- dovecot - dovecot.org

v2.2.31 released
by Timo Sirainen 26 Jun '17

26 Jun '17

https://dovecot.org/releases/2.2/dovecot-2.2.31.tar.gz https://dovecot.org/releases/2.2/dovecot-2.2.31.tar.gz.sig This should be a great and stable release for the summer :) v2.2.32 is planned for the end of August. Hopefully soon afterwards we can get back to v2.3. * LMTP: Removed "(Dovecot)" from added Received headers. Some installations want to hide it, and there's not really any good reason for anyone to have it. + Add ssl_alt_cert and ssl_alt_key settings to add support for having both RSA and ECDSA certificates. + dsync/imapc, pop3-migration plugin: Strip trailing whitespace from headers when matching mails. This helps with migrations from Zimbra. + acl: Add acl_globals_only setting to disable looking up per-mailbox dovecot-acl files. + Parse invalid message addresses better. This mainly affects the generated IMAP ENVELOPE replies. - v2.2.30 wasn't fixing corrupted dovecot.index.cache files properly. It could have deleted wrong mail's cache or assert-crashed. - v2.2.30 mail-crypt-acl plugin was assert-crashing - v2.2.30 welcome plugin wasn't working - Various fixes to handling mailbox listing. Especially related to handling nonexistent autocreated/autosubscribed mailboxes and ACLs. - Global ACL file was parsed as if it was local ACL file. This caused some of the ACL rule interactions to not work exactly as intended. - auth: forward_* fields didn't work properly: Only the first forward field was working, and only if the first passdb lookup succeeded. - Using mail_sort_max_read_count sometimes caused "Broken sort-* indexes, resetting" errors. - Using mail_sort_max_read_count may have caused very high CPU usage. - Message address parsing could have crashed on invalid input. - imapc_features=fetch-headers wasn't always working correctly and caused the full header to be fetched. - imapc: Various bugfixes related to connection failure handling. - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when expunging mails. - quota=count: quota_warning = -storage=.. was never executed - quota=count: Add support for "ns" parameter - dsync: Fix incremental syncing for mails that don't have Date or Message-ID headers. - imap: Fix hang when client sends pipelined SEARCH + EXPUNGE/CLOSE/LOGOUT. - oauth2: Token validation didn't accept empty server responses. - imap: NOTIFY command has been almost completely broken since the beginning. I guess nobody has been trying to use it.

1 0

acl shared maildir with virtual users
by Rich Simcox 26 Jun '17

26 Jun '17

Can anyone point out where i'm going wrong with my dovecot sharedinbox setup with ACL i'm contemplating giving up with dovecot alltogether i've spent 3 days trying different paths to the virtual users mailboxes I seem to have two issues my acls are getting written to my sql db fine in roundcube i can see the shared folder but cant subscribe to it in thunderbird if i go to namespaces it sees the shared. namespace but its not listing anything in it even though my acls are written to the db please someone tell me what i'm missing i'm betting its something silly but i've been over and over the wiki here is my conf and below it an extract of my debug log # 2.2.28 (bed8434): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-642.3.1.el6.x86_64 x86_64 CentOS release 6.9 (Final) auth_cache_size = 1 M auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_policy_hash_mech = sha512 auth_policy_hash_nonce = 78204771 auth_policy_hash_truncate = 64 auth_policy_request_attributes = auth_database=mail database=mail service=dovecot username=%{orig_user} authtoken_hash=$0$0$%{hashed_password} local_host=%{real_lip} local_port=%{real_lport} remote_host=%{real_rip} remote_port=%{real_rport} auth_policy_server_api_header = X-API-Key:dovecot:xxxxxxxxxxxx auth_policy_server_timeout_msecs = 3000 auth_policy_server_url = http://127.0.0.1:579/dovecot-auth-policy auth_username_chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!#$-=?^_{}~./@+%" auth_verbose = yes dict { acl = sqlite:/usr/local/cpanel/etc/dovecot/dovecot-dict-shares.conf.ext expire = sqlite:/usr/local/cpanel/etc/dovecot/dovecot-dict-expire.conf.ext } disable_plaintext_auth = no first_valid_uid = 201 lda_mailbox_autocreate = yes lmtp_save_to_detail_mailbox = yes login_greeting = Welcome to Motorsport Tools mail_access_groups = dovecot mail_debug = yes mail_plugins = acl quota quota_clone fts fts_solr mail_prefetch_count = 20 mailbox_list_index = yes namespace inbox { inbox = yes location = mailbox Archive { auto = create special_use = \Archive } mailbox Archives { auto = no special_use = \Archive } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = create special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { auto = no special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } mailbox spam { auto = create special_use = \Junk } prefix = INBOX. separator = . type = private } passdb { args = /usr/local/cpanel/etc/dovecot/cpauthd-dict.conf driver = dict result_failure = return-fail } passdb { args = /usr/local/cpanel/bin/dovecot-wrap driver = checkpassword skip = authenticated } plugin { acl = vfile:cache_secs=86400 acl_anyone = allow acl_shared_dict = proxy::acl expire_cache = yes fts = solr fts_solr = url=http://lTkFlGxjRar1hZAW:Ocj1FRRvlUs5Udj6@127.0.0.1:8984/solr/dovecot/ quota_exceeded_message = Mailbox is full please archive you old mail zlib_save = gz } protocols = lmtp imap service auth { unix_listener auth-client { mode = 0666 } } service config { vsz_limit = 2 G } service dict { unix_listener dict { group = dovecot mode = 0660 } } service imap-login { client_limit = 500 inet_listener imap { address = *,:: } inet_listener imaps { address = *,:: } process_limit = 100 process_min_avail = 8 service_count = 0 vsz_limit = 128 M } service imap { process_limit = 1024 vsz_limit = 512 M } service lmtp { client_limit = 1 process_limit = 500 unix_listener lmtp { group = mail mode = 0660 user = mailnull } vsz_limit = 512 M } service managesieve-login { client_limit = 500 process_limit = 100 process_min_avail = 8 service_count = 0 vsz_limit = 128 M } service managesieve { process_limit = 1024 vsz_limit = 512 M } service quota-status { executable = quota-status -p postfix unix_listener quota-status { mode = 0666 } } ssl = required ssl_cert = </etc/dovecot/ssl/dovecot.crt ssl_cipher_list = ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv2 !SSLv3 userdb { driver = prefetch } userdb { args = /usr/local/cpanel/etc/dovecot/cpauthd-dict.conf driver = dict } userdb { args = /usr/local/cpanel/bin/dovecot-wrap driver = checkpassword } protocol imap { imap_capability = +NAMESPACE imap_client_workarounds = tb-extra-mailbox-sep imap_idle_notify_interval = 24 mins imap_logout_format = in=%i, out=%o, bytes=%i/%o mail_location = maildir:~/ mail_max_userip_connections = 60 mail_plugins = acl quota imap_quota imap_acl imap_zlib quota_clone virtual fts fts_solr namespace { hidden = no list = yes location = maildir:%%h/Maildir:INDEXPVT=~/mail/virtual/%u/shared/%%u prefix = Shared.%%u. separator = . subscriptions = no type = shared } namespace sent { hidden = yes list = no location = virtual:/usr/local/cpanel/etc/dovecot/virtual/sent:INDEX=~/mail/virtual/%u prefix = sent separator = . } namespace spam { hidden = yes list = no location = virtual:/usr/local/cpanel/etc/dovecot/virtual/spam:INDEX=~/mail/virtual/%u prefix = spam separator = . } } protocol lda { mail_plugins = quota quota_clone postmaster_address = root quota_full_tempfail = no } local_name home.servers.co.uk www.home.servers.co.uk { ssl_cert = </etc/dovecot/ssl/dovecot.crt ssl_key = # hidden, use -P to show it } local_name website1.com www.website1.com www.website2.com website2.com { ssl_cert = </var/cpanel/ssl/domain_tls/website1.com/combined ssl_key = # hidden, use -P to show it i see this alot Debug: acl vfile: reading file /home/server/mail/website2.com/sales/.ebay.Sent/dovecot-acl this is how my path currently looks in debug but i've tried all sorts Jun 23 22:32:47 ssd99 dovecot: imap(sales(a)website2.com): Debug: Namespace : type=shared, prefix=Shared.%u., sep=., inbox=no, hidden=no, list=yes, subscriptions=no location=maildir:%h/Maildir:INDEXPVT=~/mail/virtual/sales@website2.com/shared/%u this is what my private namespace paths relate to Jun 23 22:32:47 ssd99 dovecot: imap(sales(a)website2.com): Debug: Namespace sent: type=private, prefix=sent, sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=virtual:/usr/local/cpanel/etc/dovecot/virtual/sent:INDEX=~/mail/virtual/sales@website2.com Jun 23 22:32:47 ssd99 dovecot: imap(sales(a)website2.com): Debug: fs: root=/usr/local/cpanel/etc/dovecot/virtual/sent, index=/home/server/mail/website2.com/sales/mail/virtual/sales@website2.com, indexpvt=, control=, inbox=, alt= please someone must know the answer

