- dovecot - dovecot.org

Sync in the 'new' folder on the standby server
by lty＠cndns.com 14 Nov '18

14 Nov '18

DOVEADM SYNC -U USERNAME(a)EXAMPLE.COM TCP:10.10.1.125:1111 Online server mail is in the cur directory, but the backup server mail is in the new directory

1 0

dovecot lmtp thinks that "disk quota exceeded" is "internal error"
by Arkadiusz Miśkiewicz 14 Nov '18

14 Nov '18

2.2.36 (not migrated to 2.3 yet) reports such problem: > Nov 13 15:50:58 mbox dovecot: lmtp(xxx): session=<ACYRCtLk6ltiEQAALZVUYQ>, Error: open(/var/mail/xxx/mailboxes.lock1bf6ad16b7b8b703) failed: Disk quota exceeded > Nov 13 15:50:58 mbox dovecot: lmtp(xxx): session=<ACYRCtLk6ltiEQAALZVUYQ>, Error: Couldn't create mailbox list lock /var/mail/xxx/mailboxes.lock: file_create_locked(/var/mail/xxx/mailboxes.lock) failed: safe_mkstemp(/var > /mail/xxx/mailboxes.lock) failed: Disk quota exceeded > Nov 13 15:50:58 mbox dovecot: lmtp(awypior): session=<ACYRCtLk6ltiEQAALZVUYQ>, msgid=<db663455902e1b3faa53f344dc353870@xxx>: save failed to open mailbox INBOX.Spam: Internal error occurred. Refer to server log for more informat > ion. [2018-11-13 15:50:58] Looks a bug to me since disk exceeded is not a internal error. Shouldn't lmtp return over quota info instead of error? -- Arkadiusz Miśkiewicz, arekm / ( maven.pl | pld-linux.org )

3 5

execute sieve command - fails to notice script has exited
by Lionel Elie Mamane 13 Nov '18

13 Nov '18

Hi, Running dovecot 2.2.27 (c0f36b0) on Debian GNU/Linux stable (version 9.6), I'm trying to use the execute command in a sieve script, with direct execution (not service socket). The script is executed, and returns (the process exits), but the dovecot-lda process seems to not notice, and thinks the script did not terminate. After sieve_execute_exec_timeout has passed, it sends a TERM, a bit later a KILL and then logs a failure. The "ps -Af f" looks like: S 0:00 \_ /usr/sbin/exim4 -Mc 1gMazS-0007IV-RB S 0:00 \_ /usr/lib/dovecot/dovecot-lda -f master(a)blitz.conuropsis.org Z 0:00 | \_ [foofilter] <defunct> S 0:00 \_ /usr/sbin/exim4 -Mc 1gMazS-0007IV-RB The dovecot debug log looks like: lda(user): Debug: Loading modules from directory: /usr/lib/dovecot/modules lda(user): Debug: Module loaded: /usr/lib/dovecot/modules/lib90_sieve_plugin.so lda(user): Debug: Effective uid=1000, gid=1000, home=/home/user lda(user): Debug: maildir++: root=/home/user/Maildir, index=, indexpvt=, control=, inbox=/home/user/Maildir, alt= lda(user): Debug: userdb lookup skipped, username taken from USER environment lda(user): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= lda(user): Debug: Destination address: user(a)blitz.conuropsis.org (source: user@hostname) lda(user): Debug: sieve: Pigeonhole version 0.4.16 (fed8554) initializing lda(user): Debug: sieve: include: sieve_global is not set; it is currently not possible to include `:global' scripts. lda(user): Debug: sieve: Sieve imapsieve plugin for Pigeonhole version 0.4.16 (fed8554) loaded lda(user): Debug: sieve: Sieve Extprograms plugin for Pigeonhole version 0.4.16 (fed8554) loaded lda(user): Debug: sieve: file storage: Using active Sieve script path: /data/home/user/.dovecot.sieve lda(user): Debug: sieve: file storage: Using script storage path: /home/user/sieve lda(user): Debug: sieve: file storage: Relative path to sieve storage in active link: sieve/ lda(user): Debug: sieve: file storage: Using Sieve script path: /data/home/user/.dovecot.sieve lda(user): Debug: sieve: file script: Opened script `test-foofilter' from `/data/home/user/.dovecot.sieve' lda(user): Debug: sieve: Using the following location for user's Sieve script: /data/home/user/.dovecot.sieve lda(user): Debug: Mailbox stdin: Opened mail UID=1 because: header Message-ID (Cache file is unusable) lda(user): Debug: sieve: Opening script 1 of 1 from `/data/home/user/.dovecot.sieve' lda(user): Debug: sieve: Loading script /data/home/user/.dovecot.sieve lda(user): Debug: sieve: Script binary /data/home/user/.dovecot.svbin successfully loaded lda(user): Debug: sieve: binary save: not saving binary /data/home/user/.dovecot.svbin, because it is already stored lda(user): Debug: sieve: Executing script from `/data/home/user/.dovecot.svbin' lda(user): Debug: sieve: action execute: running program: foofilter lda(user): Debug: Mailbox stdin: Opened mail UID=1 because: mail stream lda(user): Debug: waiting for program `/usr/local/lib/dovecot/sieve-execute/foofilter' to finish after 0 msecs lda(user): Debug: program `/usr/local/lib/dovecot/sieve-execute/foofilter'(24669) execution timed out after 2000 milliseconds: sending TERM signal lda(user): Debug: program `/usr/local/lib/dovecot/sieve-execute/foofilter' (24669) did not die after 5000 milliseconds: sending KILL signal and an strace on the dovecot-lda process shows it is in an "epoll_wait(9 ....". The script is very simple: #! /bin/sh cat > /dev/null exit 1 Anyone has a clue? Thanks in advance. Best Regards, Lionel

