- dovecot - dovecot.org

Cannot connect to Dovecot IMAP or POP
by C. Andrews Lavarre 24 Jul '16

24 Jul '16

Hello all. Thank you for your service. Easy when you know how, but presently I do not. After literally months of research and experimentation we simply cannot log into our PAM / apache2 / postfix / dovecot pop3/imap STARTTLS email server with an ordinary email client, e.g., Evolution or Thunderbird. We can connect to the host server in a host of different ways (no pun intended)—http, https, ssh, vnc, telnet, openssl -sclient Similarly we can connect to postfix and dovecot in yet another number of ways—telnet, openssl -sclient—but cannot log in to the email server with a normal email client (either Evolution or Thunderbird) by either pop3 or imap. SSL certificates are in place, verified, and tested. Part of the problem is the many changes in all the involved operating systems and protocols (e.g., imaps and pop3s are deprecated, openSUSE has migrated to LEAP, etc.) so many of the docs from Google are no longer valid. Additionally, there simply are bugs: Leap 42.1 YAST does not work when it comes to setting up websites. Documented. But I digress. I'm sure it's something really simple, but it evades me. Research details below. Any help would be more than appreciated. Thanks in advance, Andy ======================= Configuration testing details ======================= System is: Linux openSUSE Leap 42.1 Dovecot --version 2.2.18, Postfix Version: 2.11.6-3.1 Apache2 Version: 2.4.16-9.1 Connections 1. Evolution or Thunderbird to pop3 or imap reports: The reported error was "Could not connect to mail.privustech.com: Connection refused". Both connect successfully to googlemail.com with the same protocol: Port 993 SSL on a dedicated port I have also tried Port 143 STARTTLS after connecting without success 2. openssl s_client -connect mail.privustech.com:xxx a. xxx=25, 110, 143 all return error:140770FC b. xxx=993, 995 return socket: Connection refused connect:errno=111 3.telnet to a. smtp works. b. pop3 andy@tm2t:~> telnet 70.186.159.22 110 ... +OK POP3 2007e.104 server ready <48fa.572a0769(a)privustech.com> ... user andy -ERR Unknown AUTHORIZATION state command c. imap connects but does not allow login, and should not. http://marc.info/?l=imap&m=118775891829506&w=2 The most simple answer is "you cannot TELNET to a modern, correctly-configured, IMAP server and log in to it." andy@tm2t:~> telnet 70.186.159.22 143 ... * OK [...] privustech.com IMAP4rev1 2007e.404 at Wed, 4 May 2016 10:26:28 -0400 (EDT) ... A NO Invalid login credentials Modules • Apache2 works just fine. The server is up and answering. ping works just fine. We have http and https to all vhost sites (privustech, mailprivustech, nptbeyond, gvhl, truthcourage, and their www. subsites). • Postfix reports no errors. We can log in on localhost, send a message to ourselves and see the message. • Dovecot: a. Logging is enabled in 10-logging.conf to /var/log/dovecot.conf but no logging has occurred there. b. doveconf -n throws no errors. Checks and tests completed 1. /etc/hosts is just fine. 2. Firewall is open for telnet, postfix, dovecot. 3. Added andy to dovecot, postfix groups, in addition to mail, reset password to ANDYbbs14@. 4. We tried enabling imaps, pop3s, but this command returns errors about these protocols being obsolete. https://tools.ietf.org/html/rfc2595 Use of these ports is discouraged in favor of the STARTTLS or STLS commands. 5. Reviewed doveconf -n: a. Note, there are no Dovecot users established other than user postfix group postfix service auth { unix_listener auth-userdb { group = postfix user = postfix } } i. postfix has its own set of users, including andy, which works just fine within postfix. We can send mail and read mail in the mailbox. b. Authentication is performed by PAM: passdb { driver = pam } i. Examined PAM: A. The files /etc/pam.d/xxx, where xxx = dovecot, pop, imap, are all the same lavarre:~ # cat /etc/pam.d/xxx #%PAM-1.0 auth include common-auth account include common-account password include common-password session include common-session B. They do not resemble at all the form presented in http://wiki2.dovecot.org/PasswordDatabase/PAM passdb { driver = pam args = %s } C. Add (B.) to see if that works: No change. Comment out the original (A.): No change. Restore it. c. SSL is required and apparently configured correctly (the less-than symbol '<'causes the succeeding file to be read into the variable): ssl = required ssl_cert = </etc/ssl/certs/dovecot.pem ssl_dh_parameters_length = 2048 ssl_key = </etc/ssl/private/dovecot.pem ssl_options = no_compression ssl_prefer_server_ciphers = yes userdb { driver = passwd } i. dovecot.pem, both cert and key, are installed in /etc/ssl as above and verified as a pair with openssl x509. And we point to them in /etc/dovecot/conf.d/10-ssl.conf as seen in the above. 6. Checked listening as it does not appear in doveconf -n: lavarre:~ # doveconf protocols listen protocols = imap pop3 lmtp listen = *, :: a. conf.d/10-master.conf ports for service xxx-login {inet_listener} are commented out. In fact, the entire file is commented out. Uncomment the listeners, restart. But no change. So undo.

2 3

Thunderbird | Attachments failed opened
by Jos Chrispijn 23 Jul '16

23 Jul '16

It lately happens that I cannot open attachments in Thunderbird45.2.0. Only when I resend the email to myself I can open it. What could be done? Found out that with Outlook there is noproblem opening these attachments. Thanks, Jos -- AI is no match for natural ignorance

1 0

Managesieve problem
by Joseph Mays 23 Jul '16

23 Jul '16

Trying to get either avelsieve or server side filters to work with managesieve. Managesieve is running but whenever avelsieve or the server settings backend try to talk to it the same thing happens. So I guess it's really a problem with something about managesieve at this point. I hit the Message Filters option, it takes a long time for it to come back, though it finally just times out and does nothing, and immediately when I click on the Message Filters link the following two messages appear in /var/log/dovecot.... 2016-07-18 17:03:02 managesieve-login: Error: auth: connect(login) in directory / failed: Permission denied (euid=108(<getpwuid() error>) egid=65534(<getgrgid() error>) missing +x perm: /, dir owned by 0:111 mode=0750) 2016-07-18 17:03:02 managesieve-login: Error: auth: connect(login) in directory / failed: Permission denied (euid=108(<getpwuid() error>) egid=65534(<getgrgid() error>) missing +x perm: /, dir owned by 0:111 mode=0750) Seems to be straightforwardly a permissions error on a directory, but I don't believe it's really the / directory, so which directory is it? Any insights on where to look would be appreciated.