2 1

ACL problems on shared folder
by Thomas Robers 26 Jun '17

26 Jun '17

Hello, I've a Dovecot Server Version 2.2.30.2 running on CentOS 6.9 and there's a problem with acls on shared folder. We have some mailboxes which are shared and used as a "group mailbox" and also some user who share their inbox and only the inbox when they are on holiday e.g.. When I set "acl_defaults_from_inbox = yes" it's not possible to restrict the access to only the inbox, meaning that the user who wants to share only their inbox have to share the whole mailbox. On the other hand when I set "acl_defaults_from_inbox = no" it is not possible to create a folder direct under the inbox of a "group mailbox" and one gets a "permission denied" message. Is this the normal behavior normal? Although the user who wants to create the folder has all rights he gets a "permission denied" message? Why? Am I missing something important? Does anyone who uses shared mailboxes had the same problem and solved this? Any suggestion or information, that I probably miss is welcome. If needed here's my Dovecot configuration: > # 2.2.30.2 (c0c463e): /etc/dovecot/dovecot.conf > # Pigeonhole version 0.4.18 (29cc74d) > # OS: Linux 2.6.32-696.3.1.el6.x86_64 x86_64 CentOS release 6.9 (Final) ext4 > auth_debug = yes > auth_master_user_separator = * > auth_mechanisms = plain login > auth_verbose = yes > disable_plaintext_auth = no > mail_debug = yes > mail_location = maildir:/export/home/imap/%Lu/Maildir > mail_plugins = acl zlib mail_log notify > mailbox_idle_check_interval = 10 secs > mailbox_list_index = yes > managesieve_notify_capability = mailto > managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext > mbox_write_locks = fcntl > namespace { > hidden = no > ignore_on_failure = no > inbox = no > list = children > location = maildir:%%h/Maildir:INDEXPVT=%h/shared/%%u > prefix = shared/%%u/ > separator = / > subscriptions = yes > type = shared > } > namespace inbox { > hidden = no > inbox = yes > list = yes > location = > mailbox Drafts { > special_use = \Drafts > } > mailbox Junk { > special_use = \Junk > } > mailbox Sent { > special_use = \Sent > } > mailbox "Sent Messages" { > special_use = \Sent > } > mailbox Trash { > special_use = \Trash > } > prefix = INBOX/ > separator = / > type = private > } > passdb { > args = /etc/dovecot/master-users > driver = passwd-file > master = yes > } > passdb { > args = /etc/dovecot/dovecot-ldap.conf.ext > driver = ldap > } > plugin { > acl = vfile:/etc/dovecot/global-acls:cache_secs=300 > acl_shared_dict = file:/export/home/shared-db/shared-mailboxes > mail_log_events = append delete undelete expunge copy mailbox_delete mailbox_rename flag_change > mail_log_fields = uid box msgid size from flags > sieve = ~/.dovecot.sieve > sieve_dir = ~/sieve > sieve_global = /var/lib/dovecot/sieve/global/ > sieve_user_log = ~/.dovecot.sieve.log > zlib_save = gz > zlib_save_level = 6 > } > protocols = imap pop3 lmtp sieve > service auth { > unix_listener /var/spool/postfix/private/auth { > mode = 0666 > } > unix_listener auth-userdb { > group = vmail > mode = 0660 > user = vmail > } > } > service imap-login { > process_limit = 500 > process_min_avail = 20 > } > service lmtp { > inet_listener lmtp { > address = 127.0.0.1 > port = 24 > } > } > service managesieve-login { > inet_listener sieve { > port = 4190 > } > inet_listener sieve_deprecated { > port = 2000 > } > } > ssl = required > ssl_cert = </etc/pki/dovecot/certs/mail.tutech.de.crt_chain > ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL:!EXPORT > ssl_key = # hidden, use -P to show it > ssl_protocols = !SSLv3 !SSLv2 > syslog_facility = local6 > userdb { > args = /etc/dovecot/dovecot-ldap-userdb.conf.ext > driver = ldap > } > protocol lmtp { > mail_plugins = acl zlib mail_log notify sieve > } > protocol imap { > mail_max_userip_connections = 100 > mail_plugins = acl zlib mail_log notify imap_zlib imap_acl > } TIA & Regards, Thomas

1 0

Courier migration to dovecot
by j.emerlik 23 Jun '17

23 Jun '17

Hi, I'm almost ready to migrate Courier to Dovecot 2.2.31 but I have one question about home and mail directory. It's good idea to have same directory form home and mail ? Which scenerio will be better and why ? For example: A) Home: /home/doamin/user1 Mail: /home/doamin/user1 B) Home: /home/doamin/user1/home Mail: /home/doamin/user1 C) Home: /home/doamin/user1/ Mail: /home/doamin/user1/mail Thanks & regards, Jack

3 4

v2.2.31 release candidate released
by Timo Sirainen 23 Jun '17

23 Jun '17

https://dovecot.org/releases/2.2/rc/dovecot-2.2.31.rc1.tar.gz https://dovecot.org/releases/2.2/rc/dovecot-2.2.31.rc1.tar.gz.sig Unless new bugs are found, this will be the final v2.2.31 release, which will be released on Monday. * LMTP: Removed "(Dovecot)" from added Received headers. Some installations want to hide it, and there's not really any good reason for anyone to have it. + Add ssl_alt_cert and ssl_alt_key settings to add support for having both RSA and ECDSA certificates. + pop3-migration plugin: Strip trailing whitespace from headers when matching mails between IMAP and POP3. This helps with migrations from Zimbra. + acl: Add acl_globals_only setting to disable looking up per-mailbox dovecot-acl files. + Parse invalid message addresses better. This mainly affects the generated IMAP ENVELOPE replies. - v2.2.30 wasn't fixing corrupted dovecot.index.cache files properly. It could have deleted wrong mail's cache or assert-crashed. - v2.2.30 mail-crypt-acl plugin was assert-crashing - v2.2.30 welcome plugin wasn't working - Various fixes to handling mailbox listing. Especially related to handling nonexistent autocreated/autosubscribed mailboxes and ACLs. - Global ACL file was parsed as if it was local ACL file. This caused some of the ACL rule interactions to not work exactly as intended. - auth: forward_* fields didn't work properly: Only the first forward field was working, and only if the first passdb lookup succeeded. - Using mail_sort_max_read_count sometimes caused "Broken sort-* indexes, resetting" errors. - Using mail_sort_max_read_count may have caused very high CPU usage. - Message address parsing could have crashed on invalid input. - imapc_features=fetch-headers wasn't always working correctly and caused the full header to be fetched. - imapc: Various bugfixes related to connection failure handling. - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when expunging mails. - quota=count: quota_warning = -storage=.. was never executed - quota=count: Add support for "ns" parameter - dsync: Fix incremental syncing for mails that don't have Date or Message-ID headers. - imap: Fix hang when client sends pipelined SEARCH + EXPUNGE/CLOSE/LOGOUT. - oauth2: Token validation didn't accept empty server responses. - imap: NOTIFY command has been almost completely broken since the beginning. I guess nobody has been trying to use it.

4 5

sieve vacation message if ....
by lejeczek 23 Jun '17

23 Jun '17

hi fellas generic construct for(if possible): reply vacation message if address is not from add1@com1 add2@com2 would you share? many thanks L.

