- dovecot - dovecot.org

[Dovecot] Maildir + quota + listescape = wrong dir location
by Mariusz Kruk 18 Jun '12

18 Jun '12

I've just stumbled across a strange thing which seems to be a bug. It happens in 2.0.9 as well as 2.0.11 in which I tested it. dovecot -n output: # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-220.17.1.el6.x86_64 x86_64 CentOS release 6.2 (Final) listen = * mail_location = maildir:~/mail mail_plugins = " quota listescape" mbox_write_locks = fcntl namespace { inbox = yes location = prefix = separator = / type = private } passdb { driver = pam } plugin { quota = maildir:User quota quota_rule = *:storage=1G } protocols = imap ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol imap { mail_plugins = " quota listescape imap_quota autocreate" } The problem with this setup is that with listescape loaded doveadm (as well as dovecot running by itself) can't properly get quotas for nested subfolders. Listescape causes dovecot to use namespace separator for fetching directory names corresponding to folders instead of interpreting them according to layout rules. When I tried stracing, i got this: # strace -e trace=stat doveadm quota recalc -u testimap 2>&1 | grep testimap stat("/home/testimap/mail", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/home/testimap/mail/new", 0x7fff220ca290) = -1 ENOENT (No such file or directory) stat("/home/testimap/mail/cur", 0x7fff220ca290) = -1 ENOENT (No such file or directory) stat("/home/testimap/mail/.INBOX/test/new", 0x7fff220ca290) = -1 ENOENT (No such file or directory) stat("/home/testimap/mail/.INBOX/test/cur", 0x7fff220ca290) = -1 ENOENT (No such file or directory) stat("/home/testimap/mail/.test/new", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/home/testimap/mail/.test/cur", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/home/testimap/mail/new", 0x7fff220ca290) = -1 ENOENT (No such file or directory) stat("/home/testimap/mail/cur", 0x7fff220ca290) = -1 ENOENT (No such file or directory) stat("/home/testimap/mail/.INBOX/test/new", 0x7fff220ca290) = -1 ENOENT (No such file or directory) stat("/home/testimap/mail/.INBOX/test/cur", 0x7fff220ca290) = -1 ENOENT (No such file or directory) stat("/home/testimap/mail/.test/new", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/home/testimap/mail/.test/cur", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/home/testimap/mail", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 If I either disable listescape or change namespace separator to dot, the path gets resolved correctly (although it's still wrong behaviour with '.' as separator, just happens to give right result in this case). # strace -e trace=stat doveadm quota recalc -u testimap 2>&1 | grep testimap stat("/home/testimap/mail", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/home/testimap/mail/new", 0x7fffac6b0cb0) = -1 ENOENT (No such file or directory) stat("/home/testimap/mail/cur", 0x7fffac6b0cb0) = -1 ENOENT (No such file or directory) stat("/home/testimap/mail/.INBOX.test/new", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/home/testimap/mail/.INBOX.test/cur", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/home/testimap/mail/.test/new", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/home/testimap/mail/.test/cur", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/home/testimap/mail/new", 0x7fffac6b0cb0) = -1 ENOENT (No such file or directory) stat("/home/testimap/mail/cur", 0x7fffac6b0cb0) = -1 ENOENT (No such file or directory) stat("/home/testimap/mail/.INBOX.test/new", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/home/testimap/mail/.INBOX.test/cur", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/home/testimap/mail/.test/new", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/home/testimap/mail/.test/cur", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/home/testimap/mail", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 And in this case quota info gets updated correctly. I believe this is a bug but maybe I'm missing something about listescape configuration. Regards Mariusz Kruk

2 1

[Dovecot] Dovecot Maildir - How to Seperate mail folders
by Guido Weiler 18 Jun '12

18 Jun '12

Hi Timo, thank you very much for your quick reply. I tried that but it is not possible to SELECT such a mailbox. I have in dovecot.conf: --- mail_location=maildir:/data/messages%h namespace private { separator = / prefix = location = maildir:/data/messages%h inbox = yes list = yes } namespace public { separator = / prefix = greetings/ location = maildir:/data/greetings%h inbox = no list = yes hidden = yes } --- Messages are coming in from EXIM separated by a special HEADER into this two folders. For INBOX this works fine but not for greetings, although the maildir files are being created upon delivery. Sample IMAP Session AFTER delivering a greeting-type message: --- 01 OK Logged in. >> 02 list "" "*" * LIST (\HasNoChildren) "/" "INBOX" * LIST (\Noselect \HasChildren) "/" "greetings" * LIST (\HasNoChildren) "/" "greetings/INBOX" 02 OK List completed. >> 03 select "greetings/INBOX" 03 NO Mailbox doesn't exist: INBOX >> 04 select greetings 04 NO Mailbox doesn't exist: greetings --- What is this "\Noselect" mailbox showing up and why is it saying "greetings/INBOX" in the third row when in fact there isn't a mailbox with this name? I am very sorry for having to bother you again, but I don't know what we are doing wrong here. (Dovecot version is 1.1.16) Guido Weiler -----Ursprüngliche Nachricht----- Von: Timo Sirainen [mailto:tss@iki.fi] Gesendet: Montag, 11. Juni 2012 22:48 An: Guido Weiler Betreff: Re: Dovecot Maildir - How to Seperate mail folders You should be able to do this with namespaces. namespace { prefix = INBOX/VeryImportantMessages/ location = maildir:/very/important/messages hidden = yes } On 8.6.2012, at 18.09, Guido Weiler wrote: > Hello Timo, > > for one of our latest dovecot/IMAP-projects, we need to separate physical locations of some special IMAP folders. > So to make, for example the "INBOX/VeryImportantMessages"-Folder is on a completely different volume or mount point than the mails in INBOX or other user generated imap subfolders. > > Can you tell me if there is any possible way to implement this / change it in dovecots maildir implementation, or maybe it is already planned to do so in further versions of dovecot? > > We have to treat all messages in that one special folder with an extended backup scenario, and I think it would be the best if we can implement to have an additional mail_location parameter in dovecot.conf (e.g. important_mail_location). > > We are somewhat familiar with the dovecot source code since we already implemented plugins and other modifications to dovecot 1.1.16 but any advise or information is very appreciated. > > Kind regards, > > > Guido Weiler

2 1

[Dovecot] Sieve and fileinto encoding change?
by Angel L. Mateo 18 Jun '12

18 Jun '12

Hello, I have changed from debian servers (debian lenny 5) running dovecot 1.1.16 to new ones with ubuntu 12.04 and dovecot 2.1.5 and now I'm having problems with sieve filters storing mails in folders with spanish characters (accents). Myh problem is the one described at http://www.dovecot.org/list/dovecot/2009-October/044061.html and http://dovecot.org/list/dovecot/2009-July/041690.html, that is, in my sieve scripts (generated with horde ingo) folder's names are in utf-7 instead of utf-8. Although I'm planning to patch ingo, my question is why those same scripts, with utf-7 folder's names, are working with dovecot 1.1.16 but not with 2.1.5? Because in my old servers those scripts worked without any problem...

