- dovecot - dovecot.org

Send Dovecot logs to rsyslog
by Nicolas Fo 08 Feb '16

08 Feb '16

Hello, I'm trying to send Dovecot logs to a Graylog server. To do this, I'd like to pass logs to rsyslog and rsyslog pass logs to remote Graylog server. I set in dovecot.conf : syslog_facility = local5.info I set in rsyslog.conf : local5.info @192.168.xxx.xxx:5555 Restarted services and it doesn't work. I use nmap to test if port 5555 is opened and this port is open. What missed I ? Thanks Nicolas

4 7

Dovecot (LDAP) quota only if user in backend?
by Andrey Fesenko 08 Feb '16

08 Feb '16

Hello, Is it possible to get the quotas for users served by the backend? My env CentOS, dovecot-2.2.10-5.el7, users in LDAP dn: uid=user,ou=mailboxs,dc=wibble,dc=net cn: Account for server mail sn: User objectClass: top objectClass: person objectClass: posixAccount objectClass: VirtualMailAccount objectClass: Proxying uid: user gidNumber: 3000 uidNumber: 3000 userPassword: {SSHA} homeDirectory: user mailQuota: 1073741824 mailDirectory: maildir:~/Maildir Proxy: yes BackendHost: backend1.wibble.net starttlsProxying: any-cert BackendHost may bee backend1.wibble.net backend2.wibble.net ... if I'm get quota in backend1.wibble.net doveadm -f tab quota get -A If use standart /etc/dovecot/dovecot-ldap.conf user_filter = (&(objectClass=posixAccount)(uid=%u)), dovecot create blank mailboxes for all users, not only BackendHost: backend1.wibble.net If modify (&(objectClass=posixAccount)(uid=%u)(BackendHost=backend1.wibble.net)) doveadm -f tab quota get -u user work fine doveadm -f tab quota get -A doveadm(user1): Info: User no longer exists, skipping doveadm(user2): Info: User no longer exists, skipping doveadm(user3): Info: User no longer exists, skipping ... doveadm: Error: Failed to iterate through some users work for all dovecot user, and crash

1 1

simple bind + X.509 client certificate?
by Heiko Schlittermann 05 Feb '16

05 Feb '16

Hi, using dovecot 2.2.9. The LDAP server requests a client certificate from dovecot. This client certificate will not be used for authentication, but anyway, the server requests it. No SASL is involved. ldapsearch and Exim work as expected, sending the client cert. The slapd is configured: olcTLSVerifyClient: demand For authentication simple bind should be used. Dovecot doesn't seem to send the requested client certificate. If I sniff the connection, the "Certificate" sent to the server is empty. Using ldapsearch it works (and the certificate isn't empty). Any suggestions? Best regards from Dresden/Germany Viele Grüße aus Dresden Heiko Schlittermann -- SCHLITTERMANN.de ---------------------------- internet & unix support - Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} - gnupg encrypted messages are welcome --------------- key ID: F69376CE - ! key id 7CBF764A and 972EAC9F are revoked since 2015-01 ------------ -

1 1

doveadm backup -- private flags in shared mailbox
by almut bertha 05 Feb '16

05 Feb '16

dear list, i try to backup our dovecot server via doveadm -Dv backup -A -n inbox -n shared remote:vmail@192.168.122.51 So far, it's working fine except for one thing: the "seen"flags for the shared mailboxes don't get copied to the backup-server. I tried a few things (like calling the doveadm command with different options for the namespaces or defining the mailboxes -m; i also changed the path for INDEXPVT), but none of these worked and i don't know how to tell doveadm to sync these flags. Maybe the config for the namespaces is wrong? Or is it just not possible (yet)? thanks in advance The configs for the source and the backup server are the same: (except for hostname, ip,...) # 2.2.18: /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.8 (0c4ae064f307+) # OS: Linux 4.3.0-1-amd64 x86_64 Debian stretch/sid ext4 auth_verbose = yes default_client_limit = 2500 default_process_limit = 500 disable_plaintext_auth = no doveadm_port = 11111 lmtp_rcpt_check_quota = yes lmtp_save_to_detail_mailbox = yes mail_location = maildir:/srv/vmail/%n/Maildir mail_plugins = " acl quota" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate imapflags notify namespace { hidden = no inbox = no list = children location = maildir:/srv/vmail/%%n/Maildir:INDEXPVT=/srv/vmail/%n/shared/%%n prefix = shared.%%n. separator = . subscriptions = no type = shared } namespace inbox { hidden = no ignore_on_failure = no inbox = yes list = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = INBOX. separator = . subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 acl_shared_dict = file:/var/lib/dovecot/db/shared-mailboxes.db mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename quota = maildir:User quota:noenforcing quota_grace = 2%% quota_rule = *:storage=3G sieve = /srv/vmail/%Ln/default.sieve sieve_default = /srv/vmail/default.sieve sieve_dir = /srv/vmail/%Ln/sieve sieve_extensions = +notify +imapflags sieve_global_dir = /srv/vmail/global.sieve/ } postmaster_address = postmaster(a)mur.at protocols = " imap lmtp sieve pop3" quota_full_tempfail = yes service auth { unix_listener auth-userdb { group = vmail mode = 0777 user = vmail } } service lmtp { inet_listener lmtp { address = 192.168.122.52 port = 24 } user = vmail } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } process_min_avail = 1 service_count = 1 vsz_limit = 64 M } service managesieve { process_limit = 256 } userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } userdb { args = /etc/dovecot/dovecot-ldap-group-userdb.conf.ext driver = ldap } protocol lmtp { mail_plugins = " acl quota sieve" } protocol imap { mail_max_userip_connections = 16 mail_plugins = " acl quota imap_acl imap_quota" } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole } protocol pop3 { mail_plugins = " acl quota" }