4 5

Trouble after Upgrade to v2.2.30.2 missing value for DOVECOT_
by Beng Hui Ong 23 Jun '17

23 Jun '17

Hi, I keep getting these errors after upgraded to 2.2.30.2. I can't seems to find what is going on. This is running a Freebsd 10.3-RELEASE-p11 :( Can someone please assist ? Jun 22 14:45:23 starlite2 dovecot: auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Jun 22 14:45:23 starlite2 dovecot: auth: Debug: Module loaded: /usr/local/lib/dovecot/auth/lib20_auth_var_expand_crypt.so Jun 22 14:45:23 starlite2 dovecot: auth: Debug: Read auth token secret from /var/run/dovecot/auth-token-secret.dat Jun 22 14:45:23 starlite2 dovecot: auth: Error: auth: environment corrupt; missing value for DOVECOT_ Jun 22 14:45:23 starlite2 dovecot: auth: Fatal: unsetenv(RESTRICT_SETUID) failed: Bad address Jun 22 14:45:23 starlite2 dovecot: master: Error: service(auth): command startup failed, throttling for 4 secs root@starlite2:/usr/ports/mail/dovecot2/work/dovecot-2.2.30.2/src/auth # dovecot -n # 2.2.30.2 (c0c463e): /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 10.3-RELEASE-p11 amd64 auth_debug = yes auth_default_realm = ispworkshop.com auth_mechanisms = plain login auth_realms = ispworkshop.com auth_verbose = yes disable_plaintext_auth = no first_valid_uid = 5000 hostname = www3.ispworkshop.net last_valid_uid = 5000 lda_mailbox_autocreate = yes login_greeting = Ready. mail_gid = 5000 mail_location = maildir:~/ mail_plugins = quota expire mail_log notify mail_temp_dir = /var/tmp mail_uid = 5000 namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / type = private } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } postmaster_address = ongbh(a)ispworkshop.net sendmail_path = /usr/local/sbin/sendmail service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service imap-login { process_min_avail = 1 } ssl = no userdb { driver = passwd } userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol imap { mail_max_userip_connections = 100 } protocol pop3 { mail_max_userip_connections = 100 }

2 1

Issue with dsync server - copy transaction record copying to wrong destination mailbox.
by Ivan Warren 22 Jun '17

22 Jun '17

Hello all, I am encountering the following issue : I have 2 dovecot servers with 2 way replication. Everything works fine except for one specific issue : When my MUA (thunderbird) filters (junk & manual) refile a mail from my inbox, I then sometimes find multiple copies of the original message in the destination folder. I have seen the following log entries which make me think (but I'm new to this) that there could be an issue with the processing of the COPY transaction record during DSYNC : * TB Marking msg as Junk Jun 22 20:36:14 db04 dovecot: imap(ivan): flag_change: box=INBOX, uid=502902, msgid=<RF7w0iVHwvOBtpFW7y7eTF3jazYxJeuFC9JvB9xsjnk.gI5bQ0w8OtJJT7-T4krQTG3XkEqb5Hti..., size=9942 * TB Copies msg to Junk Mailbox Jun 22 20:36:14 db04 dovecot: imap(ivan): copy from INBOX: box=Junk, uid=32059, msgid=<RF7w0iVHwvOBtpFW7y7eTF3jazYxJeuFC9JvB9xsjnk.gI5bQ0w8OtJJT7-T4krQTG3XkEqb5Hti..., size=9942 * TB expunges mail from INBOX Jun 22 20:36:14 db04 dovecot: imap(ivan): expunge: box=INBOX, uid=502902, msgid=<RF7w0iVHwvOBtpFW7y7eTF3jazYxJeuFC9JvB9xsjnk.gI5bQ0w8OtJJT7-T4krQTG3XkEqb5Hti..., size=9942 * Local server receives transaction from remote server and saves message again to INBOX Jun 22 20:36:16 db04 dovecot: dsync-local(ivan): save: box=INBOX, uid=502903, msgid=<RF7w0iVHwvOBtpFW7y7eTF3jazYxJeuFC9JvB9xsjnk.gI5bQ0w8OtJJT7-T4krQTG3XkEqb5Hti..., size=9942 * Remote server copies message from INBOX to INBOX <<<<<<<<<<<<<< That's my issue Jun 22 20:36:16 db04 dovecot: doveadm: Error: dsync-remote(ivan): Info: copy from INBOX: box=INBOX, uid=502903, msgid=<RF7w0iVHwvOBtpFW7y7eTF3jazYxJeuFC9JvB9xsjnk.gI5bQ0w8OtJJT7-T4krQTG3XkEqb5Hti..., size=9942 * Remote server expunges msg copy Jun 22 20:36:16 db04 dovecot: doveadm: Error: dsync-remote(ivan): Info: expunge: box=INBOX, uid=502902, msgid=<RF7w0iVHwvOBtpFW7y7eTF3jazYxJeuFC9JvB9xsjnk.gI5bQ0w8OtJJT7-T4krQTG3XkEqb5Hti..., size=9942 Is this a known issue (I may not have looked deep enough..) ? Is more information needed ? (note again that for me dovecot is working perfectly fine except for that little issue). (Version is 2.2.27 from Debian stretch) Thanks, --Ivan

1 0

Released Pigeonhole v0.4.19.rc1 for Dovecot v2.2.31.rc1.
by Stephan Bosch 22 Jun '17

22 Jun '17

Hello Dovecot users, This small release is mainly about adjusting to changes in the Dovecot API. There is one significant fix. Changelog v0.4.19: * This release adjusts Pigeonhole to several changes in the Dovecot API, making it depend on Dovecot v2.2.31. Previous versions of Pigeonhole will produce compile warnings with the recent Dovecot releases (but still work ok). - Fixed bug in handling of implicit keep in some cases. Implicit side-effects, such as assigned flags, were not always applied correctly. This is in essence a very old bug, but it was exposed by recent changes. The release is available as follows: http://pigeonhole.dovecot.org/releases/2.2/rc/dovecot-2.2-pigeonhole-0.4.19… http://pigeonhole.dovecot.org/releases/2.2/rc/dovecot-2.2-pigeonhole-0.4.19… Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this release candidate and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

+vnd.dovecot.duplicate for Bogofilter duplication shortcomings
by Luescher Claude 21 Jun '17

21 Jun '17

Hello, Sorry for a bit offtopic but it seems the bogofilter community is just as dead as dspam is. I trying to switch from DSPAM to bogofilter on a server where if I turn bogofilter on I run into the following issue: Certain users have sender and recipient bcc maps setup in postfix. This is for forwarding copy of an email to other address for example: Incoming lclude(a)company.com -> info(a)company.com Outgoing lclude(a)company.com -> info(a)company.com This way whatever lcalude sends or receives a copy will be sent to the info mailbox. When bogofilter is enabled the bcc recipient (info) receives a dupe of every email. Did anybody run into this? virtual_destination_recipient_limit = 1 dspam_destination_recipient_limit = 1 was a working fix for me for the old system, however bogofilter_destination_recipient_limit = 1 does not work in this case so if this issue is not possible to fix by configuration an alternate solution like making dovecot delete duplicate messages by message ID would be a viable option. I have +vnd.dovecot.duplicate plugin enabled but it seems to be ineffective. Any other tips for a workaround? Thank you. Claude

2 3

Dovecot 2.2.30* compiling error
by Mart Pirita 21 Jun '17

21 Jun '17

Hello. I cant build 2.2.30*, but I can build fine version 2.2.29* with same options: RedHat based customized distro, 2.6.28.10 kernel Build options: export CPPFLAGS export LDFLAGS CPPFLAGS=-I/usr/local/ssl/include LDFLAGS=-L/usr/local/ssl/lib ./configure \ --prefix=/usr \ --with-ssl=openssl \ --with-ssldir=/etc/ssl \ --sysconfdir=/etc \ --without-vpopmail \ --with-pam \ --without-bsdauth \ --without-sql \ --without-nss \ --without-ldap \ --without-pgsql \ --without-mysql \ --without-sqlite \ --with-rundir=/var/run/dovecot\ --without-deliver \ --without-gssapi Build error: ltest_lib-test-bits.o: In function `bits_required64': /usr/src/redhat/BUILD/dovecot-2.2.30/src/lib/bits.h:33: undefined reference to `__builtin_clzll' /usr/src/redhat/BUILD/dovecot-2.2.30/src/lib/bits.h:33: undefined reference to `__builtin_clzll' test_lib-test-bits.o: In function `test_bits_requiredXX': /usr/src/redhat/BUILD/dovecot-2.2.30/src/lib/test-bits.c:74: undefined reference to `__builtin_clzll' /usr/src/redhat/BUILD/dovecot-2.2.30/src/lib/test-bits.c:74: undefined reference to `__builtin_clzll' /usr/src/redhat/BUILD/dovecot-2.2.30/src/lib/test-bits.c:74: undefined reference to `__builtin_clzll' ./.libs/liblib.a(numpack.o): In function `numpack_decode': /usr/src/redhat/BUILD/dovecot-2.2.30/src/lib/numpack.c:43: undefined reference to `__builtin_clz' collect2: ld returned 1 exit status Please advise? -- Mart

