance we could get IMAP move extension support in Dovecot? http://tools.ietf.org/html/draft-krecicki-imap-move-01 This is now landed in Thunderbird trunk, so it will be great to have server to test and use with :). Thanks

2 3

[Dovecot] Regression in settings-parser.c (dovecot 2.0.11)
by Michal Hlavinka 28 Mar '11

28 Mar '11

Hi, one Fedora user sees regression in dovecot 2.0.11 (compared to prev. 2.0.9). There was change recently: http://hg.dovecot.org/dovecot-2.0/diff/bc77e80947c0/src/lib-settings/settin… which adds call to settings_find_key_nth(...., &parent_def,...). This function can set parent_def to NULL, but there is no check for this situation in the code. So on next line if (parent_def->type !=... dovecot crashes. We've tested simple fix: if (parent_def==NULL) return FALSE; and everything was working again. Michal Backtrace of the crash: Program received signal SIGSEGV, Segmentation fault. settings_find_key_nth (ctx=0x99e4050, key=0x99c4330 "plugin//etc", n=0xbff9bdac, def_r=0xbff9bda8, link_r=0xbff9bda4) at settings-parser.c:696 696 if (parent_def->type != SET_STRLIST) (gdb) p parent_def $1 = (const struct setting_define *) 0x0 (gdb) bt #0 settings_find_key_nth (ctx=0x99e4050, key=0x99c4330 "plugin//etc", n=0xbff9bdac, def_r=0xbff9bda8, link_r=0xbff9bda4) at settings-parser.c:696 #1 0x004f9ce5 in settings_find_key_nth (ctx=0x99e4050, key=0x99c4318 "plugin//etc/dovecot", n=0xbff9be1c, def_r=0xbff9be18, link_r=0xbff9be14) at settings-parser.c:693 #2 0x004f9ce5 in settings_find_key_nth (ctx=0x99e4050, key=0x99c42f8 "plugin//etc/dovecot/users", n=0xbff9beb4, def_r=0xbff9bebc, link_r=0xbff9beb8) at settings-parser.c:693 #3 0x004f94fd in settings_parse_keyvalue (ctx=0x99e4050, key=0x99c42f8 "plugin//etc/dovecot/users", value=0x99c42f2 "yes") at settings-parser.c:760 #4 0x004fa270 in settings_parse_line (ctx=0x99e4050, line=0x99c42d8 "plugin//etc/dovecot/users=yes") at settings-parser.c:862 #5 0x00dededa in set_line (ctx=0x99cd468, input=0xbff9c100, user_r=0xbff9c04c, error_r=0xbff9c0fc) at mail-storage-service.c:134 #6 user_reply_handle (ctx=0x99cd468, input=0xbff9c100, user_r=0xbff9c04c, error_r=0xbff9c0fc) at mail-storage-service.c:227 #7 mail_storage_service_lookup (ctx=0x99cd468, input=0xbff9c100, user_r=0xbff9c04c, error_r=0xbff9c0fc) at mail-storage-service.c:843 #8 0x00deeaae in mail_storage_service_lookup_next (ctx=0x99cd468, input=0xbff9c100, user_r=0xbff9c0ac, mail_user_r=0xbff9c0a8, error_r=0xbff9c0fc) at mail-storage-service.c:968 #9 0x0805f2e7 in client_create_from_input (input=<value optimized out>, ---Type <return> to continue, or q <return> to quit--- login_client=0x99ce810, fd_in=11, fd_out=11, input_buf=0xbff9c0e0, error_r=0xbff9c0fc) at main.c:202 #10 0x0805f5dd in login_client_connected (client=0x99ce810, username=0x99c409b "sjoerd", extra_fields=0x99c4110) at main.c:267 #11 0x0051606f in master_login_auth_finish (client=0x99ce810, auth_args=<value optimized out>) at master-login.c:206 #12 0x005163c2 in master_login_auth_callback (auth_args=0x99c410c, errormsg=0x0, context=0x99ce810) at master-login.c:374 #13 0x00516d3e in master_login_auth_input_user (auth=0x99cdcd8) at master-login-auth.c:239 #14 master_login_auth_input (auth=0x99cdcd8) at master-login-auth.c:359 #15 0x0052cc72 in io_loop_call_io (io=0x99cea10) at ioloop.c:384 #16 0x0052ded3 in io_loop_handler_run (ioloop=0x99cc390) at ioloop-epoll.c:213 #17 0x0052cbf0 in io_loop_run (ioloop=0x99cc390) at ioloop.c:405 #18 0x005181fb in master_service_run (service=0x99cc2e0, callback=0x805f100 <client_connected>) at master-service.c:478 #19 0x0805fb0d in main (argc=1, argv=0xbff9c4c4) at main.c:375

2 4

[Dovecot] FTS Compound Search
by duonut 28 Mar '11

28 Mar '11

Hi I use roundcube as the webmail fronted to a dovecot server. It currently has squat enabled. When round cube performs a search, it does a compound search even if only one field is selected. >From another thread i read, dovecot in the v1 period did not support compound searches for squat. Does the latest version of V2 support compound searches with fts squat? If not, does fts with solr support compound searches? -- View this message in context: http://old.nabble.com/FTS-Compound-Search-tp31241908p31241908.html Sent from the Dovecot mailing list archive at Nabble.com.

2 2

Re: [Dovecot] try to compile dovecot 2.0.11 with ssl support
by easy klaus 27 Mar '11

27 Mar '11

Hello, >> SSL ............ : yes (OpenSSL) > >So it should be there.. > >> so it looks like SSL support is included, but when I start dovecot the >> message is: >> >> doveconf: Error: SSL support not compiled in but ssl=yes > >Well, that's weird. Are you sure you're running the just-compiled >version of Dovecot (i.e. not a previously installed version that didn't >have OpenSSL compiled in)? > Yes, I think so. I tried to find every dovecot directory and files and deleted it. After "make" and "make install" there was a new file under "/usr/local/sbin/dovecot" this is the one I use. >What does dovecot --build-options say? output of "/usr/local/sbin/dovecot --build-options" Build options: ioloop=epoll notify=dnotify ipv6 io_block_size=8192 Mail storages: cydir maildir mbox mdbox raw sdbox shared SQL drivers: Passdb: checkpassword passwd passwd-file shadow Userdb: checkpassword nss passwd prefetch passwd-file This looks strange because there is no ssl support. >Do you have "#define HAVE_SSL" in config.h? No, I only can find "#define HAVE_OPENSSL" Regards, Markus -- NEU: FreePhone - kostenlos mobil telefonieren und surfen! Jetzt informieren: http://www.gmx.net/de/go/freephone

3 2

[Dovecot] Dovecot 2.0.9: Thunderbird 3.1.9: Very slow while open sent folder with many (4k>) mails
by Denny Schierz 27 Mar '11

27 Mar '11

hi, one customer told us, that he has performance problem in his Thunderbird 3.1.9, while open his sent folder, which has round about 4000 mails in it, and 20k in his Inbox. For example TB, tries to sync the sent-folder list (over SSL) from the sent folder for now over 15min. In the log, I can't see any strange things, so for me, Dovecot works ok. Maybe, I should use better cache options? Now he tries to move many messages to separate folders, but thats also a bit slow. So, is it a TB problem, with so many messages? Our config: auth_anonymous_username = anonymous auth_cache_negative_ttl = 1 hours auth_cache_size = 0 auth_cache_ttl = 1 hours auth_debug = no auth_debug_passwords = no auth_default_realm = auth_failure_delay = 2 secs auth_first_valid_uid = 500 auth_gssapi_hostname = auth_krb5_keytab = auth_last_valid_uid = 0 auth_master_user_separator = auth_mechanisms = plain auth_realms = auth_socket_path = auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Lu auth_username_translation = auth_verbose = no auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 30 base_dir = /var/run/dovecot config_cache_size = 1 M debug_log_path = /var/log/dovecot-debug.log default_client_limit = 1000 default_idle_kill = 60 default_internal_user = dovecot default_login_user = dovenull default_process_limit = 100 default_vsz_limit = 256 M deliver_log_format = msgid=%m: %$ dict_db_config = director_doveadm_port = 0 director_mail_servers = director_servers = director_user_expire = 15 mins disable_plaintext_auth = no dotlock_use_excl = no doveadm_socket_path = doveadm-server doveadm_worker_count = 0 first_valid_gid = 1 first_valid_uid = 500 hostname = xfire05.rbg.informatik.tu-darmstadt.de imap_capability = imap_client_workarounds = imap_id_log = imap_id_send = imap_idle_notify_interval = 2 mins imap_logout_format = bytes=%i/%o imap_max_line_length = 64 k info_log_path = /var/log/dovecot.log last_valid_gid = 0 last_valid_uid = 0 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = no lda_original_recipient_header = libexec_dir = /usr/local/dovecot/2.0.9/libexec/dovecot listen = *, :: lmtp_proxy = no lmtp_save_to_detail_mailbox = no lock_method = fcntl log_path = syslog log_timestamp = "%b %d %H:%M:%S " login_access_sockets = login_greeting = I'm alive login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c login_trusted_networks = mail_access_groups = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_cache_fields = flags mail_cache_min_mail_count = 0 mail_chroot = mail_debug = no mail_fsync = optimized mail_full_filesystem_access = no mail_gid = vmail mail_home = /imap/spool/%d/%1n/%n mail_location = maildir:/imap/spool/%d/%1n/%n:INDEX=/imap/spool/% d/indexes/%1n/%n mail_log_prefix = "%s(%u): " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 10 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /usr/local/dovecot/dovecot2/lib/dovecot/ mail_plugins = acl quota mail_privileged_group = vmail mail_save_crlf = no mail_temp_dir = /imap/spool/tmp mail_uid = vmail mailbox_idle_check_interval = 30 secs mailbox_list_index_disable = no maildir_copy_with_hardlinks = yes maildir_stat_dirs = no maildir_very_dirty_syncs = no managesieve_client_workarounds = managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date imapflags master_user_separator = mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = dotlock fcntl mdbox_preallocate_space = no mdbox_rotate_interval = 0 mdbox_rotate_size = 2 M mmap_disable = no namespace { hidden = no inbox = yes list = yes location = prefix = separator = / subscriptions = yes type = private } namespace { hidden = no inbox = no list = yes location = maildir:/imap/spool/public prefix = public/ separator = / subscriptions = no type = public } passdb { args = /usr/local/dovecot/dovecot2/etc/dovecot/conf.d/dovecot-ldap.conf.ext deny = no driver = ldap master = no pass = no } plugin { acl = vfile:/imap/spool/%d/acl autocreate = Sent autocreate2 = Drafts autocreate3 = Trash autocreate4 = Spam autosubscribe = Sent autosubscribe2 = Drafts autosubscribe3 = Trash autosubscribe4 = Spam quota = maildir:User quota quota_rule2 = Trash:storage=+10%% quota_rule3 = Spam:storage=+20%% quota_warning = storage=80% % /usr/local/dovecot/dovecot/bin/quota-warning.sh 80 quota_warning2 = storage=90% % /usr/local/dovecot/dovecot/bin/quota-warning.sh 90 quota_warning3 = storage=95% % /usr/local/dovecot/dovecot/bin/quota-warning.sh 95 sieve = /imap/spool/%d/%1n/%n/sieve/default.sieve sieve_dir = /imap/spool/%d/%1n/%n/sieve sieve_extensions = +imapflags trash = /usr/local/dovecot/dovecot/etc/conf.d/dovecot-trash.conf } pop3_client_workarounds = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_format = %08Xu%08Xv postmaster_address = postmaster(a)rbg.informatik.tu-darmstadt.de protocols = imap pop3 lmtp sieve quota_full_tempfail = no recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s sendmail_path = /usr/sbin/sendmail service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 4096 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener /var/spool/postfix/private/auth { group = postdrop mode = 0600 user = postfix } unix_listener auth-client { group = mode = 0600 user = } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = } unix_listener auth-userdb { group = mode = 0600 user = } unix_listener login/login { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs inet_listener { address = port = 0 ssl = no } privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener director-userdb { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } unix_listener login/dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = port = 143 ssl = no } inet_listener imaps { address = port = 993 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login user = $default_login_user vsz_limit = 64 M } service imap { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 0 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postdrop mode = 0666 user = postfix } unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 0 } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log user = vsz_limit = 18446744073709551615 B } service managesieve-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = managesieve-login extra_groups = group = idle_kill = 0 inet_listener sieve { address = port = 4190 ssl = no } inet_listener sieve_deprecated { address = port = 2001 ssl = no } privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = login user = $default_login_user vsz_limit = 64 M } service managesieve { chroot = client_limit = 1 drop_priv_before_exec = no executable = managesieve extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = unix_listener login/sieve { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 110 ssl = no } inet_listener pop3s { address = port = 995 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 64 M } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_ca = ssl_cert = </usr/local/dovecot/dovecot2/etc/dovecot/ssl/imapd.pem ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL ssl_key = </usr/local/dovecot/dovecot2/etc/dovecot/ssl/imapd.pem ssl_key_password = ssl_parameters_file = ssl-parameters.dat ssl_parameters_regenerate = 168 ssl_verify_client_cert = no syslog_facility = mail userdb { args = /usr/local/dovecot/dovecot2/etc/dovecot/conf.d/dovecot-ldap.conf.ext driver = ldap } valid_chroot_dirs = verbose_auth = no verbose_proctitle = yes verbose_ssl = no version_ignore = no protocol lda { mail_plugins = acl quota sieve quota } protocol imap { imap_idle_notify_interval = 2 mins mail_max_userip_connections = 10 mail_plugins = acl quota imap_acl imap_quota mail_log notify autocreate trash listescape } protocol lmtp { mail_plugins = acl quota sieve } protocol pop3 { mail_plugins = acl quota quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_reuse_xuidl = yes }

4 5

[Dovecot] How can I view these email files?
by Phill Edwards 27 Mar '11

27 Mar '11

I messed up my email today through a combination of stuff-ups with procmail and dovecot. The result was that I ended up delivering some email messages to the root Maildir folder instead of the sub-folders. The files are in the correct format but have names like msg.3BXE, msg.2BXE etc. Of course these don't show up in my IMAP client so I can't read them. Does anyone know a way I can point some sort of email client at these to read them? Or a way to transfer them under Maildir/new so that I can read them as part of my normal inbox? I know that some of them have attachments.

2 2

[Dovecot] Multiple versions of Dovecot installed
by Phill Edwards 26 Mar '11

26 Mar '11

I have had to rebuild my 64-bit CentOS 5 email server and after installing dovecot rpms (using yum) I seem to have multiple versions installed: dovecot-1.1.20-1_98.el5 - from ATrpms repo dovecot-1.0.7-7.el5 - from CentOS repo dovecot-sieve-0.1.18-6.1.el5 - from ATrpms repo I have tried to install just the ATrpms version but when I do "yum install dovecot" the CentOS one always gets pulled in as well. Is this normal, or does it indicate that something has gone wrong in the installation process? I'm having an issue with Dovecot sieve because it can't find a sieve plugin in /usr/lib64/dovecot/lda/. However, there is one in /usr/lib/dovecot/lda/. Do I have some sort or 32-bit/64-bit mismatch?

2 1

[Dovecot] Ignored proxy_maybe var and no local login when "host = Proxy FQDN"
by Olaf Reitmaier Veracierta 26 Mar '11

26 Mar '11

Hi help is preciated, PROBLEM The dovecot-ldap.conf of "proxy server A" is working when the "host" attribute is the FQDN of other server: pass_attrs = uid=user,userPassword={SSHA}password,\ =proxy_maybe=,maildrop=host,=port=143,=destuser=%u,=starttls=any-cert pass_filter = (&(objectClass=posixAccount)(uid=%u)) CASES When the "host" attribute is the "FQDN of server A" dovecot imap-login start and infinite loop which swallow all RAM, and process are showing many connections although is just 1 test user connected. It seems that connections are infinitely proxified to it self. When the "host" attribute is the "IP of server A" dovecot imap-login works OK, login the user locally in the server A. I include debug message int the source of "dovecot-2.0.11/src/auth/auth-request.c" which appears: Mar 25 14:10:49 debian dovecot: auth: Debug: ldap(steran,172.26.98.85): result: uid(user)=steran maildrop(host)=smtp2.tsj-dem.gob.ve Mar 25 14:10:49 debian dovecot: auth: Debug: BROKEN SETUP The modifications appears here and reveals problems with the call to net_addr2ip(host, &ip) in auth_request_proxy_is_self: static bool auth_request_proxy_is_self(struct auth_request *request) { const char *const *tmp, *host = NULL, *port = NULL, *destuser = NULL; struct ip_addr ip; tmp = auth_stream_split(request->extra_fields); for (; *tmp != NULL; tmp++) { if (strncmp(*tmp, "host=", 5) == 0) host = *tmp + 5; else if (strncmp(*tmp, "port=", 5) == 0) port = *tmp + 5; if (strncmp(*tmp, "destuser=", 9) == 0) destuser = *tmp + 9; } if (host == NULL || net_addr2ip(host, &ip) < 0) { /* broken setup */ T_BEGIN { i_debug("BROKEN SETUP %s", host); } T_END; return FALSE; } if (!net_ip_compare(&ip, &request->local_ip)){ T_BEGIN { i_debug("%s", "IPS NOT EQUAL"); }T_END; return FALSE; } if (port != NULL && !str_uint_equals(port, request->local_port)){ T_BEGIN { i_debug("%s", "PORTS DIFFERENT"); } T_END; return FALSE; } return destuser == NULL || strcmp(destuser, request->original_username) == 0; } -- "You don't know where your shadow will fall", Somebody.- ---------------------------------------------------------------- Olaf Reitmaier Veracierta <olafrv(a)gmail.com> ---------------------------------------------------------------- http://www.olafrv.com ----------------------------------------------------------------

2 2

[Dovecot] try to compile dovecot 2.0.11 with ssl support
by easy 26 Mar '11

26 Mar '11

Hello, I try to compile dovecot in Version 2.0.11 with ssl support on a CentOS 4.5 system. Installed packages are openssl and openssl-devel. after "./configure --with-ssl=openssl" "make" "make install"the message is: (also tried with CPPFLAGS="-I/opt/openssl/include" LDFLAGS="-L/opt/openssl/lib -ldl") Install prefix . : /usr/local File offsets ... : 64bit I/O polling .... : epoll I/O notifys .... : dnotify SSL ............ : yes (OpenSSL) GSSAPI ......... : no passdbs ........ : static passwd passwd-file shadow checkpassword : -pam -bsdauth -sia -ldap -sql -vpopmail userdbs ........ : static prefetch passwd passwd-file checkpassword nss : -ldap -sql -vpopmail SQL drivers .... : : -pgsql -mysql -sqlite so it looks like SSL support is included, but when I start dovecot the message is: # 2.0.11: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-128.1.1.el5.028stab062.3ent i686 CentOS release 4.5 (Final) passdb { driver = pam } protocols = imap ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } doveconf: Error: SSL support not compiled in but ssl=yes doveconf: Fatal: Error in configuration file /usr/local/etc/dovecot/dovecot.conf: SSL support not compiled in but ssl=yes I also tried to use the source files of openssl and compile openssl by myself, but the error is the same. thanks Regards Markus

2 1

[Dovecot] mdbox, quota, ns, maildir quota?
by Brandon Lamb 26 Mar '11

26 Mar '11

Hello, I pasted my config below, hoping someone can point out something obvious. In my dovecot.log I am seeing: Warning: quota: Namespace '' is not Maildir, skipping for Maildir++ quota I am using mysql userdb_* and passing maildir:~/maildir or mdbox:~/mdbox for mail. When its maildir its fine, I had that originally then used dsync to convert to mdbox, updated mysql entry to point to mdbox:~/mdbox and now I keept getting those quota errors. It IS possible to have mixed environment still correct? Some users can be maildir and some can be mdbox since Im using the per-user userdb options? Any hints here? I would swear this was all working on a different server I had setup but Im no longer employed there so I cant peek at the config =P Thanks for any help or tips Brandon ------------------------------------------------------------------------------- root@mail1:~# dovecot -n # 2.0.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.37-2-amd64 x86_64 Debian wheezy/sid auth_cache_negative_ttl = 30 secs auth_cache_size = 4 k auth_cache_ttl = 30 secs auth_default_realm = greencrane.com auth_mechanisms = plain login auth_username_format = %Lu auth_verbose = yes auth_worker_max_count = 60 base_dir = /var/run/dovecot debug_log_path = /var/log/dovecot/debug.log default_client_limit = 1024 default_internal_user = mail default_login_user = mail deliver_log_format = %s from %f %$ dict/expire = mysql:/etc/dovecot/conf.d/dovecot-dict-expire.conf.ext disable_plaintext_auth = no first_valid_gid = 8 first_valid_uid = 8 info_log_path = /var/log/dovecot/info.log last_valid_gid = 8 last_valid_uid = 8 log_path = /var/log/dovecot/dovecot.log log_timestamp = "%Y-%m-%d %H:%M:%S " login_log_format = %s login_log_format_elements = (%u) (%r) mail_access_groups = mail mail_fsync = never mail_gid = 8 mail_location = maildir:~/maildir mail_log_prefix = "%Ls <%u>: " mail_max_userip_connections = 4 mail_plugins = quota expire mail_privileged_group = mail mail_uid = 8 mailbox_idle_check_interval = 1 mins maildir_very_dirty_syncs = yes passdb { args = /etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } plugin/auth_socket_path = /var/run/dovecot/auth-master plugin/autocreate = Trash plugin/autocreate2 = Sent plugin/autocreate3 = Drafts plugin/autocreate4 = Spam plugin/autosubscribe = Trash plugin/autosubscribe2 = Sent plugin/autosubscribe3 = Drafts plugin/autosubscribe4 = Spam plugin/quota = maildir:User quota plugin/quota_warning = storage=95%% quota-warning 95 %u plugin/quota_warning2 = storage=80%% quota-warning 80 %u protocols = imap pop3 service auth { executable = /usr/local/libexec/dovecot/auth unix_listener auth-client { group = mail mode = 0666 user = mail } unix_listener auth-master { group = mail mode = 0666 user = mail } unix_listener auth-userdb { group = mail mode = 0666 user = mail } vsz_limit = 512 M } service dict { unix_listener dict { group = mail mode = 0666 } } service imap-login { chroot = login client_limit = 512 executable = /usr/local/libexec/dovecot/imap-login process_limit = 20 process_min_avail = 4 service_count = 0 user = dovecot vsz_limit = 128 M } service imap { drop_priv_before_exec = no executable = /usr/local/libexec/dovecot/imap vsz_limit = 512 M } service pop3-login { chroot = login client_limit = 512 executable = /usr/local/libexec/dovecot/pop3-login process_limit = 20 process_min_avail = 4 service_count = 0 user = dovecot vsz_limit = 128 M } service pop3 { drop_priv_before_exec = no executable = /usr/local/libexec/dovecot/pop3 vsz_limit = 512 M } service quota-warning { executable = script /etc/dovecot/quota-warning.sh user = mail } ssl_cert = </etc/dovecot/ssl/dovecot-cert.pem ssl_key = </etc/dovecot/ssl/dovecot-key.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } valid_chroot_dirs = /mail verbose_proctitle = yes protocol lda { auth_socket_path = /var/run/dovecot/auth-userdb info_log_path = /var/log/dovecot/deliver.log lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes log_path = /var/log/dovecot/deliver.log mail_fsync = optimized mail_plugin_dir = /usr/local/lib/dovecot mail_plugins = quota expire trash autocreate postmaster_address = postmaster(a)greencrane.com quota_full_tempfail = yes rejection_reason = Your message to <%t> with subject of <%s> was automatically rejected:%n%r rejection_subject = Mailbox Full: %s sendmail_path = /usr/sbin/exim } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep imap_id_log = * imap_logout_format = bytes=%i/%o imap_max_line_length = 64 k mail_max_userip_connections = 20 mail_plugin_dir = /usr/local/lib/dovecot mail_plugins = quota expire imap_quota autocreate trash } protocol pop3 { mail_max_userip_connections = 2 mail_plugin_dir = /usr/local/lib/dovecot mail_plugins = quota expire pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_enable_last = no pop3_lock_session = no pop3_logout_format = retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = yes pop3_reuse_xuidl = no pop3_save_uidl = yes pop3_uidl_format = %g }

2 1

[Dovecot] Restrict clients access during mailboxes convertion ?
by Frank Bonnet 26 Mar '11

26 Mar '11

Hello Is there a way to restrict access to Dovecot server during mailboxes convertion ? I need dovecot to be running to convert mailboxes from a format to another, but I would like to block all our LAN clients until the end of convertion. If there is no internal Dovecot mechanism I will use some firewall rule on the server. Thanks

2 2

[Dovecot] quota warning email to user
by upen 25 Mar '11

25 Mar '11

Hi, I am trying to use Quota in dovecot-2.0.11. I find as a sender(same user a receiver) I receive an email that receiver's Quota is exceeded , and receiver's mailbox is full . This is good, however the receiver whose MB is full isn't getting any quota-warning. Configuration is as below, dovecot -n # 2.0.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.35-gentoo-r8 x86_64 Gentoo Base System release 1.12.14 ext4 auth_mechanisms = plain login listen = * mail_location = maildir:/nfs1/mail/%u mail_plugins = " quota" passdb { args = * driver = pam } plugin/quota = maildir:User quota plugin/quota_rule = *:storage=5M plugin/quota_rule2 = Trash:storage=+1M plugin/quota_rule3 = Junk:storage=+1M plugin/quota_warning = storage=95%% quota-warning 95 %u plugin/quota_warning2 = storage=80%% quota-warning 80 %u service quota-warning { executable = script /usr/local/bin/quota-warning.sh user = dovecot } ssl_cert = </etc/postfix/ssl/smtpd.pem ssl_cipher_list = ALL:!LOW:!SSLv2 ssl_key = </etc/postfix/ssl/smtpd.pem userdb { driver = passwd } protocol imap { mail_plugins = " quota imap_quota" Mar 24 15:41:28 email_serverdovecot: imap(local_username): Error: quota: net_connect_unix(/var/run/dovecot/quota-warning) failed: Permission denied (euid=1002(local_username) egid=10(wheel) missing +r perm: /var/run/dovecot/quota-warning, euid is not dir owner) Mar 24 15:41:28 email_serverdovecot: lda(local_username): msgid=<20110324154128.0df8855a(a)local_username_ots.domainname>: save failed to INBOX: Quota exceeded (mailbox for user is full) Mar 24 15:41:28 email_serverdovecot: lda(local_username): msgid=<20110324154128.0df8855a(a)local_username_ots.domainname>: rejected: Quota exceeded (mailbox for user is full) Mar 24 15:41:28 email_serverpostfix/pickup[25550]: D25C121BB4: uid=1002 from=<> ls -al /var/run/dovecot/ total 20 drwxr-xr-x 4 root root 4096 Mar 24 15:35 . drwxr-xr-x 33 root root 4096 Mar 24 14:54 .. srw------- 1 root root 0 Mar 24 15:35 anvil srw------- 1 root root 0 Mar 24 15:35 anvil-auth-penalty srw------- 1 root root 0 Mar 24 15:35 auth-client srw------- 1 dovecot root 0 Mar 24 15:35 auth-login srw------- 1 root root 0 Mar 24 15:35 auth-master srw------- 1 root root 0 Mar 24 15:35 auth-userdb srw------- 1 dovecot root 0 Mar 24 15:35 auth-worker srw------- 1 root root 0 Mar 24 15:35 config srw------- 1 root root 0 Mar 24 15:35 dict srw------- 1 root root 0 Mar 24 15:35 director-admin srw------- 1 root root 0 Mar 24 15:35 director-userdb srw-rw-rw- 1 root root 0 Mar 24 15:35 dns-client srw------- 1 root root 0 Mar 24 15:35 doveadm-server lrwxrwxrwx 1 root root 25 Mar 24 15:35 dovecot.conf -> /etc/dovecot/dovecot.conf drwxr-xr-x 2 root root 4096 Mar 16 13:24 empty srw-rw-rw- 1 root root 0 Mar 24 15:35 lmtp drwxr-x--- 2 root dovenull 4096 Mar 24 15:35 login -rw------- 1 root root 6 Mar 24 15:35 master.pid srw------- 1 root root 0 Mar 24 15:35 quota-warning ls -al /usr/local/bin/quota-warning.sh -rwxrwxrwx 1 root root 225 Mar 24 13:16 /usr/local/bin/quota-warning.sh cat /usr/local/bin/quota-warning.sh #!/bin/sh PERCENT=$1 USER=$2 cat << EOF | /usr/libexec/dovecot/dovecot-lda -d $USER -o "plugin/quota=maildir:User quota:noenforcing" From: postmaster(a)domain.com Subject: quota warning Your mailbox is now $PERCENT% full. EOF ### Any help is appreciated. Thanks.

