- dovecot - dovecot.org

[Dovecot] returned error 89
by Robert Schetterer 18 Jun '11

18 Jun '11

Hi Timo, i have very rare ( ultra rare....) failures like this with latest dovecot 2 log: Error: service(pop3-postlogin): child 16691 returned error 89 (Fatal failure) imap-postlogin: Error: script-login: Fatal: Internal error occurred. Refer to server log for more information. Jun 14 18:41:16 mail02 dovecot: log: Error: service(imap-postlogin): child 31645 returned error 89 (Fatal failure) any idea? the conf i allready posted with also rare lmtp error uid=error today first an only one seen Error: read(/var/run/dovecot/dict) failed: Timeout after 30 seconds lmtp(31698, ...@...): Error: Internal quota calculation error -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

1 2

[Dovecot] process already running
by Joy 18 Jun '11

18 Jun '11

Hi, I have running dovecot installation and i am quite happy with it but in one of my installation if system's power fail it doesn't remove master.pid which prevent system to start the service in next boot. I have to manually remove file and start the proess. We are running version 2.0.12. Thanks

1 0

[Dovecot] Default Global ACL
by Daniel L. Miller 17 Jun '11

17 Jun '11

Can I use the .DEFAULT files with global acls to access all mailboxes without explicitly sharing them first? Or must a share be created for every individual mailbox before they will appear in the shared namespace? -- Daniel

1 0

[Dovecot] ACL Groups
by Daniel L. Miller 17 Jun '11

17 Jun '11

From the wiki: ACL groups support works by returning a comma-separated acl_groups extra field <http://wiki2.dovecot.org/UserDatabase/ExtraFields> from userdb, which contains all the groups the user belongs to. User's UNIX groups have no effect on ACLs (you can "enable" them by using a special post-login script <http://wiki2.dovecot.org/PostLoginScripting>). I've read that over several times - I still don't understand that. Are "ACL Groups" defined and managed by Dovecot - and described somewhere else in the docs - or are they UNIX groups that previously had no affect on mail access but by being listed in the "acl_groups" field they now have relevance? -- Daniel

3 4

[Dovecot] pop3-login Error after dovecot 1.2.11 to dovecot 2.0.13
by Bradley Giesbrecht 17 Jun '11

17 Jun '11

I recently upgaded from dovecot 1.2.11 to 2.0.13. I used this command on my dovecont.conf after the upgrade and then moved the new file into place after removing some plugins. $ sudo doveconf -n -c dovecot-1.conf > dovecot-2.conf After 24+ hours with no issues I was getting pop3 login failures. ... /path/to/log/dovecot.log:master: Error: service(pop3): read(status) failed: Interrupted system call ... /path/to/log/dovecot.log:Jun 17 05:25:47 pop3-login: Error: master(pop3): Auth request timed out (received 0/12 bytes) /path/to/log/dovecot.log:Jun 17 05:25:47 pop3-login: Info: Internal login failure (pid=1796 id=1) (auth failed, 1 attempts): user=<rriveter(a)domainname.com>, method=APOP, rip=123.4.5.6, lip=123.7.8.9 /path/to/log/dovecot.log:Jun 17 05:25:47 pop3-login: Error: master(pop3): Auth request timed out (received 0/12 bytes) /path/to/log/dovecot.log:Jun 17 05:25:47 pop3-login: Info: Internal login failure (pid=1797 id=1) (auth failed, 1 attempts): user=<jdoe(a)domainname.com>, method=APOP, rip=123.4.5.6, lip=123.7.8.9 /path/to/log/dovecot.log:Jun 17 05:25:47 pop3-login: Error: master(pop3): Auth request timed out (received 0/12 bytes) /path/to/log/dovecot.log:Jun 17 05:25:47 pop3-login: Info: Internal login failure (pid=1798 id=1) (auth failed, 1 attempts): user=<gkhan(a)domainname.com>, method=APOP, rip=123.4.5.6, lip=123.7.8.9 /path/to/log/dovecot.log:Jun 17 05:25:47 pop3-login: Error: master(pop3): Auth request timed out (received 0/12 bytes) ... /path/to/log/dovecot.log:Jun 17 05:40:34 pop3-login: Error: net_connect_unix(pop3) failed: Operation timed out ... Bouncing dovecot has resolved the login issues for the present. Reading from the wiki I see my post-login scripts will need changing. http://wiki2.dovecot.org/Upgrading/2.0 Is there anything else obviously/dangerously wrong with the following doveconf output? I'm am still in the process of moving directives out of dovecot.conf into the new conf.d files. $ doveconf -n # 2.0.13: /path/to/etc/dovecot/dovecot.conf # OS: Darwin 9.8.0 Power Macintosh hfs auth_mechanisms = plain login cram-md5 ntlm apop default_internal_user = _dovecot default_login_user = _dovenull disable_plaintext_auth = no log_path = /path/to/log/dovecot.log mail_location = dbox:/path/to/mail/%d/%n/dbox mail_max_userip_connections = 30 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /path/to/etc/dovecot/dovecot_mysql.conf driver = sql } plugin { autocreate = Trash autocreate2 = Spam autosubscribe = Trash autosubscribe2 = Spam } protocols = imap pop3 service auth { unix_listener /path/to/var/spool/postfix/private/auth { group = _postfix mode = 0660 user = _postfix } unix_listener auth-master { mode = 0600 user = _vmail } unix_listener auth-userdb { group = _vmail user = _vmail } } service imap { executable = /path/to/dovecot/bin/log_imap_login.sh } service pop3 { executable = /path/to/dovecot/bin/log_pop3_login.sh } ssl_cert = </path/to/etc/ssl/certs/dovecot.pem ssl_key = </path/to/etc/ssl/private/dovecot.pem userdb { driver = prefetch } userdb { args = /path/to/etc/dovecot/dovecot_mysql.conf driver = sql } Thanks, Bradley Giesbrecht

