- dovecot - dovecot.org

Plugin "last-login" - Log SMTP-AUTH information
by Benjamin Hück 16 Mar '16

16 Mar '16

Hello all, we are using the Plugin "last-login" [1] to update user's last-login timestamp or the timestamp of the last incoming message in a MySQL backend. Would it be possible to expand the plugin to also log the timestamp of the last smtp-auth attempt/successful process? Currently in our settings, a smtp-auth request (port 587) is forwarded by postfix to a dovecot backend server for authentication. I couldn`t find out the developer of the plugin otherwise I had contact them immediatly. Thanks and best regards, Benjamin Hück [1] http://wiki2.dovecot.org/Plugins/LastLogin -- ________________________________ KEVAG Telekom GmbH Cusanusstr. 7 D 56073 Koblenz Fon: +49 261 20162-0 Fax: +49 261 20162-25100 http://www.kevag-telekom.de/ Geschäftsführer: Bernd Gowitzke, Gerd Thewalt Sitz der Gesellschaft: Koblenz, Amtsgericht Koblenz, HRB Nr. 5343 USt.IdNr. DE 18 77 67 843 St-Nr. 22/650/0182/7

1 0

New dovecot user needs installation help
by Jason Pruim 16 Mar '16

16 Mar '16

Hey Everyone, So I just setup my first dovecot install with postfix running for the mail server… I can telnet into my dovecot install and login just fine with my user locally… But when I try to add the account from my phone, computer, or telnetting from my local computer, it just hangs and eventually kicks back a generic error saying it can’t be added… Where can I start looking? I’m hosted with amazon web services and I’m waiting on them to approve my request to white list my IP on my instance, but that should only restrict my ability to send email out on port 25… I should still be able to operate locally… According to the firewall on amazon port 143 and 993 are both allowed from any IP address into the server (All outbound traffic is currently open until I get it working) I’m thinking it’s something easy, and I can handle pointers! I don’t necessarily need my hand held the entire way… At least not yet… Here is the output of my dovecot -n: [ec2-user@ip-172-31-22-222 log]$ dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 3.14.48-33.39.amzn1.x86_64 x86_64 mail_location = mbox:~/mail:INBOX=/var/mail/%u mbox_write_locks = fcntl passdb { driver = pam } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } [ec2-user@ip-172-31-22-222 log]$ Let me know if there is anything else you need, or where to go from here! Thanks in advance! Jason Pruim pruimj(a)gmail.com