2 5

Proxy + 2x static passdb not working as expected
by Michael Goth 13 Nov '18

13 Nov '18

Hi all, I'm trying to setup a Dovecot proxy that authenticates the user against two backend servers. If login server1 fails, server2 should be tried. The problem: Only the first server seems to be tried, even if the login fails. Config snippet: protocol imap { passdb { driver = static args = proxy=y nopassword=y host=oldserver1.example.com port=993 ssl=y } passdb { driver = static args = proxy=y nopassword=y host=oldserver2.example.com port=993 ssl=y } } With this config, only accounts on oldserver1.example.com can login. If I reverse the two passdb entries, only accounts on oldserver2.example.com can login. I've done the same with SQL passdb first + static passdb second. That worked as expected. Not sure what I'm doing wrong here. Attached is the output of doveconf -n Thanks Michael Mit freundlichen Grüßen -- Michael Goth .webflow GmbH Geschäftsführer: Andreas Schrei Wasserburger Straße 4 D - 83352 Altenmarkt a. d. Alz Amtsgericht Traunstein HRB 18537 E-Mail: mg(a)webflow.de Tel: +49 (0) 8621 - 99989 - 26 Fax: +49 (0) 8621 - 99989 - 28 Web: www.webflow.de

2 1

dsync / doveadm sync problem
by admin＠awib.it 13 Nov '18

13 Nov '18

Hi, I had an old dovecot server with a working backup script. Basic concept was: - to dsync to a temp folder - using tar to preserve datetime - piping this 7z to benefit from my 16 core cpu - piping this through openssl to encrypt Over time the size of all my mail grew from 3GB to about 70GB. I used to keep the last 14 backups, but this uses a lot of space. I now want to dsync my Maildir onto my NAS via NFS and use the backup tool provided by Synology to have incremental compressed backup. However I cannot get dsync to run. root@mail:/mnt/backup_mail# dsync -f -u USER@DOMAIN backup maildir:/mnt/backup_mail/MAILSERVER_FQDN/DOMAIN/USER/mail dsync(USER@DOMAIN): Error: User initialization failed: Namespace '': stat(/mnt/backup_mail/MAILSERVER_FQDN/DOMAIN/USER/mail) failed: Permission denied (euid=1001(vmail) egid=1001(vmail) missing +x perm: /mnt/backup_mail, UNIX perms appear ok (ACL/MAC wrong?)) root@mail:/mnt/backup_mail# dsync -u USER@DOMAIN backup maildir:/mnt/backup_mail/MAILSERVER_FQDN/DOMAIN/USER/mail dsync(USER@DOMAIN): Error: User initialization failed: Namespace '': stat(/mnt/backup_mail/MAILSERVER_FQDN/DOMAIN/USER/mail) failed: Permission denied (euid=1001(vmail) egid=1001(vmail) missing +x perm: /mnt/backup_mail, dir owner missing perms) ——— Error message changed after removing „-f“. I then applied the folder permissions (chmod +x backup_mail/) and I get a different error: root@mail:/mnt/backup_mail# dsync -f -u USER@DOMAIN backup maildir:/mnt/backup_mail/MAILSERVER_FQDN/DOMAIN/USER/mail dsync(USER@DOMAIN): Error: User initialization failed: namespace configuration error: All list=yes namespaces must use the same separator I found something about the namespace issue, but did not quite understand I guess. (separators seem to differ) From doveconf -n: [...] namespace { list = children location = maildir:/var/vmail/mailboxes/%%d/%%n/Maildir:INDEXPVT=~/Maildir/shared/%%u prefix = shared/%%u/ separator = / subscriptions = yes type = shared } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe autoexpunge = 30 days special_use = \Junk } mailbox Trash { auto = subscribe autoexpunge = 183 days special_use = \Trash } prefix = } […] ——— However I only set up the namespace for inbox. root@mail:/mnt/backup_mail# doveconf namespace gives namespace { disabled = no hidden = no ignore_on_failure = no inbox = no list = children location = maildir:/var/vmail/mailboxes/%%d/%%n/Maildir:INDEXPVT=~/Maildir/shared/%%u order = 0 prefix = shared/%%u/ separator = / subscriptions = yes type = shared } namespace inbox { disabled = no hidden = no ignore_on_failure = no inbox = yes list = yes location = mailbox Drafts { auto = subscribe autoexpunge = 0 autoexpunge_max_mails = 0 comment = driver = special_use = \Drafts } mailbox Sent { auto = subscribe autoexpunge = 0 autoexpunge_max_mails = 0 comment = driver = special_use = \Sent } mailbox Spam { auto = subscribe autoexpunge = 60 days autoexpunge_max_mails = 0 comment = driver = special_use = \Junk } mailbox Trash { auto = subscribe autoexpunge = 60 days autoexpunge_max_mails = 0 comment = driver = special_use = \Trash } order = 0 prefix = separator = subscriptions = yes type = private } I guess here we see the config including defaults. Well… I think I only need the inbox namespace either way, so I tried: root@mail:/mnt/backup_mail# dsync -f -u USER@DOMAIN backup maildir:/mnt/backup_mail/MAILSERVER_FQDN/DOMAIN/USER/mail/ -n inbox dsync-local(USER@DOMAIN): Error: read(remote) failed: EOF (version not received) doveadm(USER@DOMAIN): Fatal: execvp(maildir:/mnt/backup_mail/MAILSERVER_FQDN/DOMAIN/USER/mail/) failed: No such file or directory dsync-local(USER@DOMAIN): Error: Remote command process isn't dying, killing it dsync-local(USER@DOMAIN): Error: kill(15306, SIGKILL) failed: Operation not permitted The folder (mnt/backup_mail/MAILSERVER_FQDN/DOMAIN/USER/mail) however does exist. Can anybody tell me if there is something I miss? Thanks in advance! -M