2 2

Authentication proxy
by Miecio 05 Feb '16

05 Feb '16

Hello everyone! I need to set up kind of gateway for submission and imap request, in order to do that i need to find out solution for verifying user password against multiple IMAP backends. Everything for IMAP proxy works perfectly. But i have a problem with authenticating postfix against dovecot SASL. I wonder if there is any option in dovecot to authenticate SASL requests (from postfix) against remote IMAP server or remote SASL instance. Problem is that this server has to be chosen dynamically on the user name basis, so i have to overwrite somehow host parameter in passdb imap definition. I was thinking about using two separate password databasases, first configured as normal sql lookup with proxy flag and host field and second as imap database with host changed to some parameter matching host from previous lookup. Problem is that i don't see any variable matching host filed from passwd sql lookup. With this approach other problem appears, because I want user to be always authenticated against remote IMAP/SASL so i have to somehow return PASSWORD_MISMATCH from my sql lookup. I tried setting up deny parameter to my sql lookup but it causes to reject whole authentication request without even asking remote imap. Thanks a lot --- Regards Miecio

1 0

R: Re: Mail User Agent?
by absolutely_free＠libero.it 04 Feb '16

04 Feb '16

>----Messaggio originale---- >Da: Timo Sirainen <tss(a)iki.fi> >Data: 02/02/2016 23.27 >A: <azurit(a)pobox.sk> >Cc: <dovecot(a)dovecot.org> >Ogg: Re: Mail User Agent? > >On 02 Feb 2016, at 22:00, azurit(a)pobox.sk wrote: >> >> Thank you for info. Well, i understand that clients are not forced to send the info but, in my logs, there's no single ID info. Do i need to enable logging of it or something? > >imap_id_log = * > Thank you very much!

2 1

external storage for mail attachments
by zucca＠systemschmiede.com 03 Feb '16

03 Feb '16

Hi list! was wondering if it was possible to store mail attachments on a separate storage with dovecot, and if so, how. Of course a single instance storage of these attachments would also be a very good thing, allthough not a basic prerequisite. Thanks in advance Sascha -- Bitte beachten Sie unsere neue Firmenadresse ------------------------------------------------- Systemschmiede IT-Lösungen Zucca & Teves GbR An Fürthenrode 52 52511 Geilenkirchen www.systemschmiede.com Tel.: +49 (0)2451 - 9088390 Fax: +49 (0)2451 - 9124070 Mobil: +49 (0)178 - 4073254 Ust.ID: DE248030393

2 1

Apply modifier on long_name variables
by Leon Kyneur 03 Feb '16

03 Feb '16

Hi, Wondering why it's not possible to do the following in ldap args file: base = ou=People,dc=%Ddomain_first,o=ISP however this does work: base = ou=People,dc=%Dd,o=ISP is it intentional that modifiers do not work on long names? Thanks Leon

1 1

Dovecot with Maildir
by John Williams 03 Feb '16

03 Feb '16

Folks, I'm trying to get dovecot to check a for mail in a maildir format on Ubuntu. Mail is being delivered to and from the system. I can send and receive mail using Pine & Mutt. But I cannot seem to get dovecot to work with the maildir. So I can't check for mail using Dovecot. This is what I'm using for reference: https://help.ubuntu.com/community/Dovecot I believe (not sure actually) the answer is in the mail_location variable for Dovecot. This is what I've tried so far: #mail_location = mbox:~/mail:INBOX=/var/mail/%u#mail_location = maildir:/var/mail/%u/Maildir#mail_location = maildir:~/Maildir:INDEX=/var/mail/%umail_location = maildir:/var/mail/%u/Maildir Mail is being delivered and I can send mail out with Postfix. But Dovecot not working. Any idea why? Thanks in advance!

