- dovecot - dovecot.org

replication - more than 2 servers?
by Ron Cleven 17 Dec '14

17 Dec '14

We tested dovecot for a fair amount of time and decided finally to put it into production under CentOS 7 (we are running 2.2.10). I just joined the list, so I apologize for what is probably a question that has been answered many times, but I was wondering if there are any plans to implement replication among 3 or more servers (all "masters", as with 2)? As best as I can tell, replication seems to be limited to 2 servers, and it is not obvious to me even how more than 2 would be supported syntactically in the configs. That is, what might be an example of the "mail_replica" clauses if such a thing was supported?

3 2

Replication sieve scripts.
by Jan Wideł 16 Dec '14

16 Dec '14

Hi, according to changelog 2.2.rc3, dsync should replicate sieve scripts. Do I need turn on or switch some option(s), for this to work? Replication of mailboxes works great, only sieve scripts not. root@mail-1-proidea ~ # dpkg -l dovecot* | grep ^ii ii dovecot-core 2:2.2.15-1~auto+0 amd64 secure POP3/IMAP server - core files ii dovecot-imapd 2:2.2.15-1~auto+0 amd64 secure POP3/IMAP server - IMAP daemon ii dovecot-ldap 2:2.2.15-1~auto+0 amd64 secure POP3/IMAP server - LDAP support ii dovecot-lmtpd 2:2.2.15-1~auto+0 amd64 secure POP3/IMAP server - LMTP server ii dovecot-managesieved 2:2.2.15-1~auto+0 amd64 secure POP3/IMAP server - ManageSieve server ii dovecot-pop3d 2:2.2.15-1~auto+0 amd64 secure POP3/IMAP server - POP3 daemon ii dovecot-sieve 2:2.2.15-1~auto+0 amd64 secure POP3/IMAP server - Sieve filters support My configuration (doveconf-n): # 2.2.15: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-grsec-amd64 x86_64 Debian 7.7 ext4 auth_mechanisms = plain login auth_verbose = yes default_client_limit = 5000 default_process_limit = 500 default_vsz_limit = 768 M doveadm_password = xxxxxxxxx doveadm_port = 10900 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_gid = vmail mail_location = maildir:/srv/mail/virtual/%d/%u mail_plugins = " notify replication mail_log" mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate imapflags notify namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size mail_replica = tcps:mail2.xxxxxxx:10900 sieve = file:~/sieve;active=~/dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags sieve_global_dir = /etc/dovecot/sieve/global/ sieve_global_path = /etc/dovecot/sieve/default.sieve } postmaster_address = postmaster(a)networkers.pl protocols = " imap lmtp sieve pop3" replication_max_conns = 5 service aggregator { fifo_listener replication-notify-fifo { user = vmail } unix_listener replication-notify { user = vmail } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-client { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = vmail mode = 0660 user = vmail } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } service doveadm { inet_listener { address = x.x.x.x port = 10900 ssl = yes } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_limit = 500 process_min_avail = 2 } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } } service managesieve { process_limit = 1024 } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { group = vmail mode = 0660 user = dovecot } } ssl = required ssl_cert = </etc/dovecot/dovecot.pem ssl_client_ca_dir = /etc/ssl/certs ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext default_fields = home=/srv/mail/virtual/%d/%u driver = ldap } protocol lmtp { mail_plugins = " notify replication mail_log quota sieve" postmaster_address = postmaster(a)networkers.pl } protocol lda { auth_socket_path = /var/run/dovecot/auth-master mail_plugins = " notify replication mail_log sieve sieve autocreate" } protocol imap { mail_max_userip_connections = 20 } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole managesieve_max_line_length = 65536 } -- Jan Wideł Senior System Administrator e-mail: jan.widel(a)networkers.pl mobile: +48 797 004 946 www: http://www.networkers.pl GPG: http://networkers.pl/GPG/2E7359CD.asc

