- dovecot - dovecot.org

[Dovecot] load sbub-mailbox
by mourik jan heupink 14 Jan '13

14 Jan '13

Hi, We're about to migrate to dovecot (2.1.7 on wheezy), and I have a question about mail migration. Our 'old' imap mailserver will remain available, and has the same usernames/passwords as our future dovecot mailserver. The question: Is there an easy way to make the old mailboxes available under a subfolder (for example 'oldmail') in the mailboxes on the new mailserver? A bit like mounting an old homedirectory under an 'oldfiles' directory on a new fileserver. This way our users could access/migrate whatever folders they choose themselves, and we would not have migrate all messages to dovecot using scripts like imapcopy, etc. Perhaps using the proxy functionality..? Hope I make myself clear...? Regards, Mourik Jan

2 7

[Dovecot] bug report: auth via dict
by ForestYang 14 Jan '13

14 Jan '13

hi all, I was testing dovecot server , auth via redis. first I follow http://master.wiki2.dovecot.org/AuthDatabase/Dict but auth always fail, last , I found value { "uid": 123, "gid": 123, "home": "/home/username" } was wrong, the uid and gid must as string , not number. { "uid": "123", "gid": "123", "home": "/home/username" } was worked. it's hard to find the problem :( pls notice that. -- View this message in context: http://dovecot.2317879.n4.nabble.com/bug-report-auth-via-dict-tp39685.html Sent from the Dovecot mailing list archive at Nabble.com.

2 1

[Dovecot] I can not receive any mail
by Felix Rubio Dalmau 14 Jan '13

14 Jan '13

Hi everybody I'm trying to set-up an IMAPS mail server using dovecot (version 2.1.7) with virtual email accounts for my family. I have already ran through the mysql phase of the virtual email configuration (and I'm quite confident it works well, because I can send mails from the server using postfix to gmail, e.g.). However, I am stucked configuring dovecot. I don't know why is it not running properly. The symptoms are: a) When I connect by using my mail client (kmail), I don't get any error. b) When I ask kmail to check what authentication services are supported by the server, I see that it is able to connect to te server by looking to the server log. c) However, Inbox folder does never show up :S d) When I send any mail from gmail to my server, It is always refused under the reason that there is not such user in the machine (I am sure it is), and nothing shows up in the server log. Here is my configuration, just in case somebody can give it a look to help me figure out what's going on :S Thank you very much in advance. # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.6.9-1 x86_64 Debian 6.0.6 ext4 auth_cache_size = 1 M auth_debug = yes auth_mechanisms = plain login auth_verbose = yes auth_worker_max_count = 2 base_dir = /var/run/dovecot/ listen = * log_timestamp = "%Y-%m-%d %H:%M:%S " login_greeting = Dovecot ready. mail_debug = yes mail_location = maildir:/home/vmail/%d/%n/Maildir mail_privileged_group = vmail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)mysite.org protocols = " imap" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imaps { port = 993 ssl = yes } process_min_avail = 0 service_count = 1 } service imap { process_limit = 5 } ssl = required ssl_cert = </etc/postfix/ssl/cert.pem ssl_key = </etc/postfix/ssl/cert.key userdb { args = uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes driver = static } verbose_ssl = yes protocol lda { mail_plugins = sieve } -- Felix Rubio Dalmau

2 1

[Dovecot] E-mail not being processed into Dovecot folders
by stalker 14 Jan '13

14 Jan '13

I have a new CentOS 6 server running Dovecot 2.0.9 It has current patches from CentOS. Pasted below are the version and output from dovecot -n When I run mail -s "test" username test <ctrl-D> mail is written to /var/spool/mail/username and not to /home/username/Maildir/ The user's client software, Thunderbird, logs in but since mail is not written to Maildir it thinks there is nothing (see paste below from /var/log/maillog) How do I get sendmail or what ever MTA processes mail to write to Maildir rather than /var/spool/sendmail? [root@info2 Maildir]# dovecot --version 2.0.9 [root@info2 Maildir]# dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.19.1.el6.i686 i686 CentOS release 6.3 (Final) disable_plaintext_auth = no mail_debug = yes mail_location = maildir:~/Maildir mbox_write_locks = fcntl passdb { driver = pam } protocols = pop3 ssl = no ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol pop3 { pop3_uidl_format = %v.%u } Jan 10 08:11:13 info2 dovecot: pop3-login: Login: user=<username>, method=PLAIN, rip=192.168.55.50, lip=192.168.55.8, mpid=30560 Jan 10 08:11:13 info2 dovecot: pop3(username): Debug: Effective uid=503, gid=503, home=/home/username Jan 10 08:11:13 info2 dovecot: pop3(username): Debug: maildir++: root=/home/username/Maildir, index=, control=, inbox=/home/username/Maildir Jan 10 08:11:13 info2 dovecot: pop3(username): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0

2 1

[Dovecot] Anyone using dovecot obox?
by list＠airstreamcomm.net 14 Jan '13

14 Jan '13

Just looking for some input from other users of the obox (object storage) backend from dovecot.fi. - What challenges/problem were you trying to overcome/solve by using obox? - What kind of architecture did you deploy using obox? (e.g. distributed object storage for performance, or distributed for availability, geographic distribution of email services, etc.) - What complexities, single points of failure, documentation omissions can you highlight having deployed the obox storage architecture? - Did the obox backend support your email services as well as you expected or more? - How was your interaction with Doveoct.fi? Thanks in advance.