2 1

[Dovecot] Error: doveadm client attempted non-PLAIN authentication
by Daniel Parthey 17 Jun '12

17 Jun '12

Hi doveadm search -u user(a)example.org -S localhost:19000 all produces the following error in the logs: dovecot: doveadm: Error: doveadm client attempted non-PLAIN authentication What am I missing? * tcpdump of tcp communication on port 19000 is attached * dovecot.conf is attached Regards Daniel

2 5

[Dovecot] doveadm backup panic
by Gedalya 16 Jun '12

16 Jun '12

using latest auto build didn't help. this happens only with a specific account. # doveadm -o imapc_user=-----(a)domain.com -o imapc_password=---- backup -u =-----(a)domain.com -R imapc: dsync(----(a)domain.com): Panic: pool_data_stack_realloc(): stack frame changed dsync(----(a)domain.com): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4209a) [0xb762b09a] -> /usr/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x41) [0xb762b1a1] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0xb75fd99e] -> /usr/lib/dovecot/libdovecot.so.0(+0x547ce) [0xb763d7ce] -> /usr/lib/dovecot/libdovecot.so.0(+0x3ebf9) [0xb7627bf9] -> /usr/lib/dovecot/libdovecot.so.0(buffer_get_space_unsafe+0x78) [0xb7628658] -> /usr/lib/dovecot/libdovecot.so.0(buffer_append_space_unsafe+0x2a) [0xb762875a] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x60005) [0xb76dc005] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x62aa9) [0xb76deaa9] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x66e61) [0xb76e2e61] -> /usr/lib/dovecot/libdovecot-storage.so.0(imapc_connection_input_pending+0x14d) [0xb76e3a3d] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x67aac) [0xb76e3aac] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x44) [0xb763a034] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xce) [0xb763ae8e] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x40) [0xb76399d0] -> /usr/lib/dovecot/libdovecot-storage.so.0(imapc_client_run+0xa7) [0xb76e0297] -> /usr/lib/dovecot/libdovecot-storage.so.0(imapc_storage_run+0x26) [0xb76df1e6] -> /usr/lib/dovecot/libdovecot-storage.so.0(imapc_mailbox_sync_init+0x6de) [0xb76ddfde] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x3b) [0xb76f468b] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync+0x3c) [0xb76f47cc] -> doveadm() [0x8072510] -> doveadm() [0x8072789] -> doveadm() [0x80729b2] -> doveadm(dsync_worker_msg_iter_next+0x29) [0x8070a69] -> doveadm() [0x806b6e1] -> doveadm() [0x806b736] -> doveadm(dsync_brain_msg_sync_more+0x4cb) [0x806bc7b] -> doveadm(dsync_brain_sync+0x3bb) [0x806a3ab] Aborted

2 3

[Dovecot] migrating v.1 to v.2
by Voytek Eymont 15 Jun '12

15 Jun '12

I have a working Dovecot/MySQL with version 1.x I'm looking at setting a new server using ver. 2 I'm currently pre-planning: can I use config files from ver 1 installation on version 2 setup 'as is'; or what's a proper way to do such migration/upgrade ? -- V

2 3

[Dovecot] Sieve stopped working
by Ben Versang 15 Jun '12

15 Jun '12

Hi, I have installed RoundCube a couple of years ago on a Snow Leopard server. All nice and dandy up to today. Sieve has stopped working and I have spent hours and been unable so far to get it up and running again. When I run ps aux |grep sieve it is not returning anything to me suggesting that the problem is not with sieve it-self but rather with Dovecot not starting the sieve. If anyone could give me some leads I can't think of anyting else. netstat -a |grep 2000 returns returns nothing telnet localhost 2000 Trying ::1... telnet: connect to address ::1: Connection refused Trying fe80::1... telnet: connect to address fe80::1: Connection refused Trying 127.0.0.1... telnet: connect to address 127.0.0.1: Connection refused telnet: Unable to connect to remote host The rest of mail functions are working fine (IMAP, SMTP...). Thanks in advance Ben

2 1

[Dovecot] imap max user ip conn, what's a safe increase?
by Voytek Eymont 15 Jun '12

15 Jun '12

I have dovecot 1.x, all's working well, thanks now that I'm using K9 mail on Android phone, whenever I try to access emails with an imap collect 'pass' from Snapper mail client on Palm, I get: "max number of connections from user+ip exceeded" I'm currently at default (unspecified) of 10 imap/3 pop what's a reasonable next number of IMAP connections I should up it to ? that won't bite on the backside...? 12 ? 20 ? when I run IMAP pass from Snapper, I only run it over inbox, maybe one other folder, max 2 folders, so 12 should do ? /etc/dovecot# grep max_user * dovecot.conf: #mail_max_userip_connections = 10 dovecot.conf: #mail_max_userip_connections = 3 -- Voytek

