- dovecot - dovecot.org

Lazy_expunge issue...
by giorgio paolucci 26 Mar '15

26 Mar '15

Hello everybody, I have a question about lazy_expunge plugin. I set up Dovecot with lazy_expunge plugin on a Debian Wheezy machine; I setup also a global acl to keep .expunged namespace readonly for all users. Imap client is Horde Webmail Edition 5.2.3 When I try to delete folders containing subfolders, lazy_expunge copies into expunged private namespace only the upper level folder. The subfolder and all messages inside it are lost. Quota is also corrupted (subfolder messages are still accounted in the Message counter and disk quota) and a recalc is needed to fix. Problem can be reproduced this way: 1)Create with horde a folder "extern" 2)Create a subfolder "extern/subfolder" 3) copy some messages into extern and some into subfolder (in my test 5 messages each) 4) verify quota usage: root@gold:# doveadm quota get -u testimap2.csia(a)unipd.it Quota name Type Value Limit % User quota STORAGE 4 1126400 0 User quota MESSAGE 10 - 0 3)Delete extern with option to delete all subfolders. 4)verify that all folders and messages have been deleted 5)verify that only extern folder has been copied into .expunged namespace and verify that quota still reports the 5 messages that were in subfolder: root@gold:# doveadm quota get -u testimap2.csia(a)unipd.it Quota name Type Value Limit % User quota STORAGE 2 1126400 0 User quota MESSAGE 5 - 0 6) recalc quota and check again that quota has benne corrected: # doveadm quota recalc -u testimap2.csia(a)unipd.it root@gold:# doveadm quota get -u testimap2.csia(a)unipd.it Quota name Type Value Limit % User quota STORAGE 0 1126400 0 User quota MESSAGE 0 - 0 Is there anything I am missing? Thanks in advance. Best regards. Giorgio Paolucci ================================================ dovecot version 2.2.13 OS :Linux bronze 3.2.0-4-amd64 #1 SMP Debian 3.2.65-1+deb7u1 x86_64 GNU/Linux ================================================= root@bronze:/etc/dovecot/conf.d# more ../dovecot-acl _PostaCancellataPerErrore* owner lrik ================================================= root@bronze:/etc/dovecot/conf.d# dovecot -n # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.8 auth_default_realm = unipd.it disable_plaintext_auth = no log_path = /var/log/dovecot/dovecot.log mail_debug = yes mail_fsync = always mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = quota listescape lazy_expunge acl mail_log notify mdbox_rotate_interval = 1 days mdbox_rotate_size = 10 M mmap_disable = yes namespace { hidden = no inbox = no list = yes location = maildir:/SYSTEM/USERS/mailbox/%d/%1n/%u/expunged mailbox .LEGGIMI { auto = subscribe } mailbox INBOX.Trash { auto = subscribe special_use = \Trash } prefix = _PostaCancellataPerErrore/ separator = / subscriptions = yes type = private } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } passdb { args = /etc/dovecot/conf.d/dovecot-sqlSSO.conf.ext driver = sql } plugin { acl = vfile:/etc/dovecot/dovecot-acl lazy_expunge = _PostaCancellataPerErrore/ lazy_expunge_only_last_instance = yes mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size pop3_migration_mailbox = INBOX quota = dict:User quota::file:/SYSTEM/USERS/homes/%d/%1u/%u/%u.quota quota_rule = *:storage=1100M quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } pop3c_host = 147.162.10.68 protocols = imap pop3 lmtp service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service imap-login { inet_listener imaps { ssl = no } process_min_avail = 20 service_count = 1 } service imap { executable = imap postlogin } service lmtp { executable = lmtp inet_listener lmtp { port = 2223 } process_min_avail = 15 } service pop3-login { inet_listener pop3s { ssl = no } } service postlogin { executable = script-login -d rawlog user = vmail } service quota-warning { executable = script /SYSTEM/DOVECOT/scripts/quota-warning.sh unix_listener quota-warning { user = vmail } user = vmail } ssl = no userdb { driver = prefetch } userdb { args = /etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } userdb { driver = prefetch } userdb { args = /etc/dovecot/conf.d/dovecot-sqlSSO.conf.ext driver = sql } protocol lmtp { info_log_path = /tmp/dovecot-lmtp-info.log log_path = /tmp/dovecot-lmtp.log mail_plugins = quota listescape lazy_expunge acl mail_log notify } protocol imap { imap_max_line_length = 128 k mail_plugins = quota listescape lazy_expunge acl mail_log notify imap_quota acl imap_acl } protocol doveadm { mail_plugins = quota listescape lazy_expunge acl mail_log notify pop3_migration } protocol pop3 { pop3_no_flag_updates = yes pop3_uidl_format = %10v.%09u } =================================== root@gold:# doveadm user -u testimap2.csia(a)unipd.it userdb: testimap2.csia(a)unipd.it uid : 1003 gid : 1003 home : /SYSTEM/USERS/homes/unipd.it/t/testimap2.csia(a)unipd.it mail : sdbox:/NAS1/unipd.it/mailbox/t/testimap2.csia@unipd.it/sdbox:INDEX=/INDEX1/unipd.it/t/testimap2.csia@unipd.it:ALT=/ALTSTORAGE1/unipd.it/t/testimap2.csia@unipd.it ------------------------------- Here follows IMAP transaction in and out from rawlog IN: 2 ENABLE QRESYNC 3 NAMESPACE 4 LIST () "" (extern/*) 5 DELETE extern 6 UNSUBSCRIBE extern 7 DELETE extern/subfolder 8 UNSUBSCRIBE extern/subfolder 9 LOGOUT OUT: root@gold:/SYSTEM/USERS/homes/unipd.it/t/testimap2.csia@unipd.it/dovecot.rawlog# more 20150326-095943-1773.out 1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=OR DEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARC H ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE QUOTA ACL RIGHTS=texk] Logged in * ENABLED QRESYNC 2 OK Enabled. * NAMESPACE (("" "/")("_PostaCancellataPerErrore/" "/")) NIL NIL 3 OK Namespace completed. * LIST () "/" extern/subfolder 4 OK List completed. 5 OK Delete completed. 6 OK Unsubscribe completed. 7 OK Delete completed. 8 OK Unsubscribe completed. * BYE Logging out 9 OK Logout completed. ================================== Here follows debug log from dovecot. Mar 26 09:59:43 imap-login: Info: Login: user=<testimap2.csia(a)unipd.it>, method=PLAIN, rip=147.162.10.141, lip=147.162.10.84, mpid=1771, session=<DXefPC0SWQCTogqN> Mar 26 09:59:43 script-login: Debug: Added userdb setting: mail_location=sdbox:/NAS1/unipd.it/mailbox/t/testimap2.csia@unipd.it/sdbox:INDEX=/INDEX1/unipd.it/t/testimap2.csia@unipd.it:ALT=/ALTSTORAGE1/unipd.it/t/testimap2.csia@unipd.it Mar 26 09:59:43 imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules Mar 26 09:59:43 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so Mar 26 09:59:43 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib02_imap_acl_plugin.so Mar 26 09:59:43 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib02_lazy_expunge_plugin.so Mar 26 09:59:43 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so Mar 26 09:59:43 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so Mar 26 09:59:43 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib15_notify_plugin.so Mar 26 09:59:43 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_listescape_plugin.so Mar 26 09:59:43 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_mail_log_plugin.so Mar 26 09:59:43 imap: Debug: Added userdb setting: mail_location=sdbox:/NAS1/unipd.it/mailbox/t/testimap2.csia@unipd.it/sdbox:INDEX=/INDEX1/unipd.it/t/testimap2.csia@unipd.it:ALT=/ALTSTORAGE1/unipd.it/t/testimap2.csia@unipd.it Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: Effective uid=1003, gid=1003, home=/SYSTEM/USERS/homes/unipd.it/t/testimap2.csia(a)unipd.it Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl: No acl_shared_dict setting - shared mailbox listing is disabled Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: Quota root: name=User quota backend=dict args=:file:/SYSTEM/USERS/homes/unipd.it/t/testimap2.csia@unipd.it/testimap2.csia@unipd.it.quota Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: Quota rule: root=User quota mailbox=* bytes=1153433600 messages=0 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: Quota rule: root=User quota mailbox=Trash bytes=+104857600 messages=0 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: Quota warning: bytes=1095761920 (95%) messages=0 reverse=no command=quota-warning 95 testimap2.csia(a)unipd.it Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: Quota warning: bytes=922746880 (80%) messages=0 reverse=no command=quota-warning 80 testimap2.csia(a)unipd.it Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: Quota grace: root=User quota bytes=115343360 (10%) Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: dict quota: user=testimap2.csia(a)unipd.it, uri=file:/SYSTEM/USERS/homes/unipd.it/t/testimap2.csia@unipd.it/testimap2.csia@unipd.it.quota, noenforcing=0 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=sdbox:/NAS1/unipd.it/mailbox/t/testimap2.csia@unipd.it/sdbox:INDEX=/INDEX1/unipd.it/t/testimap2.csia@unipd.it:ALT=/ALTSTORAGE1/unipd.it/t/testimap2.csia@unipd.it Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: fs: root=/NAS1/unipd.it/mailbox/t/testimap2.csia(a)unipd.it/sdbox, index=/INDEX1/unipd.it/t/testimap2.csia(a)unipd.it, indexpvt=, control=, inbox=, alt=/ALTSTORAGE1/unipd.it/t/testimap2.csia(a)unipd.it Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl: initializing backend with data: vfile:/etc/dovecot/dovecot-acl Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl: acl username = testimap2.csia(a)unipd.it Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl: owner = 1 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: Global ACL file: /etc/dovecot/dovecot-acl Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: Namespace : type=private, prefix=_PostaCancellataPerErrore/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=yes location=maildir:/SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia@unipd.it/expunged Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: maildir++: root=/SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia(a)unipd.it/expunged, index=, indexpvt=, control=, inbox=, alt= Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl: initializing backend with data: vfile:/etc/dovecot/dovecot-acl Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl: acl username = testimap2.csia(a)unipd.it Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl: owner = 1 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: Global ACL file: /etc/dovecot/dovecot-acl Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /NAS1/unipd.it/mailbox/t/testimap2.csia(a)unipd.it/sdbox/mailboxes/dovecot-acl not found Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /NAS1/unipd.it/mailbox/t/testimap2.csia@unipd.it/sdbox/mailboxes/extern/subfolder/dbox-Mails/dovecot-acl not found Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /NAS1/unipd.it/mailbox/t/testimap2.csia(a)unipd.it/sdbox/mailboxes/extern/dbox-Mails/dovecot-acl not found Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia(a)unipd.it/expunged/.extern/dovecot-acl not found Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia(a)unipd.it/expunged/dovecot-acl not found Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: Namespace _PostaCancellataPerErrore/: /SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia(a)unipd.it/expunged/.extern doesn't exist yet, using default permissions Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: Namespace _PostaCancellataPerErrore/: Using permissions from /SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia(a)unipd.it/expunged: mode=0700 gid=default Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia(a)unipd.it/expunged/dovecot-acl not found Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia(a)unipd.it/expunged/.extern/dovecot-acl not found Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Info: copy from extern: box=_PostaCancellataPerErrore/extern, uid=1, msgid=, size=523 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Info: copy from extern: box=_PostaCancellataPerErrore/extern, uid=2, msgid=, size=523 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Info: copy from extern: box=_PostaCancellataPerErrore/extern, uid=3, msgid=, size=523 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Info: copy from extern: box=_PostaCancellataPerErrore/extern, uid=4, msgid=, size=523 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Info: copy from extern: box=_PostaCancellataPerErrore/extern, uid=5, msgid=, size=524 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Info: expunge: box=extern, uid=1, msgid=, size=523 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Info: expunge: box=extern, uid=2, msgid=, size=523 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Info: expunge: box=extern, uid=3, msgid=, size=523 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Info: expunge: box=extern, uid=4, msgid=, size=523 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Info: expunge: box=extern, uid=5, msgid=, size=524 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: Namespace : Using permissions from /NAS1/unipd.it/mailbox/t/testimap2.csia(a)unipd.it/sdbox: mode=0755 gid=default Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Info: Mailbox deleted: extern Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Info: Mailbox deleted: extern/subfolder Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Info: Disconnected: Logged out in=162 out=704 Mar 26 09:59:44 imap-login: Info: Login: user=<testimap2.csia(a)unipd.it>, method=PLAIN, rip=147.162.10.141, lip=147.162.10.84, mpid=1778, session=<vUqqPC0SXACTogqN> Mar 26 09:59:44 script-login: Debug: Added userdb setting: mail_location=sdbox:/NAS1/unipd.it/mailbox/t/testimap2.csia@unipd.it/sdbox:INDEX=/INDEX1/unipd.it/t/testimap2.csia@unipd.it:ALT=/ALTSTORAGE1/unipd.it/t/testimap2.csia@unipd.it Mar 26 09:59:44 imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules Mar 26 09:59:44 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so Mar 26 09:59:44 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib02_imap_acl_plugin.so Mar 26 09:59:44 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib02_lazy_expunge_plugin.so Mar 26 09:59:44 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so Mar 26 09:59:44 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so Mar 26 09:59:44 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib15_notify_plugin.so Mar 26 09:59:44 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_listescape_plugin.so Mar 26 09:59:44 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_mail_log_plugin.so Mar 26 09:59:44 imap: Debug: Added userdb setting: mail_location=sdbox:/NAS1/unipd.it/mailbox/t/testimap2.csia@unipd.it/sdbox:INDEX=/INDEX1/unipd.it/t/testimap2.csia@unipd.it:ALT=/ALTSTORAGE1/unipd.it/t/testimap2.csia@unipd.it Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: Effective uid=1003, gid=1003, home=/SYSTEM/USERS/homes/unipd.it/t/testimap2.csia(a)unipd.it Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: acl: No acl_shared_dict setting - shared mailbox listing is disabled Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: Quota root: name=User quota backend=dict args=:file:/SYSTEM/USERS/homes/unipd.it/t/testimap2.csia@unipd.it/testimap2.csia@unipd.it.quota Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: Quota rule: root=User quota mailbox=* bytes=1153433600 messages=0 Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: Quota rule: root=User quota mailbox=Trash bytes=+104857600 messages=0 Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: Quota warning: bytes=1095761920 (95%) messages=0 reverse=no command=quota-warning 95 testimap2.csia(a)unipd.it Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: Quota warning: bytes=922746880 (80%) messages=0 reverse=no command=quota-warning 80 testimap2.csia(a)unipd.it Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: Quota grace: root=User quota bytes=115343360 (10%) Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: dict quota: user=testimap2.csia(a)unipd.it, uri=file:/SYSTEM/USERS/homes/unipd.it/t/testimap2.csia@unipd.it/testimap2.csia@unipd.it.quota, noenforcing=0 Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=sdbox:/NAS1/unipd.it/mailbox/t/testimap2.csia@unipd.it/sdbox:INDEX=/INDEX1/unipd.it/t/testimap2.csia@unipd.it:ALT=/ALTSTORAGE1/unipd.it/t/testimap2.csia@unipd.it Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: fs: root=/NAS1/unipd.it/mailbox/t/testimap2.csia(a)unipd.it/sdbox, index=/INDEX1/unipd.it/t/testimap2.csia(a)unipd.it, indexpvt=, control=, inbox=, alt=/ALTSTORAGE1/unipd.it/t/testimap2.csia(a)unipd.it Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: acl: initializing backend with data: vfile:/etc/dovecot/dovecot-acl Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: acl: acl username = testimap2.csia(a)unipd.it Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: acl: owner = 1 Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: Global ACL file: /etc/dovecot/dovecot-acl Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: Namespace : type=private, prefix=_PostaCancellataPerErrore/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=yes location=maildir:/SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia@unipd.it/expunged Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: maildir++: root=/SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia(a)unipd.it/expunged, index=, indexpvt=, control=, inbox=, alt= Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: acl: initializing backend with data: vfile:/etc/dovecot/dovecot-acl Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: acl: acl username = testimap2.csia(a)unipd.it Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: acl: owner = 1 Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: Global ACL file: /etc/dovecot/dovecot-acl Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /NAS1/unipd.it/mailbox/t/testimap2.csia(a)unipd.it/sdbox/mailboxes/INBOX/dbox-Mails/dovecot-acl not found Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Info: Disconnected: Logged out in=77 out=1009 Mar 26 10:01:50 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia(a)unipd.it/expunged/.INBOX\2eTrash/dovecot-acl not found Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia(a)unipd.it/expunged/.\2eLEGGIMI/dovecot-acl not found Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /NAS1/unipd.it/mailbox/t/testimap2.csia(a)unipd.it/sdbox/mailboxes/INBOX.Trash/dbox-Mails/dovecot-acl not found Mar 26 10:01:51 imap-login: Info: Login: user=<testimap2.csia(a)unipd.it>, method=PLAIN, rip=147.162.200.67, lip=147.162.10.86, mpid=2474, session=<VWBCRC0SugCToshD> Mar 26 10:01:51 script-login: Debug: Added userdb setting: mail_location=sdbox:/NAS1/unipd.it/mailbox/t/testimap2.csia@unipd.it/sdbox:INDEX=/INDEX1/unipd.it/t/testimap2.csia@unipd.it:ALT=/ALTSTORAGE1/unipd.it/t/testimap2.csia@unipd.it Mar 26 10:01:51 imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules Mar 26 10:01:51 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so Mar 26 10:01:51 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib02_imap_acl_plugin.so Mar 26 10:01:51 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib02_lazy_expunge_plugin.so Mar 26 10:01:51 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so Mar 26 10:01:51 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so Mar 26 10:01:51 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib15_notify_plugin.so Mar 26 10:01:51 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_listescape_plugin.so Mar 26 10:01:51 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_mail_log_plugin.so Mar 26 10:01:51 imap: Debug: Added userdb setting: mail_location=sdbox:/NAS1/unipd.it/mailbox/t/testimap2.csia@unipd.it/sdbox:INDEX=/INDEX1/unipd.it/t/testimap2.csia@unipd.it:ALT=/ALTSTORAGE1/unipd.it/t/testimap2.csia@unipd.it Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: Effective uid=1003, gid=1003, home=/SYSTEM/USERS/homes/unipd.it/t/testimap2.csia(a)unipd.it Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: acl: No acl_shared_dict setting - shared mailbox listing is disabled Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: Quota root: name=User quota backend=dict args=:file:/SYSTEM/USERS/homes/unipd.it/t/testimap2.csia@unipd.it/testimap2.csia@unipd.it.quota Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: Quota rule: root=User quota mailbox=* bytes=1153433600 messages=0 Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: Quota rule: root=User quota mailbox=Trash bytes=+104857600 messages=0 Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: Quota warning: bytes=1095761920 (95%) messages=0 reverse=no command=quota-warning 95 testimap2.csia(a)unipd.it Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: Quota warning: bytes=922746880 (80%) messages=0 reverse=no command=quota-warning 80 testimap2.csia(a)unipd.it Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: Quota grace: root=User quota bytes=115343360 (10%) Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: dict quota: user=testimap2.csia(a)unipd.it, uri=file:/SYSTEM/USERS/homes/unipd.it/t/testimap2.csia@unipd.it/testimap2.csia@unipd.it.quota, noenforcing=0 Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=sdbox:/NAS1/unipd.it/mailbox/t/testimap2.csia@unipd.it/sdbox:INDEX=/INDEX1/unipd.it/t/testimap2.csia@unipd.it:ALT=/ALTSTORAGE1/unipd.it/t/testimap2.csia@unipd.it Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: fs: root=/NAS1/unipd.it/mailbox/t/testimap2.csia(a)unipd.it/sdbox, index=/INDEX1/unipd.it/t/testimap2.csia(a)unipd.it, indexpvt=, control=, inbox=, alt=/ALTSTORAGE1/unipd.it/t/testimap2.csia(a)unipd.it Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: acl: initializing backend with data: vfile:/etc/dovecot/dovecot-acl Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: acl: acl username = testimap2.csia(a)unipd.it Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: acl: owner = 1 Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: Global ACL file: /etc/dovecot/dovecot-acl Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: Namespace : type=private, prefix=_PostaCancellataPerErrore/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=yes location=maildir:/SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia@unipd.it/expunged Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: maildir++: root=/SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia(a)unipd.it/expunged, index=, indexpvt=, control=, inbox=, alt= Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: acl: initializing backend with data: vfile:/etc/dovecot/dovecot-acl Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: acl: acl username = testimap2.csia(a)unipd.it Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: acl: owner = 1 Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: Global ACL file: /etc/dovecot/dovecot-acl Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /NAS1/unipd.it/mailbox/t/testimap2.csia(a)unipd.it/sdbox/mailboxes/INBOX.Trash/dbox-Mails/dovecot-acl not found Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /NAS1/unipd.it/mailbox/t/testimap2.csia(a)unipd.it/sdbox/mailboxes/Drafts/dbox-Mails/dovecot-acl not found Mar 26 10:01:52 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /NAS1/unipd.it/mailbox/t/testimap2.csia(a)unipd.it/sdbox/mailboxes/Spam/dbox-Mails/dovecot-acl not found Mar 26 10:01:52 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /NAS1/unipd.it/mailbox/t/testimap2.csia(a)unipd.it/sdbox/mailboxes/Templates/dbox-Mails/dovecot-acl not found