2 5

Reappearing emails - IMAP trace
by Ron Cleven 16 Mar '16

16 Mar '16

A few days back, I sent an overview of this problem, but received no responses. Since then, I have run dozens of traces to isolate the problem, difficult because there are timing issues involved. I have finally nailed it down. If this is not the proper place to report such bugs or if someone knows that this bug has been fixed, please let me know. As I noted in my earlier post, we have been running Dovecot 2.2.10 with a pair of CentOS 7 boxes with replications for the past year. We have been quite happy with the performance and reliability. Recently we received a report that emails could reappear in the INBOX after being deleted. After running a pile of traces, I determined that the problem was strangely related to replications. For the purposes of this discussion, I will refer to the two symmetric replicating servers as A and B. Further, let us assume that during "normal" operation, all the emails are delivered to A via SMTP and are replicated to B. Under those assumptions, if the IMAP user connects to A (where the messages were originally delivered), there is no problem, at least no problem I was able to find. The problem I am describing only arises if the IMAP user connects to B. Connecting to B has never presented any other problems that I am aware of. The test for which I have provided the trace starts with a test mailbox containing only 3 unread messages in the INBOX. Moving 1 of the unread messages to Trash is all that is needed to reproduce the problem. Remember this is ONLY a problem if the IMAP sessions do not connect to the server to which the messages were originally delivered. Also, I found that there is a timing window. The critical IMAP commands are: UID STORE xxx +FLAGS.SILENT (\Seen) UID MOVE xxx Trash If you introduce a large enough delay (I arbitrarily chose 5 seconds) between those two commands, there is no problem. Presumably this has to do with the two boxes syncing up some critical data structure. It takes a short time for the message that was moved to Trash to reappear in the INBOX. The trace initially shows the number of messages going from 3 to 2 when the message is moved to Trash, but a second or so later, the message count goes back up to 3. Interestingly, the reappearing message shows back up as Unseen in the INBOX but a duplicate copy of it stays in Trash as Seen. Dragging unread messages to Trash may not be polite, but it is technically acceptable. Regarding the trace below , CR's show up as \r, LF's show up as \n, and each line starts with S or C depending upon whether it is from the Server or Client. There is blank line following each connection. Thanks, Ron ============================================================================ S * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE I S DLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n C 10001 LOGIN testimap(a)usgo.net ***********\r\n S 10001 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENAB S LE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDS S UBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UID S PLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRE S S WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE] Logged in S \r\n C 10002 STATUS INBOX (MESSAGES UNSEEN)\r\n S * STATUS INBOX (MESSAGES 3 UNSEEN 3)\r\n S 10002 OK Status completed.\r\n C 10003 SELECT INBOX\r\n S * FLAGS (\Answered \Flagged \Deleted \Seen \Draft)\r\n S * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \* S )] Flags permitted.\r\n S * 3 EXISTS\r\n S * 1 RECENT\r\n S * OK [UNSEEN 1] First unseen.\r\n S * OK [UIDVALIDITY 1457030049] UIDs valid\r\n S * OK [UIDNEXT 129] Predicted next UID\r\n S * OK [HIGHESTMODSEQ 417] Highest\r\n S 10003 OK [READ-WRITE] Select completed (0.000 secs).\r\n C 10004 UID SEARCH 3\r\n S * SEARCH 128\r\n S 10004 OK Search completed (0.000 secs).\r\n C 10005 LIST "" Trash\r\n S * LIST (\HasNoChildren \Trash) "." Trash\r\n S 10005 OK List completed.\r\n C 10006 UID STORE 128 +FLAGS.SILENT (\Seen)\r\n S 10006 OK Store completed.\r\n C 10007 UID MOVE 128 Trash\r\n S * OK [COPYUID 1457030331 128 127] Moved UIDs.\r\n S * 3 EXPUNGE\r\n S * 0 RECENT\r\n S 10007 OK Move completed.\r\n C 10008 STATUS INBOX (MESSAGES UNSEEN)\r\n S * STATUS INBOX (MESSAGES 2 UNSEEN 2)\r\n S 10008 OK [CLIENTBUG] Status on selected mailbox completed.\r\n C 10009 STATUS Trash (MESSAGES UNSEEN)\r\n S * STATUS Trash (MESSAGES 1 UNSEEN 0)\r\n S 10009 OK Status completed.\r\n C 10010 LOGOUT\r\n S * BYE Logging out\r\n S 10010 OK Logout completed.\r\n S * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE I S DLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n C 10001 LOGIN testimap(a)usgo.net ***********\r\n S 10001 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENAB S LE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDS S UBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UID S PLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRE S S WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE] Logged in S \r\n C 10002 SELECT INBOX\r\n S * FLAGS (\Answered \Flagged \Deleted \Seen \Draft)\r\n S * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \* S )] Flags permitted.\r\n S * 2 EXISTS\r\n S * 0 RECENT\r\n S * OK [UNSEEN 1] First unseen.\r\n S * OK [UIDVALIDITY 1457030049] UIDs valid\r\n S * OK [UIDNEXT 129] Predicted next UID\r\n S * OK [HIGHESTMODSEQ 419] Highest\r\n S 10002 OK [READ-WRITE] Select completed (0.026 secs).\r\n C 10003 UID FETCH 127 (UID RFC822.SIZE FLAGS INTERNALDATE BODYSTRUCTURE B C ODY.PEEK[HEADER.FIELDS (DATE FROM TO SUBJECT CONTENT-TYPE CC REPLY-TO L C IST-POST DISPOSITION-NOTIFICATION-TO X-PRIORITY IN-REPLY-TO BCC SENDER C MESSAGE-ID CONTENT-TRANSFER-ENCODING REFERENCES X-DRAFT-INFO MAIL-FOLLO C WUP-TO MAIL-REPLY-TO RETURN-PATH)])\r\n S * 2 FETCH (UID 127 RFC822.SIZE 771 FLAGS () INTERNALDATE "08-Mar-2016 0 S 8:48:31 -0600" BODYSTRUCTURE ("text" "plain" ("charset" "us-ascii") NIL S NIL "7bit" 7 1 NIL NIL NIL NIL) BODY[HEADER.FIELDS (DATE FROM TO SUBJE S CT CONTENT-TYPE CC REPLY-TO LIST-POST DISPOSITION-NOTIFICATION-TO X-PRI S ORITY IN-REPLY-TO BCC SENDER MESSAGE-ID CONTENT-TRANSFER-ENCODING REFER S ENCES X-DRAFT-INFO MAIL-FOLLOWUP-TO MAIL-REPLY-TO RETURN-PATH)] {108}\r S \n S From: ron(a)cleven.com\r\n S To: testimap(a)usgo.net\r\n S Date: Tue, 08 Mar 2016 08:48:24 -0600 (CST)\r\n S Subject: test2\r\n S \r\n S )\r\n S 10003 OK Fetch completed.\r\n C 10004 UID FETCH 127 (BODY.PEEK[TEXT])\r\n S * 2 FETCH (UID 127 BODY[TEXT] {7}\r\n S test2\r\n S )\r\n S 10004 OK Fetch completed.\r\n C 10005 UID STORE 127 +FLAGS.SILENT (\Seen)\r\n S 10005 OK Store completed.\r\n C 10006 LOGOUT\r\n S * BYE Logging out\r\n S 10006 OK Logout completed.\r\n S * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE I S DLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n C 10001 LOGIN testimap(a)usgo.net ***********\r\n S 10001 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENAB S LE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDS S UBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UID S PLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRE S S WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE] Logged in S \r\n C 10002 LIST (SUBSCRIBED) "" "*"\r\n S * LIST (\Subscribed) "." Sent\r\n S * LIST (\Subscribed) "." Trash\r\n S * LIST (\Subscribed) "." Drafts\r\n S * LIST (\Subscribed) "." Junk\r\n S * LIST (\Subscribed) "." Blocked\r\n S * LIST (\Subscribed) "." Pending\r\n S * LIST (\Subscribed) "." Archives\r\n S * LIST (\Subscribed) "." Archives.2016\r\n S 10002 OK List completed.\r\n C 10003 STATUS INBOX (MESSAGES UNSEEN)\r\n S * STATUS INBOX (MESSAGES 2 UNSEEN 1)\r\n S 10003 OK Status completed.\r\n C 10004 LOGOUT\r\n S * BYE Logging out\r\n S 10004 OK Logout completed.\r\n S * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE I S DLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n C 10001 LOGIN testimap(a)usgo.net ***********\r\n S 10001 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENAB S LE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDS S UBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UID S PLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRE S S WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE] Logged in S \r\n C 10002 LIST (SUBSCRIBED) "" "*"\r\n S * LIST (\Subscribed) "." Sent\r\n S * LIST (\Subscribed) "." Trash\r\n S * LIST (\Subscribed) "." Drafts\r\n S * LIST (\Subscribed) "." Junk\r\n S * LIST (\Subscribed) "." Blocked\r\n S * LIST (\Subscribed) "." Pending\r\n S * LIST (\Subscribed) "." Archives\r\n S * LIST (\Subscribed) "." Archives.2016\r\n S 10002 OK List completed.\r\n C 10003 STATUS INBOX (MESSAGES UNSEEN)\r\n S * STATUS INBOX (MESSAGES 3 UNSEEN 2)\r\n S 10003 OK Status completed.\r\n C 10004 LOGOUT\r\n S * BYE Logging out\r\n S 10004 OK Logout completed.\r\n ============================================================================

2 1

syncing mailboxes with dsync after switchover
by Sergey Schwartz 16 Mar '16

16 Mar '16

Gents, I'm relocating mailboxes to a new server. Before switching over to a new server I ran syncing a few times without any issues first I sync files with rsync from the old server to have a local copy, then I sync mailboxes with dsync /usr/bin/doveadm -Dv sync -u $MBOX -R "sdbox:/srv/vmail/temp/srv/srv.bgoperator.ru/${MBOX}:DIRNAME=DbOx-mAiLs" After switching over smtp transport and running dsync as above a few mailboxes were deleted dsync(xxx): Warning: Deleting mailbox 'INBOX': UID=1 already exists locally for a different mail: GUIDs don't match (c005a206e1c6e756f02700003a8929e2 vs 0ba1c03796f5dc524c6d0000b4ca29ec) dsync(xxxx): Warning: Deleting mailbox 'INBOX': UID=8855 GUID=80d5841f0fe2e35677630000b4ca29ec is missing locally dsync(xxxxx): Warning: Deleting mailbox 'INBOX': UID=7508 already exists locally for a different mail: GUIDs don't match (1e03d72074d8e756403700003a8929e2 vs 1dc47a3ac5c4e7562a290000b4ca29ec) dsync(xxxxxx): Warning: Deleting mailbox 'INBOX': UID=8238 GUID=2a6a803bd33fe156f85e0000b4ca29ec is missing locally and a few other mailboxes seemed to fail to sync dsync(xxxxxxx): Warning: Mailbox changes caused a desync. You may want to run dsync again. Is it a bug or I am doing something wrong ? -- Best regards, Sergey Schwartz Senior System Administrator Biblio Globus Tour Operator www.bgoperator.ru T: +7 495 5042500 ext 1532 E: sergey.schwartz(a)bgoperator.com