2 4

Re: Mail User Agent?
by Joseph Tam 03 Feb '16

03 Feb '16

azurit(a)pobox.sk and Tom Sommer asks: > How this ID extension can be enabled in Dovecot? From which version is > it supported? Accordind to Dovecot CAPA's response, it is already enabled * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS LOGINDISABLED] Ready. However, as a previous poster noted, Dovecot doesn't do anything with it other than to log it. The client can elect to ignore it or send an ID string. The ID extension is documented here https://www.ietf.org/rfc/rfc2971.txt I speculated it could be used as a client-side CAPA info so that an IMAP server can modify it's behaviour knowing it's dealing with a certain client, but that is flatly forbidden by RFC (Quoting from RFC) The sole purpose of the ID extension is to enable clients and servers to exchange information on their implementations for the purposes of statistical analysis and problem determination. ... Implementations MUST NOT make operational changes based on the data sent as part of the ID command or response. The ID command is for human consumption only, and is not to be used in improving the performance of clients or servers. Joseph Tam <jtam.home(a)gmail.com>

3 2

IMAP ACLs for groups
by Chris 02 Feb '16

02 Feb '16

Dear All, is there any way to assign POSIX groups to Dovecot IMAP-ACLs? I've tried that today, but I could only open a public folder when my username was listed in the ACL. A group didn't work. How do you manage ACLs for intenseley used public folders with many users? What backend do you use for user management and ACLs? Is there any way to extend permissions? Are there any scripts available that set permissions or grant them when logging in? - Chris

1 0

Disable Client Certificate Authentication for Unencrypted Connections?
by Haravikk 02 Feb '16

02 Feb '16

I’m using dovecot to provide encrypted IMAP e-mail support for remote clients and it’s working great. However, I also need to set up a webmail front-end (Roundcube), which I’m hoping to have use unencrypted IMAP on port 143 (as only port 993 is available externally). The problem I’m running into is that I want to require client certificate authentication on port 993, but dovecot is apparently requiring a certificate on all connections, which is preventing Roundcube from connecting. Since dovecot is also providing authentication to postfix I’ve already created an exemption from the client certificate requirement for SMTP connections by doing the following: protocol !smtp { ssl_ca = </path/to/ca.pem ssl_verify_client_cert = yes auth_ssl_require_client_cert = yes } However, I’m not sure how to do the same thing for unencrypted IMAP connections. Is there a way that I can enable client certificate support for only IMAP port 993, leaving port 143 to handle regular unencrypted IMAP with a username and password? I’ve already added the local network to the trusted networks list, so that Roundcube can use plaintext authentication, can I limit client certificate support in a similar way? Thanks, Haravikk

3 7

Autosubscribe but not autocreate?
by azurit＠pobox.sk 02 Feb '16

02 Feb '16

Hi, is it possible to set a mailbox to autosubscribe IF it exists but NOT autocreate if it doesn't exists? We are having problems with users and Spam folders which are not subscribed so users doesn't see e-mails which are saved there. On the other hand, we don't want to recreate Spam folders which were deleted by users (some of them don't want to filter spam so they deleted Spam folder and spam is saved into INBOX). Or is it somehow possible to subscribe to a folder while creating e-mail account (i'm trying to save its name to 'subscriptions' file but it doesn't work)? Thnak you. azur

1 0

Mail User Agent?
by absolutely_free＠libero.it 02 Feb '16

02 Feb '16

Hi,is there a way to log which MUA is being used from an user? # dovecot --version2.0.9 Thank you

4 4

Re: Mail User Agent?
by Joseph Tam 02 Feb '16

02 Feb '16

Axel Luttgens writes: >> Le 1 f?vr. 2016 ? 17:50, absolutely_free(a)libero.it a ?crit : >> >> Hi,is there a way to log which MUA is being used from an user? >> # dovecot --version2.0.9 >> Thank you > > Unless I missed some recent changes, neither POP nor IMAP protocols > make provisions for having the client to send such info. > > As a result, dovecot does not have that info. I regularly get such info in my logs e.g. Feb 1 14:10:45 server dovecot: imap(user): ID sent: name=iPhone Mail, version=12F70, os=iOS, os-version=8.3 (12F70) Only for IMAP (ID extension?). Joseph Tam <jtam.home(a)gmail.com>

2 1

Can you "doveadm search" with mailbox location instead of a user (-u option)?
by Christian Rohmann 02 Feb '16

02 Feb '16

Hey dovecot-users! doveadm import offers to use i.e. a maildir as source and then import into a users mailbox referenced via "-u" option. If one wants to import only certain emails from the source a search-query can be given as well. I was wondering if doveadm search also does offer to search a mailbox referenced by filesystem path i.e. doveadm search maildir:/srv/mailboxes/example.com/mailbox123 NEW Maybe a fixed mailbox location via "-o mailbox_location=maildir:/srv/mailboxes/example.com/mailbox123" does work, but then it's rather a side effect as one needs to define a user via "-u" parameter anyways. Regards Christian

