- dovecot - dovecot.org

[Dovecot] Sieve Filter based on Email Body
by Roman Gelfand 21 Jan '14

21 Jan '14

Is it possible to file emails based on the contents of email body? If yes, can you point me to an example. Thanks in advance

2 1

[Dovecot] A variable for the unix user or home path would be useful in some cases
by interfaSys sàrl 20 Jan '14

20 Jan '14

Hello, In our hosting environment, we let users share mailboxes across all their domains and think it's best if the shared mailbox listing (in a file) stays in their unix home path. That would be: /home/USER/imap/shared-mailboxes.db Unfortunately, it seems there is no way to generate that path using a variable. Something like this would be convenient: acl_shared_dict = file:%v/imap/shared-mailboxes.db Instead, we have to use something like this: acl_shared_dict = file:~/../../../shared-mailboxes.db which only works for virtual users. Did somebody solve this another way? Could we have the unix user or home path as a variable? Or could we have a modifier giving us the path or the unix user based on the unix UID? Cheers, Olivier

1 0

Re: [Dovecot] imap abort after upgrade from 2.2.4 to 2.2.7
by morrison 20 Jan '14

20 Jan '14

When I did upgrade, 2.2.7 was the latest release. When I ran into the problem, I checked back and found 2.2.8 and 2.2.9 were released shortly one after another. It seemed these releases were sort of buggy. I would like to know if what I described in my previous email was an known issue and was addressed before upgrade to 2.2.10. We are using dovecot as our internal mail service. So stable is most important to us. Regards,

1 0

[Dovecot] mail check
by Paolo 20 Jan '14

20 Jan '14

Is there some simple script that parsing the dovecot.info.log can give me a list of the mail checks for a user (better if reports also the type (POP/IMAP), and result of the sessions (Ok/Fail/Error/...))? Regards, Paolo

2 2

[Dovecot] auth_default_realm, pam_krb5, gssapi
by Sergey Urushkin 20 Jan '14

20 Jan '14

Hi, Just writing here my note about auth_default_realm, pam_krb5 and gssapi. It seems that 'pam' passdb and 'gssapi' auth_mechanism doesn't honor 'auth_default_realm' setting, at least in several setups I deal with. Here is a part of the config: passdb { args = max_requests=100 cache_key=%u%r dovecot driver = pam } auth_default_realm = REALM.COM auth_mechanisms = plain login apop gssapi auth_username_format = %Uu The problem is that pam_krb5 strips default realm from username (by default), even if auth_default_realm is specified and even if user logs in as 'user1(a)realm.com' (with domain part). A part of auth.log: mail auth: pam_krb5(dovecot:auth): user USER1 authenticated as USER1(a)REALM.COM The same for GSSAPI auth, if specified authorization name doesn't contain domain part. A part of mail.log: mail dovecot: imap-login: Login: user=<USER1>, method=GSSAPI, rip=172.16.0.1, lip=192.168.1.1, mpid=5828, TLS, session=<bpzvRmDwPACsFwCX> For several reasons I do need username inside dovecot to contain domain part. So, I found a solution to this problem - modifying /etc/krb5.conf this way: [libdefaults] default_realm = REALM.COM [realms] REALM.COM = { auth_to_local = RULE:[1:$1@$0] } This will add realm part to the local username despite using default realm. Maybe it's better to put this example to the wiki? Tested with ubuntu 12.04 and dovecot 2.2.10, mit kerberos 1.10, amd64. Taking the opportunity, I'd like to ask, is there a way to make usernames case insensitive while using GSSAPI. The case: klist shows: Principal: user1(a)REALM.COM username in thunderbird 'uSer1(a)REALM.COM'. Dovecot gives me this message (I use auth_username_format=%Uu for pam_krb5 to be able to login with lowercase realm): dovecot: auth: gssapi(USER1(a)REALM.COM,172.16.0.1,<IIgwMGbw3ACsFgA4>): User not authorized to log in as USER1(a)REALM.COM As I know kerberos usernames are case insensitive (user part), at least kinit and windows against AD works that way. Seems that k5credentials passdb extra field will not help here too. Does anyone have an idea? Thanks. -- Best regards, Sergey Urushkin

1 0

[Dovecot] New document on troubleshooting Dovecot IMAP
by Steve Litt 20 Jan '14

20 Jan '14

Hi all, Check out my new document on troubleshooting Dovecot IMAP: http://www.troubleshooters.com/emailtech/imap_troubleshooting.htm Thank you to all those, on this mailing list and on the #dovecot IRC channel, for helping me with this. Thanks, SteveT Steve Litt * http://www.troubleshooters.com/ Troubleshooting Training * Human Performance

