- dovecot - dovecot.org

[Dovecot] Pigeonhole 0.3.4: Warning: sieve: encountered corrupt binary: re-compiling script
by Daniel Piddock 10 Apr '13

10 Apr '13

Hi all, Upgraded to Dovecot 2.1.16 and Pigeonhole 0.3.4 yesterday. We use lmtp and sieve. I've now started to see in the logs the following entries: >Warning: Jz6kNv8AY1FdfQAAVMeomg: sieve: encountered corrupt binary: re-compiling script [script path] The script then appears to run correctly and the message gets stored where ever it should be. This only appears to be happening for a few users and although it happens on the majority of their messages it doesn't happen for every single one. What's the best way to start debugging? Thank, Dan

2 4

[Dovecot] thunderbird detach attachment
by mourik jan heupink 10 Apr '13

10 Apr '13

Hi all, Thunderbird has an option to detach attachments from (for example) sent items. I've tried it, and it does not work, and also in the dovecot logs I don't see anything interesting meanwhile. Before looking deeper into this: Does anyone here know if this option is known to work, or not? We're running dovecot 2.1.7 on debian wheezy. Removing unwanted attachments is a nice way to keep mail archives smaller... Thanks, MJ

3 4

[Dovecot] failed compiling dovecot 2.1.16 under solaris
by Jürgen Obermann 10 Apr '13

10 Apr '13

Hello, compiling doevoct-2.1.16 with sun-compiler under solaris 10 gave me the following error source='quota-status.c' object='quota-status.o' libtool=no \ DEPDIR=.deps depmode=none /bin/bash ../../../depcomp \ cc -DHAVE_CONFIG_H -I. -I../../.. -I../../../src/lib -I../../../src/lib-master -I../../../src/lib-dict -I../../../src/lib-index -I../../../src/lib-mail -I../../../src/lib-storage -I../../../src/lib-storage/index -I../../../src/lib-storage/index/maildir -I../../../src/doveadm -I/usr/local/include -fast -xarch=v8plusa -I/usr/sfw/include -c quota-status.c "../../../src/lib-storage/mailbox-list.h", line 13: warning: useless declaration "quota-status.c", line 200: undefined symbol: optarg "quota-status.c", line 200: warning: improper pointer/integer combination: arg #1 cc: acomp failed for quota-status.c I could solve this problem with *** ./src/plugins/quota/quota-status.c.orig Thu Apr 4 22:58:30 2013 --- ./src/plugins/quota/quota-status.c Tue Apr 9 16:08:12 2013 *************** *** 11,16 **** --- 11,17 ---- #include "mail-storage-service.h" #include "quota-private.h" #include "quota-plugin.h" + #include <stdlib.h> enum quota_protocol { QUOTA_PROTOCOL_UNKNOWN = 0, but I don't know if this is the correct way to fix it. Greetings, Jürgen -- Jürgen Obermann Hochschulrechenzentrum der Justus-Liebig-Universität Gießen Heinrich-Buff-Ring 44 Tel. 0641-9913054

2 2

[Dovecot] How to see folders/subfolders/emails through imap
by Stephan von Krawczynski 10 Apr '13

10 Apr '13

Hello all, I am trying to do something very simple - at least thats what I thought. I have some fs, it contains folders and subfolders with email files ordered like maildir. Now I try to set up dovecot on top simply to let some imap account watch these email files. But I cannot see any folders at all. I can create new folders and see them, but I cannot create subfolders as subdirs like "folder/subfolder". Instead I get "folder.subfolder" dirs on the fs. I tried to set the separator to "/", but that does not help at all. Is there some easy way to configure dovecot to display: <somedir>/<folder1>/<subfolder1>/new/files... <subfolder2>/new/files... <subfolder3>/new/files... according to fs layout on some imap-client (like thunderbird)? -- Regards, Stephan

5 9

Re: [Dovecot] Any simple way to block logins by IP address?
by Joseph Tam 10 Apr '13

10 Apr '13

Steve Campbel writes: > Does Dovecot have a facility to block pop3 and imap logins by IP > address. I usually do this by putting the IPs in my border firewall, but > it's in transition currently to a new one, and I'd like to end > connection fairly fast. You probably want to compile in tcp_wrapper support and handle it that way http://wiki2.dovecot.org/LoginProcess You might also hook into a the post-login script if you need some bizarre logic to determine whether to allow a login or not, but this is later in the session setup rather than block-on-sight like a firewall. http://wiki2.dovecot.org/PostLoginScripting Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] 2.2.0rc6: crash with mailbox_list_index=yes (and virtual?)
by Lutz Preßler 10 Apr '13