1 1

[Dovecot] lda_mailbox_autocreate and lda_mailbox_autosubscribe
by Frank Bonnet 25 Mar '11

25 Mar '11

Hello I use real unix users on the mailhub and I would like to automate home directories creation for new users. I found lda_mailbox_autocreate and lda_mailbox_autosubscribe statements in 15-lda.conf file ( dovecot 2.0.11 ) which seem to be the right things for me :-) I use Postfix 2.8.1 with Dovecot LDA mailbox_command = /usr/local/libexec/dovecot/dovecot-lda All Mailboxes are located in /user/$USER/mail/ Does those two statements means that if a home directory does not exists it will be created at the first login of the new user ? I mean if new user "toto" has no homedir at all , dovecot will create /user/toto/mail at the very first successful connection ? Thanks a lot

3 3

[Dovecot] Issue with Dovecot v2.0 auto packages
by Stephan Bosch 25 Mar '11

25 Mar '11

Hi, Yesterday night I upgraded the automated packages built at Xi to the latest experimental Debian packages for v2.0. This unfortunately causes a problem upon upgrade. I've contacted the maintainer, so this issue should resolve itself soon. The issue manifests as follows: Setting up dovecot-imapd (2:2.0.11-0~auto+25) ... ucfr: Attempt from package dovecot-imapd to take /etc/dovecot/conf.d/20-imap.conf away from package dovecot-common ucfr: Aborting. dpkg: error processing dovecot-imapd (--configure): subprocess installed post-installation script returned error exit status 4 configured to not write apport reports The Debian maintainer split dovecot-common in various new packages and moved config files in the process. Use ucfr --purge --force dovoecot-imapd /etc/dovecot/conf.d/20-imap.conf ucfr --purge --force dovoecot-managesieved /etc/dovecot/conf.d/20-managesieve.conf ucfr --purge --force dovoecot-sieve /etc/dovecot/conf.d/90-sieve.conf to get rid of these errors as a workaround. I did this in combination with temporarily purging and removing Dovecot, but that is probably not necessary. Once you have upgraded, you will not encounter this problem again. And yes, if you are using Sieve, be sure to install the new dovecot-sieve and dovecot-managesieved packages. Regards, Stephan.

2 2

[Dovecot] try to compile dovecot 2.0.11 with ssl support
by easy 24 Mar '11

24 Mar '11

Hello, I try to compile dovecot in Version 2.0.11 with ssl support on a CentOS 4.5 system. Installed packages are openssl and openssl-devel. after "./configure --with-ssl=openssl" "make" "make install"the message is: (also tried with CPPFLAGS="-I/opt/openssl/include" LDFLAGS="-L/opt/openssl/lib -ldl") Install prefix . : /usr/local File offsets ... : 64bit I/O polling .... : epoll I/O notifys .... : dnotify SSL ............ : yes (OpenSSL) GSSAPI ......... : no passdbs ........ : static passwd passwd-file shadow checkpassword : -pam -bsdauth -sia -ldap -sql -vpopmail userdbs ........ : static prefetch passwd passwd-file checkpassword nss : -ldap -sql -vpopmail SQL drivers .... : : -pgsql -mysql -sqlite so it looks like SSL support is included, but when I start dovecot the message is: # 2.0.11: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-128.1.1.el5.028stab062.3ent i686 CentOS release 4.5 (Final) passdb { driver = pam } protocols = imap ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } doveconf: Error: SSL support not compiled in but ssl=yes doveconf: Fatal: Error in configuration file /usr/local/etc/dovecot/dovecot.conf: SSL support not compiled in but ssl=yes I also tried to use the source files of openssl and compile openssl by myself, but the error is the same. thanks Regards Markus

1 0

[Dovecot] Dotlock dovecot-uidlist errors / NFS / High Load
by list＠airstreamcomm.net 24 Mar '11

24 Mar '11

As of late our four node dovecot 1.2.13 cluster has been experiencing a massive number of these dotlock errors: Created dotlock file's timestamp is different than current time (1295480202 vs 1295479784): /mail/user/Maildir/dovecot-uidlist These dotlock errors correspond with very high load averages, and eventually we have to turn off all but one server to stop them from occurring. We first assumed this trend was related to the NFS storage, but we could not find a networking issue or NFS related problem to speak of. We run the mail storage on NFS which is hosted on a Centos 5.5 host, and mounted with the following options: udp,nodev,noexec,nosuid. Secondly we thought the issues were due to NTP as the time stamps vary so widely, so we rebuilt our NTP servers and found closer stratum 1 source clocks to synchronize to hoping it would alleviate the problem but the dotlock errors returned after about 12 hours. We have fcntl locking set in our configuration file, but it is our understanding from look at the source code that this file is locked with dotlock. Any help troubleshooting is appreciated. Thanks, Michael # 1.2.13: /etc/dovecot.conf # OS: Linux 2.6.18-194.8.1.el5 x86_64 CentOS release 5.5 (Final) protocols: imap pop3 listen(default): *:143 listen(imap): *:143 listen(pop3): *:110 shutdown_clients: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_process_per_connection: no login_process_size: 128 login_processes_count: 4 login_max_processes_count: 256 login_max_connections: 386 first_valid_uid: 300 mail_location: maildir:~/Maildir mmap_disable: yes dotlock_use_excl: no mail_nfs_storage: yes mail_nfs_index: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 auth default: username_format: %Ln worker_max_count: 50 passdb: driver: pam userdb: driver: passwd

5 14

[Dovecot] pigeonhole and roundcube install problem
by Selcuk MIYNAT 24 Mar '11

24 Mar '11

Hi, I've installed sieve and managesieve(pigeonhole) on qmail and dovecot(v2.0.11). I've install sieverules on Roundcube. I can see the plugin on the webinterface, and i can add rules. But there is a problem: I've put this .qmail file on "deneme" user's home directory according to [1]. |/var/qmail/bin/preline -f /usr/local/libexec/dovecot/dovecot-lda -d $EXT@$USER Then I got this message on qmail log: deferral: /var/qmail/bin/preline:_line_1:_test:_too_many_arguments/ Incoming e-mail written to the disk but doesn't seen on inbox. If i have change my .qmail file to this: /usr/local/libexec/dovecot/dovecot-lda -d $EXT@$USER Plugin doesn't return a message to mail sender: Debug: Loading modules from directory: /usr/local/lib/dovecot Debug: Module loaded: /usr/local/lib/dovecot/lib90_sieve_plugin.so Debug: auth input: deneme(a)example.com home=/home/vpopmail/domains/example.com/deneme uid=89 gid=89 Debug: Effective uid=89, gid=89, home=/home/vpopmail/domains/example.com/deneme Debug: fs: root=/home/vpopmail/domains/example.com/deneme/Maildir, index=, control=, inbox=/home/vpopmail/domains/example.com/deneme/Maildir Debug: none: root=, index=, control=, inbox= Debug: sieve: using sieve path for user's script: /home/vpopmail/domains/example.com/deneme/.dovecot.sieve Debug: sieve: opening script /home/vpopmail/domains/example.com/deneme/.dovecot.sieve Debug: sieve: script binary /home/vpopmail/domains/example.com/deneme/.dovecot.svbin successfully loaded Debug: sieve: binary save: not saving binary /home/vpopmail/domains/example.com/deneme/.dovecot.svbin, because it is already stored Debug: sieve: executing script from /home/vpopmail/domains/example.com/deneme/.dovecot.svbin Info: sieve: msgid=<4D80A733.8010906(a)test.com.tr>: discarded vacation reply to <> Info: sieve: msgid=<4D80A733.8010906(a)test.com.tr>: stored mail into mailbox 'INBOX' But i can forward the incoming mail to another address. Why doesn't work this plugin, any ideas? [root@mail ~]# dovecot -n # 2.0.11: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.32.1.el5 x86_64 CentOS release 5.5 (Final) auth_debug = yes auth_default_realm = example.com auth_mechanisms = plain digest-md5 cram-md5 auth_socket_path = /usr/local/var/run/dovecot/auth-userdb auth_verbose = yes disable_plaintext_auth = no first_valid_uid = 0 last_valid_uid = 100 log_path = /var/log/dovecot mail_debug = yes mail_location = maildir:~/Maildir:LAYOUT=fs managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /usr/local/etc/dovecot-sql.conf driver = sql } plugin/sieve = ~/.dovecot.sieve plugin/sieve_dir = ~/sieve protocols = imap pop3 sieve service auth { unix_listener auth-userdb { group = vchkpw mode = 0600 user = vpopmail } } ssl = no userdb { args = /usr/local/etc/dovecot-sql.conf driver = sql } protocol lda { info_log_path = /var/log/dovecot-deliver.log log_path = /var/log/dovecot-deliver-errors.log mail_plugins = " sieve" postmaster_address = postmaster(a)example.com sendmail_path = /var/qmail/bin/sendmail } dovecot-sql.conf çıktısı: driver = mysql connect = host=localhost user=vpopmailuser password=vpopmailpassword dbname=vpopmail default_pass_scheme = PLAIN password_query = SELECT CONCAT(pw_name, '@', pw_domain) AS user, pw_clear_passwd AS password FROM vpopmail WHERE pw_name = '%n' AND pw_domain = '%d' user_query = SELECT pw_dir as home, 89 AS uid, 89 AS gid FROM vpopmail WHERE pw_name = '%n' AND pw_domain = '%d' [1]: http://wiki2.dovecot.org/LDA/Qmail -- Selcuk MIYNAT Endersys Ltd. Sistem Destek Muhendisi / System Support Engineer Phone : +90 216-4709423 | Fax : +90 216-4709508 Web : http://www.endersys.com.tr Blog : http://blog.endersys.com Twitter : http://www.twitter.com/endersys LPI : The #1 Linux Certification for IT Professionals LPI (Linux Professional Institute) Turkey http://www.lpi-turkey.com Endersys is the first Advanced Business Partner of Red Hat in Turkey ! http://www.europe.redhat.com/partners/endersys/ -- Selcuk MIYNAT Endersys Ltd. Sistem Destek Muhendisi / System Support Engineer Phone : +90 216-4709423 | Fax : +90 216-4709508 Web : http://www.endersys.com.tr Blog : http://blog.endersys.com Twitter : http://www.twitter.com/endersys LPI : The #1 Linux Certification for IT Professionals LPI (Linux Professional Institute) Turkey http://www.lpi-turkey.com Endersys is the first Advanced Business Partner of Red Hat in Turkey ! http://www.europe.redhat.com/partners/endersys/

2 3

[Dovecot] Problem with expire plugin and expunge
by Christoph Pleger 24 Mar '11

24 Mar '11

Hello, I am running dovecot 2.0.9 with expire plugin, using the sqlite backend. The following command is executed every day by cron: doveadm expunge -A mailbox Trash savedbefore 30d I started to use the expire plugin about one month ago. Since then, using "doveadm search -A mailbox Trash savedbefore <days>" with different values for <days>, I could see every day how the messages were getting older. Yesterday was the first time that the expression "savedbefore 30d" became true for the oldest messages in the Trash mailbox and these messages were actually deleted from Trash. But today, all messages that were not deleted yesterday are new to "doveadm search", that means that "doveadm search -A mailbox Trash savedbefore 0d" shows all messages from Trash, but "doveadm search -A mailbox Trash savedbefore 1d" shows no messages from Trash, though during the last month I moved messages to Trash every day. Best Regards Christoph

4 13

[Dovecot] dsync warning/error - mailbox needs recreation
by Daniel L. Miller 23 Mar '11

23 Mar '11

What does this mean? These lines occur on subsequent runs of "dsync -u user backup target" dsync(dmiller(a)amfes.com): Warning: Destination mailbox INBOX has been modified, need to recreate it before we can continue syncing dsync(dmiller(a)amfes.com): Error: Can't delete mailbox INBOX: INBOX can't be deleted. -- Daniel

2 3

[Dovecot] Configure Dovecot For IMAP Only?
by Carlos Mennens 23 Mar '11

23 Mar '11

I've install Dovecot 2.0.11-1 on my Linux server and all the guides and tutorials I've found on Google don't work since I'm running 2.x and it seems most guides were done with 1.x. I've opened up the configuration file /etc/dovecot/dovecot.conf & from what I can see, this is all I could come up with: protocols = imap listen = * base_dir = /var/run/dovecot login_greeting = Server ready. mail_location = maildir:~/mail I obviously want / need IMAP4 access ONLY and not POP3. I've got only 12 local Linux shell users and all authentication is done by I think PAM. My friend sent me his configuration file to see if it would work on Dovecot 2.x however I don't think it does: auth_mechanisms = plain login mail_location = maildir:~/mail passdb { driver = pam } protocols = imap service auth { unix_listener auth-client { group = postfix mode = 0660 user = postfix } user = root } ssl_cert = </etc/ssl/certs/cert.pem ssl_key = </etc/ssl/private/key.pem userdb { driver = passwd } #protocol imap { # imap_client_workarounds = delay-newmail tb-extra-mailbox-sep #} Can anyone please tell me what I need to add to get this very basic IMAP server up and running?

4 4

[Dovecot] Mail Sync
by Scott Hughes 23 Mar '11

23 Mar '11

I am trying to sync my mail on two different servers as testing for converting our business over to a server using dovecot. I am currently running dovecot version 2.0.11 While trying to sync the messages using Thunderbird and a program named imapsync, I run into an error stating that the dovecot server does not know how to handle messages with the FORWARD flag set. Is the FORWARD flag some type of non-standard flag or is there something I need to do in dovecot to allow for this flag? Thanks

3 2

[Dovecot] Bug: Creating mbox folders
by Kelly Stephens 23 Mar '11

23 Mar '11

Hey, I had trouble this morning creating a folder to contain sub-folders. I am using the mbox format. Turns out that the .imap directory in the new folder (directory) was not being created. Anytime I tried to view a sub-folder (using Thunderbird) dovecot would dump. Once I manually created the .imap directory, it works fine. dovecot --version -> 2.0.9 dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.35.11-83.fc14.i686 i686 Fedora release 14 (Laughlin) listen = * mbox_write_locks = fcntl passdb { driver = pam } protocols = imap ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } The maillog dump... Mar 16 08:50:22 brinn dovecot: imap(kms): Panic: file mailbox-list.c: line 324 (mailbox_list_get_unexpanded_path): assertion failed: (*location == SETTING_STRVAR_UNEXPAND ED[0]) Mar 16 08:50:22 brinn dovecot: imap(kms): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0() [0x994051] -> /usr/lib/dovecot/libdovecot.so.0() [0x9940c0] -> /usr/lib /dovecot/libdovecot.so.0(i_fatal+0) [0x96a690] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_list_get_unexpanded_path+0x138) [0xa086d8] -> /usr/lib/dovecot/libdovec ot-storage.so.0(mailbox_list_mkdir+0x52) [0xa09b32] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_list_create_missing_index_dir+0x129) [0xa09fb9] -> /usr/lib/doveco t/libdovecot-storage.so.0(index_storage_mailbox_open+0xa4) [0xa23c24] -> /usr/lib/dovecot/libdovecot-storage.so.0() [0xa485de] -> /usr/lib/dovecot/libdovecot-storage.so.0 () [0xa04d25] -> dovecot/imap(cmd_select_full+0x1cf) [0x805310f] -> dovecot/imap(cmd_select+0x1a) [0x8053b3a] -> dovecot/imap() [0x80560ed] -> dovecot/imap() [0x80561ca] -> dovecot/imap(client_handle_input+0x12d) [0x805640d] -> dovecot/imap(client_input+0x60) [0x8056d10] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x52) [0x9a18e2] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xd3) [0x9a2b43] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x40) [0x9a1860] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x2b) [0x98cfcb] -> dovecot/imap(main+0x33d) [0x805faad] -> /lib/libc.so.6(__libc_start_main+0xe6) [0x732e36] -> dovecot/imap() [0x804e111] Mar 16 08:50:22 brinn dovecot: master: Error: service(imap): child 9753 killed with signal 6 (core dumps disabled)

2 4

[Dovecot] different users with different quota
by Jim Knuth 23 Mar '11

23 Mar '11

Hello, How can one assign different users different Quota? So properly? quota_rule1 = userONE:storage=1G quota_rule2 = Trash:storage=100M quota_rule3 = SPAM:ignore quota_rule4 = userTWO:storage=5M quota_rule5 = Trash:storage=50M quota_rule6 = SPAM:ignore and so on ... Right or how? -- Mit freundlichen Grüßen, Jim Knuth P.S.: Bitte senden Sie KEINE HTML-Mails! Zufallszitat: Die Geschichte wird freundlich mit mir umgehen, denn ich habe vor, sie zu schreiben. [Churchill]

3 8

[Dovecot] FETCH got too little data (+ wrong W value) with 1 byte offset
by Vincent Artzner 23 Mar '11

23 Mar '11

Hi there, I juste set up dovecot as local imap server last week, with maildir format. Things went fine with two "low volume" accounts, until I added another one. Then I see two different things with connected clients: 1/ Quite oftent well formed messages that appear... and disappear quite immediately. On the server, the messages concerned by 2/ seem to be there, I can open the files and it looks ok (header, content). The only error log I get is this: 2011-03-18 14:43:14 IMAP(info): Info: Disconnected: FETCH failed bytes=109363/174063195 2011-03-18 14:43:14 imap-login: Info: Login: user=<info>, method=PLAIN, rip=192.168.0.191, lip=192.168.0.10, TLS 2011-03-18 14:43:15 IMAP(info): Error: FETCH [] for mailbox Envois UID 11572 got too little data: 63454 vs 63455 2011-03-18 14:43:15 IMAP(info): Error: Maildir filename has wrong W value: /home/info/Maildir/.Envois/cur/1300450349.M120256P3108.Serveurlinux,S=460764,W=460768:2,S 2011-03-18 14:43:15 IMAP(info): Error: Corrupted index cache file /home/info/Maildir/.Envois/dovecot.index.cache: Broken virtual size for mail UID 11572 Please note the size: 63454 vs 63455: it's always like that: one byte difference. Here is the dovecot -n result: # 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-24-generic-pae i686 Ubuntu 10.04.2 LTS ext4 log_path: /home/dovecot.log log_timestamp: %Y-%m-%d %H:%M:%S listen: *:144 ssl_listen: *:10943 login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login login_process_per_connection: no mail_max_userip_connections: 20 mail_privileged_group: mail mail_location: maildir:/home/%u/Maildir:INBOX=/home/%u/Maildir/ mbox_write_locks: fcntl dotlock auth default: passdb: driver: pam userdb: driver: passwd The imap client used is thunderbird under windows XP/7. I also reproduced it with opera mail client. I tried to rename/delete dovecot.index.cache files as I have read about it, but doesn't changed anything. The incoming mails are provided to dovecot by procmail, so I think dovecot is responsible for settings the S, W params in the filenames. No other process should alter the messages (i still have to fully check this). I am a bit lost (not a system administrator at all) and would be grateful for any advice. Vincent

3 6

[Dovecot] DoveCot 2.0.9: Problem with some Clients and separator (migrate from Cyrus)
by Denny Schierz 23 Mar '11

23 Mar '11

hi, we had to move from a old dieing Sparc very quickly our Cyrus IMAP Users to Dovecot. Most things works, but some Clients (like Evolution or Thunderbird) are strange. Our separator in Dovecot2 is "^", the mailboxes on the filesystem are something like "INBOX.subfolder1.subfolder2", but in TB and Evo I see INBOX^subfolder1^subfolder^ In Roundcube Webmail, I have just a normal tree, as I expected. I used cyrus2dovecot.pl for converting. On Evolution I deleted the IMAP Profile and recreated it, and that was working, but it isn't a workaround for TB So, how can I fix it? namespace { type = private separator = ^ prefix = inbox = yes hidden = no subscriptions = yes } cu denny

3 6

[Dovecot] Master user creds for proxy stored statically/locally?
by Edward Carraro 22 Mar '11

22 Mar '11

I have successfully set up the master user on the destination server (2.0.11) and tests have worked. now I'm working on the proxy Before I had the proxy just forward everything to the backend and had the destination server do the authentication. My authentication is done via LDAP but not really sure how to append the master user and password to the users credentials after authentication is done. id rather not have the master user/pass in each users ldap entry and returned after doing a lookup or add a destuser field for each user... basically i prefer not having to add any new attributes to LDAP Can the information be stored locally in a file on the proxy? do i just make the same master user file that I have on the backend? Thanks!

3 14

[Dovecot] Change password cheme
by Pascal Nobus 22 Mar '11

22 Mar '11

We want to update our password scheme from crypt to SHA256. Because usernames/passwords are in MySQL I thought this wouldn't be a problem. We have about 3000 users that need to be updated, so make a new password for them isn't possible. I was thinking of an automated script that would update the database after every login. So we did this: dovecot.conf: mail_executable = /usr/local/etc/updatepwd.sh updatepwd.sh: #!/bin/sh $USER $PASSWORD|/usr/local/etc/do_updatepwd.pl exec /usr/local/libexec/dovecot/imap "$@" (do_updatepwd.pl is a perl script that makes a sha256 from the second argument, and then update the mysql-query) However: the password is not in the ENVIROMENT anymore. I changed in dovecot the settings: auth_debug = yes auth_debug_passwords = yes Anyone a solution for this? Best regards, Pascal

2 1

[Dovecot] Problem with sieve and delivery to folders with german umlauts.
by Micha Krause 22 Mar '11

22 Mar '11

Hi, I have a problem with sieve and german umlauts: error: msgid=unspecified: failed to store into mailbox 'INBOX.t&AOQ-st' (INBOX.t&-AOQ-st): Mailbox doesn't exist: t&-AOQ-st. The folder name is "täst", the filesystem folder is ".t&AOQ-st" , but sieve seems to look for a folder named ".t&-AOQ-st" Dovecot verstion is: 2.0.9 (7ecc5e10da57) Micha Krause

3 3

[Dovecot] http://wiki2.dovecot.org/MailServerOverview contains poppycock
by William Blunn 22 Mar '11

22 Mar '11

Just having another look at http://wiki2.dovecot.org/MailServerOverview , it seems to have some statements in it which are misleading, and some which are really ... well ... wrong. Quote: "With the possible, optional, exception of the deliver MDA, Dovecot is not involved with reception, delivery, and storage of mail. That function is provided by a MTA such as postfix <http://www.postfix.org>. It is the MTA that determines where and how mail is stored - Dovecot must then be configured to retrieve the mail accordingly." (Entered by user "amfes".) This contains a significant proportion of poppycock. Dovecot includes extensive functionality for the storage (as in the action of storing) of e-mail as well as retrieval, in the shape of the LDA. Using Dovecot's LDA is /required/ in the case of Dovecot-specific mail storage formats (sdbox, mdbox). With mbox, use of the Dovecot LDA is advisable since it will guarantee a locking strategy which is compatible with Dovecot's mail retrieval functionality. And in any case, use of the Dovecot LDA has merit in that it should guarantee line-up between the mailstore configurations used for storage and retrieval. It is NOT the MTA that determines where and how mail is stored. It is the PERSON who configures the system who decides this, and codifies that configuration into whatever systems carry out local delivery and retrieval. It IS true that use of Dovecot's LDA is optional, but to say that it is a "possible exception" is misleading. People /should/ use the Dovecot LDA if they are using Dovecot IMAP/POP, and the /option/ is to use the MTA's local delivery system /if/ it is so indicated on a particular system. Quote: "Again, it bears repeating, Dovecot /is not responsible for mail delivery or storage/. Any questions on these issues involve your MTA and MDA. Get those working first." (Entered by user "DanielMiller".) Again, contains quite a lot of misleading nonsense. "Mail delivery" includes the hand-off of the message by the MTA to the LDA, and the storage of the message by the LDA. The LDA should probably be Dovecot, so really Dovecot /is/ partially responsible for mail delivery. "Storage" involves that placing of message into the message store. This should be done by Dovecot, so Dovecot is responsible for this. Bill

2 2

[Dovecot] dsync inbox conversion problem (mbox -> mdbox)
by Sergiy Kyrylkov 22 Mar '11

22 Mar '11

Hi, We are trying to convert all mbox mail on our systems to mdbox using dsync, in order to be able to use email sub-folders in Thunderbird. Everything works fine for non-inbox folders, however the inbox folders are not getting converted. We used: *dsync -v convert mbox:~/mail:INBOX=/var/mail/%u* *dovecot --version* 2.0.beta6 (3156315704ef) (shipping with RHEL6/SL6) *dovecot -n* # 2.0.beta6 (3156315704ef): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.18.2.el6.i686 i686 Scientific Linux release 6.0 (Carbon) mail_location = mdbox:~/mdbox mbox_write_locks = fcntl passdb { driver = pam } protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } Sergiy

3 3

[Dovecot] Request - please uncomment !include_try /etc/dovecot/local.conf in example config
by Ng Oon-Ee 22 Mar '11

22 Mar '11

Hi, could I request that the example config in doc/dovecot/example-config/dovecot.conf be slightly altered to uncomment the last line? The point of include_try is that it only includes if such a file exists, and doesn't break anything if the file does not exist. My distro (Arch) has a policy not to apply non-essential patches, rather asking users to forward requests upstream, hence this email. It allows users to simply keep a local.conf with all their settings and not have to worry that it would not be used when the dovecot package gets upgraded (which mostly means /etc/dovecot/dovecot.conf gets replaced, depending on packaging standards). Thanks.