1 0

Re: Dovecot Oy merger with Open-Xchange AG
by Patrick Coffin 25 Mar '15

25 Mar '15

To Timo and the Dovecot guys - congratulations! I'm sure this merger with OpenXchange is going to provide you with a lot of resources and opportunities. As a longtime user of dovecot, I do have a few concerns. I wonder if you can answer some questions for me. You say that OpenXchange really likes open source and shares your plans for the future. Is this a commitment that future versions core dovecot product will remain free and truly open source? According to Wikipedia (http://en.wikipedia.org/wiki/Open-Xchange#Licensing <http://en.wikipedia.org/wiki/Open-Xchange#Licensing>) , OpenXchange's backend is GPL'd, but the front-end is not - it's released under "Creative Common's Share Alike, Non Commercial, Attribution". The article points out: "The restriction to Non Commercial in the Creative Commons license for the Frontend restricts re-distribution to third parties, i.e. hosted deployments for third parties. However, since the front-end license prohibits commercial re-distribution, the software is neither free software nor open source software since the definitions of both require such re-distribution to be permitted" Do you expect that dovecot is moving in that direction? Here's why I'm asking: As a hosted email provider, I've long used dovecot, and been quite happy with it. But I have some concerns, as is common when any popular open source project gets acquired by a commercial entitiy. The current dovecot license is a mixture of the MIT and LGPL licenses. Will this remain? Or is dovecot going to go the way of OpenXchange licensing? What about other pieces of the dovecot ecosystem, such as the Object Storage plugin - will that remain closed source and proprietary? Or will you follow the lead of companies like RedHat and be truly open source? Is there a possibility that future versions of dovecot that contain what we might consider core features will be available only in the commercial version of the product? If I base a part of my business on a piece of software I've been running for the last 10 years, am I going to find myself in trouble in a year or two, when some new version of dovecot comes out with changes that I need, and I have to move to a commercial product, which I may or may not be able to afford? I'd love to hear that you're going to be following a model like RedHat did when they acquired GlusterFS and created the RedHat Storage Server. Gluster development is still going strong, and still completely open source. But they make money from people like me who know that by buying a contract, we can get the kind of support we need for such a critical part of our infrastructure. Again, congratulations and, as always, thanks for all the hard work creating dovecot in the first place. Patrick

7 13

Upgrading a dovecot director configuration?
by Will Rouesnel 25 Mar '15

25 Mar '15

Is Dovecot Director compatible across Dovecot versions? i.e. 2.0.x to 2.1.x or 2.2.x? I have a 6 host cluster in a director configuration which is getting somewhat aged, but it would be very beneficial if the director hosts could be upgraded seamlessly. Is such a thing possible, or will their be compatibility issues? Would a workaround be possible (i.e. migrate to a user system which enforces proxy destinations by another means, then do an upgrade?)