10 Apr '13

Hello (Timo), depending on the client (with OfflineIMAP, but not a mobile one) my dovecot test configuration (config on request) crashes if mailbox_list_index=yes: Apr 9 09:26:31 host dovecot: imap-login: Login: user=<user>, method=CRAM-MD5, rip=2001:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx, lip=2001:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx, mpid=19028, TLS, session=</+vqeOjZ1wAgAQY4BgPRMwIMKf/+amcv> Apr 9 09:26:31 host dovecot: imap(19028, user) /+vqeOjZ1wAgAQY4BgPRMwIMKf/+amcv: Panic: file mail-index-view.c: line 169 (view_lookup_full): assertion failed: (seq > 0 && seq <= mail_index_view_get_messages_count(view)) Apr 9 09:26:31 host dovecot: imap(19028, lpmailext) /+vqeOjZ1wAgAQY4BgPRMwIMKf/+amcv: Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x61 75a) [0x7fca0248c75a] -> /usr/lib/dovecot/libdovecot.so.0(+0x617a6) [0x7fca0248c7a6] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7fca0244d3cf] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xc9b5e) [0x7fca027adb5e] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xca238) [0x7fca027ae238] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_lookup_ext+0x17) [0x7fca027ad2b7] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_list_index_status+0x11f) [0x7fca0277559f] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_list_index_status_set_info_flags+0x8d) [0x7fca0277606d] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_list_index_iter_next+0x18d) [0x7fca0277383d] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x93177) [0x7fca02777177] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_list_iter_next+0x255) [0x7fca02777465] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x94881) [0x7fca02778881] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x93177) [0x7fca02777177] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_list_iter_next+0x3c0)[0x7fca027775d0] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(virtual_config_read+0x97d) [0x7fca0065344d] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(+0x93c5) [0x7fca006553c5] -> /usr/lib/dovecot/modules/lib20_zlib_plugin.so(+0x2a8c) [0x7fca00447a8c] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x7dd94) [0x7fca02761d94] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_open+0xf) [0x7fca02761f4f] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_mailbox_get_metadata+0x5da) [0x7fca0278a41a] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(+0x8d48) [0x7fca00654d48] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x91f05) [0x7fca02775f05] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_get_metadata+0x6e) [0x7fca02761b6e] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_list_index_sync_name+0x2e6) [0x7fca02776b66] Apr 9 09:26:31 host dovecot: imap(19028, user) /+vqeOjZ1wAgAQY4BgPRMwIMKf/+amcv: Fatal: master: service(imap): child 19028 killed with signal 6 (core dumped) gdb bt full attached. Haven't tested yet if disabling virtual namespaces makes a difference. Neither logged triggering IMAP commands. Regards, Lutz

2 1

[Dovecot] How to exec /usr/libexec/dovecot/imap with specific maildir location
by David Woodhouse 09 Apr '13

09 Apr '13

Once upon a time I could configure my mailer to access my historical archives by running something like ssh $mailserver MAIL=maildir:~/Maildir-archive dovecot --exec-mail imap I need to run /usr/libexec/dovecot/imap manually now, and I've fixed that a while ago for my normal email access. But I've just had cause to go back to my archives for the first time in a while... and realised that I don't know how to make it work any more. When invoking /usr/libexec/dovecot/imap, is there an environment variable or command line option which can set the mail location? -- dwmw2

2 2

[Dovecot] Any simple way to block logins by IP address?
by Steve Campbell 09 Apr '13

09 Apr '13

Does Dovecot have a facility to block pop3 and imap logins by IP address. I usually do this by putting the IPs in my border firewall, but it's in transition currently to a new one, and I'd like to end connection fairly fast. If it matters, I'm using 2.0.9. Thanks steve campbell

1 0

[Dovecot] Received date on emails is wrong after file copying
by maia＠weiser.dk 09 Apr '13

