- dovecot - dovecot.org

Re: [Dovecot] sysconfdir depreacted
by Joseph Tam 23 Mar '12

23 Mar '12

On Fri, 23 Mar 2012, dovecot-request(a)dovecot.org wrote: >> See http://dovecot.org/list/dovecot/2009-January/036131.html > > Yes, I was also thinking about that, but it's about removing the > dovecot/ suffix from other directories as well. That might be > something worth doing (--without-package-suffix or something?). +1. I fake it now with symlinks (e.g. etc/dovecot -> .). Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Dovecot v2.1.3 (f30437ed63dc) Auth/Login Issues
by Thomas Leuxner 23 Mar '12

23 Mar '12

Hi, some change between ff5c341f8838 and f30437ed63dc seems to have broken auth: => Bad Login Mar 23 09:01:46 spectre dovecot: master: Dovecot v2.1.3 (f30437ed63dc) starting up [...] Mar 23 10:25:44 spectre dovecot: auth: Debug: auth client connected (pid=7266) Mar 23 10:25:45 spectre dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured#011lip=188.138.0.199#011rip=80.187.102.243#011lport=143#011rport=62388#011resp=<hidden> Mar 23 10:25:45 spectre dovecot: auth: Debug: cache(tlx(a)leuxner.net,80.187.102.243): hit: <hidden>#011userdb_quota_rule=*:storage=5G#011userdb_acl_groups=PublicMailboxAdmins Mar 23 10:25:45 spectre dovecot: auth: Debug: client out: OK#0111#011user=tlx(a)leuxner.net Mar 23 10:25:45 spectre dovecot: auth: Debug: master in: REQUEST#0113958898689#0117266#0111#011bfc44f32051961b909e2b458440d645f Mar 23 10:25:45 spectre dovecot: auth: Debug: userdb-cache(tlx(a)leuxner.net,80.187.102.243): hit: tlx@leuxner.net#011uid=5000#011gid=5000#011home=/var/vmail/domains/leuxner.net/tlx#011quota_rule=*:storage=5G#011acl_groups=PublicMailboxAdmins Mar 23 10:25:45 spectre dovecot: auth: Debug: master out: USER#0113958898689#011tlx@leuxner.net#011uid=xxx#011gid=xxx#011home=/var/vmail/domains/leuxner.net/tlx#011quota_rule=*:storage=5G#011acl_groups=PublicMailboxAdmins Mar 23 10:25:45 spectre dovecot: imap-login: Login: user=<tlx(a)leuxner.net>, method=PLAIN, rip=80.187.102.243, lip=188.138.0.199, mpid=7267, TLS Mar 23 10:25:45 spectre dovecot: imap(tlx(a)leuxner.net): Connection closed in=0 out=319uthentication/login: => Good Login Mar 23 10:26:37 spectre dovecot: master: Dovecot v2.1.3 (ff5c341f8838) starting up [...] Mar 23 10:27:18 spectre dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Mar 23 10:27:18 spectre dovecot: auth: Debug: auth client connected (pid=9832) Mar 23 10:27:19 spectre dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured#011lip=188.138.0.199#011rip=80.187.102.243#011lport=143#011rport=51647#011resp=<hidden> Mar 23 10:27:19 spectre dovecot: auth: Debug: cache(tlx(a)leuxner.net,80.187.102.243): miss Mar 23 10:27:19 spectre dovecot: auth: Debug: passwd-file /var/vmail/auth.d/leuxner.net/passwd: Read 1 users in 0 secs Mar 23 10:27:19 spectre dovecot: auth: Debug: passwd-file(tlx(a)leuxner.net,80.187.102.243): lookup: user=tlx(a)leuxner.net file=/var/vmail/auth.d/leuxner.net/passwd Mar 23 10:27:19 spectre dovecot: auth: Debug: client out: OK#0111#011user=tlx(a)leuxner.net Mar 23 10:27:19 spectre dovecot: auth: Debug: master in: REQUEST#0113656384513#0119832#0111#0114782efcbd0324b228bb85aaae916cfe6 Mar 23 10:27:19 spectre dovecot: auth: Debug: userdb-cache(tlx(a)leuxner.net,80.187.102.243): miss Mar 23 10:27:19 spectre dovecot: auth: Debug: passwd-file(tlx(a)leuxner.net,80.187.102.243): lookup: user=tlx(a)leuxner.net file=/var/vmail/auth.d/leuxner.net/passwd Mar 23 10:27:19 spectre dovecot: auth: Debug: master out: USER#0113656384513#011tlx@leuxner.net#011uid=xxx#011gid=xxx#011home=/var/vmail/domains/leuxner.net/tlx#011quota_rule=*:storage=5G#011acl_groups=PublicMailboxAdmins Mar 23 10:27:19 spectre dovecot: imap-login: Login: user=<tlx(a)leuxner.net>, method=PLAIN, rip=80.187.102.243, lip=188.138.0.199, mpid=9835, TLS Regards Thomas