1 0

Fixing broken UTF-8 handling with MySQL driver
by Felix Zandanel 23 Mar '15

23 Mar '15

Hi, I noticed that dovecot's MySQL driver doesn't play well with UTF-8 encoded strings. I presume this issue has been around for a while. However, it still fails with the current release candidate 2.2.16-rc1. I have been using the sieve extdata plugin with a MySQL-backed dict to retrieve a folder name that is then passed to fileinto: fileinto :create "${extdata.folder_name_drafts}"; Whenever this dict returned a string with non-7byte characters, a line such as the following popped up in sieve.log. (This example query should return "Entwürfe".) error: folder name specified for fileinto command is not utf-8: Entw?rfe. Although my MySQL installation is set up to use UTF-8 as the default charset on every level (config, database, table and field), and the character_set_* runtime variables all yield the value "utf8", it still seems that the mysql client library must be instructed to actually use UTF-8 explicitly. Adding the following statement to driver_mysql_connect() fixes the issue for me: mysql_options(db->mysql, MYSQL_SET_CHARSET_NAME, "utf8"); I checked this against mysql 5.5.41. Regards, Felix

2 2

[PATCH] increase fd_limit to max_client_limit automatically
by Lauri Tirkkonen 23 Mar '15

23 Mar '15

Hi, with a low soft limit on file descriptors, dovecot 2.2.15 warns on startup: Warning: fd limit (ulimit -n) is lower than required under max. load (256 < 1000), because of default_client_limit It could try increasing the limit first, and only report the warning if that fails. I'm attaching a patch that does just this. Without the patch, the soft fd limit is kept at whatever it was on dovecot startup: % pfexec plimit $(pgrep dovecot) 18737: /opt/niksula/sbin/dovecot resource current maximum time(seconds) unlimited unlimited file(blocks) unlimited unlimited data(kbytes) unlimited unlimited stack(kbytes) 10240 unlimited coredump(blocks) unlimited unlimited nofiles(descriptors) 256 65536 vmemory(kbytes) unlimited unlimited and with patch applied, it's increased to max_client_limit: % pfexec plimit $(pgrep dovecot) 18775: /opt/niksula/sbin/dovecot resource current maximum time(seconds) unlimited unlimited file(blocks) unlimited unlimited data(kbytes) unlimited unlimited stack(kbytes) 10240 unlimited coredump(blocks) unlimited unlimited nofiles(descriptors) 1000 65536 vmemory(kbytes) unlimited unlimited It should probably be increased to higher than that to account for fds other than client sockets, but I don't have insights into that. -- Lauri Tirkkonen Niksula systems specialist

2 2

Re: fast doveadm search results
by Joseph Tam 23 Mar '15

23 Mar '15

Steffen Kaiser writes: > e.g. put message-id into mail_always_cache_fields > > - From http://dovecot.org/pipermail/dovecot-cvs/2013-May/023261.html > > lib-storage: Allow mail_*cache_fields settings to specify any hdr.* fields ... but I belatedly wrote ... > Maybe you can even add these items into the cache upon delivery, > but someone more knowlegable than I would have to help you with that. The drawback of getting thing in digest form -- you look like a boob when answering late. I defer to Steffen's superior knowledge. Joseph Tam <jtam.home(a)gmail.com>

3 3

2.2.16 link failure on FreeBSD 10.1, with patch
by Jan Mikkelsen 22 Mar '15

22 Mar '15

Hi, Compiling on FreeBSD 10.1 gives linker errors when linking test-message-snippet. The underlying problem is that libiconv appears on the actual linker line after libcharset.a, which leads to unresolved libiconv symbols. This build process worked fine with 2.2.15. The patch below to src/lib-charset/Makefile.in resolves the problem for me and seems broadly correct. libcharset.a does depend on libiconv so it should probably be declared that way. There is probably a more correct way to make the patch to Makefile.am, but I don't really use automake. Hopefully helpful to someone. Jan Mikkelsen. Patch: --- dovecot-2.2.16/src/lib-charset/Makefile.in 2015-03-13 02:41:16.000000000 +1100 +++ dovecot-2.2.16.new/src/lib-charset/Makefile.in 2015-03-21 13:58:21.951293274 +1100 @@ -92,7 +92,7 @@ CONFIG_CLEAN_FILES = CONFIG_CLEAN_VPATH_FILES = LTLIBRARIES = $(noinst_LTLIBRARIES) -libcharset_la_LIBADD = +libcharset_la_LIBADD = $(LTLIBICONV) am_libcharset_la_OBJECTS = charset-iconv.lo charset-utf8.lo libcharset_la_OBJECTS = $(am_libcharset_la_OBJECTS) AM_V_lt = $(am__v_lt_@AM_V@) Error messages: libtool: link: cc -std=gnu99 -I/usr/local/include -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -Wno-duplicate-decl-specifier -Wstrict-aliasing=2 -Wl,--as-needed -o test-message-snippet test-message-snippet.o .libs/message-snippet.o .libs/mail-html2text.o .libs/message-decoder.o .libs/quoted-printable.o .libs/rfc822-parser.o .libs/rfc2231-parser.o /usr/local/lib/libiconv.so -Wl,-rpath -Wl,/usr/local/lib .libs/message-parser.o .libs/message-header-parser.o .libs/message-header-decode.o .libs/message-size.o -L/usr/local/lib ../lib-charset/.libs/libcharset.a ../lib-test/.libs/libtest.a ../lib/.libs/liblib.a ../lib-charset/.libs/libcharset.a(charset-iconv.o): In function `charset_to_utf8_begin': charset-iconv.c:(.text+0x49): undefined reference to `libiconv_open' ../lib-charset/.libs/libcharset.a(charset-iconv.o): In function `charset_to_utf8_end': charset-iconv.c:(.text+0x151): undefined reference to `libiconv_close' ../lib-charset/.libs/libcharset.a(charset-iconv.o): In function `charset_to_utf8_reset': charset-iconv.c:(.text+0x211): undefined reference to `libiconv' ../lib-charset/.libs/libcharset.a(charset-iconv.o): In function `charset_to_utf8_try': charset-iconv.c:(.text+0x425): undefined reference to `libiconv' cc: error: linker command failed with exit code 1 (use -v to see invocation) ../lib-charset/.libs/libcharset.a(charset-iconv.o): In function `charset_to_utf8_begin': charset-iconv.c:(.text+0x49): undefined reference to `libiconv_open' ../lib-charset/.libs/libcharset.a(charset-iconv.o): In function `charset_to_utf8_end': charset-iconv.c:(.text+0x151): undefined reference to `libiconv_close' ../lib-charset/.libs/libcharset.a(charset-iconv.o): In function `charset_to_utf8_reset': charset-iconv.c:(.text+0x211): undefined reference to `libiconv' ../lib-charset/.libs/libcharset.a(charset-iconv.o): In function `charset_to_utf8_try': charset-iconv.c:(.text+0x425): undefined reference to `libiconv'

1 0

Transitioning from version 1 to version 2
by Steve Matzura 21 Mar '15

21 Mar '15

I'm wrestling with transitioning from a 1.0.15 system to a 2.2.25 system. The old dovecot.conf cannot be dropped into position on the new system because so many config options and symbols have changed. It seems every time I change something to match the new formats, I break something else! Anyone out there have maybe half an hour to spare to look at my old and new files to help me whip them into shape?