2 2

Disable auth_ssl_require_client_cert for SASL
by damir 22 Jul '16

22 Jul '16

Hello! Dovecot version - 2.2.6 Postfix version - 2.10.2 OS: Mageia Linux 4 x86_64 I have configured Dovecot imaps-server on 993 port to authenticate users via private certificates: auth_ssl_require_client_cert = yes auth_ssl_username_from_cert = no Users' database is in OpenLDAP and in dovecot-ldap.conf.ext checking of users' passwords is disabled: pass_attrs = uid=%n, mail=%n@%d, =nopassword=1 It all works fine. I have configured Postfix submission-service on 587 port to connect users via StartTLS: submission inet n - y - - smtpd -o smtpd_tls_security_level=encrypt -o smtpd_enforce_tls=yes -o smtpd_tls_req_ccert=yes -o smtpd_tls_ask_ccert=yes -o smtpd_client_restrictions=permit_tls_all_clientcerts,reject -o smtpd_recipient_restrictions=permit_tls_all_clientcerts,reject -o smtpd_helo_restrictions=permit_tls_all_clientcerts,reject It works fine. And now I have a new task: I also need Postfix to authenticate OpenLDAP-users using SASL on smtps-port 465. I need it for using on mobile devices, which don't support StartTLS. So I have configured smtps in Postfix: smtps inet n - y - - smtpd -o smtpd_tls_wrappermode=yes -o smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes -o smtpd_sasl_type=dovecot -o smtpd_sasl_path=private/auth -o smtpd_client_restrictions=permit_sasl_authenticated,reject -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject_unauth_destination -o smtpd_helo_restrictions=permit_sasl_authenticated,reject While trying to connect to smtps, clients get an error: "Client didn't present valid SSL certificate", and this is clear. The question is: how to configure an additional auth-service in dovecot, which doesn't require private certificates and authenticates users using login/password? Configuration-files: dovecot -n: # 2.2.6: /etc/dovecot/dovecot.conf # OS: Linux 3.14.43-server-1.mga4 x86_64 Mageia 4 ext4 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-userdb auth_verbose = yes base_dir = /var/run/dovecot/ first_valid_gid = 12 first_valid_uid = 8 hostname = myexample.com last_valid_gid = 12 last_valid_uid = 8 listen = * login_greeting = Dovecot L ready. login_trusted_networks = 127.0.0.0/8 10.62.0.0/16 mail_debug = yes mail_gid = 12 mail_home = /home/mail/%d/%n mail_location = maildir:/home/mail/%d/%n mail_uid = 8 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext default_fields = homeDirectory=/home/mail/%d/%n driver = ldap } plugin { sieve = /home/mail/%d/%n/sieve/UsersActiveScript.sieve sieve_before = /var/spool/mail/dovecot.sieve sieve_default = /var/spool/mail/dovecot.sieve sieve_dir = /home/mail/%d/%n/sieve } postmaster_address = admin(a)myexample.com protocols = imap service anvil { type = anvil unix_listener anvil-auth-penalty { group = mail mode = 0600 user = mail } unix_listener anvil { mode = 0600 user = mail } } service auth-worker { user = $default_internal_user } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = mail mode = 0600 user = mail } } service imap-login { inet_listener imap { port = 0 ssl = no } inet_listener imaps { port = 993 ssl = yes } } service pop3-login { inet_listener pop3 { port = 0 } inet_listener pop3s { port = 0 } } ssl_ca = </etc/pki/CA/private/dovecot-ca.pem grep -v '^ *$#.*$\?$' /etc/dovecot/dovecot-ldap.conf.ext: uris = ldap://localhost dn = cn=service,ou=Systems,dc=myexample,dc=com dnpass = SeCrEt auth_bind = no ldap_version = 3 base = ou=People,dc=myexample,dc=com deref = never scope = subtree user_attrs = homeDirectory=home user_filter = (&(mail=%n@%d)(uid=%n)) pass_attrs = uid=%n, mail=%n@%d, =nopassword=1 pass_filter = (&(mail=%n@%d)(uid=%n)) Kind regards, Damir

1 0

Suggested improvement for antispam plugin documentation
by Ralph Seichter 21 Jul '16

21 Jul '16

Hello, I struggled a bit with getting the antispam plugin to work, because the plugin configuration in http://wiki2.dovecot.org/Plugins/Antispam is incomplete. After some twiddling, I ended up with this: # /etc/dovecot/conf.d/90-plugin.conf plugin { antispam_backend = mailtrain antispam_mail_spam = spam antispam_mail_notspam = ham antispam_mail_sendmail = /path/to/mailtrain/script antispam_spam = Junk;Spam antispam_trash = Deleted Messages;Trash } I know that the antispam plugin has not yet been officially released, but I think it might be worth updating the documentation anyway. Your thoughts? -Ralph

1 0

an e-mail client for dovecot ?
by Spyros Tsiolis 21 Jul '16

21 Jul '16

Hello all, For some years now, I've been using Thunderbird for dovecot. I am not very satisfied with t/b so I thought of using m/s outlook but then I thought that I want to distance my clients from office products. I have a newly created dovecot installation on a very small site. Three nodes, all x86 Windows 7 professional with an ubuntu v14.04 server (x86 again) running dovecot 1.2.17. The clients there use dovecot as an imap server, so they have a real-world e-mail account each and whatever they want to keep , they store by gradding-and-dropping to the imap (local / archive) account. Since I have quite some experiece with thunderbird, I know most of its shortcomings; So I thought if there's an alternative (better?) imap mail client for x86 windows 7 systems than t/b. Even better if there's an alternative client that is also supporeted under linux . Any ideas are welcome, TIA, s.t.

12 12

Absolute path in SUBSCRIPTIONS
by Miloslav Hůla 20 Jul '16

20 Jul '16

Hello, I'm using following two namespaces with Dovecot 2.2.13-12~deb8u1: namespace inbox { inbox = yes list = yes location = prefix = INBOX. # the previous Cyrus compatibility separator = . subscriptions = yes type = private ... } namespace { inbox = no list = children location = maildir:/vmail/user/%%n/Maildir:INDEXPVT=/vmail/user/%n/Maildir/Shared/%%n prefix = user.%%n. separator = . subscriptions = yes type = shared } For the shared namespace, the subscriptions are stored globally in '/vmail/user/%%n/Maildir/subscribtions' which is bad for me. I would like too keep subscriptions per user. I cannot set 'subscriptions = no' because I have no parent namespace. And when I set :SUBSCRIPTIONS=/vmail/user/%n/Maildir/subscriptions-shared it does not work (absolute path does not work) and it creates file in: /vmail/user/%%n/Maildir/vmail/user/%n/Maildir/subscriptions-shared instead of /vmail/user/%n/Maildir/subscriptions-shared I found, that relative path hack works: :SUBSCRIPTIONS=../../%n/Maildir/subscriptions-shared but I'm not sure it is the legitimate solution. Are there other options? Kind regards, Milo