09 Apr '13

Hi, I have installed a new mail server where I'm migrating from Courier to Dovecot. I have made a mistake when I was copying over the emails so the date/time mark on them is updated. So all my mails are now from the copy date/time and not the real receive time. I have tried to copy the emails over again, so they get the right date/time on the file level. And when I look at a single email in details in SquirrelMail it has now the right date/time, but when I look at the overview of a folder it still have the copy date/time on them. Is there any way to get the date/time in the overview updated, maybe delete some index files or force it to re-index? I'm not even sure that the problem is in Dovecot. But I'm sure You can help me here. Best Regards, Kim Johansen

2 1

[Dovecot] script to detect dictionary attacks
by Reindl Harald 09 Apr '13

09 Apr '13

Hi has someone a script which can filter out dictionary attacks from /var/log/maillog and notify about the source-IPs? i know about fail2ban and so on, but i would like to have a mail with the IP address for two reasons and avoid fail2ban at all because it does not match in the way we maintain firewalls * add the IP to a distributed "iptables-block.sh" and distribute it to any server with a comment and timestamp * write a abuse-mail to the ISP

8 15

[Dovecot] 2.1.16 Solaris 10 compile regression Sunstudio compiler
by Tomi Vainio 09 Apr '13

09 Apr '13

Hi, src/plugins/quota/quota-status.c won't compile due to missing include <getopt.h> needed for optarg % make source='quota-status.c' object='quota-status.o' libtool=no \ DEPDIR=.deps depmode=none /bin/bash ../../../depcomp \ cc -DHAVE_CONFIG_H -I. -I../../.. -I../../../src/lib -I../../../src/lib-master -I../../../src/lib-dict -I../../../src/lib-index -I../../../src/lib-mail -I../../../src/lib-storage -I../../../src/lib-storage/index -I../../../src/lib-storage/index/maildir -I../../../src/doveadm -I/usr/local/include -I/usr/sfw/include -xO4 -xtarget=ultra3cu -xcache=64/32/4:8192/512/2 -I/usr/sfw/include -c quota-status.c "../../../src/lib-storage/mailbox-list.h", line 13: warning: useless declaration "quota-status.c", line 200: undefined symbol: optarg "quota-status.c", line 200: warning: improper pointer/integer combination: arg #1 cc: acomp failed for quota-status.c *** Error code 2 make: Fatal error: Command failed for target `quota-status.o' Also 2.2.rc6 fails when using Sunstudio make but works with gmake Making all in lib-http make: Fatal error in reader: Makefile, line 725: Unexpected end of line seen Tomppa

1 0

Re: [Dovecot] make check error for Pigeonhole v0.3.4 for Dovecot v2.1.16
by Stephan Bosch 09 Apr '13

09 Apr '13

On 4/8/2013 8:16 PM, Giam Teck Choon wrote: > Hi, > > When I compile Pigeonhole v0.3.4 with Dovecot v2.1.16 until make check > output as below from my rpmbuild output: > > Test case: ./tests/extensions/mailbox/execute.svtest: > 1: Test 'MailboxExists - None exist' SUCCEEDED > 2: Test 'MailboxExists - Not all exist' SUCCEEDED > 3: Test 'MailboxExists - One exists' SUCCEEDED > 4: Test 'MailboxExists - All exist' SUCCEEDED > 5: Test ':Create' SUCCEEDED > PASS: 5 tests succeeded. > Test case: ./tests/extensions/date/basic.svtest: > 1: Test 'Defaults' SUCCEEDED > 2: Test 'Count' SUCCEEDED > 3: Test 'Invalid' SUCCEEDED > 4: Test 'Comparison' FAILED: date is invalid: 2009-07-23 > FAIL: 1 of 4 tests failed. > RPM build errors: > make: *** [tests/extensions/date/basic.svtest] Error 1 > error: Bad exit status from /var/tmp/rpm-tmp.CIcpqx (%check) > Bad exit status from /var/tmp/rpm-tmp.CIcpqx (%check) You're not the first one to notice: http://hg.rename-it.nl/dovecot-2.1-pigeonhole/rev/bc2126771d00 This is one of those genuine phase-of-the-moon kind of bugs :) Hmm, maybe I should make a new release for this problem already. Regards, Stephan.