1 0

[Dovecot] ACL enabled Public folder dovecot
by kumar shantanu 17 Jun '11

17 Jun '11

Hi All, I am trying to do ACL enabled Public folder on dovecot version 1.1.20, but the ACL thing is not working, the public folder is visible and accessible to everyone. My dovecot config for public folder is like ######## namespace public { separator = / prefix = Public/ location = maildir:/var/mail/public subscriptions = no } plugin { acl = vfile } ######### and I have my dovecot-acl file in /var/mail/public/.test which reads ** user=test(a)mydomain.com lrw ** but every user can see the public folders and subscribe to it, which I don't want :( Can someone please suggest. Thanks in Advance, Shantanu

2 3

[Dovecot] Converting CLIENT_MAIL_DATA_MAX_INMEMORY_SIZE to a configurable?
by Attila Nagy 17 Jun '11

17 Jun '11

Hi, Currently Dovecot's LMTPd writes incoming emails to mail_temp_dir if it's bigger than 128k. But I would like to spare those unnecessary operations (creating a file, deleting it, writing into it, reading from it, checking whether there is free space and if not, rejecting (temporarily) the message). Memory is cheap, disk IO is not. :) And BTW, on a lot of systems, /tmp is a memory file system already, so there is absolute no need for this. I only fired two greps so far before writing this mail, in the hope that I can spare writing, testing and sending a patch, which will be either rejected, or rewritten. :) So, am I right that the following constant would be needed to be converted into a configurable setting and the task is done? static int client_input_add(struct client *client, const unsigned char *data, size_t size) { if (client->state.mail_data->used + size <= CLIENT_MAIL_DATA_MAX_INMEMORY_SIZE && client->state.mail_data_output == NULL) { buffer_append(client->state.mail_data, data, size); return 0; } else { return client_input_add_file(client, data, size); } } It could be defaulted to 128k, but the user could set it "unlimited" (0 or -1, depending on the author's mood, 0 and/or -1 being unlimited, or 0 being 0, meaning don't even store a bit -doesn't really make sense to me). LMTP is mostly protected from the outside world, so I don't see too much DoS potential here (absolutely not more than in the tmpfs case). Thanks,

2 2

[Dovecot] I can't setup namespace per user (with settings keept in sql db)
by Marcin Mirosław 17 Jun '11