1 0

FreeBSD ZFS maildir to mdbox
by Roland van Laar 21 Mar '15

21 Mar '15

Hello, I'm converting my mailbox from Maildir to mdbox.. The Maildir is from an 1.2 server. The new server is a virtual FreeBSD ZFS server. The conversion is not working, I'm getting either segfaults or the sync just quits with errors. I also did set with mmap_disable=yes. This didn't resolve the problem. How can I fix this? The same conversion on a virtual ubuntu 14.04 box works with mentions of "filename has the wrong S value" and Corrupted index errors. The FreeBSD errors and dovecot -n are included below: dsync(vagrant): Error: read(./Maildir/cur/1296038598.29562.mail.micite.net,S=20542:2,Sa) failed: Cached message size smaller than expected (20542 < 20640, box=INBOX, UID=475) dsync(vagrant): Error: Maildir filename has wrong S value, renamed the file from ./Maildir/cur/1296038598.29562.mail.micite.net,S=20542:2,Sa to ./Maildir/cur/1296038598.29562.mail.micite.net,S=20640:2,Sa dsync(vagrant): Error: Corrupted index cache file ./Maildir/dovecot.index.cache: Broken physical size for mail UID 475 dsync(vagrant): Error: write(/home/vagrant/mdbox/storage/m.12) failed: Invalid argument dsync(vagrant): Error: copy: i_stream_read(./Maildir/cur/1296038598.29562.mail.micite.net,S=20542:2,Sa) failed: Cached message size smaller than expected (20542 < 20640, box=INBOX, UID=475) dsync(vagrant): Error: read(./Maildir/cur/1296038598.29562.mail.micite.net,S=20542:2,Sa) failed: Cached message size smaller than expected (20542 < 20640, box=INBOX, UID=475) (uid=475, box=INBOX) dsync(vagrant): Error: Mailbox INBOX: read(msg input) failed: Cached message size smaller than expected (20542 < 20640, box=INBOX, UID=475) dsync(vagrant): Error: read(./Maildir/cur/1296038598.29562.mail.micite.net,S=20542:2,Sa) failed: Cached message size smaller than expected (20542 < 20640, box=INBOX, UID=475) (uid=475, box=INBOX) dsync(vagrant): Panic: file mail-index-transaction-update.c: line 964 (mail_index_update_ext): assertion failed: (seq > 0 && (seq <= mail_index_view_get_messages_count(t->view) || seq <= t->last_new_seq)) Abort (core dumped) (gdb) core doveadm.core Core was generated by `doveadm'. Program terminated with signal 6, Aborted. #0 0x00000008013f8a1a in ?? () (gdb) bt #0 0x00000008013f8a1a in ?? () #1 0x00000008013f7149 in ?? () #2 0x0000000000000000 in ?? () or with no core dump: % doveadm sync maildir:./Maildir dsync(vagrant): Error: read(./Maildir/cur/1296466748.64525.mail.micite.net,S=7629:2,Sa) failed: Cached message size smaller than expected (7629 < 7694, box=INBOX, UID=899) dsync(vagrant): Error: Maildir filename has wrong S value, renamed the file from ./Maildir/cur/1296466748.64525.mail.micite.net,S=7629:2,Sa to ./Maildir/cur/1296466748.64525.mail.micite.net,S=7694:2,Sa dsync(vagrant): Error: Corrupted index cache file ./Maildir/dovecot.index.cache: Broken physical size for mail UID 899 dsync(vagrant): Error: write(/home/vagrant/mdbox/storage/m.11) failed: Invalid argument dsync(vagrant): Error: copy: i_stream_read(./Maildir/cur/1296466748.64525.mail.micite.net,S=7629:2,Sa) failed: Cached message size smaller than expected (7629 < 7694, box=INBOX, UID=899) dsync(vagrant): Error: read(./Maildir/cur/1296466748.64525.mail.micite.net,S=7629:2,Sa) failed: Cached message size smaller than expected (7629 < 7694, box=INBOX, UID=899) (uid=899, box=INBOX) dsync(vagrant): Error: Mailbox INBOX: read(msg input) failed: Cached message size smaller than expected (7629 < 7694, box=INBOX, UID=899) dsync(vagrant): Error: read(./Maildir/cur/1296466748.64525.mail.micite.net,S=7629:2,Sa) failed: Cached message size smaller than expected (7629 < 7694, box=INBOX, UID=899) (uid=899, box=INBOX) % dovecot -n # 2.2.16: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 10.1-RELEASE-p6 amd64 mail_location = mdbox:~/mdbox namespace { inbox = yes location = prefix = separator = . } passdb { args = /usr/local/etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } protocols = lmtp imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } user = vmail } ssl = required ssl_cert = </etc/ssl/ec/ec.crt ssl_key = </etc/ssl/ec/ec.key userdb { args = /usr/local/etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } protocol lmtp { postmaster_address = postmaster(a)micite.net }

2 2

imap-login SSLv3 causes signal 11, core dump and DoS. ssl_protocols = ??
by James 21 Mar '15

21 Mar '15

Connecting to dovecot with ssl3 causes imap-login to die: $ openssl s_client -connect localhost:993 -ssl3 CONNECTED(00000003) 4277630796:error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:s3_pkt.c:1461:SSL alert number 40 4277630796:error:1409E0E5:SSL routines:ssl3_write_bytes:ssl handshake failure:s3_pkt.c:645: --- no peer certificate available --- No client certificate CA names sent --- SSL handshake has read 7 bytes and written 0 bytes --- New, (NONE), Cipher is (NONE) Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : SSLv3 Cipher : 0000 Session-ID: Session-ID-ctx: Master-Key: Key-Arg : None PSK identity: None PSK identity hint: None SRP username: None Start Time: 1426851034 Timeout : 7200 (sec) Verify return code: 0 (ok) --- syslog: Mar 20 11:30:35 MAILHOST dovecot: [ID 583609 mail.crit] imap-login: Fatal: master: service(imap-login): child 21918 killed with signal 11 (core dumped) [last ip=127.0.0.1] dovecot.conf had: ssl_protocols = !SSLv2 !SSLv3 removing that line stops the core dump and syslog then shows: Mar 20 11:36:25 MAILHOST dovecot: [ID 583609 mail.info] imap-login: Disconnected (disconnected before auth was ready, waited 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, TLS handshaking: SSL_accept() failed: error:14076102:SSL routines:SSL23_GET_CLIENT_HELLO:unsupported protocol, session=<eqr1ubYRWgB/AAAB> the "SSL23_GET_CLIENT_HELLO:unsupported protocol" seems to do what I thought the ssl_protocols setting did. Do I still need, if I ever needed, the "ssl_protocols = " setting? James. # dovecot -n # 2.2.16: /etc/opt/XXXX/dovecot/dovecot.conf # Pigeonhole version 0.4.7 # OS: SunOS 5.10 i86pc auth_mechanisms = plain login digest-md5 cram-md5 base_dir = /var/opt/XXXX/dovecot/ lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes login_trusted_networks = 111.222.333.444/24 mail_gid = vmail mail_home = /XXXXXX/XXXX/%d/%n mail_location = maildir:/XXXXX/XXXX/%d/%n/Maildir mail_max_userip_connections = 20 mail_plugins = quota mail_uid = vmail mailbox_idle_check_interval = 10 secs managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate passdb { args = /etc/opt/XXXX/dovecot/dovecot-sql.conf driver = sql } plugin { fts_autoindex = yes quota = maildir:User quota quota_rule = *:storage=1G quota_rule2 = Trash:storage=+10% quota_warning = storage=90%% quota-warning 90 %u quota_warning2 = storage=95%% quota-warning 95 %u quota_warning3 = storage=99%% quota-warning 99 %u sieve = /XXXXX/XXXX/%d/%n/dovecot.sieve sieve_dir = /XXXXX/XXXX/%d/%n/sieve } protocols = imap lmtp sieve service auth { drop_priv_before_exec = yes unix_listener auth-client { mode = 0660 } unix_listener auth-master { mode = 0600 } user = root } service imap-login { chroot = drop_priv_before_exec = yes executable = imap-login -D service_count = 1 user = dovecot } service lmtp { group = vmail unix_listener lmtp { mode = 0666 } user = vmail } service quota-warning { executable = script /etc/opt/XXXX/dovecot/quota-warning user = vmail } ssl_cert = </etc/opt/XXXX/dovecot/dovecot.pem ssl_cipher_list = AES128+EECDH:AES128+EDH ssl_key = </etc/opt/XXXX/dovecot/dovecot.pem ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 userdb { driver = prefetch } userdb { args = /etc/opt/XXXX/dovecot/dovecot-sql.conf driver = sql } protocol lda { auth_socket_path = /var/opt/XXXX/dovecot/auth-master mail_plugins = quota sieve postmaster_address = postmaster@XXXXXXXX sendmail_path = /opt/XXXX/sbin/exim } protocol pop3 { mail_plugins = quota } protocol imap { mail_plugins = quota imap_quota } protocol lmtp { mail_plugins = quota sieve postmaster_address = postmaster@XXXXXX sendmail_path = /opt/XXXX/sbin/exim }