2 2

VS: New dovecot user needs installation help
by Aki Tuomi 15 Mar '16

15 Mar '16

Can yoi run doveadm log errors too? ---Aki TuomiDovecot oy -------- Alkuperäinen viesti --------Lähettäjä: Jason Pruim <pruimj(a)gmail.com> Päivämäärä: 15.3.2016 4.50 (GMT+02:00) Saaja: dovecot(a)dovecot.org Aihe: New dovecot user needs installation help Hey Everyone, So I just setup my first dovecot install with postfix running for the mail server… I can telnet into my dovecot install and login just fine with my user locally… But when I try to add the account from my phone, computer, or telnetting from my local computer, it just hangs and eventually kicks back a generic error saying it can’t be added… Where can I start looking? I’m hosted with amazon web services and I’m waiting on them to approve my request to white list my IP on my instance, but that should only restrict my ability to send email out on port 25… I should still be able to operate locally… According to the firewall on amazon port 143 and 993 are both allowed from any IP address into the server (All outbound traffic is currently open until I get it working) I’m thinking it’s something easy, and I can handle pointers! I don’t necessarily need my hand held the entire way… At least not yet… Here is the output of my dovecot -n: [ec2-user@ip-172-31-22-222 log]$ dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 3.14.48-33.39.amzn1.x86_64 x86_64 mail_location = mbox:~/mail:INBOX=/var/mail/%u mbox_write_locks = fcntl passdb { driver = pam } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } [ec2-user@ip-172-31-22-222 log]$ Let me know if there is anything else you need, or where to go from here! Thanks in advance! Jason Pruim pruimj(a)gmail.com

2 1

dovecot wiki...
by Andrew McGlashan 15 Mar '16

15 Mar '16

Hi, Just want to know if this is a problem at my end (in my browser), or if it is something else. When I copy text from the wiki, the page changes to an edit one; that is very, very annoying. How can I stop this if it is normal dovecot wiki behaviour and what do you think I might look at in my browser if it isn't? I'm never likely to want to edit the wiki any time soon. Thanks AndrewM

3 3

Logging the TLS cipher suite
by Luigi Rosa 12 Mar '16

12 Mar '16

Hi, could it be possible to log the TLS cipher suite as Postfix does? This is a typical TLS Dovecot log line: imap-login: Login: user=<user(a)acme.com>, method=DIGEST-MD5, rip=1.2.3.4, lip=4.3.2.1, mpid=19671, TLS, session=<Jsvr46wt2c1ScQfY> This is the Postfix equivalent postfix/smtp[59723]: Anonymous TLS connection established to mail.acmne.com[1.2.3.4]:25: TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits) -- Ciao, luigi / +--[Luigi Rosa]-- \ We're not surrounded, we're in a target-rich environment!

2 3

Timout for LDAP connection
by Gordon Grubert 11 Mar '16

11 Mar '16

Hi, we are using a round robin dns record for connections to our ldap system. This works fine for almost all cases. In particular, for dovecot does this mean, when an ldap server is stopped, dovecot instantly reconnects to another ldap server. But when the network connection to the active ldap server is broken, dovecot sticks to the failed ldap server. Is there any possibility to define a connection timeout? This is our current configuration for the ldap connection: # 2.2.devel (2d8f665): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.devel (0de2a19) # OS: Linux 3.16.0-4-amd64 x86_64 Debian 8.3 uris = ldaps://LDAP-SERVER dn = BINDDN dnpass = BINDPASS auth_bind = yes ldap_version = 3 base = BASEDN scope = subtree user_attrs= ATTRIBUTES user_filter = USERFILTER pass_filter = PASSFILTER iterate_filter = ITERATEFILTER Best regards, Gordon -- Technischer Leiter & stellv. Direktor Universitätsrechenzentrum (URZ) E.-M.-Arndt-Universität Greifswald Felix-Hausdorff-Str. 12 17489 Greifswald Germany Tel. +49 3834 86 1456 Fax. +49 3834 86 1401

5 14

ldap userdb/passwd connection timeout
by skeletor＠lissyara.su 11 Mar '16

11 Mar '16

Hello. I want to use second ldap server for failover. So, i add a second section for userdb/passdb. My question is: what connection timeout, after that dovecot will be try to connectd another ldap server? Can i change it? Thanks.

1 0

Troubleshooting mailbox problems
by Nick Bright 11 Mar '16

11 Mar '16

Greetings, I'm running Dovecot 2.0.9 on my CentOS 6 server, for several thousand mailboxes. Recently, I've had several reports of "my mailbox is suddenly empty, where'd my mail go?" I've enabled debug logging, but I'd like to make sure I have the best level of debug to see things like "delete message" commands? I've configured in logging: auth_debug = yes auth_debug_passwords = no mail_debug = yes plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_group_events = yes mail_log_fields = uid box msgid size } Does this look like a good start? I really think it's a client side problem, but sometimes end users always want to blame the server; and proof must be shown e.g. "Look, here's the log, you're sending delete commands." At which point, we can proceed with dealing with their software problem. Thanks, -- ----------------------------------------------- - Nick Bright - - Vice President of Technology - - Valnet -=- We Connect You -=- - - Tel 888-332-1616 x 315 / Fax 620-331-0789 - - Web http://www.valnet.net/ - ----------------------------------------------- - Are your files safe? - - Valnet Vault - Secure Cloud Backup - - More information & 30 day free trial at - - http://www.valnet.net/services/valnet-vault - ----------------------------------------------- This email message and any attachments are intended solely for the use of the addressees hereof. This message and any attachments may contain information that is confidential, privileged and exempt from disclosure under applicable law. If you are not the intended recipient of this message, you are prohibited from reading, disclosing, reproducing, distributing, disseminating or otherwise using this transmission. If you have received this message in error, please promptly notify the sender by reply E-mail and immediately delete this message from your system.