2 1

[Dovecot] "No such file or directory" error setting up dict quota for mdbox
by ADRIAN SANTOS MARRERO 09 Apr '13

09 Apr '13

Hi, I've some troubles setting up the dict based quota plugin for mdbox, it always returns a error when lmtp tries to deliver an e-mail: Apr 8 12:40:16 mb07 dovecot: lmtp(3001, asmarre(a)ull.es) Error: fstat(/sharedfs/10.4.1.107/ull.es/54/asmarre/dovecot-quota.lock) failed: No such file or directory Apr 8 12:40:16 mb07 dovecot: lmtp(3001, asmarre(a)ull.es) Error: file dict commit: file_dotlock_open(/sharedfs/ 10.4.1.107/ull.es/54/asmarre/dovecot-quota) failed: No such file or directory Apr 8 12:40:16 mb07 dovecot: lmtp(3001, asmarre(a)ull.es) Error: dict quota: Quota update failed, it's now desynced In fact lmtp does create the dovecot-quota.lock file but it does not update the dovecot-quota file. If I run "doveadm quota recalc -u asmarre" it works and updates the dovecot-quota file. The version of dovecot that I'm using is 2.0.19 and the configuration is: # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-32-generic x86_64 Ubuntu 12.04.2 LTS mail_debug = yes mail_location = mdbox:%h mail_plugins = quota managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { quota = dict:User quota::file:%h/dovecot-quota quota_rule = *:storage=1G quota_warning = storage=95%% quota-warning 95 quota_warning2 = storage=85%% quota-warning 85 sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)ull.es protocols = " imap lmtp sieve pop3" service lmtp { inet_listener lmtp { port = 24 } } service managesieve-login { inet_listener sieve_deprecated { port = 2000 } } service quota-warning { executable = script /opt/ccti/correo/buzones/quota_warning.sh unix_listener quota-warning { user = dovecot } user = dovecot } ssl_cert = </etc/ssl/certs/www.ull.es.chain.crt ssl_key = </etc/ssl/private/www.ull.es.key userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = quota sieve zlib } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { pop3_no_flag_updates = yes pop3_uidl_format = %v.%u } Thanks in advance.

1 1

[Dovecot] LMTP Setup/Design Help Request
by Matthias Hofer 09 Apr '13

09 Apr '13

Hi altogether, I am switching from dbmail 2.2 to dovecot 2.1.7, and I was able to do a successful transition of IMAP. But I had a very hard time with receiving mail, and in the end -- after loads of reading and debugging -- I broke down and failed. This is why I am asking you for your kind help. I only have virtual users and have set mail_uid = dovemail mail_gid = dovemail For authentication, I simply use (for now) a flat file: passdb { driver = passwd-file args = scheme=PLAIN username_format=%u /etc/dovecot/mypasswd.file } # cat /etc/dovecot/mypasswd.file user1:{PLAIN}userpw1 user2:{PLAIN}userpw2 user3:{PLAIN}userpw3 And everything works fine with IMAP. I am completely domain-agnostic here. But I was not able to use this fine setup to receive mails with my postfix. I tried about 13 different configurations, some with considerable changes dovecot-config, the passwd-file or postfix, but I could not find a single variant working. In this situation, I would be very happy if somebody could give me a hint, which would be the prudent way to configure dovecot, LDA/LMTP and postfix based on the setup above. Thank you very much in advance, and have a great time, Matthias Hofer

3 2

[Dovecot] repeating dsync - questions
by Bob Gustafson 08 Apr '13

08 Apr '13

I'm moving/converting email from one system to another The source system is: Dual core x86_64 6GB memory 180 GB raid1 disks ext4 Fedora 9 Dovecot 1.0.15 Maildir format The destination system is: Dual core x86_64 2GB memory 1TB raid1 disks ext4 Fedora 18 Dovecot 2.1.15 sdbox format I am moving mail in a series of steps: 0) cd ( to mail user home directory ) mkdir Maildir 1) # rsync mail from source system (hoho4) to current (hoho0) time rsync -arv --times hoho4:/home/bobgus/Maildir/ /home/bobgus/Maildir/ This step takes about 37 minutes the first time 2) # dsync mirror/convert to sdbox format on current system time dsync mirror maildir:~/Maildir This step takes about 858 minutes (!!) Looking at -D messages indicates that dsync is deciding between duplicates much of the time. Looking at the results in a mail browser (Evolution), it seems fine, although the latest mails are not there. 3) # pick up more current mail - use same script as in 1) time rsync -arv --times hoho4:/home/bobgus/Maildir/ /home/bobgus/Maildir/ This step takes about 5 minutes although this varies depending on the amount of new mail. 4) # repeat the 2) dsync step time dsync mirror maildir:~/Maildir This is where things look peculiar. When I look at the directory of sdbox/mailboxes, I see duplicated directories [bobgus@hoho0 sdbox]$ cd mailboxes [bobgus@hoho0 mailboxes]$ ls Apple Mail To Do Apple Mail To Do_2a47983780615e5179600000ba55d82c Deleted Messages Deleted Messages_2847983780615e5179600000ba55d82c Drafts Drafts_2447983780615e5179600000ba55d82c Important Important_2947983780615e5179600000ba55d82c INBOX INBOX_1547983780615e5179600000ba55d82c Sent Sent_2547983780615e5179600000ba55d82c Trash Trash_2747983780615e5179600000ba55d82c The 2nd dsync step has not completed yet. I'm wondering whether the extra directory will be magically moved into the older directory. (This is unlikely because the file names are duplicated in the new directory) ------- Is this expected behavior? Are there command changes I can make to speed up the process? Eliminate the duplicate directories?