1 0

compressed folders
by Arkadiusz Miśkiewicz 13 Nov '18

13 Nov '18

Hello. Is this still true? https://www.dovecot.org/list/dovecot/2013-March/089084.html Ability to have specific folders compressed only. -- Arkadiusz Miśkiewicz, arekm / ( maven.pl | pld-linux.org )

1 0

New install - getting error: "Failed to initialize SSL server context: Couldn't parse DH parameters"
by James Brown 13 Nov '18

13 Nov '18

I’m setting up Dovecot using Homebrew on a new server and am getting this when I try to login via IMAP: Nov 13 14:13:35 auth: Debug: auth client connected (pid=30719) Nov 13 14:13:35 imap-login: Info: Aborted login (no auth attempts in 0 secs): user=<>, rip=::1, lip=::1, secured, session=<gM0HNIN6HtoAAAAAAAAAAAAAAAAAAAAB> Nov 13 14:18:33 auth: Debug: Loading modules from directory: /usr/local/Cellar/dovecot/2.3.2.1/lib/dovecot/auth Nov 13 14:18:33 auth: Debug: Module loaded: /usr/local/Cellar/dovecot/2.3.2.1/lib/dovecot/auth/lib20_auth_var_expand_crypt.so Nov 13 14:18:33 auth: Debug: Read auth token secret from /usr/local/var/run/dovecot/auth-token-secret.dat Nov 13 14:18:33 auth: Debug: auth client connected (pid=30848) Nov 13 14:18:33 imap-login: Error: Failed to initialize SSL server context: Couldn't parse DH parameters: error:0906D06C:PEM routines:PEM_read_bio:no start line: Expecting: DH PARAMETERS: user=<>, rip=::1, lip=::1, secured, session=<q7TJRYN6RdoAAAAAAAAAAAAAAAAAAAAB> Nov 13 14:18:33 imap-login: Info: Disconnected: TLS initialization failed. (no auth attempts in 0 secs): user=<>, rip=::1, lip=::1, secured, session=<q7TJRYN6RdoAAAAAAAAAAAAAAAAAAAAB> I’ve used: Openssl gendh 2048 And put the output: -----BEGIN DH PARAMETERS----- MIIBCAKCAQEA0IF7kQX32IJFm/5HEVwYf7Be4G9iY86MvLiFLL3wHGqcPT3EMsIv YSe5XOT0Q7DGXPOZ+DLlJq8KDHxWKNI6j/0ZaRBrF38CWj8Jqxa8pqo9FVSWj45b JwSLqBSoBIEFWibqSE6L8wlV8xjMsB34xLHduJDNbaBzsooN749CopTkmkuGeXKH waOEbDzlOq+qHEa4bjx2/e/TnPj0kCrMnfeU4QILo1rJwuN4nY6k7fGwgEDVa2hE oOrVfJxxxxxxxxxyyyyyuuuixxxxblahblahblahhhkkkkkkkkkkkkXCGsxhlDQO QmzOhHqPovzbBByO9iR5fu3xbNm9YRxPowIBAg== -----END DH PARAMETERS—— Into a file dh.pem and then added ssl_dh=/usr/local/etc/dovecot/dh.pem To my dovecot.conf file. Reloaded Dovecot but still get the same error. Any suggestions? macOS 10.13.6, Dovecot 2.3.2.1 Any suggestions? Thanks, James.

