- dovecot - dovecot.org

[Dovecot] fail2ban
by Nick Edwards 05 Oct '13

05 Oct '13

For dovecot 2.1 as per wiki2, is this still valid? noticed a problem before and saw it does seem to be triggering, I use: maxretry = 6 findtime = 600 bantime = 3600 and there was like, 2400 hits in 4 minutes, it is pointing to the correct log file, but I am no expert with fail2ban, so not sure if the log format of today is compatible with the wiki2 entry filter.d/dovecot.conf [Definition] failregex = (?: pop3-login|imap-login): (?:Authentication failure|Aborted login \(auth failed|Aborted login \(tried to use disabled|Disconnected \(auth failed).*rip=(?P<host>\S*),.* ignoreregex =

4 7

[Dovecot] Fixing Timestamps
by LuKreme 05 Oct '13

05 Oct '13

I have a user with a lot of email (A LOT of email, probably over 500,000 emails). Recently, several thousand messages of his were lost, and I pulled them out of the backup archives (zip files containing each days emails in an mbox) that are created on his account and fed them into his procmail scripts and they were all processed just fine and ended up in the right directories. Except. The messages were from 6 months back, and the messages now show up in his mail client with the time stamp of the date they were restored, and not the date that shows up in the headers of the message. Anything I can do? -- I AM NOT A LICENSED HAIRSTYLIST Bart chalkboard Ep. AABF04

5 8

[Dovecot] Dovecot sending quota warning to MAILER-DAEMON
by Mathieu R. 05 Oct '13

05 Oct '13

Hello, i'm testing quota now, and dovecot is not sending quota warning to the user, but to MAILER-DAEMON, wich obviously give me an error. here is my 90-quota.conf http://paste.debian.net/50580/ dovecot 2.1.7, on debian stable any idea ? -- Mathieu R.

1 1

[Dovecot] On mailboxes, separators, and dovecot2
by Mauricio Tavares 04 Oct '13

04 Oct '13

While I was running dovecot 1.2.9, I had my mailboxes using the old Courier IMAP format. i.e. my mailboxes would look like INBOX.Orders.Scams Going to dovecot 2 (but not 2.1), I see to have a few questions: 1) It seems I would device my mailbox thingies in 10-mail.conf: namespace inbox { inbox = yes separator = . location = prefix = INBOX. type = private mailbox SPAM { auto=subscribe special_use = \Junk } mailbox Trash { auto=subscribe special_use = \Trash } mailbox Sent { auto=subscribe special_use = \Sent } } but how would I prepresent my INBOX.Orders.Scams folder? Something like mailbox Orders.Scams { auto=subscribe } perhaps? 2) Reading (am I literate?) through http://wiki2.dovecot.org/Namespaces, it seems having separator = . is not only outdated but also a bad idea (but, I had child mailboxes as shown above). Could anybody elaborate one that? And which clients still do LSUB *?

1 0

[Dovecot] version 2.2.6 breaks compiling on Solaris 10 sparc
by Jake Goerzen 04 Oct '13

04 Oct '13

Hello, I maintain the dovecot package at opencsw.org. The latest release of dovecot verison 2.2.6 has some changes to lib-http which is breaking compiling on Solaris 10 sparc (though x86 builds successfully). Here is part of the compiler output while building: libtool: compile: /opt/SUNWspro/bin/cc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-test -I../../src/lib-dns -I../../src/lib-ssl-iostream -I/opt/csw/include/mysql -I/opt/csw/include/postgresql -I/opt/csw/include -xO3 -m32 -xarch=sparc -I/opt/csw/include -c http-header-parser.c -KPIC -DPIC -o .libs/http-header-parser.o "http-header-parser.c", line 264: warning: statement not reached "http-header-parser.c", line 281: warning: argument #3 is incompatible with prototype: prototype: pointer to unsigned int : "../../src/lib/istream.h", line 152 argument : pointer to unsigned long long "http-header-parser.c", line 317: warning: argument #2 is incompatible with prototype: prototype: pointer to unsigned int : "../../src/lib/buffer.h", line 93 argument : pointer to unsigned long long and then later on a linking error: /bin/bash ../../libtool --tag=CC --mode=link /opt/SUNWspro/bin/cc -xO3 -m32 -xarch=sparc -I/opt/csw/include -no-undefined -m32 -xarch=sparc -L/opt/csw/lib -o test-http-url test-http-url.o http-url.lo ../lib-test/libtest.la ../lib/liblib.la -export-dynamic -lrt -lnsl -lsocket -lsendfile libtool: link: /opt/SUNWspro/bin/cc -xO3 -m32 -xarch=sparc -I/opt/csw/include -m32 -xarch=sparc -o test-http-url test-http-url.o .libs/http-url.o -L/opt/csw/lib ../lib-test/.libs/libtest.a ../lib/.libs/liblib.a -lrt -lnsl -lsocket -lsendfile Undefined first referenced symbol in file http_header_field_find .libs/http-url.o http_header_field_get .libs/http-url.o http_header_get_fields .libs/http-url.o ld: fatal: symbol referencing errors. No output written to test-http-url version 2.2.5 and previous releases of dovecot have compiled successfully on both Solaris sparc & x86. Regards, jgoerzen(a)opencsw.org

3 4

[Dovecot] Can sieve filter mail based on emails earlier in the thread?
by Hugh Davenport 03 Oct '13

03 Oct '13

Basically I want the following scenario: Subscribe to lots of mailing lists - each filtered into separate folders When I participate in a thread (by starting it, replying to it, or ... setting a flag on an email in the thread) - filter into the particular mailing list folder - AND filter into INBOX (or another folder of my choosing) I'm thinking for this, the first two can have rules that take into account In-Reference-To and using my domain. But the third case of using a flag... that seems to require referencing earlier emails in the thread. Is this possible in sieve? Or am I barking up the wrong tree? I believe gmail can do it, but who knows what they use for their filtering... Thanks for any help anyone provides! Cheers, Hugh