1 0

[Dovecot] Auth password problem
by arleal 14 Jun '12

14 Jun '12

i have debian squeeze. i have installed mds with ldap integration and i want to use dovecot/LDAP but i have problems with login. I have dovecot 1.2. I try all of dovecot wiki but i dont know how to configure it good dovecot.conf protocols = imap imaps pop3 pop3s listen = *, :: auth_verbose = yes auth_debug = yes auth_debug_passwords = yes mail_debug = yes verbose_ssl = yes login_greeting = royoleal.com mailserver ready. mail_location = maildir:/home/users/%u/Maildir disable_plaintext_auth = no ssl_cert_file = /etc/ssl/certs/mail.pem ssl_key_file = /etc/ssl/private/mail.key log_path = /var/log/dovecot.log info_log_path = /var/log/dovecot.log # IMAP configuration protocol imap { mail_plugins = quota imap_quota } # POP3 configuration protocol pop3 { pop3_uidl_format = %08Xu%08Xv mail_plugins = quota } # LDA configuration protocol lda { postmaster_address = postmaster auth_socket_path = /var/run/dovecot/auth-master mail_plugins = quota } # LDAP authentication auth default { mechanisms = plain login passdb ldap { args = /etc/dovecot/dovecot-ldap.conf } userdb ldap { args = /etc/dovecot/dovecot-ldap.conf } socket listen { master { path = /var/run/dovecot/auth-master mode = 0660 user = dovecot group = mail } client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } } And this is dovecot-ldap.conf hosts = 127.0.0.1 auth_bind = yes ldap_version = 3 dn = cn=admin,dc=royoleal,dc=com dnpass = royoleal base = dc=royoleal,dc=com auth_bind_userdn = cn=%u,ou=Users,dc=royoleal,dc=com scope = subtree user_attrs = uidNumber=uid,gidNumber=gid user_filter = (&(objectClass=mailAccount)(mail=%u)(mailenable=OK)) pass_attrs = mail=mail,userPassword=password pass_filter = (&(objectClass=mailAccount)(mail=%u)(mailenable=OK)) default_pass_scheme = CRYPT When i try login with telnet or other program i have this problem in dovecot.log Jun 13 22:45:13 auth(default): Info: client in: AUTH 1 PLAIN service=imap secured lip=127.0.0.1 rip=127.0.0.1 lport=14 3 rport=55040 resp=AHBydWViYUByb3lvbGVhbC5jb20AcHJ1ZWJh Jun 13 22:45:13 auth(default): Info: ldap(prueba(a)royoleal.com,127.0.0.1): invalid credentials (given password: prueba) Jun 13 22:45:13 auth(default): Info: new auth connection: pid=2613 Jun 13 22:45:15 auth(default): Info: client out: FAIL 1 user=prueba(a)royoleal.com Jun 13 22:45:20 imap-login: Info: Aborted login (auth failed, 1 attempts): user=<prueba(a)royoleal.com>, method=PLAIN, rip=127.0.0.1, lip= 127.0.0.1, secured Thanks. -- View this message in context: http://old.nabble.com/Auth-password-problem-tp34008289p34008289.html Sent from the Dovecot mailing list archive at Nabble.com.

2 4

[Dovecot] difference between client_limit and process_limit
by Angel L. Mateo 14 Jun '12

14 Jun '12

Hi, What is the real difference between client and process limit? According to documentation (http://wiki2.dovecot.org/Services#Service_limits) client_limit: Maximum number of simultaneous client connections. If set to 0, default_client_limit is used instead. process_limit: Maximum number of processes that can exist for this service. If set to 0, default_process_limit is used instead. But what does "client connection" exactly means? Is a user (login)? Is a user opens a few TCP connections (as many clients do) are they count as different connections? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información _o) y las Comunicaciones Aplicadas (ATICA) / \\ http://www.um.es/atica _(___V Tfo: 868887590 Fax: 868888337

3 12

[Dovecot] disable_plaintext_auth = no as no effect on IMAP/POP3 logins
by Mikkel 14 Jun '12

14 Jun '12

Hello In my installation the disable_plaintext_auth does not appear to take effect. I can see that the value is correct using doveconf -a but it doesn't change anything. Whenever attempting to log in using IMAP I get this: * BAD [ALERT] Plaintext authentication not allowed without SSL/TLS, but your client did it anyway. If anyone was listening, the password was exposed. ls NO [PRIVACYREQUIRED] Plaintext authentication disallowed on non-secure (SSL/TLS) connections. POP3 login attempts give this error: -ERR Plaintext authentication disallowed on non-secure (SSL/TLS) connections Besides adding disable_plaintext_auth=no to dovecot.conf I also tried adding it specifically to the imap section. I also tried to invoke it just for certain networks, like this: remote 0.0.0.0 { disable_plaintext_auth = no } But none of this takes any effect either. Adding the testing network as trusted networks is working fine removing the error. But I would rather not add the whole internet to the trusted network section just to allow plain text logins in imap. I'm in the process of migrating form 1.1 to 2.1 so this configuration is for testing things out and is mainly based on the default configuration files comming with the centos installation. I should add that everything else in this setup is working fine. I did many searches for information on this topic but nothing I could find apply to my case. I'm sorry to post such a long conf but I'm not sure what parts I could have safely omitted. Here goes: # doveconf -a # 2.1.1: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-220.17.1.el6.x86_64 x86_64 CentOS release 6.2 (Final) auth_anonymous_username = anonymous auth_cache_negative_ttl = 2 mins auth_cache_size = 0 auth_cache_ttl = 2 mins auth_debug = no auth_debug_passwords = no auth_default_realm = plain auth_failure_delay = 2 secs auth_first_valid_uid = 500 auth_gssapi_hostname = auth_krb5_keytab = auth_last_valid_uid = 0 auth_master_user_separator = auth_mechanisms = plain auth_realms = plain login digest-md5 cram-md5 apop ntlm auth_socket_path = auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Lu auth_username_translation = auth_verbose = no auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 30 base_dir = /var/run/dovecot config_cache_size = 1 M debug_log_path = default_client_limit = 1000 default_idle_kill = 1 mins default_internal_user = dovecot default_login_user = dovenull default_process_limit = 100 default_vsz_limit = 256 M deliver_log_format = msgid=%m: %$ dict_db_config = director_doveadm_port = 0 director_mail_servers = director_servers = director_user_expire = 15 mins disable_plaintext_auth = no dotlock_use_excl = no doveadm_allowed_commands = doveadm_password = doveadm_proxy_port = 0 doveadm_socket_path = doveadm-server doveadm_worker_count = 0 dsync_alt_char = _ first_valid_gid = 1 first_valid_uid = 105 hostname = usrmta01.talkactive.net imap_capability = imap_client_workarounds = imap_id_log = imap_id_send = imap_idle_notify_interval = 2 mins imap_logout_format = in=%i out=%o imap_max_line_length = 64 k imapc_host = imapc_master_user = imapc_password = imapc_port = 143 imapc_rawlog_dir = imapc_ssl = no imapc_ssl_ca_dir = imapc_ssl_verify = yes imapc_user = %u import_environment = TZ info_log_path = /var/log/dovecot/dovecot.run instance_name = dovecot last_valid_gid = 0 last_valid_uid = 0 lda_mailbox_autocreate = no lda_mailbox_autosubscribe = no lda_original_recipient_header = libexec_dir = /usr/libexec/dovecot listen = *, :: lmtp_proxy = no lmtp_save_to_detail_mailbox = no lock_method = fcntl log_path = /var/log/dovecot/dovecot.err log_timestamp = "%b %d %H:%M:%S " login_access_sockets = login_greeting = Dovecot ready. login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c login_trusted_networks = mail_access_groups = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_cache_fields = flags mail_cache_min_mail_count = 0 mail_chroot = mail_debug = no mail_fsync = always mail_full_filesystem_access = no mail_gid = mail_home = mail_location = mail_log_prefix = "%s(%u): " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 10 mail_never_cache_fields = imap.envelope mail_nfs_index = yes mail_nfs_storage = yes mail_plugin_dir = /usr/lib64/dovecot mail_plugins = quota mail_prefetch_count = 0 mail_privileged_group = mail_save_crlf = no mail_temp_dir = /tmp mail_uid = mailbox_idle_check_interval = 30 secs mailbox_list_index = no maildir_broken_filename_sizes = no maildir_copy_with_hardlinks = yes maildir_stat_dirs = no maildir_very_dirty_syncs = no master_user_separator = mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_md5 = apop3d mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = fcntl mdbox_preallocate_space = no mdbox_rotate_interval = 0 mdbox_rotate_size = 2 M mmap_disable = yes namespace inbox { hidden = no ignore_on_failure = no inbox = yes list = yes location = mailbox Drafts { auto = no special_use = \Drafts } mailbox Junk { auto = no special_use = \Junk } mailbox Sent { auto = no special_use = \Sent } mailbox "Sent Messages" { auto = no special_use = \Sent } mailbox Trash { auto = no special_use = \Trash } prefix = separator = subscriptions = yes type = private } passdb { args = /local/config/dovecot-sql.conf default_fields = deny = no driver = sql master = no override_fields = pass = no } plugin { quota = maildir quota_rule2 = Trash:storage=+10M:messages=+100 quota_warning = storage=80%% /local/scripts/quota-warning.sh 80 sieve_extensions = +imapflags +notify trash = /local/config/dovecot-trash.conf } pop3_client_workarounds = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_format = %08Xu%08Xv pop3c_host = pop3c_password = pop3c_port = 110 pop3c_rawlog_dir = pop3c_ssl = no pop3c_ssl_ca_dir = pop3c_ssl_verify = yes pop3c_user = %u postmaster_address = protocols = imap pop3 lmtp quota_full_tempfail = no recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s sendmail_path = /usr/sbin/sendmail service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 0 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener /var/spool/postfix/private/auth { group = mode = 0666 user = } unix_listener auth-client { group = mode = 0600 user = } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = } unix_listener auth-userdb { group = mode = 0666 user = } unix_listener login/login { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = . client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs inet_listener { address = port = 0 ssl = no } privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener director-userdb { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } unix_listener login/dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = port = 143 ssl = no } inet_listener imaps { address = port = 993 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 0 type = login user = $default_login_user vsz_limit = 256 M } service imap { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 256 M } service indexer-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = indexer-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 10 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service indexer { chroot = client_limit = 0 drop_priv_before_exec = no executable = indexer extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service ipc { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = ipc extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener ipc { group = mode = 0600 user = } unix_listener login/ipc-proxy { group = mode = 0600 user = $default_login_user } user = $default_internal_user vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 1 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log unix_listener log-errors { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 110 ssl = no } inet_listener pop3s { address = port = 995 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0600 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = required ssl_ca = ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL ssl_client_cert = ssl_client_key = ssl_crypto_device = ssl_key = </etc/pki/dovecot/private/dovecot.pem ssl_key_password = ssl_parameters_regenerate = 1 weeks ssl_protocols = !SSLv2 ssl_verify_client_cert = no stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_session_min_time = 15 mins stats_user_min_time = 1 hours submission_host = syslog_facility = mail userdb { args = default_fields = driver = prefetch override_fields = } userdb { args = /local/config/dovecot-sql.conf default_fields = driver = sql override_fields = } valid_chroot_dirs = verbose_proctitle = no verbose_ssl = no version_ignore = no protocol lda { mail_plugins = quota quota sieve trash } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags imap_logout_format = bytes=%i/%o mail_plugins = quota quota imap_quota trash } protocol pop3 { mail_plugins = quota quota pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_uidl_format = %08Xu%08Xv } Regards, Mikkel

