- dovecot - dovecot.org

[Dovecot] lmtp logging to separate file
by Nikita Koshikov 12 Feb '11

12 Feb '11

Hello list, Testing lmtp deliver I can't constrain it to log all activity to separate file, like dovecot-lda does. Here is config: protocol lmtp { info_log_path = /var/log/dovecot/dovecot-deliver.log log_path = /var/log/dovecot/dovecot-deliver.log mail_plugins = acl quota trash virtual zlib expire sieve } protocol lda { info_log_path = /var/log/dovecot/dovecot-deliver.log log_path = /var/log/dovecot/dovecot-deliver.log mail_plugins = acl quota trash virtual zlib expire sieve } When message is proceed via protocol lda - record appear in /var/log/dovecot/dovecot-deliver.log, but when message arrives by protocol lmtp - logs got to /var/log/dovecot.log file. Is this settings suppose to be overwritten ?

2 4

[Dovecot] dsync parallel conversions ?
by Frank Bonnet 12 Feb '11

12 Feb '11

Hello Would it be possible to run multiple dsync command in parallel ? I have 4000 mailboxes to convert nad it takes a LOT of time to do so when running dsync one by one ... Thanks

2 2

[Dovecot] preserving \Recent when moving messages
by Mark Hedges 12 Feb '11

12 Feb '11

Is there any way to preserve \Recent, or am I out of luck? Some people have reported that my script which shuffles around expired or oversized mail also causes their clients to report it as already read. I guess those clients check \Recent instead of \Seen when they download. I wish I knew which clients. With Mail::IMAPClient I tried using move(), copy(), and migrate() but the result is the same-- once it looks at the source message, \Recent is gone. (I tried patching it where it greps out the \Recent flag before appending the messages, but that causes a silent error.) Directly appending to the destination folder does not help either, since I would lose any flags set by the user, and if I tried to preserve those, then I would lose the \Recent flag when I read through the destination folder to figure out which messages were which. RFC5301 says \Recent can never be set... but does its prohibition include the case of migrating mail, where the intent is to retain them intact? It would be nice if Dovecot offered a migration feature which would move a message from folder to folder without unsetting \Recent. Mark

2 1

[Dovecot] Connection refused. Mail Client Error: 800ccccd9. Please help :-))))
by michael＠lattari.eu 12 Feb '11

