- dovecot - dovecot.org

Re: [Dovecot] Hostname Based forwarding
by Joseph Tam 20 Aug '12

20 Aug '12

Merrickville <merrickville(a)gmail.com> writes: > Is there a way to proxy based on the host name the client has configured in > his/her email client? (Like Apache VirtualHosts) I doubt it; the virtual name is not part of the IMAP protocol as it is in HTTP. The IMAP server is not told which hostname was mapped to its IP. You'll either have to add the @domain, or perhaps multi-home your host, remap one of your domains to the new IP, and add another running instance of dovecot to listen on that interface. Joseph Tam <jtam.home(a)gmail.com>

2 1

Re: [Dovecot] SOLVED antispam_plugin prevents IMAP login (error 3) [Dovecot 2.0.19]
by dof＠projektfabrik.com 20 Aug '12

20 Aug '12

On 17.08.2012 12:06, dof(a)projektfabrik.com wrote: > Hi everybody, > > trying to get the Dovecot antispam_plugin to work and I must be doing > something wrong, because as soon as it is enabled with a certain > backend, imap logins do not work anymore (the session is immediately > closed after a successful login). Interestingly, pipe and spool2dir > are working (that is, the session won't be closed), dspam-exec and > crm114-exec are not. If this happens, mail_debug output is as > follows: > > [...] Hi again, how embarrassing. I should use the correct name for the backend type. :\ So everything works as expected, sorry for spamming the mailing list. Best regards, Florian

1 0

[Dovecot] Full text search in attachments
by Mailing 20 Aug '12

20 Aug '12

Hello, is it possible to use the Solr full text search plugin for indexing mail attachments? I found a very old patch and some hints regarding a fts_decoder script that I don't understand. Making Solr indexing PDF or Office files shouldn't be that difficult, but how can I enable the plugin to transfer the attachments to Solr? Best regards, Sebastian

2 3

[Dovecot] case insensitive acl
by Andre Rodier 19 Aug '12

19 Aug '12

Hello, I have notice that when I use ACL, the name of the user in the dovec-acl-list file is case sensitive. Because I use LDAP, the name of the users is case insensitive. Would it be possible to have an option in Dovecot, to ignore the case of the ACL ? This would be useful with some ACL managers, like roundcube ACL plugin, that uses an LDAP query to autocomplete the user name for the ACL. Kind regards, André

2 2

[Dovecot] Mdbox corruption
by 3.listas＠adminlinux.com.br 19 Aug '12

19 Aug '12

Hi, I have a "ubuntu10.04 + ext4-filesystem + dovecot-2.0.13 +mdbox" configuration in my server. It works fine with ~50k accounts. Recently happened a filesystem corruption in a device of StMailLocation and I fix with fsck.ext4. After this crash, one account began to show access timeout and errors like this on force-resync: # doveadm force-resync -u account INBOX doveadm(account): Warning: mdbox /path-to-mdbox/storage: rebuilding indexes doveadm(account): Error: Corrupted dbox file /path-to-mdbox/storage/m.83 (around offset=16): EOF reading msg header (got 0/30 bytes) doveadm(account): Warning: dbox: Copy of the broken file saved to /path-to-mdbox/storage/m.83.broken doveadm(account): Error: Corrupted dbox file /path-to-mdbox/storage/m.83 (around offset=16): EOF reading msg header (got 0/30 bytes) doveadm(account): Error: mdbox rebuild: Failed to fix file /path-to-mdbox/storage/m.83 doveadm(account): Error: Corrupted dbox file /path-to-mdbox/storage/m.92 (around offset=7): Invalid dbox version ... Should I worry about the m.X.broken files ? How I fix these broken mdboxes ? Thanks. -- Thiago Henrique adminlinux.com.br