3 6

Setting up public mailboxes - user not found
by Marti Markov 10 Mar '16

10 Mar '16

Hi all, This is the first time I use the dovecot mail list so I’m sorry if I forget something. My problem is that for some reason I can get public mailboxes to work. I have setup the directory Public, the folders and the cur,tmp and new folder in them: Public | |- .office3 | |- cur |- tmp |- new |- dovecot-acl Here is my dovecot conf: # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 3.14.32-xxxx-grs-ipv6-64 x86_64 auth_default_realm = xxx.com auth_mechanisms = plain login mail_gid = vmail mail_home = /home/vmail/%d/%n mail_location = maildir:~/Maildir mail_plugins = acl mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { list = yes location = maildir:/home/vmail/xxx.com/Public:INDEXPVT=~/Maildir/Public prefix = Public/ separator = / subscriptions = yes type = public } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile sieve = ~/.dovecot.sieve sieve_before = /etc/dovecot/sieve/dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)xxx.com protocols = " imap lmtp sieve" service auth { unix_listener auth-client { group = Debian-exim mode = 0660 user = Debian-exim } } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { unix_listener lmtp { mode = 0666 } } ssl = required ssl_cert = </etc/dovecot/xxx.com.pem ssl_key = </etc/dovecot/private/xxx.private.pem ssl_key_password = yyyyyyy userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_ssl = yes protocol lmtp { mail_plugins = acl sieve } protocol imap { mail_plugins = acl imap_acl } The error I’m getting is that LMTP can’t deliver to office3(a)xxx.com because the user could not be found. (I’m using LDAP authentication for the users) Mar 9 19:50:43 mail spamd[21021]: spamd: connection from localhost.localdomain [127.0.0.1]:56531 to port 783, fd 5 Mar 9 19:50:43 mail spamd[21021]: spamd: setuid to Debian-exim succeeded Mar 9 19:50:43 mail spamd[21021]: spamd: checking message <FBFE5FE1-A3C3-4C3D-8BD9-1C2AAC90BE17(a)xxx.com> for Debian-exim:107 Mar 9 19:50:44 mail spamd[21021]: spamd: clean message (-1.1/5.0) for Debian-exim:107 in 0.5 seconds, 1611 bytes. Mar 9 19:50:44 mail spamd[21021]: spamd: result: . -1 - BAYES_00,HTML_MESSAGE,RDNS_NONE,TVD_SPACE_RATIO scantime=0.5,size=1611,user=Debian-exim,uid=107,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56531,mid=<FBFE5FE1-A3C3-4C3D-8BD9-1C2AAC90BE17(a)xxx.com>,bayes=0.000000,autolearn=no autolearn_force=no Mar 9 19:50:44 mail spamd[9510]: prefork: child states: II Mar 9 19:50:44 mail dovecot: lmtp(14554): Connect from local Mar 9 19:50:44 mail dovecot: auth: Debug: master in: USER#0111#011office3(a)xxx.com#011service=lmtp Mar 9 19:50:44 mail dovecot: auth: Debug: ldap(office3(a)xxx.com): user search: base=ou=people,dc=xxx,dc=com scope=subtree filter=(&(objectClass=person)(uid=office3)) fields=(all) Mar 9 19:50:44 mail dovecot: auth: Debug: ldap(office3(a)xxx.com): no fields returned by the server Mar 9 19:50:44 mail dovecot: auth: ldap(office3(a)xxx.com): unknown user Mar 9 19:50:44 mail dovecot: auth: Debug: userdb out: NOTFOUND#0111 Mar 9 19:50:44 mail dovecot: lmtp(14554): Disconnect from local: Successful quit So as I see it LMTP tries to see if the user exists and fails because there is no such user (which is true, the LDAP object office3 has a different base). I’m not sure but should Dovecot skip this and check the Public folder first before checking LDAP? Another part of my setup is Exim4. Here is the transport part: dovecot_lmtp: driver = lmtp socket = /var/run/dovecot/lmtp return_path_add #maximum number of deliveries per batch, default 1 batch_max = 200 And here is the auth part: dovecot_login: driver = dovecot public_name = LOGIN server_socket = /var/run/dovecot/auth-client # setting server_set_id might break several headers in mails sent by authenticated smtp. So be careful. server_set_id = $auth1 .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS server_advertise_condition = ${if eq{$tls_in_cipher}{}{}{*}} .endif dovecot_plain: driver = dovecot public_name = PLAIN server_socket = /var/run/dovecot/auth-client server_set_id = $auth1 .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS server_advertise_condition = ${if eq{$tls_in_cipher}{}{}{*}} .endif So any tips on how to fix this would be great.

4 3

zlib plugin doesn't add "Z" flag to Maildir filename
by Tom Sommer 10 Mar '16

10 Mar '16

I enabled zlib compression, so new mails are saved compressed. Now I want to convert the old mails to gzip with the find and gzip command, but now I don't know which files are already gzip compressed by dovecot. Shouldn't zlib_save itself add Z to the Maildir flags? As suggested in the compress guide on http://wiki2.dovecot.org/Plugins/Zlib ? -- Tom

2 4

v2.2.22 release candidate released
by Timo Sirainen 10 Mar '16

10 Mar '16

http://dovecot.org/releases/2.2/rc/dovecot-2.2.22.rc1.tar.gz http://dovecot.org/releases/2.2/rc/dovecot-2.2.22.rc1.tar.gz.sig There are some larger changes here, especially to doveadm to make it support HTTP API. There's still time to do smaller tweaks to the API, so let us know if you have some improvement ideas. Note that the API was designed to look mostly like JMAP, which we're planning to implement also for v2.3. The plan is to fork v2.3 development tree soon. + Added doveadm HTTP API: See http://wiki2.dovecot.org/Design/DoveadmProtocol/HTTP + virtual plugin: Mailbox filtering can now be done based on the mailbox metadata. See http://wiki2.dovecot.org/Plugins/Virtual + stats: Added doveadm stats reset to reset global stats. + stats: Added authentication statistics if auth_stats=yes. + dsync, imapc, pop3c & pop3-migration: Many optimizations, improvements and error handling fixes. + doveadm: Most commands now stop soon after SIGINT/SIGTERM. - auth: Auth caching was done too aggressively when %variables were used in default_fields, override_fields or LDAP pass/user_attrs. userdb result_* were also ignored when user was found from cache. - imap: Fixed various assert-crashes caused v2.2.20+. Some of them caught actual hangs or otherwise unwanted behavior towards IMAP clients. - Expunges were forgotten in some situations, for example when pipelining multiple IMAP MOVE commands. - quota: Per-namespaces quota were broken for dict and count backends in v2.2.20+ - fts-solr: Search queries were using OR instead of AND as the separator for multi-token search queries in v2.2.20+.

8 8

Re: Client-initiated secure renegotiation
by djk 10 Mar '16

10 Mar '16

On 09/03/16 10:44, Florent B wrote: > Hi, > > I don't see any SSL configuration option in Dovecot to disable > "Client-initiated secure renegotiation". > > It is advised to disable it as it can cause DDoS (CVE-2011-1473). > > Is it possible to have this possibility through an SSL option or other ? > > Thank you. > > Florent ssl_protocols = !SSLv3 !SSLv2 Is that enough?