2 1

[Dovecot] Proxy to gmail help
by Alex Wanderley 03 Oct '13

03 Oct '13

Hello, I understand the matter of using Dovecot as a forward proxy to Gmail is very popular (and even trivial), but my lack of Dovecot experience took me to at point where I truly need your help... I'm starting my task by trying to have something simple, where I can test connectivity to Gmail by sending a telnet to our Dovecot server. The Dovecot server accepts the telnet request, but for some reason (and here I guess is something related to SSL/TLS), I can't get to Gmail. Here my configuration and logs/outputs: ==> OS: * I'm using an old Centos 5.8 server as a proof of concept. ############################################################# ==> Dovecot configuration: # 2.2.5: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-308.8.2.el5xen x86_64 CentOS release 5.8 (Final) auth_cache_negative_ttl = 10 mins auth_cache_size = 1 k auth_cache_ttl = 10 mins auth_debug = yes auth_debug_passwords = yes auth_mechanisms = cram-md5 digest-md5 apop login plain auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@% auth_username_translation = %@AaBbCcDdEeFfGgHhIiJjKkLlMmNnOoPpQqRrSsTtUuVvWwXxYyZz auth_verbose = yes base_dir = /var/run/dovecot/ disable_plaintext_auth = no listen = XXX.XXX.XXX.XXX login_greeting = Dovecot Ready login_log_format_elements = %u %r %m %c mail_debug = yes mail_max_userip_connections = 100 passdb { args = /etc/dovecot/sql.conf driver = sql } protocols = pop3 service pop3-login { client_limit = 200 inet_listener pop3 { address = dovecotserver.<full domain> port = 110 } process_limit = 1 process_min_avail = 1 service_count = 0 vsz_limit = 256 M } shutdown_clients = no ssl_ca = /etc/pki/dovecot/certs/dovecot.pem ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_cipher_list = EECDH+AES:EDH+AES:-SHA1:EECDH+RC4:EDH+RC4:RC4-SHA:EECDH+AES256:EDH+AES256:AES256-SHA:HIGH:!aNULL:!eNULL:!EXP:!MD5:!LOW:!SSLv2 ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = static uid=10000 gid=10000 home=/dev/null driver = static } verbose_ssl = yes version_ignore = yes ############################################################# ==> sql.conf file driver = mysql connect = host=/var/lib/mysql/mysql.sock dbname=mysql user=root password=xxxxxx password_query = SELECT NULL AS password, host, destuser, proxy, 'Y' AS starttls, '995' AS port, 'Y' AS nopassword FROM DovecotProxy WHERE user = '%u' ############################################################# ==> DovecotProxy table mysql> select * from DovecotProxy where user = 'MYUSER'; +-------------+---------------+-----------------------+------------------------------------------------+-------+ | user | host | destuser | password | proxy | +-------------+---------------+-----------------------+------------------------------------------------+-------+ | MYUSER | pop.gmail.com | MYUSER(a)gmail.com | {MD5-CRYPT}$1$L824LVh4$r.hyZ icsE5tmGaeJrY/dw/ | Y | +-------------+---------------+-----------------------+------------------------------------------------+-------+ ##>> I understand "proxy" and "password" are not required there. That happened for testing. ############################################################# ==> Telnet session: xxxxxx [/tmp] > telnet dovecotserver 110 Trying XXX.XXX.XXX.XXX... Connected to dovecotserver. Escape character is '^]'. +OK Dovecot Ready <6111.1.524dad13.VYOVkhqfe1Ox7Wz+VfogMg==@dovecotserver> user MYUSER +OK pass PASSWD -ERR Account is temporarily unavailable. quit +OK Logging out Connection to dovecotserver closed by foreign host. ############################################################# ==> Logged messages in /var/log/mailllog: Oct 3 12:23:02 dovecotserver dovecot: master: Warning: Killed with signal 15 (by pid=26790 uid=0 code=kill) Oct 3 12:23:53 dovecotserver dovecot: master: Dovecot v2.2.5 starting up (core dumps disabled) Oct 3 12:23:53 dovecotserver dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Oct 3 12:23:53 dovecotserver dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Oct 3 12:23:53 dovecotserver dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so Oct 3 12:23:53 dovecotserver dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Oct 3 12:23:53 dovecotserver dovecot: auth: Debug: Read auth token secret from /var/run/dovecot//auth-token-secret.dat Oct 3 12:23:53 dovecotserver dovecot: auth: Debug: auth client connected (pid=26810) Oct 3 12:24:30 dovecotserver dovecot: auth: Debug: client in: AUTH 1 PLAIN service=pop3 session=/IH8S9rnzACiat/X lip=162.106.XXX.YYY rip=162.106.XXX.ZZZ lport=110 rport=37836 resp=AHNtYXJ0YnVzZWRtAHMwbWV0aGluZw== (previous base64 data may contain sensitive data) Oct 3 12:24:30 dovecotserver dovecot: auth: Debug: cache(MYUSER,162.106.223.215,</IH8S9rnzACiat/X>): miss Oct 3 12:24:30 dovecotserver dovecot: auth-worker(26823): Debug: Loading modules from directory: /usr/lib64/dovecot/auth Oct 3 12:24:30 dovecotserver dovecot: auth-worker(26823): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Oct 3 12:24:30 dovecotserver dovecot: auth-worker(26823): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so Oct 3 12:24:30 dovecotserver dovecot: auth-worker(26823): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Oct 3 12:24:30 dovecotserver dovecot: auth-worker(26823): Debug: sql(MYUSER,162.106.XXX.ZZZ): query: SELECT NULL AS password, host, destuser, proxy, 'Y' AS starttls, '995' AS port, 'Y' AS nopassword FROM DovecotProxy WHERE user = 'MYUSER' Oct 3 12:24:30 dovecotserver dovecot: auth: Debug: client passdb out: OK 1 user=MYUSER host=pop.gmail.com destuser= MYUSER(a)gmail.com proxy starttls=Y port=995 nopassword=Y hostip=74.125.142.108 pass=XXXXXXXXX Oct 3 12:24:30 dovecotserver dovecot: pop3-login: Debug: Ignoring unknown passdb extra field: nopassword Oct 3 12:25:00 dovecotserver dovecot: pop3-login: Error: proxy(MYUSER): Login for pop.gmail.com:995 timed out in state=0 (after 30 secs, local=162.106.XXX.YYY:51196) Oct 3 12:25:12 dovecotserver dovecot: pop3-login: Aborted login (internal failure, 1 successful auths): MYUSER, 162.106.XXX.ZZZ, PLAIN ==> Something that caught my attention here: "....proxy starttls=Y..." shouldn't look like "...proxy=Y starttls=Y..." ??? I didn't see "...proxy=Y..." even after setting the sql query like "...'Y' as proxy...". ############################################################# If you had the patience to read this far, thanks a lot for trying to help... Alex

1 0

[Dovecot] How to configure statistics tracking
by Bruce Marriner 03 Oct '13

03 Oct '13

I'm trying to configure the dovecot statistics tracking option with Dovecot 2.1.12 on FreeBSD 9.1-RELEASE. I've seen on the wiki page the configuration settings needed for this but it does not say which configuration file these settings should be added to. http://wiki2.dovecot.org/Statistics I was hoping someone could tell me which file these settings should be added to? Do they all just go into the same file or different files? I have a primary dovecot.conf file then inside conf.d/ there are dozens of files that hold the configuration settings for all the different parts of dovecot. Would I just add all of these settings into a conf.d/stats.conf file that would be pulled into the main configuration? Does it matter what order the (10-stats.conf, 20-stats.conf, etc) the file is set for? Thanks.