2 2

ACL and LDAP
by Chris 01 Feb '16

01 Feb '16

Dear All, is it possible to store ACLs in LDAP? Does anyone happen to have a script that syncs ACLs read from LDAP with Dovecot? - Chris

2 2

fts_autoindex - index-worker problem
by Masaki Nemoto 01 Feb '16

01 Feb '16

dovecot-2.2.21 問い合わせ fts_autoindex - index-worker problem Hello List, I installed dovecot-2.2.21 on CentOS 6.7. I use ldap for userdb to separate an e-mail address and the user. Index to apache solr failed in fts_authindex when I received an email after setting. The error message is "indexer-worker: Error: User 0029(a)09.jp lookup failed: Unknown user" Is there any solution? This is current conf -------------------------------------------- # cat /etc/dovecot/conf.d/auth-ldap.conf.ext userdb { driver = ldap default_fields = uid=dovecot gid=dovecot home=/var/dovecot/%Ld/%Ln args = /etc/dovecot/dovecot-ldap.conf.ext } -------------------------------------------- # cat /etc/dovecot/dovecot-ldap.conf.ext hosts = ldap01 auth_bind = no ldap_version = 3 base = "" user_attrs = mailRoutingAddress=user, storeQuotaBytes=quota_rule=*:bytes=%$ user_filter = (&(objectClass=inetLocalMailRecipient)(mailLocalAddress=%u)) -------------------------------------------- # cat /etc/dovecot/conf.d/90-plugin.conf plugin { fts = solr fts_solr = url=http://10.129.78.21:8983/solr/%Ld/ fts_autoindex = yes } -------------------------------------------- This is test user infomation -------------------------------------------- # ldapsearch -h ldap01 -x -b "" mailLocalAddress=gk12k_0029(a)08wt09.jp mailRoutingAddress mailLocalAddress -LLL dn: uid=gk12k_0029,dc=08wt09,dc=jp mailRoutingAddress: 0029(a)09.jp mailLocalAddress: gk12k_0029(a)08wt09.jp -------------------------------------------- dovecot log of the problem ------------------ Jan 31 01:19:51 store01 dovecot: lmtp(24252): Connect from 10.129.75.77 Jan 31 01:19:51 store01 dovecot: lmtp(0029(a)09.jp): copy from <lmtp DATA>: box=INBOX, uid=40, msgid=<foobar>, size=377 Jan 31 01:19:51 store01 dovecot: lmtp(0029(a)09.jp): pdn7JafirFa8XgAAbv3f4A: from=hogehoge(a)example.jp, to=gk12k_0029(a)08wt09.jp, vsize=388, msgid=<foobar>, saved mail to INBOX Jan 31 01:19:51 store01 dovecot: lmtp(24252): Disconnect from 10.129.75.77: Successful quit Jan 31 01:19:51 store01 dovecot: indexer-worker: Error: User 0029(a)09.jp lookup failed: Unknown user openldap log ------------------ Jan 31 01:19:51 ldap01 slapd[21617]: conn=1291 op=1 SRCH base="" scope=2 deref=0 filter="(&(objectClass=inetLocalMailRecipient)(mailLocalAddress=gk12k_0029(a)08wt09.jp))" Jan 31 01:19:51 ldap01 slapd[21617]: conn=1291 op=1 SRCH attr=mailRoutingAddress storeQuotaBytes Jan 31 01:19:51 ldap01 slapd[21617]: conn=1291 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Jan 31 01:19:51 ldap01 slapd[21617]: conn=1292 fd=19 ACCEPT from IP=10.129.78.22:58335 (IP=0.0.0.0:389) Jan 31 01:19:51 ldap01 slapd[21617]: conn=1292 op=0 BIND dn="" method=128 Jan 31 01:19:51 ldap01 slapd[21617]: conn=1292 op=0 RESULT tag=97 err=0 text= Jan 31 01:19:51 ldap01 slapd[21617]: conn=1292 op=1 SRCH base="" scope=2 