2 1

[Dovecot] Permission denied on dovecot.lda-dupes
by ppridt 19 Aug '12

19 Aug '12

Hi, I have converted my Imap Server from Courier to Dovecot in order to use sieve support. Everything works fine with the exception that the sender always gets the vacation msg since there is a permission error on writing of dovecot.lda-dupes. I've tried several version of permissions including 777 to both home and maildir - always the same result. I also googled for hours .. Any help will be appreciated. Paul This is the debug log: ----------------------------------------------------------------------------------------------------- Aug 13 14:51:26 Srv dovecot: deliver(pp): Loading modules from directory: /usr/lib/dovecot/modules/lda Aug 13 14:51:26 Srv dovecot: deliver(pp): Module loaded: /usr/lib/dovecot/modules/lda/lib90_sieve_plugin.so Aug 13 14:51:26 Srv dovecot: deliver(pp): Home dir not found: Aug 13 14:51:26 Srv dovecot: deliver(pp): maildir: data=/Daten/Vmail/pp/Maildir Aug 13 14:51:26 Srv dovecot: deliver(pp): maildir++: root=/Daten/Vmail/pp/Maildir, index=, control=, inbox=/Daten/Vmail/pp/Maildir Aug 13 14:51:26 Srv dovecot: deliver(pp): sieve: using sieve path for user's script: /Daten/Vmail/pp/.dovecot.sieve Aug 13 14:51:26 Srv dovecot: deliver(pp): sieve: opening script /Daten/Vmail/pp/.dovecot.sieve Aug 13 14:51:26 Srv dovecot: deliver(pp): sieve: executing compiled script /Daten/Vmail/pp/.dovecot.sieve Aug 13 14:51:26 Srv dovecot: deliver(pp): Namespace : Using permissions from /Daten/Vmail/pp/Maildir: mode=0700 gid=-1 Aug 13 14:51:26 Srv dovecot: deliver(pp): file_dotlock_create(/.dovecot.lda-dupes) failed: Permission denied ----------------------------------------------------------------------------------------------------- This ist my dovecot.conf: ----------------------------------------------------------------------------------------------------- protocols = imap imaps managesieve mail_debug = yes log_path = info_log_path = disable_plaintext_auth = no # Authentication configuration: mail_location = maildir:/Daten/Vmail/%u/Maildir auth_verbose = yes mail_nfs_storage = no mail_nfs_index = no nfs_check = no lock_method = dotlock mail_uid = vmail mail_gid = vmail auth default { mechanisms = plain login passdb pam { } userdb passwd { args = uid=vmail gid=vmail home=/home/%u mail=maildir:/Daten/Vmail/%u/Maildir } socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = vmail } } } protocol lda { postmaster_address = admin(a)ppridt.dnsalias.org mail_plugins = sieve auth_socket_path = /var/run/dovecot/auth-master } protocol managesieve { login_executable = /usr/lib/dovecot/managesieve-login mail_executable = /usr/lib/dovecot/managesieve managesieve_implementation_string = Cyrus timsieved v2.2.13 } plugin { sieve=/Daten/Vmail/%u/.dovecot.sieve sieve_dir=/Daten/Vmail/%u/.sieve } ----------------------------------------------------------------------------------------------------- This is the exim delivery transport: ----------------------------------------------------------------------------------------------------- dovecot_lda: driver = pipe command = /usr/lib/dovecot/deliver message_prefix = message_suffix = log_output delivery_date_add envelope_to_add return_path_add user = vmail group = vmail temp_errors = 64 : 69 : 70: 71 : 72 : 73 : 74 : 75 : 78 ----------------------------------------------------------------------------------------------------- -- View this message in context: http://dovecot.2317879.n4.nabble.com/Permission-denied-on-dovecot-lda-dupes… Sent from the Dovecot mailing list archive at Nabble.com.

2 1

[Dovecot] imap-login process_limit (100) reached, client connections are being dropped
by Voytek Eymont 19 Aug '12

19 Aug '12

noticed this in the log today, after about 11 warning IMAP appears to have not worked, 'service dovecot reload' got it going again question: what to check/alter ? ---------------- # grep process_limit /var/log/maillog Aug 13 15:31:44 geko dovecot: master: Warning: service(imap-login): process_limit (100) reached, client connections are being dropped ''' Aug 13 20:45:35 geko dovecot: master: Warning: service(imap-login): process_limit (100) reached, client connections are being dropped # doveconf -n | grep limit # # dovecot --version 2.1.1 # ps ax | grep imap | wc 109 546 4693 # ps ax | grep imap-login | wc 57 286 2619 # doveadm who | wc 16 122 1531 centos 6, 20 virtual domains, 100 users -- Voytek Eymont