3 2

[Dovecot] Username issue with Dovecot LDA, IMAP and Winbind Authentication
by Laz Peterson 03 Oct '13

03 Oct '13

Hi there Dovecot community -- I'll try to make this short. Here's the setup … Ubuntu 12.04, Postfix, Dovecot, along with Amavis/Clamd/Spamassassin. Postfix is currently receiving emails for virtual users in multiple domains, all of which are authenticating through Winbind to Windows AD servers. The users log in to the POP/IMAP/SMTP services using the format user(a)domain.corp (the internal domain, not the external mail domain). The domains are all in the same forest, but there are many different domains to authenticate against. Dovecot is currently handling POP, IMAP, and authentication. Postfix uses a MySQL database to map the external email domain to the internal AD domain, for example domain.com -> domain.corp. Postfix also queries the same SQL database for where to save the messages -- /home/vmail/domain\user -- I have the SQL query strip off the ".corp". I had to do this because pam_winbind returns the usernames as "DOMAIN\user" upon successful Dovecot authentication, instead of "user(a)domain.corp", which ends up invalidating all of the %u, %n, and %d variables. On the user side, after successful auth, I can only define %u and %n in my Dovecot configuration -- %d is null, %u is "DOMAIN\user", and %n is "DOMAIN\user". (I use %Lu or %Ln to make it all lower-case.) With this, I am able to authenticate users off of multiple domains, have the mail delivered to a folder that is also accessible to the user when they log in. It serves its purpose. Here's my problem. I am trying to now integrate Pigeonhole and ManageSieve using Dovecot-LDA specified by "virtual_transport", and this is where things get confusing. Dovecot IMAP/POP/SMTP auth notes the user account to be "DOMAIN\user", while Dovecot-LDA receives the email to user(a)domain.com, noting the user account to be "user(a)domain.corp". The same arguments for userdb in "auth-system.conf.ext" are used by both Dovecot when user is logging in for IMAP/POP/SMTP and Dovecot-LDA when it is storing the mail. Because of the way pam_winbind returns the usernames without being able to use %d anymore, I cannot seem to get the same behavior for both sides of Dovecot. For example, if I set home and maildir to "/home/vmail/%Ln", Dovecot-LDA delivers emails into the folder "/home/vmail/user(a)domain.corp" and Dovecot IMAP/POP looks in "/home/vmail/domain\user". If I set the home/maildir to "/home/vmail/%Ld/%Lu", Dovecot-LDA delivers emails into the folder "/home/vmail/domain.corp/user" and Dovecot IMAP/POP looks in "/home/vmail/\/domain\user". So, I seem to be thoroughly unable to get something here that works … The closest I can get is setting home/maildir to "/home/vmail/%Ld\%Lu", but that now gives the LDA side "/home/vmail/domain.corp\user" and the IMAP/POP/SMTP side "/home/vmail/\\domain\user". If I am able to get pam_winbind to return "user(a)domain.corp" instead of "DOMAIN\user", I'd be fine. Or, if I could set the home and maildir locations separately for Dovecot-LDA and Dovecot, I would also be okay. Any suggestions? I know this is probably a Winbind limitation, but I do not know a thing about working with PAM authentication. I tried to compile and install a pam_regex module (which seems to not be offered as a native package in Ubuntu), but it gives errors after adding that to my PAM configuration. I'm stumped. Please let me know if I can include my configuration for either Postfix or Dovecot. Thank you so much for any help. ~ Laz Peterson

1 2

[Dovecot] understanding user_attrs and mail_uid/gid
by Vincent Zakofski 03 Oct '13

03 Oct '13

Hello, I'm trying to understand what's the difference between those parameters. In my dovecot.conf in the global section I have a definition of mail_uid and mail_gid. In my LDAP configuration used by passdb and userdb, I have a definition for user_attrs= uidNumber=500,gidNumber=8. Here is a part of my configuration files (dovecot version: 2.1.7) dovecot.conf mail_gid = 8 mail_uid = 500 passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } dovecot-ldap.conf user_filter = (&(objectClass=posixAccount)(mailLocalAddress=%n)) user_attrs = uidNumber=500,gidNumber=8 So everything works fine when all those parameters are present in my configuration files. If I suppress one of them nothing is working (mail reading or delivering). Can someone tell me where I can find a definition of those arguments, if found nothing relevant on the wiki. Thanks,

1 0

[Dovecot] sieve notify and lmtp
by Lampa 02 Oct '13

02 Oct '13

Hello, i've setup sieve script which send notify to user (user(a)domain.com) But user(a)domain.com is alias user(a)domain.com and user(a)anotherdomain.com. LMTP delivers notification only to user(a)domain.com but not to user(a)anotherdomain.com. How to force send notification over smtp (which will be delivered to both) or i must use to=user(a)anotherdomain.com in notify ? Thank you for your advices. Lampa

2 1

[Dovecot] Dovecot namespace solved while writing; preparing to refilter
by miro.rovis＠croatiafidelis.hr 02 Oct '13