4 4

Dovecot 2 Issue
by Peter Fraser 10 Mar '16

10 Mar '16

Hi All I have had a Dovecot-1.x Server running without issue for about 5 years now. I decided to set up a new Server and configure version 2 from scratch. I am having a little issue though. Set up on FreeBSD 10.2 Using dovecot2-2.2.21_1 Dovecot starts up but isn't listening on pop3 and imap ports. Not sure what I have missed. My dovecot -a readout is below. Thanks for any help. root@SMTP1:/home/frank # doveconf -a # 2.2.21 (5345f22): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.12 (c1c0a23) # OS: FreeBSD 10.2-RELEASE-p9 amd64 # NOTE: Send doveconf -n output instead when asking for help. auth_anonymous_username = anonymous auth_cache_negative_ttl = 1 hours auth_cache_size = 0 auth_cache_ttl = 1 hours auth_debug = yes auth_debug_passwords = no auth_default_realm = auth_failure_delay = 2 secs auth_gssapi_hostname = auth_krb5_keytab = auth_master_user_separator = auth_mechanisms = plain auth_proxy_self = auth_realms = auth_socket_path = auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Ln auth_username_translation = auth_verbose = yes auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 30 base_dir = /var/run/dovecot config_cache_size = 1 M debug_log_path = default_client_limit = 1000 default_idle_kill = 1 mins default_internal_user = dovecot default_login_user = dovenull default_process_limit = 100 default_vsz_limit = 256 M deliver_log_format = msgid=%m: %$ dict_db_config = director_consistent_hashing = no director_doveadm_port = 0 director_mail_servers = director_servers = director_user_expire = 15 mins director_user_kick_delay = 2 secs director_username_hash = %u disable_plaintext_auth = yes dotlock_use_excl = yes doveadm_allowed_commands = doveadm_password = doveadm_port = 0 doveadm_socket_path = doveadm-server doveadm_username = doveadm doveadm_worker_count = 0 dsync_alt_char = _ dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u -U first_valid_gid = 1000 first_valid_uid = 1000 haproxy_timeout = 3 secs haproxy_trusted_networks = hostname = example.com imap_capability = imap_client_workarounds = delay-newmail tb-extra-mailbox-sep imap_hibernate_timeout = 0 imap_id_log = imap_id_send = name * imap_idle_notify_interval = 2 mins imap_logout_format = in=%i out=%o imap_max_line_length = 64 k imap_metadata = no imap_urlauth_host = imap_urlauth_logout_format = in=%i out=%o imap_urlauth_port = 143 imapc_features = imapc_host = imapc_list_prefix = imapc_master_user = imapc_max_idle_time = 29 mins imapc_password = imapc_port = 143 imapc_rawlog_dir = imapc_sasl_mechanisms = imapc_ssl = no imapc_ssl_verify = yes imapc_user = import_environment = TZ CORE_OUTOFMEM CORE_ERROR info_log_path = instance_name = dovecot last_valid_gid = 0 last_valid_uid = 0 lda_mailbox_autocreate = no lda_mailbox_autosubscribe = no lda_original_recipient_header = libexec_dir = /usr/local/libexec/dovecot listen = * lmtp_address_translate = lmtp_hdr_delivery_address = final lmtp_proxy = no lmtp_rcpt_check_quota = no lmtp_save_to_detail_mailbox = no lmtp_user_concurrency_limit = 0 lock_method = fcntl log_path = syslog log_timestamp = "%b %d %H:%M:%S " login_access_sockets = login_greeting = Mail Server ready. login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c session=<%{session}> login_proxy_max_disconnect_delay = 0 login_source_ips = login_trusted_networks = mail_access_groups = mail_always_cache_fields = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_attribute_dict = mail_cache_fields = flags mail_cache_min_mail_count = 0 mail_chroot = mail_debug = no mail_fsync = optimized mail_full_filesystem_access = no mail_gid = mail_home = mail_location = maildir:~/Maildir:INBOX=~/Maildir/:INDEX=~/Maildir/tmp/index mail_log_prefix = "%s(%u): " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 10 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /usr/local/lib/dovecot mail_plugins = mail_prefetch_count = 0 mail_privileged_group = mail mail_save_crlf = no mail_server_admin = mail_server_comment = mail_shared_explicit_inbox = no mail_temp_dir = /tmp mail_temp_scan_interval = 1 weeks mail_uid = mailbox_idle_check_interval = 30 secs mailbox_list_index = no mailbox_list_index_very_dirty_syncs = no maildir_broken_filename_sizes = no maildir_copy_with_hardlinks = yes maildir_empty_new = no maildir_stat_dirs = no maildir_very_dirty_syncs = no managesieve_client_workarounds = managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext master_user_separator = mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_md5 = apop3d mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = dotlock fcntl mdbox_preallocate_space = no mdbox_purge_preserve_alt = no mdbox_rotate_interval = 0 mdbox_rotate_size = 2 M mmap_disable = no namespace inbox { disabled = no hidden = no ignore_on_failure = no inbox = yes list = yes location = maildir:/home/public/public mailbox Drafts { auto = no autoexpunge = 0 comment = driver = special_use = \Drafts } mailbox Junk { auto = no autoexpunge = 0 comment = driver = special_use = \Junk } mailbox Sent { auto = no autoexpunge = 0 comment = driver = special_use = \Sent } mailbox "Sent Messages" { auto = no autoexpunge = 0 comment = driver = special_use = \Sent } mailbox Trash { auto = no autoexpunge = 0 comment = driver = special_use = \Trash } order = 0 prefix = public/ separator = / subscriptions = yes type = public } passdb { args = default_fields = deny = no driver = pam master = no name = override_fields = pass = no result_failure = continue result_internalfail = continue result_success = return-ok skip = never } plugin { sieve = file:~/sieve;active=~/.dovecot.sieve } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_delete_type = default pop3_deleted_flag = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = yes pop3_save_uidl = no pop3_uidl_duplicates = allow pop3_uidl_format = %08Xu%08Xv pop3c_host = pop3c_master_user = pop3c_password = pop3c_port = 110 pop3c_quick_received_date = no pop3c_rawlog_dir = pop3c_ssl = no pop3c_ssl_verify = yes pop3c_user = %u postmaster_address = it(a)example.com protocols = sieve quota_full_tempfail = no recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s replication_dsync_parameters = -d -N -l 30 -U replication_full_sync_interval = 1 days replication_max_conns = 10 replicator_host = replicator replicator_port = 0 sendmail_path = /usr/sbin/sendmail service aggregator { chroot = . client_limit = 0 drop_priv_before_exec = no executable = aggregator extra_groups = fifo_listener replication-notify-fifo { group = mode = 0600 user = } group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replication-notify { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 0 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener auth-client { group = mode = 0600 user = $default_internal_user } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = } unix_listener auth-userdb { group = mode = 0666 user = $default_internal_user } unix_listener login/login { group = mode = 0666 user = } unix_listener token-login/tokenlogin { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict-async { chroot = client_limit = 0 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict-async { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = . client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs inet_listener { address = haproxy = no port = 0 reuse_port = no ssl = no } privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener director-userdb { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-hibernate { chroot = client_limit = 0 drop_priv_before_exec = no executable = imap-hibernate extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 0 type = unix_listener imap-hibernate { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = haproxy = no port = 143 reuse_port = no ssl = no } inet_listener imaps { address = haproxy = no port = 993 reuse_port = no ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service imap-urlauth-login { chroot = token-login client_limit = 0 drop_priv_before_exec = no executable = imap-urlauth-login extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login unix_listener imap-urlauth { group = mode = 0666 user = } user = $default_login_user vsz_limit = 18446744073709551615 B } service imap-urlauth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener imap-urlauth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service imap-urlauth { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener token-login/imap-urlauth { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service imap { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener imap-master { group = mode = 0600 user = } unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service indexer-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = indexer-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 10 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service indexer { chroot = client_limit = 0 drop_priv_before_exec = no executable = indexer extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service ipc { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = ipc extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener ipc { group = mode = 0600 user = } unix_listener login/ipc-proxy { group = mode = 0600 user = $default_login_user } user = $default_internal_user vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 1 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log unix_listener log-errors { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service managesieve-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = managesieve-login extra_groups = group = idle_kill = 0 inet_listener sieve { address = haproxy = no port = 4190 reuse_port = no ssl = no } privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service managesieve { chroot = client_limit = 1 drop_priv_before_exec = no executable = managesieve extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = unix_listener login/sieve { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = haproxy = no port = 110 reuse_port = no ssl = no } inet_listener pop3s { address = haproxy = no port = 995 reuse_port = no ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service replicator { chroot = client_limit = 0 drop_priv_before_exec = no executable = replicator extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replicator-doveadm { group = mode = 00 user = $default_internal_user } unix_listener replicator { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } unix_listener ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0600 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_ca = ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cert_username_field = commonName ssl_cipher_list = ALL:!ADH!LOW:!SSLv2:!EXP:+HIGH:+MEDIUM ssl_client_ca_dir = ssl_client_ca_file = ssl_client_cert = ssl_client_key = ssl_crypto_device = ssl_dh_parameters_length = 1024 ssl_key = </etc/ssl/private/dovecot.pem ssl_key_password = ssl_options = ssl_parameters_regenerate = 0 ssl_prefer_server_ciphers = no ssl_protocols = !SSLv2 ssl_require_crl = yes ssl_verify_client_cert = no state_dir = /var/db/dovecot stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_session_min_time = 15 mins stats_user_min_time = 1 hours submission_host = syslog_facility = mail userdb { args = default_fields = driver = passwd name = override_fields = result_failure = continue result_internalfail = continue result_success = return-ok skip = never } valid_chroot_dirs = verbose_proctitle = yes verbose_ssl = no version_ignore = no protocol lda { mail_plugins = quota acl sieve } protocol imap { mail_plugins = quota imap_quota acl imap_acl } protocol pop3 { mail_plugins = quota }