2 1

[Dovecot] Installing Dovecot on Gentoo
by Christian Rößner 14 Jan '13

14 Jan '13

Hi, I have an already working dovecot server on Ubuntu 10.04 with self-created packages version 2.1.13. This setup is working prefect. Now that I do not wish to continue using Ubuntu (to much work for Upgrading), I decided to switch to Gentoo, as I had made best experiences in the past… I have installed Dovecot on Gentoo and I copied over all my configs and certs and stuff. Also created a user vmail with identical uid/gid and also checked all permissions for the certificate stuff. Dovecot starts. I also can connect to it. But when trying to login, I get errors: ------------------------------------------------------- telnet localhost 143 Trying ::1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5 AUTH=DIGEST-MD5 AUTH=NTLM] Dovecot ready. . login croessner <hiddenpw> . NO [UNAVAILABLE] Temporary authentication failure. [mx0:2013-01-13 14:24:02] ------------------------------------------------------- In the logs it looks like this: ------------------------------------------------------- Jan 13 15:22:30 mx0 dovecot: master: Dovecot v2.1.13 starting up (core dumps disabled) Jan 13 15:23:11 mx0 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jan 13 15:23:11 mx0 dovecot: auth: Debug: passwd-file /etc/dovecot/master-users: Read 1 users in 0 secs Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_extended_operation_s Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_extended_operation Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_send_initial_request Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_new_connection 1 1 0 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_int_open_connection Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_connect_to_host: TCP db.roessner-net.de:389 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_new_socket: 17 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_prepare_socket: 17 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_connect_to_host: Trying 193.239.107.37:389 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_pvt_connect: fd: 17 tm: -1 async: 0 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_open_defconn: successful Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_send_server_request Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_result ld 0x35d6dd481c0 msgid 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: wait4msg ld 0x35d6dd481c0 msgid 1 (infinite timeout) Jan 13 15:23:11 mx0 dovecot: auth: Error: wait4msg continue ld 0x35d6dd481c0 msgid 1 all 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: ** ld 0x35d6dd481c0 Connections: Jan 13 15:23:11 mx0 dovecot: auth: Error: * host: db.roessner-net.de port: 389 (default) Jan 13 15:23:11 mx0 dovecot: auth: Error: refcnt: 2 status: Connected Jan 13 15:23:11 mx0 dovecot: auth: Error: last used: Sun Jan 13 15:23:11 2013 Jan 13 15:23:11 mx0 dovecot: auth: Error: Jan 13 15:23:11 mx0 dovecot: auth: Error: Jan 13 15:23:11 mx0 dovecot: auth: Error: ** ld 0x35d6dd481c0 Outstanding Requests: Jan 13 15:23:11 mx0 dovecot: auth: Error: * msgid 1, origid 1, status InProgress Jan 13 15:23:11 mx0 dovecot: auth: Error: outstanding referrals 0, parent count 0 Jan 13 15:23:11 mx0 dovecot: auth: Error: ld 0x35d6dd481c0 request count 1 (abandoned 0) Jan 13 15:23:11 mx0 dovecot: auth: Error: ** ld 0x35d6dd481c0 Response Queue: Jan 13 15:23:11 mx0 dovecot: auth: Error: Empty Jan 13 15:23:11 mx0 dovecot: auth: Error: ld 0x35d6dd481c0 response count 0 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_chkResponseList ld 0x35d6dd481c0 msgid 1 all 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_chkResponseList returns ld 0x35d6dd481c0 NULL Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_int_select Jan 13 15:23:11 mx0 dovecot: auth: Error: read1msg: ld 0x35d6dd481c0 msgid 1 all 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: read1msg: ld 0x35d6dd481c0 msgid 1 message type extended-result Jan 13 15:23:11 mx0 dovecot: auth: Error: read1msg: ld 0x35d6dd481c0 0 new referrals Jan 13 15:23:11 mx0 dovecot: auth: Error: read1msg: mark request completed, ld 0x35d6dd481c0 msgid 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: request done: ld 0x35d6dd481c0 msgid 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: res_errno: 0, res_error: <>, res_matched: <> Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_free_request (origid 1, msgid 1) Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_parse_extended_result Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_parse_result Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_msgfree Jan 13 15:23:11 mx0 dovecot: auth: Error: TLS: could not use key file `/etc/ssl/private/mx0.roessner-net.de.key.pem'. Jan 13 15:23:11 mx0 dovecot: auth: Error: TLS: error:0200100D:system library:fopen:Permission denied bss_file.c:398 Jan 13 15:23:11 mx0 dovecot: auth: Error: TLS: error:20074002:BIO routines:FILE_CTRL:system lib bss_file.c:400 Jan 13 15:23:11 mx0 dovecot: auth: Error: TLS: error:140B0002:SSL routines:SSL_CTX_use_PrivateKey_file:system lib ssl_rsa.c:648 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_err2string Jan 13 15:23:11 mx0 dovecot: auth: Error: LDAP: ldap_start_tls_s() failed: Connect error Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_extended_operation_s Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_extended_operation Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_send_initial_request Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_send_server_request Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_result ld 0x35d6dd481c0 msgid 2 Jan 13 15:23:11 mx0 dovecot: auth: Error: wait4msg ld 0x35d6dd481c0 msgid 2 (infinite timeout) Jan 13 15:23:11 mx0 dovecot: auth: Error: wait4msg continue ld 0x35d6dd481c0 msgid 2 all 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: ** ld 0x35d6dd481c0 Connections: Jan 13 15:23:11 mx0 dovecot: auth: Error: * host: db.roessner-net.de port: 389 (default) Jan 13 15:23:11 mx0 dovecot: auth: Error: refcnt: 2 status: Connected Jan 13 15:23:11 mx0 dovecot: auth: Error: last used: Sun Jan 13 15:23:11 2013 Jan 13 15:23:11 mx0 dovecot: auth: Error: Jan 13 15:23:11 mx0 dovecot: auth: Error: Jan 13 15:23:11 mx0 dovecot: auth: Error: ** ld 0x35d6dd481c0 Outstanding Requests: Jan 13 15:23:11 mx0 dovecot: auth: Error: * msgid 2, origid 2, status InProgress Jan 13 15:23:11 mx0 dovecot: auth: Error: outstanding referrals 0, parent count 0 Jan 13 15:23:11 mx0 dovecot: auth: Error: ld 0x35d6dd481c0 request count 1 (abandoned 0) Jan 13 15:23:11 mx0 dovecot: auth: Error: ** ld 0x35d6dd481c0 Response Queue: Jan 13 15:23:11 mx0 dovecot: auth: Error: Empty Jan 13 15:23:11 mx0 dovecot: auth: Error: ld 0x35d6dd481c0 response count 0 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_chkResponseList ld 0x35d6dd481c0 msgid 2 all 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_chkResponseList returns ld 0x35d6dd481c0 NULL Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_int_select Jan 13 15:23:11 mx0 dovecot: auth: Error: read1msg: ld 0x35d6dd481c0 msgid 2 all 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_err2string Jan 13 15:23:11 mx0 dovecot: auth: Error: LDAP: ldap_start_tls_s() failed: Can't contact LDAP server Jan 13 15:23:11 mx0 dovecot: auth: Debug: auth client connected (pid=24045) Jan 13 15:24:00 mx0 dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured#011session=YAanRyzTOAAAAAAAAAAAAAAAAAAAAAAB#011lip=::1#011rip=::1#011lport=143#011rport=59960#011resp=<hidden> Jan 13 15:24:00 mx0 dovecot: auth: Error: ldap_extended_operation_s Jan 13 15:24:00 mx0 dovecot: auth: Error: ldap_extended_operation Jan 13 15:24:00 mx0 dovecot: auth: Error: ldap_send_initial_request Jan 13 15:24:00 mx0 dovecot: auth: Error: ldap_send_server_request Jan 13 15:24:00 mx0 dovecot: auth: Error: ldap_err2string Jan 13 15:24:00 mx0 dovecot: auth: Error: LDAP: ldap_start_tls_s() failed: Can't contact LDAP server Jan 13 15:24:02 mx0 dovecot: auth: Debug: client passdb out: FAIL#0111#011user=croessner#011temp Jan 13 15:26:11 mx0 dovecot: imap-login: Disconnected: Inactivity (auth failed, 1 attempts in 131 secs): user=<croessner>, method=PLAIN, rip=::1, lip=::1, secured, session=<YAanRyzTOAAAAAAAAAAAAAAAAAAAAAAB> Jan 13 15:27:11 mx0 dovecot: auth: Error: ldap_unbind Jan 13 15:27:11 mx0 dovecot: auth: Error: ldap_free_request (origid 2, msgid 2) Jan 13 15:27:11 mx0 dovecot: auth: Error: ldap_free_connection 1 1 Jan 13 15:27:11 mx0 dovecot: auth: Error: ldap_free_connection: actually freed ------------------------------------------------------- I checked if Dovecot would even try to access the key: ------------------------------------------------------- inotifywait -m -r --format '%:e %f' /etc/ssl Setting up watches. Beware: since -r was given, this may take a while! Watches established. OPEN mail.roessner-net.de.pem ACCESS mail.roessner-net.de.pem CLOSE_NOWRITE:CLOSE mail.roessner-net.de.pem OPEN mail.roessner-net.de.key.pem ACCESS mail.roessner-net.de.key.pem CLOSE_NOWRITE:CLOSE mail.roessner-net.de.key.pem OPEN SSL123_CA_Bundle.pem ACCESS SSL123_CA_Bundle.pem CLOSE_NOWRITE:CLOSE SSL123_CA_Bundle.pem OPEN mail.roessner-net.de.pem ACCESS mail.roessner-net.de.pem ACCESS mail.roessner-net.de.pem ACCESS mail.roessner-net.de.pem ACCESS mail.roessner-net.de.pem ACCESS mail.roessner-net.de.pem CLOSE_NOWRITE:CLOSE mail.roessner-net.de.pem OPEN mail.roessner-net.de.key.pem ACCESS mail.roessner-net.de.key.pem ACCESS mail.roessner-net.de.key.pem CLOSE_NOWRITE:CLOSE mail.roessner-net.de.key.pem OPEN SSL123_CA_Bundle.pem ACCESS SSL123_CA_Bundle.pem ACCESS SSL123_CA_Bundle.pem ACCESS SSL123_CA_Bundle.pem ACCESS SSL123_CA_Bundle.pem CLOSE_NOWRITE:CLOSE SSL123_CA_Bundle.pem OPEN ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt CLOSE_NOWRITE:CLOSE ca-certificates.crt OPEN mx0.roessner-net.de.pem ACCESS mx0.roessner-net.de.pem CLOSE_NOWRITE:CLOSE mx0.roessner-net.de.pem OPEN openssl.cnf ACCESS openssl.cnf ACCESS openssl.cnf ACCESS openssl.cnf CLOSE_NOWRITE:CLOSE openssl.cnf OPEN openssl.cnf ACCESS openssl.cnf ACCESS openssl.cnf ACCESS openssl.cnf CLOSE_NOWRITE:CLOSE openssl.cnf ------------------------------------------------------- I can not find any line talking about mx0.roessner-net.de.key.pem. The file exists and has proper permissions: ------------------------------------------------------- l /etc/ssl/private/ total 16 drwxr-s---+ 2 root ssl-cert 4096 Jan 12 19:29 ./ drwxr-xr-x 8 root root 4096 Jan 13 15:26 ../ -rw-r--r-- 1 root root 0 Dec 10 18:14 .keep_dev-libs_openssl-0 -r--r----- 1 root ssl-cert 1679 Jan 12 17:23 mail.roessner-net.de.key.pem -r--r-----+ 1 root ssl-cert 887 Jan 12 17:14 mx0.roessner-net.de.key.pem getfacl /etc/ssl/private/ /etc/ssl/private/mx0.roessner-net.de.key.pem getfacl: Removing leading '/' from absolute path names # file: etc/ssl/private/ # owner: root # group: ssl-cert # flags: -s- user::rwx user:amavis:r-x group::--- mask::r-x other::--- # file: etc/ssl/private/mx0.roessner-net.de.key.pem # owner: root # group: ssl-cert user::r-- user:amavis:r-x #effective:r-- group::r-- mask::r-- other::--- ------------------------------------------------------- Here is my doveconf -n: ------------------------------------------------------- # 2.1.13: /etc/dovecot/dovecot.conf # OS: Linux 3.7.0-hardened x86_64 Gentoo Base System release 2.1 auth_debug = yes auth_master_user_separator = * auth_mechanisms = plain login cram-md5 digest-md5 ntlm auth_verbose = yes hostname = mail.roessner-net.de lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_access_groups = vmail mail_attachment_dir = /var/mail/virtual/copymail/attachments mail_debug = yes mail_gid = vmail mail_location = mdbox:~/mdbox mail_plugins = autocreate quota acl fts fts_solr zlib mail_privileged_group = mail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mdbox_rotate_size = 128 M namespace { list = children location = mdbox:%%h/mdbox prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox "Deleted Messages" { special_use = \Trash } mailbox Drafts { special_use = \Drafts } mailbox Junk-E-Mail { special_use = \Junk } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } mailbox junkmail { special_use = \Junk } prefix = separator = / type = private } passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = file:/var/mail/virtual/shared-mailboxes.db autocreate = Trash autocreate2 = Sent autocreate3 = Drafts autocreate4 = junkmail autosubscribe = Trash autosubscribe2 = Sent autosubscribe3 = Drafts autosubscribe4 = junkmail fts = solr fts_solr = break-imap-search url=http://localhost:8080/solr/ quota = dict:User quota::file:%h/mdbox/dovecot-quota quota_rule = *:storage=300M:messages=20000 quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve zlib_save = gz zlib_save_level = 6 } protocols = imap pop3 lmtp sieve service auth-worker { extra_groups = ssl-cert unix_listener auth-worker { mode = 0600 user = vmail } user = vmail } service auth { extra_groups = ssl-cert unix_listener auth-userdb { mode = 0600 user = vmail } user = vmail } service dict { unix_listener dict { mode = 0600 user = vmail } } service lmtp { unix_listener /var/spool/postfix/private/lmtp-dovecot { group = postfix mode = 0666 user = postfix } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } ssl_ca = </etc/ssl/certs/SSL123_CA_Bundle.pem ssl_cert = </etc/ssl/certs/mail.roessner-net.de.pem ssl_key = </etc/ssl/private/mail.roessner-net.de.key.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes verbose_ssl = yes protocol lmtp { mail_plugins = autocreate quota acl fts fts_solr zlib sieve } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags mail_max_userip_connections = 50 mail_plugins = autocreate quota acl fts fts_solr zlib imap_quota imap_acl imap_zlib } ------------------------------------------------------- LDAP looks like this: ------------------------------------------------------- uris = ldap://db.roessner-net.de/ ldap://roessner1.roessner-net.de/ sasl_bind = yes sasl_mech = EXTERNAL tls = yes tls_ca_cert_file = /etc/ssl/certs/ca-certificates.crt tls_cert_file = /etc/ssl/certs/mx0.roessner-net.de.pem tls_key_file = /etc/ssl/private/mx0.roessner-net.de.key.pem tls_require_cert = hard debug_level = 7 base = ou=people,ou=it,dc=roessner-net,dc=de user_attrs = rnsMSQuota=quota_rule=*:storage=%$,rnsMSMailboxHome=home user_filter = (&(objectClass=rnsMSDovecotAccount)(|(rnsMSRecipientAddress=%u)(uniqueIdentifier=%u))) pass_attrs = rnsMSDeliverToAddress=user,userPassword=password pass_filter = (&(objectClass=rnsMSDovecotAccount)(|(rnsMSRecipientAddress=%u)(uniqueIdentifier=%u))(rnsMSEnableDovecot=TRUE)) iterate_attrs = rnsMSDovecotUser=user iterate_filter = (objectClass=rnsMSDovecotAccount) default_pass_scheme = PLAIN ------------------------------------------------------- Some portage information ------------------------------------------------------- [ebuild R ] net-nds/openldap-2.4.30 USE="berkdb crypt ipv6 minimal sasl ssl syslog tcpd -cxx -debug -experimental -gnutls -icu -iodbc -kerberos -odbc -overlays -perl -samba (-selinux) -slp -smbkrb5passwd" 0 kB [ebuild R ] dev-libs/cyrus-sasl-2.1.25-r3:2 USE="berkdb gdbm ldapdb openldap pam ssl urandom -authdaemond -java -kerberos -mysql -postgres -sample -sqlite -srp -static-libs" 0 kB [ebuild R ~] net-mail/dovecot-2.1.13::croessner USE="bzip2 caps imapc ipv6 ldap maildir managesieve mbox mdbox pam pop3c sdbox sieve solr sqlite ssl suid zlib -cydir -doc -kerberos -lucene -mysql -postgres (-selinux) -static-libs -vpopmail" 0 kB ------------------------------------------------------- As you can see, I have spent some time on this without luck and currently I have no idea, what the problem is. Any ideas on that? Thanks in advance -Christian Rößner -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Joerg Heidrich