3 3

Re: New install - getting error: "Failed to initialize SSL server context: Couldn't parse DH parameters"
by Tuomi, Aki 13 Nov '18

13 Nov '18

Actually you need to use ssl_dh=</usr/local/etc/dovecot/dh.pemNote the <Aki -------- Original message --------From: "Michael A. Peters" <mpeters(a)domblogger.net> Date: 13/11/2018 05:44 (GMT+02:00) To: dovecot(a)dovecot.org Subject: Re: New install - getting error: "Failed to initialize SSL server context: Couldn't parse DH parameters" tryopenssl dhparam -out /usr/local/etc/dovecot/dh.pem 2048On 11/12/2018 07:28 PM, James Brown wrote:> I’m setting up Dovecot using Homebrew on a new server and am getting > this when I try to login via IMAP:> > Nov 13 14:13:35 auth: Debug: auth client connected (pid=30719)> Nov 13 14:13:35 imap-login: Info: Aborted login (no auth attempts in 0 > secs): user=<>, rip=::1, lip=::1, secured, > session=<gM0HNIN6HtoAAAAAAAAAAAAAAAAAAAAB>> Nov 13 14:18:33 auth: Debug: Loading modules from directory: > /usr/local/Cellar/dovecot/2.3.2.1/lib/dovecot/auth> Nov 13 14:18:33 auth: Debug: Module loaded: > /usr/local/Cellar/dovecot/2.3.2.1/lib/dovecot/auth/lib20_auth_var_expand_crypt.so> Nov 13 14:18:33 auth: Debug: Read auth token secret from > /usr/local/var/run/dovecot/auth-token-secret.dat> Nov 13 14:18:33 auth: Debug: auth client connected (pid=30848)> Nov 13 14:18:33 imap-login: Error: Failed to initialize SSL server > context: Couldn't parse DH parameters: error:0906D06C:PEM > routines:PEM_read_bio:no start line: Expecting: DH PARAMETERS: user=<>, > rip=::1, lip=::1, secured, session=<q7TJRYN6RdoAAAAAAAAAAAAAAAAAAAAB>> Nov 13 14:18:33 imap-login: Info: Disconnected: TLS initialization > failed. (no auth attempts in 0 secs): user=<>, rip=::1, lip=::1, > secured, session=<q7TJRYN6RdoAAAAAAAAAAAAAAAAAAAAB>> > I’ve used:> > Openssl gendh 2048> > And put the output:> > -----BEGIN DH PARAMETERS-----> MIIBCAKCAQEA0IF7kQX32IJFm/5HEVwYf7Be4G9iY86MvLiFLL3wHGqcPT3EMsIv> YSe5XOT0Q7DGXPOZ+DLlJq8KDHxWKNI6j/0ZaRBrF38CWj8Jqxa8pqo9FVSWj45b> JwSLqBSoBIEFWibqSE6L8wlV8xjMsB34xLHduJDNbaBzsooN749CopTkmkuGeXKH> waOEbDzlOq+qHEa4bjx2/e/TnPj0kCrMnfeU4QILo1rJwuN4nY6k7fGwgEDVa2hE> oOrVfJxxxxxxxxxyyyyyuuuixxxxblahblahblahhhkkkkkkkkkkkkXCGsxhlDQO> QmzOhHqPovzbBByO9iR5fu3xbNm9YRxPowIBAg==> -----END DH PARAMETERS——> > Into a file dh.pem and then added> > ssl_dh=/usr/local/etc/dovecot/dh.pem> > To my dovecot.conf file.> > Reloaded Dovecot but still get the same error.> > Any suggestions?> > macOS 10.13.6, Dovecot 2.3.2.1> > Any suggestions?> > Thanks,> > James.