deref=0 filter="(mailRoutingAddress=0029(a)09.jp)" Jan 31 01:19:51 ldap01 slapd[21617]: conn=1292 op=1 SRCH attr=modifyTimestamp Jan 31 01:19:51 ldap01 slapd[21617]: conn=1292 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Jan 31 01:19:51 ldap01 slapd[21617]: conn=1292 op=2 SRCH base="uid=gk12k_0029,dc=08wt09,dc=jp" scope=0 deref=0 filter="(objectClass=*)" Jan 31 01:19:51 ldap01 slapd[21617]: conn=1292 op=2 SRCH attr=storeSieveScript Jan 31 01:19:51 ldap01 slapd[21617]: conn=1292 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text= Jan 31 01:19:51 ldap01 slapd[21617]: conn=1292 op=3 UNBIND Jan 31 01:19:51 ldap01 slapd[21617]: conn=1292 fd=19 closed Jan 31 01:19:51 ldap01 slapd[21617]: conn=1291 op=2 SRCH base="" scope=2 deref=0 filter="(&(objectClass=inetLocalMailRecipient)(mailLocalAddress=0029(a)09.jp))" Jan 31 01:19:51 ldap01 slapd[21617]: conn=1291 op=2 SRCH attr=mailRoutingAddress storeQuotaBytes Jan 31 01:19:51 ldap01 slapd[21617]: conn=1291 op=2 SEARCH RESULT tag=101 err=0 nentries=0 text= ------------------------------------------- Log when I deleted "fts_autoindex = yes" ------------------------------------------- Jan 31 01:18:12 store01 dovecot: lmtp(24232): Connect from 10.129.75.77 Jan 31 01:18:13 store01 dovecot: lmtp(0029(a)09.jp): copy from <lmtp DATA>: box=INBOX, uid=39, msgid=<foobar>, size=377 Jan 31 01:18:13 store01 dovecot: lmtp(0029(a)09.jp): 10FxNETirFaoXgAAbv3f4A: from=hogehoge(a)example.jp, to=gk12k_0029(a)08wt09.jp, vsize=388, msgid=<foobar>, saved mail to INBOX Jan 31 01:18:13 store01 dovecot: lmtp(24232): Disconnect from 10.129.75.77: Successful quit ------------------------------------------- Jan 31 01:18:12 ldap01 slapd[21617]: conn=1289 op=1 SRCH base="" scope=2 deref=0 filter="(&(objectClass=inetLocalMailRecipient)(mailLocalAddress=gk12k_0029(a)08wt09.jp))" Jan 31 01:18:12 ldap01 slapd[21617]: conn=1289 op=1 SRCH attr=mailRoutingAddress storeQuotaBytes Jan 31 01:18:12 ldap01 slapd[21617]: conn=1289 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Jan 31 01:18:12 ldap01 slapd[21617]: conn=1290 fd=19 ACCEPT from IP=10.129.78.22:58332 (IP=0.0.0.0:389) Jan 31 01:18:12 ldap01 slapd[21617]: conn=1290 op=0 BIND dn="" method=128 Jan 31 01:18:12 ldap01 slapd[21617]: conn=1290 op=0 RESULT tag=97 err=0 text= Jan 31 01:18:12 ldap01 slapd[21617]: conn=1290 op=1 SRCH base="" scope=2 deref=0 filter="(mailRoutingAddress=0029(a)09.jp)" Jan 31 01:18:12 ldap01 slapd[21617]: conn=1290 op=1 SRCH attr=modifyTimestamp Jan 31 01:18:12 ldap01 slapd[21617]: conn=1290 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Jan 31 01:18:12 ldap01 slapd[21617]: conn=1290 op=2 SRCH base="uid=gk12k_0029,dc=08wt09,dc=jp" scope=0 deref=0 filter="(objectClass=*)" Jan 31 01:18:12 ldap01 slapd[21617]: conn=1290 op=2 SRCH attr=storeSieveScript Jan 31 01:18:12 ldap01 slapd[21617]: conn=1290 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text= Jan 31 01:18:12 ldap01 slapd[21617]: conn=1290 op=3 UNBIND Jan 31 01:18:12 ldap01 slapd[21617]: conn=1290 fd=19 closed ------------------------------------------- -- Masaki

