- dovecot - dovecot.org

[Dovecot] How are messages send by sieve
by azurIt 28 Mar '14

28 Mar '14

Hi, i would like to ask how _exactly_ are messages send using sieve filters, for example vacation responses. Which SMTP server is used? Where can i find log files? How should i debug delivery problems? Thank you. azur

2 1

[Dovecot] struggling with dovecot v2.2
by Spyros Tsiolis 28 Mar '14

28 Mar '14

Hello all, Long time, no write :-) I am building a spanking, wonderful new mail server. I am very excited about this, since I am going to use the new dovecot v2.2.12 !! However, last time I did this (and documented it), I was working with v1.2. I consulted my notes and it seems there are huge differences between v1.2 and v2.2. So my question is, would anyone know if there's a "quick start" guide for v2.2 ? tia, s.

2 1

Re: [Dovecot] Help connecting from remote client (no auth attempts
by Joseph Tam 28 Mar '14

28 Mar '14

Blake McBride writes: > Thanks. The current version of Thunderbird auto-detects connection > parameters - presumably by trying every combination. All I give is an > email address and a password. They also have a manual configuration that I > spent a lot of time with. I was never able to do any better than their > auto-config. That's usually the cause of many problems I see with log entries like yours. It could happen when client and server disagree on using STARTTLS or SSL, so hardwiring your client to use whatever your server supports stops the client from fumbling around (and getting it wrong). > Given my experience with all this, I feel confident that Thunderbird is not > a factor in the problem. A network trace could clear that up, but auto-configure is problematic. > In terms of the config, I really don't know what I am doing. I think what > I want is clear text passwords sent over an SSL connection. Isn't that > secure? I don't know the difference between SSL and that TTSL thing. I > really don't care how it is setup. I just want it to be reasonably secure > and simple. You'll need to know these things in order to understand the problem. The essential difference, as far as your concerned, is that TLS (or STARTTLS or SSLv(some-number-I-forget)) starts out in plain text, then the client issues a command (STARTTLS) to commence the secure (encrypted) communication handshake, whereas SSL dives right in and expects the client to negotiate SSL parameters immediately. These two variations of SSL listen on two distinct ports. If you get these cross up, you'll get the above error log. In my experiments: SSL client -> TLS server port: Aborted login (no auth attempts) TLS client -> SSL server port: client hangs, Disconnected: Inactivity (no auth attempts in 180 secs) SSL/TLS + clear-text password is secure. If you do not use SSL/TLS, you'll have to use CRAM-MD5 or some challenge-response authentication to defeat password snooping. You could use both, but that's overkill. Joseph Tam <jtam.home(a)gmail.com>

2 1

[Dovecot] Authentication woes, passwd standard install
by medicineme 28 Mar '14

28 Mar '14

I have two users working fine. Tried to add a third and it refuses to accept log on details. I've stripped everything back to default config, and still only the first two users are accepted! Can't understand it and it's driving me crazy. I've deleted and created the user a thousand times, and opened the config up as wide as possible. I'm obviously doing something stupid but what! # OS: Linux 3.2.0-4-686-pae i686 Debian 7.2 auth_mechanisms = plain login digest-md5 rpa base_dir = /var/run/dovecot/ disable_plaintext_auth = no login_trusted_networks = 10.0.0.0/8 passdb { driver = pam } protocols = imap service auth { user = root } ssl_cert = </etc/ssl/certs/server.pem ssl_key = </etc/ssl/private/mail.key userdb { driver = passwd } -- View this message in context: http://dovecot.2317879.n4.nabble.com/Authentication-woes-passwd-standard-in… Sent from the Dovecot mailing list archive at Nabble.com.

2 1

[Dovecot] Dovecot replication, no updates on message deposit
by Milan Cvetkovic 27 Mar '14

27 Mar '14

Hi, I am trying to setup dovecot replication based on: http://wiki2.dovecot.org/Replication All mailboxes share the same UNIX userid ('vmail'), and I setup ssh-key based login for this account in both directions. As LDA exim4 is configured to use dovecot deliver LDA. Here is the relevant config from exim: /usr/lib/dovecot/deliver -d $local_part -f $sender_address -a $original_local_part@$original_domain When a message is deposited to a mailbox, it does not get replicated. The log is silent: Mar 25 15:00:20 mx02 dovecot: master: Dovecot v2.2.9 starting up (core dumps disabled) Mar 25 15:01:05 mx02 dovecot: lda(user.name): msgid=unspecified: saved mail to INBOX The output from doveconf -n is attached. Any help is appreciated, Thanks, Milan.