2 1

replication guide
by lty＠cndns.com 13 Nov '18

13 Nov '18

DOVECOT -N # 2.2.36 (1f10bfa63): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.24 (124e06aa) # OS: Linux 2.6.32-431.23.3.el6.x86_64 x86_64 CentOS release 6.9 (Final) '''' plugin { ''' mail_replica = tcp:10.1.1.20:1111 # replication_sync_timeout = 2s replication_sync_timeout = 2 '''' } '''' /VAR/LOG/DOVECOT/DOVECOT.LOG doveadm(lty(a)cndns.com): Error: replication(lty(a)cndns.com): Invalid replication_sync_timeout value: 2s I am talking about the replication_sync_timeout = 2s in the configuration file changed to replication_sync_timeout = 2, no prompt error, but I get the following prompt /VAR/LOG/DOVECOT/DOVECOT.LOG Nov 12 14:01:10 replicator: Panic: data stack: Out of memory when allocating 268435496 bytes Nov 12 14:01:10 replicator: Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0() [0x3bdd69f74a] -> /usr/lib64/dovecot/libdovecot.so.0() [0x3bdd69f7b6] -> /usr/lib64/dovecot/libdovecot.so.0() [0x3bdd630b8a] -> /usr/lib64/dovecot/libdovecot.so.0() [0x3bdd69d34a] -> /usr/lib64/dovecot/libdovecot.so .0() [0x3bdd69d558] -> /usr/lib64/dovecot/libdovecot.so.0() [0x3bdd6bb818] -> /usr/lib64/dovecot/libdovecot.so.0() [0x3bdd69b0a2] -> /usr/ Lib64/dovecot/libdovecot.so.0(buffer_write+0x89) [>xvebd/b. -> dovecot/replicator() [0x4040d0] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x61) [0x3bdd6b4921] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xbf ) [0x3bdd6b65cf] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x3c) [0x3bdd6b49dc] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x3bdd6b4b98] -> /usr/lib64/do Vecot/libdovecot.so.0(master_service_run+0x13) [0x3bdd63ad43] -> dovecot/replicator(main+0x17e) [0x40461e] -> /lib64/libc.so.6(__libc_start_main+0xfd) [0x3bb6a1ed1d] -> dovecot/ Replicator() [0x4031f9] Nov 12 14:01:10 replicator: Fatal: master: service(replicator): child 19591 killed with signal 6 (core dumps disabled) /VAR/LOG/DOVECOT/SIEVE.LOG Nov 12 13:54:36 lda(lty(a)cndns.com): Warning: replication(lty(a)cndns.com): Remote sent invalid input: - Nov 12 13:54:36 lda(lty(a)cndns.com): Info: sieve: msgid=unspecified: stored mail into mailbox 'Junk' Nov 12 14:01:10 lda(lty(a)cndns.com): Warning: replication(lty@cndnscom): Sync failure: Nov 12 14:01:10 lda(lty(a)cndns.com): Warning: replication(lty(a)cndns.com): Remote sent invalid input: - Please help me, thank you

1 0

Disaster Recovery Help
by Giovanni Bisanti TEST 2 13 Nov '18

13 Nov '18

I lost the whole maildir from my server fro 3 users. They all have iPhones with all the messages safely stored on the Apple Mail app on their phone. There is no way to export them/move them. Is there a way to get Dovecot to just download all the messages and folder structure from the client and restore it on the server? Your help is very very much appreciated. Thanks, ttyllc

4 5

Help Disaster Recovery
by Giovanni Bisanti 12 Nov '18

12 Nov '18

I lost the whole maildir from my server fro 3 users. They all have iPhones with all the messages safely stored on the Apple Mail app on their phone. There is no way to export them/move them. Is there a way to get Dovecot to just download all the messages and folder structure from the client and restore it on the server? Your help is very very much appreciated. Thanks, ttyllc

1 0

Disaster Recovery Help
by Giovanni Bisanti 12 Nov '18

12 Nov '18

I lost the whole maildir from my server fro 3 users. They all have iPhones with all the messages safely stored on the Apple Mail app on their phone. There is no way to export them/move them. Is there a way to get Dovecot to just download all the messages and folder structure from the client and restore it on the server? Your help is very very much appreciated. Thanks, ttyllc

1 0

Disaster Recovery Help
by Giovanni Bisanti 12 Nov '18

12 Nov '18

I lost the whole maildir from my server fro 3 users. They all have iPhones with all the messages safely stored on the Apple Mail app on their phone. There is no way to export them/move them. Is there a way to get Dovecot to just download all the messages and folder structure from the client and restore it on the server? Your help is very very much appreciated. Thanks, ttyllc

1 0

Seen-Flag and Virtual
by Dieter Knopf 12 Nov '18

12 Nov '18

Hello, We have a very large folder structure (in a public namespace) on our Dovecot server and would now like to create a virtual folder containing all mails of the publick namespace. This worked quite well with dovecot-virtual, but the read status (\seen) is not preserved. i.e. when I read a mail inside the virtual folder, the read status does not affect the original mail. Dovecut was configured with per-user \seen-flag. Is it possible to synchronize the \seen-flag somehow? Thanks Dieter

1 0

Re: Cannot make disable_plaintext_auth = no works in configuration
by Tanstaafl 12 Nov '18