3 14

[Dovecot] dovecot 2 variables
by Pavel Dimow 08 Apr '13

08 Apr '13

Hi, I am trying to use separate configurations for ldap authentication thus providing users with the ability to only use username without domain part. Now according to documentation this should be possible http://wiki2.dovecot.org/AuthDatabase/PasswdFile but I keep getting error in my dovecot.log like this auth: Error: Can't open configuration file /etc/dovecot/%l/dovecot-ldap.conf: No such file or directory Why does dovecot does not expand %l to local ip address?

6 11

[Dovecot] dsync replication: quota counted twice
by Oli Schacher 08 Apr '13

08 Apr '13

Hi I enabled quota + warnings in my replication test setup and now whenever a mail gets delivered the quota is counted twice (probably due to both servers using the same mysql quota backend) and quota warnings are fired too early. After a doveadm quota recalc -u <username> the quota is correct again. How do I make dovecot only count the quota on the server where the mail was added originally? dovecot -n is the same as in my previous message to the list today http://www.dovecot.org/list/dovecot/2013-April/089558.html (thanks Timo for the hint in this thread btw, changing the permissions made the errors go away) Thanks Oli -- message transmitted on 100% recycled electrons

2 4

[Dovecot] Dovecot Configuration
by Andreas K. 08 Apr '13

08 Apr '13

Can somebody, please, point me in the right direction in finding a COMPLETE and EXACT definition of the Dovecot configuration hierarchy. In other words what configuration options exist both at the top level but also at each subconfiguration elements (ex. sections etc). While my C is a bit rusty, I can still make sense of source code and with a bit of effort I will figure it out. I have been going through the src/config/all-settings.c but still have large gaps. A hint in the right direction on how the config works might help clarify and speed things up. Thanks Andreas Kasenides