17 Jun '11

Hello! I'm trying to setup additional namespace. I'd like to have this setting per user and keep it in postgresql. Global namespace is defined in this way: namespace { inbox = yes location = prefix = separator = . } (mail_location is getting from db) I don't know how should looks like database field:( Now i have such configuration: user_query = select .... dovecot_location AS location, dovecot_namespace AS namespace FROM ... In db i have this: # select dovecot_location, dovecot_namespace from exim_users where dovecot_namespace is not null; dovecot_location | dovecot_namespace ---------------------------+------------------- location="mdbox:~/.mdbox" | prefix="testn" (1 row) but this isn't good configuration. I've got in log: debug: sql(marcin(a)mejor.pl,62.121.127.119): SELECT '/dane/domeny/mejor.pl/mail/marcin/' as home, dovecot_typ_skrzynki ||':'|| '/dane/domeny/mejor.pl/mail/marcin/' ||' .'|| dovecot_typ_skrzynki as mail_location, '*:bytes='||quota_mb||'M' as quota_rule , dovecot_location AS location, dovecot_namespace AS namespace FROM exim_users WHE RE login = lower('marcin') AND domena = lower('mejor.pl') Debug: master out: USER#0112138832897#011marcin@mejor.pl#011home=/dane/domeny/mejor.pl/mail/marcin/#011mail_location=maildir:/dane/domeny/mejor.pl/mail/marcin/.maildi r#011quota_rule=*:bytes=0M#011location=location="mdbox:~/.mdbox"#011namespace=prefix="testn" Login: user=<marcin(a)mejor.pl>, method=CRAM-MD5, rip=62.121.127.119, lip=193.238.12.139, mpid=17929, TLS Debug: Loading modules from directory: /usr/lib/dovecot Debug: Module loaded: /usr/lib/dovecot/lib10_quota_plugin.so Debug: Module loaded: /usr/lib/dovecot/lib11_imap_quota_plugin.so Debug: Module loaded: /usr/lib/dovecot/lib15_notify_plugin.so Debug: Module loaded: /usr/lib/dovecot/lib20_autocreate_plugin.so Debug: Module loaded: /usr/lib/dovecot/lib20_fts_plugin.so Debug: Module loaded: /usr/lib/dovecot/lib20_mail_log_plugin.so Debug: Module loaded: /usr/lib/dovecot/lib20_zlib_plugin.so Debug: Module loaded: /usr/lib/dovecot/lib21_fts_squat_plugin.so Debug: Module loaded: /usr/lib/dovecot/lib30_imap_zlib_plugin.so Debug: Added userdb setting: mail_location=maildir:/dane/domeny/mejor.pl/mail/marcin/.maildir Debug: Added userdb setting: plugin/quota_rule=*:bytes=0M Debug: Added userdb setting: plugin/location=location="mdbox:~/.mdbox" Debug: Added userdb setting: namespace=prefix="testn" Debug: Effective uid=8, gid=12, home=/dane/domeny/mejor.pl/mail/marcin/ Debug: Quota root: name=User quota backend=dict args=:proxy::quota Debug: Quota rule: root=User quota mailbox=* bytes=0 messages=0 Debug: dict quota: user=marcin(a)mejor.pl, uri=proxy::quota, noenforcing=0 Debug: Namespace : type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/dane/domeny/mejor.pl/mail/marcin/.maildir Debug: maildir++: root=/dane/domeny/mejor.pl/mail/marcin/.maildir, index=, control=, inbox=/dane/domeny/mejor.pl/mail/marcin/.maildir Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=no, list=yes, subscriptions=yes location=maildir:/dane/domeny/mejor.pl/mail/marcin/.maildir Debug: maildir++: root=/dane/domeny/mejor.pl/mail/marcin/.maildir, index=, control=, inbox= Error: user marcin(a)mejor.pl: Initialization failed: namespace configuration error: Duplicate namespace prefix: "" Error: Invalid user settings. Refer to server log for more information. I've got stuck, i don't have idea how configuration should looks:( Thanks for any help! dovceot-2.0.13

1 0

Re: [Dovecot] ZFS Filesystem Quota under Solaris 10 and Sparc
by Roger Fujii 17 Jun '11

17 Jun '11

*Jürgen Obermann wrote:* > Since we upgraded last year to Solaris 10 with zfs filesystems on our > Sparc server still using a similar setup with separate filesystems for > home directories and inboxes we have no working quota plugin anymore. > Currently we use dovecot 2.0.13. > > Are there any plans or whishes to get the filesystem quota code > working again under zfs and Solaris? > How are you setting up the zfs quotas? The original zfs implementation didn't have user quotas. You could only add quotas to individual file systems as a whole. They apparently added it into the source base in 2009: http://blogs.oracle.com/chrisg/entry/user_and_group_quotas_for but I'm not sure when/if it made it to production. My sol10u8 * (10/09) has it in the man page, but I know some things in the man page isn't in s10 (like sharesmb), so, as they say, ymmv. The current doc for user quotas are here: http://download.oracle.com/docs/cd/E19253-01/819-5461/gazud/index.html If you don't want to use the filesystem quotas, you have to change your rules/configuration to match what dovecot has. See doc/wiki/Quota.Configuration.txt. Hope this helps. -r

1 0

[Dovecot] quota_rule beeing ignored and set to system soft! quota
by Leon Meßner 16 Jun '11

16 Jun '11

Hi, originating from the same Problem Edgar Fuß described here [1] about "Zero-sized Maildir files and index corruption on over-quota" i setup quota = fs:user quotas with a quota_rule set to 1.5G to prevent getting those zero sized mail files. What happens now is that when the user is over system soft quota (1G) mails stop beeing delivered. Jun 16 19:05:45 mail dovecot: deliver(elont1): msgid=<20110616185545.05ab0f56@x201t>: save failed to INBOX: Quota exceeded (mailbox for user is full) This is bad as users get notified per mail by a script about beeing over quota (this mail is now beeing deferred). If i don't set a quota_rule i still get 0byte files (quota is ignored). If i set a higher than system quota quota_rule it still uses the system soft quota. I have a seconary mailserver which already uses dovecot 2.x but i can't test the feature there as it's running inside a jail and thus has no access to quota. I would like to keep this machine on 1.2.16 for now. dovecot -n output is below. thanks, Leon [1] http://www.dovecot.org/list/dovecot/2010-October/053554.html 19:20_root@mail:/usr/local/etc# dovecot -n # 1.2.16: /usr/local/etc/dovecot.conf # OS: FreeBSD 7.3-RELEASE-p2 amd64 log_path: /var/log/dovecot.log protocols: imaps pop3s managesieve listen: mail.physik-pool.tu-berlin.de ssl_cert_file: /etc/private/mail.physik.tu-berlin.de.pem ssl_key_file: /etc/private/physik.tu-berlin.de_privatekey.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_executable(managesieve): /usr/local/libexec/dovecot/managesieve-login login_processes_count: 6 login_max_processes_count: 512 verbose_proctitle: yes first_valid_uid: 200 mail_privileged_group: mail mail_location: maildir:~/maildir mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_executable(managesieve): /usr/local/libexec/dovecot/managesieve mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 mail_plugin_dir(managesieve): /usr/local/lib/dovecot/managesieve imap_client_workarounds(default): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): imap_client_workarounds(managesieve): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh pop3_client_workarounds(managesieve): namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: mail/ location: mbox:~/mail list: yes subscriptions: yes lda: postmaster_address: postmaster(a)physik.tu-berlin.de log_path: info_log_path: mail_plugins: sieve quota quota_full_tempfail: yes sendmail_path: /usr/sbin/sendmail auth default: mechanisms: gssapi plain login krb5_keytab: /etc/mail.krb5.keytab gssapi_hostname: mail.physik-pool.tu-berlin.de worker_max_count: 120 passdb: driver: pam args: session=yes failure_show_msg=yes max_requests=100 userdb: driver: passwd args: blocking=yes plugin: sieve: ~/.dovecot.sieve sieve_dir: ~/.sieve quota_rule: *:storage=15728640 quota: fs:user