1 0

Panic when runing "doveadm mailbox status ... vsize"
by Mark Costlow 20 Jul '16

20 Jul '16

I'm using dovecot 2.2.24 on FreeBSD 10.3. I'm working on converting users from maildir to mdbox, for the usual reasons. I have converted some test users and they generally work fine. But when I run "doveadm mailbox status" I get a Panic if I ask for the vsize field (or "all"), but other fields work fine. For example: # doveadm mailbox status -u bubbacheex3 "messages" INBOX INBOX messages=53 # doveadm mailbox status -u bubbacheex3 "guid" INBOX INBOX guid=bf976912f3748957761d0100f906a3d0 # doveadm mailbox status -u bubbacheex3 "unseen" INBOX INBOX unseen=52 # doveadm mailbox status -u bubbacheex3 "vsize" INBOX doveadm(bubbacheex3): Panic: file file-lock.c: line 269: unreached Abort trap I've only converted a few users, but they all exhibit this problem. I converted them with: dsync -u bubbacheex3 mirror maildir:/var/tmp/bubbacheex3 I have done a force-resync, which succeeds but doesn't change the behavior. I spent a little time trying to get gdb running but didn't get very far (couldn't seem to get it to find the source files once I got a few levels deep in the call stack). Before I beat my head on the gdb issue more, I thought I'd check here to see if anyone has any ideas. I didn't turn up anything in google or searching this list. Here's my "doveconf -n" output: ------------------------------------------------------ # 2.2.24 (a82c823): /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 10.3-RELEASE-p3 amd64 ufs auth_failure_delay = 1 secs auth_mechanisms = plain login auth_winbind_helper_path = /usr/local/bin/ntlm_auth auth_worker_max_count = 60 base_dir = /var/run/dovecot/ disable_plaintext_auth = no first_valid_gid = 100 first_valid_uid = 1000 listen = * login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c mail_location = mdbox:/var/mail/%u:INDEX=/var/dovecot/%u mail_log_prefix = "%Us(%u): " mail_nfs_storage = yes mail_privileged_group = mail mdbox_rotate_interval = 1 days mdbox_rotate_size = 4 M mmap_disable = yes namespace { inbox = yes location = prefix = separator = . } passdb { args = session=yes dovecot driver = pam } protocols = imap pop3 service auth { unix_listener auth-client { mode = 0660 } unix_listener auth-master { mode = 0600 } user = root vsz_limit = 256 M } service imap-login { chroot = login process_limit = 128 process_min_avail = 10 service_count = 1 user = dovecot vsz_limit = 64 M } service imap { drop_priv_before_exec = no process_limit = 512 vsz_limit = 256 M } service pop3-login { chroot = login process_limit = 128 process_min_avail = 5 service_count = 1 user = dovecot vsz_limit = 64 M } service pop3 { drop_priv_before_exec = no process_limit = 512 vsz_limit = 256 M } ssl_cert = </etc/mail/certs/mail.swcp.com.pem ssl_cipher_list = ALL:!LOW:!SSLv2 ssl_key = </etc/mail/certs/mail.swcp.com.pem userdb { args = blocking=yes driver = passwd } verbose_proctitle = yes protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep imap_logout_format = bytes=%i/%o imap_max_line_length = 64 k mail_max_userip_connections = 20 mail_plugin_dir = /usr/local/lib/dovecot/imap } protocol pop3 { mail_max_userip_connections = 10 mail_plugin_dir = /usr/local/lib/dovecot/pop3 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_enable_last = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = yes pop3_uidl_format = %08Xu%08Xv } protocol lda { auth_socket_path = /var/run/dovecot/auth-master deliver_log_format = msgid=%m: %$ mail_plugin_dir = /usr/local/lib/dovecot/lda postmaster_address = postmaster(a)swcp.com quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r sendmail_path = /usr/sbin/sendmail } ------------------------------------------------------ Thanks, Mark -- Mark Costlow | Southwest Cyberport | Fax: +1-505-232-7975 cheeks(a)swcp.com | Web: www.swcp.com | Voice: +1-505-232-7992 Mail Minder - Intelligent Push Notifications for Email on the iPhone http://mailminderapp.com/download or in the App Store

3 3

Virtual mailboxes
by Lefteris Tsintjelis 19 Jul '16

19 Jul '16

I have been banging my head to the walls for the past couple of days to make virtual mailboxes work and I finally found the problem. It seems when prefetch is used the user_query is not working at all. However, I have not found any reference to this one. http://wiki.dovecot.org/Plugins/Virtual I have tried to add the SQL statements to the password_query with prefetch but it did not work. It seems that it only works with prefetch off.

1 0

dovecot --version tarball
by Leon Kyneur 19 Jul '16

19 Jul '16

Hi, Trying to understand what the version numbers mean. I typically build from the stable tarball and then apply patches as needed.. however since 2.2.25 this hasn't been working (not sure if it worked before or never really looked closely TBH). http://dovecot.org/releases/2.2/dovecot-2.2.25.tar.gz - shows GITID 7be1766 however it has commits / changes newer than this. Also the github tag for 2.2.25 is c1527e5 which doesn't match the source tarball as well. Should the source tarball and git commit hash be related? Thanks Leon