5 11

Problem with TLS and Outlook 2010
by Wayne Andersen 16 Dec '14

16 Dec '14

Dovecot 2.0.9 So I am trying to get my Outlook 2010 client to use TLS with Dovecot. The Outlook error that I get is: Log onto incoming mail server (IMAP): A secure connection to the server cannot be established. I have set the port to 143,993,995 none of them work, and the security to TLS. I have all of the certificates in the full chain installed on my machine and when viewing them they all show This certificate is OK. I have turned on Outlook logging and am seeing this: C:\PROGRA~2\MICROS~2\Office14\OUTLMIME.DLLIMAP: 14:48:40 [db] Intializing connection [131383B0] IMAP: 14:48:40 [db] Setting internal codepage to 1200 IMAP: 14:48:40 [db] Connecting to 'mail.mydomain.com' on port 143. IMAP: 14:48:40 [db] OnNotify: asOld = 0, asNew = 2, ae = 0 IMAP: 14:48:40 [db] srv_name = "mail.mydomain.com" srv_addr = 174.46.198.101:143 IMAP: 14:48:40 [db] OnNotify: asOld = 2, asNew = 3, ae = 1 IMAP: 14:48:40 [db] OnNotify: asOld = 3, asNew = 4, ae = 0 IMAP: 14:48:40 [db] OnNotify: asOld = 4, asNew = 5, ae = 2 IMAP: 14:48:40 [db] OnNotify: asOld = 5, asNew = 5, ae = 4 IMAP: 14:48:40 [db] OnNotify: asOld = 5, asNew = 5, ae = 3 IMAP: 14:48:40 [rx] * OK [CAPABILITY IMAP4REV1 LOGIN-REFERRALS IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready. ß----- not seeing the STARTTLS capability here. IMAP: 14:48:40 [tx] sx59 CAPABILITY IMAP: 14:48:40 [db] OnNotify: asOld = 5, asNew = 5, ae = 3 IMAP: 14:48:40 [rx] * CAPABILITY IMAP4REV1 LOGIN-REFERRALS IDLE AUTH=PLAIN AUTH=LOGIN IMAP: 14:48:40 [rx] sx59 OK Capability completed. IMAP: 14:48:40 [db] ERROR: "A secure connection to the server cannot be established.", hr=0x800CCCE1 IMAP: 14:48:40 [db] Connection to 'mail.mydomain.com' closed. IMAP: 14:48:40 [db] OnNotify: asOld = 5, asNew = 0, ae = 5 >From a windows 7 client if I do a telnet mail.mydomain.com 143 I get: * OK [CAPABILITY IMAP4REV1 LOGIN-REFERRALS IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready. ß--- do not see STARTTLS in the capability list. Same windows client: C:\OpenSSL-Win64\bin>openssl.exe s_client -connect mail.mydomain.com:993 WARNING: can't open config file: /usr/local/ssl/openssl.cnf Loading 'screen' into random state - done CONNECTED(0000018C) depth=2 C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Certification Authority verify error:num=20:unable to get local issuer certificate ß--- Yes I see this and it may be an issue, but this certificate exist and is valid. verify return:0 --- Certificate chain 0 s:/OU=Domain Control Validated/OU=COMODO SSL Wildcard/CN=*.mydomain.com i:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA 1 s:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA i:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Certification Authority 2 s:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Certification Authority i:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External CA Root --- Server certificate -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIQWCEHgEVoKToQkXoG3+g1cTANBgkqhkiG9w0BAQsFADCB kDELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G fs2e2XCjkEVu/YR7exKkmTf9wkhZ+tD0+S8= -----END CERTIFICATE----- subject=/OU=Domain Control Validated/OU=COMODO SSL Wildcard/CN=*.mydomain.com issuer=/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA --- No client certificate CA names sent --- SSL handshake has read 5169 bytes and written 497 bytes --- New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-GCM-SHA384 Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE SSL-Session: Protocol : TLSv1.2 Cipher : DHE-RSA-AES256-GCM-SHA384 Session-ID: 281D21C81FA6E7656B9CA2BD13590DDE0094CC8FA43FFD31DFEEDEC74F2511BF Session-ID-ctx: Master-Key: AF36CFDBBAA955270A48E2E9740F671299511DA1B3EEAFFAEC582E100DE519EC7CBC612ED686 DBBBFE06B9D6E535B837 Key-Arg : None PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 300 (seconds) TLS session ticket: 0000 - 1d 2a e7 fd 94 9d a2 84-90 52 32 2f e7 89 28 59 .*.......R2/..(Y 0010 - 12 d5 b3 56 0e a7 71 c4-84 53 01 ec 95 97 59 4e ...V..q..S....YN 0020 - ac 17 3f 3f dc b6 b0 db-0f 47 0c 88 5a c2 7b a7 ..??.....G..Z.{. 0030 - d0 73 ff 19 ec 6f cd 67-d5 58 3e cd 91 eb 79 90 .s...o.g.X>...y. 0040 - 76 a9 d9 f2 17 dc da c4-bd ba 69 b4 11 c7 65 f9 v.........i...e. 0050 - 71 42 01 3b bd 6f a5 3a-9f 34 48 36 9e 31 4e 1c qB.;.o.:.4H6.1N. 0060 - 93 24 75 7f 8a c6 7f 7a-4c cd 93 bd 92 4c 9d 7f .$u....zL....L.. 0070 - df 47 11 3e 93 11 73 8e-09 5c ef 85 e2 aa bc 77 .G.>..s..\.....w 0080 - eb 29 fa c6 30 5b 27 de-50 98 47 7b 55 f0 84 91 .)..0['.P.G{U... 0090 - 97 da 66 29 1c c9 7e 63-56 8b a7 80 57 4b 2f 2c ..f)..~cV...WK/, Start Time: 1418336961 Timeout : 300 (sec) Verify return code: 20 (unable to get local issuer certificate) --- * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready. e logout closed >From a linux client I get : * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready. I do see STARTTLS here. >From a linux client: openssl s_client -connect localhost:993 CONNECTED(00000003) depth=3 C = SE, O = AddTrust AB, OU = AddTrust External TTP Network, CN = AddTrust External CA Root verify return:1 depth=2 C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Certification Authority verify return:1 depth=1 C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Domain Validation Secure Server CA verify return:1 depth=0 OU = Domain Control Validated, OU = COMODO SSL Wildcard, CN = *.mydomain.com verify return:1 --- Certificate chain 0 s:/OU=Domain Control Validated/OU=COMODO SSL Wildcard/CN=*.mydomain.com i:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA 1 s:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA i:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Certification Authority 2 s:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Certification Authority i:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External CA Root --- Server certificate -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIQWCEHgEVoKToQkXoG3+g1cTANBgkqhkiG9w0BAQsFADCB fs2e2XCjkEVu/YR7exKkmTf9wkhZ+tD0+S8= -----END CERTIFICATE----- subject=/OU=Domain Control Validated/OU=COMODO SSL Wildcard/CN=*.mydomain.com issuer=/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA --- No client certificate CA names sent --- SSL handshake has read 5169 bytes and written 453 bytes --- New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-GCM-SHA384 Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE SSL-Session: Protocol : TLSv1.2 Cipher : DHE-RSA-AES256-GCM-SHA384 Session-ID: 8357FF1D37476EEF1BE64DE443EFFBBED9CE375EA8CA5F1C5ED628B52E723D8F Session-ID-ctx: Master-Key: D6906D40FF47E7ED278AF4D0B143407A53955DA97365A09881EA0C68AAF3B879CB3136A7783B 18A46FD0A0634CBDC17D Key-Arg : None Krb5 Principal: None PSK identity: None PSK identity hint: None TLS session ticket lifetime hint: 300 (seconds) TLS session ticket: 0000 - cb 06 13 9a c9 2a 67 b7-3d 5b 5b 33 3b fe 1e 2e .....*g.=[[3;... 0010 - 18 73 2d ae 9e 4d f3 69-aa 13 ca 9c 07 94 73 cb .s-..M.i......s. 0020 - 02 a2 74 c9 df 70 ed 1b-33 f8 fb cb 97 1d 12 f5 ..t..p..3....... 0030 - 88 21 4e fd 7e be 69 b8-88 30 c9 99 70 f4 ea f3 .!N.~.i..0..p... 0040 - b0 90 c8 ab a6 f4 e5 37-c8 3e 4e 33 24 f9 cd 37 .......7.>N3$..7 0050 - f8 b0 8a 9a f3 44 39 27-e3 3d 96 3b ba a2 4e 85 .....D9'.=.;..N. 0060 - 77 5f a7 f7 6e 12 76 59-51 94 da 63 dd 99 cc 74 w_..n.vYQ..c...t 0070 - 1b 1b 1f 33 02 5f 3d ed-9a 57 e8 63 87 d4 8f d5 ...3._=..W.c.... 0080 - d5 fc 8c bf 89 4d 4d 91-bc 4f c7 67 79 c4 ec e9 .....MM..O.gy... 0090 - 47 68 0f 21 47 58 8a c9-10 a0 3b 46 e9 3b 08 cb Gh.!GX....;F.;.. Start Time: 1418337012 Timeout : 300 (sec) Verify return code: 0 (ok) --- * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready. e logout closed doveconf n | grep ssl # 2.0.9: /etc/dovecot/dovecot.conf ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv3:!SSLv2:!EXP:!aNULL ssl_key = </etc/pki/dovecot/private/dovecot.key

3 3

Dovecot lda Panic: file mail-transaction-log.c
by Alessio Cecchi 16 Dec '14

16 Dec '14

Hi, I'm running: # 2.2.15: /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.6 (3e924b1b6c5c+) # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.10 with mailbox in Maildir format and LDA to delivery new email (+ sieve for filter) on the server there is an email account that is used for "archive", it only receives messages and nobody connects to it. Today dovecot was unable to delibery, via LDA, email in the Maildir and in the log i found the following error. Login via POP or IMAP works fine but is impossibile to delivery new email (the INBOX have about 135000 emails). I have delete all files in Maildir except cur/ new/ tmp/ and rebuild the dovecot cache, but the error is the same. Could be a sieve problem? In the user's home there was a file called .dovecot.lda-dupes.lock What is wrong? Dec 16 06:53:25 mx02eeh dovecot: lda(user(a)domain.com): sieve: msgid=<SGVW2KMAINxVCnMARiN00013a72(a)smtp.comune>, from=sgv(a)pippo.com, subject="xxxx": stored mail into mailbox 'INBOX' Dec 16 06:53:25 mx02eeh dovecot: lda(user(a)domain.com): Panic: file mail-transaction-log.c: line 271 (mail_transaction_log_rotate): assertion failed: (file->locked) Dec 16 06:53:25 mx02eeh dovecot: lda(user(a)domain.com): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x75e1a) [0x7f8f2aca4e1a] -> /usr/lib/ dovecot/libdovecot.so.0(i_syslog_fatal_handler+0x33) [0x7f8f2aca4ee3] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f8f2ac562bf] -> /usr/lib/dovecot/lib dovecot-storage.so.0(+0xd6fc5) [0x7f8f2afe5fc5] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_write+0x1f5) [0x7f8f2afe4e15] -> /usr/lib/dovecot/libd ovecot-storage.so.0(mail_index_sync_commit+0x2c4) [0x7f8f2afdc854] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x55b08) [0x7f8f2af64b08] -> /usr/lib/dovecot /libdovecot-storage.so.0(maildir_transaction_save_commit_pre+0x40f) [0x7f8f2af5f43f] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xb7038) [0x7f8f2afc6038] - > /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_transaction_commit_full+0x9f) [0x7f8f2afd3c6f] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_transa ction_commit+0xa5) [0x7f8f2afc5bf5] -> /usr/lib/dovecot/lib10_quota_plugin.so(+0xbd82) [0x7f8f29c7ed82] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x99ca6) [0x7f8f2afa8ca6] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_transaction_commit_get_changes+0x4f) [0x7f8f2af91b9f] -> /usr/lib/dovecot/libdovecot-st orage.so.0(mailbox_transaction_commit+0x16) [0x7f8f2af91c56] -> /usr/lib/dovecot/libdovecot-sieve.so.0(+0x44047) [0x7f8f29616047] -> /usr/lib/dovecot/libdove cot-sieve.so.0(+0x3a829) [0x7f8f2960c829] -> /usr/lib/dovecot/libdovecot-sieve.so.0(sieve_result_execute+0x1e2) [0x7f8f2960cb72] -> /usr/lib/dovecot/libdovec ot-sieve.so.0(sieve_execute+0x56) [0x7f8f2961d936] -> /usr/lib/dovecot/lib90_sieve_plugin.so(+0x2f2e) [0x7f8f2986df2e] -> /usr/lib/dovecot/libdovecot-lda.so. 0(mail_deliver+0x45) [0x7f8f2b2313c5] -> /usr/libexec/dovecot/dovecot-lda(main+0x6ac) [0x402eec] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7f8f2a8ebcad] - > /usr/libexec/dovecot/dovecot-lda() [0x4025c9] My dovecot config: # 2.2.15: /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.6 (3e924b1b6c5c+) # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.10 auth_cache_negative_ttl = 10 mins auth_cache_size = 10 M auth_cache_ttl = 20 mins auth_worker_max_count = 50 deliver_log_format = msgid=%m, from=%f, subject="%s": %$ dict { acl = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext expire = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext sqlquota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no first_valid_gid = 89 first_valid_uid = 89 imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags imap_idle_notify_interval = 29 mins imap_logout_format = in=%i out=%o session=<%{session}> last_valid_gid = 89 last_valid_uid = 89 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = * mail_fsync = always mail_location = maildir:~/Maildir mail_plugins = quota acl expire mailbox_list_index = yes maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate vnd.dovecot.duplicate mmap_disable = yes namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%n/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/dovecot-deny-sql.conf.ext deny = yes driver = sql } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_shared_dict = proxy::acl expire = Trash expire2 = Spam expire_dict = proxy::expire quota = maildir:UserQuota quota2 = dict:Quota Usage::noenforcing:proxy::sqlquota quota_grace = 10M quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_before = /etc/dovecot/sieve/before.sieve sieve_dir = ~/sieve sieve_extensions = +vnd.dovecot.duplicate -vacation } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_fast_size_lookups = yes pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s, bytes=%i/%o, session=<%{session}> protocols = imap pop3 sieve sendmail_path = /var/qmail/bin/sendmail service auth { client_limit = 6500 unix_listener auth-userdb { group = vchkpw mode = 0660 user = vpopmail } } service dict { process_limit = 500 unix_listener dict { group = vchkpw mode = 0660 user = vpopmail } } service imap-login { process_min_avail = 4 service_count = 0 } service imap-postlogin { executable = script-login /etc/dovecot/scripts/imap-postlogin.sh unix_listener imap-postlogin { group = vchkpw mode = 0660 user = vpopmail } user = vpopmail } service imap { process_limit = 5000 service_count = 100 } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { process_min_avail = 4 service_count = 0 } service pop3-postlogin { executable = script-login /etc/dovecot/scripts/pop3-postlogin.sh unix_listener pop3-postlogin { group = vchkpw mode = 0660 user = vpopmail } user = vpopmail } service pop3 { process_limit = 1024 service_count = 100 } service quota-warning { executable = script /etc/dovecot/scripts/quota-warning.sh unix_listener quota-warning { user = vpopmail } user = vpopmail } ssl_cert = </etc/dovecot/ssl/wildcard.net.pem ssl_key = </etc/dovecot/ssl/wildcard.net.key ssl_protocols = !SSLv2 !SSLv3 submission_host = 127.0.0.1 userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol lda { mail_location = maildir:~/Maildir:INDEX=MEMORY mail_plugins = quota acl expire sieve } protocol imap { mail_max_userip_connections = 15 mail_plugins = quota acl expire imap_quota imap_acl } protocol sieve { mail_max_userip_connections = 2 } protocol pop3 { mail_max_userip_connections = 5 } # cat /etc/dovecot/sieve/before.sieve require ["vnd.dovecot.duplicate", "fileinto", "mailbox"]; if header :matches "X-Spam-Status" "Yes, *" { fileinto "Spam"; } if header :contains "Subject" "PROVA Filtro 123" { fileinto "Spam"; } if duplicate :seconds 60 { fileinto "Trash"; }