1 0

[Dovecot] Global ACLs
by Daniel L. Miller 16 Jun '11

16 Jun '11

If I have: plugin { acl = vfile:/usr/local/etc/dovecot/global-acls:cache_secs=300 } And then a file /usr/local/etc/dovecot/global-acls/.DEFAULT with owner lrwstipekxa user=dmiller lrwstipekxa Does that give me unconditional access to all mailboxes? -- Daniel

1 0

[Dovecot] Removal of mailist duplicates?
by Peter Bell 16 Jun '11

16 Jun '11

I am using mpop to fetch mail from my service provider (who use dovecot). I use dovecot to hold all my mail on a local slackware server, with sieve filters, based on 'List-Id', directing mailist postings to their own folders. I use thunderbird to read my mail on an ubuntu desktop. When I receive a reply to a posting I make to a mailist (such as this one), replies I receive are usually sent to me with cc to the list. I would expect, then, to receive the message twice - once in my personal mailbox, and once to the mailist folder. However, this doesn't happen - I only see the posting in the mailist folder. Can anyone tell me at which stage in the process the other message is being supressed? -- ------------------------------------------------------------------- Peter Bell Mob: +63 (0) 9287 340 343 Tagum City, Philippines. Tel: +63 (0) 84 400 5085 email/msn: peter(a)bellfamily.org.uk Tel: +44 (0) 118 331 0000

4 6

[Dovecot] limiting number of login attempts from same ip
by Jürgen Obermann 16 Jun '11

16 Jun '11

Hello, is it possible to limit the number of pop3 (or imap) login attempts from one IP with dovecot to stop attackers? We recently had an attack from one IP-address lasting 50 minutes that tried 50000 pop3-logins with guessed users and passwords. I know about Fail2Ban but really would prefer an easy to configure solution inside of dovecot. Dovecot has this anvil daemon, can it be used for that purpose? We use dovcot version 2.0.12 under Solaris 10, the pop3-login part of the configuration looking like that: service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 110 ssl = no } inet_listener pop3s { address = port = 995 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 64 M } Thanks, Jürgen -- Hochschulrechenzentrum der | Mail: Juergen.Obermann(a)hrz.uni-giessen.de Justus-Liebig-Universitaet | WWW: http://www.uni-giessen.de/obermann/ Heinrich-Buff-Ring 44 | Tel: 0641-99-13054 (0641-99-13001) D-35392 Giessen, Germany | Fax: 0641-99-13009