1 1

[Dovecot] Help connecting from remote client (no auth attempts)
by Blake McBride 27 Mar '14

27 Mar '14

Greetings, I am running 64 bit Ubuntu server 10.04.04, postfix 2.7.0, and dovecot 1.2.9. I installed the dovecot-postfix package so the two would be configured to work together. >From localhost I can send and receive email to/from arbitrary remote sites without any problems. I wish to send & receive email from my (remote) desktop via Thunderbird through that sever. When I attempt to configure Thunderbird I get the following on mail.log: Mar 26 15:04:51 booklion dovecot: imap-login: Aborted login (no auth attempts): rip=74.179.230.177, lip=192.168.168.53 Mar 26 15:04:51 booklion dovecot: last message repeated 2 times Mar 26 15:04:51 booklion dovecot: pop3-login: Aborted login (no auth attempts): rip=74.179.230.177, lip=192.168.168.53 Mar 26 15:04:51 booklion dovecot: last message repeated 3 times Mar 26 15:04:51 booklion dovecot: imap-login: Aborted login (no auth attempts): rip=74.179.230.177, lip=192.168.168.53 ... For now, I just want to control access through the normal passwd/shadow mechanism. I set in dovecot.conf: disable_plaintext_auth = no ssl = yes passdb shadow { } userdb passwd { } I don't know what else to try. Help would really be appreciated. Blake McBride

2 8

[Dovecot] lmtpd configuration
by paolo.brocchi12 27 Mar '14

27 Mar '14

Hi all, i have my home.conf : mydatabase XXXX myuser XXXX mypasswd XXXX myhosts be1XX be2XX [lmtpd] where mail conditions status = 0 user name passwd 'passwd' home home quota quota_limit_bytes uid 497 gid 497 table UTENTI on mysql database the home is home: /data/mail/BE01/........ i would like to have home:/data/mail/DRBE01 How can i change my home.conf? Thanks you Paolo -- View this message in context: http://dovecot.2317879.n4.nabble.com/lmtpd-configuration-tp47284.html Sent from the Dovecot mailing list archive at Nabble.com.

1 0

[Dovecot] %{orig_user} missing in checkpassword-Script
by dovecot.pkoch＠dfgh.net 27 Mar '14

27 Mar '14

Hi everybody, I'm using SSL client certificates or checkpassword scripts to authenticate our users. If a user sent a client certificate from his smartcard my checkpasswort will ignore the password, if he does not sent a client certificate but uses his OTP-token then my checkwassword script will check wether the password is a correct one time password. My problem is: the AUTH_USER variable will either contain the username that was configured in the mailclient (if auth_ssl_username_from_cert=false) or the username from the certificate (if auth_ssl_username_from_cert=true). I would like to compare both values, i.e. the %{user} Dovecot-variable and the %{orig_user} Dovecot-variable. But the environment of a checkpassword-script has only one of them. Any ideas? I tried to change the source and found the routine where all the AUTH_xxx environment variables are created. But the %{orig_user] variable was empty at that point, so no AUTH_ORIG_USER variable is created. I'm afraight that whenever the %{user}-Variable is replaced by the UID from the client certificate (due to auth_ssl_username_from_cert=true), the original value of %{user} is NOT copied into %{orig_user} Can someone more familiar with the dovecot source check this please or give me a hint where to look further Kind regards Peter Koch

1 0

Re: [Dovecot] Trying to get Centos5 set up with dovecot
by Joseph Tam 27 Mar '14

27 Mar '14

DCA <dovecotadmin(a)silverservers.com> writes: > I am trying to set up dovecot to replace an older POP3 server in an existing set up. > Currently the server uses sendmail to handle incoming mail. users are in /etc/mail and their incoming eMail lands in the /var/mail/username > in /var/mail the username file is owned by username:mail > > I have dovecot configured to create the imap folders in /home/username/mail/ > on existing accounts login attempts fail with errors such as: > chown /home/username/mail/.imap/INBOX failed: Operation not permitted egid=500(username), group based on /var/mail/username > mkdir /home/username/mail/imap/INBOX failed: Operation not permitted. > > Everything seems to work as expected but only if I add "username" into the "mail" group OR if I have all mailboxes chowned to username:username > Is there any way to tell dovecot to ignore the group ownership of /var/mail/username and focus instead on using username:username for everything in /home/username ? > > If I have to add every user to the mail group I can but this seems messy. Geez, I must have answered the same query 3 or 4 times. I need to write an entry in wiki somewhere: http://www.dovecot.org/list/dovecot/2013-August/092299.html Joseph Tam <jtam.home(a)gmail.com>