1 0

[Dovecot] Problem with fts lucene, on solaris 10
by Pigi 08 Apr '13

08 Apr '13

Hi all, I'm planning to migrate my courier-imap imap server to dovecot, but I'm experiencing a strange issue with fts-lucene plugin. Basically, every time I start a search, the log starts to write: Apr 05 19:30:53 indexer: Error: Indexer worker disconnected, discarding 1 requests for XXXXXX Apr 05 19:30:53 indexer-worker(XXXXX): Fatal: master: service(indexer-worker): child 809 killed with signal 11 (core not dumped) Apr 05 19:30:53 imap(XXXXXX): Error: indexer failed to index mailbox INBOX Apr 05 19:30:56 indexer-worker(XXXXX): Error: lucene index /home/XXXXX/Maildir/lucene-indexes: IndexWriter() failed (#1): Lock obtain timed out When trussing the indexer-worker pid I can see it ends with: ...SNIP... 527: brk(0x005A7840) = 0 527: brk(0x005AD840) = 0 527: pread64(16, " I G E N E R I C I < /".., 8170, 24514) = 8170 527: brk(0x005AD840) = 0 527: brk(0x005B3840) = 0 527: Incurred fault #5, FLTACCESS %pc = 0xFEBD6DDC 527: siginfo: SIGBUS BUS_ADRALN addr=0x005B50BA 527: Received signal #10, SIGBUS [default] 527: siginfo: SIGBUS BUS_ADRALN addr=0x005B50BA I cannot get a core, but either root ( user that is starting the dovecot ) than the user XXXXX have unlimited coresize XXXXX /home/XXXXXXX > ulimit -a time(seconds) unlimited file(blocks) unlimited data(kbytes) unlimited stack(kbytes) 8192 coredump(blocks) unlimited nofiles(descriptors) 256 vmemory(kbytes) unlimited root # ulimit -a core file size (blocks, -c) unlimited data seg size (kbytes, -d) unlimited file size (blocks, -f) unlimited open files (-n) 1024 pipe size (512 bytes, -p) 10 stack size (kbytes, -s) 8192 cpu time (seconds, -t) unlimited max user processes (-u) 29995 virtual memory (kbytes, -v) unlimited The mailbox for user XXXXXX ( Maildir stile, for speed-up migration ) has ~ 4000 messages. The search ends, but I think it don't use the lucene plugin ( it crashes ). I'm sure I'm missing something, but I can't really find what. All stuff have been self compiled, using standard flags as per "configure" scripts. Thanks for any hint. Pigi here the environment: uname -a SunOS puma 5.10 Generic_137137-09 sun4u sparc SUNW,Sun-Fire-V240 ( yes, I know, it's quite old ;) ) ======= dovecot --version 2.1.15 ======= doveconf -n # 2.1.15: /usr/local/dovecot/etc/dovecot/dovecot.conf # OS: SunOS 5.10 sun4u debug_log_path = /usr/local/dovecot/var/log/dovecot-debug.log disable_plaintext_auth = no first_valid_uid = 100 info_log_path = /usr/local/dovecot/var/log/dovecot-info.log log_path = /usr/local/dovecot/var/log/dovecot.log mail_location = maildir:~/Maildir mail_plugins = " fts fts_lucene" namespace { inbox = yes location = prefix = INBOX. separator = . } passdb { driver = pam } plugin { fts = lucene fts_lucene = whitespace_chars=@. } service imap-login { inet_listener imap { port = 144 } } service indexer-worker { drop_priv_before_exec = yes } service pop3-login { inet_listener pop3 { port = 112 } } ssl = no userdb { driver = passwd } ============= gcc -v Reading specs from /usr/sfw/lib/gcc/sparc-sun-solaris2.10/3.4.3/specs Configured with: /sfw10/builds/build/sfw10-patch/usr/src/cmd/gcc/gcc-3.4.3/configure --prefix=/usr/sfw --with-as=/usr/ccs/bin/as --without-gnu-as --with-ld=/usr/ccs/bin/ld --without-gnu-ld --enable-languages=c,c++ --enable-shared Thread model: posix gcc version 3.4.3 (csl-sol210-3_4-branch+sol_rpath) ============= clucene clucene-core-2.3.3.4 libstemmer_c libtextcat-2.2 openssl-1.0.1e

2 6

[Dovecot] checkpassword protocol
by dovecot.pkoch＠dfgh.net 08 Apr '13

08 Apr '13

Hi, I'm writing a checkpassword script in order to support our OTP token as a fallback for client certificate authentication. Here are two questions: 1) It seems to me that the username and the password will be delivered to my script both on file descriptor 3 and via the environment variables AUTH_USER and AUTH_PASSWORD. May I ignore file descriptor 3 and use the environment variables or may it happen that these variables will have differnet content from what is sent via fd 3? 2) There seems to be some undocumented interaction between dovecot and my script via file descriptor 4. Seems that whatever I write to fd 4 will show up in syslog (unless it contains newlines). Can I use this "feature" to send error messages from my script to dovecot? What data does dovecot expect on fd 4? Peter

3 5

[Dovecot] ssl_require_crl does not work as expected
by dovecot.pkoch＠dfgh.net 08 Apr '13