1 1

[Dovecot] Please help me out.
by neeraj gupta 13 Jun '12

13 Jun '12

Hi Sir/Madam, I am using dovecot with postfix email server to deliver our mails. Our requirement is to save mail file with different name. So Please help me to locate the module which save mail to inbox. -- -- Thanks & regards Neeraj Gupta Software Engineer Email Id : neeraj6117(a)gmail.com Mo:+91-9990366116

2 1

[Dovecot] doveadm doesn't subscribe to public folders
by Emiliano Rago 13 Jun '12

13 Jun '12

Hi, I'd like to subscribe folder with doveadm: doveadm mailbox subscribe -u rago public.Conferences This command doesn't work, while it works with an ordinary folder. However it's possible to subscribe to the folder with an imap connection: 1 login rago "mypasswd" 1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORTSORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPCE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES ITHIN CONTEXT=SEARCH LIST-STATUS ACL RIGHTS=texk] Logged in 2 LSUB "" * * LSUB () "." "INBOX" 2 OK Lsub completed. 3 SUBSCRIBE "public.Conferences" 3 OK Subscribe completed. 4 LSUB "" * * LSUB () "." "INBOX" * LSUB () "." "public.Conferences" 4 OK Lsub completed. Am I doing anything wrong? This is my conf, thx for help, Emiliano # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-220.4.1.el6.x86_64 x86_64 Red Hat Enterprise Linux Server release 5 (Tikanga) ext4 auth_cache_size = 128 M auth_master_user_separator = * auth_mechanisms = plain cram-md5 mail_location = maildir:/data/MAIL/MAILDIR/%u:INBOX=/data/MAIL/INBOX/%u:INDEX=/data/MAIL/METADATA/%u maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl namespace { inbox = yes location = prefix = separator = . type = private } namespace { list = children location = maildir:/data/MAIL/MAILDIR/%%u:INDEX=/data/MAIL/METADATA/SHARED/%u/%%u prefix = shared.%%u. separator = . subscriptions = no type = shared } namespace { list = children location = maildir:/data/MAIL/PUBLIC:INDEX=/data/MAIL/METADATA/PUBLIC prefix = public. separator = . subscriptions = no type = public } passdb { args = scheme=cram-md5 /data/PWDDB/cram_dovecot.txt driver = passwd-file } passdb { args = /etc/dovecot/master-shared driver = passwd-file master = yes } passdb { args = /etc/dovecot/master-shared driver = passwd-file } plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 acl_anyone = allow acl_shared_dict = file:/data/MAIL/SHAREDDB/shared-mailboxes.db sieve = /data/MAIL/SIEVE/%u/dovecot.sieve sieve_dir = /data/MAIL/SIEVE/%u } postmaster_address = root protocols = imap sieve service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-userdb { group = mailreader mode = 0600 user = mailreader } } service imap-login { process_min_avail = 8 service_count = 0 vsz_limit = 512 M } service imap-postlogin { executable = script-login /etc/dovecot/postlogin.sh user = $default_internal_user } service imap { executable = imap imap-postlogin } ssl_cert = </etc/dovecot/ssl/imaps.lal.in2p3.fr.crt ssl_key = </etc/dovecot/ssl/imaps.lal.in2p3.fr.key userdb { args = /etc/dovecot/master-shared driver = passwd-file } userdb { args = uid=mailreader gid=mailreader home=/data/MAIL/SIEVE/%u allow_all_users=yes driver = static } protocol lda { mail_plugins = acl sieve } protocol imap { mail_max_userip_connections = 128 mail_plugins = acl imap_acl }