1 0

Some killed with signal 11 after upgrade to 2.2.25
by Alessio Cecchi 19 Jul '16

19 Jul '16

Hi, after to upgrade to dovecot-2.2.25 I see some killed with signal 11 in the log file: Jul 18 08:41:59 pop01 dovecot: pop3(rossi(a)milano.it): Fatal: master: service(pop3): child 32318 killed with signal 11 (core dumped) Jul 18 09:22:48 pop01 dovecot: imap(mail_backup(a)domain.it): Fatal: master: service(imap): child 16137 killed with signal 11 (core dumped) I’m not sure but I think happens with new users at the first login but I’m not able to reproduce it. Here the backtrace: Core was generated by `dovecot/pop3 pop3-postlogin'. Program terminated with signal 11, Segmentation fault. #0 0x00000001afdb5828 in ?? () Missing separate debuginfos, use: debuginfo-install bzip2-libs-1.0.5-7.el6_0.x86_64 expat-2.0.1-11.el6_2.x86_64 glibc-2.12-1.192.el6.x86_64 libgcc-4.4.7-17.el6.x86_64 libicu56-56.1-4.1.x86_64 libstdc++-4.4.7-17.el6.x86_64 zlib-1.2.3-29.el6.x86_64 (gdb) bt full #0 0x00000001afdb5828 in ?? () No symbol table info available. #1 0x000000000120a5d0 in ?? () No symbol table info available. #2 0x00007f7dafd74cac in client_dict_wait (_dict=0x120a920) at dict-client.c:573 dict = 0x120a920 #3 0x00007f7dafd757d8 in client_dict_lookup (_dict=0x120a5d0, pool=0x7f7db0020110, key=0x7f7daef41a07 "priv/quota/messages", value_r=0x7ffe94cb1650) at dict-client.c:669 result = {ret = -2, value = 0x0, error = 0x0} #4 0x00007f7daef3c5c3 in dict_quota_get_resource (_root=0x120a2d0, name=<value optimized out>, value_r=0x7ffe94cb1708) at quota-dict.c:168 value = <value optimized out> _data_stack_cur_id = 5 root = 0x120a2d0 want_bytes = <value optimized out> ret = <value optimized out> #5 0x00007f7daef39170 in quota_get_resource (root=0x120a2d0, mailbox_name=0x7f7daef41cfc "", name=0x7f7daef412f3 "MESSAGE", value_r=0x7ffe94cb1708, limit_r=0x7ffe94cb1700) at quota.c:686 bytes_limit = <value optimized out> count_limit = <value optimized out> kilobytes = false ret = <value optimized out> #6 0x00007f7daef39303 in quota_over_flag_check_root (root=0x120a2d0) at quota.c:1036 name = <value optimized out> overquota_script = <value optimized out> resources = 0x7f7daf144980 i = <value optimized out> value = 0 limit = 0 cur_overquota = <value optimized out> ret = <value optimized out> #7 0x00007f7daef39530 in quota_over_flag_check_startup (quota=<value optimized out>) at quota.c:1078 roots = <value optimized out> i = <value optimized out> count = 2 name = <value optimized out> #8 0x00007f7db006babe in hook_mail_namespaces_created (namespaces=0x12038d0) at mail-storage-hooks.c:296 _data_stack_cur_id = 4 hooks__foreach_end = 0x12073d8 hooks = 0x12073a8 #9 0x00007f7db0060065 in mail_namespaces_init_finish (namespaces=0x12038d0, error_r=0x7ffe94cb1920) at mail-namespace.c:357 _data_stack_cur_id = 3 ---Type <return> to continue, or q <return> to quit--- ns = 0x0 prefixless_found = <value optimized out> __FUNCTION__ = "mail_namespaces_init_finish" #10 0x00007f7db00601f4 in mail_namespaces_init (user=0x1205270, error_r=0x7ffe94cb1920) at mail-namespace.c:405 mail_set = 0x1206118 ns_set = <value optimized out> unexpanded_ns_set = <value optimized out> namespaces = 0x12038d0 ns_p = <value optimized out> i = <value optimized out> count = <value optimized out> __FUNCTION__ = "mail_namespaces_init" #11 0x00007f7db006f56d in mail_storage_service_init_post (ctx=<value optimized out>, user=0x11f1960, mail_user_r=0x7ffe94cb19f0) at mail-storage-service.c:714 mail_set = 0x1206118 home = 0x11f2931 "/home/domains/milano.it/rossi" mail_user = 0x1205270 #12 mail_storage_service_next_real (ctx=<value optimized out>, user=0x11f1960, mail_user_r=0x7ffe94cb19f0) at mail-storage-service.c:1411 len = <value optimized out> temp_priv_drop = false priv = {uid = 89, gid = 89, uid_source = 0x7f7db01118d9 "userdb lookup", gid_source = 0x7f7db01118d9 "userdb lookup", home = 0x11f2931 "/home/domains/milano.it/rossi", chroot = 0x11e4670 ""} error = <value optimized out> use_chroot = true #13 mail_storage_service_next (ctx=<value optimized out>, user=0x11f1960, mail_user_r=0x7ffe94cb19f0) at mail-storage-service.c:1429 old_log_prefix = 0x11f1750 "pop3(rossi(a)milano.it): " ret = 18899224 #14 0x00007f7db006f7ad in mail_storage_service_lookup_next (ctx=0x11ecdc0, input=<value optimized out>, user_r=0x7ffe94cb19f8, mail_user_r=0x7ffe94cb19f0, error_r=0x7ffe94cb1a70) at mail-storage-service.c:1462 user = 0x11f1960 ret = <value optimized out> #15 0x000000000040434e in client_create_from_input (input=0x7ffe94cb1a80, fd_in=13, fd_out=13, input_buf=0x7ffe94cb1a30, error_r=<value optimized out>) at main.c:106 lookup_error_str = 0x4083b0 "-ERR [SYS/TEMP] Internal error occurred. Refer to server log for more information.\r\n" user = <value optimized out> mail_user = <value optimized out> client = <value optimized out> set = <value optimized out> error = <value optimized out> #16 0x0000000000404abe in login_client_connected (client=0x11eefc0, username=<value optimized out>, ---Type <return> to continue, or q <return> to quit--- extra_fields=<value optimized out>) at main.c:178 input = {module = 0x40932a "pop3", service = 0x40932a "pop3", username = 0x11e3168 "rossi(a)milano.it", session_id = 0x11ef040 "MI/mQ+M3nvtPBuXj", session_id_prefix = 0x0, local_ip = {family = 2, u = {ip6 = {__in6_u = { __u6_addr8 = "\n`\003\235", '\000' <repeats 11 times>, __u6_addr16 = {24586, 40195, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {2634244106, 0, 0, 0}}}, ip4 = {s_addr = 2634244106}}}, remote_ip = {family = 2, u = {ip6 = { __in6_u = {__u6_addr8 = "O\006\345\343", '\000' <repeats 11 times>, __u6_addr16 = {1615, 58341, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {3823437391, 0, 0, 0}}}, ip4 = {s_addr = 3823437391}}}, local_port = 0, remote_port = 0, userdb_fields = 0x11e3140, flags_override_add = 0, flags_override_remove = 0, no_userdb_lookup = 0, debug = 0} error = <value optimized out> input_buf = {data = 0x11ef030, used = 0, priv = {0x0, 0x0, 0x0, 0x0, 0x0}} __FUNCTION__ = "login_client_connected" #17 0x00007f7dafd456fe in master_login_auth_finish (client=0x11eefc0, auth_args=<value optimized out>) at master-login.c:210 login = 0x11ee2a0 service = 0x11eb5d0 close_sockets = true __FUNCTION__ = "master_login_auth_finish" #18 0x00007f7dafd45989 in master_login_postlogin_input (pl=0x11f1490) at master-login.c:284 login = 0x11ee2a0 buf = "rossi@milano.it\tquota_rule=*:backend=8589934592S,229376C\tuid=89\tgid=89\thome=/home/domains/milano.it/rossi\n\000\257\005\000\000\001\000\000\000\300\035˔\376\177\000\000@\226ѯ}\177\000\000X3W\260}\177\000\000\200\035˔\376\177\000\000\250\035˔\376\177\000\000\000\060W\260}\177\000\000\030\275V\260}\177\000\000\326+\301\213\000\000\000\000\352\377\065\260}\177"... auth_args = 0x11e3138 p = 0x11e3160 len = <value optimized out> ret = -1 fd = -1 #19 0x00007f7dafdb55db in io_loop_call_io (io=0x11eee00) at ioloop.c:564 ioloop = 0x11eb730 t_id = 2 __FUNCTION__ = "io_loop_call_io" #20 0x00007f7dafdb6bc7 in io_loop_handler_run_internal (ioloop=<value optimized out>) at ioloop-epoll.c:220 ctx = 0x11ec850 events = <value optimized out> event = 0x11ed6c0 list = 0x11eee60 io = <value optimized out> tv = {tv_sec = 59, tv_usec = 999953} events_count = <value optimized out> msecs = <value optimized out> ret = 1 i = <value optimized out> ---Type <return> to continue, or q <return> to quit--- call = <value optimized out> __FUNCTION__ = "io_loop_handler_run_internal" #21 0x00007f7dafdb5685 in io_loop_handler_run (ioloop=0x11eb730) at ioloop.c:612 No locals. #22 0x00007f7dafdb5828 in io_loop_run (ioloop=0x11eb730) at ioloop.c:588 __FUNCTION__ = "io_loop_run" #23 0x00007f7dafd47b53 in master_service_run (service=0x11eb5d0, callback=<value optimized out>) at master-service.c:640 No locals. #24 0x00000000004048d4 in main (argc=2, argv=0x11eb390) at main.c:289 set_roots = {0x409400, 0x0} login_set = {auth_socket_path = 0x11e3050 "/var/run/dovecot/auth-master", postlogin_socket_path = 0x11e3088 "/var/run/dovecot/pop3-postlogin", postlogin_timeout_secs = 60, callback = 0x404a00 <login_client_connected>, failure_callback = 0x404500 <login_client_failed>, request_auth_token = 0} service_flags = <value optimized out> storage_service_flags = <value optimized out> username = <value optimized out> auth_socket_path = <value optimized out> c = <value optimized out> (gdb) and this: Core was generated by `dovecot/imap imap-postlogin'. Program terminated with signal 11, Segmentation fault. #0 0x0000000178e39828 in ?? () Missing separate debuginfos, use: debuginfo-install bzip2-libs-1.0.5-7.el6_0.x86_64 expat-2.0.1-11.el6_2.x86_64 glibc-2.12-1.192.el6.x86_64 libgcc-4.4.7-17.el6.x86_64 libicu56-56.1-4.1.x86_64 libstdc++-4.4.7-17.el6.x86_64 zlib-1.2.3-29.el6.x86_64 (gdb) bt full #0 0x0000000178e39828 in ?? () No symbol table info available. #1 0x0000000000e1e670 in ?? () No symbol table info available. #2 0x00007f1178df8cac in client_dict_wait (_dict=0xe1e910) at dict-client.c:573 dict = 0xe1e910 #3 0x00007f1178df97d8 in client_dict_lookup (_dict=0xe1e670, pool=0x7f11790a4110, key=0x7f1177dc1a07 "priv/quota/messages", value_r=0x7ffc745d6590) at dict-client.c:669 result = {ret = -2, value = 0x0, error = 0x0} #4 0x00007f1177dbc5c3 in dict_quota_get_resource (_root=0xe189a0, name=<value optimized out>, value_r=0x7ffc745d6648) at quota-dict.c:168 value = <value optimized out> _data_stack_cur_id = 5 root = 0xe189a0 want_bytes = <value optimized out> ret = <value optimized out> #5 0x00007f1177db9170 in quota_get_resource (root=0xe189a0, mailbox_name=0x7f1177dc1cfc "", name=0x7f1177dc12f3 "MESSAGE", value_r=0x7ffc745d6648, limit_r=0x7ffc745d6640) at quota.c:686 bytes_limit = <value optimized out> count_limit = <value optimized out> kilobytes = false ret = <value optimized out> #6 