12 Feb '11

Hi! I cannot connect to the dovecot server :-( I get Windows Mail Client Error: 800ccccd9. Please help :-)))) # 2.0.beta6 (3156315704ef): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.el6.x86_64 x86_64 Scientific Linux release 6.0 (Carbon) auth_debug = yes auth_debug_passwords = yes auth_verbose = yes auth_verbose_passwords = plain debug_log_path = /var/log/dovecot.log disable_plaintext_auth = no info_log_path = /var/log/dovecot.log listen = * log_path = /var/log/dovecot.log login_trusted_networks = 192.168.0./24 mail_debug = yes mbox_write_locks = fcntl passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocols = imap service imap-login { inet_listener imap { port = 143 } } ssl = no syslog_facility = local6 userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes verbose_ssl = yes dovecot.log (very poor info on what happened - connections are not logged.... ): Feb 10 09:50:25 master: Info: Dovecot v2.0.beta6 (3156315704ef) starting up (core dumps disabled) Feb 10 10:07:07 master: Warning: Killed with signal 15 (by pid=7048 uid=0 code=kill) Feb 10 10:07:08 master: Info: Dovecot v2.0.beta6 (3156315704ef) starting up (core dumps disabled) Feb 10 10:08:04 doveadm: Debug: This is Dovecot's debug log (1297328884) Feb 10 10:08:04 doveadm: Info: This is Dovecot's info log (1297328884) Feb 10 10:08:04 doveadm: Warning: This is Dovecot's warning log (1297328884) Feb 10 10:08:04 doveadm: Error: This is Dovecot's error log (1297328884) Feb 10 10:08:04 doveadm: Fatal: This is Dovecot's fatal log (1297328884) Feb 10 10:47:24 master: Warning: Killed with signal 15 (by pid=7160 uid=0 code=kill) Feb 10 10:47:56 master: Info: Dovecot v2.0.beta6 (3156315704ef) starting up (core dumps disabled) Feb 10 10:47:57 master: Warning: Killed with signal 15 (by pid=7194 uid=0 code=kill) Feb 10 10:47:58 master: Info: Dovecot v2.0.beta6 (3156315704ef) starting up (core dumps disabled) Feb 10 10:50:45 master: Warning: Killed with signal 15 (by pid=7218 uid=0 code=kill) Feb 10 10:50:46 master: Info: Dovecot v2.0.beta6 (3156315704ef) starting up (core dumps disabled) Feb 10 10:56:38 master: Warning: Killed with signal 15 (by pid=7254 uid=0 code=kill) Feb 10 10:56:39 master: Info: Dovecot v2.0.beta6 (3156315704ef) starting up (core dumps disabled) [root@filemon conf.d]# ls -al /var/run/dovecot total 20 drwxr-xr-x 4 dovecot dovecot 4096 Feb 10 10:56 . drwxr-xr-x 15 root root 4096 Feb 10 10:02 .. srw------- 1 root root 0 Feb 10 10:56 anvil srw------- 1 root root 0 Feb 10 10:56 anvil-auth-penalty srw------- 1 root root 0 Feb 10 10:56 auth-client srw------- 1 dovecot root 0 Feb 10 10:56 auth-login srw------- 1 root root 0 Feb 10 10:56 auth-master srw------- 1 root root 0 Feb 10 10:56 auth-userdb srw------- 1 dovecot root 0 Feb 10 10:56 auth-worker srw------- 1 root root 0 Feb 10 10:56 config srw------- 1 root root 0 Feb 10 10:56 dict srw------- 1 root root 0 Feb 10 10:56 director-admin srw-rw-rw- 1 root root 0 Feb 10 10:56 dns-client lrwxrwxrwx 1 root root 25 Feb 10 10:56 dovecot.conf -> /etc/dovecot/dovecot.conf drwxr-xr-x 2 root root 4096 Nov 23 03:34 empty drwxr-x--- 2 root dovenull 4096 Feb 10 10:56 login -rw------- 1 root root 5 Feb 10 10:56 master.pid -rw------- 1 root root 0 Feb 9 23:57 rsyslog auth-sql.conf.ext: passdb { driver = sql args = /etc/dovecot/dovecot-sql.conf.ext } userdb { driver = sql args = /etc/dovecot/dovecot-sql.conf.ext } /dovecot/dovecot-sql.conf.ext: driver = mysql connect = host=localhost dbname=dovecot user=dovecot password=123test default_pass_scheme = MD5 password_query = \ SELECT username AS user, password, \ home AS userdb_home, uid AS userdb_uid, gid AS userdb_gid \ FROM users WHERE username = '%u' and domain='%n' Thanks for the HELP !!!

4 3

[Dovecot] problem configuring deliver in LDAP environment.
by Andrea Borghi 12 Feb '11

12 Feb '11

hello I am using dovecot-1.2.15 in debian squeeze (packaged) and i have some difficulties migrating from an older installation tha is working perfectly. i have a transport defined in postfix to call deliver as follows: dovecotlda unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -s -e -f ${sender} -d ${recipient} with the auth-socket in dovecot.conf all ok and this in ldap-userdb.conf: user_attrs = vdHome=chroot,mailbox=mail=maildir:%$,quota=quota_rule=*:bytes=%$,otherPath=sieve you see, i have the base directory for the chroot for the entire mail system in ldap:vdHome as /home/vmail/domains and the actual location of the mailbox in maildir format in ldap:mailbox so i can have the actual complete path as /(vdHome)/(mailbox) This is running smoolthly, BUT the chroot environment with all the library dependencies is REALLY REALLY limiting because the huge number of files from the system i must put on the mail storeage (which is networked and used by more systems so i cannot put libraries and binaries there) What i am trying to do is leaving all the dovecot services running in chroot mode (as they do) but let deliver running in NORMAL (non-chroot mode) so i need to remove the chroot variable in userattr reply, and parametrize the mail location with the two ldap values. i am conscious that i can set up this as user_attrs = mailbox=mail=maildir:/home/vmail/domains/%$,quota=quota_rule=*:bytes=%$,otherPath=sieve but I WANT TO KEEP THE BASE DIR PARAMETRIZED to leave me the possibility to set the base dir in LDAP to goup the accounts on different mail storage system. So you know a method to substitute TWO ldap values in the mail parameter definition? Thank you Andrea