02 Oct '13

Hi! My plea to readers: =================== Pls., people who only want strictly technical issues to read, and frown at any broader context regardless how intrinsically related, but not strictly technically related, it might be, skip all the way, all the way to, search for exact words: "strictly technical" or visually, find two lines of sole "===" characters. Thank you! Upon umptieth failure, and having cloned the system onto another same arch, much more: same MBO-model box (cloning and restoring clean is my defence to get the system into as clean a state as can be, after any longer time online --I had had systems comprimised, and now I am a little paranoid)... So, after weeks of some failures in some phases of installations of dovecot and friends (as explained further in this text), I cloned the same system, but from previously taken clean backup, used it some time, and now I want to update the mailbox back because now the first system is in clean state, having I restored from clean backup... This is a Debian weekly testing install, which I clone btwn two same MBO-model boxes to keep it as clean as a non-expert user like me can have it... To a large extent I do trust installing and update/upgrading my systems from the weekly builds (but hey, why don't they PGP-sign those as kernel tarballs and as Grsecurity or Tor-browser tarballs are signed? any Debian developer reading this, why not?)... because I can check with some trust the weekly builds' sums for integrity, but how and why could or would I trust simply installing anything straight from the internet? By cloning (I used to dd disk dump when cloning, but nowadays it seems faster and reliable enough with Sysresccd's fsarchiver, so I dd just the small boot partition), by cloning I keep the system as close to clean as those non-pgp-signed weekly builds allow... Now add to that that the real FFmpeg is not allowed into Debian, and I am a fan of it (I very much use it, it's running almost all the time, on some or other of my systems), but you have to get it through deb-multimedia.org if you want it on Debian (what freedom is that, banning programs from official repositories?!)... and add to that that I want Grsecurity/Pax at all cost, in my system, and not: http://www.nsa.gov/research/selinux/ which I don't want in my system, at all cost, but to which the Debian current leadership seems to be total-blind-fidelity bound to... Add those and you get pretty much all the basic ingredients of my fight for freedom and true privacy which are layed siege onto in the GNU/Linux Operating System and the few related other free OS's, in most of its flavors and branches and deployments of the day, from the outside and also from the inside. Because even with the long-delayed-in-updating gNewSense, for insufficient developer power (I mean: too few), probably, what's the use of the fine deblobbed kernel if they put SELinux into it? Where's freedom with what I suspect can not be other than fake security with surreptitious surveillance? (BTW, go and ask people, but not loudly, who compile their Gentoo's --there' a link to my short post on forums.gentoo.org a few lines below-- like I compile (on other systems of mine), only a minority of very uninformed or some special entities' aficionados use anything other than Grsecurity on their Hardened Gentoos --and Gentoo is unquestionably the leader in hardening-- it's not just me, it's only that I am loud about it)... But I also tried to call this issue to GNU-freedom seeking people's attention such as here: https://lists.nongnu.org/archive/html/gnewsense-users/2013-09/msg00001.html and entire thread: Grsecurity on gNewSense, but for real? I didn't mean to dwell on these issues here, and it is not the reason I write my messege to dovecot-mailing list, but this is the broad perspective of my, and I am sure not only my case, of my deployment of dovecot and broadly these are the reasons why I deploy it on my system. No, this broader picture I don't think is not off-topic. I did think hard about it... No, I believe it is good to mention these issues in this post-Snowden era when the scale and scope of total surveillance can not be successfully sneered and scoffed at and dismissed, like some "exceptional" (Obama talking to the U.S. of A. nation in September 2013, in his quest for support, thankfully lacking, of then being planned Iraq-2003-like-in-pretence-and-lies attack-to-be on Syria)... like some "exceptional" people would want it (that's the Gentoo Forum's link mentioned above)... http://forums.gentoo.org/viewtopic-t-967806.html A case of actual protection of my Gentoo box by Grsecurity At least these issues should not be anymore successfully sneered and scoffed at and dismissed, but we're all less and less free as mankind... And, since I don't connect to my SOHO network the box which I open to the internet, I have mails to refilter into the very probably clean cloned box... And I need to refilter using dovecot (which I finally got to work)... These lines, all the dozen or so paragraphs from the beginning up unto here, do appear first for reading, but are written just about all the very last, after the rest of the text below has already been written, except the final proofreading notes intersparsed). ============================================================================= ============================================================================= Now nearly only strictly technical I go, for the sake of people who prefer so. That maildir mailbox being all poorly sorted (I must have made other mistakes, I am just still new and generally lack expertise in all these true mailer tools; but very impressed I am with them! thanks Sirainen, thanks Varshavchik, thanks MuttDude, thanks Venema, and all, I admire you people!), so I removed the old Maildir and I made this scriptlet: This is my configuration: me@mybox:# dovecot -n # 2.1.17: /etc/dovecot/dovecot.conf # OS: Linux 3.10.9-grsec-130827 x86_64 Debian jessie/sid auth_debug = yes mail_debug = yes mail_location = maildir:~/Maildir:LAYOUT=fs mail_plugins = acl quota mail_privileged_group = mail namespace { hidden = yes inbox = yes list = no location = mbox:~/mail:INBOX=/var/mail/%u prefix = "#mbox/" separator = / } namespace { location = maildir:~/Maildir prefix = separator = / } passdb { args = dovecot driver = pam } protocols = " imap" ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { driver = passwd } protocol imap { mail_plugins = acl quota imap_acl imap_quota mail_log notify } me@mybox:# cd ~ maildirmake Maildir maildirmake -f Drafts Maildir/ maildirmake -f Sent Maildir/ maildirmake -f someFolder1 Maildir/ maildirmake -f someFolder2 Maildir/ maildirmake -f someFolder2.Facebk Maildir/ One note: pls. don't get me wrong, I hate Stasibook (Facebk above is less typing, but it's for Facebook mail), I just would like to learn enough to teach and get at least some of my friends who "socialize" there out of reach of those stasi-like entities that Zuck and his Gang serve all the "socializing" users' data to, which is so hard a task for me to do, but which desire keeps me moving in this steep-learning-curve quest of mine that got me this far where I am now, with dovecot and other tools. That is the reason I am still subscribed there, to be able to follow what my people do, occasionally. I'm not logging into that walled-off sewage-like stasi hole featuring as virtual garden! I saved that scriplet as maildirmake_00.sh, then $ chmod 755 maildirmake_00.sh and ran it. me@mybox:~$ ./maildirmake_00.sh And I have, I guess so far, all correct: me@mybox:~$ ls -la Maildir/ total 40 drwx------ 10 mr mr 4096 Oct 1 23:06 . drwxr-xr-x 33 mr mr 4096 Oct 1 23:06 .. drwx------ 2 mr mr 4096 Oct 1 23:06 cur drwx------ 5 mr mr 4096 Oct 1 23:06 .Drafts drwx------ 5 mr mr 4096 Oct 1 23:06 .someFolder1 drwx------ 5 mr mr 4096 Oct 1 23:06 .someFolder2 drwx------ 5 mr mr 4096 Oct 1 23:06 .someFolder2.Facebk drwx------ 2 mr mr 4096 Oct 1 23:06 new drwx------ 5 mr mr 4096 Oct 1 23:06 .Sent drwx------ 2 mr mr 4096 Oct 1 23:06 tmp me@mybox:~$ I really hope no mistake I made so far. someFolder1 and someFolder2 are for two different servers I get my mail from. Will probably need to tell some more about them later if the thread develops, when the problems I have are more fully explained/solved/expanded. Now the dovecot. It has, in Debian, and I'm on weekly testing branch, currently up to date, actually last week's, that's just a little behind... It has 15-mailboxes.conf like this (only pasting non-commented lines), /etc/dovecot/conf.d/15-mailboxes.conf namespace inbox { mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Trash { special_use = \Trash } mailbox Sent { special_use = \Sent } } [ here is a time lapse of cca 5-10 hours ] Well, since I began writing, I realized that I can get the namespace to work properly, but exactly only without the above: /etc/dovecot/conf.d/15-mailboxes.conf (I mean with all the lines above commented out) It kept telling me this (in the logs I find): Error: user me: Initialization failed: namespace configuration error: Duplicate namespace prefix Let me first say that it's I finally got closer to solution, and saw directories with mutt as ~/Maildir/this/that instead of what maildirs are: ~/Maildir/.this.that only after getting the following in the 10-mail.conf /etc/dovecot/conf.d/10-mail.conf: mail_location = maildir:~/Maildir:LAYOUT=fs mail_plugins = acl quota namespace { separator = / location = mbox:~/mail:INBOX=/var/mail/%u inbox = yes hidden = yes list = no } namespace { separator = / prefix = location = maildir:~/Maildir } It's what is recommended in <Namespaces.txt> on the wiki and maybe other places. But only after the 15-mailboxes.conf was completely commented out. Now I can view my mailbox from anywhere on my network, I guess (tried from the other box and from the same box with mutt, it works!). So namespace is solved I guess. However, for my mail system to completely function in the right GNU/Linux way, I have to get more GNU good things together in harmony. Naming some of the other dovecot friends: *getmail*, which hands on to *maildrop* for delivery... And *postfix* with TLS for sending mail, via 465 port, *stunnel*... That bit feels daunting to me, really... This namespace thing also cost me a few ounces of raw nerves and some occasional darkness in feelings... The worse is still before my mind constantly: still not being able to send mail the normal way, since the normal way is simply not in cleartext anymore... I probably could just fine sent to port 25, but after all the political persecution and censorship that as homeland-living dissident I suffered and still suffer, I don't see that as a solution at all... The obscured morale that I was upon me for a while is due to that stunnel connection not being yet set up... So, sending this from the web yet, I guess (prepared upfront, jealous of my time fixing systems that suffer from strange behavior or break whenever I'm longer online)... However, since I have been writing this not really hoping to get the namespace working in the process (quite a few days I spent on it, and weeks on mail system altogether, I can only hope to get the stunnel right if I really study it as if attending university classes, I'm afraid, just like the hurdles that I went finally past cost me real studying your manuals, my GNU freedom heros!)... ...And this message I having had started some five or ten hours ago [ before the final broader picture paragraphs that are all in the beginning part of the message; this very note is at the time of the very last proofreading ], now I see that I went different direction before discovering the setup for namespace that worked for me. How I used maildirmake (it's the maildrop's not the dovecot's one) I thought but now see doesn't probably have much to do with the solution for namespace I found. I leave it there though, because I need to fix the mailbox by refiltering it, with the aid of the dovecot server, similar to how it is explained in: http://wiki.dovecot.org/HowTo/RefilterMail Because I got some syntax wrong in ~/.mailfiler for the maildrop MDA, and then I got some of those wrongly named (numbered, no a-z, only 0-9 digits in names) fake mailing-list folders that can be seen in my post on mutt mailing-list: http://marc.info/?l=mutt-users&m=138021971816188&w=2 (the .muttrc however is completely different now, sure, than in that link) I hope the main, the namespace dovecot part of this message may elicit someone's advice, if they got past that phase with the 15-mailboxes.conf at its default. Or it is explained in the manuals I need to give a second or a third read to understand them... And I'll be back to report if I made ordered mails in my Maildir right with the refiltering. Just pls. allow time, I'm a late adopter, I'm 56 years of age, can't make these things as quick as you youngsters do it. Thanks for the fine Dovecot mail server! Miroslav Rovis Zagreb, Croatia