0x00007f1177db9303 in quota_over_flag_check_root (root=0xe189a0) at quota.c:1036 name = <value optimized out> overquota_script = <value optimized out> resources = 0x7f1177fc4980 i = <value optimized out> value = 0 limit = 0 cur_overquota = <value optimized out> ret = <value optimized out> #7 0x00007f1177db9530 in quota_over_flag_check_startup (quota=<value optimized out>) at quota.c:1078 roots = <value optimized out> i = <value optimized out> count = 2 name = <value optimized out> #8 0x00007f11790efabe in hook_mail_namespaces_created (namespaces=0xe1d230) at mail-storage-hooks.c:296 _data_stack_cur_id = 4 hooks__foreach_end = 0xe1b450 hooks = 0xe1b420 #9 0x00007f11790e4065 in mail_namespaces_init_finish (namespaces=0xe1d230, error_r=0x7ffc745d6860) at mail-namespace.c:357 _data_stack_cur_id = 3 ---Type <return> to continue, or q <return> to quit--- ns = 0x0 prefixless_found = <value optimized out> __FUNCTION__ = "mail_namespaces_init_finish" #10 0x00007f11790e41f4 in mail_namespaces_init (user=0xe19260, error_r=0x7ffc745d6860) at mail-namespace.c:405 mail_set = 0xe1a120 ns_set = <value optimized out> unexpanded_ns_set = <value optimized out> namespaces = 0xe1d230 ns_p = <value optimized out> i = <value optimized out> count = <value optimized out> __FUNCTION__ = "mail_namespaces_init" #11 0x00007f11790f356d in mail_storage_service_init_post (ctx=<value optimized out>, user=0xe04340, mail_user_r=0x7ffc745d6928) at mail-storage-service.c:714 mail_set = 0xe1a120 home = 0xe054a1 "/home/domains/C/domain.it/mail_backup" mail_user = 0xe19260 #12 mail_storage_service_next_real (ctx=<value optimized out>, user=0xe04340, mail_user_r=0x7ffc745d6928) at mail-storage-service.c:1411 len = <value optimized out> temp_priv_drop = false priv = {uid = 89, gid = 89, uid_source = 0x7f11791958d9 "userdb lookup", gid_source = 0x7f11791958d9 "userdb lookup", home = 0xe054a1 "/home/domains/C/domain.it/mail_backup", chroot = 0xdf66a0 ""} error = <value optimized out> use_chroot = true #13 mail_storage_service_next (ctx=<value optimized out>, user=0xe04340, mail_user_r=0x7ffc745d6928) at mail-storage-service.c:1429 old_log_prefix = 0xe04130 "imap(mail_backup(a)domain.it): " ret = 14786848 #14 0x00007f11790f37ad in mail_storage_service_lookup_next (ctx=0xdff7d0, input=<value optimized out>, user_r=0x7ffc745d6930, mail_user_r=0x7ffc745d6928, error_r=0x7ffc745d6988) at mail-storage-service.c:1462 user = 0xe04340 ret = <value optimized out> #15 0x0000000000424811 in client_create_from_input (input=0x7ffc745d69a0, fd_in=14, fd_out=14, client_r=0x7ffc745d6990, error_r=0x7ffc745d6988) at main.c:228 user = <value optimized out> mail_user = 0x0 ns = <value optimized out> client = <value optimized out> imap_set = <value optimized out> lda_set = <value optimized out> errstr = <value optimized out> mail_error = 32529 ---Type <return> to continue, or q <return> to quit--- #16 0x00000000004251fc in login_client_connected (login_client=0xe01a50, username=<value optimized out>, extra_fields=<value optimized out>) at main.c:316 input = {module = 0x42d701 "imap", service = 0x42d701 "imap", username = 0xdf5128 "mail_backup(a)domain.it", session_id = 0xe01ad0 "12Tc1eM34NNeVqvj", session_id_prefix = 0x0, local_ip = {family = 2, u = {ip6 = {__in6_u = { __u6_addr8 = "m\250q\234", '\000' <repeats 11 times>, __u6_addr16 = {43117, 40049, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {2624694381, 0, 0, 0}}}, ip4 = {s_addr = 2624694381}}}, remote_ip = {family = 2, u = {ip6 = { __in6_u = {__u6_addr8 = "^V\253\343", '\000' <repeats 11 times>, __u6_addr16 = {22110, 58283, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {3819656798, 0, 0, 0}}}, ip4 = {s_addr = 3819656798}}}, local_port = 0, remote_port = 0, userdb_fields = 0xdf50f8, flags_override_add = 0, flags_override_remove = 0, no_userdb_lookup = 0, debug = 0} client = <value optimized out> flags = <value optimized out> error = <value optimized out> __FUNCTION__ = "login_client_connected" #17 0x00007f1178dc96fe in master_login_auth_finish (client=0xe01a50, auth_args=<value optimized out>) at master-login.c:210 login = 0xe00d30 service = 0xdfd5f0 close_sockets = true __FUNCTION__ = "master_login_auth_finish" #18 0x00007f1178dc9989 in master_login_postlogin_input (pl=0xe03ea0) at master-login.c:284 login = 0xe00d30 buf = "mail_backup@domain.it\tquota_rule=*:backend=1073741824S,32768C\tuid=89\tgid=89\thome=/home/domains/C/domain.it/mail_backup\tauth_token=a3ac7f7c5f6b71227cc12425b8ca588d426452a2\n\270l]t\374\177\000\000\370D\200y\021\177\000\000\060\263\177y\021"... auth_args = 0xdf50f0 p = 0xdf5120 len = <value optimized out> ret = -1 fd = -1 #19 0x00007f1178e395db in io_loop_call_io (io=0xe01890) at ioloop.c:564 ioloop = 0xdfd750 t_id = 2 __FUNCTION__ = "io_loop_call_io" #20 0x00007f1178e3abc7 in io_loop_handler_run_internal (ioloop=<value optimized out>) at ioloop-epoll.c:220 ctx = 0xdff260 events = <value optimized out> event = 0xe000d0 list = 0xe018f0 io = <value optimized out> tv = {tv_sec = 59, tv_usec = 999978} events_count = <value optimized out> msecs = <value optimized out> ret = 1 ---Type <return> to continue, or q <return> to quit--- i = <value optimized out> call = <value optimized out> __FUNCTION__ = "io_loop_handler_run_internal" #21 0x00007f1178e39685 in io_loop_handler_run (ioloop=0xdfd750) at ioloop.c:612 No locals. #22 0x00007f1178e39828 in io_loop_run (ioloop=0xdfd750) at ioloop.c:588 __FUNCTION__ = "io_loop_run" #23 0x00007f1178dcbb53 in master_service_run (service=0xdfd5f0, callback=<value optimized out>) at master-service.c:640 No locals. #24 0x0000000000425025 in main (argc=2, argv=0xdfd390) at main.c:460 set_roots = {0x42d740, 0x6359e0, 0x0} login_set = {auth_socket_path = 0xdf5050 "uota_rule=*:backend=1073741824S,32768C", postlogin_socket_path = 0xdf5088 "e=/home/domains/C/domain.it/mail_backup", postlogin_timeout_secs = 60, callback = 0x425160 <login_client_connected>, failure_callback = 0x424690 <login_client_failed>, request_auth_token = 1} service_flags = <value optimized out> storage_service_flags = <value optimized out> username = <value optimized out> auth_socket_path = 0x42e6f0 "auth-master" c = <value optimized out> and my configuration: # 2.2.25.1 (f9daebb): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.15.rc1 (b9dc09d) # OS: Linux 2.6.32-642.1.1.el6.x86_64 x86_64 CentOS release 6.8 (Final) auth_cache_negative_ttl = 2 mins auth_cache_size = 20 M auth_cache_ttl = 20 mins auth_master_user_separator = * auth_mechanisms = plain login auth_worker_max_count = 50 deliver_log_format = msgid=%m, from=%f, subject="%s": %$ dict { acl = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext expire = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext sqlquota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no first_valid_gid = 89 first_valid_uid = 89 imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags imap_idle_notify_interval = 29 mins imap_logout_format = in=%i out=%o session=<%{session}> imap_max_line_length = 2 M last_valid_gid = 89 last_valid_uid = 89 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = 10.0.1.5 login_trusted_networks = 10.0.1.0/24 mail_fsync = always mail_location = maildir:~/Maildir mail_plugins = quota acl expire zlib fts fts_solr maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vnd.dovecot.duplicate mmap_disable = yes namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%n/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/dovecot-deny-sql.conf.ext deny = yes driver = sql } passdb { args = /etc/dovecot/extra/master-users driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_shared_dict = proxy::acl expire = Trash expire2 = Spam expire_dict = proxy::expire fts = solr fts_solr = url=http://10.0.1.145:8983/solr/ quota = maildir:UserQuota quota2 = dict:Quota Usage::noenforcing:proxy::sqlquota quota_grace = 10M quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_before = /etc/dovecot/sieve/before.sieve sieve_dir = ~/sieve sieve_extensions = +vnd.dovecot.duplicate -vacation zlib_save = gz zlib_save_level = 6 } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s, bytes=%i/%o, session=<%{session}> protocols = imap pop3 sieve sendmail_path = /var/qmail/bin/sendmail service anvil { unix_listener anvil-auth-penalty { mode = 00 } } service auth { client_limit = 6524 unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } service dict { process_limit = 500 unix_listener dict { group = vmail mode = 0660 user = vmail } } service imap-login { process_min_avail = 4 service_count = 0 } service imap-postlogin { executable = script-login /etc/dovecot/scripts/imap-postlogin.sh unix_listener imap-postlogin { group = vmail mode = 0660 user = vmail } user = vmail } service imap { executable = imap imap-postlogin process_limit = 5000 vsz_limit = 384 M } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { process_min_avail = 4 service_count = 0 } service pop3-postlogin { executable = script-login /etc/dovecot/scripts/pop3-postlogin.sh unix_listener pop3-postlogin { group = vmail mode = 0660 user = vmail } user = vmail } service pop3 { executable = pop3 pop3-postlogin process_limit = 1024 } service quota-warning { executable = script /etc/dovecot/scripts/quota-warning.sh unix_listener quota-warning { user = vmail } user = vmail } ssl = no submission_host = 127.0.0.1 userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol lda { mail_fsync = optimized mail_location = maildir:~/Maildir:INDEX=MEMORY mail_plugins = quota acl expire zlib fts fts_solr sieve } protocol imap { mail_max_userip_connections = 50 mail_plugins = quota acl expire zlib fts fts_solr imap_quota imap_acl imap_zlib } protocol sieve { mail_max_userip_connections = 2 } protocol pop3 { mail_max_userip_connections = 15 } I hope can be fixed. Thanks