1 1

R: Re: Duplicate messages
by absolutely_free＠libero.it 16 Dec '14

16 Dec '14

Hi Miloš, unfortunately, I have no X-UIDL header in my mailboxes. Thank you >----Messaggio originale---- >Da: ghostlovescorebg(a)gmail.com >Data: 13/12/2014 10.25 >A: "absolutely_free(a)libero.it"<absolutely_free(a)libero.it>, <dovecot@dovecot. org> >Ogg: Re: Duplicate messages > >-----BEGIN PGP SIGNED MESSAGE----- >Hash: SHA256 > >On 12/12/14 09:39, absolutely_free(a)libero.it wrote: >> Hi, I just moved mail spool to a different network storage. Now, >> several users are complaining about duplicate message that are >> fetched by their clients (Outlook, Microsoft Outlook). What is the >> reason? >> >> This is my conf: >> >> # dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux >> 2.6.32-71.el6.x86_64 x86_64 CentOS release 6.6 (Final) >> auth_mechanisms = plain login digest-md5 cram-md5 >> disable_plaintext_auth = no first_valid_gid = 89 first_valid_uid = >> 89 mail_gid = 89 mail_location = maildir:/coraid-s2l2/domains >> mail_uid = 89 managesieve_notify_capability = mailto >> managesieve_sieve_capability = fileinto reject envelope >> encoded-character vacation subaddress comparator-i;ascii-numeric >> relational regex imap4flags copy include variables body enotify >> environment mailbox date imapflags notify mbox_write_locks = fcntl >> namespace { inbox = yes location = prefix = INBOX. separator = . >> type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext >> driver = sql } passdb { args = >> /etc/dovecot/dovecot-sql-crypt.conf.ext driver = sql } plugin { >> sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = >> +notify +imapflags sieve_max_script_size = 1M } protocols = imap >> pop3 lmtp sieve ssl_cert = </etc/nginx/ssl/wildcard.server.net.crt >> ssl_key = </etc/nginx/ssl/wildcard.server.net.key userdb { args = >> /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { >> mail_plugins = } protocol lda { mail_plugins = } >> >Hello, > >Please check if those users have X-UIDL header in their emails. If do, >remove header. That should solve the problem. > >Regards, >Miloš >-----BEGIN PGP SIGNATURE----- >Version: GnuPG v2 > >iQEcBAEBCAAGBQJUjAYJAAoJEBkMFHhDgrs5LgAH/2uTkvRPLr0LEme+srIk72cw >F5yYiH17K7vaPERTPrmKWZGtpezylWK/7YevjCE44+60L8JZqmIVQ99JRZcvMfSh >KP5qu7A41EVXSsAiB75NfTcUEMAYYRSZHpu2rl9lFnGA+5zH9DCqSQrzyatF/DAl >pdmLHVDH4Cj9rNAVdEl5u1e3rC0VCV3xXGgIBkIR9wdIhtrzW7Bdt2Ove08ct93t >Uqj7mhtTxxBoUU2fDzkLZRdCSQpf8HiaKcgWQPNIcRGM0i+hbw42Sgwyl0XFiXfx >f9YxPcT8OahF1+lCnVvQXhR2TiLTbBn+nFN7yWkrNkPlqs8lfIh1t9JOzldrO48= >=YCbh >-----END PGP SIGNATURE----- >

1 0

Failed installation on Ubuntu with Postfix/Dovecot/Squirrelmail
by ghalvors78＠hushmail.com 15 Dec '14