2 1

[Dovecot] dsync \noselect on INBOX.INBOX skips sync of INBOX
by Nikolai Schupbach 19 Aug '12

19 Aug '12

Hi Timo, We have encountered an issue today with a number of migrations. Some customers have mailboxes on the source IMAP server that look like this: 3 LIST "" * * LIST () "." "INBOX" * LIST () "." "INBOX.Statements" * LIST () "." "INBOX.Draft" * LIST () "." "INBOX.Drafts" * LIST () "." "INBOX.Invoices" * LIST (\Noselect) "." "INBOX.INBOX" * LIST () "." "INBOX.Jokes" * LIST () "." "INBOX.Payslips" * LIST () "." "INBOX.Personal" When we run dsync it skips the INBOX presumably because of the Noselect on INBOX.INBOX. and the "imapc_list_prefix = INBOX" setting. Regards, Nikolai.

2 1

[Dovecot] maildir to sdbox offline conversion
by _ET_ 19 Aug '12

19 Aug '12

Hi all. I've just installed dovecot v2.1 in a multihomed, multiinstance setup, It took me two days to convert the old v1.1 configs, now everything works like charm! But. :) I have several maildir mailboxes, I decided to use the sdbox storage type instead. I ran into difficoulties using the dsync util. My virtual users are in an OpenLDAP DB on a differnet machine, and I do not have access to the database (I can authenticate the users from ldap, but cannot change or see anything) So it's not easy to do an "online" conversion and follow the instructions at dsync's wiki. Do you know a way how to simply tell dsync or a similar util the following dsync convert maildir:/data/vmail/domain/user sdbox:/newdata/vmail/domain/user without touching the ldap database, only the files on the disk. I can run this command as root on this mail server, if it is needed, I can run the command for each and every maildir. That's not a problem. any ideas, how this wouléd be the simpliest? -- View this message in context: http://old.nabble.com/maildir-to-sdbox-offline-conversion-tp34274589p342745… Sent from the Dovecot mailing list archive at Nabble.com.

2 1

[Dovecot] Dsync and SIS
by Alex Crow 19 Aug '12

19 Aug '12

Hi all, Just to clarify, if we back up a dovecot 2 server with SIS for attachments and ALT storage by rsyncing it (including the SIS and ALT storage) to a remote server when it's idle (or at least almost entirely so), and run dovecot on that machine, would it seem feasible to restore backups from that server by using dysnc - specifically for the scenario where someone accidentally deletes emails/folders etc.? I've seen queries about SIS before but nothing specifically about this scenario. Cheers Alex -- This message is intended only for the addressee and may contain confidential information. Unless you are that person, you may not disclose its contents or use it in any way and are requested to delete the message along with any attachments and notify us immediately. "Transact" is operated by Integrated Financial Arrangements plc Domain House, 5-7 Singer Street, London EC2A 4BQ Tel: (020) 7608 4900 Fax: (020) 7608 5300 (Registered office: as above; Registered in England and Wales under number: 3727592) Authorised and regulated by the Financial Services Authority (entered on the FSA Register; number: 190856)

2 1

[Dovecot] Listen on multiple ports possible using same protocol?
by Michael Durket 18 Aug '12

18 Aug '12

Is it possible to have multiple Listen directives in a dovecot configuration file for the same protocol? I am running dovecot-1.2.11 and I want to be able to use the "standard port" as well as a test port: protocol imap { listen = *:143 listen = *:10143 ssl_listen = *:993 ssl_listen = *:10993 for example. Or is this more preferably done by pointing dovecot at different configuration files?