1 0

[Dovecot] 2.1.2 (pop3|imap)-login crash
by Luca Palazzo 22 Mar '12

22 Mar '12

Hi Timo, hi all, after upgrading my server (both backends and load balancer) to 2.1.2 (from 2.0.17), I'm getting a log of login processes crashed in load balancer. Log lines are like: Mar 20 10:05:45 mailgw-lb dovecot: pop3-login: Fatal: master: service(pop3-login): child 27764 killed with signal 11 (core dumps disabled) Mar 20 10:06:17 mailgw-lb dovecot: imap-login: Fatal: master: service(imap-login): child 28468 killed with signal 11 (core dumps disabled) Stack trace of a crashed process is like: Program received signal SIGSEGV, Segmentation fault. [Switching to Thread -1220163904 (LWP 27764)] 0xb77cd176 in ssl_proxy_is_handshaked (proxy=0x0) at ssl-proxy-openssl.c:710 710 { (gdb) bt #0 0xb77cd176 in ssl_proxy_is_handshaked (proxy=0x0) at ssl-proxy-openssl.c:710 #1 0xb77c7295 in client_get_log_str (client=0x807b830, msg=0x804e290 "proxy(aaaaaa(a)dddddd.it): disconnecting x.x.x.x (Disconnected by server)") at client-common.c:469 #2 0xb77c73c6 in client_log (client=0x807b830, msg=0x804e290 "proxy(aaaaaaa(a)dddddd.it): disconnecting x.x.x.x (Disconnected by server)") at client-common.c:553 #3 0xb77c9a45 in login_proxy_free_reason (_proxy=<value optimized out>, reason=0x804e248 "Disconnected by server") at login-proxy.c:373 #4 0xb77ca9b5 in server_input (proxy=0x0) at login-proxy.c:93 #5 0xb7793762 in io_loop_call_io (io=0x8094180) at ioloop.c:380 #6 0xb7794cc9 in io_loop_handler_run (ioloop=0x8055480) at ioloop-epoll.c:213 #7 0xb77936f9 in io_loop_run (ioloop=0x8055480) at ioloop.c:399 #8 0xb777e4c8 in master_service_run (service=0x80553b0, callback=0xb77cc110 <client_connected>) at master-service.c:544 #9 0xb77cbcee in login_binary_run (binary=0x804ad80, argc=2, argv=0x80551c0) at main.c:406 #10 0x08049812 in main (argc=0, argv=0x0) at client.c:303 The strange part of the story is that not all process crash. I'm trying to figure out if only TLS/SSL process crash. Any idea? Thanks Luca

2 5

[Dovecot] 2.1: Error: Maildir filename has wrong S value, renamed the file from
by Ralf Hildebrandt 22 Mar '12

22 Mar '12

Hi! Starting with 2.1.1 we suddely encounter quite a lot of these messages: Mar 2 11:09:28 postamt dovecot: imap(username): Error: Maildir filename has wrong S value, renamed the file from /home/a/i/username/Maildir/.A*Teens.Eink&AOQ-ufe, Spenden etc/cur/1323207735.M64829P19819.postamt.charite.de,S=5137:2,S to /home/a/i/username/Maildir/.A*Teens.Eink&AOQ-ufe, Spenden etc/cur/1323207735.M64829P19819.postamt.charite.de,S=5137:2,S Mar 2 11:09:28 postamt dovecot: imap(username): Error: Maildir filename has wrong S value, renamed the file from /home/a/i/username/Maildir/.A*Teens.Eink&AOQ-ufe, Spenden etc/cur/1323207735.M64829P19819.postamt.charite.de,S=5137:2,S to /home/a/i/username/Maildir/.A*Teens.Eink&AOQ-ufe, Spenden etc/cur/1323207735.M64829P19819.postamt.charite.de,S=5137:2,S Mar 2 11:09:28 postamt dovecot: imap(username): Error: read(/home/a/i/username/Maildir/.A*Teens.Eink&AOQ-ufe, Spenden etc/cur/1323207735.M64829P19819.postamt.charite.de,S=5137:2,S) failed: Input/output error (uid=69) While this has (assumedly) been working with 2.0.18. Another issue with this: This fixes ONE file, and throws an error. Repeatedly accessing this folder fixes more files, until at some point all files were fixed. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