2 1

[Dovecot] Shared Folters with LDA/Sieve
by Dieter Knopf 19 Jan '14

19 Jan '14

Hello, i'm searching for a way to use Shared mailboxes with Sieve Filtering. I need global email addresses like: info(a)foo.tld contact(a)foo.tld help(a)foo.tld Every address with own Sieve-rules for filtering and sorting of incoming mails. Now every user needs access to this folders, but how? How should i create the "global" addresses? I already found http://wiki2.dovecot.org/SharedMailboxes/Public , but that's just a public namespace. Is there any FAQ available for this? Thank you very much Dieter

4 4

[Dovecot] Dovecot - not pulling pop3s email from virtual mbox
by Ganesh Hariharan 18 Jan '14

18 Jan '14

Hi All, I am bit strugging to get this work, and bit perplexed to set the right configuration to get this work, btw: I am using passdb without any DB based auth. the latest logs after debug mode setting is below Jan 16 09:27:04 ns dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/auth/libdriver_sqlite.so Jan 16 09:27:04 ns dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/auth/libmech_gssapi.so Jan 16 09:27:04 ns dovecot: auth: Error: passwd-file /etc/dovecot/users: User info(a)ghhdomain.com has invalid GID '/var/spool/mail/ghhdomain/info/' Jan 16 09:27:04 ns dovecot: auth: Debug: passwd-file /etc/dovecot/users: Read 0 users Jan 16 09:27:04 ns dovecot: auth: Fatal: No passdbs specified in configuration file. CRAM-MD5 mechanism needs one Jan 16 09:27:04 ns dovecot: master: Error: service(auth): command startup failed, throttling Please see my configs 10-mail.conf mail_location = maildir:/var/spool/mail/%d/%n 10-ssl.conf # SSL/TLS support: yes, no, required. <doc/wiki/SSL.txt> ssl = yes ssl_cert = </etc/postfix/newcert.pem ssl_key = </etc/postfix/newkey.pem auth-system.conf.ext #passdb { #driver = passwd-file #args = scheme=cram-md5 username_format=%u /etc/dovecot/passwd #} userdb { driver = passwd-file args = username_format=%u /etc/dovecot/users } auth-passwdfile.conf.ext passdb { driver = passwd-file args = scheme=CRYPT username_format=%u /etc/dovecot/users } users file look like this info(a)ghhdomain.com: {CRAM-MD5}e02d374fde0dc75a17a557039a3a5338c7743304777dccd376f332bee68d2cf6:503:503 I created using doveadm pw , and pasted the output to the above file Please let me know what went wrong, and what I need to do now... thanks G. userdb { driver = passwd-file args = username_format=%u /etc/dovecot/users I have made a mess of these configuration after many tries.. yet not sure what is the simple steps to make it work

2 7

[Dovecot] Sizing MTA servers
by Murray Trainer 18 Jan '14

18 Jan '14

Hi All, This is probably a bit off-topic but does anyone have any idea about sizing MTA servers. We have about 200,000 emails/hr incoming and outgoing. I am intending using Exim and Spamassassin on each MTA. How many servers using recent hardware would I need to cope with this mail throughput? What is more important on the servers, CPU or RAM? Should I have mail going both directions on each server or dedicate a pair each for incoming and outgoing mail> Thanks for any feedback. Murray

5 5

[Dovecot] doveconf base_dir
by Andreas Schulze 18 Jan '14

18 Jan '14

Hello, today I run the command "doveadm auth cache flush" for the first time. # doveadm auth cache flush doveadm(root): Error: userdb lookup: connect(/var/run/dovecotauth-master) failed: No such file or directory 0 cache entries flushed # base_dir was the only item contain 'run' and it did not end with a / So I tried to set base_dir to /var/run/dovecot/ and could now rerun "doveadm auth cache flush" without problems. I compile dovecot from source and found --with-rundir=/var/run/dovecot as an option to configure. I changed to /var/run/dovecot/, recompile and removed the base_dir setting in dovecot.conf again. Now "doveadm auth cache flush" work out of the box. doveconf -d base_dir is var/run/dovecot/. Finaly I compiled dovecot with --localstatedir=/var and removed --with-rundir from configure. The resulting package had again base_dir = /var/run/dovecot so "doveadm auth cache flush" don't work. looks like somewhere the missing / should be added in case base_dir has no trailing / without special configuration. Andreas