2 5

[Dovecot] Questions about dovecot-shared in 1.2 and inherit group membership from parent mailbox
by Lukas Haase 12 Feb '11

12 Feb '11

Hi, I read the Wiki about dovecot-shared a few times but it is not 100% clear to me (at least for 1.2). First, if I want shared keywords I *must* have a dovecot-shared. In this case, the permissions are not taken any longer from the parent folder (what is exactly this parent folder?) but from the dovecot-shared file. So in some sense dovecot-shared is always required (since everyone would like to share keywords). True? Second, is there only *one* dovecot-shared per namespace or per mailbox *under* a specific namespace? Or an arbitrary number (where the "last" is taken)? Where does dovecot-shared need to be placed? For example, if the location of the namespace points to /var/mail/shared and I have two mailboxes "group1" and "group2" inside. Does the dovecot-shared need to reside in /var/mail/shared or /var/mail/shared/group1 and /var/mail/shared/group2 (with LAYOUT=fs)? Is it possible? Third (and main) question: In /var/mail/shared I want to have a mailbox for each group. Each user is member of his respective groups (in terms of UNIX permissions *and* ACLs). The mailboxes are owned by their respective groups and if a user creates a subfolder inside it should surely have the same group assigned as the parent mailbox (not the namespace!). namespace public { separator = . prefix = Shared. location = maildir:/var/mail/shared:INDEX=~/Maildir/shared:LAYOUT=fs subscriptions = no } mail:~# ls -l -R /var/mail/shared/ /var/mail/shared/: total 12 drwxrwx--- 5 root group1 4096 Feb 9 11:53 Group1 drwxrwx--- 5 root group2 4096 Feb 9 12:27 Group2 -rw-r--r-- 1 root root 23 Feb 9 11:52 dovecot-acl -rw-rw-r-- 1 root root 0 Dec 15 2009 dovecot-shared /var/mail/shared/Group1: total 16 drwxrwx--- 2 root group1 4096 Feb 8 10:35 cur -rw-r--r-- 1 root group1 28 Feb 9 11:52 dovecot-acl -rw-rw-r-- 1 root group1 0 Dec 15 2009 dovecot-shared drwxrwx--- 2 root group1 4096 Dec 15 2009 new drwxrwx--- 2 root group1 4096 Feb 8 10:34 tmp /var/mail/shared/Group1/cur: total 0 /var/mail/shared/Group1/new: total 0 /var/mail/shared/Group1/tmp: total 0 /var/mail/shared/Group2: total 16 drwxrwx--- 2 root group2 4096 Feb 8 10:35 cur -rw-r--r-- 1 root group2 27 Feb 9 11:52 dovecot-acl -rw-rwS--- 1 root group2 0 Dec 15 2009 dovecot-shared drwxrwx--- 2 root group2 4096 Dec 15 2009 new drwxrwx--- 2 root group2 4096 Feb 8 10:34 tmp /var/mail/shared/Group2/cur: total 0 /var/mail/shared/Group2/new: total 0 /var/mail/shared/Group2/tmp: total 0 Again: *Inside* /var/mail/shared I want to create mailboxes for each group (Group1, Group2, ...). This is done only by the administrator. Therefore /var/mail/shared is owned by root. Each Group1, Group2, ... in turn is owned by group1, group2, ... I tried all combinations using dovecot-shared which came into my mind such that a subfolder of Group1 is owned by group1. However, either 1.) the subfolder is owned by the primary group of the creating user (group "users") or 2.) the group of /var/mail/shared/dovecot-shared or 3.) creation of the subfolder fails with dovecot: IMAP(user1): chown(/var/mail/shared/Group2/Test1, -1, 0(root)) failed: Operation not permitted (egid=100(users), group based on /var/mail/shared/dovecot-shared) dovecot: IMAP(user1): mkdir(/var/mail/shared/Group2/Test1/cur) failed: Operation not permitted Is this just not possible or do I get something wrong here? Regards, Luke