15 Dec '14

Hello all, I did an install following a HOWTO document that has a fair number of positive reviews, but something went wrong along the way: https://www.digitalocean.com/community/tutorials/how-to-configure-a-mail-se… I made a couple deviations. I opted to not use StartSSL keys, and decided to stay with the default keys. Also, I chose to use Squirrelmail, but not Spamassassin. I tried to ensure that there are no issues with the Postfix installation (Dr. Venama and the team were quite helpful). I also had two Postfix book at my side, but I have none for Dovecot. While my goal is to get my server running, I would like to gain an understanding of Dovecot along the way, because sooner or later, it will break and I'll need to revisit the installation. First hint of a problem was that Squirrelmail would say the IMAP server dropped the connection on a successful login. So I went to a command line and used 'mail' to compose a test message from my laptop and see how the machine at Digital Ocean handled it. It didn't go over so well, in fact, it's generating errors as I'm writing this (every 5 minutes). For privacy, I swapped my domain name, for the generic example.com. Dec 14 20:24:18 example postfix/qmgr[13624]: EF3C0C0A17: from=<gary(a)Garys-MacBook-Pro.local>, size=597, nrcpt=1 (queue active) Dec 14 20:24:18 example dovecot: lmtp(21652): Connect from local Dec 14 20:24:18 example dovecot: lmtp(21652, bob(a)example.com) Error: user bob(a)example.com: Initialization failed: namespace configuration error: inbox=yes namespace missing Dec 14 20:24:18 example dovecot: lmtp(21652): Disconnect from local: Successful quit Dec 14 20:24:18 example postfix/lmtp[21651]: EF3C0C0A17: to=<bob(a)example.com>, relay=mail.example.com[private/dovecot-lmtp], delay=168169, delays=168169/0.01/0.01/0.01, dsn=4.3.0, status=deferred (host mail.example.com[private/dovecot-lmtp] said: 451 4.3.0 <bob(a)example.com> Temporary internal error (in reply to end of DATA command)) Now when I was checking that Postfix wasn't the likely problem, one of them mentioned: http://archives.neohapsis.com/archives/postfix/2014-12/0189.html (Postfix-users archive) that I needed: namespace inbox { inbox = yes } But I'm curious why that I'm the only one that seems to have been nailed by this omission. A keyword search on 'namespace' only brought up a single comment. What are your thoughts? Below, I appended the configuration files that I modified. I tried to compress them to a minimum space for the list by omitting the comments. # # /etc/dovecot/dovecot.conf # !include_try /usr/share/dovecot/protocols.d/*.protocol protocols = imap lmtp pop3 dict { } !include conf.d/*.conf !include_try local.conf # eof # # /etc/dovecot/dovecot-sql.conf.ext # driver = mysql connect = host=127.0.0.1 dbname=servermail user=usermail password=changed_it default_pass_scheme = SHA512-CRYPT password_query = SELECT email as user, password FROM virtual_users WHERE email='%u'; # eof # # /etc/dovecot/conf.d/10-auth.conf # !include auth-sql.conf.ext # eof # # /etc/dovecot/conf.d/10-mail.conf # mail_location = maildir:/var/mail/vhosts/%d/%n mail_privileged_group = mail # eof # # /etc/dovecot/conf.d/10-master.conf # service imap-login { inet_listener imap { port = 143 } inet_listener imaps { } } service pop3-login { inet_listener pop3 { } inet_listener pop3s { } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { mode = 0600 user = postfix group = postfix } } service imap { } service pop3 { } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 user = postfix group = postfix } unix_listener auth-userdb { mode = 0600 user = vmail } user = dovecot } service auth-worker { user = vmail } service dict { unix_listener dict { } } # eof # # /etc/dovecot/conf.d/10-ssl.conf # ssl=required ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem # eof Thanks for making it all the way down here!

2 4

virtual mailbox segfault
by Tóth Balázs 15 Dec '14

15 Dec '14

Hello, I have a segfault problem, and I can not resolve myself. The details below (stack trace, config....). Maybe important to reproduce, everithing working well until I connect with SoGo ActiveSync (SoGo web, and other IMAP clients are working well). So maybe the SoGo send something magical command if the user client use the ActiveSyn... (the IMAP debug attached too) Thanks, Balazs Toth Program terminated with signal 11, Segmentation fault. #0 0x000002ba68e83609 in array_count_i (array=0x52d1cf10b8) at ../../../src/lib/array.h:140 warning: Source file is more recent than executable. 140 return array->buffer->used / array->element_size; (gdb) bt full #0 0x000002ba68e83609 in array_count_i (array=0x52d1cf10b8) at ../../../src/lib/array.h:140 No locals. #1 array_get_i (count_r=<synthetic pointer>, array=0x52d1cf10b8) at ../../../src/lib/array.h:188 No locals. #2 virtual_storage_set_have_guid_flags (mbox=0x52d1cf0de0) at virtual-storage.c:498 i = <optimized out> count = <optimized out> status = {messages = 3519949744, recent = 82, unseen = 2, uidvalidity = 0, uidnext = 1856604872, first_unseen_seq = 964, first_recent_uid = 3519949992, last_cached_seq = 82, highest_modseq = 355707281680, highest_pvt_modseq = 2999686621158, keywords = 0x52d1cf0de0, permanent_flags = 3520008512, permanent_keywords = 0, allow_new_keywords = 1, nonpermanent_modseqs = 0, no_modseq_tracking = 0, have_guids = 1, have_save_guids = 0, have_only_guid128 = 1} bboxes = 0x0 opened = <optimized out> #3 virtual_storage_get_status (box=0x52d1cf0de0, items=<optimized out>, status_r=0x3c46ea98b90) at virtual-storage.c:537 mbox = 0x52d1cf0de0 #4 0x000002ba694a20e4 in fts_mailbox_get_status (box=0x52d1cf0de0, items=0, status_r=0x3c46ea98b90) at fts-storage.c:94 fbox = <optimized out> #5 0x000002ba6a4e47a4 in acl_mailbox_get_status (box=0x52d1cf0de0, items=0, status_r=0x3c46ea98b90) at acl-mailbox.c:542 abox = <optimized out> #6 0x000002ba6b409966 in mailbox_get_status (box=0x52d1cf0de0, items=0, status_r=status_r@entry=0x3c46ea98b90) at mail-storage.c:1570 __FUNCTION__ = "mailbox_get_status" #7 0x00000052d01a191b in imap_status_get (cmd=cmd@entry=0x52d1ce6110, ns=ns@entry=0x52d1ce1ab0, mailbox=mailbox@entry=0x52d1c9e160 "virtual/Expunged", items=items@entry=0x3c46ea98b70, result_r=result_r@entry=0x3c46ea98b90) at imap-status.c:84 client = 0x52d1ce55b0 box = 0x52d1cf0de0 errstr = <optimized out> ret = 0 #8 0x00000052d0196b29 in cmd_status (cmd=0x52d1ce6110) at cmd-status.c:40 client = 0x52d1ce55b0 args = 0x52d1ce8968 list_args = 0x52d1ce8b18 items = {status = 0, metadata = MAILBOX_METADATA_GUID} result = {status = {messages = 0, recent = 0, unseen = 0, uidvalidity = 0, uidnext = 0, first_unseen_seq = 0, first_recent_uid = 0, last_cached_seq = 0, highest_modseq = 0, highest_pvt_modseq = 0, keywords = 0x0, permanent_flags = 0, permanent_keywords = 0, allow_new_keywords = 0, nonpermanent_modseqs = 0, no_modseq_tracking = 0, have_guids = 0, have_save_guids = 0, have_only_guid128 = 0}, metadata = {guid = "\027\000\000\000\000\000\000\000\000\337\354\000\027\225\023J", virtual_size = 355707281760, cache_fields = 0x52d1cd1470, precache_fields = 3519963648, backend_ns_prefix = 0x52d1ce6110 "", backend_ns_type = 3519963488}, error = MAIL_ERROR_TEMP, errstr = 0x52d1ca7288 "\240\200\312\321R"} ns = 0x52d1ce1ab0 mailbox = 0x52d1c9e160 "virtual/Expunged" orig_mailbox = 0x52d1ce8ac8 "virtual/Expunged" selected_mailbox = false #9 0x00000052d019aebc in command_exec (cmd=cmd@entry=0x52d1ce6110) at imap-commands.c:158 hook = 0x52d1ca6fa0 ret = <optimized out> #10 0x00000052d0199e60 in client_command_input (cmd=cmd@entry=0x52d1ce6110) at imap-client.c:782 client = 0x52d1ce55b0 command = <optimized out> __FUNCTION__ = "client_command_input" #11 0x00000052d0199ef4 in client_command_input (cmd=0x52d1ce6110) at imap-client.c:843 client = 0x52d1ce55b0 command = <optimized out> __FUNCTION__ = "client_command_input" Dovecot version: 2.2.15 Debian 7.7 (x64) FS: ext4 dovecot -n: # 2.2.15: /etc/dovecot/dovecot.conf # OS: Linux 3.14.24-kvm-guest-intel64-grsec x86_64 Debian 7.7 auth_cache_negative_ttl = 15 mins auth_cache_size = 16 M auth_cache_ttl = 8 hours auth_master_user_separator = * auth_mechanisms = plain login auth_verbose = yes auth_worker_max_count = 32 default_client_limit = 1024 default_process_limit = 64 deliver_log_format = msgid=%m [%f: %s]: %$ dict { expire = pgsql:/etc/dovecot/sql/expire.conf } first_valid_gid = 8 first_valid_uid = 8 info_log_path = /var/log/dovecot/info.log last_valid_gid = 8 last_valid_uid = 8 log_path = /var/log/dovecot/server.log log_timestamp = "%Y-%m-%d %H:%M:%S " login_greeting = Ready mail_location = maildir:~/mail:INDEX=~/indexes/private mail_plugins = acl expire fts fts_lucene lazy_expunge quota zlib mail_log notify stats mailbox_alias trash virtual mail_shared_explicit_inbox = yes mail_temp_dir = /run/shm/dovecot managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { list = children location = maildir:/var/mail/virtual/%%d/%%n/mail:INDEX=~/indexes/shared/%%u prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace { list = children location = maildir:/var/mail/virtual/%d/PUBLIC:INDEX=~/indexes/public prefix = public/ separator = / subscriptions = no type = public } namespace expunged { hidden = yes list = no location = maildir:~/expunged:INDEX=~/indexes/expunged prefix = expunged/ separator = / type = private } namespace inbox { inbox = yes location = maildir:~/mail:INDEX=~/indexes/private mailbox Archive { auto = subscribe special_use = \Archive } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } mailbox virtual/All { special_use = \All } mailbox virtual/Flagged { special_use = \Flagged } prefix = separator = / type = private } namespace virtual { location = virtual:/etc/dovecot/virtual:INDEX=~/indexes/virtual prefix = virtual/ separator = / subscriptions = no type = private } passdb { args = /etc/dovecot/sql/auth.conf driver = sql } passdb { args = /etc/dovecot/sql/masteruser.conf driver = sql master = yes pass = yes } plugin { acl = vfile:/etc/dovecot/acl acl_shared_dict = file:/var/mail/virtual/%d/shared-mailboxes.db antispam_backend = MAILTRAIN antispam_mail_notspam = --ham antispam_mail_sendmail = /usr/bin/sa-learn antispam_mail_sendmail_args = --username=%u antispam_mail_spam = --spam antispam_signature_missing = move antispam_spam = Junk antispam_trash = Trash deleted_to_trash_folder = Trash expire = * expire_dict = proxy::expire fts = lucene lazy_expunge = expunged/ lazy_expunge_only_last_instance = yes mail_log_events = delete undelete expunge copy mailbox_create mailbox_delete mailbox_rename mail_log_fields = uid box msgid size from subject mailbox_alias_new = Sent Messages mailbox_alias_new2 = Sent Items mailbox_alias_new3 = sent-mail mailbox_alias_new4 = Elküldött elemek mailbox_alias_new5 = Spam mailbox_alias_new6 = Levélszemét mailbox_alias_new7 = Deleted Items mailbox_alias_new8 = Deleted Messages mailbox_alias_new9 = Törölt elemek mailbox_alias_old = Sent mailbox_alias_old2 = Sent mailbox_alias_old3 = Sent mailbox_alias_old4 = Sent mailbox_alias_old5 = Junk mailbox_alias_old6 = Junk mailbox_alias_old7 = Trash mailbox_alias_old8 = Trash mailbox_alias_old9 = Trash quota = maildir:User quota quota_rule = *:storage=16G quota_rule2 = Trash:storage=+100M quota_rule3 = Junk:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_after = /var/lib/dovecot-sieve/default sieve_dir = ~/sieve sieve_max_actions = 64 sieve_max_redirects = 64 sieve_max_script_size = 2M sieve_quota_max_scripts = 8 stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 64 M stats_refresh = 5s stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours trash = /etc/dovecot/dovecot-trash.conf.ext } protocols = " imap lmtp sieve pop3" service auth-worker { unix_listener auth-worker { group = mail mode = 0660 user = dovecot } user = mail } service auth { unix_listener auth-userdb { group = mail mode = 0660 user = dovecot } user = mail } service dict { unix_listener dict { group = mail mode = 0660 user = dovecot } user = mail } service imap-login { process_min_avail = 8 service_count = 16 } service lmtp { process_min_avail = 5 unix_listener lmtp { group = mail mode = 0660 user = Debian-exim } user = mail } service pop3-login { process_min_avail = 8 service_count = 16 } service quota-warning { executable = script /usr/bin/dovecot-quota-warning.sh user = mail } service stats { fifo_listener stats-mail { group = mail mode = 0660 user = dovecot } user = mail } ssl_cert = </etc/ssl/certs/dovecot.crt ssl_key = </etc/ssl/private/dovecot.key userdb { driver = prefetch } userdb { args = /etc/dovecot/sql/auth.conf driver = sql } protocol lmtp { mail_plugins = acl expire fts fts_lucene lazy_expunge quota zlib mail_log notify stats mailbox_alias trash virtual sieve } protocol imap { imap_max_line_length = 64 k mail_max_userip_connections = 16 mail_plugins = acl expire fts fts_lucene lazy_expunge quota zlib mail_log notify stats mailbox_alias trash virtual antispam imap_acl imap_quota imap_stats deleted_to_trash } protocol pop3 { mail_max_userip_connections = 16 mail_plugins = acl expire fts fts_lucene lazy_expunge quota zlib mail_log notify stats mailbox_alias trash virtual } ----------------------------------- S[0x22802185b0]: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Ready C[0x227f9d99b0]: 1 login "test(a)acme.com" "password" S[0x22802185b0]: 1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE SEARCH=FUZZY QUOTA ACL RIGHTS=texk] Logged in C[0x227f9d99b0]: 2 LIST "" "" S[0x22802185b0]: * LIST (\Noselect) "/" "" S[0x22802185b0]: 2 OK List completed. C[0x227f9d99b0]: 3 select "INBOX" S[0x22802185b0]: * FLAGS (\Answered \Flagged \Deleted \Seen \Draft $Forwarded) S[0x22802185b0]: * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft $Forwarded \*)] Flags permitted. S[0x22802185b0]: * 2 EXISTS S[0x22802185b0]: * 0 RECENT S[0x22802185b0]: * OK [UIDVALIDITY 1398680969] UIDs valid S[0x22802185b0]: * OK [UIDNEXT 9] Predicted next UID S[0x22802185b0]: * OK [HIGHESTMODSEQ 14] Highest S[0x22802185b0]: 3 OK [READ-WRITE] Select completed (0.000 secs). C[0x227f9d99b0]: 4 LIST "" "" S[0x22802185b0]: * LIST (\Noselect) "/" "" S[0x22802185b0]: 4 OK List completed. C[0x227f9d99b0]: 5 setannotation "virtual/Expunged" "/comment" ("value.priv" "lasvegas_laxius_hu_54b_1a3f460d_53") S[0x22802185b0]: 5 BAD Error in IMAP command SETANNOTATION: Unknown command. C[0x227f9d99b0]: 6 status "virtual/Expunged" (x-guid)