1 0

[Dovecot] LDAP for passdb and SQL for userdb
by Bambero 02 Oct '13

02 Oct '13

Hello Is it possible to setup double backend ? ldap for auth only and SQL for userdb information(quota,maildir etc) ? Now I'm using SQL backend and configuration looks like this: passdb { driver = sql args = /etc/dovecot/dovecot-sql.conf } userdb { driver = prefetch } userdb { driver = sql args = /etc/dovecot/dovecot-sql.conf } Can I do something like: passdb { driver = sql args = /etc/dovecot/dovecot-ldap.conf } userdb { driver = prefetch } userdb { driver = sql args = /etc/dovecot/dovecot-sql.conf } Should I leave: userdb { driver = prefetch } Bambero

2 1

[Dovecot] Older messages not showing up after reinstall
by dclist 02 Oct '13

02 Oct '13

I reinstalled Ubuntu, keeping my maildir directories. Messages older than the date of reinstall are not being served by dovecot. The messages show up normally in my MUA if I load the maildir directory directly. I assume there is a file somewhere where dovecot is keeping a list of seen messages which I need to reset. The old messages appear to be in dovecot-uidlist. I tried moving dovecot.index* to no effect. How do I get the pre-reinstall messages to be served by dovecot? # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.8.0-31-generic x86_64 Ubuntu 13.04 auth_debug = yes auth_debug_passwords = yes log_timestamp = "%Y-%m-%d %H:%M:%S " mail_debug = yes mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_privileged_group = mail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/password driver = passwd-file } passdb { driver = pam } plugin { fts = squat fts_squat = partial=4 full=4 } protocols = imap service auth { user = root } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = uid=vmail gid=vmail home=/home/vmail/%u driver = static } userdb { driver = passwd } protocol imap { mail_plugins = fts fts_squat } protocol pop3 { pop3_uidl_format = %08Xu%08Xv }

2 1

[Dovecot] Dovecot disconnecting while downloading large attachments
by Marc Casas - Girotec 01 Oct '13

01 Oct '13

Hi, We're using Dovecot 1.2.15 with Debian Squeeze. The mail server is working properly (we use both POP3 and IMAP) with normal messages, but if we try to download a large message (more than 20mb) using POP3, the server disconnects and our application fails. It's possible to change this behavior? How can we setup Dovecot so it disconnects after 20 or 30 minutes (I think now is disconnecting after 10 minutes) of "inactivity"? Regards, Marc

1 0

[Dovecot] Panic: file mail-storage.c: line 834 (mailbox_verify_name): assertion failed
by Kamil Andrusz 01 Oct '13

01 Oct '13

Hello List! I've encountered an error after upgrading my system and dovecot. I guess it's probably a result of a configuration problem, however after quite some tinkering with configuration I am still missing the source of the problem. Sep 28 16:57:21 shwurzbung dovecot: imap(wizz): Panic: file mail-storage.c: line 834 (mailbox_verify_name): assertion failed: (strncmp(vname, ns->prefix, ns->prefix_len-1) == 0) Sep 28 16:57:21 shwurzbung dovecot: imap(wizz): Fatal: master: service(imap): child 23203 killed with signal 6 (core not dumped - set service imap { drop_priv_before_exec=yes }) The problem above appears with both dovecot 2.2.5 and 2.2.6. It did not happen while using dovecot 2.1.12. Operating system is OpenBSD 5.4-current and AMD64. FS type is FFS (default for OpenBSD). Output of dovecot -n: # 2.2.6: /etc/dovecot/dovecot.conf # OS: OpenBSD 5.4 amd64 auth_mechanisms = plain login default_process_limit = 200 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl mmap_disable = yes namespace { hidden = yes inbox = yes list = no location = mbox:~/mail:INBOX=/var/mail/%u prefix = inbox/ type = private } namespace inbox { location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = bsdauth } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh protocols = imap pop3 lmtp sieve service auth { unix_listener /var/run/dovecot/auth-master { group = virtuals mode = 0600 user = virtuals } unix_listener /var/spool/postfix/private/auth { mode = 0660 user = _postfix } user = root } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl_cert = </etc/ssl/ssl.crt ssl_key = </etc/ssl/private/ssl.key userdb { driver = passwd override_fields = mail_home=/home/%u } protocol lmtp { mail_plugins = " sieve" } protocol lda { mail_plugins = " sieve" } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags mail_max_userip_connections = 64 } Thanks in advance for any pointers to a resolution. Best regards, Kamil Andrusz -- It's just a matter of opinion.