2 2

[Dovecot] Auth service panic
by Piotr Rotter 26 Mar '14

26 Mar '14

Hello, I have dovecot director on one server and today I notice 146 times the same problem. Log below. I try restart dovecot and mysql (auth-db backend) but with no effect. Please help. If any other information is needed I send it. My dovecot version is 2.1.15. 2014-03-26T16:15:28+01:00 r1 dovecot: auth: Fatal: master: service(auth): child 9883 killed with signal 6 (core dumps disabled) 2014-03-26T16:15:43+01:00 r1 dovecot: auth: Panic: file passdb-blocking.c: line 124 (passdb_blocking_lookup_credentials): assertion failed: (auth_stream_is_empty(request->extra_fields) || request->master_user != NULL) 2014-03-26T16:15:43+01:00 r1 dovecot: auth: Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x4469a) [0x7fdb06e1469a] -> /usr/lib64/dovecot/libdovecot.so.0(+0x446de) [0x7fdb06e146de] -> /usr/lib64/dovecot/libdovecot.so.0(+0x1c0ea) [0x7fdb06dec0ea] -> dovecot/auth [34 wait, 1 passdb, 0 userdb](passdb_blocking_verify_plain+0) [0x41f593] -> dovecot/auth [34 wait, 1 passdb, 0 userdb](auth_request_lookup_credentials+0x104) [0x413c41] -> dovecot/auth [34 wait, 1 passdb, 0 userdb]() [0x41c202] -> dovecot/auth [34 wait, 1 passdb, 0 userdb]() [0x4139e6] -> dovecot/auth [34 wait, 1 passdb, 0 userdb](auth_request_lookup_credentials_callback+0x6a) [0x413abb] -> dovecot/auth [34 wait, 1 passdb, 0 userdb](passdb_handle_credentials+0x50) [0x41f389] -> dovecot/auth [34 wait, 1 passdb, 0 userdb]() [0x41f82e] -> dovecot/auth [34 wait, 1 passdb, 0 userdb]() [0x41798f] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x27) [0x7fdb06e1f68c] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x9e) [0x7fdb06e204ee] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x27) [0x7fdb06e1f645] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fdb06e0d348] -> dovecot/auth [34 wait, 1 passdb, 0 userdb](main+0x380) [0x41a396] -> /lib64/libc.so.6(__libc_start_main+0xfd) [0x7fdb062ced2d] -> dovecot/auth [34 wait, 1 passdb, 0 userdb]() [0x40ced9] 2014-03-26T16:15:43+01:00 r1 dovecot: auth: Fatal: master: service(auth): child 18546 killed with signal 6 (core dumps disabled)

1 0

Re: [Dovecot] IMAP proxy with master user and CRAM-MD5 auth mechanism
by ML mail 26 Mar '14

26 Mar '14

Hi Trent, Thanks for your exhaustive explanation now it is clear. What was unclear to me was the fact that the IMAP proxy server has to take care of the authentication in this case of using a master user and therefore it needs access to the passwords (in my case stored in the mailbox table in PostgreSQL). I still have two open questions: 1) Do I really need the userdb on my IMAP proxy config as you mention in your mail? In my understanding the passdb should be enough (which in my case will use a SQL query joining the result of my proxy and mailbox tables). 2) Is this correct that the IMAP backend (the mailbox server) in this case scenario has to use PLAIN authentication and can NOT use CRAM-MD5? Regards,ML

1 0

[Dovecot] IMAP proxy with master user and CRAM-MD5 auth mechanism
by ML mail 26 Mar '14

26 Mar '14

Hello, I would like to know if it possible to have a dovecot IMAP proxy frontend where CRAM-MD5 can be used as auth mechanism (assuming I would be using a master user/password on the dovecot IMAP backend/mailbox)? I have read a few times the following http://wiki2.dovecot.org/PasswordDatabase/ExtraFields/Proxy page but somehow it is still unclear to me if the IMAP proxy then needs to have all the users and passwords in its proxy table in the database? Unfortunately there are no examples for that case. Also with this case scenario is it possible to store the users' passwords in CRAM-MD5 format? Any pointers or documentation to such a scenario would be great. Thanks and regards M.L.