4 6

[Dovecot] configuration still not working
by Averlon 12 Jan '13

12 Jan '13

Hi, I would very much appreciate some help since I get one step ahead and two backwardswith my installation. I am using usernames not (not) in the form of user(a)domain.tld. Simply a string. The error I get. +++ Jan 12 08:36:31 f42252se dovecot: pop3(avadmin(a)av.loc): Error: user avadmin(a)av.loc: Initialization failed: Initializing mail s?lo c ?torage from mail_location setting failed: Ambiguous mail location setting, don't know what to do with it: /home/vmail/avadmin/? Ja?Maildir/ (try prefixing it with mbox: or maildir:) ?id )=?Jan 12 08:36:31 f42252se dovecot: pop3(avadmin(a)av.loc): Error: Invalid user settings. Refer to server log for more information? Ja?. +++ I guess it must have to do something with permissions. Butwhere and which. My config: +++ # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-35-generic x86_64 Ubuntu 12.04.1 LTS auth_debug = yes auth_mechanisms = plain login cram-md5 auth_username_format = %Lu hostname = mail.av.loc mail_gid = vmail mail_location = maildir:~/Maildir mail_privileged_group = vmail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0600 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem syslog_facility = avdove userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lda { sendmail_path = /usr/sbin/sendmail } +++ Please give me ahint! -- Signatur Averlon info Mit freundlichen Grüßen / Kind Regards Karl-Heinz Fischbach