2 2

basic configuratio error
by soko.tica 01 Feb '16

01 Feb '16

Hello list, After many hours I still fail to configure properly dovecot as the LDA with opensmtpd, for system users only. I don't want pop at all, jus lmtp and imap, but still haven't stripped it. Here is the info, thanks in advance for your response: ===== # doveconf -n # 2.2.14: /etc/dovecot/dovecot.conf # OS: OpenBSD 5.6 i386 auth_verbose = yes auth_verbose_passwords = yes disable_plaintext_auth = no first_valid_uid = 1000 hostname = imap.home.lan imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lda_original_recipient_header = X-Original-To mail_debug = yes mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate mbox_write_locks = fcntl mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = bsdauth } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh postmaster_address = postmaster(a)mileva.home.lan protocols = imap pop3 lmtp sieve service auth-worker { user = root } service auth { unix_listener auth-userdb { group = _dovenull mode = 0666 user = _dovenull } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 0 service_count = 1 } service imap { process_limit = 1024 } service lmtp { unix_listener lmtp { mode = 0666 } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl_cert = </etc/ssl/dovecotcert.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } verbose_ssl = yes protocol lmtp { mail_plugins = } protocol lda { mail_plugins = } # /usr/local/sbin/dovecot -F Oct 28 13:00:01 mileva newsyslog[1110]: logfile turned over Oct 28 14:30:46 mileva dovecot: master: Dovecot v2.2.14 starting up for imap, pop3, lmtp, sieve Oct 28 14:30:46 mileva dovecot: master: Error: service(aggregator): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(pop3): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: open(/var/dovecot/login-master-notifya57a2b8821460734) failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(pop3-login): safe_mkstemp(/var/dovecot/login-master-notify) failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(log): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(lmtp): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(ipc): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(indexer-worker): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(indexer): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(imap): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(imap-urlauth-worker): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(imap-urlauth): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: open(/var/dovecot/login-master-notify5dd2a3a0591effcc) failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(imap-urlauth-login): safe_mkstemp(/var/dovecot/login-master-notify) failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: open(/var/dovecot/login-master-notify152a1bb891f6f764) failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(imap-login): safe_mkstemp(/var/dovecot/login-master-notify) failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(doveadm): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(dns_client): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(director): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(dict): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(config): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(auth): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(auth-worker): pipe() failed: Too many open files Oct 28 14:30:46 mileva dovecot: master: Error: service(anvil): command startup failed, throttling for 2 secs Oct 28 14:30:56 mileva dovecot: master: Error: service(ssl-params): command startup failed, throttling for 2 secs [snipped 18 pages of /var/log/maillog] Oct 28 20:47:44 mileva dovecot: master: Dovecot v2.2.14 starting up for imap, pop3, lmtp, sieve Oct 28 20:47:44 mileva dovecot: master: Error: service(aggregator): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(pop3): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: open(/var/dovecot/login-master-notifydd522320d99e7f4c) failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(pop3-login): safe_mkstemp(/var/dovecot/login-master-notify) failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(log): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(lmtp): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(ipc): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(indexer-worker): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(indexer): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(imap): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(imap-urlauth-worker): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(imap-urlauth): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: open(/var/dovecot/login-master-notify95aa9b38117677e4) failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(imap-urlauth-login): safe_mkstemp(/var/dovecot/login-master-notify) failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: open(/var/dovecot/login-master-notify4d021350494e6f7c) failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(imap-login): safe_mkstemp(/var/dovecot/login-master-notify) failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(doveadm): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(dns_client): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(director): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(dict): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(config): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(auth): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(auth-worker): pipe() failed: Too many open files Oct 28 20:47:44 mileva dovecot: master: Error: service(anvil): command startup failed, throttling for 2 secs Oct 28 20:47:46 mileva dovecot: master: Warning: Killed with signal 2 (by pid=0 uid=0 code=kill) Oct 28 20:47:46 mileva dovecot: master: Error: open(/var/dovecot/.temp.mileva.home.lan.17422.055a8b6881266714) failed: Too many open files Oct 28 20:47:46 mileva dovecot: master: Error: file_dotlock_open(/var/dovecot/instances) failed: Too many open files Oct 28 20:47:46 mileva dovecot: master: Error: service(ssl-params): command startup failed, throttling for 2 secs # /usr/sbin/smtpd -n configuration OK

2 3

Dovecot 2.2.21 - segfault
by Robert Blayzor 31 Jan '16

31 Jan '16

dovecot --version 2.2.21 (5345f22) FreeBSD 10.2-RELEASE-p11 FreeBSD 10.2-RELEASE-p11 #0 r294908M: amd64 Core was generated by `dovecot'. Program terminated with signal 11, Segmentation fault. Reading symbols from /usr/local/lib/dovecot/libdovecot.so.0...done. Loaded symbols for /usr/local/lib/dovecot/libdovecot.so.0 Reading symbols from /lib/libc.so.7...Reading symbols from /usr/lib/debug//lib/libc.so.7.debug...done. done. Loaded symbols for /lib/libc.so.7 Reading symbols from /libexec/ld-elf.so.1...Reading symbols from /usr/lib/debug//libexec/ld-elf.so.1.debug...done. done. Loaded symbols for /libexec/ld-elf.so.1 #0 0x0000000800910c74 in io_loop_time_refresh () at ioloop.c:635 635 ioloop.c: No such file or directory. in ioloop.c (gdb) bt full #0 0x0000000800910c74 in io_loop_time_refresh () at ioloop.c:635 No locals. #1 0x0000000800910961 in io_loop_timeouts_start_new (ioloop=0x801421080) at ioloop.c:436 to_idx = (struct timeout * const *) 0x801419880 #2 0x0000000800910915 in io_loop_handler_run (ioloop=0x801421080) at ioloop.c:606 No locals. #3 0x000000080091073f in io_loop_run (ioloop=0x801421080) at ioloop.c:583 No locals. #4 0x000000080086aaab in master_service_run (service=0x80141b140, callback=0) at master-service.c:640 No locals. #5 0x0000000000406509 in main (argc=3, argv=0x7fffffffb4c0) at main.c:888 set = (struct master_settings *) 0x801429110 error = 0x800caa2c3 "H\203Ä ]Ã\017\037\200" doveconf_arg = 0x0 orig_info_callback = (failure_callback_t *) 0x8008f0220 <i_syslog_error_handler> orig_debug_callback = (failure_callback_t *) 0x8008f0220 <i_syslog_error_handler> foreground = false ask_key_pass = false i = 3 c = -1 doubleopts = <value optimized out> Current language: auto; currently minimal (gdb)