1 0

[Dovecot] imap abort after upgrade from 2.2.4 to 2.2.7
by morrison 17 Jan '14

17 Jan '14

Hi, I used to use dovecot 2.2.4. I saw lots of warnings saying 'Extension header update points outside header size'. I upgraded to dovecot 2.2.7, based on the discussion in mail list. Now, I see lots of imap aborts around: src/lib-index/mail-index-transaction-export.c:203: i_assert(u32.offset + u32.size <= ext_hdr_size); I also noticed, in some mailbox, imap process kept abort until all index files in the mailbox were manually deleted. Did someone run into the same problem and any solution to this? Thanks,

4 4

[Dovecot] Dovecot IMAP proxy for gmail IMAP server
by CM Reddy 17 Jan '14

17 Jan '14

Hi All, I am experimenting to use Dovecot as an IMAP proxy to GMAIL server. I would like configure my localhost as an Dovecot IMAP proxy and trying to access my GMAIL using the Thunderbird email client. Please share the steps to configure and access my mails from GMAIL server. - Thanks CM Reddy

2 1

[Dovecot] Use dovecot for enterprise
by ♥ NiNJA ♂ 17 Jan '14

17 Jan '14

Hi guys I like to know is it possible to create Unlimited number of email accounts with Unlimited Storage in each email ? Does anybody do it ? Does dovecot good enough for having more than millions of users ? Thanks :-)

3 2

[Dovecot] Changing user specific configs one at a time using userdb text file to override defaults...
by Charles Marcus 17 Jan '14

17 Jan '14

Hi all, Ok, I'm now interested in testing converting users one at a time to mdbox+SIS, but want to make sure I understand how to do this. It appears the best way - for smaller installations at least - is to just use a simple text file userdb to override the defaults, then once all of the users have been converted, change the defaults and remove the userdb txt file overrides. So, would love to hear details from others who have done something like this. Thx! -- Best regards, Charles

1 0

[Dovecot] Getting more out of the %w variable.
by Julian PG 17 Jan '14

17 Jan '14

Hello Dovecot community, I have a backend database application that handles all system wide user authentication (from web to mail and more). Passwords are not stored in plain text. So I would like to support more than PLAIN. Perhaps at least CRAM-MD5 or DIGEST-MD5 for example. Even though connections over TLS are encouraged (and even enforced). Some MUA and users still think its a better idea than PLAIN (even sent over an encrypted session). I have a vague memory of getting some warnings with thunderbird in regards to the use of PLAIN. Of course the %w variable would have to include the challenge as well as the response. Or perhaps even a seperate variable for the challenge? Or course at the moment the %w variable is an empty string for anything other than PLAIN. This would make some users and MUAs happy (even though pointless over TLS - I agree). Your thoughts would be appreciated. Regards, Julian. -- Not time for sigs!

2 1

[Dovecot] Received: header showing 127.0.0.1 after switch to dovecot LDA?
by Charles Marcus 16 Jan '14

16 Jan '14

Hi all, I'm guessing this is correct behavior, but wanted to make sure... I noticed that for locally delivered messages (between 2 local users inside our domain, so they never leave the server), the first Received: header line content changed after I switched to the dovecot LDA. Before, using postfix/virtual for delivery, the header looked like this: Received: from [192.168.1.25] (client.example.com [192.168.1.25]) by smtp.example.com (Postfix) with ESMTPSA id 67E33A20542; Wed, 6 Jun 2012 10:55:55 -0400 (EDT) But now it looks like this: Received: from [127.0.0.1] (client.example.com.com [192.168.1.14]) by smtp.example.com (Postfix) with ESMTPSA id 4EEF7802AF325 for <me(a)example.com>; Wed, 15 Jan 2014 18:29:17 -0500 (EST) so, 2 questions... 1. Why does it show 127.0.0.1 instead of the client IP, and 2. Why did postfix/virtual include the "for <me(a)example.com>;" but the dovecot LDA doesn't? Thanks, -- Best regards, Charles