2 2

[Dovecot] dovecot and cacti (snmp ?)
by mancyborg＠gmail.com 10 Jan '13

10 Jan '13

Hi All, I've put online a postfix+dovecot+mysql+roundcube server that will grow till serving around 1500 accounts. I've installed the usual cacti graphs, plus the beautiful percona suite for mysql's cacti plus some graphs for iops and iostat. I was lurking around for the best solution to graph dovecot usage, the most detailed possible, in order to prevent and foresee problems. I'm finding sparse results, I'm not sure which one is the most current / complete. Do you have any suggestions ? Thank you very much for supporting, regards and have a nice day, Mike

2 1

[Dovecot] unknown users
by Averlon 10 Jan '13

10 Jan '13

Hi, can anyone tell me where these "unknown users" come from. As far as I see the fact, dovecot is asked by postfix to look for the password of the recipient-user (why ever). +++ Jan 7 19:43:09 f42252se postfix/smtpd[14625]: initializing the server-side TLS engine Jan 7 19:43:09 f42252se postfix/tlsmgr[14627]: open smtpd TLS cache btree:/var/lib/postfix/smtpd_scache Jan 7 19:43:09 f42252se postfix/tlsmgr[14627]: tlsmgr_cache_run_event: start TLS smtpd session cache cleanup Jan 7 19:43:09 f42252se postfix/smtpd[14625]: connect from f42252ud.averlon.loc[192.168.110.165] Jan 7 19:43:09 f42252se postfix/smtpd[14625]: setting up TLS connection from f42252ud.averlon.loc[192.168.110.165] Jan 7 19:43:09 f42252se postfix/smtpd[14625]: f42252ud.averlon.loc[192.168.110.165]: TLS cipher list "aNULL:-aNULL:ALL:+RC4:@STRENGTH" Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:before/accept initialization Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 read client hello A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write server hello A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write certificate A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write key exchange A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write server done A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 flush data Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 read client key exchange A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 read finished A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write session ticket A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write change cipher spec A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write finished A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 flush data Jan 7 19:43:09 f42252se postfix/smtpd[14625]: Anonymous TLS connection established from f42252ud.averlon.loc[192.168.110.165]: TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits) Jan 7 19:43:09 f42252se dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Jan 7 19:43:09 f42252se dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libauthdb_ldap.so Jan 7 19:43:09 f42252se dovecot: auth: Debug: auth client connected (pid=14625) Jan 7 19:43:09 f42252se dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=smtp#011nologin#011lip=192.168.110.150#011rip=192.168.110.165#011secured#011resp=<hidden> Jan 7 19:43:09 f42252se dovecot: auth: Debug: ldap(avadmin,192.168.110.165): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=avadmin)) fields=uid,userPassword Jan 7 19:43:09 f42252se dovecot: auth: Debug: ldap(avadmin,192.168.110.165): result: uid(user)=avadmin userPassword(password)=<hidden> Jan 7 19:43:09 f42252se dovecot: auth: Debug: client out: OK#0111#011user=avadmin Jan 7 19:43:09 f42252se postfix/smtpd[14625]: 9A86C30007C: client=f42252ud.averlon.loc[192.168.110.165], sasl_method=PLAIN, sasl_username=avadmin Jan 7 19:43:09 f42252se postfix/cleanup[14631]: 9A86C30007C: message-id=<50EB173B.5090109(a)av.loc> Jan 7 19:43:09 f42252se postfix/qmgr[14561]: 9A86C30007C: from=<avadmin(a)av.loc>, size=1227, nrcpt=1 (queue active) Jan 7 19:43:09 f42252se postfix/smtpd[14625]: disconnect from f42252ud.averlon.loc[192.168.110.165] Jan 7 19:43:11 f42252se postfix/pickup[14560]: BE0AC30007F: uid=5002 from=<avadmin(a)av.loc> Jan 7 19:43:11 f42252se postfix/cleanup[14631]: BE0AC30007F: message-id=<50EB173B.5090109(a)av.loc> Jan 7 19:43:11 f42252se postfix/qmgr[14561]: BE0AC30007F: from=<avadmin(a)av.loc>, size=1534, nrcpt=1 (queue active) Jan 7 19:43:11 f42252se postfix/pipe[14632]: 9A86C30007C: to=<redmine(a)averlon.loc>, relay=spamassassin, delay=2.2, delays=0.05/0/0/2.1, dsn=2.0.0, status=sent (delivered via spamassassin service) Jan 7 19:43:11 f42252se postfix/qmgr[14561]: 9A86C30007C: removed Jan 7 19:43:11 f42252se dovecot: auth: Debug: master in: USER#0111#011redmine(a)averlon.loc#011service=lda Jan 7 19:43:11 f42252se dovecot: auth: Debug: ldap(redmine(a)averlon.loc): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=redmine(a)averlon.loc)) fields=uid,userPassword Jan 7 19:43:11 f42252se dovecot: auth: ldap(redmine(a)averlon.loc): *unknown user* Jan 7 19:43:11 f42252se dovecot: auth: Debug: master out: NOTFOUND#0111 Jan 7 19:43:11 f42252se postfix/pipe[14637]: BE0AC30007F: to=<redmine(a)averlon.loc>, relay=dovecot, delay=0.02, delays=0/0/0/0.01, dsn=5.1.1, status=bounced (user unknown) Jan 7 19:43:11 f42252se postfix/cleanup[14631]: C279030007E: message-id=<20130107184311.C279030007E(a)mail.av.loc> Jan 7 19:43:11 f42252se postfix/qmgr[14561]: C279030007E: from=<>, size=3182, nrcpt=1 (queue active) Jan 7 19:43:11 f42252se postfix/bounce[14639]: BE0AC30007F: sender non-delivery notification: C279030007E Jan 7 19:43:11 f42252se postfix/qmgr[14561]: BE0AC30007F: removed Jan 7 19:43:11 f42252se dovecot: auth: Debug: master in: USER#0111#011avadmin(a)av.loc#011service=lda Jan 7 19:43:11 f42252se dovecot: auth: Debug: ldap(avadmin(a)av.loc): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=avadmin(a)av.loc)) fields=uid,userPassword Jan 7 19:43:11 f42252se dovecot: auth: ldap(avadmin(a)av.loc): *unknown user* Jan 7 19:43:11 f42252se dovecot: auth: Debug: master out: NOTFOUND#0111 Jan 7 19:43:11 f42252se postfix/pipe[14637]: C279030007E: to=<avadmin(a)av.loc>, relay=dovecot, delay=0.01, delays=0/0/0/0.01, dsn=5.1.1, status=bounced (user unknown) Jan 7 19:43:11 f42252se postfix/qmgr[14561]: C279030007E: removed Jan 7 19:43:21 f42252se dovecot: auth: Debug: auth client connected (pid=14644) Jan 7 19:43:21 f42252se dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=pop3#011secured#011lip=192.168.110.150#011rip=192.168.110.165#011lport=995#011rport=43070 Jan 7 19:43:21 f42252se dovecot: auth: Debug: client out: CONT#0111#011 Jan 7 19:43:21 f42252se dovecot: auth: Debug: client in: CONT<hidden> Jan 7 19:43:21 f42252se dovecot: auth: Debug: ldap(qx42252006,192.168.110.165): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=qx42252006)) fields=uid,userPassword Jan 7 19:43:21 f42252se dovecot: auth: Debug: ldap(qx42252006,192.168.110.165): result: uid(user)=qx42252006 userPassword(password)=<hidden> Jan 7 19:43:21 f42252se dovecot: auth: Debug: client out: OK#0111#011user=qx42252006 Jan 7 19:43:21 f42252se dovecot: auth: Debug: master in: REQUEST#0113145334785#01114644#0111#0115f6241afb0ff05d6b901a9a1edd65840 Jan 7 19:43:21 f42252se dovecot: auth: Debug: master out: USER#0113145334785#011qx42252006#011uid=5000#011gid=5000#011home=/home/vmail/qx42252006 Jan 7 19:43:21 f42252se dovecot: pop3-login: Login: user=<qx42252006>, method=PLAIN, rip=192.168.110.165, lip=192.168.110.150, mpid=14646, TLS Jan 7 19:43:21 f42252se dovecot: pop3(qx42252006): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 7 19:43:27 f42252se dovecot: auth: Debug: auth client connected (pid=14649) Jan 7 19:43:28 f42252se dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=pop3#011secured#011lip=192.168.110.150#011rip=192.168.110.165#011lport=995#011rport=43071 Jan 7 19:43:28 f42252se dovecot: auth: Debug: client out: CONT#0111#011 Jan 7 19:43:28 f42252se dovecot: auth: Debug: client in: CONT<hidden> Jan 7 19:43:28 f42252se dovecot: auth: Debug: ldap(avadmin,192.168.110.165): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=avadmin)) fields=uid,userPassword Jan 7 19:43:28 f42252se dovecot: auth: Debug: ldap(avadmin,192.168.110.165): result: uid(user)=avadmin userPassword(password)=<hidden> Jan 7 19:43:28 f42252se dovecot: auth: Debug: client out: OK#0111#011user=avadmin Jan 7 19:43:28 f42252se dovecot: auth: Debug: master in: REQUEST#0113661234177#01114649#0111#011abd1ac9fcd3ced2d9b01e090f3703ac0 Jan 7 19:43:28 f42252se dovecot: auth: Debug: master out: USER#0113661234177#011avadmin#011uid=5000#011gid=5000#011home=/home/vmail/avadmin Jan 7 19:43:28 f42252se dovecot: pop3-login: Login: user=<avadmin>, method=PLAIN, rip=192.168.110.165, lip=192.168.110.150, mpid=14650, TLS Jan 7 19:43:28 f42252se dovecot: pop3(avadmin): Disconnected: Logged out top=0/0, retr=0/0, del=0/2, size=4872 Jan 7 19:44:31 f42252se dovecot: auth: Debug: auth client connected (pid=14694) Jan 7 19:44:31 f42252se dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=pop3#011secured#011lip=192.168.110.150#011rip=192.168.110.165#011lport=995#011rport=43073 Jan 7 19:44:31 f42252se dovecot: auth: Debug: client out: CONT#0111#011 Jan 7 19:44:31 f42252se dovecot: auth: Debug: client in: CONT<hidden> Jan 7 19:44:31 f42252se dovecot: auth: Debug: ldap(qx42252008,192.168.110.165): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=qx42252008)) fields=uid,userPassword Jan 7 19:44:31 f42252se dovecot: auth: Debug: ldap(qx42252008,192.168.110.165): result: uid(user)=qx42252008 userPassword(password)=<hidden> Jan 7 19:44:31 f42252se dovecot: auth: Debug: client out: OK#0111#011user=qx42252008 Jan 7 19:44:31 f42252se dovecot: auth: Debug: master in: REQUEST#011251920385#01114694#0111#011db7eed58edf0149fd176446b57c20a33 Jan 7 19:44:31 f42252se dovecot: auth: Debug: master out: USER#011251920385#011qx42252008#011uid=5000#011gid=5000#011home=/home/vmail/qx42252008 Jan 7 19:44:31 f42252se dovecot: pop3-login: Login: user=<qx42252008>, method=PLAIN, rip=192.168.110.165, lip=192.168.110.150, mpid=14698, TLS +++ Tell me what you need as additional info. Thanks for help -- Signatur Averlon info Mit freundlichen Grüßen / Kind Regards Karl-Heinz Fischbach Skype: khfischbach jabber: averlon(a)jabber.org Blog: averlon.posterous.com Signatur: Diese e-mail ist unter Umständen signiert. Die Signatur entspricht dem Deutschen Signaturgesetz und entsprechenden europäischen Regelungen. Important Note: This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information. If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of it is strictly prohibited. Please inform us immediately and destroy the original transmittal.