2 2

Broken MIME parts for mail
by Peer Heinlein 31 Jan '16

31 Jan '16

We're acutally using 2:2.2.21-1~auto+83 and sometimes we have in our logfiles: Jan 30 08:50:14 mailimap01 dovecot: imap(username): Error: unlink(/vmail/username/mdbox/mailboxes/foldername/dbox-Mails/dovecot.index.cache) failed: No such file or directory (in mail-cache.c:28) Jan 30 08:50:14 mailimap01 dovecot: imap(username): Error: Corrupted index cache file /vmail/username/mdbox/mailboxes/foldername/dbox-Mails/dovecot.index.cache: Broken MIME parts for mail UID 70 The mail in this folder with uid 70 looks perfect and I'm able to fetch that mail without errors. I hope this is a self-healing error in the index file without real incident to the user. But I wonder how this Error can be happen. Peer -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-42 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

2 1

Re-starting replication after a long disconnect
by John Krug 30 Jan '16

30 Jan '16

Using Dovecot 2.2.15.8 We use dsync as shown at http://wiki.dovecot.org/Replication <http://wiki.dovecot.org/Replication> to have a second copy of our mail store. Users connect to one server and the other is considered a secondary, and is there “just in case”. If one-way backup/sync would make more sense, I would consider that, but at the time we set it up (October 2013), I recall there was some issue with one-way not being as reliable. We had some problems with the secondary mail server and had to take it off line for while. Now that the mail on that server is stale, what is the best way of starting over? When I simply turned it back on after a lengthy break (weeks), some users were reporting deleted messages showing up in their inboxes. I know dsync is master/master and uses index files, but I am not certain of the details and whether this behavior is completely unexpected or not. The laundry list: What are the f and R flags for sync? http://wiki2.dovecot.org/Tools/Doveadm/Sync Use doveadm backup to get the initial data over to the seconday? Can the server be in use while I do backup? Do I need to wipe the secondary and start over? Thanks ! -JK ----------------------------------------------------------------------- John "JK" Krug System Administrator The University of Chicago | Laboratory Schools 1362 East 59th Street | Chicago, IL 60637 Phone: (773) 834-4476 jk(a)ucls.uchicago.edu <mailto:jkallo@ucls.uchicago.edu> | http://helpdesk.ucls.uchicago.edu _______________________________________________

2 1

Setting Recent Flag on New Messages?
by Haravikk 29 Jan '16

29 Jan '16

So I’m looking at setting up some house-keeping for my dovecot mailboxes, specifically deleting messages in trash, spam etc., by deleting Seen messages older than X days. In order to protect against the edge case of a user reading a message right before the deletion task however I’d like to do something like the following: doveadm expunge -A OLD SEEN BEFORE 7d MAILBOX Trash doveadm flags -A remove '\Recent' SEEN BEFORE 7d MAILBOX Trash (except I’m actually doing this per-user with a script and per-user settings for flexibility, but you get the idea) Basically the expunge step only deletes messages without the Recent flag (and which haven’t been marked as unseen again). It then removes this flag from messages which have been seen, so that they will be deleted next time the expunge command runs. In other words, if this command runs once a day, there will be a minimum delay of 24 hours between a message being seen, and then being deleted. However I can’t for the life of me figure out how to set the Recent flag except via doveadm flags. While I could periodically run doveadm -A flags add ‘\Recent’ SEEN or such this doesn’t seem like a great way to do it (adding the flag after the messages are stored), really I’d rather do it as they arrive. I’ve tried sieve, but it can’t set this flag. Have I managed to completely miss an option for setting this when new messages arrive?