4 3

[Dovecot] Expire-tool does not delete duplicate messages (dovecot-1.2.17)
by Oleksii Krykun 17 Aug '12

17 Aug '12

Trying to implement expire plugin. expire-tool works fine. This delete expunged messages but not all of them. I have duplicate messages in appropriate folder. These messages are from expanding postfix aliases (e.g. postmaster@, hostmaster@, abuse@ etc. points to same mailbox and spam often sent to all of them. If duplicate message is received only one entry in dovecot-uidlist is created and only first of duplicates is deleted with expire-tool. Rest of duolicates are not deleted. Any suggestions. Thanks, Kryol

2 1

[Dovecot] dsync backup gets stuck... fails
by Jeff Gustafson 17 Aug '12

17 Aug '12

More dsync issues. We were running 2.1.7 and we updated to 2.1.9. Same problem with both versions. I'm getting an error 75 on about 40 boxes out of 1800. It is the same list of boxes every time we use 'dsync backup' to backup the server. dsync seems to stop communicating to the backup box (over ssh). strace just shows it sitting at a epoll_wait. Once the program quits (times out?), a 'du' shows the destination is smaller (200kbyte in one case). Has anyone else seen an exit code of 75? Nothing in the documentation mentions what exit code 75 could mean. What can I do to help the developers locate the bug? ...Jeff

3 11

[Dovecot] some mdbox mails get lost each day
by Christian Rößner 16 Aug '12

16 Aug '12

Hi, I have a strange problem here. I had installed Dovecot-2.1.6 on a customers setup. They have 102 mail accounts on the server. The started using this dovecot version on the 20th June. One mailbox suddenly started expunging mails. Not from the current day, but one week back in the past. First I thought about an Outlook issue. Some filter or archieving thing, but we did a test and on one day, the curstomer did not start Outlook first; instead he checked his mails with the SOGo-webinterface. We saw that mails got deleted again. I checked for sieve filters. None. I upgraded dovecot to 2.1.7, as I have not done any newer packages yet for Ubuntu (using my own PPA). Same problem one day later. I tested with telnet locally. Same result as in the client. I also did doveadm dump -t log and index and saw that there had been expunged mails. Yesterday I asked the customer to backup all his mails in Outlook. After that I renamed the whole mdbox folder of this account on the server and sent one test mail to recreate the mailbox. After that her restored his mail in Outlook. This morning her contacted me and said that all mails are ok right now and no mails have been erased anymore. Coud this been a corrupted index? I also chekced the storage/-folder and see that all mails are still on disk. Now he asked me if there is any way to get all the lost messaged back? It would be okay for him, if all mails since June are sent again, as he can clean his mailbox afterwards. So does somebody have an idea on how to solve this? Maybe scripting something in python and using local sendmail command? Or is there some doveadm voodoo to repair the index or unexpunge all mails? Thanks in advance -Christian Rößner --- Rößner-Network-Solutions Bachelor of Science Informatik Erlenwiese 14, 36304 Alsfeld T: +49 6631 7882340-0 F: +49 6631 7882340-9 M: +49 176 93118939 USt-IdNr.: DE225643613 http://www.roessner-network-solutions.com

2 10

[Dovecot] Hostname Based forwarding
by Merrickville 16 Aug '12

16 Aug '12

Trying to figure out hostname based IMAP proxy forwarding. I have two mail servers: mail.example.com mail.fakedomain.ca proxy server running dovecat/IMAPS, facing the Internet. *Both* names are DNS resolve(able), but.., both are the *same IP address.* For example: Joe configures his email client username: joe(a)example.com IMAP Addr: mail.example.com For example: Jane configures her email client username: jane(a)fakedomain.ca IMAP Addr: mail.fakedomain.ca So, now all clients must change their user-name in their email client to their full email address, because there is a Jane & Joe on "both" servers and..., dovecot proxies based on 'user name' Is there a way to proxy based on the host name the client has configured in his/her email client? (Like Apache VirtualHosts) This would be ideal, as the clients can then go back to using just their name as the username. Thanks Rick -- View this message in context: http://dovecot.2317879.n4.nabble.com/Hostname-Based-forwarding-tp37110.html Sent from the Dovecot mailing list archive at Nabble.com.