2 1

Using dsync to synchronize laptop against remote server
by Dato Simó 10 Mar '16

10 Mar '16

Hello! I’m thinking of changing the way I sync mail to my laptop, and I have a couple questions about my intended setup. In brief, my plan is: instead of running offlineimap against various IMAP accounts (my personal one included), I will run fetchmail on my private server, and classify mail with Sieve there. Then I’ll run a local Dovecot on my laptop, and do a master/master replication from my personal server/account with dsync. I have two quick questions about this (I have never used dsync before): 1. Reading the manual page, it seems that I probably want stateful synchronization (-s flag). Not having used it before, I’m curious about what lag I can expect. Does it compare to an IMAP IDLE/IMAP NOTIFY connection? Or is it asynchronous / with a timer? 2. I assume modifying my local Maildirs with e.g. Mutt is... a big no-no? Instead, should I always force Mutt to go through the local IMAP server? Many thanks in advance, -d

1 0

Re: Dovecot stops responding when I update SSL certificate
by HotSlots Webmaster 10 Mar '16

10 Mar '16

Time to put an end to this saga... I had an issue that Dovecot refused to serve an updated SSL certificate - one that Postfix had no issue with. Though I quadruple-checked that the cert file and private key file were correct, in the end I simply directed both cert and key files to the file I was using for Postfix (which had both the cert and private key). That worked. Darned if I know what it didn't like about the other files, but I'm back in business with the new cert. Thanks for the responsiveness from Aki. Steve L

2 1

Replication not working
by Simon Pierre Desrosiers 10 Mar '16

10 Mar '16

Hello, I am trying to setup replication between two Mac OS X El Capitan Server. I have added the field as I could understand from the replication page of dovecot and from a few poste in the mailing list. The mac uses the system user _dovecot as main system account. I have setup ssh keys between the two systems for the two _dovecot servers. SSh works fine from the terminal. But yet, I get these messages in the log file : Mar 09 20:18:44 auth: Error: od[getpwnam_ext](submit): No record for user Mar 09 20:18:44 doveadm: Error: Host key verification failed. Mar 09 20:18:44 dsync-local(submit): Error: read(_dovecot(a)laposte.mycompagny.com) failed: EOF Mar 09 20:18:44 dsync-local(submit): Error: Remote command returned error 255 Mar 09 20:23:44 auth: Error: od[getpwnam_ext](submit): No record for user Mar 09 20:23:44 doveadm: Error: Host key verification failed. Mar 09 20:23:44 dsync-local(submit): Error: read(_dovecot(a)laposte.mycompagny.com) failed: EOF Mar 09 20:23:44 dsync-local(submit): Error: Remote command returned error 255 and so on every few minutes. I have a few things about which I am not sure. We configure port 12345, but nothing listen on that port. The doveadm_password, what is it exactly ? Should I use a distinct account than _dovecot for synchronisation (all the fields that need to be added for replication) ? Here is my configuration, any help would be appreciated : # 2.2.5: /Library/Server/Mail/Config/dovecot/dovecot.conf # OS: Darwin 15.3.0 x86_64 hfs auth_mechanisms = cram-md5 digest-md5 gssapi auth_realms = labanque.mycompagny.com auth_socket_path = /var/run/dovecot/auth-userdb auth_username_format = %n debug_log_path = /Library/Logs/Mail/mail-debug.log default_internal_user = _dovecot default_login_user = _dovenull doveadm_password = MyOwnSecret doveadm_port = 12345 dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u first_valid_gid = 6 first_valid_uid = 6 imap_id_log = * imap_id_send = "name" * "version" * imap_urlauth_submit_user = submit info_log_path = /Library/Logs/Mail/mail-info.log log_path = /Library/Logs/Mail/mail-err.log login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_access_groups = mail mail_attribute_dict = file:/Library/Server/Mail/Data/attributes/attributes.dict mail_location = maildir:/Library/Server/Mail/Data/mail/%u mail_log_prefix = "%s(pid %p user %u): " mail_plugins = quota zlib acl fts fts_sk notify replication managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mdbox_rotate_size = 200 M namespace acl-mailboxes { list = children location = maildir:/Library/Server/Mail/Data/mail/users/%%u:INDEX=/Library/Server/Mail/Data/mail/shared/%%u prefix = shared.%%u. separator = . subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } namespace list-archives { list = children location = maildir:/Library/Server/Mail/Data/listserver/messages/archive/lists/%%u:INDEX=/Library/Server/Mail/Data/listserver/messages/archive/shared/%%u prefix = archives.%%u. separator = . subscriptions = no type = shared } passdb { driver = od } passdb { args = /Library/Server/Mail/Config/dovecot/submit.passdb driver = passwd-file } plugin { acl = vfile:/Library/Server/Mail/Config/dovecot/global-acls:cache_secs=300 acl_shared_dict = file:/Library/Server/Mail/Data/shared/shared-mailboxes fts = sk mail_replica = remote:_dovecot@laposte.mycompagny.com quota = maildir:User quota quota_warning = storage=100%% quota-exceeded %u quota_warning2 = storage=80%% quota-warning %u sieve = /Library/Server/Mail/Data/rules/%u/dovecot.sieve sieve_dir = /Library/Server/Mail/Data/rules/%u stats_refresh = 30 secs stats_track_cmds = yes } postmaster_address = postmaster(a)labanque.mycompagny.com protocols = imap lmtp sieve pop3 quota_full_tempfail = yes service aggregator { fifo_listener replication-notify-fifo { user = _dovecot } unix_listener replication-notify { user = _dovecot } } service auth { extra_groups = _keytabusers idle_kill = 15 mins unix_listener auth-userdb { user = _dovecot } } service dns_client { unix_listener dns-client { mode = 0600 } } service doveadm { user = _dovecot } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } service_count = 0 } service imap { client_limit = 5 process_limit = 200 service_count = 0 } service indexer-worker { user = _dovecot } service lmtp { unix_listener lmtp { mode = 0600 } } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service pop3 { client_limit = 5 process_limit = 200 service_count = 0 } service quota-exceeded { executable = script /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/quota-exceeded.sh unix_listener quota-exceeded { group = mail mode = 0660 user = _dovecot } user = _dovecot } service quota-warning { executable = script /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/quota-warning.sh unix_listener quota-warning { group = mail mode = 0660 user = _dovecot } user = _dovecot } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0600 } } service stats { fifo_listener stats-mail { mode = 0600 user = _dovecot } } ssl = required ssl_ca = </etc/certificates/labanque.mycompagny.com.423929C9712FE705D69805A43769B318C7D3CBB3.chain.pem ssl_cert = </etc/certificates/labanque.mycompagny.com.423929C9712FE705D69805A43769B318C7D3CBB3.cert.pem ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL:!ADH:!eNULL ssl_key = </etc/certificates/labanque.mycompagny.com.423929C9712FE705D69805A43769B318C7D3CBB3.key.pem ssl_key_path = /etc/certificates/labanque.mycompagny.com.423929C9712FE705D69805A43769B318C7D3CBB3.key.pem userdb { args = partition=/Library/Server/Mail/Config/dovecot/partition_map.conf global_quota=5000 enforce_quotas=yes driver = od } userdb { args = /Library/Server/Mail/Config/dovecot/submit.passdb driver = passwd-file } verbose_proctitle = yes protocol lmtp { mail_plugins = quota zlib acl fts fts_sk sieve } protocol lda { mail_plugins = quota zlib acl fts fts_sk sieve } protocol imap { mail_max_userip_connections = 20 mail_plugins = quota zlib acl fts fts_sk imap_acl imap_quota imap_zlib } protocol pop3 { mail_max_userip_connections = 6 }