4 5

Dovecot (director, lmtp) IPv4/IPv6?
by Andrey Fesenko 29 Jan '16

29 Jan '16

Hello, I'm build system with two director/proxy and dual stack network (or IPv6-only local services) http://wiki2.dovecot.org/Director say "This also means that a single director ring must use either IPv4 or IPv6 addresses, but not both at the same time." OK All servers have 2 interface (public and local network), and all dual stack IPv4/IPv6, imap/pop (mail) and lmtp (mx) proxy run in dedicated server. If network IPv4-only this work fine IPv6-only or IPv4/IPv6 configs not work (on mail director) dovecot-2.2.10-5.el7, CentOS Linux release 7.2.1511 (Core) My configs contain Directors listen = IPv4-public1, IPv4-local1, IPv6-public1, IPv6-local1 director_servers = IPv6-local1 IPv6-local2 director_mail_servers = IPv4-public3 IPv4-local3 IPv6-public3 IPv6-local3 service lmtp { client_limit = 5 executable = lmtp -L idle_kill = 0 process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 inet_listener lmtp { address = IPv6-local1 IPv4-local1 port = 24 } } # 20-lmtp lmtp_proxy = yes service director { unix_listener login/director { mode = 0666 } fifo_listener login/proxy-notify { mode = 0600 } unix_listener director-userdb { mode = 0600 } inet_listener { address = IPv6-local1 port = 9090 } } Without line "address =" in service, all services start all listen. If director contain service imap-login { executable = imap-login director idle_kill = 10 secs inet_listener imap { port = 143 } process_limit = 400 process_min_avail = 10 service_count = 0 vsz_limit = 512 M } log after start server # systemctl status dovecot ● dovecot.service - Dovecot IMAP/POP3 email server Loaded: loaded (/usr/lib/systemd/system/dovecot.service; enabled; vendor preset: disabled) Active: active (running) since Thu 2016-01-28 13:12:49 MSK; 5s ago Process: 11111 ExecStartPre=/usr/libexec/dovecot/prestartscript (code=exited, status=0/SUCCESS) Main PID: 11114 (dovecot) CGroup: /system.slice/dovecot.service ├─11114 /usr/sbin/dovecot -F ├─11116 dovecot-director/imap-login director ├─11117 dovecot-director/anvil [10 connections] ├─11118 dovecot-director/log ├─11120 dovecot-director/imap-login director ├─11121 dovecot-director/imap-login director ├─11122 dovecot-director/imap-login director ├─11123 dovecot-director/imap-login director ├─11124 dovecot-director/imap-login director ├─11125 dovecot-director/imap-login director ├─11126 dovecot-director/imap-login director ├─11127 dovecot-director/imap-login director ├─11128 dovecot-director/imap-login director └─11129 dovecot-director/config Jan 28 13:12:49 mail systemd[1]: Starting Dovecot IMAP/POP3 email server... Jan 28 13:12:49 mail systemd[1]: Started Dovecot IMAP/POP3 email server. Jan 28 13:12:49 mail dovecot[11114]: master: Dovecot v2.2.10 starting up for imap, pop3 (core dumps disabled) Jan 28 13:12:49 mail dovecot[11114]: master: Error: service(director): command startup failed, throttling for 2 secs Jan 28 13:12:49 mail dovecot[11118]: director: Fatal: Invalid director port in IPv6-local1 Jan 28 13:12:54 mail dovecot[11118]: director: Fatal: Invalid director port in IPv6-local1 Jan 28 13:12:54 mail dovecot[11114]: master: Error: service(director): command startup failed, throttling for 4 secs # systemctl status dovecot ● dovecot.service - Dovecot IMAP/POP3 email server Loaded: loaded (/usr/lib/systemd/system/dovecot.service; enabled; vendor preset: disabled) Active: active (running) since Thu 2016-01-28 13:05:52 MSK; 10min ago Process: 10232 ExecStartPre=/usr/libexec/dovecot/prestartscript (code=exited, status=0/SUCCESS) Main PID: 10235 (dovecot) CGroup: /system.slice/dovecot.service ├─10235 /usr/sbin/dovecot -F ├─10237 dovecot-proxy/anvil [0 connections] └─10238 dovecot-proxy/log Jan 28 13:05:52 mx systemd[1]: Starting Dovecot IMAP/POP3 email server... Jan 28 13:05:52 mx systemd[1]: Started Dovecot IMAP/POP3 email server. Jan 28 13:05:52 mx dovecot[10235]: master: Dovecot v2.2.10 starting up for lmtp (core dumps disabled) Jan 28 13:06:18 mx dovecot[10238]: director: Fatal: Invalid director port in IPv6-local1 Jan 28 13:06:18 mx dovecot[10235]: master: Error: service(director): command startup failed, throttling for 2 secs Jan 28 13:06:18 mx dovecot[10250]: lmtp(10250): Error: passdb lookup(mailadm@mx): Disconnected unexpectedly Jan 28 13:06:20 mx dovecot[10238]: director: Fatal: Invalid director port in IPv6-local1

2 3

Correct Way to Run expunge for All?
by Haravikk 29 Jan '16

29 Jan '16

So as part of my daily mailbox maintenance I have the following command: doveadm expunge -A DELETED i.e- I’m only expunging messages that have been specifically marked as deleted. I also only do this *after* running doveadm purge, as this means that there is at least a 24 hour window between a message being marked as deleted, and it being gone forever. However I get the following error message: Fatal: expunge: To avoid accidents, search query must contain MAILBOX in all search branches While I can see the logic in this, it isn’t an accidental use of this command, so who do I force it to proceed? Going forward I’d like to recommend that expunge -A DELETED should be allowed, as it doesn’t seem like an especially dangerous form of the command, particularly with mdboxes where the messages won’t be removed until the purge step. Either that or there should be a flag to force the command when you know it isn’t an accident; anyone adding this to all their queries deserves the damage they inflict =)

2 1