2 2

[Dovecot] Bug in xi.rename-it.nl/dovecot-2.0.11/debian/watch
by Mark Alan 21 Mar '11

21 Mar '11

If I am not wrong, debian/watch should be: --- old/dovecot-2.0.11/debian/watch 2011-03-07 17:24:51.000000000 +0000 +++ new/dovecot-2.0.11/debian/watch 2010-12-03 10:04:00.000000000 +0000 @@ -1,4 +1,4 @@ # watch control file for uscan version=3 # Site Version Script -http://dovecot.org/releases/1.2/dovecot-(.*\.[0-9]+)\.tar\.gz debian uupdate +http://dovecot.org/releases/2.0/dovecot-(.*\.[0-9]+)\.tar\.gz debian uupdate M.

1 0

[Dovecot] dovecot proxy, imapproxy, perdition . . . or?
by Lorens Kockum 21 Mar '11

21 Mar '11

Hi, I have two load-balanced dovecot servers using a single NFS mount. The version is 1.2.11. I chose this so that if one server goes down the other will take up the load, and if my load is too much for one server I just have to add more identical servers. It works, but I wish to move to SAN storage because the NFS server is exhibiting irregular performance. (I spent a lot of time with tcpdump to check that it wasn't NFS locking problems). Performance is very important to me, not in the sense of many users but in the sense of quick response time, since the main use is as a webmail backend. That means that instead of load-balancing connections between servers I will have to partition users between servers (all on one to begin with) and direct users to the corresponding server. I expected to use perdition, but when reading up on that I found imapproxy, which could be interesting for performance reasons, and also that dovecot has an included proxy, and that its performance is better than perdition. However on http://wiki.dovecot.org/HowTo/ImapProxy the feature "IMAP/POP3 server with proxy feature" is noted as "This model is still a bit unfinished in current code." Is this still true? There's also a general note that "This page was written quite a long time ago and may not match reality anymore" . . .

3 2

[Dovecot] questions/problems virtual plugin pop3 leave copies on the server for x days then delete
by Robert Schetterer 21 Mar '11

21 Mar '11

Hi Timo, i allready asked about this , and did some fixes , but it isnt working yet ,as far i have a setup like namespace default { # type = private separator = / prefix = "" list = yes # hidden = no subscriptions = yes } namespace virtual { # type = private prefix = "virtual/" separator = / location = virtual:/etc/dovecot/virtual:LAYOUT=maildir++:INDEX=~/virtual hidden = yes list = no subscriptions= no } namespace real { # type = private prefix = "RealMails/" separator = / list = no hidden = yes } pop3_enable_last = yes pop3_reuse_xuidl = no pop3_uidl_format = %g pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s mail_max_userip_connections = 100 mail_plugins = expire virtual quota mail_log fts fts_squat notify pop3_client_workarounds = outlook-no-nuls oe-ns-eoh RealMails/ RealMails/* -RealMails/Trash -RealMails/Trash/* -RealMails/Sent -RealMails/Sent/* -RealMails/Templates -RealMails/Templates/* -RealMails/Drafts -RealMails/Drafts/* -RealMails/Archives -RealMails/Archives/* unseen normally this works as expected some users want to use leave copies messages on the server for x days then delete via pop3 i tested this with thunderbird and looked into the maildir, it seems that the mails stay in "new" folder of the maildir after i downloaded via pop3 ( i am not sure is this expected ? , i would thought they get to cur ) thunderbird does not download this mails again ( good ), but it doesnt delete them from maildir new ever( bad ) , so the whole leave copy and delete after x days function pop3 is not working i am not quite sure if there is relation to virtual namespaces ( which i like to use in future too ) , but have to renable this feature working any idea? -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

2 14

[Dovecot] Virtual and system users with public mailboxes
by kshaw＠kendallshaw.com 21 Mar '11

21 Mar '11

Hi, I am running dovecot 1.2.9 and postfix, and I am trying to setup a public mailbox. My thought is that there would be one system user with a sieve script to deliver messages to the public mailbox. And, I would like to give virtual users access to the mailbox. On this list, I read how you can have both system and virtual users by using passdb and static userdbs. But, I don't understand how this can be combined with namespaces, where I specify the location. For all virtual users I had: mail_location = maildir:/var/somewhere/%u/maildir/ I think I need that for virtual users and: maildir:~/Maildir for the system users. namespace private { location = ? # how do I have the location be different for system and virtual users? } namespace public { location = ? # ditto (for the index)? } Kendall

3 3

[Dovecot] maildir location
by upen 21 Mar '11

21 Mar '11

Hello, I am trying to use dovecot (v. 2.0.11) and postfix (v. 2.7.3) together. The email server is an ldap client and user's home directories on NFS server are mounted using autofs. As I understand, Maildir performance is better than mbox type, so I'd like to use Maildir instead of mbox. However, when I checked conf.d/10-mail.conf file, there is mail_location = maildir:~/.maildir already configured in it which means user's email will reside in their home directories on the NFS server rather than being on Email server's local storage where plenty of space is available. I anticipate due to NFS there will again be a performance hit . Question : Can I change mail_location for maildir to be somewhere other than ~/.maildir. ( like /var/mail/%u/Maildir, where /var/mail is local storage). There are about 200 ldap users who will be using this email server through squirrel-mail or access them through email clients. By the way, I am confused about one setting in postfix : home_mailbox = .maildir/ in main.cf . Does this really play any role? If so, which parameter should be changed and to what and with what permissions to the new directory. Hope I was able to explain, if not please let me know for more details.. Thanks, U

4 9

[Dovecot] Can't disable chroot to 'empty' dir, but need to... how to do it?
by Tim Bessie 21 Mar '11

21 Mar '11

Hello all... I've installed dovecot on my ISP's shell server, and am using SSH tunnelling so that I can retrieve my mbox-format mail from procmail-processed mailboxes on that server (normally I just ssh there and read them locally with pine, but now that I have a phone with an IMAP client, I wanted to be able to read it more easily there). The problem I'm having is, although it's working, whenever dovecot starts up, or I try to log in, it attempts to chroot to /home/mydir/dovecot/var/run/dovecot/empty (where /home/mydir/dovecot is the path to my dovecot installation). I've turned off all chroot'ing in all the config files, but it still seems to want to chroot to that one directory. The message I see in the log is: Mar 19 02:09:43 master: Info: Dovecot v2.0.11 starting up (core dumps disabled) Mar 19 02:09:44 anvil: Fatal: chroot(/home/mydir/dovecot/var/run/dovecot/empty) failed: Operation not permitted Mar 19 02:09:44 master: Error: service(anvil): command startup failed, throttling This doesn't cause a problem accessing my mail, but it DOES seem to wait 60 seconds between attempts at chroot'ing, so logins to the server take that long (until the chroot fails). Is there any way I can disable this? Again, I've followed the instructions and set 'chroot=' (empty) for all services, but that hasn't helped. - Tim

2 1

[Dovecot] Problem with pam-auth and winbind
by pk10＠ksiaznica.torun.pl 21 Mar '11

21 Mar '11

Hi I try to use windbind rule to authenticate users in dovecot login procedure. /etc/nsswitch.conf file: passwd: files winbind shadow: files winbind group: files winbind Configuration of the dovecot is follows: log_path: /var/log/dovecot/error.log info_log_path: /var/log/dovecot/info.log protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/pki/tls/certs/dovecot.pem ssl_key_file: /etc/pki/tls/private/dovecot.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/lib64/dovecot/imap-login login_executable(imap): /usr/lib64/dovecot/imap-login login_executable(pop3): /usr/lib64/dovecot/pop3-login mail_executable(default): /usr/lib64/dovecot/imap mail_executable(imap): /usr/lib64/dovecot/imap mail_executable(pop3): /usr/lib64/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib64/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/modules/pop3 auth default: mechanisms: plain login use_winbind: yes passdb: driver: pam args: dovecot userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix and configuration of the /etc/pam.d/dovecot is follows: #%PAM-1.0 auth required pam_env.so debug auth sufficient pam_winbind.so #auth sufficient pam_unix.so likeauth nullok use_first_pass auth required pam_deny.so # when I try logon from my console: # telnet komp14 110 Trying 10.10.10.38... Connected to komp.xxx.xxx (10.10.10.38). Escape character is '^]'. +OK Dovecot ready. user tt1 +OK pass xxxxxxxxx -ERR Authentication failed. quit +OK Logging out Connection closed by foreign host. Of course password is corret becouse #wbinfo -K tt1 Enter tt1's password: plaintext kerberos password authentication for [tt1] succeeded (requesting cctype: FILE) credentials were put in: FILE:/tmp/krb5cc_0 In the logs files I can find coresponding to the telnet command to dovecot: /var/log/auth.log Mar 14 09:43:22 komp14 dovecot-auth: pam_winbind(dovecot:auth): getting password (0x00000000) Mar 14 09:43:22 komp14 dovecot-auth: pam_winbind(dovecot:auth): user 'tt1' granted access /var/log/dovecot/info.log Mar 14 09:43:29 pop3-login: Info: Aborted login (auth failed, 1 attempts): user=<tt1>, method=PLAIN, rip=10.10.10.38, lip=10.10.10.38, secured I'll be apreciate for any hints. but in /var/log/dovecot/error.log we have information: Mar 14 09:43:29 auth-worker(default): Error: pam(tt1,10.10.10.38): pam_acct_mgmt() failed: Authentication failure This test was done with windbindd Version 3.5.3. When I test it on another machine with windbind Version 3.0.24 (config file are the same) authentication prosess is done properly. Any HINTS????

2 1

[Dovecot] DOVECOT TO HAVE MULTIPLE AUTHENTICATION MECHANISM FOR A PARTICULAR USER
by PARTH MONGA 21 Mar '11

21 Mar '11

Hi Friends IS IT POSSIBLE IN DOVECOT TO HAVE MULTIPLE AUTHENTICATION MECHANISM FOR A PARTICULAR USER as u provided me in the link http://wiki2.dovecot.org/Authentication/MultipleDatabases <http://wiki2.dovecot.org/Authentication/MultipleDatabases>The link is applied to all the users( system + virtual) , which increased my overhead of fetching data can i have the same for a particular user ( local + database ) auth mecahnism Thanks and Regards Parth Monga

2 1

[Dovecot] 2.0.11 segfault while can't access submission_host
by Maciej Uhlig 21 Mar '11

21 Mar '11

15-lda.conf: submission_host = 192.168.m.n:587 2011-03-21T14:43:49+01:00 prac/p-prac dovecot: [ID 583609 mail.debug] lmtp(12354, user(a)us.edu.pl) Debug: mcQ1NitVh01CMAAAuqlTtQ: sieve: executing script from /mails/sieve/user(a)us.edu.pl.svbin 2011-03-21T14:43:49+01:00 prac/p-prac dovecot: [ID 583609 mail.error] lmtp(12354, user(a)us.edu.pl) Error: smtp(192.168.m.n:587): RCPT TO failed: 554 5.7.1 <prac[192.168.x.y]>: Client host rejected: Access denied 2011-03-21T14:43:49+01:00 prac/p-prac dovecot: [ID 583609 mail.error] master: Error: service(lmtp): child 12354 killed with signal 11 (core not dumped) in case submission_host grants access there is no segfault; mail sent ok. Regards, MU

2 1

[Dovecot] Sieve problems (not matching emails expected to match)
by Michael Welsh Duggan 21 Mar '11

21 Mar '11

I have a sieve file that reads like this: require "fileinto"; # Emacs if header :contains "List-Id" "emacs-devel.gnu.org" { fileinto "mail.emacs-devel"; } elsif header :contains "List-Id" "emacs-bidi.gnu.org" { fileinto "mail.emacs-bidi"; } ... Unfortunately the List-Id based lines don't appear to be working, although some other ones do. The attached test message does not get delivered to the mail.emacs-devel list. Why? -- Michael Welsh Duggan (md5i(a)md5i.com)

3 7

[Dovecot] dovecot authentication Local + MySQL
by PARTH MONGA 20 Mar '11

20 Mar '11

Hi Friends I am facing an issue with dovecot configuration and i am describing it in a nutshell. We have a dovecot setup under ultramonkey load balancer and in loadbalancer we have a check defined for pop service which queries mysqldatabase for a particular user name/password after every 2 minutes to check if service is live or not.. Things are fine till here . Now The catch is if somehow that particular user info(either password or username) is mistakenly changed in mysql database whole of my pop gets down beacuse load balancer cant login and that is a single point of failure in my setup . Now what i want is I want to know if there is any method that i can setup in dovecot to lookup for a user locally first and then go for a remote search for the user( ie in mysql database) So that we get the user searched locally before querying the mysql database Local + mysql database authetication i want to be in parallel with each other. Please show some light on this . Thanks and Regards Parth Monga

2 1

[Dovecot] Strange Dovecot Issue
by Scott Hughes 20 Mar '11

20 Mar '11

Greetings, I am trying to copy email from one server to another server using Thunderbird. The old server is a closed source ModusMail server and the new server is a Qmail server running Dovecot 1.2.3 (yes, I realize this is behind the times a bit). My issue is this: Whenever Thunderbird gets to a message that has been forwarded (has the forward flag set) an error is generated from the new server (dovecot) that it does not know how to handle the forward flag. Is this a known issue or is it simply that my version of Dovecot is behind? Thanks, Scott

1 0

[Dovecot] Question about "extracting" unwanted e-mails from mdbox
by Maria Arrea 20 Mar '11

20 Mar '11

Imagine the following scenario Last Saturday, 3:00 AM a big phishing attack hits our e-mail inboxes. Spamassassin does not mark them as spam, and our 50.000+ users have in their mdbox a very credible phishing attack. What doveadm-fu could I use to delete (or move to spam) that e-mail from each user INBOX (let´s imagine the Subject or a Header is known)? I repeat: already delivered e-mail, how to filter/prune it. Regards Maria

3 2

[Dovecot] remove old files
by Stéphane Guedon 20 Mar '11

20 Mar '11

Hello I use the dovecot 2.0.10 server and wonder how to clean up correctly the old mails (especially for spam folder). I use maildir storage, and wonder if deleting files with an rm and file command combinaison would be good or would corrupt indexes files/whatever. for exemple, the spam folder is in ~/.mail/.INBOX.spam/ Thus, can I "cd ~/.mail/.INBOX.spam/ && rm 'files older than 2 months' " or something else ? Thanks. -- Stéphane Guedon page web : http://www.22decembre.eu/ carte de visite : http://www.22decembre.eu/downloads/Stephane-Guedon.vcf clé publique gpg : http://www.22decembre.eu/downloads/Stephane-Guedon.asc

2 1

Re: [Dovecot] dovecot proxy, imapproxy, perdition . . . or?
by jkrejci＠usinternet.com 20 Mar '11

20 Mar '11

We use proxy_maybe across several servers handling over 10,000 accounts with no problems. ------Original Message------ From: Dennis Guhl Sender: dovecot-bounces+jkrejci=usinternet.com(a)dovecot.org To: dovecot(a)dovecot.org ReplyTo: dovecot(a)dovecot.org Subject: Re: [Dovecot] dovecot proxy, imapproxy, perdition . . . or? Sent: Mar 19, 2011 4:32 PM On Sat, Mar 19, 2011 at 09:50:15PM +0100, Lorens Kockum wrote: > Hi, > > I have two load-balanced dovecot servers using a single NFS > mount. The version is 1.2.11. I chose this so that if one server [..] > reasons, and also that dovecot has an included proxy, and > that its performance is better than perdition. However on > http://wiki.dovecot.org/HowTo/ImapProxy the feature "IMAP/POP3 > server with proxy feature" is noted as "This model is still a > bit unfinished in current code." > > Is this still true? There's also a general note that "This page > was written quite a long time ago and may not match reality > anymore" . . . I use 1.2.15 from Debian Lennys backports in a proxy configuration for a medium three digit number of users without any problems. Dennis Sent via BlackBerry from T-Mobile

1 0

[Dovecot] Testing sieve
by Jim Knuth 20 Mar '11

20 Mar '11

Hi, I`ve now compiled sieve and have a globalsieverc in /etc/dovecot/sieve/globalsieverc. How can I testing the rules? 1. require "fileinto"; if header :contains "X-Spam-Flag" "YES" { fileinto :create "Spam"; stop; } The second rule not working, the first rule I do not know. 2. require "fileinto"; if header :contains "subject" "Stress" { fileinto "Ablage"; stop; } main.cf entry is mailbox_command = /usr/lib/dovecot/dovecot-lda -a "$RECIPIENT" Thanks in advance -- Mit freundlichen Grüßen, Jim Knuth P.S.: Bitte senden Sie KEINE HTML-Mails! ##### Zufallszitat: Ist das Leben nicht hundert Mal zu kurz, sich in ihm - zu langweilen? [Nietzsche]

1 0

[Dovecot] Sieve or not?
by Jim Knuth 19 Mar '11

19 Mar '11

Hello, I use V 2.11 and my question is: Is one present Sieve with this version or MUST this specially compiles? # 2.0.11 (31d8d43fa6b5): /etc/dovecot/dovecot.conf # OS: Linux 2.6.29.4 i686 Debian wheezy/sid -- Mit freundlichen Grüßen, Jim Knuth P.S.: Bitte senden Sie KEINE HTML-Mails! ##### Zufallszitat: Der Fanatismus ist die einzige 'Willensstärke', zu der auch die Schwachen gebracht werden können. [Nietzsche]

2 3

[Dovecot] Dovecot mirror down?
by Jim Knuth 18 Mar '11

18 Mar '11

Hello, http://xi.rename-it.nl/debian/ down? Does somebody know why? -- Mit freundlichen Grüßen, Jim Knuth P.S.: Bitte senden Sie KEINE HTML-Mails! ##### Zufallszitat: Lache nie über die Dummheit der anderen. Sie kann deine Chance sein. [Churchill]

3 7

Re: [Dovecot] Problem with expire plugin and expunge
by Christoph Pleger 18 Mar '11

18 Mar '11

Hello, > > Big surprise: Something bad must have happened after the messages were > > deleted from Trash; now all messages are zero days old. > > Are you using maildir? Did you run with those patches + mail_debug=yes? Today, the daily cronjob expired some messages. I have attached the output of the job. It seems that the error occurs not when expunging, but when deleting the first message after expunging. Before deleting a message, "doveadm search" showed me messages that were between zero and four days old, but directly after deleting a message, all messages were zero days old. Here is my log entry from when I deleted that message: Mar 18 09:50:28 joseph dovecot: imap(christoph): Debug: expire: Saving first message to Trash, updating timestamp to 1300438228 Regards Christoph

1 0

[Dovecot] Problem with recompiling sieve scripts after migrating to Dovecot 2.0 from 1.2
by Andrés Yacopino 18 Mar '11

18 Mar '11

I saw this in log file of dovecot: Error: sieve: binary save: failed to create temporary file: open(/usr/local/etc/sieve/after/after.dovecot.svbin.acamail.acasalud.com.ar.13528.) failed: Permission denied (euid=40(vmail) egid=41(vmail) missing +w perm: /usr/local/etc/sieve/after, euid is not dir owner) acamail dovecot: lda(xxxxx@xxxxxx): Error: sieve: the lda sieve plugin does not have permission to save global sieve script binaries; global sieve scripts like /usr/local/etc/sieve/after/after.dovecot.sieve need to be pre-compiled using the sievec tool So i tried to recompile script using sievec like: sievec /usr/lcaol/etc/sieve/after/after.dovecot.sieve but i get: sievec(root): Error: user root: Initialization failed: Initializing mail storage from mail_location setting failed: stat(/root/Maildir) failed: Permission denied (euid=40(vmail) egid=41(vmail) missing +x perm: /root, euid is not dir owner) sievec(root): Fatal: Invalid user settings. Refer to server log for more information. What i must do to resolve this? My dovecot configuration is: # 2.0.11: /usr/local/etc/dovecot/dovecot.conf # OS: Linux xxxxxx auth_master_user_separator = * auth_username_format = %Lu disable_plaintext_auth = no first_valid_gid = 40 first_valid_uid = 40 mail_gid = vmail mail_location = maildir:~/Maildir mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /usr/local/etc/passwd.masterusers driver = passwd-file master = yes } passdb { args = /usr/local/etc/dovecot-ldap.conf driver = ldap } plugin/quota = maildir plugin/quota_rule = *:storage=614400 plugin/quota_rule2 = Trash:storage=+61440 plugin/sieve_after = /usr/local/etc/sieve/after/after.dovecot.sieve plugin/sieve_before = /usr/local/etc/sieve/before/spam.dovecot.sieve protocols = imap pop3 sieve service auth { unix_listener auth-master { group = vmail mode = 0600 user = vmail } user = root } ssl_cert = </usr/local/etc/ssl/certs/dovecot.pem ssl_key = </usr/local/etc/ssl/private/dovecot.pem userdb { args = /usr/local/etc/dovecot-ldap.conf driver = ldap } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } protocol lda { auth_socket_path = /usr/local/var/run/dovecot/auth-master lda_mailbox_autocreate = yes mail_plugins = quota sieve postmaster_address = postmaster@xxxxxx sendmail_path = /usr/lib/sendmail Thanks a lot, -- Andrés Fernando Yacopino

2 1

Re: [Dovecot] dovecot LDA: "temporary failure"
by David Koski 18 Mar '11

18 Mar '11

Forget it. I must have been crosseyed. Someone had put the log file in a non-standard place /home/vmail/dovecot-deliver.log. It told all. A plugin cmusieve was not found, possibly depreciated? I learned how to make the deliver command line work. ;) Sorry, David Koski dkoski(a)sutinen.com > Additional information: > > I created a script to get the return code from deliver: > > 1 #!/bin/bash > 2 > 3 cat "cur/1300037582.P7332Q0M221160.brusco-mail:2,S" | > /usr/lib/dovecot/deliver -f dkoski(a)somedomain.com -d > dkoski(a)domainhidden.com 4 > 5 case $? in > 6 0) echo "0" > 7 ;; > 8 64) echo "64" > 9 ;; > 10 67) echo "67" > 11 ;; > 12 78) echo "78" > 13 ;; > 14 77) echo "77" > 15 ;; > 16 75) echo "75" > 17 ;; > 18 *) echo "unknown" > 19 esac > 20 > > The file it is cat'ing is a valid email in an Maildir/cur file. It returns > 75 (EX_TEMP_FAIL) every time, even run as root. The logs reveal: > > /var/log/dovecot/lda-deliver: > > 2011-03-17 23:35:39 deliver(dkoski(a)somedomain2.com): Info: Loading modules > from directory: /usr/lib/dovecot/modules/lda > > /var/log/dovecot/deliver.info: > (nothing) > > /var/log/dovecot/deliver.err: > (nothing) > > I tried the script on another machine with Dovecot 1.0.15-2.3+lenny1 with > success if I run as root. > > Regards, > David Koski > dkoski(a)sutinen.com > > > This really has me stumped and desperate. I upgraded Debian from 5... > > <snip>