10 14

[Dovecot] dovecot-managesieve
by Richard Gliebe 16 Jun '11

16 Jun '11

Hi all, I have to implement a Out of Office Tool on our dovecot IMAP Server. Recently I updated dovecot-1.0.7-7.el5 to dovecot-1.1.20-1_98.el5 on our CentOS release 5.6 (Final) box via "yum update" # cat /etc/yum.conf .... [atrpms] name=Fedora Core $releasever - $basearch - ATrpms baseurl=http://dl.atrpms.net/el$releasever-$basearch/atrpms/stable gpgkey=http://ATrpms.net/RPM-GPG-KEY.atrpms gpgcheck=1 # .... After it, I installed dovecot-managesieve-0.11.12-0_5.1.el5 via yum install. These are my sieve settings in /etc/dovecot.conf: ....... version_ignore=yes # Log file to use for error messages, instead of sending them to syslog. # /dev/stderr can be used to log into stderr. log_path = /var/log/dovecot.log # Protocols we want to be serving: imap imaps pop3 pop3s managesieve # If you only want to use dovecot-auth, you can set this to "none". #protocols = imap imaps pop3 pop3s protocols = imaps pop3s pop3 managesieve mail_debug=yes protocol managesieve { # Specify an alternative address:port the daemon must listen on # (default: *:2000) #listen = localhost:2000 managesieve_logout_format = bytes ( in=%i : out=%o ) # Duplicated from plugin section sieve=~/.dovecot.sieve sieve_storage=~/sieve } plugin { # Settings for the Sieve plugin sieve=~/.dovecot.sieve sieve_dir=~/sieve } ...... After restarting dovecot, I'm getting the following errors in dovecot.log: dovecot: Jun 10 08:50:14 Info: dovecot v1.1.20 starting up (core dumps disabled) dovecot: Jun 10 08:50:16 Error: login: Login request missing a file descriptor dovecot: Jun 10 08:50:16 Error: Temporary failure in creating login processes, slowing down for now dovecot: Jun 10 08:50:16 Warning: managesieve-login: managesieve-login: capability string is empty. dovecot: Jun 10 08:50:16 Error: login: Login request missing a file descriptor dovecot: Jun 10 08:50:16 Warning: managesieve-login: managesieve-login: capability string is empty. dovecot: Jun 10 08:50:16 Error: login: Login request missing a file descriptor dovecot: Jun 10 08:50:16 Warning: managesieve-login: managesieve-login: capability string is empty. dovecot: Jun 10 08:50:16 Info: Created login processes successfully, unstalling dovecot: Jun 10 08:50:17 Error: login: Login request missing a file descriptor dovecot: Jun 10 08:50:17 Error: Temporary failure in creating login processes, slowing down for now Don't know, whats going on ..... next problem. I can't login with our Thunderbird Clients to our IMAP/sieve Server (Port 2000) to edit Sieve Filters. Authentication is set to: use IMAP Username and password Port 2000 ist listening: # netstat -an | grep 2000 tcp 0 0 0.0.0.0:2000 0.0.0.0:* LISTEN tcp 0 0 192.168.1.6:2000 192.168.1.8:2882 ESTABLISHED tcp 0 0 :::2000 :::* LISTEN Out of Office: I found a plugin for our thunderbird clients: http://www.trustedbird.org/tb/Out_of_Office is this the right one? many many hints are welcome ;-) Richard

2 2

[Dovecot] URLAUTH-patch, BSD specific?
by Peter Mogensen 15 Jun '11

15 Jun '11

Hi, I notice that the Apple patched branch of Dovecot 2.0 with URLAUTH fails to compile on Linux. The file src/plugins/urlauth/urlauth-keys.c uses open(2) with O_EXLOCK, which to my knowledge is BSD specific. Is that a known problem? /Peter

2 1

[Dovecot] ZFS Filesystem Quota under Solaris 10 and Sparc
by Jürgen Obermann 15 Jun '11

15 Jun '11

Hallo. Filesystem quotas used to work well under Solaris 9 and ufs filesystems on the Sparc platform even with two rules for the folders in the users home directories /home/group/user and the separate filesystem /var/mail holding the inboxes: plugin { quota = fs:Home-Verzeichnis:noenforcing quota2 = fs:INBOX:noenforcing:mount=/var/mail } Since we upgraded last year to Solaris 10 with zfs filesystems on our Sparc server still using a similar setup with separate filesystems for home directories and inboxes we have no working quota plugin anymore. Currently we use dovecot 2.0.13. Are there any plans or whishes to get the filesystem quota code working again under zfs and Solaris? Best whishes, Jürgen -- Hochschulrechenzentrum der | Mail: Juergen.Obermann(a)hrz.uni-giessen.de Justus-Liebig-Universitaet | WWW: http://www.uni-giessen.de/obermann/ Heinrich-Buff-Ring 44 | Tel: 0641-99-13054 (0641-99-13001) D-35392 Giessen, Germany | Fax: 0641-99-13009