1 0

[Dovecot] Trying to get Centos5 set up with dovecot
by DCA 26 Mar '14

26 Mar '14

Greetings, It seems I'm having some trouble getting this message into the list. I have used this dovecot list before. I am trying to set up dovecot to replace an older POP3 server in an existing set up. Currently the server uses sendmail to handle incoming mail. users are in /etc/mail and their incoming eMail lands in the /var/mail/username in /var/mail the username file is owned by username:mail I have dovecot configured to create the imap folders in /home/username/mail/ on existing accounts login attempts fail with errors such as: chown /home/username/mail/.imap/INBOX failed: Operation not permitted egid=500(username), group based on /var/mail/username mkdir /home/username/mail/imap/INBOX failed: Operation not permitted. Everything seems to work as expected but only if I add "username" into the "mail" group OR if I have all mailboxes chowned to username:username Is there any way to tell dovecot to ignore the group ownership of /var/mail/username and focus instead on using username:username for everything in /home/username ? If I have to add every user to the mail group I can but this seems messy. Thanks!

2 1

[Dovecot] Direct groups of users to pairs of backend servers
by Murray Trainer 25 Mar '14

25 Mar '14

Hi All, I am using dovecot in the Director setup with multiple proxy and backend mailstores and user information stored in LDAP. I am aware users can be directed to a single backend server. It would be useful to be able to direct groups of users to pairs of backend servers to give some fault tolerance against NFS issues and make the whole thing more scalable. Otherwise each backend mailstore will need all the NFS mounts and the whole cluster will be affected if one NFS mount has an issue. I am not sure if this possible with the current dovecot implementation? If not it would be a great enhancement. Thanks Murray

2 3

Re: [Dovecot] Disconnected (auth failed, 1 attempts)
by Joseph Tam 25 Mar '14

25 Mar '14

ldaamandy <amandy_lda(a)outlook.com> writes: > {"username":"q1(a)t.com","password":"{CRYPT}$1$d5ef98b7$brWKOJiUiqII3DysGzsfl\/", ... Dovecot uses the uses the native crypt() which ought to recognize $1$ hashes, but maybe try changing it to "{MD5-CRYPT}". http://wiki2.dovecot.org/Authentication/PasswordSchemes Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] pb with setting quota_rule=backend quota=fs for quota-warning
by marion 25 Mar '14

25 Mar '14

Hello my config is debian wheezy with dovecot v.2.1.17-2., plugin quota /imap_quota is ok : I can read the real filesystem user quota for each different user with - doveadmin quota get - thunderbird - SOGo my problem is to configure quota-warning message : 1) if no quota_rule is defined then my dovecot-debug.log looks like Mar 25 18:28:02 imap(testuser): Debug:Quota warning: bytes=0 (80%) messages=0 ... 2) As soon as I set quota_rule = *:storage=1G , quota root is correctly defined, and quota-warning messages are sent according to the ratio I defined (cf below 90-quota.conf) with THIS limit (1G) , the same for all users and that’s not what I expect when I set individual quota... 3)And If define something like: quota_rule = * : backend (or backend=%q or …) dovecot definitively hangs with a) doveadm quota get -u testuser doveadm(testuser): Error: user testuser: Initialization failed: Failed to initialize quota: Invalid quota root quota: Invalid rule *:backend: Unknown rule limit name: backend b) even my login in SOGo hangs /var/mail/mail.err Mar 25 21:56:22 biwa dovecot: imap(testuser): Error: user testuser: Initialization failed: Failed to initialize quota: Invalid quota root quota: Invalid rule *:backend: Unknown rule limit name: backend Is there a way ( a variable ?) to link the real filesystem quota limit with the quota_warning process ? … something like quota_rule = *:storage=%VAR ? 90-quota.conf ------------------- plugin { quota_warning = storage=80%% quota-warning 80 %u quota_warning2 = storage=90%% quota-warning 90 %u } plugin { quota =fs } service quota-warning { executable = script /etc/dovecot/myconfig/quota-warning.sh unix_listener quota-warning { mode =0666 } } Thank you in advance best regards, Philippe ______________ Philippe Marion