1 0

[Dovecot] dovecot LDA: "temporary failure"
by David Koski 18 Mar '11

18 Mar '11

This really has me stumped and desperate. I upgraded Debian from 5 to 6 (squeeze) and now Dovecot LDA fails. I have checked permissions and the usual. Postfix SMTP, Dovecot POP3 and Dovecot IMAP work. Having to upgrade MySQL from 5.0 to 5.1 made me question that. Logging is of little help. I have turned on logging for LDA to a separate file. When I try to run the deliver command it returns nothing and appears to do nothing: ~$ cat /etc/hosts | /usr/lib/dovecot/deliver -f root@localhost -d dkoski(a)[domainhidden].com $ ..but then I don't know what to expect. The log files are owned by dovecot. I tried chmod'ing them to 777 in desperation. This was working before the upgrade to 1.2.15-4 from 1.0.15-2.3+lenny1. Postfix reports this stuff: Mar 17 22:37:38 host-mail postfix/smtpd[22160]: connect from mail.kosmosisland.com[63.228.175.169] Mar 17 22:37:39 host-mail postfix/smtpd[22160]: 9D80C12AF610: client=mail.kosmosisland.com[63.228.175.169] Mar 17 22:37:39 host-mail postfix/cleanup[22163]: 9D80C12AF610: message-id=<201103172237.29223.dkoski(a)[another-domainhidden].com> Mar 17 22:37:39 host-mail postfix/qmgr[21877]: 9D80C12AF610: from=<dkoski(a)[another-domainhidden].com>, size=1257, nrcpt=1 (queue active) Mar 17 22:37:39 host-mail postfix/smtpd[22160]: disconnect from mail.kosmosisland.com[63.228.175.169] Mar 17 22:37:42 host-mail postfix/smtpd[22168]: connect from localhost[127.0.0.1] Mar 17 22:37:42 host-mail postfix/smtpd[22168]: 480D912AF612: client=mail.kosmosisland.com[63.228.175.169] Mar 17 22:37:42 host-mail postfix/cleanup[22163]: 480D912AF612: message-id=<201103172237.29223.dkoski(a)[another-domainhidden].com> Mar 17 22:37:42 host-mail postfix/qmgr[21877]: 480D912AF612: from=<dkoski(a)[another-domainhidden].com>, size=1873, nrcpt=1 (queue active) Mar 17 22:37:42 host-mail postfix/smtpd[22168]: disconnect from localhost[127.0.0.1] Mar 17 22:37:42 host-mail postfix/pipe[22169]: 480D912AF612: to=<dkoski(a)[domainhidden].com>, relay=dovecot, delay=0.04, delays=0.02/0.01/0/0.01, dsn=4.3.0, status=deferred (temporary failure) Mar 17 22:37:42 host-mail postfix/smtp[22164]: 9D80C12AF610: to=<dkoski(a)[domainhidden].com>, relay=127.0.0.1[127.0.0.1]:10024, delay=3.4, delays=0.84/0.01/0/2.5, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=11197-13, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 480D912AF612) Mar 17 22:37:42 host-mail postfix/qmgr[21877]: 9D80C12AF610: removed And /var/log/dovecot/deliver.info: 2011-03-17 22:43:43 auth(default): Info: new auth connection: pid=22232 2011-03-17 22:43:59 auth-worker(default): Info: sql(dkoski(a)[domainhidden].com,127.0.0.1): query: SELECT email as user, password FROM view_users WHERE email='dkoski(a)[domainhidden].com'; 2011-03-17 22:43:59 auth(default): Info: client out: OK 1 user=dkoski(a)[domainhidden].com 2011-03-17 22:43:59 auth(default): Info: master in: REQUEST 73 22061 1 2011-03-17 22:43:59 auth(default): Info: master out: USER 73 dkoski(a)[domainhidden].com uid=5000 gid=5000 home=/home/vmail/[domainhidden].com/dkoski 2011-03-17 22:44:00 auth(default): Info: new auth connection: pid=22234 I tried reinstalling the package dovecot-common. I downloaded it on another machine and compared the md5sum. # postconf -n alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no config_directory = /etc/postfix content_filter = smtp-amavis:[127.0.0.1]:10024 delay_warning_time = 1h inet_interfaces = all mailbox_size_limit = 0 mydestination = backup.host.localnet, backup.localnet, localhost.localnet, localhost myhostname = mail.[domainhidden].com mynetworks = 192.168.1.0/24, 127.0.0.1 myorigin = /etc/mailname recipient_delimiter = + relayhost = smtp_tls_session_cache_database = btree:${queue_directory}/cache/smtp_scache smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_pipelining, reject_non_fqdn_recipient, reject_unknown_recipient_domain, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot smtpd_sender_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unknown_reverse_client_hostname, reject_non_fqdn_sender, reject_unknown_sender_domain, reject_rbl_client b.barracudacentral.org, reject_rbl_client zen.spamhaus.org, reject_rbl_client cbl.abuseat.org, reject_rbl_client dnsbl.njabl.org, reject_rbl_client combined.njabl.org, reject_rbl_client bl.spamcop.net, reject_rbl_client spamguard.leadmon.net, reject_rbl_client korea.services.net, reject_rbl_client spamsources.fabel.dk, reject_rhsbl_sender rhsbl.ahbl.org smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key smtpd_tls_session_cache_database = btree:${queue_directory}/cache/smtpd_scache smtpd_use_tls = yes virtual_alias_maps = mysql:/etc/postfix/mysql-virtual-alias-maps.cf,mysql:/etc/postfix/mysql-email2email.cf virtual_gid_maps = static:5000 virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual-mailbox-domains.cf virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual-mailbox-maps.cf virtual_transport = dovecot virtual_uid_maps = static:5000 From master.cf: dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -d ${recipient} # dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 6.0 ext3 log_path: /var/log/dovecot/deliver.err info_log_path: /var/log/dovecot/deliver.info log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap pop3 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_privileged_group: mail mail_location: maildir:/home/vmail/%d/%n/Maildir mail_debug: yes mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 lda: log_path: /var/log/dovecot/lda-deliver.err info_log_path: /var/log/dovecot/lda-deliver.info log_path: /home/vmail/dovecot-deliver.log auth_socket_path: /var/run/dovecot/auth-master postmaster_address: info(a)[another-domainhidden].com mail_plugins: cmusieve global_script_path: /home/vmail/globalsieverc auth default: mechanisms: plain login verbose: yes debug: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: static args: uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail Regards, David Koski david(a)kosmosisland.com

2 2

Re: [Dovecot] segmentation fault with doveadm search
by Timo Sirainen 17 Mar '11

17 Mar '11

On Thu, 2011-03-17 at 17:54 +0100, Nick Rosier wrote: > Hope this is better: > > #1 0x000000080231ab21 in fts_build_deinit (_ctx=0x801ea2640) at > fts-storage.c:551 Yes, much better. Easy fix: http://hg.dovecot.org/dovecot-2.0/rev/3d48418b0501

2 1

[Dovecot] Unconfigured dictionary name 'quotadict'
by Simone Caruso 17 Mar '11

17 Mar '11

Currently i'm migrating an existing dovecot 1.2 server to dovecot 2.0.11, once configured the 2.0 server works, auth works... but i get these messages in mail.log: dict: Error: dict client: Unconfigured dictionary name 'quotadict' Mar 17 16:46:14 penny dovecot: imap(mailbox(a)example.com): Error: write(/var/run/dovecot/dict) failed: Broken pipe Mar 17 16:46:38 penny dovecot: dict: Error: dict client: Unconfigured dictionary name 'quotadict' Mar 17 16:46:38 penny dovecot: imap(mailbox(a)example.com): Error: read(/var/run/dovecot/dict) failed: Remote disconnected My quota configuration is the following (as wiki says): service dict { unix_listener dict { mode = 0600 user = vmail } } plugin { quota = dict:User quota::proxy::quotadict quota_rule2 = Trash:storage=+55M } dict { quota = mysql:/etc/dovecot/dovecot-dict-sql.conf } dovect-dict-sql.conf: connect = host=localhost dbname=ketna user=***** password=***** map { pattern = priv/quota/storage table = imap_quota username_field = email value_field = current } map { pattern = priv/quota/messages table = imap_quota username_field = email value_field = messages } Someone can tell me where's my fault? (Attached my "dovecot -n" output.) Thanks! -- Simone Caruso

2 2

[Dovecot] Migrating to mdbox
by Chris Wilson 17 Mar '11

17 Mar '11

Hi all, I think it would be a good idea for me to move from mbox to mdbox, as I have 57,000 messages in my inbox, and clients hang for a minute whenever they request a CHECK, or Dovecot feels the need to run one itself. Looking at past threads: http://www.mail-archive.com/dovecot@dovecot.org/msg35212.html http://comments.gmane.org/gmane.mail.imap.dovecot/53936 it seems that the safest way is to run: sudo dsync -v -u chris backup mdbox:/home/chris/mdbox eliminate any errors that it reports, test the new mdbox access temporarily, and then switch my config in Dovecot. Ideally I'd like to do that just for me, without disrupting other users of this server (that I help to admin). This error occurs every time I run dsync, and I understand it, so I've elided it: dsync(chris): Error: open() failed with mbox file /home/chris/mail/admin: Permission denied dsync(chris): Error: Failed to sync mailbox admin: Internal error occurred. Refer to server log for more information. [2011-03-09 15:50:10] dsync(chris): Info: spam: highest_modseq changed: 2 != 3 I don't understand the following errors from dsync (2.0.9): chris@one-mail(~)$ sudo dsync -v -u chris backup mdbox:/home/chris/mdbox dsync(chris): Error: Next message unexpectedly corrupted in mbox file /home/chris/mail/spam at 404513741 dsync(chris): Warning: Transaction log file /home/chris/mail/.imap/spam/dovecot.index.log was locked for 252 seconds dsync(chris): Info: spam: only in source dsync(chris): Info: temp: only in source dsync(chris): Info: Sent: only in source dsync(chris): Info: addressbook: only in source dsync(chris): Info: sent-mail-sep-2008: only in source dsync(chris): Info: sent-mail-oct-2010: only in source dsync(chris): Info: INBOX.Sent: only in source dsync(chris): Info: sent-mail: only in source dsync(chris): Info: INBOX.Trash: only in source chris@one-mail(~)$ sudo dsync -v -u chris backup mdbox:/home/chris/mdbox dsync(chris): Info: spam: only in source dsync(chris): Info: spam: only in dest dsync(chris): Error: Failed to sync mailbox spam: Mailbox doesn't exist: spam dsync(chris): Error: msg iteration failed: Couldn't open mailbox 407c272bc369304dbc210000d6a93087 dsync(chris): Error: Trying to open a non-listed mailbox with guid=407c272bc369304dbc210000d6a93087 dsync(chris): Error: msg iteration failed: Couldn't open mailbox 407c272bc369304dbc210000d6a93087 dsync(chris): Error: Trying to open a non-listed mailbox with guid=407c272bc369304dbc210000d6a93087 dsync(chris): Error: Failed to sync mailbox spam: Mailbox doesn't exist: spam Note: how is it possible for the same folder to be "only in source" and "only in dest"? chris@one-mail(~)$ sudo dsync -v -u chris backup mdbox:/home/chris/mdbox dsync(chris): Info: spam: highest_modseq changed: 2 != 3 dsync(chris): Info: sent-mail: uidnext changed: 378 != 375 chris@one-mail(~)$ sudo dsync -v -u chris backup mdbox:/home/chris/mdbox dsync(chris): Info: spam: highest_modseq changed: 2 != 3 Now the latter is all I get whenever I run dsync. Is it broken? Cheers, Chris. -- Aptivate | http://www.aptivate.org | Phone: +44 1223 760887 The Humanitarian Centre, Fenner's, Gresham Road, Cambridge CB1 2ES Aptivate is a not-for-profit company registered in England and Wales with company number 04980791.

3 12

[Dovecot] SSL Compatibility? SNI vs SAN (Subject Alternative Names) and multiple domains
by Thomas Harold 17 Mar '11

17 Mar '11

Getting ready to redo our mail server setup and I'm trying to wrap my head around the ins and outs and pratfalls involved in SSL, multiple domains, and Dovecot. I've taken a look at: http://wiki2.dovecot.org/SSL/DovecotConfiguration My basic understanding at this point is that: - With SSL for IMAP/POP3, it is limited to one certificate per IP address, because the SSL process starts as soon as the client opens the socket to the IP address. In order to support multiple domains / server names, you have to rely on SAN (Subject Alternative Names) in the server's SSL certificate. - If I use STARTTLS for IMAP/POP3 and Dovecot 2.x, then the SNI process will allow the client to specify that they want to talk to mail server XYZ and Dovecot will hand the correct certificate to the client. However, a lot of devices don't support SNI yet so this is fraught with peril and incompatibilities. So it seems like if I have fewer IP addresses then mail server names, I should stick with a single SSL cert and use SANs. (Wildcard certs are not an option due to the top level domain being different.) How big of an issue is a cert with half a dozen or a dozen SANs attached? Do most mail clients handle that sort of certificate properly in order to access their mailboxes? Reference links: http://www.digicert.com/subject-alternative-name-compatibility.htm

7 8

[Dovecot] problems with public (sub)folders
by frederik.schmid＠gmx.net 17 Mar '11

17 Mar '11

Hi, i am trying to share a maildir++ mailbox to other users but i can only subscribe to the root directory. The subfolders of the public mailbox do not appear in the exported list. Does anyone has an idea how i can share the subfolders too without creating symlinks for every single folder? Best, Frederik >>>>> ls -lA /var/mail/public .user01 -> /var/mail/user01/Maildir >>>>> ls -A /var/mail/user01/Maildir/ (shortened) .Drafts,.Templates,.Sent,.Trash,.Spam new,cur,tmp dovecot.* .subfolder .subfolder.test1 .subfolder.test1.xyz .subfolder.test2 .subfolder.test3 >>>>> doveconf -n # 2.0.11 (2cb0fb910441): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0 auth_master_user_separator = * auth_username_format = %Ln auth_verbose = yes base_dir = /var/run/dovecot/ disable_plaintext_auth = no first_valid_gid = 100 first_valid_uid = 1000 hostname = xxx last_valid_gid = 50000 last_valid_uid = 50000 listen = * log_path = /var/log/dovecot.log mail_debug = yes mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = prefix = separator = . type = private } namespace { hidden = yes inbox = no list = no location = prefix = INBOX. separator = . type = private } namespace { hidden = no inbox = no list = children location = maildir:/var/mail/public prefix = public. separator = . subscriptions = no type = public } passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin/autocreate = Trash plugin/autocreate2 = Spam plugin/autocreate3 = Sent plugin/autocreate4 = Drafts plugin/autocreate5 = Templates plugin/autocreate6 = Spam plugin/autosubscribe = Trash plugin/autosubscribe2 = Spam plugin/autosubscribe3 = Sent plugin/autosubscribe4 = Drafts plugin/autosubscribe5 = Templates plugin/autosubscribe6 = Spam plugin/sieve = ~/.main.sieve plugin/sieve_before = /etc/dovecot/sieve/move-spam.sieve plugin/sieve_dir = ~/sieve postmaster_address = postmaster@xxx protocols = imap lmtp sieve service anvil { client_limit = 2048 } service imap-login { client_limit = 1024 inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_limit = 1024 process_min_avail = 16 } service lmtp { inet_listener lmtp { address = * port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl = required ssl_cert = </etc/dovecot/cert/xxx ssl_key = </etc/dovecot/cert/xxx userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes protocol lmtp { mail_plugins = " sieve" } protocol lda { mail_plugins = " sieve" } protocol imap { mail_max_userip_connections = 100 mail_plugins = " autocreate" } -- GMX DSL Doppel-Flat ab 19,99 Euro/mtl.! Jetzt mit gratis Handy-Flat! http://portal.gmx.net/de/go/dsl

2 1

[Dovecot] Dove cot+Kerberos
by Rostislav Matyusha 17 Mar '11

17 Mar '11

Hi All. I have a problem with authorization users AD via kerberos in Dovecot&Postfix. Windows SRV 2008 Standart - AD mail server: Gentoo + cyrus-sasl + postfix + dovecot with support ldap&kerberos. I am created a 4 keytabs on Windows box. C:\Users\Admin>ktpass -princ host/srv-mail.cn.energy(a)CN.ENERGY -mapuser ldapmail(a)CN.ENERGY -pass "superpasswd" -crypto RC4-HMAC-NT -ptype KRB5_NT_PRINCIPAL -out c:\mail.keytab etc... for all imap/srv-mail.cn.energy pop/srv-mail.cn.energy smtp/srv-mail.cn.energy host/srv-mail.cn.energy On Linux server: ktutils ktutils: rkt /root/Keytab/imap.keytab ktutils: rkt /root/Keytab/smtp.keytab ktutils: rkt /root/Keytab/pop.keytab ktutils: rkt /root/Keytab/host.keytab ktutils: wrt /etc/krb5.keytab ktutils: q kinit -V -k -t /etc/krb5.keytab host/srv-mail.cn.energy(a)CN.ENERGY Authenticated to Kerberos v5 KRB5_KTNAME=/etc/krb5.keytab ; export KRB5_KTNAME TESTING: imtest srv-mail ERROR: Mar 10 08:27:23 srv-mail dovecot: auth(default): auth(?,10.0.0.5): Invalid username: host/srv-mail.cn.energy(a)CN.ENERGY Mar 10 08:27:23 srv-mail dovecot: auth(default): gssapi(?,10.0.0.5): authn_name: Username contains disallowed character: 0x2f Why username "host/srv-mail.cn.energy(a)CN.ENERGY" ??? imtest -m GSSAPI -u ross -a ross -r cn.energy srv-mail ERROR: Mar 10 08:31:55 srv-mail dovecot: auth(default): auth(?,10.0.0.5): Invalid username: host/srv-mail.cn.energy(a)CN.ENERGY Mar 10 08:31:55 srv-mail dovecot: auth(default): gssapi(?,10.0.0.5): authn_name: Username contains disallowed character: 0x2f BUT if i create kinit ross(a)CN.ENERGY imtest srv-mail ERROR: srv-mail dovecot: auth(default): gssapi(ross(a)CN.ENERGY,10.0.0.5): Invalid response length So i am confusion, please help me. many thanks -- Best Regards Ross Remote Server Administration. e-mail: ross.sysadm(a)gmail.com skype: ross.sysadm icq: 317410068 Best Offers for a full range of server management services and effective on time solutions.

2 1

[Dovecot] dict crashes with multiple map definitions
by Birger Brunswiek 17 Mar '11

17 Mar '11

Hi, I get a crash in dict if I use multiple map sections. Each one of them works fine by their own. I managed to convince dovecot to create dump files to debug this, but I can't figure out how to do the same for dict. How can I do this? Anyway, perhaps someone already know's what's wrong by looking at what I do in the sql dict configuration. Mar 9 02:27:52 xxx dovecot: dict: pgsql: Connected to dovecot Mar 9 02:27:52 xxx dovecot: dict: Panic: file driver-pgsql.c: line 529 (do_query): assertion failed: (db->sync_result == NULL) Mar 9 02:27:52 xxx dovecot: dict: Raw backtrace: dict() [0x418a9a] -> dict() [0x418b03] -> dict() [0x418206] -> dict() [0x414124] -> dict() [0x414b07] -> dict() [0x40e0dc] -> dict() [0x40e20a] -> dict() [0x40b77f] -> dict() [0x40b8b9] -> dict() [0x40ba57] -> dict(io_loop_handler_run+0xbd) [0x41d87d] -> dict(io_loop_run+0x18) [0x41ccf8] -> dict(main+0x114) [0x40bda4] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7f9a10cdbc4d] -> dict() [0x40ad69] Mar 9 02:27:52 xxx dovecot: IMAP(xxx): read(/var/run/dovecot/dict-server) failed: Remote disconnected Mar 9 02:27:52 xxx dovecot: IMAP(xxx): acl: dict iteration failed, can't update dict Mar 9 02:27:52 xxx dovecot: dovecot: child 11180 (dict) killed with signal 6 (core not dumped) # dovecot --version 1.2.15 # dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0 ext3 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps managesieve listen: [::] ssl_cert_file: /etc/ssl/certs/foo.bar.pem ssl_key_file: /etc/ssl/private/foo.bar.key.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_privileged_group: mail mail_location: maildir:/var/mail/%u/mailbox mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): acl imap_acl mail_plugins(imap): acl imap_acl mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: shared separator: / prefix: shared/%%n/ location: maildir:/var/mail/%%u/mailbox:INDEX=/var/mail/%u/mailbox/shared/%%u list: children lda: postmaster_address: postmaster(a)foo.bar mail_plugins: sieve acl auth default: mechanisms: plain gssapi passdb: driver: pam args: blocking=yes dovecot userdb: driver: static args: uid=vmail gid=vmail home=/var/mail/%u allow_all_users=yes socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail plugin: acl: vfile acl_shared_dict: proxy::acl sieve: ~/.dovecot.sieve sieve_dir: ~/sieve dict: acl: pgsql:/etc/dovecot/dovecot-dict-sql.conf # cat /etc/dovecot/dovecot-dict-sql.conf connect = host=foo.bar dbname=dovecot user=dovecot password=xxx map { pattern = shared/shared-boxes/user/$owner/$user table = user_shares value_field = dummy fields { owner = $owner usr = $user } } map { pattern = shared/shared-boxes/anyone/$owner table = global_shares value_field = dummy fields { owner = $owner } } map { pattern = shared/shared-boxes/group/$group/$owner table = group_shares value_field = dummy fields { grp = $group owner = $owner } }

2 1

[Dovecot] dovecot 1.2 quota with local users
by iti＠promax.media.pl 17 Mar '11

17 Mar '11

Hello, I got problem with setting quota from mysql for local users. In database are only information with quota. Password are store in passwd/shadow. My database have only simple info like in wiki description. Table created with: CREATE TABLE quota ( username varchar(100) not null, bytes bigint not null default 0, messages integer not null default 0, primary key (username) ); In dovecot.conf like in description is: dict { quotadict = mysql:/etc/dovecot-dict-sql.conf } plugin { # v1.2 + SQL: quota = dict:user::proxy::quotadict # v1.2 + file: quota = dict:user::file:%h/Maildir/dovecot-quota quota_rule = *:storage=10M:messages=1000 } File dovecot-dict-sql.conf has: # v1.2+ only: connect = host=localhost dbname=mails user=sqluser password=sqlpass map { pattern = priv/quota/storage table = quota username_field = username value_field = bytes } map { pattern = priv/quota/messages table = quota username_field = username value_field = messages } With corrected values about databasename, user and password. Where should to add information about sql query when autorization is not via myqsl (only shadow/password). There are in description info about additional file with user_query: dovecot-mysql.conf. Can anybody know how it should it look like and where to add it in config?

2 3

[Dovecot] inetd config - dovecot doesn't exits
by kjonca＠o2.pl 17 Mar '11

17 Mar '11

Is there any option for dovecot to exit when is unneded? I mostly use dovecot via shell process (ie. something like /usr/sbin/dovecot --exec-mail imap) But sometimes I want to use it remotely via tcp and I run dovecot via inetd. --8<---------------cut here---------------start------------->8--- localhost:imap stream tcp nowait root /usr/sbin/tcpd /usr/lib/dovecot/imap-login --8<---------------cut here---------------end--------------->8--- in inetd.conf works good, but dovecot stays, even if all clients ended their connections. How can I make dovecot to exit after last client disconnects? KJ -- Http://modnebzdury.wordpress.com/2009/10/01/niewiarygodny-list-prof-majewsk… Wiesz, tryb tekstowy w Linuksie ma się tak do DOSu jak F-117A do paralotni. (c) Dawid Kuroczko

2 1

[Dovecot] Attachment file size error in SIS
by Daniel L. Miller 17 Mar '11

17 Mar '11

I've got an attachment that triggers a "smaller than expected" error. It was a pdf I received some time ago. I copied the file from the dovecot storage, renamed it to something close to the original name (I don't remember what that was), then created a new mail with this as an attachment and saved it to the server. This created a new file, identical file size to the other - but continues to have the "smaller than expected" error. -- Daniel

2 1

[Dovecot] search for attachment hash
by Daniel L. Miller 17 Mar '11

17 Mar '11

How can I determine what message(s) are linked to a given attachment hash? -- Daniel

2 1

[Dovecot] doveadm expunge info message in std.error
by Kui Zhang 17 Mar '11

17 Mar '11

Hello This command doveadm expunge -u "user@domain" mailbox ".namespace/*" savedbefore 7d writes these messages to std.error doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5932, msgid=<E1Puxwf-0001fD-Si@hostname>, size=1824 doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5933, msgid=<E1Puy0N-0001fI-No@hostname>, size=1822 doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5934, msgid=<E1Puy0Q-0001fM-I0@hostname>, size=1824 doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5935, msgid=<E1Pv6CY-0001ge-H9@hostname>, size=1843 doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5936, msgid=<E1Pv6Hm-0001gi-7R@hostname>, size=1822 doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5937, msgid=<E1PvMRn-0001lm-A6@hostname>, size=1854 doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5938, msgid=<E1PvZLN-0001p4-EF@hostname>, size=1832 doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5939, msgid=<E1PvZN6-0001p8-IA@hostname>, size=1840 doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5940, msgid=<E1PwMvo-0001xs-8w@hostname>, size=1835 Can we write these messages(informational) to std.out It would help reduce cron mails. Thanks KuiZ

3 3

[Dovecot] segmentation fault with doveadm search
by Nick Rosier 17 Mar '11

17 Mar '11

Configuration: Dovecot 2.0.11 on FreeBSD 8.2 When I run a search to generate the FTS search indexes I get following error: # doveadm search -A body dead_beef [1] 34789 segmentation fault doveadm search -A body dead_beef How can I (help) troubleshoot this? Rgds, N.

2 3

[Dovecot] Configuration of LMTP Reject Code
by Petter Urkedal 17 Mar '11

17 Mar '11

Is it possible to change the reject codes from the Dovecot LMTP agent? In particular I would like to change the "550 5.1.1 <...> User doesn't exist." to a temporary failure, since we already validate email addresses on the mail front-end, and such errors are most likely due to a temporary glitch in the user database lookup. We use Postfix on the front-end, which is very configurable in this respect. I don't see a way to override the error code from LMTP, though, but suggestions are welcome.

4 10

[Dovecot] Using dovecot with wordpress/phpass passwords?
by Joan 17 Mar '11

17 Mar '11

Good afternoon, I am trying to setup dovecot to authenticate using the userdata from wordpress. It's being a bit mor difficult than I thought. This is the relevant part of the dovecot-sql.conf default_pass_scheme = CRYPT password_query = SELECT user_pass AS password FROM wp_users WHERE user_email='%u'; user_query = SELECT 501 as uid, 501 as gid,'maildir:storage=51200' as quota FROM wp_users WHERE user_email = '%u' I can see that the query is being procecessed according to the logs. Wordpress and others are using phpass to authenticate (http://www.openwall.com/phpass/) it is basically a salted md5 hash. Basically, after the process, a hash like this is obtained. $P$BiWISc3IsqRHxeEjq4VJP1Vi8gy4mg1 (for test123 password) I would like to know if dovecot would be able to read this, otherwise I could still make a custom checkpassword function but that would be non-optimal. Could someone guide me on this? If you need more details just ask. Thanks a lot, joan

2 2

[Dovecot] Problems with pam+ldap + quota
by Antonio Perez-Aranda 17 Mar '11

17 Mar '11

I think that I need to modify "/etc/ldap.conf" to remap some attribute with mailQuota from ldap, and then, try to catch this as arg. Someone has pam+ldap+quota ? -- Antonio Pérez-Aranda Alcaide aperezaranda(a)yaco.es Yaco Sistemas S.L. http://www.yaco.es/ C/ Rioja 5, 41001 Sevilla Teléfono +34 954 50 00 57 Fax +34 954 50 09 29

3 8

[Dovecot] exim and /var/run/dovecot/auth-client permissions
by John Connett 17 Mar '11

17 Mar '11

I am attempting to configure a dovecot 2.0 + exim + fetchmail (demon) combination on openSUSE 11.4, initially with the standard dovecot package (2.0.9-3.4-x86_64) and now with the later server:mail build service package (2.0.11-1.1-x86_64). I followed the instructions in http://wiki2.dovecot.org/HowTo/EximAndDovecotSASL but despite the changes in conf.d/10-master.conf the permissions on /var/run/dovecot/auth-client remain unchanged: $ ls -l /var/run/dovecot/auth-client Srw------- 1 root root 0 Mar 14 13:11 /var/run/dovecot/auth-client $ This is probably the cause of authentication failures from exim. I suspect it is something trivial but haven't yet been able to find the answer.