1 0

[Dovecot] v2.2 status update: IMAP NOTIFY extension and more
by Timo Sirainen 16 Aug '12

16 Aug '12

v2.2 hg now has support for NOTIFY extension. The only thing missing is support for SubscriptionChange events. Now would be a good time for IMAP clients to start implementing and testing it. :) I remember K9 developers at least said they were just waiting for Dovecot to support it first. v2.2 implements some other extensions also: BINARY, CATENATE and MOVE. Stephan has also implemented URLAUTH pretty far. Hopefully it gets finished in time for v2.2.0. I'll also try to implement the rest of the LEMONADE extensions: CONVERT, CONTEXT=SORT and URLAUTH=BINARY. I'm also considering implementing an SMTP submission server, which works only as a proxy to the real SMTP server. The benefits of it would mainly be: * It could support BURL command and other extensions required by LEMONADE. The real SMTP server would see only regular DATA commands. * Would make SMTP AUTH easy to implement regardless of what the real SMTP server is.

5 11

[Dovecot] Postfix & Dovecot: Client certificate authentication
by "JARRY Jérémy" 16 Aug '12

16 Aug '12

Hello, I would like to set up an authentication using certificate with Dovecot: A user sends mail to Postfix and Dovecot authentication is valid only if certificate is trusted. So, I enable the parameter auth_ssl_require_client_cert in dovecot configuration but it is not running. Here are the postfix logs: Aug 16 09:51:48 myserver dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Aug 16 09:51:48 myserver dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Aug 16 09:51:48 myserver dovecot: auth: Debug: auth client connected (pid=6922) Aug 16 09:51:51 myserver dovecot: auth: Debug: client in: AUTH 1 PLAIN service=smtp nologin lip=127.0.0.1 rip=127.0.0.1 secured resp=xxx Aug 16 09:51:51 myserver postfix/smtpd[6922]: warning: localhost.localdomain[127.0.0.1]: SASL PLAIN authentication failed: Client didn't present valid SSL certificate Aug 16 09:51:51 myserver dovecot: auth: PLAIN(?,127.0.0.1): Client didn't present valid SSL certificate Aug 16 09:51:51 myserver dovecot: auth: Debug: client out: FAIL 1 reason=Client didn't present valid SSL certificate Aug 16 09:51:51 myserver dovecot: auth: Debug: client in: AUTH 2 LOGIN service=smtp nologin lip=127.0.0.1 rip=127.0.0.1 secured Aug 16 09:51:51 myserver dovecot: auth: LOGIN(?,127.0.0.1): Client didn't present valid SSL certificate Aug 16 09:51:51 myserver dovecot: auth: Debug: client out: FAIL 2 reason=Client didn't present valid SSL certificate Aug 16 09:51:51 myserver postfix/smtpd[6922]: warning: localhost.localdomain[127.0.0.1]: SASL LOGIN authentication failed: Client didn't present valid SSL certificate It seems Postfix doesn't send the client certificat to Dovecot. What do you think ? What is wrong ? Below are some information about my configuration: OS: RHEL5 Postfix: 2.7.3 Dovecot: 2.0.14 Dovecot config: auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_ssl_require_client_cert = yes auth_ssl_username_from_cert = yes auth_verbose = yes mail_debug = yes passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } protocols = none service auth { unix_listener /data/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } ssl = required ssl_ca = </etc/dovecot/ca.pem ssl_cert = </etc/dovecot/cert.pem ssl_key = </etc/dovecot/key.pem ssl_verify_client_cert = yes userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } verbose_ssl = yes Thanks for your help

2 1

[Dovecot] bcrypt again
by Sven Schwyn 15 Aug '12

15 Aug '12

Hi I'd like Dovecot to consume a list of users exported from an external application which stores bcrypted passwords. This has been asked in the past, however, I'm not sure how to read the following reply: > If you are using Dovecot< 2.0 you can also use any of the algorithms > supported by your system's libc. But then you have to prefix the hashes > with {CRYPT} - not {{BLF,SHA256,SHA512}-CRYPT}. I'm on Dovecot 2.0.19. Does this mean that only the hashes listed with "doveadm pw -l" are supported and even if glibc can do bcrypt, the CRYPT scheme won't do the trick anymore? Thanks for your help!

2 1

[Dovecot] Thread sorting problem
by CpServiceSPb 15 Aug '12

15 Aug '12

Hi. How much may implementing of THREAD=ORDEREDSUBJECT to Dovecot 2.1.x or later cost ? Artyom.