1 0

[2.3 feature request]: multiple passwords for single user
by Arkadiusz Miśkiewicz 15 Dec '14

15 Dec '14

Hi. I wonder if there any plans of finishing "multiple passwords for single user" feature? Few months old thread mentioned this: http://www.dovecot.org/list/dovecot/2014-July/097217.html and even a patch that unfortunately was never finished http://dovecot.org/patches/2.0/auth-multi-password-2.0.diff Multiple passwords for single user are great since allow easy password management for users. For example you could have one password on a laptop, one on a phone, one on a tablet. Revoking access to the device is as easy as dropping single password and it doesn't affect other devices. There are more use cases. Untill that happens (not that great) workaround exists: http://wiki2.dovecot.org/Authentication/MultipleDatabases Thanks, -- Arkadiusz Miśkiewicz, arekm / ( maven.pl | pld-linux.org )

2 1

Userdb's and IMAP proxying
by Thomas HUMMEL 15 Dec '14

15 Dec '14

Hello Timo, In order to plan a migration, I want to setup an IMAP proxy (proxy_maybe) with a dovecot server (I'm running the old dovecot-2.1.15 but I could upgrade or use a proxy only dovecot-2.2.x server)/LDAP pass et userdb's. I'm won't be in charge of the migration itself but I think the idea will be to migrate a chunk of users each night and then let the proxy send them to the new server. I wonder if, instead of altering my LDAP schema to be able to add the needed attributes (matching proxy/proxy_maybe, host, ...) I could use a second userdb (preferably in a file : passwd-file ?) only for those extra_fields (i.e. the second userdb would extend the LDAP one). As a matter of fact, I guess those who will migrate users will prefer writing to a file than to add some LDAP attribute in the user entry. In other words, can I get different extra_fields for the same user in different userdb's ? -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Groupe Exploitation et Infrastructure