2 2

[Dovecot] New install not working.
by Rhorer, Leslie 30 Sep '13

30 Sep '13

Hello. I need some help. I was running uw-imap on my IMAP server (so I am using mbox email files), but I was having trouble with Outlook 2013, so I decided to move to dovecot. At first things were looking much better, except that most of my folders, other than the Inbox, were not showing up. I started changing both the dovecot configuration and the folder structure of my mail files, but now I can't even get the Inbox to populate. Outlooks says it is there, along with any folders I create new in Outlook, plus the Trash folder, which is the only non-local folder with anything in it. Try what I might, I can't get my Inbox to populate or any of the existing folders to show up at all. Here is the current output from dovecot -n: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.1 xfs mail_location = mbox:/RAID/home/%u/mail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } protocols = " imap pop3" ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { driver = passwd } I have the mail files on a RAID array (separate from the boot arrays) at /RAID/home/<User>/mail. Here is a snapshot of one of t he directories: drwx------ 2 lrhorer lrhorer 59 Sep 26 21:32 Amazon -rw------- 1 lrhorer lrhorer 118889 Jul 23 09:57 CPS Energy -rw------- 1 lrhorer lrhorer 58343 Dec 26 2011 Craigs List -rw------- 1 lrhorer lrhorer 105676 Aug 24 2011 DAR Support -rw------- 1 lrhorer lrhorer 351546 Sep 20 11:21 Drafts -rw------- 1 lrhorer lrhorer 5767297 Jun 24 2012 eBay -rw------- 1 lrhorer lrhorer 50503746 Nov 27 2012 Family -rw------- 1 lrhorer lrhorer 109653 Apr 14 2012 Helipal -rw------- 1 lrhorer lrhorer 144094265 Sep 27 22:50 inbox -rw------- 1 lrhorer lrhorer 549 Jun 16 11:05 Junk E-mail -rw------- 1 lrhorer lrhorer 499 Jul 27 09:09 Junk E-mail1 -rw------- 1 lrhorer lrhorer 499 Aug 18 13:27 Junk E-mail2 -rw-r--r-- 1 lrhorer lrhorer 0 Sep 27 22:41 Junk E-mail3 -rw------- 1 lrhorer lrhorer 144094265 Sep 26 21:30 lrhorer -rw------- 1 lrhorer lrhorer 178218 Jan 11 2013 Mdadm -rw------- 1 lrhorer lrhorer 1022804 Dec 21 2011 NewEgg -rw------- 1 lrhorer lrhorer 6102422 Sep 17 2012 NUT -rw------- 1 lrhorer lrhorer 1588992 May 28 2010 RAID Halting -rw------- 1 lrhorer lrhorer 139695 Dec 13 2009 Rebuild an Array -rw------- 1 lrhorer lrhorer 3657762 Jul 26 10:24 Save -rw------- 1 root root 3657762 Sep 27 22:48 Save.sav -rw------- 1 lrhorer lrhorer 44458963 Jun 21 2011 Sent Items -rw------- 1 lrhorer lrhorer 10349 Jan 3 2010 SMART -rw-rw-rw- 1 lrhorer lrhorer 238 Sep 27 22:46 subscriptions -rw------- 1 lrhorer lrhorer 2732568 Jun 5 2011 tempAmazon -rw-r--r-- 1 lrhorer lrhorer 0 Sep 27 22:11 testing -rw------- 1 lrhorer lrhorer 19152044 Sep 27 22:42 Trash -rw------- 1 lrhorer lrhorer 536 Sep 5 01:14 Unsent -rw------- 1 lrhorer lrhorer 58550 Apr 8 2012 Wine -rw------- 1 lrhorer lrhorer 105015 Apr 2 2012 Xheli Since the home directories are on a subdirectory of a separate array, I have the following: lrwxrwxrwx 1 root root 10 Sep 27 21:22 /home -> /RAID/home /var/mail: total 140724 lrwxrwxrwx 1 root mail 30 Sep 27 21:31 ljrhorer -> /RAID/home/ljrhorer/mail/inbox lrwxrwxrwx 1 root mail 29 Sep 27 21:31 lrhorer -> /RAID/home/lrhorer/mail/inbox ------------- The content contained in this electronic message is not intended to constitute formation of a contract binding tw telecom. tw telecom will be contractually bound only upon execution, by an authorized officer, of a contract including agreed terms and conditions or by express application of its tariffs. This message is intended only for the use of the individual or entity to which it is addressed. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this message is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the sender of this E-Mail or by telephone.

2 2

[Dovecot] Using MailDir but local messages still save in mbox format
by Mike Edwards 30 Sep '13

30 Sep '13

I am using MailDir format for all my virtual users and it is working well. However, if email comes in to a unix system user, it delivers in Mbox format. This is mostly cron jobs that do this. Mail addressed to my virtual users goes to the MailDir locations just fine. None of these mailboxes have ever been created, they are just incorrect assumed addresses. There should NEVER be any email to username(a)my.host.name because everything is virtual. Does anyone know how to fix this? Here is my config. # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.18.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_debug = yes auth_mechanisms = plain login cram-md5 ntlm auth_verbose = yes auth_verbose_passwords = plain disable_plaintext_auth = no listen = * mail_location = maildir:~/Maildir mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl passdb { args = /etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } plugin { autocreate = Trash autocreate2 = Spam autocreate3 = Drafts autocreate4 = Sent autocreate5 = Archives autosubscribe = Trash autosubscribe2 = Spam autosubscribe3 = Drafts autosubscribe4 = Sent autosubscrube5 = Archives sieve = ~/.dovecot.sieve sieve_before = /home/vmail/movespam.sieve sieve_dir = ~/sieve } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { mode = 0600 user = vmail } } ssl_ca = /etc/pki/dovecot/ca/dovecot.pem ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem ssl_cipher_list = HIGH:MEDIUM:+TLSv1:!SSLv2:+SSLv3 userdb { args = uid=vmail gid=vmail home=/home/vmail/%d/%n driver = static } protocol lda { auth_socket_path = /var/run/dovecot/auth-master log_path = /home/vmail/dovecot-deliver.log mail_plugins = " sieve sieve" postmaster_address = postmaster(a)zeus.deltatechnicalservices.com } protocol lmtp { mail_plugins = " sieve" } protocol imap { mail_plugins = autocreate } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole } protocol pop3 { pop3_uidl_format = %08Xu%08Xv }

4 9

[Dovecot] pop3-login problem
by Oleksii Krykun 30 Sep '13

30 Sep '13

Hi! I have dovecot-2.2.5 installed as part of postfix+dovecot+mysql+amavisd. My server has two NICs (Internet and local). /etc/resolv.conf point to ISP DNS. Local names are not resolved. If ISP link goes to down state I see (after about 1minute) a following error: Sep 26 15:44:29 pop3-login: Error: master(pop3): Auth request timed out (received 0/12 bytes) and following informational message: Sep 26 15:44:29 pop3-login: Info: Internal login failure (pid=12809 id=17815) (internal failure, 1 successful auths): user=<xxx(a)xxx.xxx> ..... If link is restored (even for a short time) all works fine again. After next down errors are repeated. I suppose that this is dns issue. Am I wrong? And I have a following question. Is it possible to disable dns requests? I haven't external clients. Or I must fix a name resolution e.g. to use a caching dns server? Thanks.

3 4

[Dovecot] proxy: can I use the password returned from passdb to log in to the back-end?
by Justin McAleer 30 Sep '13

30 Sep '13

I am hoping to support encrypted passwords, which I know is generally not allowed in a proxy setup. However, I can return the password in clear-text out of the password database, so I was hoping for something similar to the destuser field. I have successfully used the master password functionality to support encrypted passwords (users impersonating themselves), as long as the back-end server supports that. However, I need to proxy POP3 to Gmail, which does not.

2 2

[Dovecot] Processing sent items
by Bruce Markey 29 Sep '13

29 Sep '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 How does dovecot handle sent items and is it possible to "process" them befor they get saved in the sent item folder? My scenario is that I'm running postifx + dovecot with all incoming and outgoing mail passed to a script that encrypts the mail with the public key of the recipient. The only place now that has unencrypted mail sitting on the server is the sent items, I'd like to fix that. What would be the best way to proceed here? - -- Encrypt everything. Public key: https://www.secryption.com/BruceMarkey.asc I believe that any violation of privacy is nothing good. Lech Walesa -----BEGIN PGP SIGNATURE----- Version: OpenPGP.js v.1.20130420 Comment: http://openpgpjs.org wsFcBAEBCAAQBQJSR+odCRDIVcS4Lgc6WAAAIOYP/AqT3HWNbZZnoRXgeq27 n8id40wWemf+IgXGEe1fCTX7d/x+Zinj7bZw5EVq8WlLDxwpOhJGDNUAfA2+ 2z+6J7H0dAHk8rSJZqZfNaGWQQhY3ZehwJnojGJnM5ORuHHH/9WsY91jq26u 4Bzg54tUo+aIoWJHLWlVdqiDjJsW4n536UaHcKlVQx0JCe1byt4eXAmJP9dh Dc9YkP3lKUdW9oxgusJRLOxGfaN++nIFHSBDV6wGp0gEdCuzkgphdEFMnUX9 mD1dwPrDMlEmqHkiyHFH9RGGFvHRaTmdREW8eX9vnHp2PBXthbqd3RKWs7Q4 FmnfoS18inSbTM9Cp79HgQBMKBu66/qtdI6q5q45An9lmQAGf2ElvApSj8b+ ZI5GklVGSyrkxwRTOSRij57SDcRexNhlHg1jsDwSFvNjW5CzH0cB+mVU98eB TqfbIPKvGuqKzpdgf7SNJhZXmmkRrtsL/pI3xCheaZVh34Jxx6N/mP01pDEv d4IrajaTS+0mv6cM4z5f6k62YypHNB9fSTTjIKIqAvLgWMyQIFdjd9BQ1PQK pPiu+btbhhb4RgKa3LFSTp2xJVZlKXd2bqTaRkv63eUgF9NUIr3RYM98I75z mMnxfR5QDZIS6s5tlmZXF7zvCzXoRj30xEp8IsTMrfA4GzLpfAVsJaSUZlSo j5I3 =5Tw/ -----END PGP SIGNATURE-----