1 0

[Dovecot] Per-user "Seen" flags on public folder
by Torsten Harenberg 15 Jun '11

15 Jun '11

Dear all, sorry to bother the list again, I have a small configuration issue again with public (shared) folders. These folders should have per-user Seen flags, so I configured: namespace { type = public separator = . prefix = public. location = maildir:/var/mail/public:INDEX=%u/public subscriptions = no list = children } But this only seems to work with my account (presumably as I was the first one who touched the folder), all other users cannot change the "Seen" flags My home dir is set to /home/mail/harenber and there is a: mail# ls -l total 1162 -rwxrwxrwx 1 10001 wheel 4016 Jun 9 13:27 dovecot.index -rwxrwxrwx 1 10001 wheel 1125376 Jun 14 11:26 dovecot.index.cache -rwxrwxrwx 1 10001 wheel 2140 Jun 9 13:40 dovecot.index.log -rwxrwxrwx 1 10044 wheel 33792 Jun 9 13:28 dovecot.index.log.2 mail# pwd /home/mail/harenber/harenber/public/.fb8 (don't know why my username appears twice). which looks the same on some other account: mail# ls -l total 1380 -rw-rw-rw- 1 10002 wheel 4016 Jun 9 19:40 dovecot.index -rw-rw-rw- 1 10002 wheel 1364992 Jun 10 10:54 dovecot.index.cache -rwxrwxrwx 1 10114 wheel 16072 Jun 10 10:54 dovecot.index.log mail# pwd /home/mail/sandhoff/sandhoff/public/.fb8 The public folder looks like this: mail# pwd /var/mail/public/.fb8 mail# ls -l total 52 drwxrwxrwx 2 root wheel 512 Jun 9 13:05 cur -rwxrwxrwx 1 root wheel 54 Jun 9 13:11 dovecot-acl -rwxrwxrwx 1 root wheel 97 Jun 9 13:05 dovecot-keywords -rw-rw-rw- 1 10001 wheel 18513 Jun 9 13:27 dovecot-uidlist drwxrwxrwx 2 root wheel 23552 Jun 9 13:05 new -rwxrwxrwx 1 root wheel 0 Jun 9 13:05 subscriptions drwxrwxrwx 2 root wheel 512 Jun 9 13:05 tmp Does anybody see what I did (again) wrong? (doveconf -n at the end, as allways) Thanks Torsten -- <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> <> <> <> Dr. Torsten Harenberg harenberg(a)physik.uni-wuppertal.de <> <> Bergische Universitaet <> <> FB C - Physik Tel.: +49 (0)202 439-3521 <> <> Gaussstr. 20 Fax : +49 (0)202 439-2811 <> <> 42097 Wuppertal <> <> <> <><><><><><><>< Of course it runs NetBSD http://www.netbsd.org ><> mail# doveconf -n # 2.0.13: /usr/pkg/etc/dovecot/dovecot.conf # OS: NetBSD 5.1 amd64 ffs auth_debug = yes auth_verbose = yes base_dir = /var/run/dovecot/ mail_debug = yes mail_gid = 6 mail_location = maildir:/var/mail/user/%u/Maildir mail_plugins = acl managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = prefix = separator = . type = private } namespace { list = children location = maildir:/var/mail/public:INDEX=%u/public prefix = public. separator = . subscriptions = no type = public } passdb { args = /usr/pkg/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = dovecot user = dovecot } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl_ca = </etc/certificates/chain.pem ssl_cert = </etc/certificates/mail.physik.uni-wuppertal.de.crt ssl_key = </etc/certificates/mail.physik.uni-wuppertal.de.key userdb { args = /usr/pkg/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = sieve } protocol lda { mail_plugins = sieve } protocol imap { mail_plugins = acl imap_acl } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole }

1 1

[Dovecot] doveadm who: Please Headline to STDout, not to STDERR
by Denny Schierz 15 Jun '11

15 Jun '11

hi, I've created a small script to get a sum from the users and sessions (table username and table "#"), but it is annoying that the headline "username # proto (pids) (ips)" goes to STDERR, but the normal output to STDOUT. It would be nice, if both goes to the same STD :-) cu denny

2 1

[Dovecot] Timeout during APPEND
by martin f krafft 14 Jun '11

14 Jun '11

Dear list, I am running dovecot 1.2.15 on a Debian server. One user reports continuous problems synchronising her mailbox via IMAP (offlineimap, via SSH tunnel or SSL socket). It seems that she has a large, locally-created message, but the uplink bandwidth seems to be not enough to push it before dovecot times out the APPEND command. The error/exception happens inside offlineimap's Python imaplib2.py file: APPEND => no response after 30.0 secs I do not know the IMAP protocol all that well, but it seems to me like this is broken somewhere. Could you please help me figure out the problem? -- martin | http://madduck.net/ | http://two.sentenc.es/ "man sagt nicht 'nichts!', man sagt dafür 'jenseits' oder 'gott'." - friedrich nietzsche spamtraps: madduck.bogus(a)madduck.net

2 7

[Dovecot] SSL comunication problems with client side.
by Denis Iskandarov 14 Jun '11