4 17

[Dovecot] Dovecot 2.1.3 on solaris with mysql - make fails
by Robert Hartzell 21 Mar '12

21 Mar '12

I'm trying to build 2.1.3 on solaris 11 11/11 with gcc 4.5.2 & sun studio 12.2 & 12.3 CPPFLAGS="-I/opt/openssl/include -I/usr/mysql/include/mysql" \ LDFLAGS="-L/opt/openssl/lib -L/usr/mysql/lib/mysql -R/opt/openssl/lib:/usr/mysql/lib/mysql" \ ./configure --prefix=/opt/dovecot \ --sysconfdir=/etc/opt \ --with-ssl=openssl \ --with-mysql make fails with both solaris standard openssl and my build of openssl. I'm also getting the same error using sunstudio mysql version is 5.1.37 The relevant output of make is on pastebin http://pastebin.com/aALHG0yL I have seen some reference to this with google but nothing thats very recent and no solutions. Anyone know how to get past this? Any tips on building dovecot on solaris? Pointers would be much appreciated. -- Robert

1 0

[Dovecot] dovecot runs from shell, but not xinetd
by Mark Jeghers 21 Mar '12

21 Mar '12

All, Below is my config. When I run dovecot from xinetd, I get these errors in the log: Mar 20 11:13:39 t4pserver2 dovecot: pop3-login: Login: user=<mark>, method=PLAIN, rip=::1, lip=::1, mpid=11624, secured Mar 20 11:13:39 t4pserver2 dovecot: pop3(mark): Debug: Effective uid=500, gid=100, home=/home/mark Mar 20 11:13:39 t4pserver2 dovecot: pop3(mark): Debug: fs: root=/var/spool/mailpop3, index=, control=, inbox=/var/spool/mailpop3/mark Mar 20 11:13:39 t4pserver2 dovecot: pop3(mark): Error: stat(/var/spool/mailpop3/mark) failed: Permission denied Mar 20 11:13:39 t4pserver2 dovecot: pop3(mark): Debug: Namespace : Using permissions from /var/spool/mailpop3: mode=0777 gid=-1 Mar 20 11:13:39 t4pserver2 dovecot: pop3(mark): Error: stat(/var/spool/mailpop3/mark) failed: Permission denied Mar 20 11:13:39 t4pserver2 dovecot: pop3(mark): Debug: Namespace : Using permissions from /var/spool/mailpop3: mode=0777 gid=-1 Mar 20 11:13:39 t4pserver2 dovecot: pop3(mark): Error: stat(/var/spool/mailpop3/mark) failed: Permission denied Mar 20 11:13:39 t4pserver2 dovecot: pop3(mark): Error: Couldn't open INBOX: Internal error occurred. Refer to server log for more information. [2012-03-20 11:13:39] Mar 20 11:13:39 t4pserver2 dovecot: pop3(mark): Couldn't open INBOX top=0/0, retr=0/0, del=0/0, size=0 ...it acts as if it has no file permission, but it seems like it certainly should. Here is the files it is trying to access: [root@t4pserver2 ~]# ls -al /var/spool/mailpop3/ total 248656 drwxrwxrwx. 3 mail mail 4096 Mar 20 00:31 . drwxr-xr-x. 17 root root 4096 Mar 18 18:22 .. -rw-rw-r--. 1 ann users 58739 Mar 17 04:26 ann -rw-rw-r--. 1 annphone users 2708345 Mar 17 05:22 annphone -rw-rw-r--. 1 mail users 127272960 Mar 18 18:28 backups.tar -rw-rw-r--. 1 crimsonblues users 327563 Dec 3 14:38 crimsonblues drwxrwxrwx. 3 mark users 4096 Mar 20 00:31 .imap -rw-rw-r--. 1 mark users 0 Mar 18 13:09 mark -rw-rw-r--. 1 markphone users 124147068 Mar 18 04:21 markphone -rw-rw-r--. 1 nathan users 5119 Dec 22 18:52 nathan -rw-rw-r--. 1 root users 0 Mar 18 13:13 root -rw-rw-r--. 1 testuser users 58739 Mar 18 18:42 testuser -rw-rw-r--. 1 tim users 16212 Mar 18 15:51 tim Any ideas what is wrong? What is different running under xinetd? All the process run under the same user ids... Thanks, /Mark My config --------------------------------------------------------------- # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-220.7.1.el6.centos.plus.i686 i686 CentOS release 6.2 (Final) ext4 auth_debug = yes auth_verbose = yes auth_verbose_passwords = plain disable_plaintext_auth = no doveadm_worker_count = 4 mail_debug = yes mail_gid = users mail_location = mbox:/var/spool/mailpop3:INBOX=/var/spool/mailpop3/%u mail_uid = root mbox_write_locks = fcntl passdb { args = /etc/passwd.dovecot driver = passwd-file } passdb { driver = shadow } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid size from subject vsize flags mail_log_group_events = yes } protocols = pop3 ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd }

3 6

[Dovecot] replication howto
by Matteo Cazzador 21 Mar '12

21 Mar '12

Hello, excuse me but there is some documentation about replication now? I dont' understand where i must put the lines below (dovecot.conf? , 20-imap?) Excuse but it's not so clear for me cause i'm a new dovecot user. Another question, i use virtual users on mysql backend , so for replication i need to give ssh at every virtual users? Or i can use a only use a system ssh user? Thank's service aggregator { # give enough permissions for mail processes fifo_listener replication-notify-fifo { user = vmail mode = 0600 } unix_listener replication-notify { user = vmail mode = 0600 } } service replicator { # start replication at startup process_min_avail = 1 } plugin { # host1 replicates to host2 mail_replica = remote:vmail at host2.example.com # host2 replicates to host1 #mail_replica = remote:vmail at host1.example.com } #dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u -l%{lock_timeout} -n%{namespace} service doveadm { # if you're using a single virtual user, set this to # start ssh as vmail (not root) user = vmail } -- Rispetta l'ambiente: se non ti è necessario, non stampare questa mail. ****************************************** Ing. Matteo Cazzador Email: mcazzador(a)gmail.com ******************************************

5 16

[Dovecot] issues migration from dovecot 1.2 to version 2
by Rajesh M 21 Mar '12

21 Mar '12

hi my system is a centos 5 with qmailtoaster i migrated my email server with around 5000 users from dovecot version 1.2 to version 2 i have two separate 2 tb hdd's storing webmail data of these users. the load on the server goes very high over 100 during peak load times and the imap connections get dropped frequently, webmail becomes very slow. however pop3 download works ok in the dovecot log file i get errors as such Warning: Maildir /homebackup/domains/xxxx/xxxx/Maildir/.ALL_INBOX MAIL: Synchronization took 71 seconds (20 new msgs, 0 flag change attempts, 0 expunge attempts) i had configured dovecot 1.2 using source but i had installed version 2 using qmailtoaster rpm i am a bit confused as to what settings are to be done for a very busy server note that the cpu system usage and ram usage are less but IO wait goes to around 80-90 percent can you please guide me or post some dovecot version 2 config file settings that are relevant to a busy server. rajesh

2 1

[Dovecot] mdbox and pop3 locking
by Ken A 21 Mar '12

21 Mar '12

With mdbox, what does dovecot lock when "pop3_lock_session(pop3): yes"? Specifically, I'm wondering if Dovecot LDA is able to deliver mail when a session is locked, if using mdbox, or if it will tempfail until the session is unlocked? Thanks, Ken -- Ken Anderson Pacific Internet - http://www.pacific.net

3 2

[Dovecot] auth tcp socket, Authentication client gave a PID 7542 of existing connection
by Alex Ha 21 Mar '12