2 2

[Dovecot] How to authenticate against SQL DB with custom-ciphered passwords?
by Nicolay Vizovitin 29 Sep '13

29 Sep '13

Hello, I'm about to start developing authentication/password-scheme module for Dovecot. So I would like to get some advice before actually committing to doing things in particular way. Hope somebody will be able to help me :) For the record, I am currently targeting latest stable Dovecot version 2.2.5. I have an SQL DB with mail users' authentication data. Passwords are stored either encrypted via system crypt(3) or ciphered with some custom algorithm (think something symmetrical like AES, so passwords can be decrypted into plain form). I want to use this DB as both userdb and passdb backend. The issue, of course, is with ciphered passwords support. 1) Is it feasible to just implement a new password scheme for ciphered passwords support and still use stock passdb driver in Dovecot for SQL DB access? So that passwords in this scheme would be treated as PLAIN (in a sense that both cleartext and shared secret authentication methods would work). 2) Provided I implement custom password scheme for ciphered passwords, what is the best way to be capable to perform authentication against both ciphered and encrypted passwords? Ciphered and encrypted passwords are stored in different fields of SQL table (one of them is NULL when the other one is set). a) Do I define two passdb clauses with their own default_pass_scheme (equal to my new scheme or CRYPT for encrypted passwords) and use fallback to effectively check both of them? b) Do I modify SQL query so that it prefixes existing password with correct scheme (I'm not sure this will be easy enough to do)? 3) Is it mandatory to provide password generation routine for custom password scheme? When it will be used? 4) Maybe it's better to just implement a plugin that serves as both userdb and passdb driver (in other words a kind of generic authentication module)? What are advantages and disadvantages of each method - custom password scheme + stock SQL driver VS. custom userdb and passdb driver? Fortunately, I already have all the required credentials lookup and verification code. So in any case the question is only in figuring out suitable Dovecot APIs and integrating the existing code. 5) I have previously implemented similar custom authentication module for Courier-IMAP (Courier-Authlib to be precise) to use the same SQL DB. And I will need to support both IMAP servers for some time. So it is only natural to expect some generic solution to be possible. I'd like to remind that I need to be able to supply either encrypted password or deciphered plain password, or just check against them. Is it possible to do so in a common way? If so, what method should I use? I would expect SASL helping me out here, but AFAIK, both Dovecot and Courier-IMAP can only serve as SASL servers (providing authentication services), not clients. 6) I obviously care about providing enhanced security, especially against stealing mail passwords. So any additional advice or related guidelines are welcome. 7) Somewhat unrelated question: what is the best way to test IMAP (and maybe POP3 as well) server performance and compare it to another server? I'm interested in both login performance (the part I will influence) and performance with many mails in mailbox. I heard imaptest is suitable for this task. Are there any recipes or example testing scenarios you might share? ;) I would be grateful for any insight in these issues. If I chose a wrong mailing list to post to, please feel free to correct me. Thanks for your time! :) -- Best regards, Nick

2 2

[Dovecot] Conditional jump or move depends on uninitialised value(s)
by Tamsy 28 Sep '13