2 1

[Dovecot] Replication file sizes
by IT geek 31 16 Jan '14

16 Jan '14

Hi, I'm using Dovecot 2.2.9 to replicate my mailbox to a remote server. My mailbox on ServerA is 235Mb, but on ServerB it ends up being 358Mb. Does anyone know why this is? Shouldn't they be the same size? doveconf -n from ServerA: # 2.2.9: /usr/pkg/etc/dovecot/dovecot.conf # OS: NetBSD 5.2 cobalt auth_mechanisms = plain login doveadm_password = secret doveadm_port = 12345 first_valid_uid = 1003 last_valid_uid = 1020 listen = 192.168.1.1 mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_plugins = " notify replication" passdb { driver = passwd } plugin { mail_replica = tcp:serverb.test.com } protocols = imap service aggregator { fifo_listener replication-notify-fifo { mode = 0666 } unix_listener replication-notify { mode = 0600 } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service doveadm { inet_listener { port = 12345 } } service imap-login { inet_listener imap { port = 0 } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0600 } } ssl_cert = </etc/openssl/certs/servera.test.com.crt ssl_key = </etc/openssl/private/serverb.test.com.key userdb { driver = passwd } protocol lda { postmaster_address = postmaster(a)test.com

1 0

[Dovecot] Dovecot 2 separate login for POP3 connections ?
by BONNET, Frank 16 Jan '14

16 Jan '14

Hello Is it possible to configure a separate logfile for incoming POP3 connections ( dovecot 2.2.9 ) thanks

3 3

[Dovecot] mail-filter always results in corrupted indexes
by martijn.list 16 Jan '14

16 Jan '14

Hi, I'm experimenting with the mail-filter plugin but whenever I add anything to a message, it always results in an corrupted cache: from the logs: Dec 14 16:09:55 ciphermail-webmail dovecot: imap(martijn=djigzo.com(a)ciphermail.private): Error: Corrupted index cache file /var/vmail/martijn=djigzo.com(a)ciphermail.private/dovecot.index.cache: Broken physical size for mail UID 76 Dec 14 16:09:55 ciphermail-webmail dovecot: imap(martijn=djigzo.com(a)ciphermail.private): Error: read() failed: Invalid argument Dec 14 16:10:02 ciphermail-webmail dovecot: imap(martijn=djigzo.com(a)ciphermail.private): Error: Cached message size smaller than expected (773 < 777) Dec 14 16:10:02 ciphermail-webmail dovecot: imap(martijn=djigzo.com(a)ciphermail.private): Error: Maildir filename has wrong S value, renamed the file from /var/vmail/martijn=djigzo.com@ciphermail.private/cur/1387033802.M114583P9631.ciphermail-webmail,S=773,W=791:2, t A do-nothing filter that just sends the input to the output works but whenever I add something trivial to the message, the cache is always corrupted. I using Dovecot 2.2.9.1 (from the deb archives). I use the following trivial test to add some XXX chars and and later remove them. In mail-filter.sh I append some chars and in mail-filter-out I filter these chars out (this is just a test) cat > /tmp/dovecot-in.txt echo "XXX" >> /tmp/dovecot-in.txt cat /tmp/dovecot-in.txt mail-filter-out: cat > /tmp/dovecot-out.txt sed -i /XXX/d /tmp/dovecot-out.txt cat /tmp/dovecot-out.txt Any idea what I'm doing wrong? Kind regards, Martijn Brinkers

5 6

Re: [Dovecot] Couldn't drop privileges
by Joseph Tam 16 Jan '14

16 Jan '14

From: CM Reddy <cmreddy(a)armor5.com> > userdb { > args = username_format=%u /etc/dovecot/users > driver = passwd-file > } > ... > Log information: > ... > Jan 13 16:42:44 cmreddy-Lenovo-G500s dovecot: imap(armor5): Error: user > armor5: Couldn't drop privileges: User is missing GID (see mail_gid setting) Fairly self-explanatory, isn't it? It appears your userdb does not specify GID for a user. Either define it, or ... In share/doc/dovecot/example-config/conf.d/10-mail.conf: # System user and group used to access mails. If you use multiple, userdb # can override these by returning uid or gid fields. You can use either numbers # or names. <doc/wiki/UserIds.txt> #mail_uid = ... if all your users share the the same GID, set it here. Joseph Tam <jtam.home(a)gmail.com>