08 Apr '13

Hi I'm trying to use dovecot with client certificates. We produce our certificates with our on CA and we do NOT use certificate revocation lists. So I put "ssl_require_crl = no" into 10-ssl.conf. I did not find a solution neither in the wiki nor somewhere else, so I finally started to read the source. My impression is that openssl will always try to use CRLs. If "ssl_require_crl = no" dovecot will use CRLs but tries to ignore openssl error codes X509_V_ERR_UNABLE_TO_GET_CRL and X509_V_ERR_CRL_HAS_EXPIRED. This is done in ssl_verify_client_cert() in ssl-proxy-openssl.c line 871, namely i_info("proxy=%d, require_crl=%d, error=%d", proxy->client_proxy, proxy->set->ssl_require_crl, ctx->error ); if (proxy->client_proxy && !proxy->set->ssl_require_crl && (ctx->error == X509_V_ERR_UNABLE_TO_GET_CRL || ctx->error == X509_V_ERR_CRL_HAS_EXPIRED)) { /* no CRL given with the CA list. don't worry about it. */ preverify_ok = 1; } With my setup proxy->client_proxy is 0. I added the i_info() to check this and with this modification my syslog shows: Apr 7 13:01:16 d600 dovecot: master: Dovecot v2.1.15 starting up (core dumps disabled) Apr 7 13:01:21 d600 dovecot: auth: Debug: Loading modules from directory: /usr/dovecot/lib/dovecot/auth Apr 7 13:01:21 d600 dovecot: auth: Debug: auth client connected (pid=26175) Apr 7 13:01:22 d600 dovecot: imap-login: proxy=0, require_crl=0, error=3 Apr 7 13:01:22 d600 dovecot: imap-login: Invalid certificate: unable to get certificate CRL: /CN=...user cert.../C=DE Apr 7 13:01:22 d600 dovecot: imap-login: proxy=0, require_crl=0, error=3 Apr 7 13:01:22 d600 dovecot: imap-login: Invalid certificate: unable to get certificate CRL: /CN=...intermedieate cert.../C=DE Apr 7 13:01:22 d600 dovecot: imap-login: proxy=0, require_crl=0, error=3 Apr 7 13:01:22 d600 dovecot: imap-login: Invalid certificate: unable to get certificate CRL: /CN=Root-CA.../C=DE I dont know what the proxy-stuff is about so instead of ignoring CRL-related errors I tried to disable CRL-checking. I therefore commented out two lines in ssl_proxy_ctx_verify_client() in ssl-proxy-openssl.c line 1004, namely: // X509_STORE_set_flags(store, X509_V_FLAG_CRL_CHECK | // X509_V_FLAG_CRL_CHECK_ALL); This tells OpenSSL not to check CRLs. Of course in production code this should be done only if "ssl_require_crl = no". Similar code is contained in iostream-openssl-context.c, namely in routine ssl_iostream_ctx_verify_remote_cert() Is this a bug? Peter

2 1

[Dovecot] client limit and STARTTLS
by David Benfell 08 Apr '13

08 Apr '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, I'm migrating from one system to another. Both are Arch Linux, but copying the configurations and just modifying them for IP addresses and hostnames didn't work. Here's doveconf -n # 2.1.15: /etc/dovecot/dovecot.conf doveconf: Warning: service auth { client_limit=256 } is lower than required under max. load (3072) doveconf: Warning: service anvil { client_limit=256 } is lower than required under max. load (2051) # OS: Linux 3.8.4-1-ARCH x86_64 base_dir = /var/run/dovecot/ default_client_limit = 256 default_process_limit = 1024 login_trusted_networks = 10.8.0.0/16 127.0.0.0/8 mail_location = maildir:~/Maildir mail_max_userip_connections = 30 passdb { args = failure_show_msg=yes driver = pam } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } ssl_cert = </big/www/ssl/www.cybernude.org_publickey.pem ssl_key = </big/www/ssl/www.cybernude.org_privatekey.pem userdb { driver = passwd } Obvious first question: I can't figure out how to make dovecot happy with the client and process limits. I'm not terribly worried about going overboard here, though I have a very small number of users; the migration is to a much more capable system. But I would like to stop looking at the warning. It doesn't seem to matter what I put where--it keeps complaining. Second question: STARTTLS isn't working. What am I missing? Sorry if this is something that should be obvious; I'm fighting a similar battle with postfix and I'm being pushed around the bend while I really need to be working on other things. Thanks! -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJRXy6nAAoJELJhbl/uPb4SsTAQALIkmDwCwPlCNPtJr482lVNj vsNHX4TvTy0Xu4adtxFqJQM30EoEpu4A983CTm81jUFYKqDIBRJ3SAVOGf58lCQ1 uJhoyL0yhCaO9Zh7WZKdmhB+Jnek2+Rz2cpfOP4VseLL7Lg3OIwI4K/YiDAIcwnW do/tvuJEL6SDDcDA3gOjDJ7gkykg34tJ02nnG65Yau0y563FT7npXKFnwGSn1X0+ GTFUwpZx5xp90eUZBLoTBPcnXohKlWhYxa2POHgm7eraK8k+aD9/2zlThQL6/qIx HQKcSkZjB1CTgKGysp+msaR/gS5HiHILadB3opP8p7baGNG9jhifKE6LJavREH8p PsxxCpTnf8d+xbbJVeDx6cyz7NQ8rNLals1qtPLAY4F04Uh400FjJov/dJruBISZ QvASZPOtyZHuswUnSTtX22WOg2QIvyO5GyzqPGZ/0+MtgbtJxwizsyCTEFuTkq+r RvsW1cltVsDKCFCCcjrkRzWu+xbDrkX42tNUnhi4YSJ5wcKQMRiqQBTtyCYT88sy Ws9WtNaElOERxQeydmizvxIuFIoLapdPtfyRDSGoDOo0Cnq/QSIzvQNdOVbqqSBt hcIVDNHTw8O5UfOhhbo+YT8QIBwD8J/uPxLfV72ep7nQBJh8XOymHJXGtQR8+H4x 6aey6+bafQ/YHtuS63bz =4qNn -----END PGP SIGNATURE-----