3 7

dovecot & cap_net_admin capability
by Michal Hlavinka 21 Jun '17

21 Jun '17

Hi, we've seen SELinux reports from our users that dovecot tried to use something that needs CAP_NET_ADMIN capability. Before enabling it, we would like to know where it originated from. I've checked the sources, but was not able to find anything that would require this capability. Do you know for what it is used? CAP_NET_ADMIN Perform various network-related operations: * interface configuration; * administration of IP firewall, masquerading, and accounting; * modify routing tables; * bind to any address for transparent proxying "IP_TRANSPARENT"; * set type-of-service (TOS) "IP_TOS" * clear driver statistics; * set promiscuous mode; * enabling multicasting; * use setsockopt(2) to set the following socket options: SO_DEBUG, SO_MARK, SO_PRIORITY (for a priority outside the range 0 to 6),SO_RCVBUFFORCE, and SO_SNDBUFFORCE Cheers, Michal Hlavinka

2 2

Duplicate mailing list messages
by Joseph Tam 21 Jun '17

21 Jun '17

Is it just me receiving in Digest mode, or are all message submissions to this list being duplicated? Joseph Tam <jtam.home(a)gmail.com>

3 2

Thunderbird "Empty Trash" causes inconsistent IMAP session state?
by awl1 20 Jun '17

20 Jun '17

All, having successfully compiled and set up Dovecot 2.2.29.1 on my Thecus NAS as a newbie without any further hassle, and already imported an external mail archive of ~15 GB into a lz4-compressed mdbox (with impressive performance on the old Intel Atom CPU!), I stumbled into a minor, but reproducible issue that might well be already known, but I haven't managed to find any pointers through Google search: When I *manually empty the Trash folder from Thunderbird* (52.1.1, regardless of Windows or Linux client) by right-clicking on a non-empty Trash folder and then selecting "Empty trash", Dovecot produces the following log message, and I need to restart Thunderbird client in order to properly refresh its folder status: May 30 23:42:04 imap(xxx(a)xxx.org): Info: *IMAP session state is inconsistent, please relogin.* in=405 out=3114 Is this behaviour and message intended, or did I indeed run into a bug here? Many thanks & best regards Andreas