2 1

[Dovecot] [Dovecot auth crash]
by Jeremy SPIESSER 16 Jan '14

16 Jan '14

Hi, I have a problem with dovecot auth and i don't know what happen .. running dovecot 2.1.7 When i try a login with user there is a crash in auth process: Jan 16 02:56:52 az-mail14 dovecot: auth: Panic: file auth-request.c: line 618 (auth_request_is_disabled_master_user): assertion failed: (request->requested_login_user != NULL) Jan 16 02:56:52 az-mail14 dovecot: auth: Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4414a) [0x7fcc4b30d14a] -> /usr/lib/dovecot/libdovecot.so.0(+0x4418e) [0x7fcc4b30d18e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fcc4b2e482a] -> dovecot/auth(+0x14af2) [0x7fcc4b78eaf2] -> dovecot/auth(auth_request_verify_plain+0x22) [0x7fcc4b790102] -> dovecot/auth(+0x1da10) [0x7fcc4b797a10] -> dovecot/auth(auth_request_handler_auth_continue+0xe2) [0x7fcc4b791cf2] -> dovecot/auth(+0x10420) [0x7fcc4b78a420] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7fcc4b31a016] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x7fcc4b31acc7] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7fcc4b319a28] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fcc4b306483] -> dovecot/auth(main+0x323) [0x7fcc4b788863] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7fcc4a70cead] -> dovecot/auth(+0xea75) [0x7fcc4b788a75] Jan 16 02:56:52 az-mail14 dovecot: auth: Fatal: master: service(auth): child 28622 killed with signal 6 (core dumps disabled) Jan 16 02:56:52 az-mail14 dovecot: imap-login: Warning: Auth connection closed with 1 pending requests (max 0 secs, pid=28621, EOF) Jan 16 02:56:53 az-mail14 dovecot: auth: Panic: file auth-request.c: line 618 (auth_request_is_disabled_master_user): assertion failed: (request->requested_login_user != NULL) Jan 16 02:56:53 az-mail14 dovecot: auth: Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4414a) [0x7f262370d14a] -> /usr/lib/dovecot/libdovecot.so.0(+0x4418e) [0x7f262370d18e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f26236e482a] -> dovecot/auth(+0x14af2) [0x7f2623b8eaf2] -> dovecot/auth(auth_request_verify_plain+0x22) [0x7f2623b90102] -> dovecot/auth(+0x1da10) [0x7f2623b97a10] -> dovecot/auth(+0x127f3) [0x7f2623b8c7f3] -> /usr/lib/dovecot/libdovecot.so.0(+0x390e5) [0x7f26237020e5] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f262371a016] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x7f262371acc7] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f2623719a28] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f2623706483] -> dovecot/auth(main+0x323) [0x7f2623b88863] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f2622b0cead] -> dovecot/auth(+0xea75) [0x7f2623b88a75] Jan 16 02:56:53 az-mail14 dovecot: auth: Fatal: master: service(auth): child 28632 killed with signal 6 (core dumps disabled) Jan 16 02:56:53 az-mail14 dovecot: imap-login: Warning: Auth connection closed with 1 pending requests (max 0 secs, pid=28621, EOF) Jan 16 02:57:13 az-mail14 dovecot: imap-login: Disconnected (auth process communication failure): user=<>, method=PLAIN, rip=172.16.21.3, lip=172.16.21.100, TLS, session=<yDZIvQzwogCsEBUD> Dovecot run with this config file: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.3 ext4 auth_anonymous_username = anonymous auth_cache_negative_ttl = 1 hours auth_cache_size = 0 auth_cache_ttl = 1 hours auth_debug = no auth_debug_passwords = no auth_default_realm = auth_failure_delay = 2 secs auth_first_valid_uid = 500 auth_gssapi_hostname = auth_krb5_keytab = auth_last_valid_uid = 0 auth_master_user_separator = auth_mechanisms = plain auth_proxy_self = auth_realms = auth_socket_path = auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Lu auth_username_translation = auth_verbose = no auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 30 base_dir = /var/run/dovecot config_cache_size = 1 M debug_log_path = default_client_limit = 10000 default_idle_kill = 1 mins default_internal_user = dovecot default_login_user = dovenull default_process_limit = 1000 default_vsz_limit = 1 G deliver_log_format = msgid=%m: %$ dict_db_config = director_doveadm_port = 0 director_mail_servers = director_servers = director_user_expire = 15 mins director_username_hash = %u disable_plaintext_auth = yes dotlock_use_excl = no doveadm_allowed_commands = doveadm_password = doveadm_proxy_port = 0 doveadm_socket_path = doveadm-server doveadm_worker_count = 0 dsync_alt_char = _ dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u -l%{lock_timeout} -n%{namespace} first_valid_gid = 1 first_valid_uid = 500 hostname = imap_capability = imap_client_workarounds = imap_id_log = imap_id_send = imap_idle_notify_interval = 2 mins imap_logout_format = in=%i out=%o imap_max_line_length = 64 k imapc_features = imapc_host = imapc_list_prefix = imapc_master_user = imapc_password = imapc_port = 143 imapc_rawlog_dir = imapc_ssl = no imapc_ssl_ca_dir = imapc_ssl_verify = yes imapc_user = %u import_environment = TZ info_log_path = instance_name = dovecot last_valid_gid = 0 last_valid_uid = 0 lda_mailbox_autocreate = no lda_mailbox_autosubscribe = no lda_original_recipient_header = libexec_dir = /usr/lib/dovecot listen = *, :: lmtp_proxy = no lmtp_save_to_detail_mailbox = no lock_method = fcntl log_path = syslog log_timestamp = "%b %d %H:%M:%S " login_access_sockets = login_greeting = Dovecot ready. login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c session=<%{session}> login_trusted_networks = mail_access_groups = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_cache_fields = flags mail_cache_min_mail_count = 10 mail_chroot = mail_debug = no mail_fsync = optimized mail_full_filesystem_access = no mail_gid = mail_home = mail_location = maildir:/data/vmail/%d/%n/Maildir:INDEX=/dev/shm/dovindex/%u mail_log_prefix = "%s(%u): " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 10 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /usr/lib/dovecot/modules mail_plugins = mail_prefetch_count = 100 mail_privileged_group = mail_save_crlf = no mail_shared_explicit_inbox = yes mail_temp_dir = /tmp mail_temp_scan_interval = 1 weeks mail_uid = mailbox_idle_check_interval = 30 secs mailbox_list_index = no maildir_broken_filename_sizes = no maildir_copy_with_hardlinks = yes maildir_stat_dirs = no maildir_very_dirty_syncs = no managesieve_client_workarounds = managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave master_user_separator = mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_md5 = apop3d mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = dotlock fcntl mdbox_preallocate_space = no mdbox_rotate_interval = 0 mdbox_rotate_size = 2 M mmap_disable = yes passdb { args = /data/vmail/conf/dovecot_shadow default_fields = deny = no driver = passwd-file master = yes override_fields = pass = no } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } pop3_client_workarounds = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_duplicates = allow pop3_uidl_format = %08Xu%08Xv pop3c_host = pop3c_password = pop3c_port = 110 pop3c_rawlog_dir = pop3c_ssl = no pop3c_ssl_ca_dir = pop3c_ssl_verify = yes pop3c_user = %u postmaster_address = protocols = quota_full_tempfail = no recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s replication_full_sync_interval = 12 hours replication_max_conns = 10 replicator_host = replicator replicator_port = 0 sendmail_path = /usr/sbin/sendmail service aggregator { chroot = . client_limit = 0 drop_priv_before_exec = no executable = aggregator extra_groups = fifo_listener replication-notify-fifo { group = mode = 0600 user = } group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replication-notify { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 0 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener auth-client { group = mode = 0600 user = } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = } unix_listener auth-userdb { group = mode = 0666 user = $default_internal_user } unix_listener login/login { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = . client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } unix_listener login/dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = port = 143 ssl = no } inet_listener imaps { address = port = 993 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service imap { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 4096 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 1 G } service indexer-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = indexer-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 10 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service indexer { chroot = client_limit = 0 drop_priv_before_exec = no executable = indexer extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service ipc { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = ipc extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener ipc { group = mode = 0600 user = } unix_listener login/ipc-proxy { group = mode = 0600 user = $default_login_user } user = $default_internal_user vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 1 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log unix_listener log-errors { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service managesieve-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = managesieve-login extra_groups = group = idle_kill = 0 inet_listener sieve { address = port = 4190 ssl = no } inet_listener sieve_deprecated { address = port = 2000 ssl = no } privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service managesieve { chroot = client_limit = 1 drop_priv_before_exec = no executable = managesieve extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = unix_listener login/sieve { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 110 ssl = no } inet_listener pop3s { address = port = 995 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service replicator { chroot = client_limit = 0 drop_priv_before_exec = no executable = replicator extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replicator { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0600 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_ca = </etc/ssl/gandi.pem ssl_cert = </etc/ssl/cert-azuria.net.crt ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL ssl_client_cert = ssl_client_key = ssl_crypto_device = ssl_key = </etc/ssl/azuria.key ssl_key_password = ssl_parameters_regenerate = 1 weeks ssl_protocols = !SSLv2 ssl_require_crl = yes ssl_verify_client_cert = no stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_session_min_time = 15 mins stats_user_min_time = 1 hours submission_host = syslog_facility = mail userdb { args = uid=1003 gid=1003 home=/data/vmail/%d/%n/Maildir default_fields = driver = static override_fields = } valid_chroot_dirs = verbose_proctitle = no verbose_ssl = no version_ignore = no protocol imap { imap_idle_notify_interval = 2 mins imap_max_line_length = 1 M mail_max_userip_connections = 10000 } protocol pop3 { pop3_enable_last = yes pop3_fast_size_lookups = no pop3_uidl_format = %08Xu%08Xv } protocol lda { auth_socket_path = /var/run/dovecot/auth-userdb log_path = /data/vmail/log/dovecot-deliver.log mail_plugins = cmusieve quota postmaster_address = postmaster(a)azuria.net } I try to find answers on forums and the internet but I found nothing. Can you help me with this problem? Thanks you! -- -- *Jeremy SPIESSER * 34 bd des Italiens 75009 Paris *tel:*01 44 54 30 00 *mob:*06 22 12 81 75 *fax:*01 70 24 83 67 www.azuria.net <http://www.azuria.net/> prefix et peering <https://lg.azuria.net/>