1 0

[Dovecot] Getting second quota limit out of database
by dev＠stean.ch 25 Mar '14

25 Mar '14

Hello there, I am working with dovecot v2.2.12, and have setup a user and domain quota by using a quota/quota_rule for user and quota2/quota2_rule for the domain. This works fine when the limit configuration for both is stored inside dovecot configuration files. However, I would like to have the limits configurable on a user and domain base, and that data is stored inside my SQL database. Getting the user quota out of a database with SQL works fine, as documented with "SELECT whatever AS quota_rule FROM mytable", I extended my query to return quota2_rule too, but dovecot did not really do something with that value in the end, the domain limit was set to 0, as visible through the logs and with doveadm quota get ... Any idea or hint how I could get dovecot to read the limit for the domains out of my SQL database ? Thanks, Stephan

2 2

[Dovecot] mail-filter cannot work with large email about 700k
by boyd yang 25 Mar '14

25 Mar '14

Hi All I configured dovecot 2.1.7 with mail-filter plugin. It works well for small emails like server k big.(7k) But it failed with larger emails about 700k. The scripts hang out, and the mail-filter-out process does not exist and always in ps. It does not work even I use "cat" in mail-filter-out.sh. Where to set the size limit for mail-filter? Do you know how to fix this? This bug also exists in 2.2.12. Thanks!

1 1

[Dovecot] [LMTP] sieve filter does not drop privilleges?
by kjonca＠o2.pl 25 Mar '14

25 Mar '14

I have (user) sieve filter in my home dir. This filter uses "vnd.dovecot.filter" extension to call some shell scripts. These scrips creates some temporary files. Strange thing: whent sieve is called via dovecot-lda - these files are created by user "kjonca" when sieve is called via lmtp - these files are created by root. Is there any way to drop privilleges where lmtp passing messages to sieve? KJ -- http://wolnelektury.pl/wesprzyj/teraz/

1 0

[Dovecot] Dovecot mail-filter cannot work with large email about 700k
by boyd yang 25 Mar '14

25 Mar '14

Hi All I configured dovecot 2.1.7 with mail-filter plugin. It works well for small emails like server k big.(7k) But it failed with larger emails about 700k. The scripts hang out, and the mail-filter-out process does not exist and always in ps. It does not work even I use "cat" in mail-filter-out.sh. Where to set the size limit for mail-filter? Do you know how to fix this? This bug also exists in 2.2.12. Thanks!