2 4

[Dovecot] question about changing certificate
by oni-neko＠gmx.net 13 Jun '12

13 Jun '12

Good day! I'm having trouble changing certificate/keys for my dovecot(version 1.2.9). When I set up the server (unbuntu lts 10.4.4) I did it with a self-signed certificate. I can't remember exactly what I did, just that I followed the wiki and it worked fine =) Now I have to change the certificate because a friend bought an official one (from thawte) and I'm a bit stumped. As dovecot can use supposedly use the same file for both key and cert file, I copied the new certificate to /etc/ssl/private/dovecot.pem and to /etc/ssl/certs/dovecot.pem. next I get from managesieve-login, pop3-login and imap-login the following log entries: Fatal: Can't load private key file /etc/ssl/private/dovecot.pem: Key is for a different cert than /etc/ssl/certs/dovecot.pem some googling brought up the file ssl-cert-snakeoil.key in /etc/ssl/private and /etc/ssl/certs that some people change in that context. As I also have a symlink /etc/ssl/private/ssl-mail.key that points to /etc/ssl/private/ssl-cert-snakeoil.key I'm starting to be confused (even more). dovecot is using the dovecot.pem-files, who/what uses the ssl-mail.key? I'm pretty sure I'm just overlooking something completely obvious, but what? =) greetings silvia -- NEU: FreePhone 3-fach-Flat mit kostenlosem Smartphone! Jetzt informieren: http://mobile.1und1.de/?ac=OM.PW.PW003K20328T7073a

2 3

[Dovecot] v2.0.21 released
by Timo Sirainen 12 Jun '12

12 Jun '12

http://dovecot.org/releases/2.0/dovecot-2.0.21.tar.gz http://dovecot.org/releases/2.0/dovecot-2.0.21.tar.gz.sig + dict: file backend supports now also fcntl/flock locking optionally - imap-login: Memory leak fixed - imap: Non-UTF8 input on SEARCH command parameters could have crashed - auth: Fixed crash with DIGEST-MD5 when attempting to do master user login without master passdbs. - sdbox: Don't use more fds than necessary when copying mails. - mdbox kept the user's storage locked a bit longer than it needed to

4 3

[Dovecot] 2.1.7 shared folder index issued
by Alex Crow 12 Jun '12

12 Jun '12

Hi, Sorry to bother the list again so soon after fixing my own problem, but I now have this issue when clients try to view shared folders in Thunderbird (v12). They can see the shared folder, but the first time they click on in nothing happens. The second time they get an authentication failure. The third or fourth time it finally loads the shared mailbox, and I see this a few times in the logs: Jun 11 19:57:43 alsace dovecot: imap(sharedviewer(a)integrafin.co.uk): Error: mdbox map /home/indexes/integrafin.co.uk/t/sharedviewer/shared/sharedviewee(a)integrafin.co.uk/storage/dovecot.map.index corrupted: U nexpectedly lost shared/viewee(a)integrafin.co.uk/INBOX uid=73129 map_uid=74192 Jun 11 19:57:43 alsace dovecot: imap(sharedviewer(a)integrafin.co.uk): Disconnected: Internal error occurred. Refer to server log for more information. [2012-06-11 19:57:43] in=308 out=820 Jun 11 19:57:43 alsace dovecot: auth: Debug: auth client connected (pid=1957) Ideally I'd like shared mailboxes to work in the first click - any ideas? Cheers Alex

2 4

[Dovecot] gnutls support
by Daniel L. Miller 12 Jun '12

12 Jun '12

Other than license issues, is there an advantage to using gnutls vs openssl? Or is openssl superior - at least in the current implementations? -- Daniel

2 3

[Dovecot] auth_krb5_keytab ignored ?
by Leon Meßner 12 Jun '12

12 Jun '12

Hi list, i noticed that when doing imap gssapi authentication with kerberos, dovecot (here 2.1.7) always searches /etc/krb5.keytab although i have auth_krb5_keytab = /etc/mail3.krb5.keytab in my etc/dovecot/dovecot.conf and doveconf -n also show this setting. If i combine the keytabs in krb5.keytab it works. Is there another location where i should put my configuration regarding gssapi/kerberos ? Thanks, Leon logs: 18:48_root@mail3:/root# cat /var/log/dovecot.log | tail -n 8 Jun 08 18:48:16 auth: Debug: client in: AUTH 1 GSSAPI service=imap secured session=gexTxPjBZACClTqR lip=130.149.58.164 rip=130.149.58.145 lport=993 rport=31076 Jun 08 18:48:16 auth: Debug: gssapi(?,130.149.58.145,<gexTxPjBZACClTqR>): Obtaining credentials for imap(a)mail3.physik-pool.tu-berlin.de Jun 08 18:48:16 auth: Debug: client out: CONT 1 Jun 08 18:48:16 auth: Debug: client in: CONT<hidden> Jun 08 18:48:16 auth: Info: gssapi(?,130.149.58.145,<gexTxPjBZACClTqR>): While processing incoming data: Miscellaneous failure (see text) Jun 08 18:48:16 auth: Info: gssapi(?,130.149.58.145,<gexTxPjBZACClTqR>): While processing incoming data: Failed to find imap/mail3.physik-pool.tu-berlin.de(a)PCPOOL.PHYSIK.TU-BERLIN.DE(kvno 1) in keytab FILE:/etc/krb5.keytab (des3-cbc-sha1) Jun 08 18:48:18 auth: Debug: client out: FAIL 1 Jun 08 18:48:23 imap-login: Info: Aborted login (auth failed, 1 attempts in 7 secs): user=<>, method=GSSAPI, rip=130.149.58.145, lip=130.149.58.164, TLS, session=<gexTxPjBZACClTqR> # 2.1.7: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.2-RELEASE-p3 amd64 auth_debug = yes auth_gssapi_hostname = mail3.physik-pool.tu-berlin.de auth_krb5_keytab = /etc/mail3.krb5.keytab auth_mechanisms = gssapi plain login auth_verbose = yes auth_worker_max_count = 120 first_valid_gid = 300 first_valid_uid = 200 lda_mailbox_autocreate = yes listen = mail3.physik.tu-berlin.de log_path = /var/log/dovecot.log mail_fsync = always mail_location = maildir:~/maildir mail_nfs_index = yes mail_nfs_storage = yes mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes namespace { inbox = yes location = prefix = separator = / type = private } namespace { location = mbox:~/mail prefix = mail/ separator = / type = private } passdb { args = session=yes failure_show_msg=yes max_requests=100 dovecot driver = pam } plugin { quota = fs sieve = ~/.dovecot.sieve sieve_dir = ~/.sieve } protocols = imap pop3 service auth { unix_listener auth-client { mode = 0660 } unix_listener auth-master { mode = 0600 } user = root } service imap-login { inet_listener imap { port = 0 } process_limit = 256 process_min_avail = 6 } service managesieve-login { process_limit = 256 process_min_avail = 6 } service pop3-login { inet_listener pop3 { port = 0 } process_limit = 256 process_min_avail = 6 } ssl_cert = </etc/private/mail3.physik.tu-berlin.de.pem ssl_key = </etc/private/physik.tu-berlin.de_privatekey.pem userdb { args = blocking=yes driver = passwd } verbose_proctitle = yes protocol lda { info_log_path = /var/log/dovecot-lda.log log_path = /var/log/dovecot-lda.log mail_plugins = " sieve quota" }