21 Mar '12

Hi Dovecot-list! My setup consists of a dovecot server with lmtp delivery and 3 postfix mta servers in front. Previously the mtas authenticated (SASL) through the courier-authdaemond software to our mysql database. To get support for more password formats i migrated to dovecot for SASL authentification. Our postfix mtas connect to dovecot through a tcp-socket smtpd_sasl_auth_enable = yes smtpd_sasl_type = dovecot smtpd_sasl_path = inet:10.11.100.230:12345 smtpd_sasl_security_options = noanonymous smtpd_sasl_authenticated_header = yes smtpd_sasl_local_domain = broken_sasl_auth_clients = yes 10.11.100.230 is our dovecot server. Please look at the attached doveconf.log to see my auth service configuration. I did the configuration according to the postfix SASL README. http://www.postfix.org/SASL_README.html#server_dovecot I tested the setup and everything worked fine but after 2 days i noticed these error messages in my mail.log: dovecot: auth: Error: BUG: Authentication client gave a PID 7542 of existing connection and also these messages from postfix: SASL LOGIN authentication failed: Connection lost to authentication server I get the dovecot error message about 3000 times a day and postfix message about 270 times. Please see my attached mail.log for a detailed trace. Thank you for your help :) Alex

3 6

[Dovecot] ssl_cert_username_field and subjectAltName?
by Nicolas KOWALSKI 21 Mar '12

21 Mar '12

Hello, Does dovecot support the subject Alternative Name email value [1] as ssl_cert_username_field? If so, how should it be specified in the configuration? Thanks. [1] http://www.openssl.org/docs/apps/x509v3_config.html#Subject_Alternative_Nam… -- Nicolas

1 1

[Dovecot] bug uni_utf8_str_is_valid(vname)
by Jernej Porenta 20 Mar '12

20 Mar '12

Heya, We are expiriencing issues with dovecot 2.1.1 on Linux with weird filenames in home directory of username. We are using mbox IMAP folders, with no special changes (mail_location = mbox:~/:INBOX=%h/.mailbox). Mar 6 13:37:17 machine dovecot: imap(username): Panic: file mail-storage.c: line 628 (mailbox_alloc): assertion failed: (uni_utf8_str_is_valid(vname)) Mar 6 13:37:17 machine dovecot: imap(username): Error: Raw backtrace: /opt/dovecot-2.1.1/lib/dovecot/libdovecot.so.0 [0x2ba41cb79450] -> /opt/dovecot-2.1.1/lib/dovecot/libdovecot.so.0 [0x2ba41cb794a6] -> /opt/dovecot-2.1.1/lib/dovecot/libdovecot.so.0 [0x2ba41cb78963] -> /opt/dovecot-2.1.1/lib/dovecot/libdovecot-storage.so.0 [0x2ba41c87ebd5] -> /opt/dovecot-2.1.1/lib/dovecot/libdovecot-storage.so.0 [0x2ba41c88c12c] -> /opt/dovecot-2.1.1/lib/dovecot/libdovecot-storage.so.0(fs_list_iter_next+0x1b4) [0x2ba41c88c494] -> /opt/dovecot-2.1.1/lib/dovecot/libdovecot-storage.so.0 [0x2ba41c885342] -> /opt/dovecot-2.1.1/lib/dovecot/libdovecot-storage.so.0(mailbox_list_iter_next+0x234) [0x2ba41c885604] -> dovecot/imap [0x40b2d1] -> dovecot/imap(cmd_list_full+0x520) [0x40c1f0] -> dovecot/imap(cmd_list+0xb) [0x40c3eb] -> dovecot/imap(command_exec+0x37) [0x410427] -> dovecot/imap [0x40f4cd] -> dovecot/imap [0x40f582] -> dovecot/imap(client_handle_input+0x3f) [0x40f6cf] -> dovecot/imap(client_input+0x62) [0x410052] -> /opt/dovecot Mar 6 13:37:17 machine dovecot: imap(username): Fatal: master: service(imap): child 20873 killed with signal 6 (core dumps disabled) The bug is reproducible by using home folder structure available from: http://bit.ly/x8pTXS AFAIK, the problem lies in processing the file list of home folder, which can contain filenames that do not have proper UTF-8 encoding of filenames, which causes dovecot to crash. On the other hand, UTF-8 filenames created on the system by hand (using touch), are not displayed in IMAP LIST command (sample is included in the folder structure; single letter file). Cheers, Jernej

2 7

[Dovecot] Antispam plugin not compatible with Dovecot 2.1
by interfaSys sàrl 20 Mar '12