14 Jun '11

I can get messages without SSL with no problems. but i need to setup server accept only SSL secured connections. I think my configuration is very proper, but cant find "obvious" problem. Postfix 2.3.3 + dovecot 2.0.13-1_129.el5 + PostfixAdmin 2.3.3 I made own CA. configured postfix and dovecot with same cert key ca. Same public cert i gave for client just converted it to PKCS#12. I cant undestand valid and invalid certs strings in long, they look same. You can check logs and config bellow. Also some other questions regarding SSL: 1. How to make client MUA (thunderbird) automatically retrieve certificate ? My thunderbird cant do it by itself so i'm importing mail cert by myself. 2. If i want to setup Roundcube/Squirrelmail webmail clients with TLS support (https) i have to provide them with same certificates as dovecot and postfix have. Or in this case i can use whatever certificate dedicated for with "virtualhost"? dovecot-deliver.log: Jun 13 13:26:42 imap-login: Info: Invalid certificate: unable to get certificate CRL: /C=GE/ST=Tbilisi/O=Caucasus Digital Network/OU=Mail Server/CN=mx.office.dev/emailAddress=hostmaster(a)office.dev Jun 13 13:26:42 imap-login: Info: Invalid certificate: unable to get certificate CRL: /C=GE/ST=Tbilisi/L=Tbilisi/O=Caucasus Digital Network/OU=Caucasus Digital Network/CN=Caucasus Digital Network/emailAddress=hostmaster(a)office.dev Jun 13 13:26:42 imap-login: Info: Valid certificate: /C=GE/ST=Tbilisi/L=Tbilisi/O=Caucasus Digital Network/OU=Caucasus Digital Network/CN=Caucasus Digital Network/emailAddress=hostmaster(a)office.dev Jun 13 13:26:42 imap-login: Info: Valid certificate: /C=GE/ST=Tbilisi/O=Caucasus Digital Network/OU=Mail Server/CN=mx.office.dev/emailAddress=hostmaster(a)office.dev Jun 13 13:26:42 auth: Info: PLAIN(?,192.168.0.11): Client didn't present valid SSL certificate Jun 13 13:26:42 auth: Info: LOGIN(?,192.168.0.11): Client didn't present valid SSL certificate Jun 13 13:26:42 auth: Info: PLAIN(?,192.168.0.11): Client didn't present valid SSL certificate Jun 13 13:26:42 imap-login: Info: Disconnected (client sent an invalid cert): method=PLAIN, rip=192.168.0.11, lip=192.168.0.31, TLS maillog. Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x10, ret=1: before/accept initialization [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: before/accept initialization [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read client hello A [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write server hello A [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write certificate A [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write certificate request A [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 flush data [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read client certificate A [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read client key exchange A [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read certificate verify A [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read finished A [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write change cipher spec A [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write finished A [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 flush data [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x20, ret=1: SSL negotiation finished successfully [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL alert: where=0x4004, ret=256: warning close notify [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL alert: where=0x4008, ret=256: warning close notify [192.168.0.11] # doveconf -n # 2.0.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-238.9.1.el5 i686 CentOS release 5.6 (Final) ext3 auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-userdb auth_ssl_require_client_cert = yes auth_verbose = yes base_dir = /var/run/dovecot/ debug_log_path = /var/log/dovecot-deliver.log dict { expire = sqlite:/etc/dovecot/dovecot-dict-sql.conf.ext quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } first_valid_gid = 12 first_valid_uid = 1001 hostname = mx.office.dev info_log_path = /var/log/dovecot-deliver.log last_valid_gid = 12 last_valid_uid = 1001 listen = * mail_debug = yes mail_gid = 12 mail_location = maildir:/home/vmail/%d/%u mail_plugins = quota mail_privileged_group = mail mail_uid = 1001 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl passdb { args = /etc/dovecot/conf.d/sql/sql.conf driver = sql } plugin { autocreate = Trash autocreate2 = Spam autosubscribe = Trash autosubscribe2 = Spam } postmaster_address = postmaster(a)office.dev service auth { unix_listener /var/spool/postfix/private/auth { group = mail mode = 0660 user = postfix } unix_listener auth-userdb { group = mail mode = 0660 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } ssl_ca = </etc/pki/CA/cacert.pem ssl_cert = </etc/pki/CA/mail/mx.office.dev.crt ssl_key = </etc/pki/CA/mail/mx.office.dev.key ssl_verify_client_cert = yes userdb { args = /etc/dovecot/conf.d/sql/sql.conf driver = sql } verbose_ssl = yes protocol lda { mail_plugins = quota autocreate } protocol imap { imap_client_workarounds = delay-newmail mail_plugins = quota imap_quota autocreate } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh }

2 4

[Dovecot] Sieve question
by Dhaval Patel 14 Jun '11

14 Jun '11

I have successfully setup Postfix -> Dovecot with virtual users and spam filtering with spamassassin. Now the last remaining part is for the user defined rules. Let me describe my environment and what I am trying to achieve. I have Postfix setup to call spamc and deliver to Dovecot according to the master.cf line below. -------------------------------------------------------------- dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/bin/spamc -u vmail -e /usr/lib/dovecot/deliver -d ${recipient} -------------------------------------------------------------- The emails get checked by Spamassassin and are delivered to the users's mailbox (/home/vmail/username). I use an actual username (dhav) and not email address (dhaval(a)example.com) Things are working fine with that. >From reading http://wiki.dovecot.org/LDA/Sieve I see that Sieve can do global and user specified filtering. So I am planning to put the following rule into the global script so spammy emails go to the user's INBOX.spam folder. -------------------------------------------------------------- require "fileinto"; if header :contains "X-Spam-Flag" "YES" { fileinto "spam"; } -------------------------------------------------------------- My first question is, where is this global script? Do I configure the "sieve_global_dir = /etc/dovecot/sieve/"? What about he filename? Most users will not need any additional rules. There are some users that do and I am having a difficult time figuring out how it would be setup. My second question is the following. Is there a way in the global script to check if there is a file called /etc/dovecot/sieve/username or /home/vmail/username/personal_sieve_script and include it? I was using maildrop before this and procmail before that so I apologies for sounding stupid if this is not how Sieve scripts work. I am by no means tied the methods I describe above. If anyone knows of a better way to achieve what I am trying to do, I would appreciate if you let me know of it. Thanks, Dhaval

2 1

[Dovecot] Version differences, trash, upgrade
by José Antonio Suarez Pinzón 14 Jun '11