1 0

Replication and Sieve
by Hanns Mattes 15 Dec '14

15 Dec '14

Hi, I've got two servers set up for replication, which is working fine - except the sieve scripts. While the first replication, the existing rules have been replicated well. Also the activation/Deactivation seems to work. But Changes to the rules doesn't seem to be transferred. Configuration should be the same as the other server, except for mail_replica dovecot -n: # 2.2.15: /etc/dovecot/dovecot.conf # OS: Linux 3.7.10-1.40-desktop x86_64 openSUSE 12.3 (x86_64) auth_master_user_separator = * auth_mechanisms = plain login digest-md5 cram-md5 apop auth_verbose = yes doveadm_password = strenggeheim doveadm_port = 54321 mail_location = maildir:~/Maildir mail_plugins = " quota fts fts_lucene trash zlib notify replication" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { fts = lucene fts_autoindex = yes fts_lucene = whitespace_chars=@. mail_replica = tcps:mail.bruecko.de quota = maildir:User quota quota_exceeded_message = Storage quota for this account has been exceeded, please try again later. quota_grace = 100M quota_rule = *:storage=1000M quota_rule2 = Trash:storage=+10%% quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full / Mailbox ist voll quota_status_success = DUNNO quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u quota_warning3 = storage=75%% quota-warning 75 %u sieve = /virtualmail/%Ld/%Ln/.dovecot.sieve sieve_dir = /virtualmail/%Ld/%Ln/sieve sieve_global_dir = /virtualmail sieve_max_redirects = 32 trash = /etc/dovecot/dovecot-trash.conf.ext zlib_save = gz zlib_save_level = 6 } postmaster_address = admin(a)93er.net protocols = imap pop3 lmtp sieve service aggregator { fifo_listener replication-notify-fifo { user = vmail } unix_listener replication-notify { user = vmail } } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service doveadm { inet_listener { port = 54321 ssl = yes } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } user = vmail } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service quota-status { client_limit = 1 executable = quota-status -p postfix inet_listener { port = 12340 } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = vmail } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 } } ssl_cert = </etc/dovecot/brueckokomplett2014.crt ssl_client_ca_dir = /etc/ssl/certs ssl_key = </etc/dovecot/brueckofrei2014.key userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes protocol lmtp { mail_plugins = " quota fts fts_lucene trash zlib notify replication sieve" } protocol lda { mail_plugins = " quota fts fts_lucene trash zlib notify replication sieve" } protocol imap { mail_plugins = " quota fts fts_lucene trash zlib notify replication imap_quota imap_zlib" } Any advice? Regards Hanns

1 2

Can't save to folders
by Dave G. 15 Dec '14

15 Dec '14

When I login through imap, I can see everything in ~/mail/ just fine. I cannot save to any of them. If I have an autocreate-autosubscribe folder (ZZZ here), it shows up as empty (correct). Then if I save something to it through imap, a file ~/mail/ZZZ appears, but nothing actually gets saved to it. David Griffith dave(a)661.org ===begin quote=== # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.7 auth_mechanisms = plain login auth_verbose = yes log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_privileged_group = mail passdb { driver = pam args = login } userdb { driver = passwd } protocols = imap service auth { executable = /usr/lib/dovecot/auth unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = mail mode = 0600 user = mail } } disable_plaintext_auth = yes ssl_cert = </etc/ssl/certs/foo.bar.com.cert ssl_key = </etc/ssl/private/foo.bar.com.key protocol lda { auth_socket_path = /var/run/dovecot/auth-master log_path = mail_plugins = sieve postmaster_address = postmaster(a)foo.bar.com } protocol imap { mail_plugins = " autocreate" } plugin { autocreate = ZZZ autosubscribe = ZZZ }

2 2

Migrate with Dsync
by Dominik Breu 13 Dec '14

13 Dec '14

Hello List, i have a simple and maybe stupid question but, read the guide on http://wiki2.dovecot.org/Migration/Dsync now i wonder where to put this configuration ? May i oversee something but i would appreciate any hint toward solving my problem. regards, dominik

2 2

R: Re: R: Re: Duplicate messages
by absolutely_free＠libero.it 13 Dec '14

13 Dec '14

Sorry, I haven't shut users. I simply copied data between two folders >----Messaggio originale---- >Da: absolutely_free(a)libero.it >Data: 12/12/2014 13.14 >A: <dovecot(a)dovecot.org> >Ogg: R: Re: R: Re: Duplicate messages > >Hi, > >I mounted both network storage on this server. >After that, I used: > ># nice -n 19 rsync -av --progress /mnt/old/domains/* /var/spool/pop/domains/ > > >>----Messaggio originale---- >>Da: skdovecot(a)smail.inf.fh-brs.de >>Data: 12/12/2014 12.01 >>A: "absolutely_free(a)libero.it"<absolutely_free(a)libero.it> >>Cc: <dovecot(a)dovecot.org> >>Ogg: Re: R: Re: Duplicate messages >> >>-----BEGIN PGP SIGNED MESSAGE----- >>Hash: SHA1 >> >>On Fri, 12 Dec 2014, absolutely_free(a)libero.it wrote: >> >>> with rsync >> >>would you be more specific: >> >>which command line, how did you shut users out etc.pp. >> >>> >>>> ----Messaggio originale---- >>>> Da: skdovecot(a)smail.inf.fh-brs.de >>>> Data: 12/12/2014 9.44 >>>> A: "absolutely_free(a)libero.it"<absolutely_free(a)libero.it> >>>> Cc: <dovecot(a)dovecot.org> >>>> Ogg: Re: Duplicate messages >>>> >>>> -----BEGIN PGP SIGNED MESSAGE----- >>>> Hash: SHA1 >>>> >>>> On Fri, 12 Dec 2014, absolutely_free(a)libero.it wrote: >>>>> >>>>> Hi, >>>>> I just moved mail spool to a different network storage. >>>>> Now, several users are complaining about duplicate message that are >fetched >>> by their clients (Outlook, Microsoft Outlook). >>>>> What is the reason? >>>> >>>> How did you moved the message to the other network storage? >>>> >>>>> mail_location = maildir:/coraid-s2l2/domains >>>> >>>> - -- >>>> Steffen Kaiser >>>> -----BEGIN PGP SIGNATURE----- >>>> Version: GnuPG v1.4.11 (GNU/Linux) >>>> >>>> iQEVAwUBVIqq2Xz1H7kL/d9rAQJqJgf/ZYLDY6IwdTcSUFXRdFlvyv37QW/R0fm0 >>>> Ki8izVuOHRNK2/YEubN2+TVouOD7X3COkYa8RCu8XSoWRiFKSl0PMHNsVqUIocA1 >>>> fEQOnY54nmdERsZ/+w8xLW5UZ2jKH12X3gqjMSFXUvMbvlhOCZFgvlckCx/DStC+ >>>> yjCM5yoOR711KXrhEzikr1lmxyR+kikh1N+MTLNkC3uQp0vFmWJR3HoXd3x+p+Dv >>>> y0PkOZmna+B8a1ElGDYA8SyGVvVl2VT+YzGt7IPhZPB5j/CrW2Kcwm2j9OW0IWnE >>>> rPuhY/5xqZoSUuGBGNXeA6bLy0gidnnZO7NpkMJgZcP6OnK612tMgw== >>>> =qlBd >>>> -----END PGP SIGNATURE----- >>>> >>> >> >>- -- >>Steffen Kaiser >>-----BEGIN PGP SIGNATURE----- >>Version: GnuPG v1.4.11 (GNU/Linux) >> >>iQEVAwUBVIrK9Xz1H7kL/d9rAQL6BQgAjKW48XJ21iPtZ+fTZgxEC00uA7cjvwZM >>EYV9wThONbvP6zCLsbjKPOCiWX4f9NwHobgkkTIBtGogF0obNvUY2tiIRWRzwGO0 >>31M/53iJ7ORNy9IZg3u5r1NPcklXhsjuy4cWyj13jN2FhY2xHJGqJWujtM5dCAe0 >>Qq3KDH0yvJQSMJIMF2Eb4M59xD6hvXMR7qSH3ShI8DxUa0JSg7hlSTKM4Ak54dPb >>GObJBiAqR9TUJ5lBFvoxmt2EyAnl4h0YURdwfuCyv+vYkP0GVat5p9hHRUPDc3cU >>k4MrgdcVDJI5+VMzKOhcovEZ3o2k5ChGXIdzHjvp79VB1VyZsvViyQ== >>=QeMJ >>-----END PGP SIGNATURE----- >> >

2 1

Duplicate messages
by absolutely_free＠libero.it 13 Dec '14

13 Dec '14

Hi, I just moved mail spool to a different network storage. Now, several users are complaining about duplicate message that are fetched by their clients (Outlook, Microsoft Outlook). What is the reason? This is my conf: # dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.el6.x86_64 x86_64 CentOS release 6.6 (Final) auth_mechanisms = plain login digest-md5 cram-md5 disable_plaintext_auth = no first_valid_gid = 89 first_valid_uid = 89 mail_gid = 89 mail_location = maildir:/coraid-s2l2/domains mail_uid = 89 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date imapflags notify mbox_write_locks = fcntl namespace { inbox = yes location = prefix = INBOX. separator = . type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } passdb { args = /etc/dovecot/dovecot-sql-crypt.conf.ext driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags sieve_max_script_size = 1M } protocols = imap pop3 lmtp sieve ssl_cert = </etc/nginx/ssl/wildcard.server.net.crt ssl_key = </etc/nginx/ssl/wildcard.server.net.key userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = } protocol lda { mail_plugins = }

3 2

Convert sdbox to mdbox
by anon_user＠openmailbox.org 13 Dec '14

13 Dec '14

Hello, I have few hundreds mailboxes in my installation using the lastest version of dovecot. I have performances issues due to the storage don't support the high flow of I/O. I'm wondering if they are any chance to convert without downtime my sdboxes mailboxes to mdbox. Thanks in advance.