3 9

Strange empty folders 1 1 1 1 1
by Samuel Williams 20 Mar '15

20 Mar '15

I just updated to the latest dovecot from 1.2 and it has been working great for most of my clients. But one client,who is using Outlook, has found that hundreds of folders have been created, e.g. admin@domain Deleted Items 1 admin@domain Deleted Items 1 1 admin@domain Deleted Items 1 1 1 .... admin@domain Deleted Items 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 This appears to be affecting all folders in his account, across multiple accounts for his domain. It isn't affecting any other user, even other users using outlook. All the folders are empty. Just wondering if anyone has any suggestions or ideas why this is happening. Thanks Samuel

1 0

fast sync vs. full sync
by Patrick Westenberg 20 Mar '15

20 Mar '15

Hi everyone, can anybody explain the difference between Dovecots fast sync and full sync in replication mode? Regards Patrick

2 1

indexer-worker panics with latest mercurial
by Laeeth Isharc 20 Mar '15

20 Mar '15

Hi. I am seeing the following in my logs. Happy to downgrade to an earlier version if you think this might be the problem, but dovecot.org is extremely slow (and has been for months) so I found it easier just to pull the latest from mercurial. Thanks. Laeeth Mar 12 20:48:39 indexer: Error: Indexer worker disconnected, discarding 1 reques ts for laeeth(a)laeeth.com Mar 12 20:48:39 indexer-worker(laeeth(a)laeeth.com): Fatal: master: service(indexe r-worker): child 24003 killed with signal 6 (core dumps disabled) Mar 12 20:49:01 dsync-local(laeeth(a)laeeth.com): Error: Couldn't lock /home/mail/ laeeth_laeeth_com/.dovecot-sync.lock: Timed out after 30 seconds Mar 12 20:49:16 indexer-worker(laeeth(a)laeeth.com): Error: fts_tika: PUT http://l ocalhost:9997/tika/ failed: 500 Server Error Mar 12 20:49:17 indexer-worker(rosie(a)kaleidicassociates.com): Warning: I/O leak: 0x7fc47d60fcf0 (line 127, fd 25) Mar 12 20:49:17 indexer-worker(rosie(a)kaleidicassociates.com): Panic: file ioloop .c: line 39 (io_add_file): assertion failed: (callback != NULL) Mar 12 20:49:17 indexer-worker(rosie(a)kaleidicassociates.com): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x76c40) [0x7fc47d63fc40] -> /usr/lib64/dovecot/libdovecot.so.0(+0x76d1e) [0x7fc47d63fd1e] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7fc47d5f02e5] -> /usr/lib64/dovecot/libdovecot.so.0(+0x87bd0) [0x7fc47d650bd0] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_move_io+0x3e) [0x7fc47d65183e] -> /usr/lib64/dovecot/libdovecot.so.0(connection_switch_ioloop+0x14) [0x7fc47d63db14] -> /usr/lib64/dovecot/libdovecot.so.0(http_client_switch_ioloop+0x28) [0x7fc47d614448] -> /usr/lib64/dovecot/libdovecot.so.0(+0x43876) [0x7fc47d60c876] -> /usr/lib64/dovecot/lib21_fts_solr_plugin.so(solr_connection_post_more+0x29) [0x7fc47c733159] -> /usr/lib64/dovecot/lib21_fts_solr_plugin.so(+0x3637) [0x7fc47c72f637] -> /usr/lib64/dovecot/lib20_fts_plugin.so(+0x6d83) [0x7fc47cf5dd83] -> /usr/lib64/dovecot/lib20_fts_plugin.so(fts_build_mail+0x614) [0x7fc47cf5e3c4] -> /usr/lib64/dovecot/lib20_fts_plugin.so(+0xc14e) [0x7fc47cf6314e] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_precache+0x19) [0x7fc47d8ef429] -> dovecot/indexer-worker() [0x40237c] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x4c) [0x7fc47d65155c] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xbb) [0x7fc47d65249b] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x9) [0x7fc47d6515c9] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7fc47d651648] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fc47d5f5703] -> dovecot/indexer-worker(main+0xcb) [0x401e7b] -> /lib64/libc.so.6(__libc_start_main+0xf5) [0x32c6021d65] -> dovecot/indexer-worker() [0x401f25] Mar 12 20:49:17 indexer: Error: Indexer worker disconnected, discarding 15 reque sts for rosie(a)kaleidicassociates.com Mar 12 20:49:17 indexer-worker(rosie(a)kaleidicassociates.com): Fatal: master: service(indexer-worker): child 24022 killed with signal 6 (core dumps disabled) Mar 12 20:49:17 indexer-worker(laeeth(a)kaleidicassociates.com): Warning: I/O leak: 0x7f22c4d4dcf0 (line 127, fd 23) Mar 12 20:49:17 indexer-worker(laeeth(a)kaleidicassociates.com): Panic: file ioloop.c: line 829 (io_loop_move_io): assertion failed: ((old_io->condition & IO_NOTIFY) == 0) Mar 12 20:49:17 indexer-worker(laeeth(a)kaleidicassociates.com): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x76c40) [0x7f22c4d7dc40] -> /usr/lib64/dovecot/libdovecot.so.0(+0x76d1e) [0x7f22c4d7dd1e] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7f22c4d2e2e5] -> /usr/lib64/dovecot/libdovecot.so.0(+0x888ba) [0x7f22c4d8f8ba] -> /usr/lib64/dovecot/libdovecot.so.0(connection_switch_ioloop+0x14) [0x7f22c4d7bb14] -> /usr/lib64/dovecot/libdovecot.so.0(http_client_switch_ioloop+0x28) [0x7f22c4d52448] -> /usr/lib64/dovecot/libdovecot.so.0(+0x43876) [0x7f22c4d4a876] -> /usr/lib64/dovecot/lib21_fts_solr_plugin.so(solr_connection_post_more+0x29) [0x7f22c3e71159] -> /usr/lib64/dovecot/lib21_fts_solr_plugin.so(+0x3637) [0x7f22c3e6d637] -> /usr/lib64/dovecot/lib20_fts_plugin.so(+0x6d83) [0x7f22c469bd83] -> /usr/lib64/dovecot/lib20_fts_plugin.so(fts_build_mail+0x123) [0x7f22c469bed3] -> /usr/lib64/dovecot/lib20_fts_plugin.so(+0xc14e) [0x7f22c46a114e] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_precache+0x19) [0x7f22c502d429] -> dovecot/indexer-worker() [0x40237c] -> /usr/lib64/dovecot/libdovecot.so.0(io _loop_call_io+0x4c) [0x7f22c4d8f55c] -> /usr/lib64/dovecot/libdovecot.s o.0(io_loop_handler_run_internal+0xbb) [0x7f22c4d9049b] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x9) [0x7f22c4d8f5c9] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f22c4d8f648] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f22c4d33703] -> dovecot/indexer-worker(main+0xcb) [0x401e7b] -> /lib64/libc.so.6(__libc_start_main+0xf5) [0x32c6021d65] -> dovecot/indexer-worker() [0x401f25] Mar 12 20:49:17 indexer: Error: Indexer worker disconnected, discarding 6 requests for laeeth(a)kaleidicassociates.com Mar 12 20:49:17 indexer-worker(laeeth(a)kaleidicassociates.com): Fatal: master: service(indexer-worker): child 24020 killed with signal 6 (core dumps disabled) Mar 12 20:49:26 indexer-worker(laeeth(a)laeeth.com): Warning: I/O leak: 0x7f0d5aa00cf0 (line 127, fd 23) Mar 12 20:49:26 indexer-worker(laeeth(a)laeeth.com): Panic: file ioloop-iolist.c: line 22: unreached Mar 12 20:49:26 indexer-worker(laeeth(a)laeeth.com): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x76c40) [0x7f0d5aa30c40] -> /usr/lib64/dovecot/libdovecot.so.0(+0x76d1e) [0x7f0d5aa30d1e] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7f0d5a9e12e5] -> /usr/lib64/dovecot/libdovecot.so.0(+0x88a0d) [0x7f0d5aa42a0d] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handle_add+0x3b) [0x7f0d5aa4319b] -> /usr/lib64/dovecot/libdovecot.so.0(+0x87b61) [0x7f0d5aa41b61] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_move_io+0x3e) [0x7f0d5aa4283e] -> /usr/lib64/dovecot/libdovecot.so.0(connection_switch_ioloop+0x14) [0x7f0d5aa2eb14] -> /usr/lib64/dovecot/libdovecot.so.0(http_client_switch_ioloop+0x28) [0x7f0d5aa0