20 Mar '12

Here is what I get when I try to compile the antispam plugin agaisnt Dovecot 2.1 ************** mailbox.c: In function 'antispam_save_begin': mailbox.c:138:12: error: 'struct mail_save_context' has no member named 'copying' mailbox.c: In function 'antispam_save_finish': mailbox.c:174:12: error: 'struct mail_save_context' has no member named 'copying' Failed to compile mailbox.c (plugin)! gmake[3]: *** [mailbox.plugin.o] Error 1 ************** The other objects compile fine. Cheers, Olivier

4 5

[Dovecot] dovecot, sieve and vacation
by Cedric Jeanneret 20 Mar '12

20 Mar '12

Hi there ! Have a small problem with sieve and vacation: it seems to descard the vacation filter I created instead of sending back an email: Mar 20 11:56:28 hostname dovecot: deliver(virtual_user): sieve: msgid=unspecified: discarding vacation response for message implicitly delivered to <virtual_user@hostname> after searching a bit on the net, I stumbled on another (old) thread: http://www.mail-archive.com/dovecot@dovecot.org/msg25955.html I'm not really sure it's the same problem, as I'm sending the mail from another host (via telnet, for testing purpose). Other sieve rules (such as flagging, moving and so on) work fine. Only vacation is crapy. Here's the roundcube generated rule: require ["vacation"]; if true { vacation :days 2 "on holidays!"; } Any help welcome :) Cheers, C. Informations: # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-6-pve i686 Debian 6.0.4 simfs log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps pop3s managesieve listen(default): * listen(imap): * listen(pop3): * listen(managesieve): localhost:2000 ssl_cipher_list: ALL:!LOW:!SSLv2 login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login first_valid_uid: 8 mail_privileged_group: mail mail_uid: mail mail_gid: mail mail_location: maildir:/var/local/vmail/%n mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve managesieve_logout_format(default): bytes=%i/%o managesieve_logout_format(imap): bytes=%i/%o managesieve_logout_format(pop3): bytes=%i/%o managesieve_logout_format(managesieve): bytes ( in=%i : out=%o ) lda: postmaster_address: foo(a)bar.com mail_plugins: sieve auth default: mechanisms: plain login user: mail passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf.ext userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf.ext socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: mail master: path: /var/run/dovecot/auth-master mode: 432 user: postfix group: mail plugin: home: /var/local/vmail/%u sieve: /var/local/vmail/%n/.dovecot.sieve sieve_dir: /var/local/vmail/%n/sieve sieve_extensions: +notify +imapflags

2 2

[Dovecot] Dsync Dovecot
by Jitendra Bhaskar 20 Mar '12

20 Mar '12

Hey Frnds, Could you tell me about the error : # dsync -Dv -u jitendra.b(a)example.com mirror jitendra.b(a)example.com doveadm(root): Debug: Loading modules from directory: /usr/local/lib/dovecot/doveadm doveadm(root): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_lookup (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_zlib_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_zlib_plugin.so: undefined symbol: i_stream_create_deflate (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_list_backend (this is usually intentional, so just ignore this message) doveadm(jitendra.b(a)example.com): Debug: Effective uid=3846, gid=3846, home=/home/example1.com/jitendra.b doveadm(jitendra.b(a)example.com): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:/home/ example.com/jitendra.b/mail:INBOX=/var/spool/example.com/jitendra.b doveadm(jitendra.b(a)example.com): Debug: fs: root=/home/ example.com/jitendra.b/mail, index=, control=, inbox=/var/spool/ example.com/jitendra.b, alt= dsync-local(jitendra.b(a)example.com): Debug: Namespace : Using permissions from /home/example.com/jitendra.b/mail: mode=0777 gid=-1 doveadm(jitendra.b): Fatal: User doesn't exist dsync-local(jitendra.b(a)example.com): Error: read() from worker server failed: EOF -- * Thanks & Regards * *Jitendra Kumar Bhaskar* Cell:- +91 7306311531 +91 8102997821

2 1

[Dovecot] Dovecot with postfix setup
by evolution age 20 Mar '12

20 Mar '12

Hey frnds, Could you suggest me any ebook or documentation for the setup of dovecot with postfix on centos 5.7 . I need it. -- Warm Regards Jitendra Kumar Bhaskar cell :- +91-8886742555