5 9

[Dovecot] problems with sieve
by Carsten Laun-De Lellis 10 Jan '13

10 Jan '13

Hi all I am running a simple mail server on ubuntu 12.04LTS with postfix 2.9.3 and dovecot 2.1.10. Since this morning sieve doesn't work anymore. I changed the sieve script forth and back but sieve is not working. I also replaced the sieve file with the backup, but no success. But I can't any error messages in the log files indicating any problem with sieve. The only thing I found is: Jan 10 00:03:26 vmd187 dovecot: lda(carsten.delellis(a)delellis.net): sieve: msgid=<12155505.mmailer335539222(a)fritz.box>: stored mail into mailbox 'Fritz!Box' -- with working sieve Jan 10 13:52:29 vmd187 dovecot: lda(carsten.delellis(a)delellis.net): msgid=<1898328495.2554803.1357821905269.JavaMail.app(a)ela4-app2316.prod>: saved mail to INBOX -- with sieve not working As you can see that after dovecot: lda(carsten.delellis(a)delellis.net): the sieve tag is missing. I have also attached my settings from 90-sieve.conf from dovecot configuration. ## ## Settings for the Sieve interpreter ## # Do not forget to enable the Sieve plugin in 15-lda.conf and 20-lmtp.conf # by adding it to the respective mail_plugins= settings. plugin { # The path to the user's main active script. # sieve = ~/.dovecot.sieve sieve = /vmail/%d/%n/dovecot.sieve # A path to a global sieve script file, which gets executed ONLY # if user's private Sieve script doesn't exist. Be sure to # pre-compile this script manually using the sievec command line # tool. sieve_global_path = /var/lib/dovecot/sieve/default.sieve # Directory for :personal include scripts for the include extension. # sieve_dir = ~/sieve sieve_dir = /vmail/%d/%n # Directory for :global include scripts for the include extension. sieve_global_dir = /var/lib/dovecot/sieve # Which Sieve language extensions are available to users. By default, # all supported extensions are available, except for deprecated # extensions or those that are still under development. Some system # administrators may want to disable certain Sieve extensions or # enable those that are not available by default. This setting can # use '+' and '-' to specify differences relative to the default. # For example `sieve_extensions = +imapflags' will enable the # deprecated imapflags extension in addition to all extensions # enabled by default. #sieve_extensions = +notify +imapflags # The separator that is expected between the :user and :detail # address parts introduced by the subaddress extension. This may # also be a sequence of characters (e.g. '--'). The current # implementation looks for the separator from the left of the # localpart and uses the first one encountered. The :user part is # left of the separator and the :detail part is right. This setting # is also used by Dovecot's LMTP service. recipient_delimiter = + # The maximum size of a Sieve script. The compiler will refuse to # compile any script larger than this limit. #sieve_max_script_size = 1M # The maximum number of actions that can be performed during a single # script execution. #sieve_max_actions = 32 # The maximum number of redirect actions that can be performed during # a single script execution. #sieve_max_redirects = 4 # The maximum number of personal Sieve scripts a single user can have. # (Currently only relevant for ManageSieve) #sieve_quota_max_scripts = 0 # The maximum amount of disk storage a single user's scripts may occupy. # (Currently only relevant for ManageSieve) #sieve_quota_max_storage = 0 } And also you can see that sieve is listening on port 4190 and managesieve on 2000 > lsof -i :4190 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME dovecot 2503 root 15u IPv4 14101 0t0 TCP *:sieve (LISTEN) dovecot 2503 root 16u IPv6 14102 0t0 TCP *:sieve (LISTEN) lsof -i :2000 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME dovecot 2503 root 17u IPv4 14103 0t0 TCP *:cisco-sccp (LISTEN) dovecot 2503 root 18u IPv6 14104 0t0 TCP *:cisco-sccp (LISTEN) I would appreciate any hints. Regards, Carsten Laun-De Lellis Hauptstrasse 13 D-67705 Trippstadt Phone: +49 6306 992140 Fax: +49 6306 992142 Mobile: +49 151 27530865 email: carsten.delellis(a)delellis.net http://www.linkedin.com/in/carstenlaundelellis