12 Nov '18

Please keep list communications on list. If your doveconf -n doesn't reflect the changes you are making, then you are editing the wrong file. On Mon Nov 12 2018 10:22:45 GMT-0500 (Eastern Standard Time), Steve Leung <steveleung597(a)yahoo.com> wrote: > The doveconf -n did not show this setting, which I suppose it is keeping > the default value. > > Thanks > > Sent from Yahoo Mail on Android > <https://go.onelink.me/107872968?pid=InProduct&c=Global_Internal_YGrowth_And…> > > On Mon, Nov 12, 2018 at 6:51 AM, Tanstaafl > <tanstaafl(a)libertytrek.org> wrote: > On 11/11/2018, 4:02:25 AM, Steve Leung <steveleung597(a)yahoo.com > <mailto:steveleung597@yahoo.com>> wrote: > > > Hi, > > > > No matter how I try, I cannot make the config disable_plaintext_auth = > > no to work. I have set it up in 10-auth.conf but when I check with > > doveconf -a it is still disable_plaintext_auth = yes. > > > As expected. > > doveconf -a shows all DEFAULT settings > > doveconf -n shows your custom/current settings being used by the running > dovecot system. > > What does doveconf -n show? >

1 0

Cannot make disable_plaintext_auth = no works in configuration
by Steve Leung 12 Nov '18

12 Nov '18

Hi, No matter how I try, I cannot make the config disable_plaintext_auth = no to work. I have set it up in 10-auth.conf but when I check with doveconf -a it is still disable_plaintext_auth = yes. Here is my config: # 2.2.33.2 (d6601f4ec): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.21 (92477967) # OS: Linux 4.15.0-36-generic x86_64 Ubuntu 18.04.1 LTS auth_mechanisms = plain login mail_location = maildir:~/Maildir mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = username_format=%u /etc/dovecot/passwd driver = passwd-file } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap sieve pop3" service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } } ssl = no ssl_cert = </etc/dovecot/private/dovecot.pem ssl_client_ca_dir = /etc/ssl/certs ssl_key = # hidden, use -P to show it userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } Please help! Thanks so much Steve

2 1

moving only new mails from one server to another
by Nicolas 12 Nov '18

12 Nov '18

Hello, I think it is not really the right place to post about that, but lot of dovecot experts there ;) Basically, I have a server with dovecot 2.2.9 that has new (unread) mails (because of a bad DNS config at a migration time). Is there an easy way to move only these unread mails to a another server ? (no perms trouble here : all vmail:vmail) Though to iterate through all /var/vmail/*/*/Maildir/new and scp/rsync them. Would that work ? Thanks in advance for your time. Nicolas

2 1

replication guide
by lty＠cndns.com 12 Nov '18

12 Nov '18

DOVECOT -N # 2.2.36 (1f10bfa63): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.24 (124e06aa) # OS: Linux 2.6.32-431.23.3.el6.x86_64 x86_64 CentOS release 6.9 (Final) '''' plugin { ''' mail_replica = tcp:10.1.1.20:1111 # replication_sync_timeout = 2s replication_sync_timeout = 2 '''' } '''' /VAR/LOG/DOVECOT/DOVECOT.LOG doveadm(lty(a)cndns.com): Error: replication(lty(a)cndns.com): Invalid replication_sync_timeout value: 2s I am talking about the replication_sync_timeout = 2s in the configuration file changed to replication_sync_timeout = 2, no prompt error, but I get the following prompt /VAR/LOG/DOVECOT/DOVECOT.LOG Nov 12 14:01:10 replicator: Panic: data stack: Out of memory when allocating 268435496 bytes Nov 12 14:01:10 replicator: Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0() [0x3bdd69f74a] -> /usr/lib64/dovecot/libdovecot.so.0() [0x3bdd69f7b6] -> /usr/lib64/dovecot/libdovecot.so.0() [0x3bdd630b8a] -> /usr/lib64/dovecot/libdovecot.so.0() [0x3bdd69d34a] -> /usr/lib64/dovecot/libdovecot.so .0() [0x3bdd69d558] -> /usr/lib64/dovecot/libdovecot.so.0() [0x3bdd6bb818] -> /usr/lib64/dovecot/libdovecot.so.0() [0x3bdd69b0a2] -> /usr/ Lib64/dovecot/libdovecot.so.0(buffer_write+0x89) [>xvebd/b. -> dovecot/replicator() [0x4040d0] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x61) [0x3bdd6b4921] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xbf ) [0x3bdd6b65cf] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x3c) [0x3bdd6b49dc] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x3bdd6b4b98] -> /usr/lib64/do Vecot/libdovecot.so.0(master_service_run+0x13) [0x3bdd63ad43] -> dovecot/replicator(main+0x17e) [0x40461e] -> /lib64/libc.so.6(__libc_start_main+0xfd) [0x3bb6a1ed1d] -> dovecot/ Replicator() [0x4031f9] Nov 12 14:01:10 replicator: Fatal: master: service(replicator): child 19591 killed with signal 6 (core dumps disabled) /VAR/LOG/DOVECOT/SIEVE.LOG Nov 12 13:54:36 lda(lty(a)cndns.com): Warning: replication(lty(a)cndns.com): Remote sent invalid input: - Nov 12 13:54:36 lda(lty(a)cndns.com): Info: sieve: msgid=unspecified: stored mail into mailbox 'Junk' Nov 12 14:01:10 lda(lty(a)cndns.com): Warning: replication(lty@cndnscom): Sync failure: Nov 12 14:01:10 lda(lty(a)cndns.com): Warning: replication(lty(a)cndns.com): Remote sent invalid input: - Please help me, thank you