14 Jun '11

Hello everybody, I have some basic questions: 1. how can I configure the auto-empty trash plugin for all users after 3 or 4 days (This is very important, regular users do not clean their trash, or are using blackberry and do not have an option to do it or simply, do not care about it) 2. difference between version 1.2.17 and latest 2 version of Dovecot, have the version 2 an automatic option for the trash thing? 3. me as a basic skilled user, how can I made the upgrade to version 2 without major risks, I mean I do not want to leave everybody on my server without mail. I am a novice in all of this stuff, so please excuse me if I am making dumb questions. Thanks in advance for your help. Information about my installation. # 1.2.17: /etc/dovecot.conf # OS: Linux 2.6.18-164.11.1.el5 x86_64 CentOS release 5.6 (Final) protocols: imap imaps pop3 pop3s plugin: quota: maildir quota_rule: Trash:ignore Kind Regards, José Antonio Suárez Pinzón Auge CS (+57 1) 812 7629 (+57) 300 618 0017

1 0

[Dovecot] Admin access to shared mailboxes
by Daniel Miller 13 Jun '11

13 Jun '11

Having enabled shared mailboxes - is there a way to provide access to all users' mailboxes by a given user? Instead of having to manually provide ACL rights to every mailbox of every user? -- Daniel

4 3

[Dovecot] Webmail project : to cache or not to cache emails
by Vincent Richomme 13 Jun '11

13 Jun '11

Hi, I plan to develop a new web service where one of its module is a webmail and I am thinking about some implementation details. From a interface point of view I wanted to adopt the same logic a outlook(desktop) or yahoo webmail and not split emails into pages. I mean I just want a single datatable view where user can scroll to see his old messages and data are updated only when user release the vertical scrollbar. When I look at current webmail (roundcube for instance) I can see that a cache is used to stored emails headers and I was wondering if it was really necessary ? Once a user has passed the login process I would like to retrieve only the emails that will be displayed (actually a bit more, I am thinking of 150) but I am wondering if it's a good idea to not use a cache for headers. For instance if I have thousands of users on the same machine, will it support it ? Will it be fast enough ? Of course I will try by myself the different options but would be curious to have some opinions. Thanks

3 2

[Dovecot] Explain about (mail_get_first_header(mail, "From", &header)
by Alex Baule 13 Jun '11

13 Jun '11

Hi Timo... Inside my plugin, i use the (mail_get_first_header(mail, "From", &header) function, to get the email From to put in some Blacklist. Looking in the header under this mail, we have 2 "From" fields. Using the function above, i get the Second "From", but my MTA (exim) look in to The First From, in the First Line, in that way, my blacklist don't work, because the sender to be blocked is different from the From looked by dovecot. There is a way to get the "From" from First line ? ############################## HEADER ######################################################## >From dma_3783(a)envios.socomdescontos.com.br Tue Jun 07 15:43:04 2011 Return-path: <dma_3783(a)envios.socomdescontos.com.br> Envelope-to: sugestao(a)brc.com.br Delivery-date: Tue, 07 Jun 2011 15:43:04 -0300 Received: from [187.61.43.119] (helo=vt-0007-119.virtualtarget.com.br) by mail.brc.com.br with esmtp (Exim 4.76) (envelope-from <dma_3783(a)envios.socomdescontos.com.br>) id 1QU1Ex-0006II-5o for sugestao(a)brc.com.br; Tue, 07 Jun 2011 15:43:01 -0300 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=k1; d=dkim.vttrack.com.br; h=From:To:Subject:MIME-Version:Content-Type:Reply-To:List-Unsubscribe:Message-ID:Date; bh=Q5G3TQPrYgogLS7aDg1DLYJpLKI=; b=XC+MHH79L6VHTI2OayuFHZGeSRAvNstNz8sHEp+xE5i71GznnYfCVsw7fuq2dIST6bTYY7tto/Rd aIZjc2YfEyqgUi0KKKesnMLSI61Ij/FlmE5ftRgIy9Ra59O9R03S62wAt6WPjkx1f4xCZ9ZAIaox GU957biBsg3B6ryU5Ks= Received: by vt-0007-119.virtualtarget.com.br id htpoj60sh70i for <sugestao(a)brc.com.br>; Tue, 7 Jun 2011 15:42:59 -0300 (envelope-from <dma_3783(a)envios.socomdescontos.com.br>) From: "CompraFacil.com.br" <mkt(a)socomdescontos.com.br> To: "sugestao" <sugestao(a)brc.com.br> Subject: SUPER OFERTA: TV LCD 32” Full HD apenas 10x 129,99 reais com FRETE ZERO. Aproveite. MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="b928815d46126f887c344b7d725aceb1" Reply-To: "CompraFacil.com.br" <res(a)socomdescontos.com.br> List-Unsubscribe: <http://relacionamento.socomdescontos.com.br/index.dma/DmaOptOut?3783,3351,2…> X-DMA: 8448122 X-UID: 8448122-74473 X-CID: 3783 X-TYP: MAIL Message-ID: <0.0.1E.8DF.1CC2542B91E3284.8E34(a)vt-0007-119.virtualtarget.com.br> Date: Tue, 7 Jun 2011 15:42:59 -0300 ############################## HEADER ########################################################

2 2