1 0

[Dovecot] Disconnected (auth failed, 1 attempts)
by ldaamandy 25 Mar '14

25 Mar '14

hi : i just install dovecot-2 and start ok but login failed for test-user . i turn on all debug options , the debug info follow: "Mar 25 14:40:10 cs2c dovecot: imap-login: Disconnected (auth failed, 1 attempts): user=<q1(a)t.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured" and the info of input->w_buffer is : cp01 CAPABILITY a001 LOGIN "q1(a)t.com" "q1q1q1q1" the auth of dovecot.conf: >>>>>>>>>>>>>>>>>>>>> passdb { args = /etc/dovecot.master driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot-memcached.conf driver = dict } userdb { args = /etc/dovecot-memcached.conf driver = dict } [root@cs2c log]# telnet 127.0.0.1 11211 Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. get q1(a)t.com_imap VALUE q1(a)t.com_imap 0 205 {"username":"q1(a)t.com","password":"{CRYPT}$1$d5ef98b7$brWKOJiUiqII3DysGzsfl\/","home":"\/test\/mail","mail":"maildir:\/t.com\/q1@t.com","quota_rule2":"*:messages=11111","quota_rule":"*:bytes=11650727936"} END >>>>>>>>>>>>>>>>>>>>>>>>>>>>>> The relevant code is: >>>>>>>>>>>>>login-common/client-common.c<<<<<<< bool client_read(struct client *client) { switch (i_stream_read(client->input)) { //w_buffer:cp01 CAPABILITY a001 LOGIN "q1(a)t.com" "q1q1q1q1" case -2: /* buffer full */ client_send_line(client, CLIENT_CMD_REPLY_BYE, "Input buffer full, aborting"); client_destroy(client, "Disconnected: Input buffer full"); return FALSE; case -1: /* disconnected */ client_destroy(client, "Disconnected"); //debug infomation return FALSE; case 0: /* nothing new read */ return TRUE; default: /* something was read */ return TRUE; } } >>>>>>>>>>imap-login/client.c<<<<<<<<<< static void imap_client_input(struct client *client) { struct imap_client *imap_client = (struct imap_client *)client; if (!client_read(client)) return; client_ref(client); o_stream_cork(imap_client->common.output); for (;;) { if (!auth_client_is_connected(auth_client)) { /* we're not currently connected to auth process - don't allow any commands */ client_send_line(client, CLIENT_CMD_REPLY_STATUS, AUTH_SERVER_WAITING_MSG); if (client->to_auth_waiting != NULL) timeout_remove(&client->to_auth_waiting); client->input_blocked = TRUE; break; } else { if (!client_handle_input(imap_client)) break; } } o_stream_uncork(imap_client->common.output); client_unref(&client); } >>>>>>>>>>>>>>other-dovecot.conf>>>>>>>>>>>>>>>>>>>>>>>>>>>> .......... protocols = pop3 imap service auth { unix_listener /var/spool/postfix/dovecot-auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { group = testmail mode = 0666 user = testmail } user = testmail } service imap-login { service_count = 1 } service imap { drop_priv_before_exec = no executable = /usr/libexec/dovecot/imap } service pop3-login { service_count = 1 } service pop3 { drop_priv_before_exec = yes executable = /usr/libexec/dovecot/pop3 } ssl_cert = </etc/pki/NSMail/SSL.cert ssl_key = </etc/pki/NSMail/SSL.key userdb { args = /etc/dovecot-memcached.conf driver = dict } protocol lda { auth_socket_path = /var/run/dovecot/auth-master log_path = /var/log/sieve.log mail_plugins = menc sieve quota acl expire postmaster_address = root } protocol imap { mail_plugins = quota imap_quota zlib mdec imap_acl acl autocreate expire } #protocol vipimap { # mail_plugins = quota imap_quota zlib mdec imap_acl acl autocreate expire #} protocol pop3 { mail_plugins = quota zlib mdec expire pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_no_flag_updates = yes pop3_uidl_format = %08Xu%08Xv }

1 0

[Dovecot] Weird Authentication behaviour
by Jürgen Ladstätter 24 Mar '14

24 Mar '14

Hi guys, we use dovecot 2.0.9 and authentication against a mysql database. Everything works fine, but we found some weird behavior when the password is e.g. testpass you also authenticate successfully with testpass123 or testpassNOT. Whatever comes after the correct password doesnt matter, the authentication is still successful. Here are the used configs: // auth-sql.conf.ext passdb { driver = sql args = /etc/dovecot/dovecot-sql.conf.ext } userdb { driver = static args = uid=vmail gid=vmail home=/data/mail/%d/%n } // dovecot-sql.conf.ext driver = mysql connect = host=[IP] dbname=[DB] user=[USER] password=[PASS] default_pass_scheme = CRYPT password_query = SELECT `password`, `login` AS `user` FROM `v_email_accounts` WHERE `login`='%u' // 10-auth.conf disable_plaintext_auth = no auth_mechanisms = plain !include auth-sql.conf.ext // 10-master.conf default_process_limit = 1000 default_client_limit = 3003 default_vsz_limit = 1024M service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } service_count = 0 vsz_limit = 1024M } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service lmtp { unix_listener lmtp { } } service imap { vsz_limit = 1024M process_limit = 2048 } service pop3 { process_limit = 2048 } service auth { unix_listener auth-userdb { user = vmail group = vmail } client_limit = 8096 } service auth-worker { } service dict { unix_listener dict { } } Thanks in advance for your help!