2 1

[Dovecot] Confused about "Authentication Mechanism" and "Password Schemes"
by Thomas Pries 10 Jan '13

10 Jan '13

Hi, I am currently setting up a Mailserver and decided to use Dovecot as IMAP/POP3-Server. I read the wiki an thought about how to transmit and store the passwords (I want to use a MySQL-database). I want to use encrypted transmission and encrypted storage. The wiki says: "If you want to use only one non-plaintext mechanism, you can store the passwords using the mechanism's own password scheme. " Ok, one secure mechanism is acceptable in my scenario and the wiki gives a list of supported authentication mechanisms and a list of supported password schemes. But I am missing the relation between the two lists, which mechanism expects which storage scheme? Did I overlooked any easy answer (other then "read the RFCs"). Best Regards Thomas

2 1

[Dovecot] v2.2.beta1 released
by Timo Sirainen 10 Jan '13

10 Jan '13

http://dovecot.org/releases/2.2/beta/dovecot-2.2.beta1.tar.gz http://dovecot.org/releases/2.2/beta/dovecot-2.2.beta1.tar.gz.sig Lots of fixes since 2.2.alpha1, especially related to dsync. Also dsync now supports syncing private message flags when INDEXPVT is used. Here's again the list of all the major changes in v2.2: * When creating home directories, the permissions are copied from the parent directory if it has setgid-bit set. For full details, see http://wiki2.dovecot.org/SharedMailboxes/Permissions * "doveadm auth" command was renamed to "doveadm auth test" * IMAP: ID command now advertises server name as Dovecot by default. It was already trivial to guess this from command replies. * dovecot.index.cache files can be safely accessed only by v2.1.11+. Older versions may think they're corrupted and delete them. + Implemented IMAP MOVE and BINARY extensions + Implemented IMAP CATENATE, URLAUTH and URLAUTH=BINARY extensions (by Stephan Bosch). + Implemented IMAP NOTIFY extension. Requires mailbox_list_index=yes to be enabled. + Redesigned and rewritten dsync. The new design makes the syncing faster, more reliable and more featureful. The new dsync protocol isn't backwards compatible with old dsync versions (but is designed to be forwards compatible with future versions). + All mailbox formats now support per-user message flags for shared mailboxes by using a private index. It can be enabled by adding :INDEXPVT=<path> to mail location. This should be used instead of :INDEX also for Maildir/mbox to improve performance. + Improved mailbox list indexes. They should be usable now, although still disabled by default. + Added LAYOUT=index. The mailbox directories are created using their GUIDs in the filesystem, while the actual GUID <-> name mapping exists only in the index. + LMTP proxy: Implemented XCLIENT extension for passing remote IP address through proxy.

2 4

[Dovecot] Mark Crispin - RIP
by Robert Moskowitz 09 Jan '13

09 Jan '13

'Father' of the IMAP protocol. Died Dec 28. http://en.wikipedia.org/wiki/Mark_Crispin Had a TOPS-20 in his basement that did a great job of keeping the house warm in the cool months (I remember one BAR bof where he extoled the benefits of this form of home heating).

3 2

[Dovecot] Squat FTS plugin not kicking in
by Frerich Raabe 09 Jan '13

09 Jan '13

Hi, I'm running Dovecot 2.1.12 on FreeBSD. I configured Dovecot to use the Squat plugin to provide faster full-text searches. The output of 'dovecot -n' is attached to this mail. However, I just noticed that this plugin doesn't seem to kick in. A raw telnet session seems to confirm this: [..] . SEARCH BODY abcdefg * OK Searched 57% of the mailbox, ETA 0:06 * SEARCH 3425 6254 14710 . OK Search completed (17.262 secs). . SEARCH BODY abcdefg * OK Searched 63% of the mailbox, ETA 0:05 * SEARCH 3425 6254 14710 . OK Search completed (18.651 secs). [..] A SEARCH BODY command doesn't create the dovecot.index.search or dovecot.index.search.uids files mentioned on http://wiki2.dovecot.org/Plugins/FTS/Squat . Also, two subsequent SEARCH BODY invocations don't seem to be any different as far as search time goes. I checked the logs but couldn't see anything which is related, except: Jan 8 21:36:10 imap2 dovecot: indexer-worker(frerich): Indexed 0 messages in INBOX Does anybody have some idea how to get more logging out of index-worker, or whether there's a flaw in my configuration? -- Frerich Raabe - raabe(a)froglogic.com www.froglogic.com - Multi-Platform GUI Testing

1 1

Re: [Dovecot] Migrating mailboxes - SOLVED
by Odhiambo Washington 09 Jan '13

09 Jan '13

On Wed, Jan 9, 2013 at 5:36 PM, Eduardo M KALINOWSKI < eduardo(a)kalinowski.com.br> wrote: > On Qua, 09 Jan 2013, Odhiambo Washington wrote: > >> See the output below >> >> [root@mail home]# cd johndoe/ >> [root@mail johndoe]# du -h mail/ >> 32K mail/.imap/Sent >> 40K mail/.imap/Trash >> 32K mail/.imap/Drafts >> 176K mail/.imap/INBOX >> 284K mail/.imap >> 88M mail/ >> > > Clearly most of the data (probably the emails) is not under the .imap > subdir, which is exactly what you didn't show us. It's probably mbox files. > > Sure! Looking further, I have found the mboxes and I am now able to migrate! Thanks for being my "third eye". That version of Dovecot had shocked my senses senseless!! -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ I can't hear you -- I'm using the scrambler.