2 4

[Dovecot] PAM auth and userdb
by Matthias Lohmann 11 Feb '11

11 Feb '11

Hi all, I've just setup dovecot 2.0.9 on Solaris 10 - everything works fine so far. I'm authentication my users with PAM (against /etc/passwd) -> works The users get the default quota setting from dovecots config. Now I like to override the quota settings for some users. So I created a userdb - but it seems, that its not used ... What might be wrong? # 2.0.9: /opt/dovecot2.0.9/etc/dovecot/dovecot.conf # OS: SunOS 5.10 sun4v auth_debug = yes auth_username_chars = abcdefghijklmnopqrstuvwxyz01234567890.- auth_verbose = yes default_login_user = nobody disable_plaintext_auth = no first_valid_gid = 215 first_valid_uid = 300 log_path = /var/log/dovecot.log login_access_sockets = tcpwrap mail_location = mbox:~/IMAP:INBOX=/var/mail/%u:INDEX=/var/dovecotindexes/%u mail_plugins = quota passdb { driver = pam } plugin { quota = dict:User quota::file:/var/dovecotindexes/%u/dovecot-quota quota_rule = *:storage=1G quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u } [...] userdb { driver = passwd } userdb { args = username_format=%u /opt/dovecot/etc/users driver = passwd-file } My userdb contains lines like this user301::301:220::/usr/users/user301::userdb_quota_rule=*:storage=200M And here we have some debug output Feb 11 16:55:24 auth: Debug: passwd-file /opt/dovecot/etc/users: Read 1 users Feb 11 16:55:24 auth: Debug: pam(user301,2.1.1.2): lookup service=dovecot Feb 11 16:55:24 auth: Debug: pam(user301,2.1.1.2): #1/1 style=1 msg=Password: Feb 11 16:55:24 auth: Debug: client out: OK 1 user=user301 Feb 11 16:55:24 auth: Debug: master in: REQUEST 1627258881 20594 1 90f9d76fc9ac35bcb78212825868522a Feb 11 16:55:24 auth: Debug: passwd(user301,2.1.1.2): lookup Feb 11 16:55:24 auth: Debug: master out: USER 1627258881 user301 system_groups_user=user301 uid=301 gid=220 home=/usr/users/user301 Feb 11 16:55:24 pop3-login: Info: Login: user=<user301>, method=PLAIN, rip=2.1.1.2, lip=2.1.1.22, mpid=20607 Feb 11 16:55:25 pop3(user301): Info: Disconnected: Logged out top=0/0, retr=0/0, del=0/9, size=71445 Even doveadm gives the wrong quota root@> /opt/dovecot/bin/doveadm quota get -u user301 Quota name Type Value Limit % User quota STORAGE 72288 1048576 6 User quota MESSAGE 1258 - 0 Any hints for me? Thanks in advance. Kind regards Matt

2 1

[Dovecot] [Q] auth(default): plain(?, 11.111.206.99): Username contains disallowed character: 0x20
by JKL 11 Feb '11

11 Feb '11

Dear all, A new user with Microsoft Express is trying to use IMAP SSL port 993. However they cannot log in. Its only with them. The logs details the following: Feb 11 18:56:03 logout dovecot: auth(default): plain(?,11.111.206.99): Username contains disallowed character: 0x20 Feb 11 18:58:07 logout dovecot: imap-login: Disconnected (auth failed, 1 attempts): method=PLAIN, rip=11.111.206.99, lip=62.58.61.184, TLS: Disconnected I think that the 0x20 is a space. However the user states that they are using this format and that there is no space: user.name(a)test.com Does anyone know where I could start to look for this? Regards,S