1 0

Released Pigeonhole v0.4.13.rc1 for Dovecot v2.2.22.rc1.
by Stephan Bosch 10 Mar '16

10 Mar '16

Hello Dovecot users, Pigeonhole v0.4.12 still compiles against Dovecot v2.2.22.rc1, but only with warnings. That is the primary reason for this new release. However, there are also a few significant changes as listed below. When no significant problems are reported, a definitive release will follow closely after Dovecot v2.2.22 is released. Changelog v0.4.13: * redirect action: Added the list-id header to the duplicate ID for mail loop prevention. This means that the message sent directly to the user and the message coming through the mailing list itself are treated as different messages by the loop detection of the redirect command, even though their Message-ID may be identical. * Changed the Sieve number type to uint64_t, which means that Sieve numbers can now technically range up to 2^64. Some other Sieve implementation allowed this, making this change necessary for successful migration. + Implemented the sieve_implicit_extensions setting. The extensions listed in this setting do not need to be enabled explicitly using the Sieve "require" command. This behavior directkly violates the standard, but can be necessary for compatibility with some existing implementations of Sieve. Do not use this setting unless you really need to! - redirect action: Made mail loop detection more robust by forcibly adding a Message-ID header if it is missing. - Prevent logging a useless "script not found" error message for LDAP scripts for which the entry exists but no attribute containing a script. This is not necessarily an error. - extprograms plugin: Changed the communication channel between parent and child process for a directly forked program from a socketpair to a double pipe. Linux does not support /dev/stdin, /dev/stdout and friends for sockets. For some shell program authors this may be confusing, so that is why it is changed. When using the script service, these device nodes are still not usable though. The release is available as follows: http://pigeonhole.dovecot.org/releases/2.2/rc/dovecot-2.2-pigeonhole-0.4.13… http://pigeonhole.dovecot.org/releases/2.2/rc/dovecot-2.2-pigeonhole-0.4.13… Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this release candidate and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

Re: Dovecot 2 Issue
by Joseph Tam 09 Mar '16

09 Mar '16

Peter Fraser <petros.fraser(a)gmail.com> writes: > Dovecot starts up but isn't listening on pop3 and imap ports. Not sure what > I have missed. My dovecot -a readout is below. Thanks for any help. "doveconf -n" would be better as it will only show non-default settings. > ... > protocols = sieve > ... I'm thinking this ought to be protocols = imap pop3 sieve Joseph Tam <jtam.home(a)gmail.com>

1 0

Dovecot & Pigeon w/ MySQL
by Jorge Bastos 09 Mar '16

09 Mar '16

Howdy, I'm looking for a good howto to have pigeon saving the sieve scripts on an mysql table. Can some point me to a good one? Dr. google doesn't show me much about it. Thanks in advanced, Jorge,

2 3

dovecot: imap-login: Panic: Trying to allocate 0 bytes
by Ron Garret 08 Mar '16

08 Mar '16

My ISP had a hard drive crash. After the dust settled, my dovecot installation started failing with the following error every time a client tries to connect: dovecot: imap-login: Panic: Trying to allocate 0 bytes My installation has otherwise been stable and rock-solid for years. Both I and the techs at my ISP are stumped. Any advice on how to debug this would be greatly appreciated. Vital info: [ron@vm1:/etc/dovecot]$ /usr/sbin/dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.10 log_timestamp: %Y-%m-%d %H:%M:%S ssl_ca_file: /etc/ssl/local-certs/startssl.ca.pem ssl_cert_file: /etc/ssl/local-certs/... ssl_key_file: /etc/ssl/local-keys/... login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login first_valid_uid: 100 mail_privileged_group: mail mbox_write_locks: fcntl dotlock auth default: user: postfix passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: prefetch socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix I have checked the MySQL configuration and everything seems to be OK there. In fact, I’ve checked everything that I know how to check, and everything seems to be OK. And yet it is not working. Many thanks, rg