1 0

[Dovecot] EAGAIN in dict proxy
by Richard Platel 15 Jan '14

15 Jan '14

Hello, We’re using a custom program to manage quotas talking to dovecot via the dovecot dict proxy protocol over a unix socket: plugin { quota = dict:User quota::proxy:/var/run/auth_proxy_dovecot/quotasocket:quota } Dovecot gets slammed with quota requests periodically, seemingly because Thunderbird thought it would be a good idea to hardcode having a quota check at 45 seconds past the minute, and thus every Thunderbird client makes several GETQUOTAROOT requests simultaneously. This causes dovecot to make many client connections to the quota proxy, and many of them fail with EAGAIN. In the log we see: Jan 15 16:52:46 imap25 dovecot: imap(rplatel(a)tucows.com): Error: net_connect_unix(/var/run/auth_proxy_dovecot/quotasocket) failed: Resource temporarily unavailable And the client gets: * QUOTAROOT Spam "User quota"[0d][0a] * QUOTA "User quota" ()[0d][0a] * BAD Internal quota calculation error[0d][0a] 19 OK Getquotaroot completed.[0d][0a] Thunderbird transparently disconnects and reconnects at this point but obviously this is not ideal. Writing some toy programs, I found that even making a forked server with several processes doing nothing but accept()ing on the listening socket, with a high number for the listen queue, it’s easy to overwhelm it with simultaneous clients who then get EAGAIN. If the clients do indeed immediately try again, they are successful. (An INET listening socket does not seem to have this problem, incidentally) All of this is a long-winded way of saying that I believe in lib-dict/dict-client.c:client_dict_connect() the call to net_connect_unix should be a call to net_connect_unix_with_retries() with a small timeout. It would also be useful for us if an INET socket could be used.

1 0

[Dovecot] int/ext mailserver
by Mr.Pine 15 Jan '14

15 Jan '14

I 'm using potfix-dovcote as an internal mail server(local.myco.com) and wan to run another potfix-dovcote as an external mail server (myco.com) on Internet.75% of my users should only work internally(no external mail) but the rest of users (25%)should be able to send mail to external network! These users have the same username on myco.com. I use smtp_generic_maps to map int username of these users to ext. one. For eg. All email send by test(a)local.myco.com map to test(a)myco.com. So anyone got these mails can reply them. I know that getmail is the tools that can get mails from users external mailbox and put them into int. mailbox. 1. I have a root access to ext mail server. But do not know my ext user password!. How can I use getmail to move ext mail to internal one?! 2. What is your idea about syncing users password in internal/external mail server?! I think its needed for getmail! 3. How can I restrict my internal users to send mail only internally!? I appreciated any help!! TNX