2 1

[Dovecot] imapc - different settings for different namespaces
by Timo Sirainen 20 Mar '15

20 Mar '15

Originally I was planning on allowing all kinds of mail settings inside namespace {}, including imapc_* settings. But that's a bit difficult to implement (although I think it will happen some day). So for now I was thinking: imapc foo { host = imap.foo.com master_user = foomaster password = foopass } imapc bar { host = imap.bar.com ... } namespace { prefix = foo/ location = imapc:foo } namespace { prefix = bar/ location = imapc:bar } So basically if the path after imapc isn't absolute (/path or ~/path), then treat the path as the imapc section name and use its settings. Anyone have any improvement suggestions? I was planning on adding this to v2.2.3. I'm not sure if the section names should be "imapc" or something else (e.g. imap_remote {}).

2 2

core not dumped
by James 20 Mar '15

20 Mar '15

There is some underlying problem with imap-login but in order to debug it I'd like to see a core file. On error dovecot reports "core not dumped". If I put "abort()" in the code at the point it is reporting then a core file is written, so there is no OS reason why a core can not be written. It appears to be dovecot's choice to control the child. In an attempt to obtain a core file I have: service imap-login { chroot = drop_priv_before_exec = yes user = dovecot } How can I make imap-login to produce a core file? Syslog error report: Mar 18 09:22:28 MAILHOST dovecot: [ID 583609 mail.crit] imap-login: Fatal: master: service(imap-login): child 10812 killed with signal 11 (core not dumped) [last ip=111.222.333.444] Should anyone care at this point (before I've looked at a core file) the error is related to; imap-login: Disconnected (no auth attempts in 0 secs): user=<>, James.

3 4

Re: fast doveadm search results
by Joseph Tam 20 Mar '15

20 Mar '15

Vu Ngoc VU <vvu(a)mcra.fr> writes: > My goal is to be able to find mails quickly with "doveadm search". > We are using dovecot in a corporate. And some managers, sometimes ask to delete some messages. > These messages are "unwanted" ones: mistakenly sent, defamatory... > > So, that situations appear rarely, but when asked, they expected me to > deleted quickly these messages from few to thousands of users > mailboxes. > > Is that possible to change behaviour of Dovecot, some headers like > sender, message-id, date are stored in cache for at least 48h? (7 days > would be better). So is this a fair summary of what you are asking: you want to load dovecot's caches with searchable items (i.e. specified headers) *and* have them expire and removed from caches after a preset amount of time? Caches are persistent: once an item is cached, it stays in the cache. I can't think of a good way to purge them without a lot of bother, but maybe you don't really need this. If you want to preload the cache with searchable items, you can periodically run a search/fetch command, which will load the cache with headers you want. http://www.dovecot.org/list/dovecot/2010-October/053521.html Maybe you can even add these items into the cache upon delivery, but someone more knowlegable than I would have to help you with that. The FTS/Solr plugin might also help. You seem to be optimizing the wrong problem. Reading between the lines of your message, your management wants a technical solution to a human problem (someone did an oops). Joseph Tam <jtam.home(a)gmail.com>

1 0

Released Pigeonhole v0.4.7 for Dovecot v2.2.16
by Stephan Bosch 20 Mar '15

20 Mar '15

Hello Dovecot users, Here is the final 0.4.7 release. No changes were committed since the last release candidate. Changelog v0.4.7: * editheader extension: Made protection against addition and deletion of headers configurable separately. Also, the `Received' and `Auto-Submitted' headers are no longer protected against addition by default. * Turned message envelope address parse errors into warnings. * The interpreter now accepts non-standard domain names, e.g. containing '_'. + Implemented the Sieve index extension (RFC 5260). + Implemented support for the mboxmetadata and servermetadata extensions (RFC 5490). + Implemented new sieve commands for the doveadm command line utility. These commands are currently limited to ManageSieve operations, but the other current sieve tools will be migrated to doveadm in the near future as well. + Added more debug output about binary up-to-date checking. + Added script metadata to binary dump output. - Fixed Sieve script binary up-to-date checking by normalizing the script location. - The Sieve interpreter now flushes the duplicate database during start phase of result execution rather than commit phase. This makes sure locks on the duplicate database are released as soon as possible, preventing contention. - Performed a few optimizations in the lexical scanner of the language. - Fixed bug in `:matches' match-type that made a pattern without wildcards match as if there were a '*' at the beginning. - Fixed crash in validation of the string parameter of the comparator tag. - extprograms extension: Made sure supplemental group privileges are also dropped. This was a problem reported by Debian lintian. - Fixed bug in handling of binary errors for action side-effects and message overrides. - file script storage: Restructured storage initialization to address backwards compatibility issues. - dict script storage: Fixed small memory allocation bug. The release is available as follows: http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.7.tar… http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.7.tar… Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

check if anvil is working
by Leonardo Rodrigues 19 Mar '15

19 Mar '15

Hi, Is there any way of making sure the anvil service, used to penalty login fails, is working ? I dont see anything on the logs regarding it neither have it configured. It's not on my configuration files, but it can be seen on a 'dovecot -a' dump. Should it be logging something ? Should i have enabled it somehow ? Thanks for the answers. [root@correio log]# dovecot --version 2.2.13 (from dovecot -a dump) service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } -- Atenciosamente / Sincerily, Leonardo Rodrigues Solutti Tecnologia http://www.solutti.com.br Minha armadilha de SPAM, NÃO mandem email gertrudes(a)solutti.com.br My SPAMTRAP, do not email it

1 0

fast doveadm search results
by Vu Ngoc VU 19 Mar '15

19 Mar '15

hello, I've posted same question here months ago. But obtaine no answer, even not a "you question is stupid". So I don't know what to think about that. My goal is to be able to find mails quickly with "doveadm search". We are using dovecot in a corporate. And some managers, sometimes ask to delete some messages. These messages are "unwanted" ones: mistakenly sent, defamatory... So, that situations appear rarely, but when asked, they expected me to deleted quickly these messages from few to thousands of users mailboxes. Is that possible to change behaviour of Dovecot, some headers like sender, message-id, date are stored in cache for at least 48h? (7 days would be better). I've read this page : http://wiki2.dovecot.org/Design/Indexes/Cache but cannot understand every parts. "A specific decision can be forced by ORing it with MAIL_CACHE_DECISION_FORCED." Is OR in this sentence like AND/OR comparators? Where to put "MAIL_CACHE_DECISION_FORCED"? "mail-cache-decisions.c file contains the rules how Dovecot changes the decisions." <-- is it in this file? My setup is 2.2.9 on Ubuntu 14.04 running on OpenVZ containers with 2 Director and 2 imap/pop3 backends. The storage is shared via NFS. Is this the performance problem? If dovecot has metadata I want in its cache, I cannot see how this is a problem. Can these settings be useful for my case? mail_always_cache_fields = mail_cache_fields = flags mail_cache_min_mail_count = 0 mail_never_cache_fields = imap.envelope Thanks.