2 4

[Dovecot] warnings from 2.0.11
by Mike Abbott 17 Mar '11

17 Mar '11

During a stress test dovecot-2.0.11 logs many warnings: Mar 8 06:19:52 gromit dovecot[59204]: imap(pid 68864 user user15): Warning: /Volumes/Mail/user15/dovecot-uidlist: Duplicate file entry at line 183: 1299556557.M571530P31883.gromit.example.com,S=21175,W=21549 (uid 67 -> 250) Mar 8 06:20:10 gromit dovecot[59204]: imap(pid 68865 user user34): Warning: /Volumes/Mail/user34/dovecot-uidlist: Duplicate file entry at line 230: 1299535329.M679065P61136.gromit.example.com,S=11040,W=11247 (uid 17 -> 240) Mar 8 06:20:10 gromit dovecot[59204]: imap(pid 68865 user user34): Warning: /Volumes/Mail/user34/dovecot-uidlist: Duplicate file entry at line 240: 1299535329.M902424P61136.gromit.example.com,S=12843,W=13075 (uid 30 -> 250) Mar 8 06:20:10 gromit dovecot[59204]: imap(pid 68865 user user34): Warning: /Volumes/Mail/user34/dovecot-uidlist: Duplicate file entry at line 266: 1299547358.M587728P69303.gromit.example.com,S=13637,W=13772 (uid 108 -> 276) Mar 8 06:20:10 gromit dovecot[59204]: imap(pid 68865 user user34): Warning: /Volumes/Mail/user34/dovecot-uidlist: Duplicate file entry at line 275: 1299558462.M498819P35210.gromit.example.com,S=15495,W=15663 (uid 160 -> 285) Mar 8 06:20:11 gromit dovecot[59204]: imap(pid 68864 user user36): Warning: /Volumes/Mail/user36/dovecot-uidlist: Duplicate file entry at line 281: 1299535339.M353973P61136.gromit.example.com,S=4498,W=4581 (uid 360 -> 604) Mar 8 06:21:00 gromit dovecot[59204]: imap(pid 68864 user user239): Warning: /Volumes/Mail/user239/dovecot-uidlist: Duplicate file entry at line 105: 1299547390.M813768P69393.gromit.example.com,S=4773,W=4861 (uid 22 -> 164) Mar 8 06:21:00 gromit dovecot[59204]: imap(pid 68864 user user239): Warning: /Volumes/Mail/user239/dovecot-uidlist: Duplicate file entry at line 106: 1299570075.M267312P49194.gromit.example.com,S=8041,W=8181 (uid 115 -> 165) Mar 8 06:28:24 gromit dovecot[59204]: imap(pid 69295 user user274): Warning: /Volumes/Mail/user274/dovecot-uidlist: Duplicate file entry at line 2020: 1299548064.M880781P67832.gromit.example.com,S=4976,W=5076 (uid 247 -> 2500) Mar 8 06:29:23 gromit dovecot[59204]: imap(pid 68973 user user115): Warning: /Volumes/Mail/user115/dovecot-uidlist: Duplicate file entry at line 526: 1299537039.M676050P61136.gromit.example.com,S=2485,W=2534 (uid 8 -> 1082) Mar 8 06:31:37 gromit dovecot[59204]: imap(pid 68971 user user114): Warning: /Volumes/Mail/user114/dovecot-uidlist: Duplicate file entry at line 667: 1299564058.M124508P40871.gromit.example.com,S=1187940,W=1207707 (uid 229 -> 780) - retrying by re-reading from beginning Mar 8 06:32:14 gromit dovecot[59204]: imap(pid 68971 user user114): Warning: Maildir /Volumes/Mail/user114: Expunged message reappeared, giving a new UID (old uid=229, file=1299564058.M124508P40871.gromit.example.com,S=1187940,W=1207707:2,S) Mar 8 06:39:22 gromit dovecot[59204]: imap(pid 68911 user user105): Warning: Maildir /Volumes/Mail/user105: Synchronization took 155 seconds (0 new msgs, 0 flag change attempts, 585 expunge attempts) Is there anything I need to reconfigure to prevent these? Thanks.

2 11

[Dovecot] rkhunter alert dovecot using port 1984
by Mark Adams 16 Mar '11

16 Mar '11

Hi all, Debian Lenny, dovecot 1.0.15 My rkhunter script has picked up dovecot using port 1984 temporarily. When I run it now however, it is gone. Warning: Network TCP port 1984 is being used by /usr/lib/dovecot/imap. Possible rootkit: Fuckit Rootkit Use the 'lsof -i' or 'netstat -an' command to check this. Does dovecot use this port for any reason? anyone seen this before? Regards, Mark

3 4

[Dovecot] Dict spams in my Log-File
by Jan Phillip Greimann 16 Mar '11

16 Mar '11

Hi there, i use dovecot 2.0.9 with mysql as backend. I've also configured dict to mysql, but after some time dict spams in my log-file, i don't know why. Hope someone can help me with this. Greetings from Germany Jan P. Greimann ==== mail.log ==== [...] Mar 16 10:29:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:31:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:33:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:35:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:35:45 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:37:36 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:39:36 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:41:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:43:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:45:36 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:47:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:49:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:51:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:53:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) [...] ==== dovecot.conf ==== listen = * dict { quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } !include conf.d/*.conf ==== conf.d/90-quota.conf ==== plugin { quota = dict:User quota::proxy::quota }

2 1

[Dovecot] Error: write(auth socket) failed: Broken pipe
by Andre Nathan 16 Mar '11

16 Mar '11

Hello >From time to time I'm seeing errors like this in my logs: Mar 16 10:45:55 box5 dovecot: lmtp(5438): Error: write(auth socket) failed: Broken pipe This causes delivery from postfix to fail until I restart dovecot. There doesn't seem to be any other messages in the logs related to this error. Has anyone ever seen this error? Thanks Andre

3 2

[Dovecot] 2.0.7 - missing SORT/THREAD
by Rick Romero 15 Mar '11

15 Mar '11

Obviously I did something wrong, but I don't have SORT and THREAD Capabilities built into my 2.0.7 server (OpenSolaris 5.11 snv_134 i86pc i386 i86xpv Solaris) What do I need to do? * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] VFEmail.net ready. 1 CAPABILITY * CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5 1 OK Capability completed. # 2.0.7: /usr/local/etc/dovecot/dovecot.conf # OS: SunOS 5.11 i86pc auth_mechanisms = plain login digest-md5 cram-md5 auth_username_translation = %@ auth_verbose = yes base_dir = /opt/csw/dovecot/ default_login_user = dovecot disable_plaintext_auth = no first_valid_gid = 89 first_valid_uid = 89 last_valid_gid = 89 last_valid_uid = 89 login_greeting = VFEmail.net ready. mail_fsync = never mail_plugins = " quota zlib" mail_privileged_group = mail namespace { inbox = yes location = prefix = separator = . } namespace { hidden = yes inbox = no list = no location = prefix = INBOX. separator = . } passdb { driver = vpopmail } plugin { quota = maildir } protocols = imap pop3 service anvil { client_limit = 2000 } service auth { unix_listener auth-master { mode = 0600 user = vpopmail } user = vpopmail } service imap-login { client_limit = 384 process_limit = 512 process_min_avail = 25 service_count = 0 vsz_limit = 256 B } service imap-postlogin { executable = script-login /usr/local/etc/dovecot/lastauth-imap.sh user = vpopmail } service imap { executable = /usr/local/libexec/dovecot/rawlog /usr/local/libexec/dovecot/imap imap-postlogin } service pop-postlogin { executable = script-login /usr/local/etc/dovecot/lastauth-pop.sh user = vpopmail } service pop3-login { client_limit = 384 process_limit = 512 process_min_avail = 25 service_count = 0 vsz_limit = 256 B } service pop3 { executable = /usr/local/libexec/dovecot/rawlog /usr/local/libexec/dovecot/pop3 pop-postlogin } shutdown_clients = no ssl_cert = </etc/ssl/ssl.pem ssl_key = </etc/ssl/ssl.key userdb { driver = vpopmail } verbose_proctitle = yes protocol imap { auth_socket_path = /opt/csw/dovecot/auth-master imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_max_userip_connections = 25 mail_plugins = " quota zlib imap_zlib quota imap_quota" } protocol pop3 { auth_socket_path = /opt/csw/dovecot/auth-master mail_max_userip_connections = 25 mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } End of Configure: Install prefix . : /usr/local File offsets ... : 64bit I/O polling .... : poll I/O notifys .... : none SSL ............ : yes (OpenSSL) GSSAPI ......... : no passdbs ........ : static passwd passwd-file shadow pam checkpassword vpopmail : -bsdauth -sia -ldap -sql userdbs ........ : static prefetch passwd passwd-file checkpassword vpopmail : -ldap -sql -nss SQL drivers .... : : -pgsql -mysql -sqlite

2 2

[Dovecot] Duplicate suppression
by Thiago Henrique 15 Mar '11

15 Mar '11

Hello, In a Dovecot 2.0.6 server I have an account x@domain and an alias y@domain -> x@domain. When I send an email to x@domain with carbon copy to y@domain, X receives two messages on mailbox. Dovecot2 has any feature of duplicate suppression ? Thanks, Thiago Henrique

4 3

[Dovecot] LDA, postfix and multiple virtual users : postfix is still the MDA
by Antoine Souques 14 Mar '11

14 Mar '11

Hi, I have some trouble to use dovecot as MDA. I followed the instructions in http://wiki.dovecot.org/LDA and http://wiki.dovecot.org/LDA/Postfix I have multiple virtual users, stored in a LDAP server, and it look like postfix is still delivering the mails directly to the maildirs. Dovecot version : 1.2.15 (using the 1:1.2.15-4 squeeze packets) postfix version : 2.7.1 (using the 2.7.1-1 squeeze packet) dovecot configuration (dovecot -n): # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0 ext3 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_process_per_connection: no login_processes_count: 4 login_max_processes_count: 512 login_max_connections: 1024 mail_privileged_group: mail mail_location: maildir:/var/mail/%u mail_debug: yes mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 imap_capability(default): IMAP4rev1 SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ CHILDREN NAMESPACE LOGIN-REFERRAL imap_capability(imap): IMAP4rev1 SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ CHILDREN NAMESPACE LOGIN-REFERRAL imap_capability(pop3): lda: postmaster_address: postmaster(a)test.ecp.fr hostname: squeeze.test.ecp.fr sendmail_path: /usr/lib/sendmail auth_socket_path: /var/run/dovecot/auth-master auth default: passdb: driver: pam args: dovecot userdb: driver: passwd socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: mail postfix configuration (postconf -n) append_dot_mydomain = no biff = no bounce_queue_lifetime = 1d command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/lib/postfix mail_spool_directory = /var/mail/ message_size_limit = 10240000 myhostname = squeeze.test.ecp.fr mynetworks = 138.195.32.0/23, 127.0.0.1 recipient_delimiter = + setgid_group = postdrop smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) smtpd_client_restrictions = permit_mynetworks, reject smtpd_helo_required = yes smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination smtpd_sender_restrictions = reject_unknown_sender_domain, permit virtual_alias_maps = ldap:ldapxforward,ldap:ldapforward,ldap:ldapvalias virtual_mailbox_domains = test.ecp.fr virtual_mailbox_maps = ldap:ldapcanonical virtual_transport = dovecot /etc/postfix/master.cf dovecot unix - n n - - pipe flags=DRhu user=mail:mail argv=/usr/lib/dovecot/deliver -d ${recipient} Sample from the logs Mar 14 13:22:59 squeeze postfix/pickup[17376]: A93DE49A55: uid=0 from=<root> Mar 14 13:22:59 squeeze postfix/cleanup[17543]: A93DE49A55: message-id=<20110314122259.A93DE49A55(a)squeeze.test.ecp.fr> Mar 14 13:22:59 squeeze postfix/qmgr[16038]: A93DE49A55: from=<root(a)squeeze.test.ecp.fr>, size=381, nrcpt=1 (queue active) Mar 14 13:22:59 squeeze postfix/local[17547]: A93DE49A55: to=<etutest(a)squeeze.test.ecp.fr>, orig_to=<etudiant.test(a)test.ecp.fr>, relay=local, delay=0.07, delays=0.04/0.01/0/0.02, dsn=2.0.0, status=sent (delivered to maildir) Mar 14 13:22:59 squeeze postfix/qmgr[16038]: A93DE49A55: removed During the mail delivery, I doesn't have any log from dovecot, and i didn't have set the bit_suid/sudo, so the deliver process can't deliver the mail to the maildir. Have someone any idea about what i did wrong ? -- Antoine SOouques

4 5

[Dovecot] Problems with dovecot 2.0, sieve and mdbox
by Patrick Westenberg 13 Mar '11

13 Mar '11

Hi guys, I tried to use a global sieve skript to sort spam mails into a subfolder of INBOX. I´m using mdbox. The log shows that the script is called and executed but it is not able to find or create the mailbox: Sep 4 15:18:55 mercury dovecot: lmtp(6237, mail(a)steulerfliesen.de) Debug: Namespace : Permission lookup failed from /var/mail/steulerfliesen.de/mail/mdbox/mailboxes/Spamverdacht Sep 4 15:18:55 mercury dovecot: lmtp(6237, mail(a)steulerfliesen.de) Debug: Namespace : Using permissions from /var/mail/steulerfliesen.de/mail/mdbox: mode=0700 gid=-1 Sep 4 15:22:37 mercury dovecot: lmtp(6261, mail(a)steulerfliesen.de) Debug: Namespace : Permission lookup failed from /var/mail/steulerfliesen.de/mail/mdbox/mailboxes/INBOX.Spamverdacht Sep 4 15:22:37 mercury dovecot: lmtp(6261, mail(a)steulerfliesen.de) Debug: Namespace : Using permissions from /var/mail/steulerfliesen.de/mail/mdbox: mode=0700 gid=-1 My skript looks like this: require "fileinto"; if header :contains "X-Spam-Flag" "YES" { fileinto "Spamverdacht"; } I also tried: require "fileinto"; if header :contains "X-Spam-Flag" "YES" { fileinto "INBOX.Spamverdacht"; } How can I fix this? Regards Patrick

5 7

[Dovecot] Patch proposition to implement a new workaround: tb-lsub-flags
by Bruno Tréguier 12 Mar '11

12 Mar '11

Hi again Timo, As agreed earlier tonight, you'll find as attachments 4 diffs (diff -u) implementing the new workaround "tb-lsub-flags". The 4 impacted files are: ./src/imap/imap-settings.h ./src/imap/imap-settings.c ./src/imap/cmd-list.c ./src/config/all-settings.c Here is the proposed description for the dovecot.conf file: # tb-lsub-flags: # Usually IMAP servers don't bother returning the flags attached # to each mailbox, but Thunderbird presently needs them in order # to correctly process the "folders of folders" case. Please tell me if the patch format is suitable or if you expect something else. Best regards and thanks again for your responsiveness. Bruno -- - Service Hydrographique et Oceanographique de la Marine - DO/MGS/INF - 13, rue du Chatellier - CS 92803 - 29228 Brest Cedex 2, FRANCE - Phone: +33 2 98 22 17 49 - Email: Bruno.Treguier(a)shom.fr

2 2

[Dovecot] Filtering attachements ?
by Frank Bonnet 12 Mar '11

12 Mar '11

Hello again Is there a way to filter some attachments with dovecot ? I don't want my users to keep video files in the IMAP folders anymore ( disk is almost full ) . Thank you.

4 3

[Dovecot] SASL abort causes 5s delay, triggered by UW libc-client
by Arne Nordmark 12 Mar '11

12 Mar '11

Since upgrding to Debian squeeze, the web mail system (Imp4/Horde3) suffers delays every time a new IMAP connection is needed. Tracing the authentication conversation, we find: 08:45:55.270609: 00000000 AUTHENTICATE GSSAPI 08:45:55.271277: + 08:45:55.271761: * 08:45:55.271782: 00000000 BAD Authentication aborted by client. 08:45:55.271815: 00000001 AUTHENTICATE PLAIN 08:46:00.271008: + and the PLAIN login succeeds. Imp4 is using php5-imap which is using libc-client, and the delays makes the interface so slow to hardly usable. For reasons best known to its authors, libc-client first initiates GSSAPI authentication, then checks if there is a Kerberos ticket it can use (there is none), then realizes its mistake and aborts SASL, and tries PLAIN. At this point dovecot delays for 5000ms. While not defending libs-client's odd behaviour of not checking for tickets first, it has probably done so for a long time, and dovecot from Debian lenny does not delay at this point. I am lost as how to get around this without changing the code. The "nodelay" parameter can not be used with PAM passdb, according to the documentation. I would be inclined to call always call client_auth_failed with nodelay=TRUE in the SASL_SERVER_REPLY_AUTH_ABORTED case. Arne Nordmark Config: # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0 ext3 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap listen: *, [::] ssl_ca_file: /etc/ssl/certs/mechca_cert.pem ssl_cert_file: /etc/ssl/certs/ano4/ano4_crt.pem ssl_key_file: /etc/ssl/certs/ano4/ano4_key.pem login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mail_location: maildir:/var/mail/maildir/%u mbox_write_locks: fcntl dotlock lda: postmaster_address: postmaster(a)ano.mech.kth.se mail_plugins: sieve auth default: mechanisms: plain gssapi failure_delay: 0 debug: yes passdb: driver: pam userdb: driver: passwd socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: root plugin: sieve: ~/.dovecot.sieve sieve_dir: ~/sieve

2 1

[Dovecot] Dovecot 2.X, built from source, no extensions?
by Enright, Mike 10 Mar '11

10 Mar '11

Greetings list. Pardon the ignorance. I am working on CentOS 5.2. Unfortunately the repo version of Dovecot is 1.0.X. This works fine mind you but it doesn't have ORDEREDSUBJECT Threading support, which I need. I downloaded 2.0.11 and built from source, but now I don't see any Threading support, not even REFERENCES. I looked to see if I was missing a ./configure option but if I am, it has eluded me. Any guidance would be appreciated. # dovecot -n # 2.0.11: /usr/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-92.1.18.el5PAE i686 CentOS release 5.2 (Final) ext3 auth_mechanisms = plain login disable_plaintext_auth = no mail_location = maildir:/var/vmail/%d/%n/Maildir passdb { args = /usr/etc/dovecot/dovecot-mysql.conf driver = sql } plugin/quota = maildir:storage=10240:messages=1000 protocols = imap service auth { unix_listener /var/run/dovecot/auth-master { mode = 0600 user = vmail } user = root } service imap-login { client_limit = 256 process_min_avail = 10 service_count = 0 vsz_limit = 128 M } ssl = no userdb { args = uid=6000 gid=6000 home=/var/vmail/%d/%n allow_any_users=yes driver = static } # telnet localhost imap Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready. 1 capability * CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN 1 OK Capability completed. Cheers Mike Enright Senior Software Engineer Office: +1 239-425-9161 (Florida) Fax: +1 239-425-6845 [cid:C388744A-AA0D-4A0C-A96D-3038C56EC9E5] Interop Technologies 13500 Powers Court Fort Myers, FL 33912 www.interoptechnologies.com<http://www.interoptechnologies.com/>

3 3

[Dovecot] permission recomendation for dovecot configuration files and binaries
by Arkadiusz Miskiewicz 10 Mar '11

10 Mar '11

I'm trying to figure out which permissions will be the best to handle most of tasks (for use in rpm package) for configuration files. Basically /etc/dovecot/ dir /etc/dovecot/* files /etc/dovecot/conf.d/ dir /etc/dovecot/conf.d/files dovecot binaries, deliver mainly For example deliver needs to read configuration files and needs to write into destination. Doesn't seem to be sane to allow MTA user read dovecot configs but that is requires for deliver to work etc. Are there any sane/tested recommendations that would fit most situations (remember, that's going to be rpm package default config) ? -- Arkadiusz Miśkiewicz PLD/Linux Team arekm / maven.pl http://ftp.pld-linux.org/

1 0

[Dovecot] Dovecot 2.0 - size of the mailbox
by Cristiane França 10 Mar '11

10 Mar '11

Hi, The Dovecot 2.0 has some limit size for the mailbox? The server is 64 bits and would like to have mailbox with bigger size that 2 GB.

2 1

Re: [Dovecot] POP3 error
by Thierry de Montaudry 10 Mar '11

10 Mar '11

On 08 Mar 2011, at 13:24, Chris Wilson wrote: > Hi Thierry, > > On Tue, 8 Mar 2011, Thierry de Montaudry wrote: >> On 07 Mar 2011, at 19:15, Timo Sirainen wrote: >>> On Mon, 2011-03-07 at 19:03 +0200, Thierry de Montaudry wrote: >>>>>>>>> Mar 7 11:19:51 xxx dovecot: pop3-login: Error: net_connect_unix(pop3) failed: Resource temporarily unavailable >>>>> .. >>>> As it is happening at least once a day, is there anything I can do to >>>> trace it? and whatever I'll do, will it slow down those machines? >>> >>> Set verbose_proctitle=yes (won't slow down) and get list of all >>> Dovecot processes when it happens. And check how much user and system >>> CPU it's using and what the load is. >> >> Got the same problem this morning, here is the CPU usage and ps aux for >> dovecot. plus the different error I could pick up in the log, most of >> them are repeated a couple of times. >> >> I suspect it a problem with system resources, but can find any message >> to tell me what. Mail are stored on 17 NFS servers (CentOS), plus 3 >> servers for indexes only. >> >> CPU load is very high, but mainly from httpd running our webmail >> interface, which uses the local imap server. > [...] >> top - 11:10:14 up 14 days, 12:04, 2 users, load average: 55.04, 29.13, 14.55 >> Tasks: 474 total, 60 running, 414 sleeping, 0 stopped, 0 zombie >> Cpu(s): 99.6%us, 0.3%sy, 0.0%ni, 0.0%id, 0.0%wa, 0.0%hi, 0.1%si, 0.0%st >> Mem: 16439812k total, 16353268k used, 86544k free, 33268k buffers >> Swap: 4192956k total, 140k used, 4192816k free, 8228744k cached > > You're lucky this server is still alive and that you could even run top > and ps on it. > > There's nothing to debug in dovecot here. Your server is overloaded by > about 55 times. Buy 55 times as many servers or do something about your > webmail interface (maybe a separate webmail cluster). > > Cheers, Chris. > As you can see the numbers (55.04, 29.13, 14.55) the load was busy getting higher when I took this snapshot and this was not a normal situation. Usually this machine's load is only between 1 and 4, which is quite ok for a quad core. It only happens when dovecot start generating errors, and pop3, imap and http get stuck. It went up to 200, and I was still able to stop web and mail daemons, then restart them, and everything was back to normal.