3 2

[Dovecot] IMAP and POP3 per SSL
by Lamprecht, Andreas 20 Mar '12

20 Mar '12

Hi! I'm new to this list and i could not find a way to search through the already posted articles, so please forgive me if this subject has been discussed before. Our security scanner stumbled over the IMAPs server i've set up recently using dovecot on a RedHat Enterprise 64bit Server. The security scanner found an error regarding a new SSL security leak named "BEAST". The exact error number is CVE-2011-3389. Details can be found here: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3389 "The internet" has some workarounds for this problem. For example, in Apache webserver, you need to set SSLHonorCipherOrder On in apache config. This results in the following C-Code being executed: SSL_CTX_set_options(ctx, SSL_OP_CIPHER_SERVER_PREFERENCE); This setting tells OpenSSL not to honor the Ciper Order sent from the client, but prefer it's own configured set of CipherSuites. According to Qualis SSL Labs ( https://www.ssllabs.com/ssldb/index.html ), a webserver configured with this setting is not affected by that BEAST security leak. Is there a way to implement such a setting into Dovecot, too? I have created a very quick and dirty solution to avoid being listed on our internal security problem's list. This patch is for dovecot 2.0.9 which is included in Redhat Enterprise Linux 6.2: *** src/login-common/ssl-proxy-openssl.c 2010-12-30 10:42:54.000000000 +0100 --- src/login-common/ssl-proxy-openssl.c_1 2012-03-20 09:48:28.359508087 +0100 *************** *** 924,930 **** X509_STORE *store; STACK_OF(X509_NAME) *xnames = NULL; ! SSL_CTX_set_options(ssl_ctx, SSL_OP_ALL | SSL_OP_NO_SSLv2); if (*set->ssl_ca != '\0') { /* set trusted CA certs */ store = SSL_CTX_get_cert_store(ssl_ctx); --- 924,930 ---- X509_STORE *store; STACK_OF(X509_NAME) *xnames = NULL; ! SSL_CTX_set_options(ssl_ctx, SSL_OP_ALL | SSL_OP_NO_SSLv2 | SSL_OP_CIPHER_SERVER_PREFERENCE ); if (*set->ssl_ca != '\0') { /* set trusted CA certs */ store = SSL_CTX_get_cert_store(ssl_ctx); Of course there should be a way to switch this setting on or off, but my C programming skills are rather basic ... So, maybe you have the time to look over it and implement a final solution for the BEAST problem. Greetings Andreas lamprecht

2 2

[Dovecot] INBOX cant be created
by Radim Kolar 20 Mar '12

20 Mar '12

Inbox does not exists on disk, but following command sequence will not create it. 2 select INBOX 2 NO Mailbox doesn't exist: INBOX 3 create INBOX 3 NO [ALREADYEXISTS] Mailbox already exists: INBOX i think its bug

4 5

[Dovecot] Problem with sieve
by Cédric Jeanneret 20 Mar '12

20 Mar '12

Hello List! I have a tiny-teeny problem with dovecot + sieve: it seems that the LDA doesn't run sieve, and thus doesn't filter my emails. Here's the sieve configuration: plugin { # Used by both the Sieve plugin and the ManageSieve protocol sieve=/var/local/vmail/%n/dovecot.sieve sieve_dir=/var/local/vmail/%n/sieve sieve_extensions = +notify +imapflags } The managesiege: protocol managesieve { # Specify an alternative address:port the daemon must listen on # (default: *:2000) listen = localhost:2000 managesieve_logout_format = bytes ( in=%i : out=%o ) } (this one is working fine, I can edit the filters through roundcube webmail, and the correct file (/var/local/vmail/%n/dovecot.sieve) is edited) the lda part: protocol lda { postmaster_address = foo(a)bar.com mail_plugins = sieve } I think all is in place to allow dovecot to use sieve... ? One more thing: dovecot --version 1.2.15 Any help will be welcomed :). Thanks in advance ! Cheers, C.

5 12

[Dovecot] Per-user IMAP enable - is it possible?
by Alexander Chekalin 20 Mar '12

20 Mar '12

Just wonder if it is possible to enable/disable IMAP4 on Dovecot (2.0.x as far) on per-user basis? The deal is simple: our policy is not to store a lot of mailing on mailserver (the user should store it locally), thus the 'use POP3' approach, but for a vary few users it is permitted to use IMAP4. But users sometimes simple miss the point that some mail clients (e.g. TB) 'prefer' to use IMAP4 first, and afterward I see mailbox full of mailings and no local store of it on user's workstation. Sound too complicated, but setting up two Dovecots is not something I'd love to do as well. Thank you for any ideas, Alexander