2 2

Support for multiple passwords?
by Conrad Kostecki 18 Mar '15

18 Mar '15

Hi! Currently, the passwords are stored in plaintext for my dovecot, as I am still using cram-md5 AND digest-md5. I have still to offer that, as I have some deprecated clients, therefore, I am unable to hash at least those passwords for that accounts. I've found on the Wiki: > In future it's possible that Dovecot could support multiple passwords > in different schemes for a single user. Is there any news about this? Are there still any plans to support this maybe in future? For my understanding, that would solve my problem, that I could define a password in both schemes (cram and digest) and don't have to use plaintext password? Cheers Conrad

3 6

passwd file for quota
by Cliff Hayes 18 Mar '15

18 Mar '15

I need to implement quota. I read as much as I could including http://wiki2.dovecot.org/HowTo/SimpleVirtualInstall But my current /etc/passwd file does not have the password in it as shown in dovecot docs ... there is an x where the password should be. I created a program that creates a passwd file in the proper format with the proper extra quota fields for all users (except it has an x where the password should be). I plan to store it in /etc/dovecot How do I get dovecot to stop looking at /etc/passwd and start looking at /etc/dovecot/passwd? And hopefully that will not affect how it gets the password (pam) because when users change their password from webmail of course dovecot will need to be looking in the same place. # dovecot -n output # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-431.29.2.el6.x86_64 x86_64 Scientific Linux release 6.5 (Carbon) auth_failure_delay = 5 secs auth_username_format = %Ln auth_verbose_passwords = plain first_valid_uid = 9 mail_access_groups = mail mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_after = /dovecotSieveAfter/ sieve_dir = ~/sieve } protocols = imap lmtp sieve service managesieve-login { inet_listener sieve { port = 4190 } } ssl_ca = </etc/pki/dovecot/certs/intermediate20150202.crt ssl_cert = </etc/pki/dovecot/certs/avalon20150202.crt ssl_key = </etc/pki/dovecot/private/avalon20150129.key ssl_verify_client_cert = yes userdb { driver = passwd } protocol lmtp { log_path = /var/log/dovecot-lmtp.log mail_plugins = " sieve" } protocol lda { log_path = /var/log/dovecot-lda.log mail_plugins = " sieve" }

2 4

Roundcubemail problem with Dovecot
by Robert Moskowitz 18 Mar '15

18 Mar '15

I am getting "Connection to storage server failed." in roundcubemail. On doing a google search If find: http://help.directadmin.com/item.php?id=473 Which puts the problem at dovecot. I did get a dovecot update back on 3-5 and that would match to my one roundcube mail user complaining and the delays I am seeing with thunderbird and outlook users. So with my setup, I am trying to figure what are the index files to delete. Say for myself, I am seeing: /home/vmail/htt-consult.com/rgm/dovecot.index /home/vmail/htt-consult.com/rgm/dovecot.index.cache /home/vmail/htt-consult.com/rgm/dovecot.index.log /home/vmail/htt-consult.com/rgm/.Drafts/dovecot.index /home/vmail/htt-consult.com/rgm/.Drafts/dovecot.index.cache /home/vmail/htt-consult.com/rgm/.Drafts/dovecot.index.log /home/vmail/htt-consult.com/rgm/.Sent/dovecot.index /home/vmail/htt-consult.com/rgm/.Sent/dovecot.index.cache /home/vmail/htt-consult.com/rgm/.Sent/dovecot.index.log /home/vmail/htt-consult.com/rgm/.Spam/dovecot.index /home/vmail/htt-consult.com/rgm/.Spam/dovecot.index.cache /home/vmail/htt-consult.com/rgm/.Spam/dovecot.index.log /home/vmail/htt-consult.com/rgm/.Trash/dovecot.index /home/vmail/htt-consult.com/rgm/.Trash/dovecot.index.cache /home/vmail/htt-consult.com/rgm/.Trash/dovecot.index.log Do I delete all of these? The index.cache files are quite large.

1 1

Re: Dovecot current number of connections being used.
by Joseph Tam 18 Mar '15

18 Mar '15

Jaime Ventura writes: > Is there an easy way to get how many connections are being handled at a > moment? This works: doveadm who -1 2>/dev/null | wc -l If yopu only want to coutn IMAP connections (not POP3), doveadm who -1 2>/dev/null | grep -Fc imap Joseph Tam <jtam.home(a)gmail.com>

2 1

Proxying of non "plain" SASL mechnisms.
by Peter Mogensen 18 Mar '15

18 Mar '15

Hi, I understand from earlier discussions that the reason dovecot doesn't support proxying of other SASL mechanisms than those which supply the plaintext password is that in general it would be possible to proxy any SASL mechanism since it might protect against man-in-the-middle attacks (which would prevent proxying). However, that has led to choice between letting users use PLAIN (or equivalent), or to have the proxy access the target hosts by "master" password. Of course, having the plaintext password the proxy could in principle do other challenge/response SASL handshakes with the target backend, but right now only LOGIN and PLAIN is implemented. So I wondered about the rationale for not just forward the SASL handshake. - First, blindly forwardning will not do, since the mech data has to be decoded anyway to do any per/user passdb lookup (to, say, find the target host). But you don't need authentication to actually succeed to do that. You only need AuthZ-id or AuthN-id. - Secondly, the design of the interaction between imap-login processes and the auth-service in general prevent in general to forward multi-handshake SASL mechanisms, since the authentication must be done before the proxying can be started. But it doesn't prevent forwarding of single handshake SASL mechanisms which use SASL-IR. - Thirdly, while it's correct that some SASL mechanisms protect against man-in-the-middle attacks, that doesn't apply for most single-handshake SASL-IR mechanisms unless they do some kind of channel-binding. (like SASL EXTERNAL) For example, the GS2-KRB5 SASL mech would be perfectly forwarded if just the Kerberos ticket doesn't put restrictions on the client IP-address. So, why not just extend the support for proxy authentication forwarding to any single-handskake SASL-IR mechanism, which doesn't use channel-binding? (which includes PLAIN, but also GS2-KRB5, and possibly others). /Peter

2 2

Dovecot 2.2.15 issues with global ACL
by Ovidiu Moldovan 18 Mar '15

18 Mar '15

Hello, We have upgraded from Dovecot 2.2.13 to 2.2.15 and we are using global ACL file. The content of the ACL file is as following: * owner r INBOX owner lrwstipekxa INBOX/* owner lrwstipekxa user owner rwstipekxa user/* owner rwstipekxa This worked fine but after update any user cannot see any folders from under the INBOX, also they cannot create any new folders. Error into the logs are like this: Debug: acl: Mailbox not in dovecot-acl-list: INBOX Debug: acl: Mailbox not in dovecot-acl-list: INBOX/Chats Debug: acl: Mailbox not in dovecot-acl-list: INBOX/Draft Debug: acl: Mailbox not in dovecot-acl-list: INBOX/INBOX .... I can only see one acl change log at version 2.2.14: http://www.dovecot.org/list/dovecot-news/2014-October/000276.html acl: Global ACL file now supports "quotes" around patterns. But I could not find the reason why the global acl file does not work anymore? Br, Ova

2 2