4 13

core dump on ocfs2
by antonello.cioffi＠uniparthenope.it 20 Jun '17

20 Jun '17

Hi everybody I'm finding on my server a lot of a lot of errors like this: Jun 19 14:22:45 posta2 kernel: [885017.412902] BUG: soft lockup - CPU#2 stuck for 22s! [dovecot-lda:11955] Jun 19 14:22:45 posta2 kernel: [885017.412906] Modules linked in: ocfs2(E) jbd2 quota_tree dm_service_time dm_multipath ocfs2_dlmfs(E) ocfs2_stack_o2cb(E) ocfs2_dlm( E) ocfs2_nodemanager(E) ocfs2_stackglue(E) configfs cpufreq_conservative cpufreq_userspace cpufreq_powersave acpi_cpufreq mperf fuse nls_iso8859_1 nls_cp437 vfat fat loop shpchp iTCO_wdt bnx2 pci_hotplug rtc_cmos ipv6 ipv6_lib cdc_ether usbnet ioatdma dca sg tpm_tis i2c_i801 serio_raw mii i7core_edac edac_core pcspkr iTCO_vendor _support tpm mptctl tpm_bios button ext3 jbd mbcache dm_mirror dm_region_hash dm_log linear ttm drm_kms_helper drm i2c_algo_bit sysimgblt sysfillrect i2c_core syscop yarea uhci_hcd ehci_hcd usbcore usb_common sd_mod crc_t10dif processor thermal_sys hwmon scsi_dh_emc scsi_dh_hp_sw scsi_dh_alua scsi_dh_rdac scsi_dh dm_snapshot dm_m od mptsas mptscsih mptbase scsi_transport_sas scsi_mod Jun 19 14:22:45 posta2 kernel: [885017.412971] Supported: Yes Jun 19 14:22:45 posta2 kernel: [885017.412973] CPU 2 Jun 19 14:22:45 posta2 kernel: [885017.412975] Modules linked in: ocfs2(E) jbd2 quota_tree dm_service_time dm_multipath ocfs2_dlmfs(E) ocfs2_stack_o2cb(E) ocfs2_dlm( E) ocfs2_nodemanager(E) ocfs2_stackglue(E) configfs cpufreq_conservative cpufreq_userspace cpufreq_powersave acpi_cpufreq mperf fuse nls_iso8859_1 nls_cp437 vfat fat loop shpchp iTCO_wdt bnx2 pci_hotplug rtc_cmos ipv6 ipv6_lib cdc_ether usbnet ioatdma dca sg tpm_tis i2c_i801 serio_raw mii i7core_edac edac_core pcspkr iTCO_vendor _support tpm mptctl tpm_bios button ext3 jbd mbcache dm_mirror dm_region_hash dm_log linear ttm drm_kms_helper drm i2c_algo_bit sysimgblt sysfillrect i2c_core syscop yarea uhci_hcd ehci_hcd usbcore usb_common sd_mod crc_t10dif processor thermal_sys hwmon scsi_dh_emc scsi_dh_hp_sw scsi_dh_alua scsi_dh_rdac scsi_dh dm_snapshot dm_m od mptsas mptscsih mptbase scsi_transport_sas scsi_mod Jun 19 14:22:45 posta2 kernel: [885017.413027] Supported: Yes Jun 19 14:22:45 posta2 kernel: [885017.413029] Jun 19 14:22:45 posta2 kernel: [885017.413032] Pid: 11955, comm: dovecot-lda Tainted: G E 3.0.101-0.46-default #1 IBM BladeCenter HS22 -[7870H5G]-/68Y813 8 Jun 19 14:22:45 posta2 kernel: [885017.413037] RIP: 0010:[<ffffffff81257b07>] [<ffffffff81257b07>] find_next_zero_bit+0x67/0xc0 Jun 19 14:22:45 posta2 kernel: [885017.413046] RSP: 0018:ffff88006cc855f0 EFLAGS: 00000287 Jun 19 14:22:45 posta2 kernel: [885017.413049] RAX: 0000000000006f30 RBX: ffffffff8118b348 RCX: 0000000000000010 Jun 19 14:22:45 posta2 kernel: [885017.413051] RDX: 0001000000000000 RSI: 0000000000006f30 RDI: 0000000000006f00 Jun 19 14:22:45 posta2 kernel: [885017.413054] RBP: 000000000000000f R08: 0000000000000f00 R09: ffff88006cc857e8 Jun 19 14:22:45 posta2 kernel: [885017.413057] R10: 000000000000000b R11: ffff88063c1fa678 R12: ffffffff8146d1ee Jun 19 14:22:45 posta2 kernel: [885017.413059] R13: 0000000000000000 R14: ffff880655a918c0 R15: 0000000001f9f800 Jun 19 14:22:45 posta2 kernel: [885017.413063] FS: 00007f7387952700(0000) GS:ffff88067f240000(0000) knlGS:0000000000000000 Jun 19 14:22:45 posta2 kernel: [885017.413066] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 Jun 19 14:22:45 posta2 kernel: [885017.413068] CR2: 00007f7386fad9b0 CR3: 000000011f6cc000 CR4: 00000000000007e0 Jun 19 14:22:45 posta2 kernel: [885017.413071] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 Jun 19 14:22:45 posta2 kernel: [885017.413074] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Jun 19 14:22:45 posta2 kernel: [885017.413077] Process dovecot-lda (pid: 11955, threadinfo ffff88006cc84000, task ffff88003f3284c0) Jun 19 14:22:45 posta2 kernel: [885017.413079] Stack: Jun 19 14:22:45 posta2 kernel: [885017.413085] ffffffffa052f86e 0000000000000000 ffff88006cc857e8 00007e000000000b Jun 19 14:22:45 posta2 kernel: [885017.413090] 6843000000006a00 ffff88063c1fa67a 0000000000000000 000000001f400000 Jun 19 14:22:45 posta2 kernel: [885017.413095] 0000000000007e00 0000000000007e00 ffff880653aaccb8 ffff880656f7f000 Jun 19 14:22:45 posta2 kernel: [885017.413100] Call Trace: Jun 19 14:22:45 posta2 kernel: [885017.413143] [<ffffffffa052f86e>] ocfs2_block_group_find_clear_bits+0x6e/0x180 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.413224] [<ffffffffa052fa23>] ocfs2_cluster_group_search+0xa3/0x1f0 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.413297] [<ffffffffa0530369>] ocfs2_search_chain+0x139/0x730 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.413367] [<ffffffffa0531ce8>] ocfs2_claim_suballoc_bits+0x398/0x520 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.413447] [<ffffffffa0531f0f>] __ocfs2_claim_clusters+0x9f/0x340 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.413519] [<ffffffffa050f8ff>] ocfs2_local_alloc_new_window+0x1cf/0x320 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.413581] [<ffffffffa050fdd0>] ocfs2_local_alloc_slide_window+0x380/0x5e0 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.413642] [<fffffffbyefa05101d3>] ocfs2_reserve_local_alloc_bits+0x1a3/0x330 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.413706] [<ffffffffa053396b>] ocfs2_reserve_clusters_with_limit+0xab/0x330 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.413780] [<ffffffffa0534d15>] ocfs2_lock_allocators+0xc5/0x290 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.413847] [<ffffffffa04e30fd>] ocfs2_write_begin_nolock+0x89d/0x11d0 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.413883] [<ffffffffa04e3b47>] ocfs2_write_begin+0x117/0x240 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.413900] [<ffffffff810fa1a2>] generic_perform_write+0xc2/0x1c0 Jun 19 14:22:45 posta2 kernel: [885017.413907] [<ffffffff810fa301>] generic_file_buffered_write+0x61/0xa0 Jun 19 14:22:45 posta2 kernel: [885017.413936] [<ffffffffa050055f>] ocfs2_file_aio_write+0x92f/0x960 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.413966] [<ffffffff8115d478>] do_sync_write+0xc8/0x110 Jun 19 14:22:45 posta2 kernel: [885017.413972] [<ffffffff8115daae>] vfs_write+0xce/0x140 Jun 19 14:22:45 posta2 kernel: [885017.413977] [<ffffffff8115dc23>] sys_write+0x53/0xa0 Jun 19 14:22:45 posta2 kernel: [885017.413983] [<ffffffff8146c812>] system_call_fastpath+0x16/0x1b Jun 19 14:22:45 posta2 kernel: [885017.413992] [<00007f7386c54300>] 0x7f7386c542ff Jun 19 14:22:45 posta2 kernel: [885017.413994] Code: 3f 77 61 48 c7 c0 ff ff ff ff 44 89 c1 4a 8d 34 07 48 d3 e0 48 09 c2 48 83 fa ff 74 0b 48 f7 d2 48 0f bc c2 48 8 d 34 38 48 89 f0 <c3> 0f 1f 84 00 00 00 00 00 48 8b 10 48 83 fa ff 75 e0 48 83 c0 Jun 19 14:22:45 posta2 kernel: [885017.414037] Call Trace: Jun 19 14:22:45 posta2 kernel: [885017.414070] [<ffffffffa052f86e>] ocfs2_block_group_find_clear_bits+0x6e/0x180 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.414141] [<ffffffffa052fa23>] ocfs2_cluster_group_search+0xa3/0x1f0 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.414213] [<ffffffffa0530369>] ocfs2_search_chain+0x139/0x730 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.414286] [<ffffffffa0531ce8>] ocfs2_claim_suballoc_bits+0x398/0x520 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.414359] [<ffffffffa0531f0f>] __ocfs2_claim_clusters+0x9f/0x340 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.414359] [<ffffffffa0531f0f>] __ocfs2_claim_clusters+0x9f/0x340 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.414430] [<ffffffffa050f8ff>] ocfs2_local_alloc_new_window+0x1cf/0x320 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.414492] [<ffffffffa050fdd0>] ocfs2_local_alloc_slide_window+0x380/0x5e0 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.414553] [<ffffffffa05101d3>] ocfs2_reserve_local_alloc_bits+0x1a3/0x330 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.414617] [<ffffffffa053396b>] ocfs2_reserve_clusters_with_limit+0xab/0x330 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.414691] [<ffffffffa0534d15>] ocfs2_lock_allocators+0xc5/0x290 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.414758] [<ffffffffa04e30fd>] ocfs2_write_begin_nolock+0x89d/0x11d0 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.414793] [<ffffffffa04e3b47>] ocfs2_write_begin+0x117/0x240 [ocfs2] Jun 19 14:22:46 posta2 kernel: [885017.414809] [<ffffffff810fa1a2>] generic_perform_write+0xc2/0x1c0 Jun 19 14:22:46 posta2 kernel: [885017.414815] [<ffffffff810fa301>] generic_file_buffered_write+0x61/0xa0 Jun 19 14:22:46 posta2 kernel: [885017.414844] [<ffffffffa050055f>] ocfs2_file_aio_write+0x92f/0x960 [ocfs2] Jun 19 14:22:46 posta2 kernel: [885017.414872] [<ffffffff8115d478>] do_sync_write+0xc8/0x110 Jun 19 14:22:46 posta2 kernel: [885017.414878] [<ffffffff8115daae>] vfs_write+0xce/0x140 Jun 19 14:22:46 posta2 kernel: [885017.414883] [<ffffffff8115dc23>] sys_write+0x53/0xa0 Jun 19 14:22:46 posta2 kernel: [885017.414888] [<ffffffff8146c812>] system_call_fastpath+0x16/0x1b Jun 19 14:22:46 posta2 kernel: [885017.414895] [<00007f7386c54300>] 0x7f7386c542ff The machine is a SUSE Linux Enterprise Server 11 SP 3 posta2:/var/core # dovecot -n # 2.2.30.2 (c0c463e): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.18 (29cc74d) # OS: Linux 3.0.101-0.46-default x86_64 SUSE Linux Enterprise Server 11 (x86_64) auth_mechanisms = plain login auth_username_format = %Ln auth_verbose = yes default_internal_user = vmail default_login_user = nobody disable_plaintext_auth = no first_valid_uid = 100 hostname = mail.xxxx.it lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_debug = yes mail_gid = 100 mail_location = maildir:%h mail_plugins = " quota" mail_uid = 1002 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext spamtest spamtestplus passdb { args = /usr/local/etc/dovecot/dovecot-people-ldap.conf.ext driver = ldap } plugin { last_login_dict = redis:host=127.0.0.1:port=6379 mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = maildir:User quota quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = file:~/sieve;active=~/.dovecot.sieve sieve_before = /usr/local/etc/dovecot/sieve/ sieve_dir = ~/.sieve sieve_extensions = +spamtest +spamtestplus +relational +comparator-i;ascii-numeric } postmaster_address = postmaster(a)uniparthenope.it protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } service_count = 0 vsz_limit = 256 M } service managesieve-login { inet_listener sieve { port = 4190 } service_count = 1 vsz_limit = 64 M } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } service_count = 0 vsz_limit = 256 M } service quota-status { client_limit = 1 executable = quota-status -p postfix inet_listener { port = 12340 } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = vmail } ssl_ca = </etc/postfix/ssl/chain-8204-mail.uniparthenope.it.pem ssl_cert = </etc/postfix/ssl/cert-8204-mail.uniparthenope.it.pem ssl_key = # hidden, use -P to show it submission_host = 127.0.0.1 userdb { args = /usr/local/etc/dovecot/dovecot-people-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = " quota" } protocol lda { mail_plugins = " quota quota sieve" } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags mail_max_userip_connections = 100 mail_plugins = " quota imap_quota last_login" } protocol pop3 { mail_max_userip_connections = 100 mail_plugins = " quota last_login" pop3_logout_format = top=%t/posta2:/var/core # dovecot --version 2.2.30.2 (c0c463e) %p, retr=%r/%b, del=%d/%m, size=%s, %u pop3_save_uidl = no pop3_uidl_format = %08Xu%08Xv } I've upgraded dovecot from 2.2.18 to 2.2.30.2 but errors are still present posta2:/var/core # dovecot --version 2.2.30.2 (c0c463e)bye Errors appear only with dovecot-lda process so I tend to exsclude disks or ocfs failure Is there someone who can help me? Best regards Thanks -- Dott. Antonello Cioffi Ufficio Servizi Informatici Università degli Studi di Napoli Parthenope Tel. 081/5475292 - Fax. 081/5475180

2 1

Show other users quota
by Kristjan Eentsalu 19 Jun '17

19 Jun '17

Hey, Is there a way to show other users quota under shared namespace? Right now when I try to "a getquotaroot user/other.user" I get "NO Not showing other users' quota" Dovecot version 2.2.27 Relevant part of the config: namespace user { list = children location = maildir:%%h/Maildir:LAYOUT=fs:DIRNAME=iiuuuuiiiuuu:INDEXPVT=%h/shared/%%n prefix = user/%%n/ separator = / subscriptions = no type = shared } Kristjan