3 4

[Dovecot] Dsync Dovecot
by Jitendra Bhaskar 20 Mar '12

20 Mar '12

Hi guys, I am using dovecot-2.1.0 in centos 5.7, I configured dovecot with postfix in 2 system both system is having same configuration and os. I want to use dsync in mirror mode via ssh but I am not able to do it. When I followed the dsync wiki then I an unable to find the username : *dsync -u username mirror ssh -i id_dsa.dovecot mailuser(a)example.com dsync -u username* In the above command what will b user name and id_dsa.dovecot I am unable to understand. -- * Thanks & Regards * *Jitendra Kumar Bhaskar* Cell:- +91 7306311531 +91 8102997821

2 1

Re: [Dovecot] Using plaintext auth and SSL
by Jeff Simmons 20 Mar '12

20 Mar '12

On Monday, March 19, 2012 04:16:46 pm you wrote: > On 3/19/2012 4:04 PM, Jeff Simmons wrote: > > I'm working with a company that presently has a Linux mailserver which > > all users have (no shell) accounts on. Mail is accessed via pop3 with > > plaintext authentication. They want to move to a system using imap with > > SSL. I'm building them a new server. I'd like to offer both for a while > > so we can work the bugs out and migrate users over to SSL imap over > > time. It appears that in order to limit the imap connections to SSL I > > will need to run two separate instances of Dovecot. Is this correct? > > I only have SSL or TLS connections enabled and I only have one copy of > Dovecot running. Let me rephrase that. I want to run plaintext authentication pop3 and ssl/tls only authentication imap. The 'allow plaintext authentication' configuration directive appears to be global, meaning I will need to run two instances of dovecot for a while. Is that correct, or can this be done on a single instance of dovecot? -- Jeff Simmons jsimmons(a)goblin.punk.net Simmons Consulting - Network Engineering, Administration, Security "You guys, I don't hear any noise. Are you sure you're doing it right?" -- My Life With The Thrill Kill Kult

5 6

[Dovecot] Using plaintext auth and SSL
by Jeff Simmons 20 Mar '12

20 Mar '12

I'm working with a company that presently has a Linux mailserver which all users have (no shell) accounts on. Mail is accessed via pop3 with plaintext authentication. They want to move to a system using imap with SSL. I'm building them a new server. I'd like to offer both for a while so we can work the bugs out and migrate users over to SSL imap over time. It appears that in order to limit the imap connections to SSL I will need to run two separate instances of Dovecot. Is this correct? -- Jeff Simmons jsimmons(a)goblin.punk.net Simmons Consulting - Network Engineering, Administration, Security "You guys, I don't hear any noise. Are you sure you're doing it right?" -- My Life With The Thrill Kill Kult

1 0

[Dovecot] Creating an IMAP repo for ~100 users need some advice
by Kaya Saman 19 Mar '12

19 Mar '12

Hi, I am currently in the process of setting up an IMAP repository for round 100 users.... Currently the user authentication method is being handled via a Windows Domain Controller. The host OS for Dovecot will either be FreeBSD or CentOS. Would Dovecot be able to authenticate to either the DC directly or would we need to go through LDAP?? Additionally what would be the best method to store the **mail** information? - as in MySQL database or Maildir format; coinciding with this what is the best backup method in order to be able to do 'dump' backups or restore single emails?? Can anyone give me a hand with this? Regards, Kaya

8 21

[Dovecot] Accessing maildir snapshots through dovecot
by Laurent CARON 19 Mar '12

19 Mar '12

Hi, I'm currently having a fairly simple setup: - users (real, not virtual) - Maildir storage (over NFS) - 1 namespace I'm currently trying to render the storage snapshots available through dovecot (to allow my users to browse their mail history). dovecot.conf: namespace { inbox = yes location = prefix = INBOX. type = private } I did the following modifications: dovecot.conf: namespace snaps-h0 { prefix = INBOX.EmailBackup.h0. hidden = no list = yes inbox = no location = maildir:/home/.snapshot/hourly.0/%u/Maildir:INDEX=/var/tmp/dovecot/indexes/hourly.0/%u:CONTROL=/var/dovecot/control/hourly.0/%u type = private } Problem: I don't see the content of the inbox folder contained in the snapshots (subfolders are perfectly viewed). Do any of you have a clue on how to render it visible ? Thanks Laurent

3 3