1 0

The SSL certificate of repo.dovecot.org has expired.
by Masaki Nemoto 11 Nov '18

11 Nov '18

Hi The SSL certificate of https://repo.dovecot.org has expired. Do you have plans to update it?

1 0

Re: The SSL certificate of repo.dovecot.org has expired.
by Tuomi, Aki 10 Nov '18

10 Nov '18

Yes. Sorry about this.Sent from my Samsung Galaxy smartphone. -------- Original message --------From: Masaki Nemoto <itml(a)ma3ki.net> Date: 11/11/2018 10:00 (GMT+02:00) To: dovecot(a)dovecot.org Subject: The SSL certificate of repo.dovecot.org has expired. HiThe SSL certificate of https://repo.dovecot.org has expired.Do you have plans to update it?

2 1

after reboot listen(*, 995) failed: Address already in use/listen(*, 993) failed: Address already in use
by Robert Kudyba 09 Nov '18

09 Nov '18

This is still happening after a reboot, Fedora 28. Restarting dovecot fixes the problem. Does anyone know if it could be related to this bug report? *https://bugzilla.redhat.com/show_bug.cgi?id=103401#c130 <https://bugzilla.redhat.com/show_bug.cgi?id=103401#c130> * and suggested work around to add ports to /proc/sys/net/ipv4/ip_local_reserved_ports? Nov 8 12:21:41 ourdomain dovecot[1386]: Error: service(pop3-login): listen(*, 995) failed: Address already in use Nov 8 12:21:41 ourdomain dovecot[1386]: Error: service(pop3-login): listen(::, 995) failed: Address already in use Nov 8 12:21:41 ourdomain dovecot[1386]: Error: service(imap-login): listen(*, 993) failed: Address already in use Nov 8 12:21:41 ourdomain dovecot[1386]: Error: service(imap-login): listen(::, 993) failed: Address already in use dovecot --version 2.2.36 (1f10bfa63) dovecot -n # 2.2.36 (1f10bfa63): /etc/dovecot/dovecot.conf # OS: Linux 4.18.16-200.fc28.x86_64 x86_64 Fedora release 28 (Twenty Eight) # Hostname: ourdomain.com auth_debug = yes debug_log_path = /var/log/dovecot-debug.log mail_debug = yes mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } ssl = required ssl_cert = </etc/letsencrypt/live/ourdomain.com/fullchain.pem ssl_cipher_list = PROFILE=SYSTEM ssl_key = # hidden, use -P to show it userdb { driver = passwd } protocol imap { mail_location = mbox:~/mail:INBOX=/var/mail/%u