1 0

Include IMAP Junk folder to pop3 clients.
by Lefteris Tsintjelis 18 Jul '16

18 Jul '16

Hi, I would like to include all new mails of Junk box (I have a global sieve filtering set) folder to pop3 clients. Is this possible? This is my current configuration. # 2.2.25 (7be1766): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.15 (97b3da0) # OS: FreeBSD 9.3-RELEASE-p43 amd64 auth_default_realm = example.com auth_failure_delay = 30 secs auth_mechanisms = plain login disable_plaintext_auth = no info_log_path = /var/log/dovmaillog lmtp_rcpt_check_quota = yes log_path = /var/log/dovmessages login_greeting = NO UBE/UCE - Trespassers will be pursued. mail_gid = mail mail_home = /home/vmail/%d/%u mail_max_userip_connections = 30 mail_uid = vmail mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Archive { auto = create special_use = \Archive } mailbox Drafts { auto = create special_use = \Drafts } mailbox Junk { auto = create special_use = \Junk } mailbox Sent { auto = create special_use = \Sent } mailbox Trash { auto = create autoexpunge = 30 days special_use = \Trash } prefix = } passdb { args = /usr/local/etc/dovecot/local.ext driver = sql } plugin { antispam_backend = dspam antispam_dspam_args = --deliver=;--source=error;--signature=%%s;--user;%u antispam_dspam_binary = /usr/local/bin/dspam antispam_dspam_result_header = X-DSPAM-Result antispam_signature = X-DSPAM-Signature antispam_signature_missing = move antispam_spam = Junk antispam_trash = Trash quota = maildir sieve = /home/vmail/.sieve/%d/%u/.user.sieve sieve_dir = /home/vmail/.sieve/%d/%u/.sieve sieve_global_dir = /home/vmail/.sieve/global sieve_global_path = /home/vmail/.sieve/global.sieve sieve_max_script_size = 512K } protocols = imap pop3 lmtp sieve sendmail_path = /usr/local/sbin/sendmail service auth { unix_listener /var/spool/postfix/private/dovauth { group = wheel mode = 0666 user = postfix } } service imap-login { chroot = login client_limit = 256 executable = /usr/local/libexec/dovecot/imap-login inet_listener imap { address = * port = 143 } inet_listener imaps { address = * port = 993 } process_limit = 128 process_min_avail = 2 service_count = 1 } service imap { executable = /usr/local/libexec/dovecot/imap } service lmtp { unix_listener /var/spool/postfix/private/dovlmtp { group = wheel mode = 0666 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { chroot = login client_limit = 256 executable = /usr/local/libexec/dovecot/pop3-login inet_listener pop3 { address = * port = 110 } inet_listener pop3s { address = * port = 995 } process_limit = 128 process_min_avail = 2 service_count = 1 } service pop3 { executable = /usr/local/libexec/dovecot/pop3 } ssl_cert = </etc/ssl/certs/server.pem ssl_key = </etc/ssl/private/server.pem userdb { driver = prefetch } userdb { args = /usr/local/etc/dovecot/local.ext driver = sql } protocol lmtp { mail_plugins = quota mail_log notify sieve quota } protocol lda { auth_socket_path = /var/spool/postfix/private/dovauth mail_plugins = quota mail_log notify sieve quota } protocol sieve { mail_max_userip_connections = 10 managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep imap_max_line_length = 64 k mail_plugins = quota mail_log notify imap_quota antispam } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv }

2 1

Moving Maildir folders
by Mark Foley 18 Jul '16

18 Jul '16

Our office had a user leave. Another user is taking over her duties and needs reference to the departing user's email. I've copied that entire departed user's Maildir structure to the current user: mv olduser/Maildir/.* curuser/Maildir/.olduser I did change permission and ownership on curuser/Maildir/.olduser to be the target user. I did not bring over the olduser/Maildir/dovecot* files (indexes, subscriptions, etc.) as I thought that would be bad. Nevertheless, the curuser cannot see this new olduser folder (which should be at the same level as Inbox, Junk Mail, etc.). I did manually add olduser to the curuser/Maildir/subscriptions file, but still nothing. So, what did I do wrong and how do I fix it? THX -- Mark

7 13

doveadm feature request: move mailbox between users
by Luigi Rosa 17 Jul '16

17 Jul '16

A feature request for doveadm: move (or copy) mailboxes between users Something like: doveadm movemailbox -s User1 -d User2 Old/Mail/Box Destin/Ation/Path (the same with copymailbox) Or something like that is already possible? -- Ciao, luigi / +--[Luigi Rosa]-- \ It's not enough that we do our best; sometimes we have to do what's required. --Sir Winston Churchill

2 4

doveconf -n display error for "remote"
by Michael Fox 15 Jul '16

15 Jul '16

Upon further testing, it seems that the issue below may only be a display bug in doveconf. In other words, the remote filter appears to work as configured, even though it is displayed with duplicate prefix length by doveconf. Is this sufficient information to report a bug or is there some other protocol? Michael ------------------------------------------- Dovecot --version: 2.2.9 I configured the following in local.conf: remote 192.168.7.128/27 { ssl = no } remote 192.168.7.0/24 { ssl = yes } But, when I run doveconf -n, I see: remote 192.168.7.0/24/24 { ssl = yes } remote 192.168.7.128/27/27 { ssl = no } Note the repeated network prefix length (/27/27 and /24/24).