2 1

[Dovecot] restored mails
by Wojciech Giel 15 Jan '14

15 Jan '14

Hello, I am running dovecot 2.1 on debian wheezy . We are using maildir format. one of our uses deleted content of INBOX folder during xmass. he wants these messages back. I had these mail on tape. I have restored them to his inbox/cur directory but dovecot is not indexing them. Email client shows empty inbox as well. tried manually run: doveadm index -u john -q INBOX no change. deleting indexes didn't help. How to restore these email? thanks Woj my config: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.3 auth_debug = yes auth_mechanisms = plain login cram-md5 auth_verbose = yes listen = * log_path = /var/log/dovecot.log log_timestamp = "%Y-%m-%d %H:%M:%S " login_greeting = IMAP Server is ready. mail_debug = yes mail_location = maildir:~/Maildir:INDEX=~/dovecot-control/indexes:CONTROL=~/dovecot-control:LAYOUT=fs mail_plugins = " quota trash" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { driver = pam } passdb { args = scheme=cram-md5 /etc/dovecot/passwd driver = passwd-file } plugin { antispam_backend = pipe antispam_debug_target = syslog antispam_mail_sendmail = /usr/bin/sa-learn-pipe.sh antispam_pipe_program_notspam_arg = --ham antispam_pipe_program_spam_arg = --spam antispam_pipe_tmpdir = /tmp antispam_spam = Junk;Spam antispam_trash_pattern = Trash;Deleted * antispam_verbose_debug = 0 autocreate = INBOX autocreate2 = Sent autocreate3 = Trash autocreate4 = Drafts autocreate5 = Junk autosubscribe = INBOX autosubscribe2 = Sent autosubscribe3 = Trash autosubscribe4 = Drafts autosubscribe5 = Junk quota = maildir:User quota quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u quota_warning3 = -storage=100%% quota-warning below %u sieve = ~/.dovecot.sieve sieve_default = /var/spool/dovecot/default.sieve sieve_dir = ~/sieve sieve_global_dir = /var/spool/dovecot/ trash = /etc/dovecot/dovecot-trash.conf.ext } protocols = imap sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { mode = 0666 } } service managesieve-login { inet_listener sieve { port = 2000 } } service quota-warning { executable = script /usr/bin/dovecot-quota-warning.sh user = postfix } ssl_ca = </etc/postfix/ssl/cacert.pem ssl_cert = </etc/postfix/ssl/servercrt.pem ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP-ADH-DES-CBC-SHA:!EXP-EDH-RSA-DES-CBC-SHA:!EXP-DES-CBC-SHA:!EXP-RC2-CBC-MD5:!EXP-RC4-MD5:!EXP-ADH-RC4-MD5:!ADH-DES-CBC3-SHA:!ADH-RC4-MD5:!ADH-DES-CBC3-SHA:!ADH-AES128-SHA:!ADH-AES256-SHA:!ADH-RC4-MD5:!RC4 ssl_key = </etc/postfix/ssl/serverkey.pem userdb { args = /etc/dovecot/passwd driver = passwd-file } userdb { driver = passwd } protocol lda { deliver_log_format = msgid=%m: %$ info_log_path = /var/log/dovecot-deliver.log log_path = /var/log/dovecot-deliver.log mail_plugins = " quota trash autocreate sieve" postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep delay-newmail tb-lsub-flags mail_max_userip_connections = 10 mail_plugins = " quota trash imap_quota autocreate antispam" } 1379333576.M520387P21423.pine,S=5016,W=5183:2,S 1389710739.M139355P6177.pine,S=38933,W=39648:2,Sd 1379340386.M670300P24951.pine,S=2282,W=2328:2,S 1389710937.M15977P6316.pine,S=20426,W=20831:2,Sd 1379342173.M207466P25909.pine,S=2649,W=2700:2,S 1389715067.M350398P8795.pine,S=18288,W=18549:2,Sd 1379343332.M808399P26628.pine,S=3862,W=3952:2,S 1389715305.M250290P8929.pine,S=4264,W=4346:2,Sd 1379343742.M248785P27359.pine,S=4772,W=4891:2,RS 1389723554.M26883P13831.pine,S=47655,W=47979:2,d 1379343783.M47728P27388.pine,S=22571,W=23053:2,S root@pine:/home/john/Maildir/INBOX/cur#

3 3

[Dovecot] Why does dovecot require the {} password sheme even if there is a $ crypt scheme.
by da-dovecotlist-15＠abelonline.de 15 Jan '14

15 Jan '14

The wiki[1] says: If all the passwords are in same format, you can use default_pass_scheme to specify it. Otherwise each password needs to be prefixed with "{password-scheme}", for example "{plain}plaintext-password". Why doesn't dovecot recognize the crypt scheme identifier ($1$ for MD5-CRYPT, $6$ for SHA512-CRYPT etc.)? At the moment I have to have the following in my db for dovecot to work: {SHA512-CRYPT}$6$salt$passwordhash [1]http://wiki2.dovecot.org/AuthDatabase/SQL

2 2