3 2

Strange log message with dovecot-2.3.3
by Christian Pélissier 08 Nov '18

08 Nov '18

Hi, # dovecot --version 2.3.3 (dcead646b) # doveinfo Nombre d'utilisateurs : 1151 Sockets IMAP : 4356 Process dovecot/imap : 4357 Process dovecot/imap-login : 1339 Process dovecot/pop3 : 0 Process dovecot/pop3-login : 0 Process dovecot/auth : 1 Process dovecot/auth -w : 2 Process dovecot/anvil : 1 Process dovecot/log : 1 Process dovecot/config : 1 Process dovecot/stats : 1 Since I am using dovecot 2.3.X I got the following messages /var/log/dovecot-20180930:Sep 28 17:33:38 balcha dovecot: master: Warning: service(stats): client_limit (1000) reached, client connections are being dropped Users complain the system became slow. I happen when dovecot/imap process grows above 1000. With 2.2.X no default were defined (#default_client_limit = 1000) and I have no such log and no performance problems. With 2.3.3 I first increase default_client_limit to 4096 but the following message come again when dovecot/imap grow above 4096 ====== Nov 6 12:09:12 balcha dovecot: master: Warning: service(stats): client_limit (4096) reached, client connections are being dropped Nov 6 12:09:25 balcha dovecot: imap: Error: net_connect_unix(/var/run/dovecot//stats-writer) failed: Resource temporarily unavailable ... many same lines as above ====== Now 8192 solve my problem default_client_limit = 8192 I don't understand why the first Warning is related to service(stats) instead of service(imap) and why the socket stats-writer became temporarily unavailable # ls -l /var/run/dovecot/stats-writer srw-rw---- 1 root dovecot 0 Nov 8 02:44 /var/run/dovecot/stats-writer PS. # dovecot --version 2.3.3 (dcead646b) # dovecot -n # 2.3.3 (dcead646b): /usr/local/dovecot-2.3.3/etc/dovecot/dovecot.conf # Pigeonhole version 0.5.3 (f018bbab) # OS: Linux 2.6.32-696.30.1.el6.x86_64 x86_64 Red Hat Enterprise Linux Server release 6.9 (Santiago) # Hostname: balcha.onera base_dir = /var/run/dovecot/ default_client_limit = 8192 <<< default with dovecot 2.2.X changed to 4096 then 8192 disable_plaintext_auth = no listen = * mail_location = maildir:~/Maildir:INDEX=~/Maildir:CONTROL=~/Maildir mail_plugins = quota managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mbox_write_locks = fcntl passdb { args = %s driver = pam } plugin { quota = maildir:User quota quota_grace = 6%% quota_rule = ?:storage=6G quota_rule2 = Trash:storage=+5%% quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = file:~/sieve;active=~/.dovecot.sieve } postmaster_address = postmaster(a)onera.fr quota_full_tempfail = yes rejection_reason = Votre message à <%t> est mis en attente; raison : %n% r rejection_subject = Message (Objet: %s) mis en attente de livraison service anvil { client_limit = 4299 } service auth { client_limit = 5320 } service imap-login { client_limit = 8192 process_limit = 4096 } service imap { process_limit = 8192 } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { group = root mode = 0666 user = root } user = root } ssl_cert = </usr/local/dovecot/etc/certs/dovecot.pem ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it syslog_facility = local1 userdb { driver = passwd } protocol lda { mail_plugins = quota sieve } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_reuse_xuidl = yes } -- Christian Pélissier ONERA DSI/ISR BP72 92322 Chatillon CEDEX  34419

1 0

MailLog plugin distinguish between simultaneous logins
by azurit＠pobox.sk 07 Nov '18

07 Nov '18

Hi, is it, somehow, possible to distinguish between multiple simultaneous logins in MailLog plugin? For example, which login deleted which message. Is that p[lugin able to log e.g. session ID? azur

2 3

Dovecot mail-crypt plugin
by Anushka Uditha Bandara 07 Nov '18

07 Nov '18

I configured an email solution using dovecot and postfix and it is working fine. Now I am working for mail encryption. Is it enough to set below configurations on dovecot for mail encryption. Because dovecot wiki is little bit confusing to me. "mail_plugins = $mail_plugins mail_crypt mail_attribute_dict = file:%h/Maildir/dovecot-attributes plugin { mail_crypt_curve = <some curve you like> mail_crypt_save_version = 2 }" I am stuck in here. Thank you in advance, Anushka Bandara

2 9

LMTP with many aliases and replication
by Sean Greenslade 07 Nov '18

07 Nov '18

Hi, all. I'm currently in the process of rethinking / tinkering with my personal mail server. I've hit a few stumbling blocks that make me think I may be approaching this problem from the wrong angle. I have a large number of email addresses across several domains that all alias to the same inbox. In my current setup, postfix handles the aliases and dumps them all into a single "receiving" maildir, which gets processed by a custom python script to sort into one of several destination maildirs handled by dovecot. In evaluating this system, I'd like to move to using sieve for this sorting step, so (according to the docs) I need to use LMTP. This is my first stumble. Since I use so many aliases, my IMAP login username is not my email address. In fact, I have several IMAP usernames with different passwords pointing to the same maildir so that my phone can use a different password than my PC. The dovecot documentation was not very clear on how to make LMTP use a different userdb. I eventually found through some trial and error and some hints from other list threads that I could wrap a second userdb {} section with a protocol lmtp {} section, which seems to do the trick. I'd like to edit the wiki to include this helpful tidbit, but I find it odd that this isn't mentioned anywhere in the documentation for LMTP. Is it actually an intended feature? My second stumble is with the replicator plugin. I'd like to run two identical dovecot servers that replicate their mailboxes across each other. Since there are a large number of alias "accounts" that all feed into one IMAP account, the logical place to put the replication would be the IMAP account. But the way the replicator plugin seems to work, the trigger for synchronous replication on mail receipt fires on the LMTP "account" that received that particular message. Is there any way within dovecot to specify a different replication account to be triggered for sync? Like a userdb extra field or something? I'm trying to avoid needing external scripts if at all possible. I'm interested to hear people's thought / suggestions, especially if anyone has a better way of architecting this system. In case it's relevant, I'm running Arch Linux / Dovecot 2.3.3. Thanks, --Sean

1 0