4 3

[Dovecot] imap: Error: mmap() failed with file ... dovecot.index.cache: Cannot allocate memory
by Urban Loesch 24 Mar '14

24 Mar '14

Hi, since some days (about 10) I get the following error in mail error log many, many times: ... dovecot: imap(user(a)domain.com pid:32769 session:<dszL7lX1xADD/uGI>): Error: mmap() failed with file /home/dovecotindex/domain.com/user/mailboxes/Trash /dovecot.index.cache: Cannot allocate memory .... It's always the same "dovecot.index.cache" file and only for the same heavily used account. The account is currently used from about 10 different clients with imap at the sime time. I checked the size of the index cache file and it seems very big: total 2,7G -rw------- 1 mailstore mailstore 464 Mär 24 14:36 dovecot.index -rw------- 1 mailstore mailstore 464 Mär 24 14:36 dovecot.index.backup -rw------- 1 mailstore mailstore 2,7G Mär 24 14:19 dovecot.index.cache -rw------- 1 mailstore mailstore 140 Mär 24 14:45 dovecot.index.log -rw------- 1 mailstore mailstore 89K Mär 24 14:36 dovecot.index.log.2 About 2,7 GB? To solve the problem temporarily, I removed the index files from the index Trash folder and Dovecot initialized an index rebuild. Now the size of the index files are small: total 28K -rw------- 1 mailstore mailstore 512 Mär 24 14:47 dovecot.index -rw------- 1 mailstore mailstore 20K Mär 24 15:28 dovecot.index.cache -rw------- 1 mailstore mailstore 1,2K Mär 24 15:28 dovecot.index.log But why could the index cache file be so big? Many thanks Urban

1 0

[Dovecot] Dovecot/Django authentication
by Thomas Johnson 24 Mar '14

24 Mar '14

We've got an application in django that has passwords stored in both sha1 and pbkdf2_sha256 form. We need dovecot to be able to authenticate against the django database (we can't modify django to store passwords in dovecot's form, I'm afraid). Has anyone done a dovecot authentication plugin to support these password forms (and/or any other forms that django supports)? Thanks- Tom

2 1

[Dovecot] Case-sensitive INBOX or client issue?
by SB Code Ninja 24 Mar '14

24 Mar '14

I am using dovecot as an IMAP server for a Cisco product (Cisco Agent Desktop by Calabrio) and noticed some odd behavior when trying to access emails. The mail is delivered to the main INBOX, then a Cisco server moves it to a directory within the INBOX based on the queue it is meant for. Here is the directory structure of the Maildir: Maildir/INBOX Maildir/INBOX/tmp Maildir/INBOX/63 Maildir/INBOX/63/tmp Maildir/INBOX/63/dovecot.index.cache Maildir/INBOX/63/cur Maildir/INBOX/63/cur/1395445673.M548066P32100.uc-util,S=6403:2, Maildir/INBOX/63/dovecot.index.log Maildir/INBOX/63/dovecot-uidlist Maildir/INBOX/63/maildirfolder Maildir/INBOX/63/new Maildir/INBOX/dovecot.index.cache Maildir/INBOX/cur Maildir/INBOX/dovecot.index.log Maildir/INBOX/dovecot-uidlist Maildir/INBOX/62 Maildir/INBOX/62/tmp Maildir/INBOX/62/dovecot.index.cache Maildir/INBOX/62/cur Maildir/INBOX/62/cur/1395445491.M591207P32114.uc-util,S=6380:2, Maildir/INBOX/62/dovecot.index.log Maildir/INBOX/62/dovecot-uidlist Maildir/INBOX/62/maildirfolder Maildir/INBOX/62/new Maildir/INBOX/new Email is delivered to INBOX then gets moved to INBOX/62 or INBOX/63. The desktop software is then supposed to read the email and process it. I did a packet capture of the conversation and saw the following: IMAP Response: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE AUTH=PLAIN] Dovecot ready. IMAP Request: A0 AUTHENTICATE PLAIN IMAP Response: + IMAP Request: <redacted> IMAP Response: A0 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS] Logged in IMAP Request: A1 LIST "" Inbox/63 IMAP Response: A1 OK List completed. IMAP Request: A2 CREATE Inbox/63 IMAP Response: A2 NO [ALREADYEXISTS] Mailbox exists. If I login manually and do 'LIST "" INBOX/63' it works fine, but not with "Inbox/63". I was under the impression that INBOX was not case-sensitive. Is this a bug or is the client doing something silly? Thanks, Henry dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.7 disable_plaintext_auth = no mail_location = maildir:~/Maildir:LAYOUT=fs namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } protocols = " imap" ssl = no ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { driver = passwd } -- "The best way to predict the future is to invent it" - Alan Kay

3 2