1 0

[Dovecot] Migrating mailboxes
by Odhiambo Washington 09 Jan '13

09 Jan '13

Hello everyone and Happy 2013! I have a situation -- the first ever I have come across -- which I don't understand. A friend was/is running Postfix and Dovecot - with default configs - nothing was ever changed :-) [root@mail home]# dovecot --version 0.99.11 Anyway, he had a problem with a user mailbox which I wasn't able to diagnose and fix easily. maillog showed: Jan 9 16:11:29 mail imap-login: Login: userx [::ffff:127.0.0.1] Jan 9 16:11:29 mail imap(userx): file lib.c: line 37 (nearest_power): assertion failed: (num <= ((size_t)1 << (BITS_IN_SIZE_T-1))) Jan 9 16:11:29 mail dovecot: child 25217 (imap) killed with signal 6 Jan 9 16:12:03 mail imap-login: Login: userx [::ffff:127.0.0.1] Jan 9 16:12:03 mail imap(userx): file lib.c: line 37 (nearest_power): assertion failed: (num <= ((size_t)1 << (BITS_IN_SIZE_T-1))) Jan 9 16:12:03 mail dovecot: child 25229 (imap) killed with signal 6 Jan 9 16:13:15 mail pop3-login: Login: userx [::ffff:192.168.0.55] Jan 9 16:13:15 mail pop3(userx): file lib.c: line 37 (nearest_power): assertion failed: (num <= ((size_t)1 << (BITS_IN_SIZE_T-1))) My aim is not to fix the above. I have reconfigured both Postfix and Dovecot to use Maildir now and things are fine (not securitywise, but I don't care about that) for now. However, I'd like to migrate old mail for some users, but I don't know how to go about this, given the mailbox format, which I don't understand: Here is what a typical one looks like: [root@mail home]# ls -al johndoe/mail/.imap/ total 24 drwx------ 6 johndoe users 4096 May 27 2010 . drwx------ 3 johndoe users 4096 May 27 2010 .. drwx------ 2 johndoe users 4096 May 27 2010 Drafts drwx------ 2 johndoe users 4096 Jan 9 15:46 INBOX drwx------ 2 johndoe users 4096 May 27 2010 Sent drwx------ 2 johndoe users 4096 May 27 2010 Trash [root@mail home]# ls -al johndoe/mail/.imap/INBOX/ total 180 drwx------ 2 johndoe users 4096 Jan 9 15:46 . drwx------ 6 johndoe users 4096 May 27 2010 .. -rw------- 1 johndoe users 5 Dec 18 2007 .customflags -rw------- 1 johndoe users 10272 Jan 9 15:46 .imap.index -rw------- 1 johndoe users 132774 Jan 9 11:27 .imap.index.data -rw------- 1 johndoe users 5136 Sep 26 2011 .imap.index.log -rw------- 1 johndoe users 9404 Jan 8 18:44 .imap.index.tree [root@mail home]# ls -al johndoe/mail/.imap/Sent/ total 36 drwx------ 2 johndoe users 4096 May 27 2010 . drwx------ 6 johndoe users 4096 May 27 2010 .. -rw------- 1 johndoe users 5 May 27 2010 .customflags -rw------- 1 johndoe users 1608 May 27 2010 .imap.index -rw------- 1 johndoe users 10264 May 27 2010 .imap.index.data -rw------- 1 johndoe users 2576 May 27 2010 .imap.index.log -rw------- 1 johndoe users 1556 May 27 2010 .imap.index.tree [root@mail home]# ls -al johndoe/mail/.imap/Drafts/ total 36 drwx------ 2 johndoe users 4096 May 27 2010 . drwx------ 6 johndoe users 4096 May 27 2010 .. -rw------- 1 johndoe users 5 May 27 2010 .customflags -rw------- 1 johndoe users 1608 May 27 2010 .imap.index -rw------- 1 johndoe users 10264 May 27 2010 .imap.index.data -rw------- 1 johndoe users 2576 May 27 2010 .imap.index.log -rw------- 1 johndoe users 1556 May 27 2010 .imap.index.tree [root@mail home]# ls -al johndoe/mail/.imap/Trash/ total 44 drwx------ 2 johndoe users 4096 May 27 2010 . drwx------ 6 johndoe users 4096 May 27 2010 .. -rw------- 1 johndoe users 5 May 27 2010 .customflags -rw------- 1 johndoe users 1608 May 27 2010 .imap.index -rw------- 1 johndoe users 17950 May 27 2010 .imap.index.data -rw------- 1 johndoe users 2576 May 27 2010 .imap.index.log -rw------- 1 johndoe users 1556 May 27 2010 .imap.index.tree How can I migrate these mails into /home/johndoe/Maildir/ ?? They don't seem like mbox to me so mb2md.pl doesn't seem to apply here.. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ I can't hear you -- I'm using the scrambler.

5 9

[Dovecot] Dsync didn't updates automatically
by Breno Moreira 08 Jan '13

08 Jan '13

Hi, I'm trying to use the Dsync cluster feature in a simple setup, without director, but I'm having some troubles. First of all, I want to know if this functionality syncs the mailbox when the user receive a mail or only when the dovecot starts? Reading the Dovecot mailing list and the design description for a dsync-replicated Dovecot cluster, I understood that it should sync every time a new mail arrives, but it isn't happening in my system. So, can I do this update automatically? If yes, why is it not working properly? Maybe is my configuration files or maybe I'm confusing the capability of this feature. I'm using Dovecot 2.1.7 included in the Debian Wheezy, with virtual users in a MySQL database, Moreover, I have the following configuration: mail_plugins = $mail_plugins notify replication service aggregator { # give enough permissions for mail processes fifo_listener replication-notify-fifo { user = vmail #mode = 0666 } unix_listener replication-notify { user = vmail #mode = 0666 } } service replicator { # start replication at startup process_min_avail = 1 } plugin { # host1 replicates to host2 #mail_replica = remote:vmail at 10.127.0.2 # host2 replicates to host1 mail_replica = remote:vmail@10.127.0.5 } dsync_remote_cmd = ssh -l vmail %{host} doveadm dsync-server -u%u -l%{lock_timeout} -n%{namespace} service doveadm { # if you're using a single virtual user, set this to # start ssh as vmail (not root) user = vmail } service config { unix_listener config { user = vmail } } The vmail user has rsa id's in both servers, so it can do ssh connections without asking for password. I appreciate your help. Best Regards, -- --------------------------------------------------------------------- Breno Moreira "I have no idols. I admire work, dedication and competence." Ayrton Senna

2 6

[Dovecot] dovecot-antispam-plugin compile error
by Bradley Giesbrecht 08 Jan '13

08 Jan '13

$ hg --cwd ./work/dovecot-antispam-plugin-50 glog -l3 --style compact @ 50[tip] 0319240072d8 2012-12-20 03:56 +0200 Eugene Paskevich <eugene(a)raptor.kiev.ua> | Made use of new DOVECOT_ABI_VERSION macro. ... $ configure; make Compiling signature-log.c (plugin)... signature-log.c:122: error: too many arguments to function ‘dict_init’ ... Reverting src/signature-log.c from r49 to r30 allows make to succeed again. Regards, Bradley Giesbrecht (pixilla)

1 0

[Dovecot] Question about supporting EAI in Devecot
by Abdulrahman I. ALGhadir 08 Jan '13

08 Jan '13

Dear all, I would like to ask the staff of Devecot if they are planning (working) or supporting EAI (http://tools.ietf.org/wg/eai/) in the future versions? If there is a working progress on it can anybody guide me to it? Thank you, AbdulRahman, ----------------------------------------------------------------------------------- Disclaimer: This message and its attachment, if any, are confidential and may contain legally privileged information. If you are not the intended recipient, please contact the sender immediately and delete this message and its attachment, if any, from your system. You should not copy this message or disclose its contents to any other person or use it for any purpose. Statements and opinions expressed in this e-mail are those of the sender, and do not necessarily reflect those of the Communications and Information Technology Commission (CITC). CITC accepts no liability for damage caused by this email.