2 2

[Dovecot] about postlogin in dovecot2
by Bulend Mali 15 Aug '12

15 Aug '12

Hello I use dovecot2 on vpopmail,qmail. i want to use login-intranet-imap.sh in order to restrict by emailaddress and ip address. i read it at http://wiki2.dovecot.org/PostLoginScripting. But there is an expression "mail_executable" in conf. but there is no such thing in dovecot2. what is equivalent of it for dovecot2 ? -- View this message in context: http://old.nabble.com/about-postlogin-in-dovecot2-tp34275123p34275123.html Sent from the Dovecot mailing list archive at Nabble.com.

4 14

[Dovecot] vacation and field FROM
by Николай Клименко 14 Aug '12

14 Aug '12

Hi to all Here is the following scheme: Dovecot in a link with AD. For LDA and IMAP different views are used in a base. For example there is a user with such e-mail type - 1.name(a)domain.ltd with the name of authorization auth_1.name. Incoming male folds up in /var/mail/domain/auth_1.name When vacation is on, the letters from 1.name(a)domain.ltd are sent in a following way auth_1.name(a)domain.ltd I guess the problem is in two different data-base queries. Could you please tell me how to solve this problem and to make the answer to be sent from the same adress it is comes to. part of dovecot.conf protocol lda { mail_plugins = sieve acl hostname = domain.ltd postmaster_address = <postmaster(a)domain.ltd> auth_socket_path = /var/run/dovecot/auth-master_lda log_path = /var/log/dovecot-deliver.log } auth default { verbose = no debug = no debug_passwords = no mechanisms = plain user = dovecot passdb passwd-file { args = /etc/dovecot/passwd.masterusers master = yes } passdb ldap { args = /etc/dovecot/dovecot-ldap.conf } userdb static { args = uid=20000 gid=20000 home=/opt/mail/user_mailbox/%Lu allow_all_users=yes } socket listen { master { path = /var/run/dovecot/auth-master mode = 0660 user = vmail group = vmail } client { path = /var/spool/postfix/private/dovecot-auth mode = 0660 user = postfix group = postfix } } } auth auth_lda { verbose = no debug = no debug_passwords = no mechanisms = plain user = dovecot passdb ldap { args = /etc/dovecot/dovecot-ldap_lda.conf } userdb ldap { args = /etc/dovecot/dovecot-ldap_lda.conf } socket listen { master { path = /var/run/dovecot/auth-master_lda mode = 0660 user = vmail group = vmail } part of dovecot-ldap.conf (filter options) pass_attrs = sAMAccountName=user pass_filter = (&(sAMAccountName=%u)(objectClass=user)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) part of dovecot-ldap_lda.conf user_attrs = sAMAccountName=user user_filter = (mail=%u) pass_attrs = sAMAccountName=user pass_filter = (mail=%u) --

1 0

[Dovecot] Libdovecot-sieve segfaults
by Nikita Koshikov 14 Aug '12

14 Aug '12

Hello Stephan, Preface - one of my users went to vacation and changed his sieve script to run autoreply vacation message, after that - I have noticed some annoying errors in system log, like: dovecot-lda[2400]: segfault at 3eb3333f ip b7446c7a sp bfaab050 error 4 in libdovecot-sieve.so.0.0.0[b7429000+5b000] Dovecot-error log is empty, but in exim log(exim runs dovecot-lda) I got: 2012-08-13 09:35:27 1T0oFK-0000aW-6j ** sr(a)domain.com (sr(a)domain.com, root(a)domain.com) <postmaster(a)domain.com > F=<59942270813(a)mymail.in.ua> R=ldap_accept T=local_delivery: Child process of local_delivery transport (running command "/usr/libexec/dovecot/dovecot-lda -e -d $local_part@$domain") was terminated by signal 11 (Segmentation fault) sr(a)domain.com - is the user, who created such sieve-script, which cause segfaults. I have tried run the same message over this script from sieve-test utility - but result is success. Can you please, take a look to this sieve script and check is it ok, I'll send it to you privately since it contains user's data. Also I'll attach message.eml which triggers segfault. Dovecot version - 2.0.21, Sieve version - 0.2.6. Relevant to sieve dovecot config section: plugin { sieve = ~/.dovecot.sieve sieve_after = /etc/dovecot/sieve/default-after.sieve sieve_dir = ~/sieve sieve_extensions = +notify +spamtest sieve_spamtest_max_value = 10 sieve_spamtest_status_header = X-Spam-Scan-Score sieve_spamtest_status_type = score } Hope you'll help.