1 0

Is the mdbox format backwards compatible?
by Orion Poplawski 12 Dec '14

12 Dec '14

I'm contemplating using dsync with dovecot-2.2.10 (el7) and then transferring the resulting mdbox files to a dovecot-2.0.9 (el6) server. Is the mdbox format backwards compatible between the two versions? Thanks, Orion -- Orion Poplawski Technical Manager 303-415-9701 x222 NWRA, Boulder/CoRA Office FAX: 303-415-9702 3380 Mitchell Lane orion(a)nwra.com Boulder, CO 80301 http://www.nwra.com

1 0

stacking istreams and ostreams
by Philipp Brüll 12 Dec '14

12 Dec '14

Hello, I'm developing an encryption plugin for dovecot and ran into a problem with the stacking of i/o-streams. The encryption i/o-streams are working fine on any kind of mail the test suite is passing through them. But as soon as the zlib plugin is enabled the logs show an cache error: failed: Cached message size larger than expected (214 > 206, box=INBOX, UID=1) I've already double-checked the return values of ostream's sendv and istream's read function. They seem correct (and equal). If the order of the streams are changed (by changing the number in the lib-filename libxx_scrambler.so); meaning that the encryption is done before the compression (which isn't efficient) both streams are working correct without any errors. Is there some way the zlib plugin changes the cached message size? Is there some behaviour of the zlib plugin that I'm missing? Any help would be very welcome. Best regards, Philipp -- simia.tech GbR http://simiatech.com

1 2

[Dovecot] Doveadm sometimes failed "to iterate through some users" after upgrade to 2.2
by David Davidov 12 Dec '14

12 Dec '14

> Yes, after an upgrade works fine. Hello, Unfortunately this issue hits again. I installed the latest stable version 2.2.15 and got the following error # doveadm expunge -u "^o^(a)dave.s484.qa-team.net" mailbox 'INBOX.Junk Mail' SAVEDBEFORE 7d doveadm(^o^(a)dave.s484.qa-team.net): Error: userdb lookup(^o^(a)dave.s484.qa-team.net): Disconnected unexpectedly doveadm(^o^(a)dave.s484.qa-team.net): Fatal: User lookup failed: Internal error occurred. Refer to server log for more information. # echo $? 75 Our production servers run 2.2.13, where the situation is the same. regards, David Davidov System administrator @ icdsoft.com -- David Davidov | System Administrator | ICDSoft Ltd.

2 1

Dsync issues between Cyrus and Dovecot
by Ovidiu Moldovan 12 Dec '14

12 Dec '14

Hello, I have some issues related with dsync when trying to perform two way synchronization between Cyrus and Dovecot. 1st time synchronization always works and email, folders, flags can be synced between these but once for example in dovecot side the user creates a folder, dsync fails with the following errors: Debug: brain M: Other brain should change mailbox INBOX/dove GUID c77e7711be9a6c77fc845ea745963ddb -> df0d180f71e38a544f9e00008aa015be Debug: brain M: out state=master_send_mailbox changed=1 Debug: brain S: in state=recv_mailbox_tree_deletes Error: Can't create mailbox INBOX/dove: Mailbox already exists INBOX/dove folder was created in Dovecot side and does not exist in Cyrus side. I have tried full sync or backup but without any luck. If I delete the folder from Dovecot side the sync works fine again. I can post more info on the configuration if needed. Thank you, Ova

2 1

R: Re: R: Re: Duplicate messages
by absolutely_free＠libero.it 12 Dec '14

12 Dec '14

Hi, I mounted both network storage on this server. After that, I used: # nice -n 19 rsync -av --progress /mnt/old/domains/* /var/spool/pop/domains/ >----Messaggio originale---- >Da: skdovecot(a)smail.inf.fh-brs.de >Data: 12/12/2014 12.01 >A: "absolutely_free(a)libero.it"<absolutely_free(a)libero.it> >Cc: <dovecot(a)dovecot.org> >Ogg: Re: R: Re: Duplicate messages > >-----BEGIN PGP SIGNED MESSAGE----- >Hash: SHA1 > >On Fri, 12 Dec 2014, absolutely_free(a)libero.it wrote: > >> with rsync > >would you be more specific: > >which command line, how did you shut users out etc.pp. > >> >>> ----Messaggio originale---- >>> Da: skdovecot(a)smail.inf.fh-brs.de >>> Data: 12/12/2014 9.44 >>> A: "absolutely_free(a)libero.it"<absolutely_free(a)libero.it> >>> Cc: <dovecot(a)dovecot.org> >>> Ogg: Re: Duplicate messages >>> >>> -----BEGIN PGP SIGNED MESSAGE----- >>> Hash: SHA1 >>> >>> On Fri, 12 Dec 2014, absolutely_free(a)libero.it wrote: >>>> >>>> Hi, >>>> I just moved mail spool to a different network storage. >>>> Now, several users are complaining about duplicate message that are fetched >> by their clients (Outlook, Microsoft Outlook). >>>> What is the reason? >>> >>> How did you moved the message to the other network storage? >>> >>>> mail_location = maildir:/coraid-s2l2/domains >>> >>> - -- >>> Steffen Kaiser >>> -----BEGIN PGP SIGNATURE----- >>> Version: GnuPG v1.4.11 (GNU/Linux) >>> >>> iQEVAwUBVIqq2Xz1H7kL/d9rAQJqJgf/ZYLDY6IwdTcSUFXRdFlvyv37QW/R0fm0 >>> Ki8izVuOHRNK2/YEubN2+TVouOD7X3COkYa8RCu8XSoWRiFKSl0PMHNsVqUIocA1 >>> fEQOnY54nmdERsZ/+w8xLW5UZ2jKH12X3gqjMSFXUvMbvlhOCZFgvlckCx/DStC+ >>> yjCM5yoOR711KXrhEzikr1lmxyR+kikh1N+MTLNkC3uQp0vFmWJR3HoXd3x+p+Dv >>> y0PkOZmna+B8a1ElGDYA8SyGVvVl2VT+YzGt7IPhZPB5j/CrW2Kcwm2j9OW0IWnE >>> rPuhY/5xqZoSUuGBGNXeA6bLy0gidnnZO7NpkMJgZcP6OnK612tMgw== >>> =qlBd >>> -----END PGP SIGNATURE----- >>> >> > >- -- >Steffen Kaiser >-----BEGIN PGP SIGNATURE----- >Version: GnuPG v1.4.11 (GNU/Linux) > >iQEVAwUBVIrK9Xz1H7kL/d9rAQL6BQgAjKW48XJ21iPtZ+fTZgxEC00uA7cjvwZM >EYV9wThONbvP6zCLsbjKPOCiWX4f9NwHobgkkTIBtGogF0obNvUY2tiIRWRzwGO0 >31M/53iJ7ORNy9IZg3u5r1NPcklXhsjuy4cWyj13jN2FhY2xHJGqJWujtM5dCAe0 >Qq3KDH0yvJQSMJIMF2Eb4M59xD6hvXMR7qSH3ShI8DxUa0JSg7hlSTKM4Ak54dPb >GObJBiAqR9TUJ5lBFvoxmt2EyAnl4h0YURdwfuCyv+vYkP0GVat5p9hHRUPDc3cU >k4MrgdcVDJI5+VMzKOhcovEZ3o2k5ChGXIdzHjvp79VB1VyZsvViyQ== >=QeMJ >-----END PGP SIGNATURE----- >

1 0

PATCH - add username_format to the PAM auth module
by Bradley Kite 12 Dec '14

12 Dec '14

Hi there, Other auth modules (eg passwd-file) allow a username_format to be specified, but not the PAM module. The use-case, is where I want a static userdb configuration which takes the domain into account but still want to use PAM for authentication, eg: userdb { driver = static args = uid=8 gid=12 home=/mnt/storage/mail/vhosts/%d/%n } passdb { driver = pam args = username_format=%n allow_pam_transform=no dovecot } The global "auth_username_format" setting ends up changing the username, so looses the ability to have different mailboxes based on domain. There is also a new setting, allow_pam_transform which stops the username being changed after a successful authentication. Normally, if PAM changes the username, then dovecot must update its record of the username for further processing - but in this use case we must disable this function. -- Brad.