2 3

[Dovecot] imap: Error: net_connect_unix(/.../auth-master) failed: Invalid argument
by Joan Picanyol i Puig 08 Jan '13

08 Jan '13

Hi, I'm unable to get past the subject error trying to setup dovecot 2.1.10 on FreeBSD 6.4: right after login the server closes the connection (testing with telnet) I've tried manualy chown()ing auth-master to 666, so permission issues should be ruled out. I'm attaching logs, config and excerpt of ktrace -id. I've built a version with debug symbols, but I don't seem to hit a breakpoint in net_connect_unix on lib/network.c What can I look at? tks -- pica

2 3

[Dovecot] Access to deleted mails in mdbox storage
by Wolfgang.Friebel＠desy.de 08 Jan '13

08 Jan '13

Hi Timo, we are currently running dovecot 2.1.10 using mdbox storage. Sometimes we get requests from users to restore accidentally deleted mails. If the mails got deleted before a backup was made, such mails could of course not be restored from backup. One option to help users in this respect would be to use the lazy expunge plugin. On the other hand I have seen, that the deleted mails stay intact in the mdbox storage until a doveadm purge has been performed. Therefore without using the plugin it is in principle possible to get access to any deleted mails. As in our case the expunge runs once a week while the backup is done daily we can basically recover all mails ever received. My question: doveadm has currently no command similar to doveadm search or fetch to get to deleted mails. Would it be useful to have such a command? As a proof of concept I wrote a little script to mimic the doveadm fetch as closely as possible given the limited amount of information in the mdbox/storage/m.* files and could indeed get access to deleted mails. Do you regard such a procedure (within doveadm) useful or would you recommend nevertheless using the lazy expunge plugin? I am aware of the fact that this is a solution for mdbox storage only. -- Wolfgang Friebel Deutsches Elektronen-Synchrotron DESY Phone/Fax: +49 33762 77372/216 Platanenallee 6 Mail: Wolfgang.Friebel AT desy.de D-15738 Zeuthen Germany

2 1

[Dovecot] 2 node dovecot
by Lazy 08 Jan '13

08 Jan '13

Hi, We run dovecot 2.1 on 2 nodes with shared nfs storage. Index files are kept on local disk. Second node is usually used only for email snapshots access. If primary node fails it is configured to take place of the primary imap server. Snapshots are additional namespaces with mail from various points in time. We need a way to easly copy multiple messages from snapshots to current mailboxes. It would be best to make current mailbox available as another namespace so one would simply copy messages from one folder to another. Is it safe ? There will be times when given user is writing to the same nfs based Maildir mailbox from 2 nodes both of them having separate index files. What will happen if already present message gets copied back from the snapshot ? Regards, Michał Grzędzicki

2 2

[Dovecot] lda crash?
by kjonca＠o2.pl 08 Jan '13

08 Jan '13

When I try to refilter some messages lda crash: Dec 29 16:07:34 LDA(kjonca): Info: sieve: msgid=<003a01bf6d8f$c9d69f20$9c2dcdc3(a)tiger.com.pl>: stored mail into mailbox 'scott/Sent' Dec 29 16:08:02 lda: Debug: Loading modules from directory: /usr/lib/dovecot/modules Dec 29 16:08:02 lda: Debug: Module loaded: /usr/lib/dovecot/modules/lib90_sieve_plugin.so Dec 29 16:08:02 LDA(kjonca): Debug: Effective uid=1000, gid=1000, home=/home/kjonca Dec 29 16:08:02 LDA(kjonca): Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Mail/0:LAYOUT=fs:INBOX=~/Mail/0/INBOX Dec 29 16:08:02 LDA(kjonca): Debug: fs: root=/home/kjonca/Mail/0, index=, control=, inbox=/home/kjonca/Mail/0/INBOX, alt= Dec 29 16:08:02 LDA(kjonca): Debug: userdb lookup skipped, username taken from USER environment Dec 29 16:08:02 LDA(kjonca): Debug: none: root=, index=, control=, inbox=, alt= Dec 29 16:08:02 LDA(kjonca): Debug: Destination address: kjonca(a)alfa.kjonca (source: user@hostname) Dec 29 16:08:02 LDA(kjonca): Debug: sieve: include: sieve_global_dir is not set; it is currently not possible to include `:global' scripts. Dec 29 16:08:02 LDA(kjonca): Debug: sieve: Pigeonhole Sieve Extprograms plugin version 0.1.0 loaded Dec 29 16:08:02 LDA(kjonca): Debug: sieve: using the following location for user's Sieve script: /home/kjonca/.dovecot.sieve Dec 29 16:08:02 LDA(kjonca): Debug: sieve: opening script /home/kjonca/.dovecot.sieve Dec 29 16:08:02 LDA(kjonca): Debug: sieve: script binary /home/kjonca/.dovecot.svbin successfully loaded Dec 29 16:08:02 LDA(kjonca): Debug: sieve: binary save: not saving binary /home/kjonca/.dovecot.svbin, because it is already stored Dec 29 16:08:02 LDA(kjonca): Debug: sieve: executing script from /home/kjonca/.dovecot.svbin Dec 29 16:08:02 LDA(kjonca): Info: sieve: msgid=<001b01bf7227$18649840$9c2dcdc3(a)tiger.com.pl>: stored mail into mailbox 'scott/Sent' doveconf -n output KJ -- http://sporothrix.wordpress.com/2011/01/16/usa-sie-krztusza-kto-nastepny/ Little known fact about Middle Earth: The Hobbits had a very sophisticated computer network! It was a Tolkien Ring...

3 6

[Dovecot] Director and forwarding LDAP user as Master user
by Alexandr Sabitov 08 Jan '13

08 Jan '13

Hello guys, Would you be able to help me with this little issue. I bet someone has the same config so if you can copy-paste it I will very appreciate it. So main idea is to enable Dovecot director to authenticate a LDAP user with plain or encrypted password and send the user to back-end Dovecot server after the authentication. According to Wiki it is only possible if we use the master user to communicate to the back-end server. On the back-end Dovecot server it is working fine, I can log in as normal user/user_password or as user*masteruser/master_password. The back-end config is: auth_master_user_separator = * passdb { driver = passwd-file args = /usr/local/dovecot/etc/dovecot/passwd.masterusers master = yes pass = yes } passdb { driver = ldap args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext } userdb { driver = ldap args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext } Now front-end: how to get director forward the user to the back-end after authentication on the director? With my director config the user stays on the director all the time: passdb { driver = static args = proxy=y master=masteruser pass=master_password destuser=%u*masteruser } passdb { driver = ldap args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext } userdb { driver = ldap args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext } The only way to forward the user is to setup nopassword=y in args of static passdb but in that case the user will be authenticated on the backend but not on the director... What do I missing ? Please help me Best Regards, Alexandr Sabitov

2 2

Re: [Dovecot] Problem setting up dovecot on Debian: "telnet: Unable to connect to remote host: Connection refused"
by Joseph Tam 08 Jan '13

08 Jan '13

Noel Butler writes: > I build from sources all key daemon software anyway, package maintainers > can only account for so many configurations. Its not so critical with > dovecot now since v2, because, regrettably, Timo removed a lot of fine > tune config options that allowed us to only build in what we wanted, > now, tuff, most the auth methods and stuff must be built even if we dont > want them. That hasn't been my experience, but maybe because the non-optional stuff are what I need. For example, my configure for v2.1.x summarizes Install prefix . : /opt/dovecot File offsets ... : 64bit I/O polling .... : poll I/O notifys .... : none SSL ............ : yes (OpenSSL) GSSAPI ......... : no passdbs ........ : static passwd passwd-file checkpassword : -shadow -pam -bsdauth -sia -ldap -sql -vpopmail userdbs ........ : static prefetch passwd passwd-file checkpassword : -ldap -sql -vpopmail -nss SQL drivers .... : : -pgsql -mysql -sqlite Full text search : squat : -lucene -solr A few auth methods, which even if you don't use, is a nice fallback for exceptions or niche caches, no dbs, one mandatory text search method. Joseph Tam <jtam.home(a)gmail.com>

1 0