2 2

[Dovecot] Domain blacklisting
by Thomas Hummel 11 Feb '11

11 Feb '11

Hello, I run dovecot-2/Maildir/LDAP user/passdb and would like to be able to deny acess to users who connect from certain domains/IP (google.com for instance since in that case they gave their credentials to a third party). My understanding is that I cannot use some negative form of "allow_nets". The only mechanism I can think of is tcp_wrappers. However, dovecot documentation mention it only in the dovecot-1 section. Does it work the same way with dovecot-2 ? Is it a bad idea (I'm thinking of the induced overhead) ? Can you see another way to blacklist (at dovecot application level) some sources ? Thanks -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

3 6

[Dovecot] doveadm -A or -u
by Matt Rude 11 Feb '11

11 Feb '11

Did something change in doveadm? One of my scripts blew up last night saying that -A is not a valid flag. The -A and -u flags seem to not be working on trunk anymore. # dovecot --version 2.0.9 (723a26a7d328) # doveadm expunge -u matt mailbox Junk savedbefore 31d doveadm(matt): Fatal: Unknown argument MATT (matt of course is the user sending this message on this server) # doveadm -Dv expunge -A mailbox Junk savedbefore 31d doveadm(matt): Debug: Loading modules from directory: /usr/lib/dovecot doveadm(matt): Debug: Module loaded: /usr/lib/dovecot/lib10_quota_plugin.so doveadm(matt): Debug: Module loaded: /usr/lib/dovecot/lib20_expire_plugin.so doveadm(matt): Debug: Module loaded: /usr/lib/dovecot/lib20_zlib_plugin.so doveadm(matt): Debug: Loading modules from directory: /usr/lib/dovecot/doveadm doveadm(matt): Debug: Module loaded: /usr/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so doveadm(matt): Debug: Module loaded: /usr/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so doveadm(matt): Debug: Module loaded: /usr/lib/dovecot/doveadm/lib10_doveadm_zlib_plugin.so doveadm(matt): Fatal: Unknown argument -A Also with the quota plugin. # doveadm -f tab quota get -A doveadm(matt): Fatal: doveadm quota get: Unknown parameter: -A I can provide a doveconf -n and mySQL config files if needed. Thanks -Matt

2 1

[Dovecot] Separate access to different "folders" of the same mailbox?
by Alexander Chekalin 11 Feb '11

11 Feb '11

Hello Timo and everyone, I think on such an idea that may save me a bit of space and time: in my company we have a mailbox that holds a copy of every message that our SMTP processed. While it eats a lot of space, it saved us several times when, you may imaging, user "suddenly" deleted the most important message in his life and call our IT guys for help. The mailbox contains "folders" for each day (like 2011-02-10), which keeps mailings for that day only. Even with this, it is sometime hard to work with that "keep all" box (basically, it is slow as the size is huge). What I'd like to add is some kind of "virtual folders" (for each of our internal users) that list messages from and to his address. And I'd like to permit every user to see (that is, read only mode) only "his" such a virtual folder in our "keep all" box, so user can see his old messages on his own. Looks like 1) I need an ACL to limit user access to "their" folders and somehow hide other folders at all 2) Have such virtual folders work with huge ammount of mailings (kind of 300 Gb), separated in maybe 1000 folders (per days). I really afraid it will be slo-o-o-ow search, even with indexes (I mean, virtual folder that is defined as search over 1000 folders will be not that fast). The mailbox is maildir by nature. How can I archive these goals with smallest load possible, and if it is possible at all? Thank you, Alexander Chekalin

5 4

[Dovecot] xi.rename-it.nl/debian/ dovecot-2.0 sieve problem
by Martin Rozgonski 11 Feb '11