1 0

[Dovecot] pop3 proxying error
by tonio＠starbridge.org 13 Aug '12

13 Aug '12

Hi Timo, I've got some errors with pop3 proxying and dovecot 2.1.9 I's occured on the proxy side: Aug 7 13:16:47 dev1 dovecot: pop3-login: Fatal: master: service(pop3-login): child 23046 killed with signal 11 (core dumped) Server side shows no error, and runs the same dovecot version. Thanks for your help. Best regards Tonio Buonaguidi Core dump: GNU gdb (GDB) 7.4.1-debian Copyright (C) 2012 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i486-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/lib/dovecot/pop3-login...done. [New LWP 23046] warning: Can't read pathname for load map: Erreur d'entrée/sortie. [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/i386-linux-gnu/i686/cmov/libthread_db.so.1". Core was generated by `dovecot/pop3-login -D'. Program terminated with signal 11, Segmentation fault. #0 settings_parser_dup (old_ctx=0x8783480, new_pool=0x632e6465) at settings-parser.c:1742 1742 pool_ref(new_pool); doveconf -n # 2.1.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32.2-xxxx-std-ipv6-32 i686 Debian wheezy/sid auth_cache_size = 4 k auth_mechanisms = plain login director_mail_servers = bb.bb.bb.bb cc.cc.cc.cc director_servers = dd.dd.dd.dd aa.aa.aa.aa log_timestamp = %Y-%m-%d %H:%M:%S mail_debug = yes managesieve_notify_capability = mailto managesieve_sieve_capability = comparator-i;octet comparator-i;ascii-casemap fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date spamtest spamtestplus virustest passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/auth { group = mail mode = 0660 user = postfix } unix_listener auth-master { mode = 0660 user = vmail } unix_listener auth-userdb { mode = 0660 user = vmail } } service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { address = aa.aa.aa.aa port = 9090 } unix_listener director-userdb { mode = 0600 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director inet_listener imap { address = aa.aa.aa.aa yy.yyy.yy.yy xx.xx.xx.xx port = 143 } inet_listener imaps { address = aa.aa.aa.aa yy.yyy.yy.yy xx.xx.xx.xx port = 993 } process_limit = 256 process_min_avail = 2 service_count = 0 vsz_limit = 256 M } service managesieve-login { inet_listener sieve { address = aa.aa.aa.aa yy.yyy.yy.yy xx.xx.xx.xx port = 4190 } vsz_limit = 64 M } service pop3-login { executable = pop3-login -D inet_listener pop3 { address = aa.aa.aa.aa yy.yyy.yy.yy xx.xx.xx.xx port = 110 } inet_listener pop3s { address = aa.aa.aa.aa yy.yyy.yy.yy xx.xx.xx.xx port = 995 } service_count = 0 } ssl_ca = </etc/dovecot/ca-bundle.crt ssl_cert = </etc/dovecot/imap.xxx.certchained2.pem ssl_client_cert = </etc/dovecot/imap.xxx.certchained2.pem ssl_client_key = </etc/dovecot/imap.xxx.key.pem ssl_key = </etc/dovecot/imap.xxx.key.pem userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { imap_client_workarounds = delay-newmail imap_max_line_length = 64 k mail_max_userip_connections = 10 } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } protocol sieve { passdb { args = /etc/dovecot/sieve-sql.conf driver = sql } } local xx.xx.xx.xx { disable_plaintext_auth = no } local yy.yyy.yy.yy { protocol imap { ssl = required ssl_cert = </etc/dovecot/mail.pem ssl_key = </etc/dovecot/mail.key.pem } } local yy.yyy.yy.yy { protocol sieve { ssl = required ssl_cert = </etc/dovecot/mail.pem ssl_key = </etc/dovecot/mail.pem } } local xx.xx.xx.xx { protocol imap { ssl = yes ssl_cert = </etc/dovecot/imap.certchained.pem ssl_key = </etc/dovecot/imap.key.pem } } local xx.xx.xx.xx { protocol pop3 { ssl = yes ssl_cert = </etc/dovecot/pop.certchained.pem ssl_key = </etc/dovecot/pop.key.pem } } local xx.xx.xx.xx { protocol sieve { ssl = yes ssl_cert = </etc/dovecot/mail.certchained.pem ssl_key = </etc/dovecot/mail.key.pem } }