1 0

controlling STARTTLS by IP address
by Michael Fox 15 Jul '16

15 Jul '16

On my POP3 server, I need to be able to control the use of STARTTLS by client IP address. Specifically: * Clients on certain internal subnets (e.g., 192.168.1.0/24) must not have the option to use TLS. If the client tries to use STARTTLS, the option should be rejected. This is to satisfy US FCC rules regarding the use of encryption over certain radio frequencies. * All other internal clients (e.g., 192.168.0.0/16, but not 192.168.1.0/24) should be able to use STARTTLS if they choose to. * All external clients (0.0.0.0/0) will be required to use TLS. Is there a way to control which clients are allowed to use STARTTLS according to the client's IP address? Thanks, Michael

7 18

authentication failed: Connection lost to authentication server
by Zhang Huangbin 15 Jul '16

15 Jul '16

Dear all, I got error "authentication failed: Connection lost to authentication server", i turned on debug mode in Postfix/Dovecot, but this is the error i can get. All other errors point to sasl auth failure, what does "connection lost to authentication server" means? How can i exactly know what the problem is and how to fix it? Here's my Dovecot/Postfix configuration, with Active Directory integration. - dovecot.conf: http://pastebin.com/7T05kvmH - dovecot-ldap.conf: http://pastebin.com/DtkAg01v - Postfix main.cf: http://pastebin.com/Z9Wihmvr Dovecot/Postfix and AD are running in the same network (192.168.10.X), no firewall between them. Thanks for your help. :)

1 0

Re: Re: "Error: nfs_flush_file_handle_cache_dir: rmdir(/inboxes)" log spikes
by Joseph Tam 15 Jul '16

15 Jul '16

Aki Tuomi <aki.tuomi(a)dovecot.fi> wrote: > On 14.07.2016 21:26, Joseph Tam wrote: >> >> I received a bunch of these log messages at a rate of a few thousand >> per hour for one of my users -- she may have max'd out her quota. The >> directory is a NFS directory containing mbox formatted INBOX's. >> >> Other than alleviating the space crunch, is there any particular >> action I need to take? > > Are we talking about dovecot quota or some filesystem quota? Filesystem quota. Joseph Tam <jtam.home(a)gmail.com>

1 0

"Error: nfs_flush_file_handle_cache_dir: rmdir(/inboxes)" log spikes
by Joseph Tam 14 Jul '16

14 Jul '16

I received a bunch of these log messages at a rate of a few thousand per hour for one of my users -- she may have max'd out her quota. The directory is a NFS directory containing mbox formatted INBOX's. Other than alleviating the space crunch, is there any particular action I need to take? Joseph Tam <jtam.home(a)gmail.com>

2 1

quota config - when is the warning messag send?
by Götz Reinicke - IT Koordinator 14 Jul '16

14 Jul '16

Hi, we run dovecot 2.2.24 and from what I see, quota management with warning message is configured currently with "noenforcing". Our individual quota limit is stored in the users ldap DN which is fetched as I see from the logs and by "doveadm quota get -u" I tried to trigger the warning mail by going over the limit on my account step by step and can see that values are counted with the command above and in thunderbird by showing the orange and than red warning symbol at the bottom for me. But the warning mail script is not triggert. How may I debug this? from 90-quota.conf: service quota-warning { executable = script /usr/local/bin/quota-warning.sh user = vmail # dovecot unix_listener quota-warning { user = vmail } } /usr/local/bin/quota-warning.sh is owned currently by vmail and executable by vmail. Thanks for feedback and suggestion . /Götz

1 0

Panic: file mdbox-save.c: line 337: unreached
by Leon Kyneur 14 Jul '16

14 Jul '16

Recently updated to 2.2.25. Noticed a migration script I've been previously running fine started giving me the errors below. Remove server doesn't log any failure. doveconf -n attached. + /bin/doveadm -o mail_fsync=never backup -R -u user(a)domain.com imapc: dsync(user(a)domain.com): Panic: file mdbox-save.c: line 337: unreached dsync(user(a)domain.com): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x8d52e) [0x7f58e6da052e] -> /usr/lib64/dovecot/libdovecot.so.0(default_fatal_ha ndler+0x2a) [0x7f58e6da059a] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7f58e6d3f1b6] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x5b157) [0x7f58e7080157] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0xbfdbf) [0x7f58e70e4dbf] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_index_transaction_commit_full+0x9d) [0x7f58e 710043d] -> /usr/lib64/dovecot/libdovecot-storage.so.0(index_transaction_commit+0x107) [0x7f58e70e5337] -> /usr/lib64/dovecot/lib20_zlib_plugin.so(+0x3163) [0x7f58e5f29 163] -> /usr/lib64/dovecot/lib10_quota_plugin.so(+0xc703) [0x7f58e613d703] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mailbox_transaction_commit_get_changes+0x51) [0 x7f58e7069631] -> /bin/doveadm [user(a)domain.com INBOX import:650/674](dsync_mailbox_import_deinit+0xf8) [0x7f58e7a12898] -> /bin/doveadm [user(a)domain.com IN BOX import:650/674](+0x41bbf) [0x7f58e7a0cbbf] -> /bin/doveadm [user(a)domain.com INBOX import:650/674](dsync_brain_sync_mails+0x723) [0x7f58e7a0d433] -> /bin/dovea dm [user(a)domain.com INBOX import:650/674](dsync_brain_run+0x5f8) [0x7f58e7a08c78] -> /bin/doveadm [user(a)domain.com INBOX import:650/674](+0x27521) [0x7f58e7 9f2521] -> /bin/doveadm [user(a)domain.com INBOX import:650/674](+0x2929f) [0x7f58e79f429f] -> /bin/doveadm [user(a)domain.com INBOX import:650/674](+0x29d8d) [0x7f58e79f4d8d] -> /bin/doveadm [user(a)domain.com INBOX import:650/674](doveadm_mail_try_run+0x215) [0x7f58e79f56f5] -> /bin/doveadm [user(a)domain.com INBOX import:650/674](main+0x455) [0x7f58e79e57f5] -> /lib64/libc.so.6(__libc_start_main+0xf5) [0x7f58e6973b15] -> /bin/doveadm [user(a)domain.com INBOX import:650/674](+0x1a96d) [0x7f58e79e596d] /root/migrate_code/migrate_mailbox_eftel.sh: line 31: 48637 Aborted /bin/doveadm -o mail_fsync=never backup -R -u $USERNAME imapc: + RETCODE=134 Regards Leon

3 3

Pigeonhole vs dovecot gssapi option
by Larry Rosenman 13 Jul '16

13 Jul '16

Stephan, Is there a reason you don't pick up the dovecot-config file to set additional libraries like the Kerberos libs? I'm the FreeBSD Ports Maintainer for pigeonhole, and a user filed a PR about missing the krb5 libs. Thanks! -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: larryrtx(a)gmail.com US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