11 Feb '11

Hi, i used to use deb http://xi.rename-it.nl/debian/ stable-auto/dovecot-2.0 main to update dovecot 1.2 with debian lenny. I used the convert script to change my configuration file. Everything works fine but sieve does not work anymore. There is no error in the logs but dovecot simply ignores any filter. I checked the documentation/configuration twice and had still no success. Maybe, this is a known/unknown bug or any suggestions? Best regards Martin Rozgonski

3 6

[Dovecot] Error: managesieve-login: dump-capability failed: process got stuck
by Pascal Volk 11 Feb '11

11 Feb '11

Hi Stephan, after applying the latest changesets to dovecot (i guess 08e4280e5bfd), `make`, `make install` and restarting dovecot, I saw that error: doveconf: Error: managesieve-login: dump-capability failed: process 5467 got stuck Regards, Pascal -- The trapper recommends today: beeffeed.1104203(a)localdomain.org

2 1

[Dovecot] mdbox, sis, zlib
by Daniel L. Miller 11 Feb '11

11 Feb '11

I'm still having issues with the combination of mdbox, sis, and zlib. Is anyone else using these without seeing any errors in the logs? -- Daniel

1 0

[Dovecot] multiple domains
by Sergio Moscoso 10 Feb '11

10 Feb '11

Anybody can help me with this issue. It's the right place to submit thios question, please help me. Actually we have configured a server (postfix,dovecot,mysql) with multiple domains, but the problem resides in that we don't want to login via POP3 using "user@domain" just using "user", because we'll migrate our actual platform (Qmail) to dovecot. Our users are logging to their mail boxes, using only user name. We want to ask if that's posible to use a function like a "vipmap" in qmail, that allow to map an IP address to a domain. We're using the dovecot 1.0.7, the configuration shows as follows: login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login first_valid_uid: 100 mail_location: maildir:~/Maildir/ mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(pop3): outlook-idle pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: username_format: %Lu passdb: driver: sql args: /etc/dovecot-mysql.conf userdb: driver: static args: uid=101 gid=102 home=/home/vmail/%d/%n We'll apreciate your response, 'cause we coulnd't find information about this issuet and we didn't to find any clue that shows how can realize it. Thank you in advance. Sergio Moscoso

3 3

[Dovecot] postfix deliver to mdbox ?
by Frank Bonnet 10 Feb '11

10 Feb '11

Hello again I' now in trouble with incoming email's to users I have modified the main.cf config file of postfix according to the Dovecot LDA with Postfix page. mailbox_command = /usr/local/libexec/dovecot/dovecot-lda postfix reload But incoming emails does not seems to go in the mdbox INBOX I use postfix 2.8.0 with FreeBSD 8.1 Any clarification welcome ! Thanks again.

3 3

[Dovecot] LDAPS fault tolerance not working with dovecot
by Nikita Koshikov 10 Feb '11

10 Feb '11

Hello list, In my dovecot-ldap.ext I have: uris = ldaps://host1 ldaps://host2 ldaps://host2 Today host1 hangs and new connections can't be established with mail server. Connected users worked fine (auth_cache_size = 5 k auth_cache_ttl = 15 mins). At this time - host2 and host3 are working fine, but switching to them was not happen. Why ? In logs I got: Feb 09 10:20:36 imap-login: Error: Timeout waiting for handshake from auth server. my pid=29932, input bytes=0 Feb 09 10:20:36 imap-login: Error: Timeout waiting for handshake from auth server. my pid=29867, input bytes=0 Feb 09 10:20:37 imap-login: Error: auth: connect(login) failed: Resource temporarily unavailable Feb 09 10:20:37 imap-login: Error: auth: connect(login) failed: Resource temporarily unavailable Feb 09 10:20:39 imap-login: Error: Timeout waiting for handshake from auth server. my pid=29943, input bytes=0 Feb 09 10:20:40 imap-login: Error: auth: connect(login) failed: Resource temporarily unavailable I also tried to set: hosts = host1:636 host2:636 host3:636 But with above config error log fulls with messages: Feb 09 10:44:57 auth: Error: LDAP: Connection lost to LDAP server, reconnecting And none of servers accepted ldaps connection. Is someone has a success make ldaps fault tolerance ?