2 5

[Dovecot] Sieve: Mailbox doesn't exist
by Stefan Fricke 12 Jun '12

12 Jun '12

I have just set up a mail server on Ubuntu, using Postfix and Dovecot 2.0.19. It works well but I can't get Sieve working. I always get the error that the target mailbox doesn't exist. In fact it doesn't but isn'r Dovecot supposed to create it? Here is my doveconf -n: # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-24-generic x86_64 Ubuntu 12.04 LTS mail_debug = yes mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } service_count = 1 } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH: +MEDIUM ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r }

3 2

[Dovecot] commercial support -- feedback
by Костырев Александр Алексеевич 12 Jun '12

12 Jun '12

good day! Did anybody in here decide to go for commercial support from Dovecot Solutions Oy ? I'd like to know if you are satisfied with what they provide? if time of support reaction is really as what is stated at their site and stuff like that.

1 0

[Dovecot] Authentication issue
by Emiliano Rago 12 Jun '12

12 Jun '12

Hi, I need to set up a weird dovecot configuration: 1) outside a ssl tunnel I'd like to authenticate only with cram-md5 scheme 2) inside a ssl tunnel I'd like to authenticate only with plain auth The first is easily satisfied with auth_mechanisms = plain cram-md5 disable_plaintext_auth = yes but I don't know how to satisfy the second condition, if it's possible. Thanks for help, Emiliano Rago

2 2

[Dovecot] Getting duplicates despite trying hard to match lock styles
by Richard Walker 12 Jun '12