1 0

Re: Minor patches for builds against ancient platforms
by Joseph Tam 17 Jun '17

17 Jun '17

> I've tried changing how I symbolically linked the mailboxes, i.e., > creating a sub-directory that is symlinked into the user's mail/ > directory versus symbolically linking the mbox files themselves, etc. > No dice. Permissions are fine. I've even resorted to changing the > index locking strategy, to no avail. I've tested my setup by symlinking both folders and boxes with user/0700 permissions, and they all work fine. > Folders that are NOT symbolically linked work perfectly, and have various > levels of hierarchy that are selectable as expected. Nothing appears in the logs. > > $ cd ~/mail > $ ls -l > -rw------- 1 2411625 Dec 16 09:12 Dovecot > lrwxrwxrwx 1 21 Jun 13 18:01 OldMail -> /u2/usermail/luser > -rwx------ 8 4096 Jan 1 12:09 "Open Source Projects" If this is output on the dovecot server itself so there's no mismatch in pathnames. Have you checked whether the dovecot user can traverse all the way from / to /u2/usermail/luser/ > I've (rm ~/mail/.subscriptions && touch ~/mail/.subscriptions) to flush any > subscriptions file issues. I'm thinking no .subscription would be better. > Is there a subtle interaction with mail_full_filesystem_access settings, or > similar that might be getting in the way? Dovecot does have chroot-ing stuff that might impede symlink following: https://wiki.dovecot.org/Chrooting > Other data: there are fs quotas on / but not /u2. That shouldn't matter, but > I will concede that I'm not a little ignorant about such things. It seems you have more basic file access problems. > How might I go about further debugging this? I've tried to manually doveadm > index those mailboxes, which doesn't give me any errors, but it also returns > far too quickly to give me the impression that it's done anything. Same result. Nothing with verbose logging (set mail_debug = yes)? Try the simple case ln -s /u2/usermail/luser/OLD_INBOX/INBOX_2016_01_to_08 ~luser/mail/testbox then $ telnet localhost 10143 x0 login luser *** x1 SELECT testbox What do you get here and in your logs? If this doesn't produce any usable diagnostics, I would pull out the heavy duty process trace tool and trace the imap process to figure out what it's really doing and where it's failing. Joseph Tam <jtam.home(a)gmail.com>

2 1

Need Help to analyze the error or is it a bug?
by Dipl.-Ing. Harald E. Langner 16 Jun '17

16 Jun '17

After done an update to dovecot-2.2.30.2 my connection is broken since days. all what I try every time the same error: Jun 15 00:02:18 auth: Error: auth: environment corrupt; missing value for DOVECOT_ Jun 15 00:02:18 auth: Fatal: unsetenv(RESTRICT_SETUID) failed: Bad address Jun 15 00:02:18 master: Error: service(auth): command startup failed, throttling for 2 secs I try this: # doveadm -Dv auth test -x service=imap theusername mypassword output: Debug: Loading modules from directory: /usr/local/lib/dovecot Debug: Module loaded: /usr/local/lib/dovecot/lib20_virtual_plugin.so Debug: Loading modules from directory: /usr/local/lib/dovecot/doveadm Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so: Undefined symbol "acl_user_module" (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so: Undefined symbol "expire_set_lookup" (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so: Undefined symbol "quota_user_module" (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.so: Undefined symbol "fts_filter_filter" (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_mail_crypt_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/libdoveadm_mail_crypt_plugin.so: Undefined symbol "mail_crypt_user_get_public_key" (this is usually intentional, so just ignore this message) Error: Timeout waiting for handshake from auth server. my pid=63521, input bytes=0 Fatal: Couldn't connect to auth socket dlopen() failed, Undefined symbols ... Is this a bug? How do I check what is going wrong with this auth socket error? 2nd) I'm using dovecot.conf protocols = imap lmtp !include conf.d/*.conf 10-auth.conf , 10-master.conf, auth-passwdfile.conf.ext, 10-ssl.conf and 10-logging.conf (all logs are on) All others, form the 29 configuration files, I haven't touch. It has worked, before I have done the update. What has changed? For what in the *.conf should I locking for? Thanks a lot.

2 2

Error: fts_solr: received invalid uid '0'?
by Larry Rosenman 16 Jun '17

16 Jun '17

I'm getting a lot of: Jun 16 11:40:40 thebighonker dovecot: imap(ler/58755): Error: fts_solr: received invalid uid '0' Jun 16 11:40:40 thebighonker dovecot: imap(ler/58755): Error: fts_solr: received invalid uid '0' in my logs. What can I supply to help get to the bottom of it? doveconf -n: # 2.2.30.2 (c0c463e): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.18 (29cc74d) # OS: FreeBSD 11.1-BETA1 amd64 auth_default_realm = lerctr.org auth_mechanisms = plain login auth_realms = lerctr.org thebighonker.lerctr.org tbh.lerctr.org auth_username_format = %Ln default_vsz_limit = 1 G deliver_log_format = msgid=%m: %$ (subject=%s from=%f size=%w) lda_mailbox_autocreate = yes listen = 192.147.25.65, :: lmtp_save_to_detail_mailbox = yes login_access_sockets = tcpwrap mail_attribute_dict = file:%h/mail/.imap/dovecot-mail-attributes mail_debug = yes mail_location = mbox:~/mail:INBOX=~/mail/INBOX mail_log_prefix = "%s(%u/%p): " mail_plugins = " fts fts_solr notify stats virtual" mail_privileged_group = mail mail_server_admin = mailto:ler@lerctr.org mail_server_comment = LERCTR Mail Server mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vacation-seconds editheader mboxmetadata servermetadata imapsieve vnd.dovecot.imapsieve namespace archive { hidden = no list = no location = mbox:~/MAIL-ARCHIVE prefix = ARCHIVE/ separator = / } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox INBOX { auto = create } mailbox SENT { special_use = \Sent } mailbox SPAM { special_use = \Junk } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } mailbox virtual/Flagged { special_use = \Flagged } mailbox virtual/all { special_use = \All } prefix = } namespace virtual { hidden = no list = yes location = virtual:~/MAIL-VIRTUAL:INDEX=MEMORY prefix = Virtual/ separator = / } passdb { args = failure_show_msg=yes session=yes max_requests=20 driver = pam } plugin { fts = solr fts_autoindex = yes fts_solr = url=http://thebighonker.lerctr.org:8983/solr/dovecot/ fts_tika = http://localhost:9998/tika/ imapsieve_mailbox1_before = file:/usr/local/share/dovecot-pigeonhole/sieve/report-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = SPAM imapsieve_mailbox2_before = file:/usr/local/share/dovecot-pigeonhole/sieve/report-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = SPAM imapsieve_mailbox2_name = * imapsieve_url = sieve://thebighonker.lerctr.org mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid size from subject vsize flags recipient_delimiter = + sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_execute_bin_dir = /usr/local/share/dovecot-pigeonhole/sieve sieve_extensions = +editheader +vacation-seconds +mboxmetadata +servermetadata sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.execute sieve_pipe_bin_dir = /usr/local/share/dovecot-pigeonhole/sieve sieve_plugins = sieve_imapsieve sieve_extprograms stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_refresh = 5s stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-client { mode = 0666 } unix_listener auth-master { mode = 0666 } } service indexer-worker { drop_priv_before_exec = yes } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0666 user = } fifo_listener stats-user { group = mode = 0666 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service tcpwrap { unix_listener login/tcpwrap { group = $default_login_user mode = 0600 user = $default_login_user } } ssl_cert = </home/ler/letsencrypt-home/lerctr.org/fullchain.cer ssl_cipher_list = EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+AESGCM:EECDH:EDH+AESGCM:EDH+aRSA:HIGH:!MEDIUM:!LOW:!aNULL:!eNULL:!LOW:!RC4:!MD5:!EXP:!PSK:!SRP:!DSS ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv2 !SSLv3 userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { mail_plugins = " fts fts_solr notify stats virtual sieve mail_log" } protocol lda { mail_plugins = " fts fts_solr notify stats virtual sieve mail_log" } protocol pop3 { mail_plugins = " fts fts_solr notify stats virtual mail_log" } protocol !doveadm { mail_plugins = " fts fts_solr notify stats virtual mail_log" } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags imap_logout_format = in=%i out=%o fhc=%{fetch_hdr_count} fhb=%{fetch_hdr_bytes} fbc=%{fetch_body_count} fbb=%{fetch_body_bytes} del=%{deleted} exp=%{expunged} trash=%{trashed} imap_metadata = yes mail_max_userip_connections = 50 mail_plugins = " fts fts_solr notify stats virtual mail_log imap_sieve imap_stats stats" } -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: larryrtx(a)gmail.com US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