4 4

[Dovecot] v2.2.rc6 released
by Timo Sirainen 08 Apr '13

08 Apr '13

http://dovecot.org/releases/2.2/rc/dovecot-2.2.rc6.tar.gz http://dovecot.org/releases/2.2/rc/dovecot-2.2.rc6.tar.gz.sig Some more fixes to bugs I noticed today while trying out some new things in production. Note especially the replicator-doveadm socket change, see http://wiki2.dovecot.org/Replication for how to configure it. This change allowed local replicator to notify the remote replicator about user being synced. * replicator: Don't create replicator-doveadm socket by default. This way doveadm replicator commands don't accidentally start an unconfigured replicator server. + replicator: Have remote dsync notify the remote replicator that a user was just synced. This way the replicators are kept roughly in sync. + Added ssl_client_ca_file to specify the CA certs as a file. This is needed (instead of ssl_client_ca_dir) in RedHat-based systems. + Added "doveadm fs" commands, mainly to debug lib-fs backends. - Mailbox list indexes weren't using proper file permissions based on the root directory.

2 2

[Dovecot] mdbox and folders containing both messages and sub-folders
by Rich Wales 08 Apr '13

08 Apr '13

I've got Dovecot 2.2r5 (Ubuntu package version 2:2.2.0~rc5-0~auto+1 from the "testing-auto/dovecot-2.2" repository on xi.rename-it.nl) running on a brand-new Ubuntu 12.04.2 server. I'm trying to configure Dovecot (using the "mdbox" mailbox format) to allow folders to contain both messages and sub-folders. However, it's not working consistently. I need to have folders with both messages and sub-folders because I'm trying to migrate mail from an existing (but soon-to-be-retired) Cyrus server, and the existing body of mail has folders of this sort. I'm currently using the following configuration line: mail_location = mdbox:~/mdbox:DIRNAME=.indexes:INDEX=~/mdbox/indexes and am using the Larch program to do an IMAP-to-IMAP copy of one of my family member's mail from the old Cyrus server to the new Dovecot server. When I examine the "mailboxes" directory tree, I see some directories that (correctly) contain both the renamed ".indexes" directory and also directories for IMAP subfolders. However, the Larch output is showing many errors of the form "mailbox cannot contain messages", and some of the messages could not be migrated because of this problem. Am I doing something wrong? Or is the "folders containing both messages and sub-folders" feature simply broken for the "mdbox" format -- meaning presumably that I'll be forced either to use the Maildir format, or else abandon Dovecot entirely and install Cyrus on my new mail server instead? Rich Wales richw(a)richw.org

7 14

[Dovecot] autocreate mailbox but no sub folders
by Arnaud Abélard 08 Apr '13

08 Apr '13

Hello, We have been using lda_mailbox_autocreate to avoid to intialize empty mailboxes upon account creations. This does the job allright except that dovecot-lda is also allowed to autocreate sub folders which is a problem when using addresses extensions (adress+folder(a)domain.tld) It's easy for a malicious user to flood a mailbox with tons of subfolders. Is there a way to tell dovecot-lda it can only create the initial mailbox and maybe some special folders but nothing else? Thanks, Arnaud -- Arnaud Abélard jabber: arnaud.abelard(a)univ-nantes.fr / twitter: ArnY Administrateur Système DSI Université de Nantes -

2 1