12 Jun '12

I'm attempting to replace (a) a very old setup that has POP (qpopper) access to inboxes and a separate UW IMAP server that provides folders, with (b) a shiny new mail setup with dovecot providing both inboxes and IMAP support. For the new mail server I created a virtual machine running a minimal Fedora 16 installation and installed sendmail, MIMEDefang, SpamAssassin, ClamAV, procmail, and dovecot. I have kept installing updates as they become available. For now I'm running the old and new mail setups in parallel; I have configured the original sendmail server to forward copies of incoming messages to the new sendmail running on the virtual machine. I then compare the results (e.g., how spam filtering is working). I've kept as much as possible of the original _style_ of setup as possible, which in particular means using sendmail, and message delivery through procmail to mbox files in /var/spool/mail. The key difference is the use of dovecot to provide IMAP access to the inbox and IMAP folders. Because of the legacy setup, my desktop access to email is via Thunderbird 2.0.0.22 on a very old Mac PowerBook G4 to work with both old and new setups and I have two windows open to make comparison possible. (Yes, both mail servers are on separate computers, not on this notebook.) Mostly this is working fine (after a fair bit of tweaking, including adding custom SELinux rules to get rid of all AVCs). I put the notebook to sleep overnight, and in the morning I open it up and see what happens. After a few minutes, the window with the old setup does its POP fetch; the window with the new setup almost straightaway shows the new messages in its version of the inbox. Not quite: again, for legacy reasons I have some Thunderbird filters, and I have duplicated those (still within Thunderbird) for the new setup. The filters are: 1. Move messages tagged as spam by SpamAssassin to the Junk folder. 2. Move messages from GeoNetwork-related senders to a "GeoNetwork" folder. 3. Move all remaining messages to the "In" folder. Most mornings this works just fine. But not always. Sometimes I get duplicates in the "In" and "GeoNetwork" folders of the new dovecot-based setup. I used to get _garbled_ duplicates (with extra random bits of other messages at the end of the duplicates) in the new setup, which I presumed must be due to a locking configuration mismatch. Having fixed that (see below) I no longer get garbled duplicates, but I do still sometimes (including today) get identical duplicates. This seems to happen when one of the incoming messages has a very large attachment - but you may wish to treat that as hearsay. I attach below: 0. The line from /etc/mtab on the new server that covers the filesystem (i.e., including /var/spool and /home). 1. Output of "doveconf -n" and a note about how I modified locking from the Fedora default. 2. Output of "procmail -v". 3. Sendmail procmail mailer config (for good measure; I don't think you need this). 4. An excerpt from /var/log/maillog on the new server showing the beginning of dovecot processing this morning when I opened my notebook. 5. A link to the dovecot raw log files of my "INBOX" and "In" folder processing from this morning. You'll see from the dovecot log files that Thunderbird sends expunge commands, but the expunged messages hang around -- indeed, the same messages get expunged several times! And eventually they get fetched again -- hence the duplicates I see in Thunderbird. Given that INBOX.out contains: 08:56:53.765423 * 537 EXISTS 08:56:53.765423 * 533 RECENT and then, after many expunges: 08:56:58.441341 * 16 EXPUNGE 08:56:58.441341 * 11 EXPUNGE 08:56:58.441341 * 3 EXPUNGE 08:56:58.441341 * 539 EXISTS 08:56:58.441341 * 536 RECENT 08:56:58.441341 9 OK Expunge completed. it looks like I still have a locking problem. I have tried very hard to understand the locking options in dovecot.conf and to match dovecot with procmail -- apparently, there is more to do. 0. The line from /etc/mtab for the filesystem: ---------- /dev/mapper/vg_f16i386serverbasic-lv_root / ext4 rw,seclabel,relatime,user_xattr,acl,barrier=1,data=ordered 0 0 ---------- 1. doveconf -n says: ---------- # 2.0.20: /etc/dovecot/dovecot.conf # OS: Linux 3.3.6-3.fc16.i686.PAE i686 Fedora release 16 (Verne) mail_debug = yes mail_privileged_group = mail namespace { hidden = yes inbox = yes list = no location = mbox:~/mail:INBOX=/var/spool/mail/%u prefix = "#mbox/" separator = / type = private } namespace { inbox = no location = maildir:~/Maildir prefix = separator = / type = private } passdb { driver = pam } service imap-login { inet_listener imap { address = localhost } } service imap { executable = imap postlogin } service pop3-login { inet_listener pop3 { address = localhost } } service postlogin { executable = script-login -d rawlog -t } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } ---------- Note that the default Fedora installation specifies: mbox_write_locks = fcntl and I commented that out. This seems to restore the default setting of: mbox_write_locks = dotlock fcntl to match procmail. 2. procmail -v (run as me) says: ---------- procmail v3.22 2001/09/10 Copyright (c) 1990-2001, Stephen R. van den Berg <srb(a)cuci.nl> Copyright (c) 1997-2001, Philip A. Guenther <guenther(a)sendmail.com> Submit questions/answers to the procmail-related mailinglist by sending to: <procmail-users(a)procmail.org> And of course, subscription and information requests for this list to: <procmail-users-request(a)procmail.org> Locking strategies: dotlocking, fcntl() Default rcfile: $HOME/.procmailrc It may be writable by your primary group Your system mailbox: /var/spool/mail/rw ---------- (There is no $HOME/.procmailrc or other system-wide procmailrc.) 3. The mailer as defined in sendmail.cf says: ---------- Mlocal, P=/usr/bin/procmail, F=lsDFMAw5:/|@qSPfhn9, S=EnvFromL/HdrFromL, R=EnvToL/HdrToL, T=DNS/RFC822/X-Unix, A=procmail -t -Y -a $h -d $u ---------- 4. The relevant lines from /var/log/maillog: ---------- Jun 12 08:56:53 localhost dovecot: imap-login: Login: user=<rw>, method=PLAIN, rip=192.168.2.200, lip=192.168.2.188, mpid=21618, TLS Jun 12 08:56:53 localhost dovecot: imap(rw): Debug: Effective uid=1000, gid=100, home=/home/rw Jun 12 08:56:53 localhost dovecot: imap(rw): Debug: Namespace : type=private, prefix=#mbox/, sep=/, inbox=yes, hidden=yes, list=no, subscriptions=yes location=mbox:~/mail:INBOX=/var/spool/mail/rw Jun 12 08:56:53 localhost dovecot: imap(rw): Debug: fs: root=/home/rw/mail, index=, control=, inbox=/var/spool/mail/rw, alt= Jun 12 08:56:53 localhost dovecot: imap(rw): Debug: Namespace : type=private, prefix=, sep=/, inbox=no, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir Jun 12 08:56:53 localhost dovecot: imap(rw): Debug: maildir++: root=/home/rw/Maildir, index=, control=, inbox=, alt= Jun 12 08:56:58 localhost dovecot: imap-login: Login: user=<rw>, method=PLAIN, rip=192.168.2.200, lip=192.168.2.188, mpid=21625, TLS Jun 12 08:56:58 localhost dovecot: imap(rw): Debug: Effective uid=1000, gid=100, home=/home/rw Jun 12 08:56:58 localhost dovecot: imap(rw): Debug: Namespace : type=private, prefix=#mbox/, sep=/, inbox=yes, hidden=yes, list=no, subscriptions=yes location=mbox:~/mail:INBOX=/var/spool/mail/rw Jun 12 08:56:58 localhost dovecot: imap(rw): Debug: fs: root=/home/rw/mail, index=, control=, inbox=/var/spool/mail/rw, alt= Jun 12 08:56:58 localhost dovecot: imap(rw): Debug: Namespace : type=private, prefix=, sep=/, inbox=no, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir Jun 12 08:56:58 localhost dovecot: imap(rw): Debug: maildir++: root=/home/rw/Maildir, index=, control=, inbox=, alt= Jun 12 08:57:03 localhost dovecot: imap-login: Login: user=<rw>, method=PLAIN, rip=192.168.2.200, lip=192.168.2.188, mpid=21632, TLS Jun 12 08:57:03 localhost dovecot: imap(rw): Debug: Effective uid=1000, gid=100, home=/home/rw Jun 12 08:57:03 localhost dovecot: imap(rw): Debug: Namespace : type=private, prefix=#mbox/, sep=/, inbox=yes, hidden=yes, list=no, subscriptions=yes location=mbox:~/mail:INBOX=/var/spool/mail/rw Jun 12 08:57:03 localhost dovecot: imap(rw): Debug: fs: root=/home/rw/mail, index=, control=, inbox=/var/spool/mail/rw, alt= Jun 12 08:57:03 localhost dovecot: imap(rw): Debug: Namespace : type=private, prefix=, sep=/, inbox=no, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir Jun 12 08:57:03 localhost dovecot: imap(rw): Debug: maildir++: root=/home/rw/Maildir, index=, control=, inbox=, alt= ---------- 5. dovecot raw logs for "INBOX" and "In". Because I have trouble comparing times in epoch format, I've run the logs through a little filter that replaces the timestamps at the beginning of each line with a timestamp in HH:MM:SS.nanosecond format in local time. I've carefully deleted lots of (what I hope are) lines you don't need from the logs. E.g., I deleted the middle section of a block of FETCH statements, leaving the first few and the last few. Please let me know if I deleted too much -- I was trying to be helpful. And of course I replaced e-mail address/subject lines/etc with XXXXXXXXXX. Although the Thunderbird filters are "supposed" to be run in the order I listed above, it seems that Thunderbird fetches all headers, works out what messages should be filtered to which folders, and then sends corresponding IMAP commands that copy the messages to the other folders in a _different_ order of the filters. (I.e., the INBOX log shows copy/store/expunge operations in the order "In", "Junk", then "GeoNetwork", rather than "Junk", "GeoNetwork", "In".) I have renamed the in/out log files as INBOX.in, INBOX.out, In.in, In.out and uploaded them to: https://sites.google.com/site/rwdownloadssite/dovecot-logs Thanks in advance to anyone who is willing to take a look and advise what I need to do.