1 0

doveadm-server core dump
by FUSTE Emmanuel 16 Jun '17

16 Jun '17

Hello, coredump found after a force-resync and a replicate Emmanuel. (dovecot-ee 2.2.30.2-1) [New LWP 17168] Core was generated by `dovecot/doveadm-server'. Program terminated with signal SIGABRT, Aborted. #0 0x00007fa334127c37 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 #0 0x00007fa334127c37 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 resultvar = 0 pid = 17168 selftid = 17168 #1 0x00007fa33412b028 in __GI_abort () at abort.c:89 save_stage = 2 act = {__sigaction_handler = {sa_handler = 0x20d2b48, sa_sigaction = 0x20d2b48}, sa_mask = {__val = {34255104, 0, 140338942616871, 1, 0, 181, 140338929827120, 140725975364353, 0, 0, 140338942645461, 0, 140338930777984, 140338937001888, 34203576, 140725975364140}}, sa_flags = 0, sa_restorer = 0x7ffd51c5b1c8} sigs = {__val = {32, 0 <repeats 15 times>}} #2 0x00007fa334546766 in default_fatal_finish (type=<optimized out>, status=status@entry=0) at failures.c:201 backtrace = 0x209df68 "/usr/lib/dovecot/libdovecot.so.0(+0x8d770) [0x7fa334546770] -> /usr/lib/dovecot/libdovecot.so.0(+0x8d84e) [0x7fa33454684e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fa3344dcffb] -> dovecot/do"... #3 0x00007fa33454684e in i_internal_fatal_handler (ctx=0x7ffd51c5b3b0, format=<optimized out>, args=<optimized out>) at failures.c:670 status = 0 #4 0x00007fa3344dcffb in i_panic (format=format@entry=0x4530f8 "file %s: line %d (%s): assertion failed: (%s)") at failures.c:275 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0, timestamp_usecs = 0} args = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7ffd51c5b4a0, reg_save_area = 0x7ffd51c5b3e0}} #5 0x000000000043a1eb in dsync_brain_sync_mailbox_deinit (brain=brain@entry=0x20d2b48) at dsync-brain-mailbox.c:371 last_common_uid = 0 last_messages_count = 0 last_common_modseq = 4428091 changes_during_sync = 0x0 last_common_pvt_modseq = 140725975364904 require_full_resync = false error = MAIL_ERROR_NONE __FUNCTION__ = "dsync_brain_sync_mailbox_deinit" #6 0x000000000043adc6 in dsync_brain_slave_recv_mailbox (brain=brain@entry=0x20d2b48) at dsync-brain-mailbox.c:841 dsync_box = 0x20d0878 local_dsync_box = {mailbox_guid = "\344B\277\017j\022\271T\002\253\000\000\367\362\265", <incomplete sequence \346>, mailbox_lost = false, have_guids = true, have_save_guids = true, have_only_guid128 = false, uid_validity = 1497621508, uid_next = 10, messages_count = 9, first_recent_uid = 1, highest_modseq = 3, highest_pvt_modseq = 0, cache_fields = {arr = {buffer = 0x209d208, element_size = 24}, v = 0x209d208, v_modifiable = 0x209d208}} box = 0x20e0f88 errstr = 0x2f <error: Cannot access memory at address 0x2f> resync_reason = 0x466b58 "UIDVALIDITY changed during a stateful sync, need to restart" error = MAIL_ERROR_NONE ret = <optimized out> resync = 255 __FUNCTION__ = "dsync_brain_slave_recv_mailbox" #7 0x00000000004387db in dsync_brain_run_real (changed_r=0x7ffd51c5b67f, brain=0x20d2b48) at dsync-brain.c:651 ret = true orig_state = DSYNC_STATE_SLAVE_RECV_MAILBOX orig_box_recv_state = DSYNC_BOX_STATE_MAILBOX orig_box_send_state = DSYNC_BOX_STATE_MAILBOX changed = false #8 dsync_brain_run (brain=brain@entry=0x20d2b48, changed_r=changed_r@entry=0x7ffd51c5b67f) at dsync-brain.c:687 _data_stack_cur_id = 5 #9 0x0000000000438ae1 in dsync_brain_run_io (context=0x20d2b48) at dsync-brain.c:110 brain = 0x20d2b48 changed = false try_pending = true #10 0x000000000044cc7f in dsync_ibc_stream_input (ibc=0x20c1a10) at dsync-ibc-stream.c:230 ibc = 0x20c1a10 #11 0x00007fa33455a802 in io_loop_call_io (io=0x20becc0) at ioloop.c:599 ioloop = 0x20a9f20 t_id = 4 __FUNCTION__ = "io_loop_call_io" #12 0x00007fa33455bd47 in io_loop_handler_run_internal (ioloop=ioloop@entry=0x20a9f20) at ioloop-epoll.c:223 ctx = 0x20ab100 list = 0x20c14f0 io = <optimized out> tv = {tv_sec = 4, tv_usec = 999912} events_count = <optimized out> msecs = <optimized out> ret = 1 i = 0 call = <optimized out> __FUNCTION__ = "io_loop_handler_run_internal" #13 0x00007fa33455a89c in io_loop_handler_run (ioloop=ioloop@entry=0x20a9f20) at ioloop.c:648 No locals. #14 0x00007fa33455aa58 in io_loop_run (ioloop=0x20a9f20) at ioloop.c:623 __FUNCTION__ = "io_loop_run" #15 0x000000000042065e in cmd_dsync_server_run (_ctx=0x20b6168, user=<optimized out>) at doveadm-dsync.c:1169 ctx = 0x20b6168 ibc = 0x20c1a10 brain = 0x20d2b48 temp_prefix = 0x209cb68 state_str = 0x0 sync_type = <optimized out> name = 0x20a9f00 "10.33.207.136" process_title_prefix = 0x209cb40 "10.33.207.136 " mail_error = MAIL_ERROR_NONE #16 0x0000000000421f96 in doveadm_mail_next_user (ctx=ctx@entry=0x20b6168, cctx=cctx@entry=0x7ffd51c5b8e0, error_r=error_r@entry=0x7ffd51c5b8d8) at doveadm-mail.c:416 input = {module = 0x0, service = 0x4592b0 "doveadm", username = 0x209b5e1 "T0146937", session_id = 0x0, session_id_prefix = 0x0, session_create_time = 0, local_ip = {family = 2, u = {ip6 = {__in6_u = {__u6_addr8 = "\n!χ", '\000' <repeats 11 times>, __u6_addr16 = {8458, 34767, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {2278498570, 0, 0, 0}}}, ip4 = {s_addr = 2278498570}}}, remote_ip = {family = 2, u = {ip6 = {__in6_u = {__u6_addr8 = "\n!ψ", '\000' <repeats 11 times>, __u6_addr16 = {8458, 35023, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {2295275786, 0, 0, 0}}}, ip4 = {s_addr = 2295275786}}}, local_port = 12345, remote_port = 55819, userdb_fields = 0x0, flags_override_add = (unknown: 0), flags_override_remove = (unknown: 0), no_userdb_lookup = 0, debug = 0} error = 0x20 <error: Cannot access memory at address 0x20> ip = <optimized out> ret = <optimized out> __FUNCTION__ = "doveadm_mail_next_user" #17 0x0000000000422909 in doveadm_mail_single_user (ctx=ctx@entry=0x20b6168, cctx=cctx@entry=0x7ffd51c5b8e0, error_r=error_r@entry=0x7ffd51c5b8d8) at doveadm-mail.c:447 __FUNCTION__ = "doveadm_mail_single_user" #18 0x0000000000435484 in doveadm_mail_cmd_server_run (cctx=0x7ffd51c5b8e0, mctx=0x20b6168, conn=0x20b1d48) at client-connection.c:164 error = 0x0 ret = <optimized out> #19 doveadm_cmd_handle (cctx=0x7ffd51c5b8e0, argv=0x209b618, argc=3, cmd_name=<optimized out>, conn=0x20b1d48) at client-connection.c:247 ioloop = 0x20a9f20 mail_cmd = 0x20aa138 mctx = 0x20b6168 cmd_ver2 = <optimized out> prev_ioloop = 0x20a39d0 cmd = 0x0 #20 client_handle_command (args=<optimized out>, conn=0x20b1d48) at client-connection.c:315 cctx = {cmd = 0x0, argc = 0, argv = 0x0, username = 0x209b5e1 "T0146937", cli = false, tcp_server = true, local_ip = {family = 2, u = {ip6 = {__in6_u = {__u6_addr8 = "\n!χ", '\000' <repeats 11 times>, __u6_addr16 = {8458, 34767, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {2278498570, 0, 0, 0}}}, ip4 = {s_addr = 2278498570}}}, remote_ip = {family = 2, u = {ip6 = {__in6_u = {__u6_addr8 = "\n!ψ", '\000' <repeats 11 times>, __u6_addr16 = {8458, 35023, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {2295275786, 0, 0, 0}}}, ip4 = {s_addr = 2295275786}}}, local_port = 12345, remote_port = 55819, conn = 0x20b1d48} flags = <optimized out> cmd_name = <optimized out> argc = <optimized out> #21 client_connection_input (conn=0x20b1d48) at client-connection.c:432 args = <optimized out> _data_stack_cur_id = 3 line = <optimized out> ok = true #22 0x00007fa33455a802 in io_loop_call_io (io=0x20a8660) at ioloop.c:599 ioloop = 0x20a39d0 t_id = 2 __FUNCTION__ = "io_loop_call_io" #23 0x00007fa33455bd47 in io_loop_handler_run_internal (ioloop=ioloop@entry=0x20a39d0) at ioloop-epoll.c:223 ctx = 0x20af660 list = 0x20a35c0 io = <optimized out> tv = {tv_sec = 2147483, tv_usec = 0} events_count = <optimized out> msecs = <optimized out> ret = 1 i = 0 call = <optimized out> __FUNCTION__ = "io_loop_handler_run_internal" #24 0x00007fa33455a89c in io_loop_handler_run (ioloop=ioloop@entry=0x20a39d0) at ioloop.c:648 No locals. #25 0x00007fa33455aa58 in io_loop_run (ioloop=0x20a39d0) at ioloop.c:623 __FUNCTION__ = "io_loop_run" #26 0x00007fa3344e6e43 in master_service_run (service=0x20a3870, callback=callback@entry=0x437690 <client_connected>) at master-service.c:666 No locals. #27 0x0000000000413ff7 in main (argc=1, argv=0x20a35e0) at main.c:143 set_roots = {0x464b40 <doveadm_setting_parser_info>, 0x0} input = {roots = 0x7ffd51c5ba60, config_path = 0x0, preserve_environment = false, preserve_user = false, preserve_home = false, never_exec = false, use_sysexits = false, parse_full_config = false, module = 0x4592b0 "doveadm", service = 0x4592b0 "doveadm", username = 0x0, local_ip = {family = 0, u = {ip6 = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}}, remote_ip = {family = 0, u = {ip6 = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}}, local_name = 0x0} output = {specific_services = 0x0, service_uses_local = 0, service_uses_remote = 0, used_local = 0, used_remote = 0, permission_denied = 0} error = 0x7fa334f3f520 "\200\364\363\064\243\177" c = <optimized out>