7 20

[Dovecot] Dovecot + Sieve does not work
by Jimmi 10 Mar '11

10 Mar '11

Hi, On my Debian Squeeze server I installed Dovecot 1.2.16 from http://xi.rename-it.nl/debian/ and configured as follow: # dovecot -n # 1.2.16: /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-110209 i686 Debian 6.0 ext3 log_path: /var/log/dovecot.log log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap sieve disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login first_valid_uid: 100 mail_privileged_group: postfix mail_location: maildir:/home/virtual/%d/%n mbox_write_locks: fcntl dotlock imap_client_workarounds: outlook-idle lda: postmaster_address: postmaster(a)7girello.net mail_plugins: sieve log_path: /var/log/dovecot-deliver.log info_log_path: /var/log/dovecot-deliver.log auth default: mechanisms: plain login user: postfix passdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf userdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: virtual group: virtual plugin: sieve: /home/virtual/%d/%n/.dovecot.sieve sieve_dir: /home/virtual/%d/%n/sieve/ After that in Roundcube 0.5.1 downloaded from http://roundcube.net/ I enabled the managesieve plugin but when I go to the filter page RC says that he cannot connect the server. I then realized that the port 4190 is not open and I cannot understand why. In my dovecot.conf I have the section: protocol managesieve { # Specify an alternative address:port the daemon must listen on # (default: *:2000) listen = localhost:4190 } that is not shown in the output of 'dovecot -n'. Did I missed something? Thanks in advance -- jimmi

3 6

[Dovecot] Dovecot LDA and Postfix/local for local users.
by iti＠promax.media.pl 10 Mar '11

10 Mar '11

Hello, I would like to configure dovecot lda for local users. My dovecot vesion is 1.2.15. Dovecot documentation for System users says that only thing I should add to main.cf is: mailbox_command = /usr/local/libexec/dovecot/deliver (path to deliver) After that should I commented postfix/local process from master cf ? regards, Jarek

3 3

[Dovecot] Fatal: postmaster_address setting not given
by Richard Edmonds 09 Mar '11

09 Mar '11

Hi, I'm getting: "Fatal: postmaster_address setting not given" errors in my log file dovecot ver: 1.2.12 Recently I tried to follow: http://postfixmail.com/blog/index.php/postfixadmin-on-ubuntu-9-10/ on ubuntu 10.10 (which works fine on ubunto 9.10) I note that in 10.10 their is no dovecot-postfix.conf so I made the appropriate changes to dovecot.conf instead and changed master.cf dovecot transport line since I saw someone recently had the same problem: dovecot unix - n n - - pipe flags=DRhu user=vmail:mail argv=/usr/lib/dovecot/deliver -c /etc/dovecot/dovecot.conf -f ${sender} -d ${recipient} I still have that problem however. Authentication seems ok but delivery fails. Any possibility of help on this one? vecot unix - n n - - pipe flags=DRhu user=vmail:mail argv=/usr/lib/dovecot/deliver -c /etc/dovecot/dovecot.conf -f ${sender} -d ${recipient} I still have that problem however. Authentication seems ok but delivery fails. Any possibility of help on this one? </body> </html>

2 2

[Dovecot] ID command bug & patch
by Mike Abbott 09 Mar '11

09 Mar '11

When I set imap_id_log=* in dovecot-2.0.11 and a client sends, say, tag id ("a" "b" "c" "d") then dovecot logs: ID sent: a=b, b=c, c=d The following patch makes it log instead: ID sent: a=b, c=d --- a/dovecot/src/lib-imap/imap-id.c (revision 113366) +++ b/dovecot/src/lib-imap/imap-id.c (working copy) @@ -164,6 +164,7 @@ str_append_c(reply, '='); str_append(reply, str_sanitize(value, 80)); } + args++; } return str_len(reply) == 0 ? NULL : str_c(reply); }

2 1

Re: [Dovecot] auth on tcp socket?
by Hajo Locke 09 Mar '11

09 Mar '11

Hello, > You should read Wietses post again. > > He told you to not rely on not documented settings since they can > silently disappear. > > With postfix you can rely on the documented behaviour. So it is > natural that there will be no warning for officially unsupported > features. > yes, i know that. nobody should use undocumented features. auth-service on tcp-socket was added by timo after my Suggestion last november. so when asking this on postfix's-side iam not really interested in current docs but wanted to suggest the update on implemention and docs to get it as official feature for next releases. as an user all i can do is telling some facts and ask... Hajo

2 1

[Dovecot] compressed mailboxes ?
by Frank Bonnet 09 Mar '11

09 Mar '11

Hello Is it possible to use compressed mailboxes ( MBOX format ) with dovecot using a plugin ? Thanks

3 4

Re: [Dovecot] compressed mailboxes ?
by Stan Hoeppner 09 Mar '11

09 Mar '11

Frank Bonnet put forth on 3/8/2011 2:07 PM: > disk space I need to gain a bit space > before migrate to the new server After you shut down the Dovecot daemons in preparation for copying the mailbox files to the new sever, simply delete all the index directories. That will free up a huge amount of space. The indexes will be automatically rebuilt when users log into the new server. -- Stan > Le 08/03/2011 17:39, Stan Hoeppner a écrit : >> Frank Bonnet put forth on 3/8/2011 9:54 AM: >>> Hello >>> >>> Is it possible to use compressed mailboxes ( MBOX format ) >>> with dovecot using a plugin ? >> >> What is your motivation? >>

2 1

[Dovecot] Interesting tool for debugging IMAP sessions
by Charles Marcus 08 Mar '11

08 Mar '11

For anyone who is interested: http://www.aboutmyip.com/AboutMyXApp/ImapProxy.jsp They also have one for troubleshooting smtp (smtpProxy)... -- Best regards, Charles

1 0

Re: [Dovecot] auth on tcp socket?
by Hajo Locke 08 Mar '11

08 Mar '11

Hello, sorry, iam digest reader, always creating a new message... > > > there are some warnings in log: > > > "when SASL type is "dovecot", SASL path "inet:localhost:1434" should > > > be a > > > socket pathname" > > > ( Datei src/xsasl/xsasl_dovecot_server.c ) > > > > file xsasl_dovecot_server.c is in postfix sources but was written by > > you, > > Timo > The initial version, yes, but it has been heavily modified since. I > never added that warning. > > Should there also made an update to support auth on tcp-socket without > > warnings from postfix side? > Looks like someone already added the inet: support, so I guess it should > work. You could ask on Postfix list to get the warning removed.. wietse dont wants to change anything until it is not documented http://archives.neohapsis.com/archives/postfix/2011-03/0356.html may be the developers should talk directly to each other, i dont like to get forwarded to each other list to ask for reliability of features... Thanks, Hajo

2 1

Re: [Dovecot] Multiple Concurrent IMAP Connections For Same User
by Stan Hoeppner 08 Mar '11

08 Mar '11

Knute Johnson put forth on 3/5/2011 8:36 PM: > On 03/05/2011 12:24 PM, Stan Hoeppner wrote: >> Stan Hoeppner put forth on 3/5/2011 1:34 PM: >> Also, did you delete the sync copies and the GLODA sqlite index file >> from the user profile? IIRC, TB will still read the files if they >> exist, even after disabling their parent function. TB just won't write >> to them any more. Yes, it's stupid, I agree. But I recall running into >> this problem and needing to delete all the cached mbox files and the >> sqlite db to get everything working correctly. >> >> Specifically answering your "change" question, the one big difference >> between TB 3 and TB 2 is GLODA, and there have been a large number of >> problems with it. I noticed some of them on day one and disabled it. >> >> I use both TB and RoundCube. With both open, I can delete a group of >> messages in RC in an IMAP subfolder and the messages automatically >> disappear from my TB view in about 5 seconds, and remain gone. I just >> performed a test deleting a group of 8 messages via RC in an IMAP >> subfolder containing list mail from linux-ide. It works fine the other >> way around as well, though I must manually refresh RC as it's a >> stateless web app. I just deleted 6 messages in TB, and simply clicking >> the folder in RC showed the messages were gone. Deleting a message via >> RC in INBOX required punching the Get Mail button in TB to reveal the >> message had been deleted. Not sure why the INBOX case required a manual >> refresh. The messages are all is still gone, after closing and opening >> TB again. >> >> I don't recall ever having the problem you describe, using TB 3.0 >> through TB 3.1.9, and Dovecot 1.0.15 through 1.2.15. My point is that >> TB and Dovecot can be configured properly to eliminate this problem >> you're having. > > Thanks very much for this post as I have been having the same problems > with TB and my phone. I did the things you posted but when I delete a > message on my phone it doesn't always get deleted in TB. Sometimes it > disappears right a way and other times it never goes but it is better > than before when it would never delete on TB. If you're not doing local sync with TB and you have GLODA disabled, TB is going to show you exactly what's in your Dovecot mailbox. If the message doesn't disappear from your TB view sometime after deleting it on your smartphone, then I'd say it's very likely that Dovecot didn't receive the delete and/or expunge command from the phone. Check your Dovecot logs and see what the phone is actually sending, or not sending. Both of you mentioned problems specifically WRT smartphones. It's likely the IMAP implementation in these phones is simply buggy, or your network coverage is spotty. I don't use a smartphone so I can't really say. What smartphone are you each using? -- Stan

10 17

[Dovecot] logging sent messages
by Hajo Locke 08 Mar '11

08 Mar '11

Hello, i use plugin mail_log to see more activities like copy/delete/expunge caused by imap-users. unfortunately there is no log-line when a mail was sent and the copy was uploaded to "Sent-Folder". Isn't it a common imap-copy operation requested by client? How to log this? Thanks, Hajo

2 1

[Dovecot] Curious problem: Plaintext authentication disallowed on non-secure (SSL/TLS) [read: all] connections.
by Andrew Lewis 08 Mar '11

08 Mar '11

Hello all, I've set up a new instance of dovecot 2.0.9 to use as a POP3/IMAP proxy. On trying to login I am told '-ERR Plaintext authentication disallowed on non-secure (SSL/TLS) connections'. I have set 'disable_plaintext_auth = no' (see output of doveconf attached). More curious still is that *this happens for SSL connections too*. Something seems very wrong here. Yelp? -- Andrew Lewis <andrew(a)sybaweb.com> ______________________________________ < Uncompensated overtime? Just Say No. > -------------------------------------- \ ^__^ \ (oo)\_______ (__)\ )\/\ ||----w | || ||

1 1

[Dovecot] POP3 error
by Thierry de Montaudry 08 Mar '11

08 Mar '11

Hi, Since we upgraded to 2.0.9 (from 1.10 stock CentOS release), we are getting some errors with pop3. When the machines get busy, now and then it start with the following: > Mar 7 11:19:51 xxx dovecot: pop3-login: Error: net_connect_unix(pop3) failed: Resource temporarily unavailable And it generates hundreds of those before the machines dies, with the web server getting stuck as well on imap sessions, even though there is no imap error messages. I tried to lookup in the source where this is generated, but couldn't find it. Is it some resource limit on the machine? Please see bellow the dovecot -n output. Regards, Thierry # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.32.1.el5 x86_64 CentOS release 5.5 (Final) nfs auth_cache_negative_ttl = 0 auth_cache_size = 2 M auth_cache_ttl = 10 mins auth_mechanisms = plain login dict { expire = mysql:/etc/dovecot/dovecot-dict-expire.conf.ext quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no first_valid_uid = 25 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_access_groups = vmail mail_fsync = always mail_gid = 25 mail_location = maildir:/var/virtual/%d/%1n/%2n/%n:INDEX=/var/indexes/%d/%1n/%2n/%n mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = quota expire mail_uid = 25 mbox_write_locks = fcntl mmap_disable = yes passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { expire = Trash expire2 = Trash/* expire3 = Spam expire4 = Trash/* expire_dict = proxy::expire quota = dict:User quota::proxy::quota quota_rule = *:storage=2G quota_rule2 = Trash:storage=+100M sieve_global_path = /var/indexes/dovecot-default.sieve } postmaster_address = postmaster(a)XXXXXX.YY protocols = imap pop3 service auth { unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service dict { unix_listener dict { group = vmail mode = 0600 user = vmail } } service imap-login { inet_listener imap { address = 127.0.0.1 port = 143 } process_min_avail = 2 service_count = 0 vsz_limit = 256 M } service imap { process_limit = 768 } service pop3-login { inet_listener pop3 { address = 0.0.0.0 port = 110 } process_limit = 200 process_min_avail = 2 service_count = 0 } service pop3 { process_limit = 256 } ssl = no ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } userdb { args = uid=vmail gid=vmail driver = static } protocol lmtp { mail_plugins = quota expire sieve } protocol lda { mail_plugins = quota expire sieve } protocol imap { mail_plugins = quota expire imap_quota } protocol pop3 { mail_max_userip_connections = 2 pop3_fast_size_lookups = yes }

2 6

[Dovecot] Unable to view all folders
by Joy 08 Mar '11

08 Mar '11

Dear All, I have upgraded dovecot to v2.0.11 and now having one issue, i am unable to see all my folders only Inbox and Trash are visible while autocreate creating 5 more folders. What could be the issue checked via telnet as well. Thanks

1 1

[Dovecot] upgrading from old version 1.1.2 to version 2.0.11
by dhottinger＠harrisonburg.k12.va.us 08 Mar '11

08 Mar '11

Im getting ready to upgrade our production server from version 1.1.2 to version 2.0.11. Ive read through the upgrade info. Is there any other gotcha's I should be aware of? thanks, ddh -- Dwayne Hottinger Network Administrator Harrisonburg City Public Schools "Everything should be made as simple as possible, but not simpler." -- Albert Einstein "The hottest places in Hell are reserved for those who, in times of moral crisis, preserved their neutrality." -- Dante

4 4

[Dovecot] STARTTLS MITM in Postfix
by Timo Sirainen 07 Mar '11

07 Mar '11

http://marc.info/?l=postfix-users&m=129952854117623&w=2 Dovecot doesn't have this bug. It discards all buffered data when STARTTLS command runs. (Why do I think I've heard about this bug before? Or at least the same type of way to exploit it? Maybe there was another similarly exploitable bug.)

1 1

[Dovecot] tls bug
by Robert Schetterer 07 Mar '11

07 Mar '11

Hi Timo is dovecot affected in this ? http://www.kb.cert.org/vuls/id/555316 -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

2 2

[Dovecot] Fwd: STARTTLS bug - background story
by Robert Schetterer 07 Mar '11

07 Mar '11

-------- Original-Nachricht -------- Betreff: STARTTLS bug - background story Datum: Mon, 7 Mar 2011 15:08:09 -0500 (EST) Von: Wietse Venema <wietse(a)porcupine.org> An: Postfix users <postfix-users(a)postfix.org> CERT/CC announces a flaw today in multiple STARTTLS implementations. This problem was silently fixed in Postfix 2.8 and 2.9. Updates for Postfix 2.[4-7] are made available via the usual channels. Wietse Plaintext injection in multiple implementations of STARTTLS =========================================================== This is a writeup about a flaw that I found recently, and that existed in multiple implementations of SMTP (Simple Mail Transfer Protocol) over TLS (Transport Layer Security) including my Postfix open source mailserver. I give an overview of the problem and its impact, technical background, how to find out if a server is affected, fixes, and draw lessons about where we can expect similar problems now or in the future. A time line is at the end. On-line information is/will be available at: http://www.kb.cert.org/vuls/id/555316 http://www.postfix.org/CVE-2011-0411.html Problem overview and impact =========================== The TLS protocol encrypts communication and protects it against modification by other parties. This protection exists only if a) software is free of flaws, and b) clients verify the server's TLS certificate, so that there can be no "man in the middle" (servers usually don't verify client certificates). The problem discussed in this writeup is caused by a software flaw. The flaw allows an attacker to inject client commands into an SMTP session during the unprotected plaintext SMTP protocol phase (more on that below), such that the server will execute those commands during the SMTP-over-TLS protocol phase when all communication is supposed to be protected. The injected commands could be used to steal the victim's email or SASL (Simple Authentication and Security Layer) username and password. This is not as big a problem as it may appear to be. The reason is that many SMTP client applications don't verify server TLS certificates. These SMTP clients are always vulnerable to command injection and other attacks. Their TLS sessions are only encrypted but not protected. A similar plaintext injection flaw may exist in the way SMTP clients handle SMTP-over-TLS server responses, but its impact is less interesting than the server-side flaw. SMTP is not the only protocol with a mid-session switch from plaintext to TLS. Other examples are POP3, IMAP, NNTP and FTP. Implementations of these protocols may be affected by the same flaw as discussed here. Technical background: SMTP over TLS =================================== For a precise description of SMTP over TLS, see RFC 3207, on-line at http://www.ietf.org/rfc/rfc3207.txt. SMTP over TLS uses the same TLS protocol that is also used to encrypt traffic between web clients and web servers. But, there is a subtle difference in the way TLS is used, and that makes this flaw possible. SMTP sessions over TLS begin with an SMTP protocol handshake in plaintext. Plaintext means no encryption (thus no privacy), and no protection against modification (no integrity). The plaintext handshake is needed because SMTP has always worked this way. Simply skipping this plaintext phase would seriously break internet email. During the plaintext handshake phase, the SMTP server announces whether it is willing to use TLS. If both SMTP client and server support TLS, the client sends a "STARTTLS" request to turn on TLS. Once TLS is turned on, all further traffic is encrypted and protected from modification. The client and server repeat the entire SMTP protocol handshake, and the client starts sending mail. Demonstration ============= The problem is easy to demonstrate with a one-line change to the OpenSSL s_client command source code (I would prefer scripting, but having to install Perl CPAN modules and all their dependencies is more work than downloading a .tar.gz file from openssl.org, adding eight characters to one line, and doing "./config; make"). (The OpenSSL s_client command can make a connection to servers that support straight TLS, SMTP over TLS, or a handful other protocols over TLS. The demonstration here focuses on SMTP over TLS only.) The demonstration with SMTP over TLS involves a one-line change in the OpenSSL s_client source code (with OpenSSL 1.0.0, at line 1129 of file apps/s_client.c). Old: BIO_printf(sbio,"STARTTLS\r\n"); New: BIO_printf(sbio,"STARTTLS\r\nRSET\r\n"); With this change, the s_client command sends the plaintext STARTTLS command ("let's turn on TLS") immediately followed by an RSET command (a relatively harmless protocol "reset"). Both commands are sent as plaintext in the same TCP/IP packet, and arrive together at the server. The "\r\n" are the carriage-return and newline characters; these are necessary to terminate an SMTP command. When an SMTP server has the plaintext injection flaw, it reads the STARTTLS command first, switches to SMTP-over-TLS mode, and only then the server reads the RSET command. Note, the RSET command was transmitted during the plaintext SMTP phase when there is no protection, but the server reads the command as if it was received over the TLS-protected channel. Thus, when the SMTP server has the flaw, the s_client command output will show two "250" SMTP server responses instead of one. The first "250" response is normal, and is present even when the server is not flawed. The second "250" response is for the RSET command, and indicates that the SMTP server has the plaintext injection flaw. $ apps/openssl s_client -quiet -starttls smtp -connect server:port [some server TLS certificate details omitted] 250 some text here <=== Normal response, also with "good" server. 250 more text here <=== RSET response, only with flawed server. How would an attacker exploit this? It would play man-in-the-middle on the connection between SMTP client and server, perhaps using ARP spoofing at a public WIFI access point. Instead of adding a harmless RSET command, it could steal email or authentication credentials. Anatomy of the flaw =================== The flaw is made possible by two ingredients: I already discussed the switch mid-session from plaintext SMTP to SMTP over TLS. This allows an attacker to piggy-back commands onto the SMTP client's plaintext STARTTLS ("let's turn on TLS") request, such that the server may read those commands after the switch to TLS is completed, as if the commands arrived through the TLS-encrypted session. The second ingredient is a layered software architecture through which those piggy-backed commands bubble up from the network to the application. In the case of SMTP, we have the following major layers before and after the switch to TLS: Before switch to TLS After switch to TLS SMTP protocol engine SMTP protocol engine || || TCP/IP protocol engine TLS protocol engine || || Internet TCP/IP protocol engine || Internet Each layer hides details of what is happening inside. Layering makes it easy to switch from plaintext to TLS, with minimal changes to existing code. To insert the TLS layer between the SMTP engine and the O/S TCP/IP engine, simply adjust the plumbing between the layers, and make all information flow through the TLS layer. It's all about the plumbing =========================== Whether a program may have the plaintext injection flaw depends on how it adjusts the plumbing as it inserts the TLS protocol layer in-between the SMTP protocol layer and the O/S TCP/IP protocol layer. I illustrate this with examples from three open source MTAs: Postfix, Sendmail and Exim. The diagram below zooms in on the plumbing between the SMTP and TLS layers, and shows how different MTAs handle the switch from plaintext to TLS. It is best viewed with a fixed-width font (for example, from the Courier family). Postfix MTA Sendmail MTA Exim MTA before/after before/after before/after switch to TLS switch to TLS switch to TLS SMTP SMTP SMTP SMTP SMTP SMTP <= SMTP layer || || || || || || stream stream stream stream' || || buffers buffers buffers buffers' rw r'w' <= stream layer rw r'w' rw r'w' || || || || || || || || || TLS || TLS || TLS <= TLS layer || || || || || || O/S O/S O/S O/S O/S O/S <= TCP/IP layer As shown in the diagram, both Postfix and Sendmail use an application- level stream abstraction, where each stream has properties such as read/write buffers, read/write functions (indicated with rw), and other properties that are omitted for brevity. When Postfix switches to SMTP over TLS, it replaces the plaintext read/write functions (rw) with the TLS read/write functions (r'w'). Postfix does not modify any of the other stream properties including the read/write buffers. A patch for qmail that introduces TLS support uses the same approach. This approach of replacing only the stream read/write functions, but not the buffers or other stream properties, can introduce the plaintext injection flaw. When Sendmail switches to SMTP over TLS, it replaces the entire stream, along with its read/write buffers and read/write functions. Exim. on the other hand, does not have a stream abstraction like Postfix, Sendmail or qmail. Instead of replacing streams or stream properties, Exim replaces plaintext read/write functions with TLS read/write functions. Because of their program structure, Sendmail and Exim didn't suffer from the plaintext injection flaw. Switching world views ===================== When the switch from plaintext to TLS mode is made, all layers above the TLS layer need to purge all information that they have received through the plaintext session. This "world view switch" needs to be implemented consistently. Otherwise, information that was sent as unprotected plaintext may slip through the cracks. In the case of Postfix and other affected MTAs, this "world view switch" was incomplete. Postfix it did not account for information that lingered in stream buffers at the boundary between two layers. This allowed an attacker to piggy-back commands onto the plaintext "let's turn on TLS" request, such that the commands could be read after the switch to TLS was completed, as if they had arrived through the TLS-encrypted session. Fixing the problem ================== There are two solutions to address the flaw, and both solutions can be used together. - Report an error when unexpected plaintext is received after the STARTTLS command. As documented in RFC 3207, STARTTLS must be the last command in a pipelined group. If plaintext commands are received after STARTTLS, then that is a protocol violation. This measure can also be implemented outside the MTA, for example in a protocol-aware firewall. - If a program uses the same input buffer before and after the switch to TLS, it should discard the contents of the input buffer, just like it discards SMTP protocol information that it received during the plaintext protocol phase. Conclusion ========== This plaintext injection problem is likely to recur when some development moves the plaintext-to-ciphertext switch outside the application: for example, into the kernel, into the local hardware, into a proxy, or into other infrastructure. This encourages applications to use the same application-level streams and buffers and read/write functions before and after the switch to ciphertext. When this migration happens, plaintext injection becomes once more a possibility. Postfix did not reject plaintext commands that were piggy-backed onto the plaintext "let's turn on TLS" request. This reflects what once was the primary mission of Postfix: to deliver mail, not to force other systems to implement all the Internet RFCs correctly. Nowadays, strict protocol compliance is becoming a requirement for senders to get their email delivered. As this episode shows, stricter protocol enforcement by receivers can bring security benefits, besides blocking spambots. Time line ========= Jan 5 2011: While finishing Postfix for its annual release, I found this flaw in the server and client implementations of SMTP over TLS. It had been sitting there for six years ever since TLS support was adopted into Postfix. Not wanting to delay the release schedule, I silently fixed the problem and sent an email to co-developer Victor Duchovni. Jan 6-10 2011: As we investigated the scope of the problem, Victor discovered quickly that many other SMTP over TLS implementations were also affected. Among those affected were email service providers, email anti-spam/virus service providers, anti-spam/virus appliances, as well as other mail server implementations. It was clear that this problem's resolution was going to involve many organizations. Jan 11 2011: Contact CERT/CC to help coordinate with the problem's resolution. Mar 7 2011: Public announcement.

1 0

[Dovecot] POP3 with mdbox
by Patrick Domack 07 Mar '11

07 Mar '11

I converted all my box's over to mdbox, from maildir and ran into this issue, I knew exactly what it was and fixed it, but might want to log a config error or something for others to notice the issue. I was running with pop3_uidl_format = %f, and well, that doesn't work with mdbox very well, and when a user ran a UIDL command, it errored the user out. Simple fix, but would probably be nicer to log a config error when started dovecot instead.

1 0

[Dovecot] dovecot 1.2.3: TB fails to unsubscribe folder after deletion
by Max Dittrich 07 Mar '11

07 Mar '11

Hi, I'm running dovecot 1.2.3 with "imap_client_workarounds = tb-extra-mailbox-sep" and noticed that after deleting a folder (moving to Trash and emptying it on exit) that folder in Trash still keeps subscribed. I think the reason for that behavior is that the call for mailbox_list_set_subscribed() in imap/cmd-subscribe.c (line 84) is fed with the original mailbox name and not the stripped version in verify_name. Assigning verify_name to mailbox in the workaround-conditional fixes this issue for me. I'm not very familiar with C programming but while tracing cmd_subscribe_full() I stumbled upon another thing. In mail_namespace_find_mask() (lib-storage/mail-namespace.c at line 413) mailbox is reassigned with a local string (not t_strduped). I think this might be a problem when mailbox is dereferenced after returning from that function?! .max

3 10

[Dovecot] mdbox command line access howto request
by David Favor 07 Mar '11

07 Mar '11

Currently using Maildir in my config for 1.2.16 going to 2.0.11 and wondering about accessing files outside of dovecot. Many files require access by external programs. For example walking a list of receipt files from merchant processors verifying transaction amounts. This requires each file being read + parsed. With mdbox a file may contain multiple messages. Let me know the best command line tool to break mdbox files into a string of messages. Thanks. -- Love feeling your best ever, all day, every day? Click http://RadicalHealth.com for the easy way!