1 1

[Dovecot] Dovecot auth process delays exiting if LDAPS passdb used
by SATOH Fumiyasu 11 Jun '12

11 Jun '12

Hi, I'm using Dovecot 2.1.6 and LDAP server as a backend for Postfix SMTP-Auth (SASL) on Debian GNU/Linux (wheezy), Solaris 10 and AIX 6.1/7.1. If Dovecot passdb is configured with LDAP (no TLS/SSL), it is no problem. But if Dovecot passdb is configured with LDAPS (or LDAP+TLS), Dovecot auth process has a problem that Dovecot auth delays exiting about between 20 and 60 seconds when Dovecot dovecot (master) process is already terminated by an administrator. Is this known problem? On AIX, this problem prevents restart Dovecot service by the following error: May 24 00:42:03 build-aix6 mail:warn|warning dovecot: master: Warning: Killed with signal 15 (by pid=11337890 uid=0 code=kill) May 24 00:42:10 build-aix6 mail:err|error dovecot: master: Error: service(auth): Socket already exists: /opt/osstech/var/run/dovecot/auth-login May 24 00:42:11 build-aix6 mail:crit dovecot: master: Fatal: Failed to start listeners My Dovecot 2.1.6 platforms are: * Debian GNU/Linux wheezy + OpenLDAP 2.4.28 (linked with GNU TLS 2.12.18) * Solaris 10 + OpenLDAP 2.4.26 (linked with OpenSSL 0.9.7) * AIX 6.1 + OpenLDAP 2.4.31 (linked with OpenSSL 1.0.0) * AIX 7.1 + OpenLDAP 2.4.28 (linked with OpenSSL 1.0.0) Because I see the problem on the all of above, there is a bug in Dovecot 2.1.6, I think. Thanks. -- -- Name: SATOH Fumiyasu (fumiyas @ osstech co jp) -- Business Home: http://www.OSSTech.co.jp/ -- Personal Home: http://www.SFO.jp/blog/

2 9

[Dovecot] fts_lucene crashing
by Joe Beaubien 11 Jun '12

11 Jun '12

I found this in mail.err. Anyone ever experience this? May 22 14:51:51 mba dovecot: imap(formulaire): Panic: file lucene-wrapper.cc: line 196: unreached May 22 14:51:51 mba dovecot: imap(formulaire): Error: Raw backtrace: /opt/dovecot-2.1.6-lucene/lib/dovecot/libdovecot.so.0(+0x4200a) [0x7f7e0edfd00a] -> /opt/dovecot-2.1.6-lucene/lib/dovecot/libdovecot.so.0(+0x4204e) [0x7f7e0edfd04e] -> /opt/dovecot-2.1.6-lucene/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f7e0edd43c0] -> /opt/dovecot/lib/dovecot/lib21_fts_lucene_plugin.so(+0x850e) [0x7f7e0d57a50e] -> /opt/dovecot/lib/dovecot/lib21_fts_lucene_plugin.so(+0xa7be) [0x7f7e0d57c7be] -> /opt/dovecot/lib/dovecot/lib21_fts_lucene_plugin.so(+0xa952) [0x7f7e0d57c952] -> /opt/dovecot/lib/dovecot/lib21_fts_lucene_plugin.so(lucene_index_lookup+0x7b) [0x7f7e0d57ce0b] -> /opt/dovecot/lib/dovecot/lib21_fts_lucene_plugin.so(+0x73a7) [0x7f7e0d5793a7] -> /opt/dovecot/lib/dovecot/lib20_fts_plugin.so(fts_backend_lookup+0x63) [0x7f7e0d98ece3] -> /opt/dovecot/lib/dovecot/lib20_fts_plugin.so(+0xa32d) [0x7f7e0d99232d] -> /opt/dovecot/lib/dovecot/lib20_fts_plugin.so(fts_search_lookup+0xa6) [0x7f7e0d992a26] -> /opt/dovecot/lib/dovecot/lib20_fts_plugin.so(+0xba25) [0x7f7e0d993a25] -> /opt/dovecot-2.1.6-lucene/lib/dovecot/libdovecot-storage.so.0(mailbox_search_next_nonblock+0x27) [0x7f7e0f0c1957] -> dovecot/imap() [0x4158a7] -> dovecot/imap() [0x415c62] -> /opt/dovecot-2.1.6-lucene/lib/dovecot/libdovecot.so.0(io_loop_handle_timeouts+0xc4) [0x7f7e0ee09cd4] -> /opt/dovecot-2.1.6-lucene/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x5b) [0x7f7e0ee0ac2b] -> /opt/dovecot-2.1.6-lucene/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f7e0ee09998] -> /opt/dovecot-2.1.6-lucene/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f7e0edf6233] -> dovecot/imap(main+0x285) [0x4086e5] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xed) [0x7f7e0ea1f76d] -> dovecot/imap() [0x40885d] May 22 14:51:51 mba dovecot: imap(formulaire): Fatal: master: service(imap): child 32761 killed with signal 6 (core dumped) I get these errors very very often. When I look at lucene-wrapper.cc source code I see the following 196: if (uni_utf8_to_ucs4(str, &dest_arr) < 0) i_unreached(); Any ideas? -Joe

2 6

[Dovecot] Director problems
by Joseba Torre 11 Jun '12

11 Jun '12

Hi, I've just setup a testing enviroment for director, and it's not working as expected. I have just 1 director (called director) and 2 dovecot servers (dovecot1 and dovecot2); these are exact copies. First problem: when both dovecot servers are up, every imap connection is redirected to the same server as you can see here: $ sudo doveadm director map user mail server ip expire time <unknown> 158.227.4.186 2012-06-06 13:34:12 <unknown> 158.227.4.186 2012-06-06 13:34:27 <unknown> 158.227.4.186 2012-06-06 13:34:34 (I don't know if that <unknown> is good or not) I've tried with 3 different users and ips to no change, users are always directed to the same host. Second problem: if I try to add/remove/modify one of the dovecot servers, the output of doveadm director map/status seems to be ok, but any new user connection fails with this log: Jun 6 14:51:59 director dovecot: director: Warning: Delaying new user requests until ring is synced Jun 6 14:52:27 director dovecot: director: Error: director: User test1 host lookup failed: Timeout - queued for 30 secs (Ring not synced for 73 secs) Jun 6 14:52:31 director dovecot: imap-login: Aborted login (auth failed, 1 attempts in 34 secs): user=<>, method=PLAIN, rip=158.227.4.186, lip=158.227.4.185, TLS, session=<Oyx9O83B/wCe4wS6> Any clue? This is the dovecot config -n output: # 2.1.7: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-220.17.1.el6.x86_64 x86_64 Red Hat Enterprise Linux Server release 6.2 (Santiago) director_mail_servers = dovecot1.example dovecot2.example director_servers = director.example lmtp_proxy = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = proxy=y nopassword=y starttls=any-cert driver = static } service auth { unix_listener auth-userdb { group = mail mode = 0660 user = dovecot } } service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { port = 9090 } unix_listener director-userdb { mode = 0600 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director service_count = 0 } service lmtp { client_limit = 1 inet_listener lmtp { port = 24 } unix_listener /var/lib/dovecot/lmtp-socket { group = root mode = 0600 user = root } } service pop3-login { executable = pop3-login director service_count = 0 } service pop3 { process_limit = 5000 } shutdown_clients = no ssl_cert = </etc/ssl/private/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } verbose_proctitle = yes version_ignore = yes protocol lmtp { auth_socket_path = director-userdb } protocol imap { mail_max_userip_connections = 100 }

2 4