2 2

[Dovecot] POP Log entries
by Ralf Hildebrandt 10 Feb '11

10 Feb '11

Disconnected: Logged out top=0/0, retr=0/0, del=0/3239, size=511881537 Disconnected: Logged out top=0/0, retr=2/316038, del=0/3238, size=511876309 What do the numbers mean? Especially since there are two numbers for each category... -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

2 1

[Dovecot] Error message with static userdb
by Carsten Laun-De Lellis 10 Feb '11

10 Feb '11

Hi all I am trying to migrate to dovecot 2.0.9 Dovecot starts without warnings but when I try to connect with a client I always got this error message in the log file: Feb 10 12:57:36 v37143 dovecot: master: Dovecot v2.0.9 starting up (core dumps disabled) Feb 10 12:57:56 v37143 dovecot: auth: Fatal: static userdb: Empty key (=) Feb 10 12:57:56 v37143 dovecot: master: Error: service(auth): command startup failed, throttling Feb 10 12:58:31 v37143 dovecot: imap-login: Error: Timeout waiting for handshake from auth server. my pid=17537, input bytes=0 Feb 10 12:58:56 v37143 dovecot: auth: Fatal: static userdb: Empty key (=) Feb 10 12:58:56 v37143 dovecot: master: Error: service(auth): command startup failed, throttling Feb 10 12:59:26 v37143 dovecot: imap-login: Error: Timeout waiting for handshake from auth server. my pid=17537, input bytes=0 Feb 10 12:59:26 v37143 dovecot: imap-login: Disconnected (no auth attempts): rip=217.91.177.10, lip=89.202.2.143 This is the output of dovecot n: # 2.0.9: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-028stab070.14 x86_64 Ubuntu 10.04.1 LTS reiserfs auth_mechanisms = plain login disable_plaintext_auth = no hostname = v37143.1blu.de mail_location = maildir:/vmail/%d/%n managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = maildir:/vmail/%d/%n prefix = separator = / type = private } passdb { args = /scripts/sql/dovecot/user_auth.sql driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_dir = /var/lib/dovecot/sieve/global sieve_global_path = /var/lib/dovecot/sieve/default.sieve } postmaster_address = root(a)delellis.net protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0660 user = vmail } } ssl_cert = </certs/mail/mailpublic.pem ssl_key = </certs/mail/mailkey.pem userdb { args = uid=vmail gid=vmail home=/var/vmail/%d/%n allow_all_users = yes driver = static } protocol lda { mail_plugins = " sieve" } Any ideas ? Mit freundlichem Gruß Carsten Laun-De Lellis Dipl.-Ing. Elektrotechnik Certified Information Systems Auditor (CISA) Hauptstrasse 13 D-67705 Trippstadt Phone: +49 (6306) 992140 Mobile: +49 (151) 27530865 email: <mailto:carsten.laun-delellis@delellis.net> carsten.laun-delellis(a)delellis.net

2 1

[Dovecot] IMAP subfolders and MDBOX
by Frank Bonnet 10 Feb '11

10 Feb '11

Hello We actually use MBOX format on our mailhub but this does not permit to create IMAP subfolders. Many users are asking me fot this feature and I agree with them of course. My problem is to choose the format that will permit imap subfolders creation. Maildir is not my favorite format and I wonder about MDBOX. Does it permit imap subfolders creation ? It is possible to convert from MBOX to MDBOX in one shot ? Is it stable / mature enoug for a production server ( 4000 users ) ? Thank you

3 5

[Dovecot] /var/mail/<user> and mail group privileges
by Michal Hlavinka 10 Feb '11