1 0

R: Re: Duplicate messages
by absolutely_free＠libero.it 12 Dec '14

12 Dec '14

Hi Steffen, with rsync Thank you >----Messaggio originale---- >Da: skdovecot(a)smail.inf.fh-brs.de >Data: 12/12/2014 9.44 >A: "absolutely_free(a)libero.it"<absolutely_free(a)libero.it> >Cc: <dovecot(a)dovecot.org> >Ogg: Re: Duplicate messages > >-----BEGIN PGP SIGNED MESSAGE----- >Hash: SHA1 > >On Fri, 12 Dec 2014, absolutely_free(a)libero.it wrote: >> >> Hi, >> I just moved mail spool to a different network storage. >> Now, several users are complaining about duplicate message that are fetched by their clients (Outlook, Microsoft Outlook). >> What is the reason? > >How did you moved the message to the other network storage? > >> mail_location = maildir:/coraid-s2l2/domains > >- -- >Steffen Kaiser >-----BEGIN PGP SIGNATURE----- >Version: GnuPG v1.4.11 (GNU/Linux) > >iQEVAwUBVIqq2Xz1H7kL/d9rAQJqJgf/ZYLDY6IwdTcSUFXRdFlvyv37QW/R0fm0 >Ki8izVuOHRNK2/YEubN2+TVouOD7X3COkYa8RCu8XSoWRiFKSl0PMHNsVqUIocA1 >fEQOnY54nmdERsZ/+w8xLW5UZ2jKH12X3gqjMSFXUvMbvlhOCZFgvlckCx/DStC+ >yjCM5yoOR711KXrhEzikr1lmxyR+kikh1N+MTLNkC3uQp0vFmWJR3HoXd3x+p+Dv >y0PkOZmna+B8a1ElGDYA8SyGVvVl2VT+YzGt7IPhZPB5j/CrW2Kcwm2j9OW0IWnE >rPuhY/5xqZoSUuGBGNXeA6bLy0gidnnZO7NpkMJgZcP6OnK612tMgw== >=qlBd >-----END PGP SIGNATURE----- >

2 1

Error: mremap_anon(###) failed: Cannot allocate memory
by Andy Dills 12 Dec '14

12 Dec '14

We're running dovecot 2.2.15 with pigeonhole 0.4.6, in a clustered environment, nfs with proxy and backend on all servers. I've been seeing some odd errors from lmtp: Error: mremap_anon(127930368) failed: Cannot allocate memory It seems to affect specific users, but it doesn't seem to manifest in any particular way; no user complaints. Just the occasional log message. I would guess this is a bug? I'm open to suggestions and I'd be happy to post config if somebody has an idea. Thanks, Andy --- Andy Dills Xecunet, Inc. www.xecu.net 301-682-9972 ---

2 3

LMTP BUG
by Peter Hodur 12 Dec '14

12 Dec '14

Hello, just setting up mail hub with Postfix & Dovecot I have found BUG in LMTP implementation. * assumptions - latest stable Postix & Dovecot, - Postfix delivers via Dovecot LMTP (virtual_transport = lmtp:127.0.0.1:24), - Dovecot userdb & passwd lookups are made via custom checkpassword interface, - each user (email account) has different UID/GID * description LMTP process must run as root to be able to deliver msgs to each user. It drops privileges temporarily when delivering and then restoring effective UID/GID to root (saved one). The problem is, when an attempt with more than ONE recipients is made. More than one recipient within single session. It seems, that Dovecot LMTP restores root privileges not between each recipient delivery attempt but after whole transaction. The only solution is throttle Postfix to send single message with multiple recipients as many small transactions - all with only ONE rcpt. lmtp_destination_recipient_limit=1 makes this magic. Otherwise you can find: Dec 12 03:30:36 vm dovecot: lmtp(3580, info(a)xxx.com) Fatal: setgid(48672 from userdb lookup) failed with euid=33001, gid=43570, egid=43570: Operation not permitted (This binary should probably be called with process group set to 4867 2 instead of 43570) Can someone confirm that this is an error/bug? Thanks Pete

1 0

[Corrected] Can't get shared public folders working
by Randall Gellens 12 Dec '14

12 Dec '14

I'm trying to use a shared public namespace. My mail client says it exists, and I can telnet in and SELECT it, but sieve scripts can't write to it. The configuration in /etc/dovecot/conf.d/10-mail.conf: # Shared namespace for Foo stuff namespace { type = public separator = '/' prefix = "#Foo/" location = maildir:/local/mnt/mail/shared:INDEXPVT=/local/mnt/mail/%n/shared:LAYOUT=fs # Use the default namespace for saving subscriptions. #subscriptions = no # List the shared/ namespace only if there are visible shared mailboxes. #list = children } I created the location, owned by the vmail user: $ ls -ld /local/mnt/mail/shared drwxr-xr-x 4 vmail vmail 4096 Dec 11 12:38 /local/mnt/mail/shared I created the subfolders, verified that they are there. Also, I see that Dovecot created a dovecot.mailbox.log file: $ ls -l /local/mnt/mail/shared total 12 -rw-r--r-- 1 vmail vmail 96 Dec 11 12:38 dovecot.mailbox.log drwxr-xr-x 3 vmail vmail 4096 Dec 11 12:37 Foo-Bugs drwxr-xr-x 3 vmail vmail 4096 Dec 11 12:38 Foo-Patches The dovecot.mailbox.log file is empty: $ more /local/mnt/mail/shared/dovecot.mailbox.log The intermediate folder is empty: $ ls -l /local/mnt/mail/shared/Foo-Bugs/ total 4 drwxr-xr-x 5 vmail vmail 4096 Dec 11 12:36 Foo-Bugs-New The mailbox has some folders in it: $ ls -l /local/mnt/mail/shared/Foo-Bugs/Foo-Bugs-New/ total 12 drwxr-xr-x 2 vmail vmail 4096 Dec 11 12:36 cur drwxr-xr-x 2 vmail vmail 4096 Dec 11 12:36 new drwxr-xr-x 2 vmail vmail 4096 Dec 11 12:36 tmp They seem to be empty: $ ls -l /local/mnt/mail/shared/Foo-Bugs/Foo-Bugs-New/* /local/mnt/mail/shared/Foo-Bugs/Foo-Bugs-New/cur: The Sieve log insists the mailbox doesn't exist: $ more /local/mnt/home/Foo-bugs/.dovecot.sieve.log sieve: info: started log at Dec 11 15:35:20. error: msgid=<p06240614d0afdab4a086(a)[99.111.97.136]>: failed to store into mailbox '#Foo/Foo-Bugs/Foo-Bugs-New': Mailbox doesn't exist: #Foo/Foo-Bugs/Foo-Bugs-New. info: msgid=<p06240614d0afdab4a086(a)[99.111.97.136]>: stored mail into mailbox 'INBOX'. But if I telnet into the server, the mailbox shows up: a1 list "" * * LIST (\HasNoChildren \Junk) "/" Junk * LIST (\Noselect \HasChildren) "/" #Foo * LIST (\Noselect \HasChildren) "/" #Foo/Foo-Patches * LIST (\HasNoChildren) "/" #Foo/Foo-Patches/Foo-Patches-New * LIST (\Noselect \HasChildren) "/" #Foo/Foo-Bugs * LIST (\HasNoChildren) "/" #Foo/Foo-Bugs/Foo-Bugs-New * LIST (\HasNoChildren) "/" INBOX a1 OK List completed. And I can SELECT it: a2 select "#Foo/Foo-Bugs/Foo-Bugs-New" * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 0 EXISTS * 0 RECENT * OK [UIDVALIDITY 1418343553] UIDs valid * OK [UIDNEXT 1] Predicted next UID * OK [NOMODSEQ] No permanent modsequences a2 OK [READ-WRITE] Select completed (0.006 secs). So why can't the Sieve script store into it? -- Randall Gellens Opinions are personal; facts are suspect; I speak for myself only -------------- Randomly selected tag: --------------- I must have a prodigious quantity of mind; it takes me as much as a week sometimes to make it up. --Mark Twain, _The Innocents Abroad_

1 0