2 2

Re: [Dovecot] auth on tcp socket?
by Hajo Locke 07 Mar '11

07 Mar '11

Hello, > there are some warnings in log: > "when SASL type is "dovecot", SASL path "inet:localhost:1434" should be a > socket pathname" > ( Datei src/xsasl/xsasl_dovecot_server.c ) file xsasl_dovecot_server.c is in postfix sources but was written by you, Timo Should there also made an update to support auth on tcp-socket without warnings from postfix side? Thanks, Hajo

3 3

[Dovecot] Dovecot, Postfix and Dovecot LDA (LMTP) delivery
by Remy Zandwijk 07 Mar '11

07 Mar '11

Hi list, I am running a Debian Lenny machine with Postfix 2.5.5 and Dovecot 2.0.8. Up until now I ran Postfix with the Procmail delivery agent succesfully. The machine has only local users; I am not using virtual mailboxes. Due to obvious reasons I want to switch to Dovecot LDA delivery, through LMTP. I spend quite some time finding 'the' configuration for both Postfix and Dovecot, but without success. Find my current configuration below. Postfix receives the e-mail, but delivery through LMTP fails, resulting in Postfix sending an NDR. I just cannot figure out what's wrong and I am not sure whether it's a Postfix or Dovecot problem either. Some log output from Postfix: Mar 5 13:25:15 hostname postfix/smtpd[12442]: connect from otherhost.domain.tld[aa.bb.cc.dd] Mar 5 13:25:16 hostname postfix/smtpd[12442]: CC47979071: client=otherhost.domain.tld[aa.bb.cc.dd] Mar 5 13:25:16 hostname postfix/cleanup[12447]: CC47979071: message-id=<Pine.GSO.4.64.1103051324570.5319(a)otherhost.domain.tld> Mar 5 13:25:16 hostname postfix/qmgr[12372]: CC47979071: from=<remy(a)otherhost.domain.tld>, size=1037, nrcpt=1 (queue active) Mar 5 13:25:16 hostname postfix/smtpd[12442]: disconnect from otherhost.domain.tld[aa.bb.cc.dd] Mar 5 13:25:16 hostname postfix/lmtp[12448]: CC47979071: to=<remy(a)hostname.domain.tld>, relay=hostname.domain.tld[private/dovecot-lmtp], delay=1.2, delays=1.2/0.01/0.01/0.05, dsn=5.1.1, status=bounced (host hostname.domain.tld[private/dovecot-lmtp] said: 550 5.1.1 <remy(a)hostname.domain.tld> User doesn't exist: remy(a)hostname.domain.tld (in reply to RCPT TO command)) The only lines that Dovecot logs are: Mar 05 13:25:16 lmtp(12449): Info: Connect from local Mar 05 13:25:16 lmtp(12449): Info: Disconnect from local: Client quit Although LMTP should log to /tmp/dovecot-lmtp.log, the file remains empty. Anyone amongst you who is running the same kind of setup and can help? Thanks, Remy Postfix config (postfix -n output) alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no config_directory = /etc/postfix default_transport = smtp inet_interfaces = all local_transport = lmtp:unix:private/dovecot-lmtp mailbox_command = mailbox_size_limit = 0 message_size_limit = 31457280 mydestination = hostname.domain.tld, localhost.domain.tld, localhost myhostname = hostname.domain.tld mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 myorigin = /etc/mailname readme_directory = no recipient_delimiter = + relay_transport = error relayhost = smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) smtpd_client_restrictions = check_client_access hash:/etc/postfix/access, permit_sasl_authenticated, reject_rbl_client zen.spamhaus.org, reject_rbl_client dnsbl.sorbs.net,reject_unauth_pipelining smtpd_helo_required = yes smtpd_helo_restrictions = reject_invalid_helo_hostname,reject_non_fqdn_helo_hostname,reject_unknown_helo_hostname smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_recipient, reject_unauth_destination, reject_unknown_recipient_domain smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot smtpd_sender_restrictions = check_sender_access hash:/etc/postfix/access, reject_non_fqdn_sender, reject_unknown_sender_domain smtpd_tls_auth_only = yes smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_use_tls = yes Dovecot config (dovecot -n output) # 2.0.8: /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-amd64 x86_64 Debian 5.0.8 auth_master_user_separator = * listen = * log_path = /var/log/dovecot.log mail_location = maildir:~/.maildir maildir_stat_dirs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { hidden = no inbox = yes list = yes location = prefix = separator = / subscriptions = yes type = private } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap lmtp service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { info_log_path = /tmp/dovecot-lmtp-info.log log_path = /tmp/dovecot-lmtp.log } protocol imap { mail_plugins = }

2 3

[Dovecot] Dovecot 2.0 in Active-Standby configuration
by Yaron & Hani Nahum 07 Mar '11

07 Mar '11

Hi, I am planning to use Dovecot 2.0 as a Mail server for a Voicemail system. There is not much traffic so I am not concerend about scaling. However redudancy is an issue. I need to have two Dovecot servers installed on two different farms and setup HA between the two. I would prefer that the HA would be automatically. I have two different storage machines with SAN, and I can setup Layer 2 between the two farms. I am concerned with split brain scenario where the two farms are disconnected and both machines would become active. What cluster configuration would you recommend for such an enviroment?

1 0

[Dovecot] Problems with shared folders with Dovecot 1.2.12
by Pašek Ladislav 07 Mar '11

07 Mar '11

Hello, I'm trying to run shared folders with Dovecot 1.2.12. I'm managing ACLs from SOGo and it seemd that it successfully create dovecot-acl and dovecot-acl-list in user maildir. But I cannot see any of these shared folders. In Thunderbird I could see shared folder in Subscriptions but without option to subscribe. I was reading almost everything that was possible to google but without success. My config: [root@mail etc]# dovecot -n # 1.2.12: /etc/dovecot.conf # OS: Linux 2.6.18-194.32.1.el5 x86_64 CentOS release 5.5 (Final) xfs base_dir: /var/run/dovecot/ log_path: /var/log/dovecot/dovecot-deliver.log info_log_path: /var/log/dovecot/dovecot-deliver.log log_timestamp: "%b %d %H:%M:%S protocols: imap imaps managesieve listen(default): *:143 listen(imap): *:143 listen(managesieve): *:2000 ssl_listen(default): *:993 ssl_listen(imap): *:993 ssl_listen(managesieve): ssl_cert_file: /etc/pki/tls/private/mail.valbek.cz.crt ssl_key_file: /etc/pki/tls/private/privkey.key version_ignore: yes login_dir: /var/run/dovecot//login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(managesieve): /usr/libexec/dovecot/managesieve-login login_greeting: Welcome to Dovecot eMail Server. login_log_format: %$: %s %u login_process_size: 128 login_processes_count: 5 login_max_processes_count: 140 mail_max_userip_connections(default): 30 mail_max_userip_connections(imap): 30 mail_max_userip_connections(managesieve): 10 verbose_proctitle: yes first_valid_uid: 306 last_valid_uid: 306 first_valid_gid: 306 last_valid_gid: 306 mail_uid: vmail mail_gid: vmail mail_location: maildir:/mnt/pole/mail/valbek.cz/%u mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(managesieve): /usr/libexec/dovecot/managesieve mail_plugins(default): acl imap_acl mail_plugins(imap): acl imap_acl mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(managesieve): /usr/lib64/dovecot/managesieve imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(managesieve): managesieve_logout_format(default): bytes=%i/%o managesieve_logout_format(imap): bytes=%i/%o managesieve_logout_format(managesieve): bytes ( in=%i : out=%o ) namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: shared separator: / prefix: sdilene/%%u/ location: maildir:/mnt/pole/mail/valbek.cz/%%u:INDEX=/mnt/pole/mail/valbek.cz/%%u/sdilene/%%u list: children lda: postmaster_address: it(a)valbek.cz mail_plugins: sieve acl auth default: mechanisms: plain login passdb: driver: ldap args: /etc/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot-ldap.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: mail plugin: autocreate: Spam autocreate2: NoSpam autocreate3: Archiv sieve: /mnt/pole/mail/valbek.cz/%u/.dovecot.sieve sieve_storage: /mnt/pole/mail/valbek.cz/%u/sieve sieve_global_dir: /var/lib/dovecot/sieve/global/ fts: squat fts_squat: partial=4 full=10 acl: vfile acl_shared_dict: file:/var/lib/dovecot/shared-mailboxes.db >From log: "Mar 05 15:25:16imap-login: Info: Login: user=<pasek(a)valbek.cz>, method=PLAIN, rip=192.168.1.221, lip=192.168.1.254 "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: Loading modules from directory: /usr/lib64/dovecot/imap "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: Module loaded: /usr/lib64/dovecot/imap/lib01_acl_plugin.so "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: Module loaded: /usr/lib64/dovecot/imap/lib02_imap_acl_plugin.so "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: Effective uid=306, gid=306, home=(none) "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: Namespace: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: maildir: data=/mnt/pole/mail/valbek.cz/pasek(a)valbek.cz "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: maildir++: root=/mnt/pole/mail/valbek.cz/pasek(a)valbek.cz, index=, control=, inbox=/mnt/pole/mail/valbek.cz/pasek(a)valbek.cz "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: acl: initializing backend with data: vfile "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: acl: acl username = pasek(a)valbek.cz "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: acl: owner = 1 "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: acl vfile: Global ACL directory: (null) "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: Namespace: type=shared, prefix=sdilene/%u/, sep=/, inbox=no, hidden=no, list=children, subscriptions=no "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: shared: root=, index=, control=, inbox= "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: acl vfile: reading file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/dovecot-acl "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: Namespace : Using permissions from /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz: mode=0700 gid=-1 "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Trash/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Trash.TuX/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Sent/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Sent.Archiv/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Sent.Po&AWE-ta &AWA-vejda/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Spam/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.NoSpam/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: reading file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Prodex/dovecot-acl "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.dovecot/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: reading file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Autodesk/dovecot-acl "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.ebay/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Hesla/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: reading file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Intranet/dovecot-acl "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.&AX4-ivotopisy/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Archiv/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Archiv.RIB-Service/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Archiv.Po&AWE-ta &AWA-vejda/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Archiv.Osobn&AO0- po&AWE-ta/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.spr&AOE-va-IT/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Blbosti/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.V&AWA-B/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: reading file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.SCST/dovecot-acl "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.PPP-R1/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: reading file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.SOGo/dovecot-acl "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Nexenta/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.openldap/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Pron&AOE-jmy/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Drafts/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Archiv/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Nevy&AX4A4Q-dan&AOE- po&AWE-ta/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Odstran&ARs-n&AOE- po&AWE-ta/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Odeslan&AOE- po&AWE-ta/dovecot-acl not found Thanks in Advance Ladislav

2 1

[Dovecot] v2.0.11 released
by Timo Sirainen 07 Mar '11

07 Mar '11

http://dovecot.org/releases/2.0/dovecot-2.0.11.tar.gz http://dovecot.org/releases/2.0/dovecot-2.0.11.tar.gz.sig Looks like v2.0.10 was a bit troublesome release. I expect this one to last longer. * dotlock_use_excl setting's default was accidentally "no" in all v2.0.x releases, instead of "yes" as in v1.1 and v1.2. Changed it back to "yes". - v2.0.10: LDAP support was broken - v2.0.10: dsyncing to remote often hanged (timed out in 15 mins)

1 0

[Dovecot] OT auto delete attachments with sieve
by Robert Schetterer 07 Mar '11

07 Mar '11

Hi , off topic , but anyone with an idea how to autodelete attachments from mail with sieve, as far i investigated this , it can only be done indirectly perhaps per size etc, but there is no direct auto way, am i right here ? or someone has magic...? -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

1 0

[Dovecot] 2.0.10 Auth failed while binding ldap
by Stéphane Wartel 06 Mar '11

06 Mar '11

Everything is ok, Thanks Timo ;)

1 0

Re: [Dovecot] Multiple Concurrent IMAP Connections For Same User
by Knute Johnson 06 Mar '11

06 Mar '11

On 03/05/2011 07:45 PM, Stan Hoeppner wrote: > If you're not doing local sync with TB and you have GLODA disabled, > TB is going to show you exactly what's in your Dovecot mailbox. If > the message doesn't disappear from your TB view sometime after > deleting it on your smartphone, then I'd say it's very likely that > Dovecot didn't receive the delete and/or expunge command from the > phone. Check your Dovecot logs and see what the phone is actually > sending, or not sending. > > Both of you mentioned problems specifically WRT smartphones. It's > likely the IMAP implementation in these phones is simply buggy, or > your network coverage is spotty. I don't use a smartphone so I can't > really say. What smartphone are you each using? I've got a Samsung Captivate running K-9 Mail. It could definitely have some bugs. Sometimes if I delete a message on my phone, I'll see it show up in the Trash folder but not disappear from the folder it was deleted from. It's just not consistent. but it is better than it was before. I'll look in the logs and see if I see anything interesting. Thanks again,

1 0

[Dovecot] Dovecot MySQL Schema
by Alokat 06 Mar '11

06 Mar '11

Hi, where can I find the MySQL schema for Dovecot on Debian? Regards, alokat

2 1

[Dovecot] Multiple Concurrent IMAP Connections For Same User
by Nigel Webber 05 Mar '11

05 Mar '11

Hi I've been using courier for some time, but have just built a new box and am using dovecot (V1.2.9), Ubuntu 10.04LTS. I have a question regarding multiple concurrent imap connections and how to get dovecot to behave in the same way that courier does. I have searched the wiki, but find little relevant to my specific issue. Courier-Imap Behaviour If I have thunderbird pointed at the 'Inbox' folder via IMAP, then connect another IMAP client to the same mail account (in this case an iPhone), and then delete an email using the iphone, then after a couple of seconds, the inbox shown by Thunderbird updates, removing the now deleted email. It does this without my having to touch Thunderbird. Dovecot behaviour Performing the same test on a different mailbox, this time hosted via Dovecot, I again see the two views, one in Thunderbird and one on the iPhone, but when I delete the email on the iPhone, the change is not reflected in the view on Thunderbird. If I select the email on Thunderbird, then it has no content. If I restart thunderbird, the deleted email is still shown. I have to delete (the already deleted) the email also in thunderbird before it finally dissapears. How can I get the courier behaviour where the inbox in one email client automagically reflects the changes made to that inbox in another client? If I am better sticking to Courier to get this functionality, thats fine, but if I can configure the behaviour I desire and still retail the benefits of dovecot then thats even better! Kind Regards Nigel

7 12

[Dovecot] 2.0.10 Auth failed while binding ldap
by Stéphane Wartel 05 Mar '11

05 Mar '11

Dear all, Since new release has been installed, auth process crash with io loop : 2011-03-05 11:22:44 auth: Panic: file db-ldap.c: line 1113 (db_ldap_result_change_attr): assertion failed: (ctx->vals == NULL) 2011-03-05 11:22:44 auth: Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0 [0xb76ceab1] -> /usr/lib/dovecot/libdovecot.so.0 [0xb76ceb2f] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0xb76cee04] -> dovecot/auth(db_ldap_result_iterate_next+0x3be) [0x806aa8e] -> dovecot/auth [0x806c857] -> dovecot/auth [0x806cd91] -> dovecot/auth [0x806c314] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x51) [0xb76db781] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xe0) [0xb76dc840] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x40) [0xb76db700] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x2a) [0xb76c73da] -> dovecot/auth(main+0x300) [0x805ea50] -> /lib/i686/cmov/libc.so.6(__libc_start_main+0xe5) [0xb7147455] -> dovecot/auth [0x8052a51] 2011-03-05 11:22:44 master: Error: service(auth): child 23136 killed with signal 6 (core dumps disabled) 2011-03-05 11:22:44 master: Error: service(auth): command startup failed, throttling dovecot --version 2.0.10 (d757b13d84ff) # 2.0.10 (d757b13d84ff): /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-686 i686 Debian 5.0.8 auth_failure_delay = 5 secs auth_mechanisms = plain login debug_log_path = /var/log/dovecot-debug.log dict/acl = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext info_log_path = /var/log/dovecot-info.log lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = 127.0.0.1 log_path = /var/log/dovecot.log log_timestamp = "%Y-%m-%d %H:%M:%S " mail_access_groups = mail mail_debug = yes mail_fsync = always mail_gid = mail mail_location = maildir:~/Maildir mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = " quota trash zlib" mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mmap_disable = yes namespace { inbox = yes location = prefix = separator = . type = private } namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/Shared/%%n prefix = Shared.%%n. separator = . subscriptions = no type = shared } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin/acl = vfile plugin/acl_shared_dict = proxy::acl plugin/autocreate = Junk plugin/autosubscribe = Junk plugin/quota = maildir:User quota plugin/quota_rule2 = Trash:storage=+100M plugin/quota_warning = storage=95%% quota-warning 95 %u plugin/quota_warning2 = storage=80%% quota-warning 80 %u plugin/sieve = ~/.dovecot.sieve plugin/sieve_before = /etc/dovecot/global_script/dovecot.sieve plugin/sieve_dir = ~/sieve plugin/trash = /etc/dovecot/dovecot-trash.conf.ext plugin/zlib_save = bz2 plugin/zlib_save_level = 6 postmaster_address = postmaster protocols = imap pop3 lmtp sieve quota_full_tempfail = yes service auth { unix_listener /var/spool/postfix/private/auth { group = mail mode = 0660 user = postfix } unix_listener auth-master { group = mail mode = 0660 user = vmail } unix_listener auth-userdb { group = mail mode = 0660 user = vmail } } service dict { unix_listener dict { group = mail mode = 0660 user = vmail } } service imap-login { process_min_avail = 10 service_count = 1 } service managesieve-login { process_min_avail = 3 service_count = 1 } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } ssl_ca = </etc/ssl/certs/GandiStandardSSLCA.pem ssl_cert = </etc/ssl/certs/imap.zero-spam.fr.pem ssl_key = </etc/ssl/private/imap.zero-spam.fr.key userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf.ext driver = ldap } protocol lda { auth_socket_path = /var/run/dovecot/auth-master mail_plugins = " quota trash zlib sieve autocreate acl" } protocol imap { mail_plugins = " quota trash zlib acl imap_quota imap_acl imap_zlib" } protocol sieve { managesieve_logout_format = bytes=%i/%o managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date } dovecot-ldap.conf.ext hosts = 127.0.0.1 dn = "cn=sup,dc=domain,dc=com" dnpass = "**********" auth_bind = yes ldap_version = 3 base = dc=domain, dc=com user_attrs = mailbox=home,mailuserquota=quota_rule=*:storage user_filter = (&(objectClass=mailAccount)(mail=%u)(mailenable=OK)) pass_attrs = mail=user,userPassword=password pass_filter = (&(objectClass=mailAccount)(mail=%u)(mailenable=OK)) iterate_attrs = mail=user iterate_filter = (&(objectClass=mailAccount)(mailenable=OK)) Hope this could help you ! Many thanks by advance, Stephane

3 3

[Dovecot] deleted messages not going away in Thunderbird?
by Dave McGuire 05 Mar '11

05 Mar '11

Hi folks. This may be a dumb question, but I can't seem to find a clue. I'm running Dovecot v1.2.9 and Thunderbird v3.1.7. If I delete messages using a different IMAP client (I also use an iPhone and occasionally SquirrelMail), I would expect those messages to disappear from Thunderbird the next time I start it or click on "Get Mail". In fact, they do...most of the time. Sometimes, however, they just stick around. If I do a "Repair Folder" on the inbox in Thunderbird, the messages go away. Is this a known issue? My gut tells me there's some Thunderbird option to make it follow inbox contents with more "attention" but I've not been able to find it. Thanks, -Dave -- Dave McGuire Port Charlotte, FL

2 1

[Dovecot] version difference understanding
by upen 05 Mar '11

05 Mar '11

Hello, I am in process of setting up an IMAP server (with postfix SMTP), I installed RHEL 5.5 on my server and found that version of dovecot is 1.x.x while when I checked online RHEL 6 is version is 2.x.x. Can someone please tell me if these two versions are still in development or 1.x.x is very old and must be replaced by 2.x.x version? Also are there any special features in 2.x.x or 1.x.x that makes it better than other? I see similar things for postfix package but I understand this is not the place to ask postfix Qns, Appreciate your help! ~A

2 2

[Dovecot] All mails unread after short while
by francwalter＠gmx.net 05 Mar '11

05 Mar '11

Hello, I have on Ubuntu 8.04 Postfix 2.5.1 and Dovecot 1.0.10. The mails are saved in maildir format. In one account on my server all mails are unread all the time. If i set them as read in my client (IMAP with Mac Mail 4.4 or IMAP with Squirrelmail, it doesn’t matter) they seem to be checked as read for some minutes or less, but very soon they are unread again, so i guess, only my client thinks that they are read, but after the next check, the client reads again that they are unread. Now i don’t know where to look or change the “Has been read”-Flag in the maildir-directory. Is it in some file or where is it, the flag? It is only one account, the other accounts on the same domain and on other domains are working quite well. Maybe it is only after a Squirrelmail update last week, but I am not sure. Thank you, Kind Regards, frank walter

4 7

[Dovecot] Is the trunk version of Pigeonhole still broken or am I missing something?
by interfaSys sàrl 05 Mar '11

05 Mar '11

Things broke a couple of months back and I thought I had caught the repository at a bad time, but trying again today, after having seen that people had been working on it recently, bore the same result. ../../../../libtool: line 2072: cmd-vacation.c: command not found I'm simply syncing with the repository and using autogen, configure and make. Are there any other steps required? Olivier

2 5

[Dovecot] v2.0.10 released
by Timo Sirainen 04 Mar '11

04 Mar '11

http://dovecot.org/releases/2.0/dovecot-2.0.10.tar.gz http://dovecot.org/releases/2.0/dovecot-2.0.10.tar.gz.sig I thought it was finally time to make a new v2.0 release. Or probably it was a while ago already, but I've been a bit lazy this year. Maybe it's because this is the first time in last 5 years when all branches of Dovecot have been quite stable and I haven't been stressing on it. Of course there are some v2.0 features that still have some bugs, but few people are complaining about them. v2.1 development branch also appears to be pretty good shape. I'm hopeful that v2.1.rc1 will be out before summer. * LMTP: For user+detail@domain deliveries, the +detail is again written to Delivered-To: header. * Skip auth penalty checks from IPs in login_trusted_networks. + Added import_environment setting. + Added submission_host setting to send mails via SMTP instead of via sendmail binary. + Added doveadm acl get/set/delete commands for ACL manipulation, similar to how IMAP ACL extension works. + Added doveadm acl debug command to help debug and fix problems with why shared mailboxes aren't working as expected. - IMAP: Fixed hangs with COMPRESS extension - IMAP: Fixed a hang when trying to COPY to a nonexistent mailbox. - IMAP: Fixed hang/crash with SEARCHRES + pipelining $. - IMAP: Fixed assert-crash if IDLE+DONE is sent in same TCP packet. - LMTP: Fixed sending multiple messages in a session. - doveadm: Fixed giving parameters to mail commands. - doveadm import: Settings weren't correctly used for the import storage. - dsync: Fixed somewhat random failures with saving messages to remote dsync. - v2.0.9: Config reload didn't notify running processes with shutdown_clients=no, so they could have kept serving new clients with old settings.

2 2

Re: [Dovecot] Error: FETCH [1] for mailbox badbox UID 1 got too little data: 2 vs 4 (fwd)
by Chris Wilson 04 Mar '11

04 Mar '11

Hi all, Any thoughts about this error? Should I file a bug report somewhere? Cheers, Chris. On Wed, 12 Jan 2011, Chris Wilson wrote: > Hi all, > > I can send myself a test message that causes Dovecot to crash when I open > it in Alpine, with the following error: > > Jan 12 14:52:52 one-mail dovecot: imap(chris): Error: FETCH [1] for > mailbox badbox UID 1 got too little data: 2 vs 4 > Jan 12 14:52:52 one-mail dovecot: imap(chris): Error: Corrupted index > cache file /home/chris/mail/.imap/badbox/dovecot.index.cache: Broken > MIME parts for mail UID 1 > Jan 12 14:52:52 one-mail dovecot: imap(chris): Disconnected: FETCH failed > bytes=485/1394 > > I can do this as follows: > > $ touch ~/mail/badbox > $ echo test | /usr/libexec/dovecot/dovecot-lda -m badbox > $ cat ~/mail/badbox > > From MAILER-DAEMON Wed Jan 12 14:52:29 2011 > test > X-IMAPbase: 1294843949 0000000001 > X-UID: 1 > Status: > X-Keywords: > Content-Length: 1 > > And then when I try to open badbox in Alpine (over IMAP), and then open > this email, I get the error above, and the connection is aborted. > > I expect that the "test" line is not a valid header, but dovecot should > not crash when opening it. > > Cheers, Chris. > -- Aptivate | http://www.aptivate.org | Phone: +44 1223 760887 The Humanitarian Centre, Fenner's, Gresham Road, Cambridge CB1 2ES Aptivate is a not-for-profit company registered in England and Wales with company number 04980791.