1 0

Re: Minor patches for builds against ancient platforms
by Joseph Tam 15 Jun '17

15 Jun '17

> I do know that this little box of horrors has 200-300MB mbox INBOXes on an > ext3 filesystem formatted in 2005. I am very nervous about converting them to > Maildir at this point. Fortunately, it just involves reformatting the data and a little reconmfiguration of dovcot. If you can find the tool and disk space, it's well worth doing. Of course, when running a proverbial dinosaur, you're often more preoccupied with preventing the next proverbial meteorite strike. > What I meant was, are certain types of filenames "blocked" by policy from > being created via IMAP commands? I'm sure I could run a few tests to answer > this for myself, or better still, go through Timo's code. I never saw anything that could do that -- maybe you can torture the virtual mailbox facility to get that done. If all your concerned is dovecot dot-files, you can place the indices somewhere else other than the user's filesapace. > One last problem area is that many users have soft-links to mailboxes > located on a second drive, but these never appear in folder enumeration > lists or they appear grayed out in SeaMonkey/Thunderbird. I've tried > just symbolically linking to directories containing other mboxes, but > sometimes it works, and sometimes it doesn't. I wonder if there's > paranoia checking in the code that follows symbolic links to ensure > that uids/gids of the "owning" directory and the linked-to directory > (or files within it) are the same. It works for me. From what I see, the ownership of the symlink is ignored; it's the underlying file that counts. Maybe a subscription issue? Joseph Tam <jtam.home(a)gmail.com>

2 1

Re: Minor patches for builds against ancient platforms
by Joseph Tam 14 Jun '17

14 Jun '17

"M. Balridge" <dovecot(a)r.paypc.com> writes: > I assume it's a rarely seen issue because few Dovecot users compile the > software in caves on computers powered by horse-pulled generator > wheels. I resemble that remark. >> Warning: Transaction log file /home/luser/mail/.imap/INBOX/dovecot.index.log >> was locked for 95 seconds (rotating while syncing) Timo recently explained to me it's probably caused by slow I/O or processing. This explanation is consistent with my observation that the users who get these messages have jumbo mailboxes. > imap(luser): Error: fchown(/home/luser/mail/.subscriptions.lock, > group=501(coregroup)) failed: Operation not permitted (egid=200(users), group > based on /home/luser/mail - see http://wiki2.dovecot.org/Errors/ChgrpNoPerm) > > imap(luser): Error: file_dotlock_open() failed with subscription file > /home/luser/mail/.subscriptions: Operation not permitted > > .subscriptions doesn't exist either as a file or a directory in the named > directories. > > Is there a "filter" against dot-files being opened within the bowels of dovecot? You can disable dotclock altogether, but I don't think this is what you meant. You can use locking method "dotlock_try" rather than "dotlock" -- the former will ignore quota/permissions problems and plow on. (It still logs it.) You could also align luser's mail folder group with with luser's GID, which is usually what I do. Maybe locks are created even when files don't exist as there may be a race condition where another process is creating/deleting it at the same time. Joseph Tam <jtam.home(a)gmail.com>

4 5

v2.2.30 released
by Timo Sirainen 13 Jun '17

13 Jun '17

https://dovecot.org/releases/2.2/dovecot-2.2.30.tar.gz https://dovecot.org/releases/2.2/dovecot-2.2.30.tar.gz.sig * auth: Use timing safe comparisons for everything related to passwords. It's unlikely that these could have been used for practical attacks, especially because Dovecot delays and flushes all failed authentications in 2 second intervals. Also it could have worked only when passwords were stored in plaintext in the passdb. * master process sends SIGQUIT to all running children at shutdown, which instructs them to close all the socket listeners immediately. This way restarting Dovecot should no longer fail due to some processes keeping the listeners open for a long time. + auth: Add passdb { mechanisms=none } to match separate passdb lookup + auth: Add passdb { username_filter } to use passdb only if user matches the filter. See https://wiki2.dovecot.org/PasswordDatabase + dsync: Add dsync_commit_msgs_interval setting. It attempts to commit the transaction after saving this many new messages. Because of the way dsync works, it may not always be possible if mails are copied or UIDs need to change. + imapc: Support imapc_features=search without ESEARCH extension. + imapc: Add imapc_features=fetch-bodystructure to pass through remote server's FETCH BODY and BODYSTRUCTURE. + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on the remote server. + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters. + If dovecot.index.cache corruption is detected, reset only the one corrupted mail instead of the whole file. + doveadm mailbox status: Add "firstsaved" field. + director_flush_socket: Add old host's up/down and vhost count as parameters - More fixes to automatically fix corruption in dovecot.list.index - dsync-server: Fix support for dsync_features=empty-header-workaround - imapc: Various bugfixes, including infinite loops on some errors - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't enabled modseq tracking via CONDSTORE/QRESYNC. - fts-lucene: Fix it to work again with mbox format - Some internal error messages may have contained garbage in v2.2.29 - mail-crypt: Re-encrypt when copying/moving mails and per-mailbox keys are used. Otherwise the copied mails can't be opened. - vpopmail: Fix compiling

7 12

rescann / reindex / rebuild a subfolder structure
by Götz Reinicke - IT Koordinator 13 Jun '17

13 Jun '17

Hi, an user is missing all mail from a folder and all subfolders which are still saved in the users maildir directory on the dovecot server. From an imap client she sees the main folder but empty. No subfolders. She told me with an other imap client and a new created account she has the same problem. Question: Can I resync / regenerate some folder... index.... something....-files from the dovecot side? Thanks for hints and regards . Götz

1 0

Re: Minor patches for builds against ancient platforms
by Joseph Tam 13 Jun '17

13 Jun '17

> On that note, has anyone written a tool that "harmonises" users mail > directories' permissions - ideally reading the dovecot configuration to assess > where *THE* mail directories are actually used by dovecot? doveadm user $user which will supply the second half: it will spit out the UID, GID, home and mail directories of a user as specified by dovecot's configuration. > I was surprised by the pickiness of the group ownership/permissions > issues, though reflecting on things, I can see why you'd at least want > some logging by default for those conditions. This is a consequence of writing secure software: it employs least privilege so that a fault will not result in someone being able to mess around with someone else's mail (or indices). GID can also govern access to shared mailboxes. Joseph Tam <jtam.home(a)gmail.com>

1 0