28 Sep '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Timo, Dovecot 2.2.6 compiled on Ubuntu 10.04 fails on "make check" with the following errors. "make install" is finishing just fine and Dovecot itself works flawlessly so far. - ----- 8< ----- http header invalid [0]: parse failure ............................... : ok: Expected ':' after header field name 'Server', but found ' ' http header invalid [0] .............................................. : ok http header invalid [1]: parse failure ............................... : ok: Expected ':' after header field name 'X', but found ' ' http header invalid [1] .............................................. : ok http header invalid [2]: parse failure ............................... : ok: Expected LF after CR at end of header, but found 'A' http header invalid [2] .............................................. : ok http header invalid [3]: parse failure ............................... : ok: Expected line end after header field 'Accept', but found 0x7f http header invalid [3] .............................................. : ok http header invalid [4]: parse failure ............................... : ok: Expected ':' after header field name 'Suhosin-Patch', but found ' ' http header invalid [4] .............................................. : ok http header invalid [5]: parse failure ............................... : ok: Excessive header size http header invalid [5] .............................................. : ok http header invalid [6]: parse failure ............................... : ok: Excessive header field size http header invalid [6] .............................................. : ok http header invalid [7]: parse failure ............................... : ok: Excessive number of header fields http header invalid [7] .............................................. : ok 0 / 66 tests failed ==15579== Conditional jump or move depends on uninitialised value(s) ==15579== at 0x804F987: http_header_parse_next_field (http-header-parser.c:294) ==15579== by 0x804F361: test_http_header_parse_valid (test-http-header-parser.c:181) ==15579== by 0x8050251: test_run_funcs (test-common.c:228) ==15579== by 0x80503D1: test_run (test-common.c:236) ==15579== by 0x804F164: main (test-http-header-parser.c:343) ==15579== ==15579== Conditional jump or move depends on uninitialised value(s) ==15579== at 0x804F98D: http_header_parse_next_field (http-header-parser.c:294) ==15579== by 0x804F361: test_http_header_parse_valid (test-http-header-parser.c:181) ==15579== by 0x8050251: test_run_funcs (test-common.c:228) ==15579== by 0x80503D1: test_run (test-common.c:236) ==15579== by 0x804F164: main (test-http-header-parser.c:343) ==15579== ==15579== Conditional jump or move depends on uninitialised value(s) ==15579== at 0x804F9B0: http_header_parse_next_field (http-header-parser.c:296) ==15579== by 0x804F361: test_http_header_parse_valid (test-http-header-parser.c:181) ==15579== by 0x8050251: test_run_funcs (test-common.c:228) ==15579== by 0x80503D1: test_run (test-common.c:236) ==15579== by 0x804F164: main (test-http-header-parser.c:343) ==15579== ==15579== Conditional jump or move depends on uninitialised value(s) ==15579== at 0x804FC92: http_header_parse_next_field (http-header-parser.c:320) ==15579== by 0x804F361: test_http_header_parse_valid (test-http-header-parser.c:181) ==15579== by 0x8050251: test_run_funcs (test-common.c:228) ==15579== by 0x80503D1: test_run (test-common.c:236) ==15579== by 0x804F164: main (test-http-header-parser.c:343) ==15579== ==15579== Conditional jump or move depends on uninitialised value(s) ==15579== at 0x804F9B2: http_header_parse_next_field (http-header-parser.c:296) ==15579== by 0x804F361: test_http_header_parse_valid (test-http-header-parser.c:181) ==15579== by 0x8050251: test_run_funcs (test-common.c:228) ==15579== by 0x80503D1: test_run (test-common.c:236) ==15579== by 0x804F164: main (test-http-header-parser.c:343) ==15579== ==15579== Conditional jump or move depends on uninitialised value(s) ==15579== at 0x804F987: http_header_parse_next_field (http-header-parser.c:294) ==15579== by 0x804F225: test_http_header_parse_invalid (test-http-header-parser.c:325) ==15579== by 0x8050251: test_run_funcs (test-common.c:228) ==15579== by 0x80503D1: test_run (test-common.c:236) ==15579== by 0x804F164: main (test-http-header-parser.c:343) ==15579== ==15579== Conditional jump or move depends on uninitialised value(s) ==15579== at 0x804F98D: http_header_parse_next_field (http-header-parser.c:294) ==15579== by 0x804F225: test_http_header_parse_invalid (test-http-header-parser.c:325) ==15579== by 0x8050251: test_run_funcs (test-common.c:228) ==15579== by 0x80503D1: test_run (test-common.c:236) ==15579== by 0x804F164: main (test-http-header-parser.c:343) ==15579== ==15579== Conditional jump or move depends on uninitialised value(s) ==15579== at 0x804F9B0: http_header_parse_next_field (http-header-parser.c:296) ==15579== by 0x804F225: test_http_header_parse_invalid (test-http-header-parser.c:325) ==15579== by 0x8050251: test_run_funcs (test-common.c:228) ==15579== by 0x80503D1: test_run (test-common.c:236) ==15579== by 0x804F164: main (test-http-header-parser.c:343) ==15579== ==15579== Conditional jump or move depends on uninitialised value(s) ==15579== at 0x804FC92: http_header_parse_next_field (http-header-parser.c:320) ==15579== by 0x804F225: test_http_header_parse_invalid (test-http-header-parser.c:325) ==15579== by 0x8050251: test_run_funcs (test-common.c:228) ==15579== by 0x80503D1: test_run (test-common.c:236) ==15579== by 0x804F164: main (test-http-header-parser.c:343) ==15579== ==15579== Conditional jump or move depends on uninitialised value(s) ==15579== at 0x804F9B2: http_header_parse_next_field (http-header-parser.c:296) ==15579== by 0x804F225: test_http_header_parse_invalid (test-http-header-parser.c:325) ==15579== by 0x8050251: test_run_funcs (test-common.c:228) ==15579== by 0x80503D1: test_run (test-common.c:236) ==15579== by 0x804F164: main (test-http-header-parser.c:343) ==15579== ==15579== Conditional jump or move depends on uninitialised value(s) ==15579== at 0x804FCDF: http_header_parse_next_field (http-header-parser.c:320) ==15579== by 0x804F225: test_http_header_parse_invalid (test-http-header-parser.c:325) ==15579== by 0x8050251: test_run_funcs (test-common.c:228) ==15579== by 0x80503D1: test_run (test-common.c:236) ==15579== by 0x804F164: main (test-http-header-parser.c:343) ==15579== make[2]: *** [check-test] Error 1 make[2]: Leaving directory `/usr/local/src/dovecot-2.2.6/src/lib-http' make[1]: *** [check-recursive] Error 1 make[1]: Leaving directory `/usr/local/src/dovecot-2.2.6/src' make: *** [check-recursive] Error 1 - ----- >8 ----- Is it just me? Cheers, Tamsy -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.20 (MingW32) iQEcBAEBAgAGBQJSQ9FeAAoJEKYXVM1dyOfZVsoIAOM1z1aULWvVqGJScmd8uNXz EG1gRnG6vlrjdUa+8mYQq7RPZZbZ2Cvxd73rkWtptPFAQX+gKsHsh53HS2GKohle W6dJWnEdR7cvUk1UC7FHK3KR5+Z2pdbxhwGB0G26jHKf2OM7dyNcrmtXgkvb3Mwp 4AHrRHVYnPDkcF4Mc9mCnlGdHGsG1bA2BMtI6eR1vbAMKlUy9v11EfunDJHwqkwf 9A5vWAqCnNT9QewJctrHubnN+Rzz5ZLA0cc5ngTL+hsSknIKzH/bj1R99Orca7VN AzBYkWRQ2GqKWxdSBs8RSGv/bVojW1SLjp04xEea+zUeV6sg3RMGkou/pK+lfj4= =o8pw -----END PGP SIGNATURE-----

2 3

Re: [Dovecot] New install not working.
by Joseph Tam 28 Sep '13

28 Sep '13

"Rhorer, Leslie" <Leslie.Rhorer(a)twtelecom.com> writes: > At first things were looking much better, except that most of my > folders, other than the Inbox, were not showing up. I started changing > both the dovecot configuration and the folder structure of my mail > files, but now I can't even get the Inbox to populate. Outlooks says > it is there, along with any folders I create new in Outlook, plus the > Trash folder, which is the only non-local folder with anything in it. > Try what I might, I can't get my Inbox to populate or any of the > existing folders to show up at all. Here is the current output from > dovecot -n: > .... > mail_location = mbox:/RAID/home/%u/mail Maybe try mail_location = mbox:/RAID/home/%n/mail:INBOX=/RAID/home/%n/mail/inbox (%n does not include the domain part, but it might be the same as %u). Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] service anvil and ssl-params not starts with dovecot started
by Dewey Du 28 Sep '13

28 Sep '13

Hi My dovecot started with the error below. What's the most possible reason for the error? “2013-08-28 11:41:40 ”master: Info: Dovecot v2.2.5 starting up (core dumps disabled) “2013-08-28 11:42:00 ”anvil: Fatal: Error reading configuration: Timeout reading config from /var/run/dovecot/config “2013-08-28 11:42:00 ”master: Error: service(anvil): command startup failed, throttling for 2 secs “2013-08-28 11:42:00 ”ssl-params: Fatal: Error reading configuration: Timeout reading config from /var/run/dovecot/config “2013-08-28 11:42:00 ”master: Error: service(ssl-params): command startup failed, throttling for 2 secs Actually, After dovecot starts, I can telnet 110, but it takes 30seconds or so to get through the authentication. I suspect whether the error above cause the issue or not. Other information: dovecot version v2.2.5 use posfix, dovecot sasl, and mysql Attached my dovecot.conf: #auth_debug = yes auth_mechanisms = plain login #debug_log_path = /var/log/dovecot.debug default_internal_user = postfix default_login_user = postfix disable_plaintext_auth = no first_valid_uid = 1000 last_valid_uid = 1000 mail_gid = 1000 mail_uid = 1000 log_path = /var/log/dovecot.log mail_location = maildir:/var/vmail/%d/%u mail_privileged_group = vmail protocols = imap pop3 listen = * base_dir = /var/run/dovecot/ service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } user = root } ssl = no userdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } passdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } protocol pop3 { pop3_uidl_format = %08Xu%08Xv }

2 2