2 1

[Dovecot] /etc/pam.d/dovecot missing? during high load
by Douglas Mortensen 04 Mar '11

04 Mar '11

This morning on our newly built server, the following was logged twice: auth: Error: pam(username,127.0.0.1): pam_authenticate() failed: Authentication failure (/etc/pam.d/dovecot missing?) This also happened to be during a time of 100+ imap-login processes, where we were seeing: master: Warning: service(imap-login): process_limit reached, client connections are being dropped The initial error was correct, in that I had not yet created /etc/pam.d/dovecot. I have since created the file. However, we brought this server into production yesterday & there were no complaints, nor was the error logged besides twice this morning within 3.5 minutes of eachother. In looking at pam documentation, it is my understanding that when a service (dovecot) does not have its own file existing under /etc/pam.d, then pam will instead use the settings from /etc/pam.d/others as defaults. This seems logical to me, and would explain why things have been working fairly well with no errors regarding pam (other than the 2 logged this morning). However, what this does not explain, is why dovecot auth logged about the file missing at all. I can only guess that it was related to logins being dropped due to high load, and was incorrectly logged?? For reference, my current /etc/pam.d/dovecot is: auth required pam_unix.so nullok account required pam_unix.so My current /etc/pam.d/other is: @include common-auth @include common-account @include common-password @include common-session Which results in (confirmed via : grep -v ^# common-auth common-account common-password common-session) auth [success=1 default=ignore] pam_unix.so nullok_secure auth requisite pam_deny.so auth required pam_permit.so account [success=1 new_authtok_reqd=done default=ignore] pam_unix.so account requisite pam_deny.so password [success=1 default=ignore] pam_unix.so obscure sha512 password requisite pam_deny.so password required pam_permit.so session [default=1] pam_permit.so session requisite pam_deny.so session required pam_permit.so session required pam_unix.so So there definitely is quite a difference between the dovecot pam file I created (based on the dovecot2 wiki), and the system default (other). I don't know whether this could have been related, so I figured I'd share. Otherwise, I'm running dovecot 2.0.9 compiled from source. dovecot -n at the time of the pam errors was probably: # 2.0.9: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0 auth_debug = yes auth_mechanisms = plain login disable_plaintext_auth = no log_timestamp = "%Y-%m-%d %H:%M:%S " mail_debug = yes mail_location = maildir:~/ mail_privileged_group = mail passdb { driver = pam } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } ssl_cert = </etc/ssl/certs/jlgray.com.cer ssl_key = </etc/ssl/private/jlgray.com.key userdb { driver = passwd } Thanks, - Doug Mortensen Network Consultant Impala Networks Inc CCNA, MCSA, Security+, A+ Linux+, Network+, Server+ . www.impalanetworks.com P: (505) 327-7300 F: (505) 327-7545

2 2

[Dovecot] logging issues w/ login_max_processes_count on 1.x
by Douglas Mortensen 04 Mar '11

04 Mar '11

Today I found our dovecot 2.x gracefully logged: dovecot: master: Warning: service(imap-login): process_limit reached, client connections are being dropped I am confident that we had the very same problem on our previous dovecot 1.x box. Of course with dovecot 1.x, the same relative setting is login_max_processes_count. I believe that I turned up all dovecot logging & debugging to the max (also checked with the 1.x wiki), but nothing was ever logged relating to this. Does anyone know whether there is a way to get dovecot 1.x to log this type of error? Thanks, - Doug Mortensen Network Consultant Impala Networks Inc CCNA, MCSA, Security+, A+ Linux+, Network+, Server+ . www.impalanetworks.com P: (505) 327-7300 F: (505) 327-7545

2 2

[Dovecot] penalty configuration and proxy servers
by Mark Zealey 04 Mar '11

04 Mar '11

Hi there, I've had a look through the wiki and a quick look through the source for penalty configurations (dovecot 2.0.9) but I've not found anything to do with configuration options for this functionality. I'm basically wanting to disable a particular host/subnet from the penalty setup. In our case we have some webmail servers that do get attacked however most of the traffic is legitimate so I'd rather that the user experience was faster (ie not having a few seconds of delay on login) than that we slowed down attacks from them. On a similar note; is it possible to do the per-ip login limit in the auth level rather than the imap/pop level? I ask this as we've just implemented a proxy setup whereby we have two frontend proxy servers that then dispatch to backend servers specified in the database. So, the backend servers do the actual imap/pop sessions however we now don't see the remote ip addresses so it becomes difficult to limit abusive users. The 'doveadm who'/process listing code also doesn't work on the proxy servers even though dovecot knows who logged in and forwards the connection through to the backend servers. None of these features/suggestions are show-stoppers; dovecot is a great program however they're more suggestions of ways it would be useful for us to improve the software. Thanks, Mark

2 1

[Dovecot] strange problem receiving mails
by deconya 04 Mar '11

04 Mar '11

Hi guys Im viewing how to repair a problem using a postfix platform with openldap and dovecot. This is the problem: -When I create a new user inside openldap with mail account appears correctly inside ldap but when I access first time appears inside /var/spool/dovecot/ the folder of account bad. Not appears the name of uid, appears the name of user mail, for ex: drwx------ 5 exemple Domain Users 4,0K 2011-03-04 13:28 exemple drwx------ 9 exemple Domain Users 4,0K 2011-03-04 13:29 exemple.usermail Log filteered: Mar 4 13:28:21 mailserver deliver(exemple): Loading modules from directory: /usr/lib/dovecot/modules/lda Mar 4 13:28:21 mailserver deliver(exemple): Module loaded: /usr/lib/dovecot/modules/lda/ lib10_quota_plugin.so Mar 4 13:28:21 mailserver dovecot: auth(default): master in: USER^I1^Iunesco^Iservice=deliver Mar 4 13:28:21 mailserver dovecot: auth(default): prefetch( exemple(a)mydomain.com) passdb didn't return userdb entries, trying the next userdb Mar 4 13:28:21 mailserver dovecot: auth(default): passwd( exemple(a)mydomain.com) lookup Mar 4 13:28:21 mailserver dovecot: auth(default): passwd( exemple(a)mydomain.com) unknown user Mar 4 13:28:21 mailserver dovecot: auth(default): ldap(exemple(a)mydomain.com): user search: base=ou=Users, dc=ldap, dc=es scope=subtree filter=(&(objectClass=posixAccount)(|(mail=exemple(a)mydomain.com)(uid= exemple(a)mydomain.com)(uid=exemple))) fields=homeDirectory,uidNumber,gidNumber,mailQuota Mar 4 13:28:21 mailserver deliver(exemple): auth input: home=/home/exemple Mar 4 13:28:21 mailserver deliver(exemple): auth input: uid=10017 Mar 4 13:28:21 mailserver deliver(exemple): auth input: gid=513 Mar 4 13:28:21 mailserver deliver(exemple): Home dir not found: /home/exemple Mar 4 13:28:21 mailserver deliver(exemple): Quota root: name=User quota backend=maildir args= Mar 4 13:28:21 mailserver deliver(exemple): Quota rule: root=User quota mailbox=* bytes=52428800 messages=0 Mar 4 13:28:21 mailserver deliver(exemple): Quota rule: root=User quota mailbox=Trash ignored Mar 4 13:28:21 mailserver deliver(exemple): maildir: data=/var/spool/dovecot/exemple/ Mar 4 13:28:21 mailserver deliver(exemple): maildir++: root=/var/spool/dovecot/exemple, index=, control=, inbox=/var/spool/dovecot/exemple Mar 4 13:28:21 mailserver dovecot: auth(default): ldap(exemple(a)mydomain.com): result: homeDirectory(home)=/home/exemple uidNumber(uid)=10017 gidNumber(gid)=513 Mar 4 13:28:21 mailserver dovecot: auth(default): master out: USER^I1^ Iunesco(a)mydomain.com^Ihome=/home/exemple^Iuid=10017^Igid=513 Mar 4 13:28:21 mailserver deliver(exemple): msgid=<1299241700.26848.1.camel@infolinux>: saved mail to INBOX Mar 4 13:28:21 mailserver postfix/pipe[29996]: 6191E26F95B: to=< exemple(a)mydomain.com>, orig_to=<exemplemail(a)admi.mydomain.com>, relay=dovecot, delay=0.09, delays=0.03/0/0/0.06, dsn=2.0.0, status=sent (delivered via dovecot service) Mar 4 13:28:26 mailserver dovecot: auth-worker(default): pam( exemplemail(a)mydomain.com,10.0.0.4) lookup service=dovecot Mar 4 13:28:26 mailserver dovecot: auth-worker(default): pam( exemplemail(a)mydomain.com,10.0.0.4) #1/1 style=1 msg=Password: Mar 4 13:28:28 mailserver dovecot: auth-worker(default): pam( exemplemail(a)mydomain.com,10.0.0.4) pam_authenticate() failed: Authentication failure (password mismatch?) Mar 4 13:28:28 mailserver dovecot: auth(default): ldap( exemplemail(a)mydomain.com,10.0.0.4) bind search: base=ou=Users, dc=ldap, dc=es filter=(&(objectClass=posixAccount)(|(mail=exemplemail(a)mydomain.com )(uid=exemplemail(a)mydomain.com))) Mar 4 13:28:28 mailserver dovecot: auth(default): auth( exemplemail(a)mydomain.com,10.0.0.4) username changed exemplemail(a)mydomain.com -> exemple Mar 4 13:28:28 mailserver dovecot: auth(default): ldap(exemple,10.0.0.4): result: homeDirectory(userdb_home)=/home/exemple uid(user)=exemple uidNumber(userdb_uid)=10017 gidNumber(userdb_gid)=513 Mar 4 13:28:28 mailserver dovecot: auth(default): client out: OK^I1^Iuser=exemple Mar 4 13:28:28 mailserver dovecot: auth(default): prefetch(exemple,10.0.0.4): success Mar 4 13:28:28 mailserver dovecot: auth(default): master out: USER^I411619^ Iunescochair.lccc(a)mydomain.com^Ihome=/home/exemple^Iuid=10017^Igid=513 Mar 4 13:28:28 mailserver dovecot: imap-login: Login: user=<exemple>, method=PLAIN, rip=10.0.0.4, lip=10.0.0.5 Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): Loading modules from directory: /usr/lib/dovecot/modules/imap Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): Module loaded: /usr/lib/dovecot/modules/imap/lib10_quota_plugin.so Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): Module loaded: /usr/lib/dovecot/modules/imap/lib11_imap_quota_plugin.so Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): Effective uid=10017, gid=513, home=/home/exemple Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): Quota root: name=User quota backend=maildir args= Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): Quota rule: root=User quota mailbox=* bytes=52428800 messages=0 Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): Quota rule: root=User quota mailbox=Trash ignored Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): maildir: data=/var/spool/dovecot/exemplemail/ Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): maildir++: root=/var/spool/dovecot/exemplemail, index=, control=, inbox=/var/spool/dovecot/exemplemail Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): Disconnected: Logged out bytes=45/375 Any idea? Thanks and Best Regards

1 0

[Dovecot] unsubscribe
by Rob Coward 04 Mar '11

04 Mar '11

Please consider the environment before printing this email. Game Stores Group Limited, registered number 1937170, registered in England

2 1

[Dovecot] Dovecot and ManageSieve crash trace
by Samuel Hassine 04 Mar '11

04 Mar '11

Hi all, I am trying to deploy Dovecot with Sieve support and I choose the easy way: install ManageSieve. But I have a problem here, and I did not find how to deal with. I tested the communication to the server with the telnet command. Here the result: http://pastebin.com/dgvhEwxJ And I do not understand how to link IMAP authentification and Sieve authentification. I just want to allow creation of Sieve filters for any IMAP user (based on LDAP). Thanks for your answer. Best regards. Samuel Hassine

2 1

[Dovecot] sieve issue
by Informatik.hu 04 Mar '11

04 Mar '11

Hi All! I have got some problem with dovecot sieve. (from Debian Squeeze packages). I have already installed dovecot and postfix with mysql(postfix admin) virtual domains and users, configured dovecot deliver for delivery method in postfix. Dovecot sieve IS working, reads the global script, BUT it DOES NOT reads the user scripts from the users virtual home directory. If i place ".dovecot.sieve" in /home/vmail, and configure sieve for this location, it reads the script. If i put the file under /home/vmail/domain.com (/home/vmail/%d) or /home/vmail/domain.com/user(a)domain.com (/home/vmail/%d/%u) the sieve plugin does not read(compile) the script. Deliver log contains that the incoming mail (which has to be filtered) saved to INBOX, and there is no error in the deliver error log, nor dovecot logs. Can anybody help me out what am i doing wrong? Vuki

2 1

[Dovecot] Problem with sieve and namespace
by Patrick Westenberg 03 Mar '11

03 Mar '11

Hi guys, my default sieve script fails due to an unknown mailspace even I told him to use one. What's wrong? Patrick Feb 26 00:39:25 endeavour dovecot: lmtp(6967, mail(a)jasbafliesen.de) Error: 1WYlBCE1aE03GwAA0CSSVw: sieve: msgid=<4D683DA5.7030505(a)gmx.de>: failed to store into mailbox mail(a)jasbafliesen.de': Unknown namespace Feb 26 00:39:25 endeavour dovecot: lmtp(6967, mail(a)jasbafliesen.de) Error: 1WYlBCE1aE03GwAA0CSSVw: sieve: script /usr/local/etc/dovecot/sieve/default.sieve failed with unsuccessful implicit keep This is what my sieve script looks like: require ["fileinto", "mailbox"]; if header :contains "X-Spam-Flag" "YES" { fileinto :create "INBOX.Spam"; } # 2.0.6: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-amd64 x86_64 Debian 5.0.8 auth_debug = yes auth_debug_passwords = yes auth_verbose = yes disable_plaintext_auth = no mail_debug = yes mail_gid = vmail mail_location = mdbox:~/mdbox mail_plugins = quota mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = comparator-i;octet comparator-i;ascii-casemap fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = prefix = INBOX. separator = . type = private } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = dict:User quota::file:%h/mdbox/dovecot-quota quota_warning = storage=90%% quota-warning 90 %u quota_warning2 = storage=75%% quota-warning 75 %u sieve = ~/.dovecot.sieve sieve_global_path = /usr/local/etc/dovecot/sieve/default.sieve } protocols = lmtp service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service quota-warning { executable = script /usr/local/etc/dovecot/quota-warning.sh unix_listener quota-warning { user = vmail } user = vmail } ssl = no userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = quota sieve } protocol lda { mail_plugins = quota sieve } protocol imap { mail_plugins = quota imap_quota }

3 4

[Dovecot] process_min_avail being ignored?
by Douglas Mortensen 03 Mar '11

03 Mar '11

Today I found out we are having users w/ problems because: Mar 3 09:57:33 jlgray dovecot: master: Warning: service(imap-login): process_limit reached, client connections are being dropped Mar 3 09:58:42 jlgray dovecot: master: Warning: service(imap-login): process_limit reached, client connections are being dropped Mar 3 10:02:51 jlgray dovecot: master: Warning: service(imap-login): process_limit reached, client connections are being dropped Mar 3 10:04:29 jlgray dovecot: master: Warning: service(imap-login): process_limit reached, client connections are being dropped Mar 3 10:05:41 jlgray dovecot: master: Warning: service(imap-login): process_limit reached, client connections are being dropped Mar 3 10:06:58 jlgray dovecot: master: Warning: service(imap-login): process_limit reached, client connections are being dropped So, based on the dovecot2 wiki, it would seem that the solution is to follow the recommendations at http://wiki2.dovecot.org/LoginProcess, and use them as a guide for our situation. I have done so. But unless I misunderstand their purpose, I don't think they're working. Maybe I don't have them in the correct place?? I am expecting the imap-login process count to immediately jump up to 200 (based on my config below). But instead, they just slowly gradually increase. But even an hour after changing the config & restarting dovecot, I only have 78 login processes. dovecot -n output is: # 2.0.9: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0 auth_debug = yes auth_mechanisms = plain login disable_plaintext_auth = no log_timestamp = "%Y-%m-%d %H:%M:%S " mail_debug = yes mail_location = maildir:~/ mail_privileged_group = mail passdb { driver = pam } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } ssl_cert = </etc/ssl/certs/jlgray.com.cer ssl_key = </etc/ssl/private/jlgray.com.key userdb { driver = passwd } This configuration was updated from a dovecot 1.x config, by following the instructions at: http://wiki2.dovecot.org/Upgrading/2.0 Namely: doveconf -n -c dovecot-1.conf > dovecot-2.conf Then we renamed dovecot-2.conf to dovecot.conf I'm pretty sure there were no problems with that part. We are running dovecot 2.0.9 compiled from source. OS is 64-bit Debian Squeeze (6.0), as shown by 'cat /proc/version': Linux version 2.6.32-5-amd64 (Debian 2.6.32-30) (ben(a)decadent.org.uk) (gcc version 4.3.5 (Debian 4.3.5-4) ) #1 SMP Wed Jan 12 03:40:32 UTC 2011 I really appreciate anyone helping me figure out why Thanks, - Doug Mortensen Network Consultant Impala Networks Inc CCNA, MCSA, Security+, A+ Linux+, Network+, Server+ . www.impalanetworks.com P: (505) 327-7300 F: (505) 327-7545

1 1

[Dovecot] TB, dovecot & trailing slash - again
by Bruno Tréguier 03 Mar '11

03 Mar '11

Hi there, I have been browsing the mailing list archives in search of a solution to my problem, related to the quite infamous "trailing slash" issue with Thunderbird, but I don't seem to have found any closely related discussion. Please forgive me if this problem has already found a solution. Here I go; We use a lot of TB clients (2.x and 3.x), and we are using Dovecot 1.2.4 on our production server (mbox format). As told in many places, including this list, I added the option "tb-extra-mailbox-sep" in my dovecot.conf file. The checkbox regarding the mix of mailbox/submailbox and mailbox/messages is unchecked in the advanced options of our TB standard config. I snooped the connection with "ngrep" when creating a folder meant for containing subfolders. Here is the trace: > 6 create "ABCDE/".. < 6 OK Create completed... > 7 subscribe "ABCDE/".. < 7 OK Subscribe completed... > 8 list "" "ABCDE/".. < * LIST (\Noselect \HasChildren) "/" "ABCDE/"..8 OK List completed... So far, so good. But when you have a look at the .subscriptions file, you can see that the ABCDE folder has no trailing slash: it has been stripped off, apparently due to an "enhancement" made in 2009: http://hg.dovecot.org/dovecot-1.2/rev/339be408f49a It may be intended, but the drawback is that TB then gets a bit confused, as it has no way, during a "LIST" operation, to distinguish between a "folder/subfolder" scheme and a "folder/message" scheme: consequently, you get an error message from TB whenever you click on the containing folder, stating that "the mailbox isn't selectable". The problem is not just cosmetic, though, as the subfolders of such folders are not synchronized when selected for offline reading. I made a test with another version of Dovecot, of the 1.1 branch, and it behaves a little bit differently: the trailing slash is kept in the .subscriptions file, and everything is ok. TB is able to make the distinction between both kinds of folders. For the moment, I simply erased the "tb-extra-mailbox-sep" from my config file, and this is what happens: > 306 create "ABCDE/".. < 306 OK Create completed... > 307 subscribe "ABCDE/".. < 307 NO Invalid mailbox name: ABCDE/.. > 308 list "" "ABCDE/".. < * LIST (\Noselect \HasChildren) "/" "ABCDE/"..308 OK List completed... In that case, the "subscribe" command fails, so the folder does not appear by itself in the .subscriptions file, but as it is not used (only "terminal" mailboxes, containing messages, which are files in the filesystem), this is not a problem. The directory is created on the disk, and you can then create subfolders without any problem... Sorry for this long message, I just wanted to explain precisely what happens. A last word: switching to maildir would be quite a hassle, as we use quite a lot of procmail-based tools. Rewriting everything using Sieve is not planned for the moment. Does anyone out there have a solution for this ? What am I doing wrong ? Is the "tb-extra-mailbox-sep" really necessary when using TB ? As far as I can tell, it rather got us into trouble here, than solved anything... Thanks for any info/pointer/else ! Best regards, Bruno -- - Service Hydrographique et Oceanographique de la Marine - DO/MGS/INF - 13, rue du Chatellier - CS 92803 - 29228 Brest Cedex 2, FRANCE - Phone: +33 2 98 22 17 49 - Email: Bruno.Treguier(a)shom.fr

1 0

[Dovecot] expire plugin and sieve
by cvb＠kruemel.org 03 Mar '11

03 Mar '11

Hi. I am running dovecot 1.2.9 here, allowing users to filter their mails with the sieve plugin, and am using sieve to move mail tagged as probably spam into the spam folder. I'm now looking to get the expire plugin working as well. It does work as described in the wiki: Once I manually move messages into other folders, the mysql database is filled with entries. However, the combination of sieve and expire does not seem to be working: When sieve moves messages into a folder, no entry is created in the database. Don't these plugins work together, or did I misconfigure something? # dovecot -n # 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-27-server x86_64 Ubuntu 10.04.1 LTS fuse.glusterfs log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s managesieve ssl_cert_file: /etc/dovecot/imapd.pem ssl_key_file: /etc/dovecot/imapd.pem disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login login_user: postfix login_process_per_connection: no login_process_size: 128 first_valid_uid: 113 mail_privileged_group: mail mail_location: maildir:/home/vmail/%Ld/%Ln:INDEX=/var/indexes/%u mail_debug: yes mail_nfs_storage: yes mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): expire mail_plugins(imap): expire mail_plugins(pop3): expire mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): imap_client_workarounds(managesieve): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh pop3_client_workarounds(managesieve): managesieve_logout_format(default): bytes=%i/%o managesieve_logout_format(imap): bytes=%i/%o managesieve_logout_format(pop3): bytes=%i/%o managesieve_logout_format(managesieve): bytes ( in=%i : out=%o ) namespace: type: private separator: . prefix: INBOX. inbox: yes list: yes subscriptions: yes lda: postmaster_address: postmaster(a)example.com mail_plugins: expire mail_plugins: sieve auth default: mechanisms: plain login user: nobody verbose: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: static args: uid=5000 gid=5000 home=/home/vmail/%Ld/%Ln allow_all_users=yes socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: root master: path: /var/run/dovecot/auth-master mode: 438 user: vmail group: vmail plugin: sieve: /home/vmail/%Ld/%Ln/.dovecot.sieve sieve_global_path: /home/vmail/globalsieverc sieve_dir: ~/sieve sieve_global_dir: /var/lib/dovecot/sieve/global/ expire: INBOX.Trash 7 INBOX.Mailing-Lists.* 30 INBOX.Spam 14 expire_dict: proxy::expire dict: expire: mysql:/etc/dovecot/dovecot-dict-expire.conf Thanks, Christian

2 2

[Dovecot] dovecot share
by Eric Broch 03 Mar '11

03 Mar '11

Hello List, I have created a shared folder in dovecot and am trying to use ACL's to limit access to it and give users who do have access the ability to create sub-directories and copy email to them. When I try to create a sub-directory in the share using Outlook I get the following error: "Cannot create the folder. The server responded: 'NOPERM] Permission denied'." And, I get the following info in the dovecot server log: 2011-03-01 15:38:30.250214500 IMAP(test(a)whitehorsetc.com): Info: Loading modules from directory: /usr/local/lib/dovecot/imap 2011-03-01 15:38:30.250399500 IMAP(test(a)whitehorsetc.com): Info: Module loaded: /usr/local/lib/dovecot/imap/lib01_acl_plugin.so 2011-03-01 15:38:30.250402500 IMAP(test(a)whitehorsetc.com): Info: Module loaded: /usr/local/lib/dovecot/imap/lib02_imap_acl_plugin.so 2011-03-01 15:38:30.250404500 IMAP(test(a)whitehorsetc.com): Info: Effective uid=89, gid=89, home=/home/vpopmail/domains/whitehorsetc.com/test 2011-03-01 15:38:30.250407500 IMAP(test(a)whitehorsetc.com): Info: acl: No acl_shared_dict setting - shared mailbox listing is disabled 2011-03-01 15:38:30.250422500 IMAP(test(a)whitehorsetc.com): Info: Namespace: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes 2011-03-01 15:38:30.250425500 IMAP(test(a)whitehorsetc.com): Info: maildir: data=~/Maildir 2011-03-01 15:38:30.250427500 IMAP(test(a)whitehorsetc.com): Info: maildir++: root=/home/vpopmail/domains/whitehorsetc.com/test/Maildir, index=, control=, inbox=/home/vpopmail/domains/whitehorsetc.com/test/Maildir 2011-03-01 15:38:30.250441500 IMAP(test(a)whitehorsetc.com): Info: acl: initializing backend with data: vfile 2011-03-01 15:38:30.250443500 IMAP(test(a)whitehorsetc.com): Info: acl: acl username = test(a)whitehorsetc.com 2011-03-01 15:38:30.250445500 IMAP(test(a)whitehorsetc.com): Info: acl: owner = 1 2011-03-01 15:38:30.250447500 IMAP(test(a)whitehorsetc.com): Info: acl vfile: Global ACL directory: (null) 2011-03-01 15:38:30.250515500 IMAP(test(a)whitehorsetc.com): Info: Namespace: type=shared, prefix=projects., sep=., inbox=no, hidden=no, list=yes, subscriptions=yes 2011-03-01 15:38:30.250518500 IMAP(test(a)whitehorsetc.com): Info: maildir: data=/home/vpopmail/domains/whitehorsetc.com/projects 2011-03-01 15:38:30.250520500 IMAP(test(a)whitehorsetc.com): Info: maildir++: root=/home/vpopmail/domains/whitehorsetc.com/projects, index=, control=, inbox= 2011-03-01 15:38:30.250534500 IMAP(test(a)whitehorsetc.com): Info: acl: initializing backend with data: vfile 2011-03-01 15:38:30.250536500 IMAP(test(a)whitehorsetc.com): Info: acl: acl username = test(a)whitehorsetc.com 2011-03-01 15:38:30.250538500 IMAP(test(a)whitehorsetc.com): Info: acl: owner = 0 2011-03-01 15:38:30.250540500 IMAP(test(a)whitehorsetc.com): Info: acl vfile: Global ACL directory: (null) 2011-03-01 15:38:30.250754500 imap-login: Info: Login: user=<test(a)whitehorsetc.com>, method=PLAIN, rip=192.168.9.5, lip=192.168.9.6 2011-03-01 15:38:30.254448500 IMAP(test(a)whitehorsetc.com): Info: acl vfile: file /home/vpopmail/domains/whitehorsetc.com/projects/.xxxxxx/dovecot-acl not found 2011-03-01 15:39:10.998483500 IMAP(test(a)whitehorsetc.com): Info: Disconnected: Logged out bytes=76/431 The second to the last line in the log indicates that there is no 'dovecot-acl' file in the directory I'm trying to create using Outlook. I'm not sure if this is the error and I'm not sure what I need to adjust in order to create a directory using the email account. My dovecot.conf file is as follows: base_dir = /var/run/dovecot/ protocols = imap imaps disable_plaintext_auth = no log_path = /dev/stderr info_log_path = /dev/stderr log_timestamp = "" ssl_cert_file = /var/qmail/control/servercert.pem ssl_key_file = /var/qmail/control/servercert.pem ssl_cipher_list = ALL:!LOW verbose_ssl = yes login_dir = /usr/local/var/run/dovecot/login login_user = dovecot login_process_per_connection = yes login_processes_count = 3 login_max_processes_count = 128 login_greeting = Dovecot ready. login_log_format_elements = user=<%umethod=%m rip=%r lip=%l %c mail_location = maildir:~/Maildir namespace private { separator = . prefix = INBOX. inbox = yes } namespace shared { separator = . prefix = projects. location = maildir:/home/vpopmail/domains/mydomain.com/shared/projects } mail_debug = yes verbose_proctitle = yes first_valid_uid = 89 last_valid_uid = 89 protocol imap { mail_plugins = acl imap_acl } protocol pop3 { } protocol lda { postmaster_address = postmaster(a)whitehorsetc.com } auth default { mechanisms = plain login digest-md5 cram-md5 passdb vpopmail { args = } userdb passwd { } userdb vpopmail { } user = vpopmail count = 1 ssl_require_client_cert = no } dict { } plugin { vfile = acl } In the share directory (/home/vpopmail/domains/whitehorsetc.com.com/shared/projects) I created two files: 'subscriptions' and 'dovecot-acl.' Listing this directory yields the following: drwx------ 2 vpopmail vchkpw 4096 Feb 17 08:57 cur -rwxrwxrwx 1 vpopmail vchkpw 39 Mar 1 15:01 dovecot-acl -rw------- 1 vpopmail vchkpw 0 Mar 1 15:51 dovecot-acl-list drwx------ 2 vpopmail vchkpw 4096 Jan 28 14:48 new -rw------- 1 vpopmail vchkpw 1 Mar 1 14:46 subscriptions drwx------ 2 vpopmail vchkpw 4096 Feb 17 08:57 tmp The file 'dovecot-acl-list' is created automatically when I open Outlook. In the file 'dovecot-acl' I have the following entry: user=test(a)whitehorsetc.com lrwstipekxa I also noticed that the 'projects' folder would not become visible in Outlook until I manually created the 'subscriptions' file, opened it, entered a <CR><LF>, and closed the file. Without ACL support enabled all works as expected. Any help would be appreciated. Eric

2 10