2 10

[Dovecot] HA Mailbox Design
by Nikolaos Milas 13 Aug '12

13 Aug '12

Hi, We would like to implement a Highly Available Mail Server and would like to ask advice on how to architect this. Some details on our setup: Currently we have only one internal mail server (Postfix/Dovecot 2.0 - planning to move to 2.1), receiving mail from a gateway server (filtering spam/viruses) - a Cisco Ironport - which we are considering to replace with one (or a set of) cloud-based Postfix/Amavis-new/SpamAssassin/ClamAV VMs (currently in testing mode). Delivery uses Dovecot LDA. User accounts are LDAP-based. We use Maildir and the load is low (aside spam). Only about 250 users/mailboxes (4G each). All servers are CentOS 5.8 (planning move to 6.3) KVM VMs (on a cloud where we don't have control on the host, but on highly reliable hardware/networks). We can have VMs on two different clouds and we also have at least two different connections (routes) to the cloud(s) (to support HA). Any directions will be appreciated. Hoping to design an HA architecture but aiming to keep it simple and (as much as possible) easily maintainable one. Thanks for your response and help, Nick

5 8

[Dovecot] master user auth problem
by Ibrahim Harrani 13 Aug '12

13 Aug '12

Hi, I tried to setup a master auth authentication. I also use auth_pop3wrapper to authenticate from qmail-ldap. But I could not login with master user. Here is the config. auth_master_user_separator = * passdb { driver = passwd-file args = /usr/local/etc/dovecot/passwd.masterusers master = yes pass = yes } passdb { # Path for checkpassword binary driver = checkpassword args = /var/qmail/bin/auth_popwrapper } userdb { driver = prefetch } cat /opt/surmail/etc/dovecot/passwd.masterusers user:{SHA}W6ph5Mm5Pz8GgiULbPgzG37mj9g= The log: #telnet localhost 143 Trying 0.0.0.0... Connected to 0. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN] SurGATE Messaging Suite POP3/IMAP ready. o login user(a)domain.com*user password o NO [AUTHORIZATIONFAILED] Authorization failed Aug 09 16:17:44 auth: Debug: auth(user,127.0.0.1,master,<KmGNDdXGrwB/AAAB>): Master user lookup for login: user(a)domain.com Aug 09 16:17:44 auth: Debug: passwd-file(user,127.0.0.1,master,<KmGNDdXGrwB/AAAB>): lookup: user=user file= /usr/local/etc/dovecot/passwd.masterusers Aug 09 16:17:44 auth: Info: passdb(user,127.0.0.1,master,<KmGNDdXGrwB/AAAB>): Master user logging in as user(a)domain.com Aug 09 16:17:44 auth: Debug: checkpassword(user(a)domain.com,127.0.0.1,<KmGNDdXGrwB/AAAB>): execute: /var/qmail/bin/auth_popwrapper /usr/local/dovecot/libexec/dovecot/checkpassword-reply Aug 09 16:17:44 auth: Debug: checkpassword(user(a)domain.com,127.0.0.1,<KmGNDdXGrwB/AAAB>): Received input: Aug 09 16:17:44 auth: Debug: checkpassword(user(a)domain.com,127.0.0.1,<KmGNDdXGrwB/AAAB>): exit_status=3 Aug 09 16:17:44 auth: Info: checkpassword(user(a)domain.com,127.0.0.1,<KmGNDdXGrwB/AAAB>): Login failed (status=3) Aug 09 16:17:46 auth: Debug: client out: FAIL 1 user=user(a)domain.com authz Aug 09 16:18:08 auth: Debug: client in: AUTH 2 PLAIN service=imap secured session=KmGNDdXGrwB/AAAB lip=127.0.0.1 rip=127.0.0.1 lport=143 rport=48047 resp=<hidden>

1 0