2 4

Re: [2.2.25 auth issue] auth-request.c: line 1049 (auth_request_lookup_credentials): assertion failed: (request->credentials_scheme == scheme)
by Alexey Asemov (Alex/AT) 13 Jul '16

13 Jul '16

Hello Aki. Here it is. Some sensitive data was replaced by ***. # 2.2.25 (7be1766): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.15 (97b3da0) # OS: Linux 3.10.0-***.el7.x86_64 x86_64 CentOS Linux release 7.*** (Core) ext4 auth_cache_negative_ttl = 15 secs auth_cache_size = 8 M auth_cache_ttl = 15 secs auth_default_realm = *** auth_mechanisms = plain login digest-md5 cram-md5 ntlm auth_username_chars = abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.,;=-_@ auth_username_format = %LTn@%LTd auth_verbose = yes auth_worker_max_count = 64 dict { last_login = mysql:/etc/dovecot/mailserver/last_login.dbconf sieve = mysql:/etc/dovecot/mailserver/sieve.dbconf } disable_plaintext_auth = no import_environment = TZ listen = * lock_method = dotlock log_timestamp = %F %T login_greeting = *** Mail Server ready and serving (LXmail01). mail_attachment_dir = /mailboxes/%1.16Nu/%Ld/.attachments mail_attachment_hash = %{sha256}.%{size} mail_attachment_min_size = 64 k mail_cache_min_mail_count = 32 mail_gid = mailbox mail_home = /mailboxes/%1.16Nu/%Ld/%2.256Nn/%Ln mail_location = mdbox:/mailboxes/%1.16Nu/%Ld/%2.256Nn/%Ln mail_max_keyword_length = 64 mail_plugins = quota fts fts_lucene zlib mail_uid = mailbox mailbox_idle_check_interval = 1 mins managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mdbox_rotate_interval = 90 days mdbox_rotate_size = 4 M namespace { inbox = yes location = mailbox Drafts { auto = no special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = create special_use = \Junk } mailbox Trash { auto = no special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/mailserver/mysql.dbconf driver = sql } plugin { fts = lucene fts_autoindex = yes fts_autoindex_max_recent_msgs = 65536 fts_index_timeout = 900 fts_lucene = whitespace_chars=@.,;-/ last_login_dict = proxy::last_login last_login_key = last_login/%u quota = dict:user quota::file:%h/.quota quota_rule = *:bytes=2684354560 quota_rule2 = Trash:bytes=+10%% quota_rule3 = Spam:bytes=+10%% sieve = dict:proxy::sieve;name=%Lu;bindir=/mail_local/sieve/cache sieve_dir = ~/sieve sieve_global_dir = /mail_local/sieve/global sieve_max_actions = 32 sieve_max_redirects = 4 sieve_max_script_size = 16K sieve_user_log = /mail_local/sieve/logs/%Lu.log sieve_vacation_dont_check_recipient = yes sieve_vacation_max_period = 0 sieve_vacation_min_period = 0 zlib_save = xz zlib_save_level = 1 } service anvil { client_limit = 6666 } service auth { client_limit = 6666 unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = mailbox mode = 0600 user = mailbox } user = $default_internal_user } service auth_worker { user = root } service dict { unix_listener dict { group = mailbox mode = 0600 user = mailbox } } service imap-login { chroot = login client_limit = 2048 inet_listener imaps { address = * } process_limit = 2048 process_min_avail = 1 service_count = 1 user = dovecot } service imap { drop_priv_before_exec = no process_limit = 2048 } service indexer-worker { process_limit = 2 } service ipc { unix_listener ipc { group = mode = 0600 user = } unix_listener login/ipc-proxy { group = dovecot mode = 0660 user = $default_login_user } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } unix_listener lmtp { group = mailbox mode = 0600 user = mailbox } } service pop3-login { chroot = login client_limit = 2048 inet_listener pop3s { address = * } process_limit = 2048 process_min_avail = 1 service_count = 1 user = dovecot } service pop3 { drop_priv_before_exec = no process_limit = 2048 } shutdown_clients = no ssl_cert = </etc/ssl/email.crt ssl_key = </etc/ssl/email.key syslog_facility = local2 userdb { args = /etc/dovecot/mailserver/mysql.dbconf driver = sql } verbose_proctitle = yes protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 16 mail_plugins = quota fts fts_lucene zlib imap_quota last_login } protocol pop3 { mail_max_userip_connections = 16 mail_plugins = quota fts fts_lucene zlib last_login pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_enable_last = yes pop3_save_uidl = yes pop3_uidl_duplicates = rename pop3_uidl_format = %08Xu%08Xv } protocol lda { auth_socket_path = /var/run/dovecot/auth-master lda_original_recipient_header = X-Original-To mail_debug = no mail_plugins = quota fts fts_lucene zlib sieve postmaster_address = postmaster@*** quota_full_tempfail = no recipient_delimiter = + } protocol lmtp { lda_original_recipient_header = X-Original-To lmtp_save_to_detail_mailbox = yes mail_debug = no mail_plugins = quota fts fts_lucene zlib sieve postmaster_address = postmaster@*** quota_full_tempfail = no recipient_delimiter = + } local_name LXmail.*** { ssl_cert = </etc/ssl/***.net.crt ssl_key = </etc/ssl/***.net.key } local_name LXmail01.*** { ssl_cert = </etc/ssl/***.net.crt ssl_key = </etc/ssl/***.net.key } local_name LXmail02.*** { ssl_cert = </etc/ssl/***.net.crt ssl_key = </etc/ssl/***.net.key } local_name LXmail03.*** { ssl_cert = </etc/ssl/***.net.crt ssl_key = </etc/ssl/***.net.key } local_name LXmail04.*** { ssl_cert = </etc/ssl/***.net.crt ssl_key = </etc/ssl/***.net.key } > Hi! > > Could you provide your doveconf -n so we could debug this? > > Aki >

2 3

passdb {driver = shadow args = override_username=%variable}
by UNIX admin 12 Jul '16

12 Jul '16

Hello list I want to implement override_username = %variable for the "shadow" driver, so that the following works: passdb { driver = shadow args = override_username=%Ln } by "%variable", I mean "Variables" at http://wiki.dovecot.org/Variables. I've hacked up a solution with strtok(3C), but that's a hack and a possible security hole, and I'd rather not implement it. What I really want is to be able to leverage Dovecot's var_expand() call, which, looking at the code, appears to be the function responsible for %variable expansion and formatting. The relevant piece of code seems to be this excerpt in auth/passdb-shadow.c: static enum passdb_result shadow_lookup(struct auth_request *request, struct spwd **spw_r) { auth_request_log_debug(request, AUTH_SUBSYS_DB, "lookup"); *spw_r = getspnam(request->user); if (*spw_r == NULL) { auth_request_log_unknown_user(request, AUTH_SUBSYS_DB); return PASSDB_RESULT_USER_UNKNOWN; } when request->user contains 'user(a)domain.tld', I want the code to be able to process "override_username", determine that the format is %Ln so that request->user is lowercased, and everything after the "@" sign is stripped. Therefore, if this user happens to exist in the shadow file, authentication will succeed. Currently, the "shadow" driver only appears to support "args = blocking=no". Please advise.

3 4

Re: Dovecot 2.2.25 compiling error
by Joseph Tam 12 Jul '16

12 Jul '16

>> I've reduced the problem to this: >> >> void foo(int X[static 20]); >> >> will compile but if you remove "X", it won't. > > The change was to replace "int" with "unsigned char" in the above test > program, and the test started failing then in CentOS 5's gcc. I'd > expect the same to happen for you also. No, it will fail with both "int" and "unsigned char" without the dummy argument "X", and works for both if one is inserted. I don't know why -- perhaps a bug with my version of gcc. Joseph Tam <jtam.home(a)gmail.com>

1 1