1 1

Dovecort-2.2.22
by Ralf Zimmermann 08 Mar '16

08 Mar '16

With Dovecot-2.2.22 and enabled virtual plugin I get following error messages: Error: Raw backtrace: /usr/local/lib/dovecot/libdovecot.so.0(+0x819f0) [0x7f12330bf9f0] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x81adc) [0x7f12330bfadc] -> /usr/local/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f123306833d] -> /usr/local/lib/dovecot/lib20_virtual_plugin.so(virtual_backend_box_close+0x178) [0x7f12320599f8] -> /usr/local/lib/dovecot/lib20_virtual_plugin.so(+0x9f94) [0x7f1232059f94] -> /usr/local/lib/dovecot/lib20_virtual_plugin.so(+0x9fe9) [0x7f1232059fe9] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(mailbox_close+0x1a) [0x7f12333825da] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(mailbox_free+0x13) [0x7f1233382663] -> dovecot/imap() [0x41870f] -> dovecot/imap() [0x423ce4] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handle_timeouts+0xda) [0x7f12330d28aa] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x9c) [0x7f12330d3cbc] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x25) [0x7f12330d2a65] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f12330d2c08] -> /usr/local/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f123306da23] -> dovecot/imap(main+0x2d7) [0x40c3c7] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f1232cb4b45] -> dovecot/imap() [0x40c530] I test it with this configuration on Debian Jessie 64-bit: # dovecot.conf mail_plugins = $mail_plugins acl quota zlib virtual namespace { prefix = virtual/ separator = / location = virtual:~/Maildir/virtual } # ~/Maildir/virtual/unseen/dovecot-virtual INBOX unseen Mit freundlichen Grüßen Ralf Zimmermann Senior Security Engineer State Certified Engineer SIEGNETZ.IT GmbH Einheitsstrasse 2, D-57076 Siegen Telefon: +4927168193130 Fax: +492716819329 Mobil : +491735360015 http://www.siegnetz.de http://rz.siegnetz.de Amtsgericht Siegen HRB4838 Geschäftsführer: Oliver Seitz Sitz der Gesellschaft ist Siegen

2 3

[PATCH] imapc: Accept strings in FLAGS responses
by Richard Laager 08 Mar '16

08 Mar '16

While non-standard, the IMAP server we are replacing returns non-system flags as strings instead of atoms. Prior to this change, imapc would abort processing on the first message with a string flag. --- src/lib-storage/index/imapc/imapc-mailbox.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/lib-storage/index/imapc/imapc-mailbox.c b/src/lib-storage/index/imapc/imapc-mailbox.c index c3e12d1..91333dc 100644 --- a/src/lib-storage/index/imapc/imapc-mailbox.c +++ b/src/lib-storage/index/imapc/imapc-mailbox.c @@ -310,7 +310,8 @@ static void imapc_untagged_fetch(const struct imapc_untagged_reply *reply, t_array_init(&keywords, 8); seen_flags = TRUE; for (j = 0; flags_list[j].type != IMAP_ARG_EOL; j++) { - if (!imap_arg_get_atom(&flags_list[j], &atom)) + if (!imap_arg_get_atom(&flags_list[j], &atom) && + !imap_arg_get_string(&flags_list[j], &atom)) return; if (atom[0] == '\\') flags |= imap_parse_system_flag(atom); -- 2.1.4

1 0

segfault in imap and doveadm
by Joe Beaubien 07 Mar '16

07 Mar '16

Hi everyone, Dovecot keeps on segfaulting on me and I am unsure why. This setup has been running for 5 years and has given me very little trouble. I am running Dovecot 2.1.7, setup with mdbox. The imap process keeps on segfaulting for the same account (makes me think maybe an email or folder of that account is problematic). My big issue is that force-resync also causes doveadm to segfault. Here is the mail.err file I am getting: Mar 7 12:34:36 mba kernel: [ 1955.486324] imap[5663]: segfault at 0 ip 00007ff1c1bd0b5e sp 00007fffd8599a40 error 4 in libdovecot-storage.so.0.0.0[7ff1c1b51000+fb000] Mar 7 12:34:36 mba dovecot: imap(document): Error: /mba_data/emails/document/mailboxes/INBOX/Sara/dbox-Mails/dovecot.index reset, view is now inconsistent Mar 7 12:34:36 mba dovecot: imap(document): Error: /mba_data/emails/document/mailboxes/INBOX/Lucie/dbox-Mails/dovecot.index reset, view is now inconsistent Mar 7 12:34:37 mba dovecot: imap(document): Error: mdbox map /mba_data/emails/document/storage/dovecot.map.index corrupted: map_uid=284393 refcount too low Mar 7 12:34:37 mba dovecot: imap(document): Error: /mba_data/emails/document/mailboxes/Templates/dbox-Mails/dovecot.index reset, view is now inconsistent Mar 7 12:34:39 mba dovecot: imap(document): Error: /mba_data/emails/document/mailboxes/Sent/dbox-Mails/dovecot.index reset, view is now inconsistent Mar 7 12:34:40 mba dovecot: imap(document): Error: /mba_data/emails/document/mailboxes/INBOX/dbox-Mails/dovecot.index reset, view is now inconsistent Mar 7 12:34:40 mba dovecot: imap(document): Error: /mba_data/emails/document/mailboxes/INBOX/dbox-Mails/dovecot.index reset, view is now inconsistent Mar 7 12:34:41 mba dovecot: imap(document): Error: /mba_data/emails/document/mailboxes/INBOX/dbox-Mails/dovecot.index reset, view is now inconsistent Mar 7 12:34:41 mba dovecot: imap(document): Error: /mba_data/emails/document/mailboxes/INBOX/dbox-Mails/dovecot.index reset, view is now inconsistent Mar 7 12:34:41 mba dovecot: imap(document): Error: /mba_data/emails/document/mailboxes/INBOX/dbox-Mails/dovecot.index reset, view is now inconsistent Mar 7 12:34:42 mba dovecot: imap(document): Error: /mba_data/emails/document/mailboxes/INBOX/_EE - a verifier/dbox-Mails/dovecot.index reset, view is now inconsistent Mar 7 12:34:43 mba dovecot: imap(document): Error: /mba_data/emails/document/mailboxes/INBOX/dbox-Mails/dovecot.index reset, view is now inconsistent Mar 7 12:34:48 mba kernel: [ 1967.972883] imap[5688]: segfault at 0 ip 00007f058ebc9b5e sp 00007fff9baa7c00 error 4 in libdovecot-storage.so.0.0.0[7f058eb4a000+fb000] Mar 7 12:34:49 mba dovecot: imap(document): Error: /mba_data/emails/document/mailboxes/INBOX/Lucie/dbox-Mails/dovecot.index reset, view is now inconsistent Mar 7 12:43:44 mba dovecot: imap(document): Error: indexer disconnected unexpectedly Mar 7 12:43:44 mba dovecot: indexer: Error: Indexer worker disconnected, discarding 119 requests for document Mar 7 12:48:31 mba kernel: [ 2790.363755] doveadm[6586]: segfault at 0 ip 00007f1b2023fb5e sp 00007fff4e8ce200 error 4 in libdovecot-storage.so.0.0.0[7f1b201c0000+fb000] Mar 7 12:49:10 mba kernel: [ 2829.203900] doveadm[6604]: segfault at 0 ip 00007fa0d16e4b5e sp 00007fff1b89f480 error 4 in libdovecot-storage.so.0.0.0[7fa0d1665000+fb000] First line is imap segfaulting. Last lines are doveadm segfaulting when I try to run force-resync. Does anyone have any clue what to do in this situation? Regards, -Joe

1 1