10 Feb '11

Hi Timo, I'm facing problem with mail group privileges (again), because I've heard a few complains. I was looking at old emails and list archives, but still does not know the answer. In default (fedora/rhel) setup mail group and 0660 privileges are used. This means that when mail_location = mbox:~/mail:INBOX=/var/mail/%u is used, dovecot fails with first (and only first) attempt to select inbox (imap) or login (pop3). Shouldn't mkdir and chown make together a transaction? When it fails just for first time, it confuses some admins (this is the reason why I'm getting complains (bug reports) just because missing/wrong configuration). I think it a) should work even for first connection (ignore chown failure) or b)it should not work for following connection, so the behavior should be more consistent. Also it seems unclear what configuration option is required for making this work in new dovecot versions where configuration is split to mail_privileged_group and mail_access_groups. I see that after reading documentation in 10-mail.conf, some admins expects mail_privileged_group to be enough while mail_access_group is required to prevent fchown failure. Would it be possible to explicitly mention in the config file what option is required? I can add patch with this to our rpm, but we always prefer to be as close to the upstream as possible. Thanks Michal

2 4

[Dovecot] LDAP quota groups
by ian+dovecot＠comtek.co.uk 10 Feb '11

10 Feb '11

Is there any way to have a per-LDAP-group quota? The OpenLDAP folk's suggestions are to hack the source for an overlay (ideal, but it looks somewhat involved) or to do it at the application (Dovecot). I've added an LDAP userattr 'quotaMegaBytes' which is great for allowing me to override the server's default quota on a per-user basis, but ideally I'd be able to override the quota only for people who are member of a certain LDAP group. Perhaps I could override it for IMAP sessions with a postlogin script, but I can't see any way to apply it to deliver. Thanks for any suggestions, Ian

1 0

[Dovecot] Access rights after dsync
by Joan Moreau 10 Feb '11

10 Feb '11

Hi, It looks like the access rights are not correctly preserved after a dsync I have rwXr-X-- from my original folder (which is right) I have rwXrwXrwX in the "mirrored" fodler (which is very wrong) Not sure what cause this, but it looks like a bug Best, jm

2 1

[Dovecot] Dovecot 2.0.7 doesn't disassociate STDERR when it daemonizes.
by Virgil Champlin 10 Feb '11

10 Feb '11

At least it appears that way on my FreeBSD 8.1 system. This is probably unnoticeable in regular use but I happen to use CFengine(v2) for system configuration & monitoring. If it notices dovecot not running it tries to start it and hangs. I believe cfengine (cfagent) has created a pipe to monitor the start commmand's stderr and is waiting for this pipe to close. This never happens because the pipe has been inherited by dovecot which, in version 2, doesn't release stderr as part of its daemonization. Although cfengine could be more defensive, I believe dovecot should be disassociating from the inherited stderr. Looking at master/main.c, I see stdin, stdout & stderr being set to /dev/null in main() if they are inherited unassigned: do { null_fd = open("/dev/null", O_WRONLY); if (null_fd == -1) i_fatal("Can't open /dev/null: %m"); fd_close_on_exec(null_fd, TRUE); } while (null_fd <= STDERR_FILENO); But stderr is missing when a later dup2() is used to release any inherited values not covered by the above: if (dup2(null_fd, STDIN_FILENO) < 0 || dup2(null_fd, STDOUT_FILENO) < 0) i_fatal("dup2(null_fd) failed: %m"); Adding a dup2 for stderr to the above statement works in my simple test case but I'm unsure if there are other issues which may require delaying it. Dovecot 1.2.16 approaches this a little differently & does slightly delay the stderr dup2. The appended diff (v2.0.7) works for me but a more informed opinion might have a better suggestion. Thank you very much for your time. I just started using Dovecot and really like it. -virgil --- main.c.orig 2010-11-04 11:58:48.000000000 -0700 +++ main.c 2011-01-05 18:11:45.000000000 -0800 @@ -717,7 +717,8 @@ } if (dup2(null_fd, STDIN_FILENO) < 0 || - dup2(null_fd, STDOUT_FILENO) < 0) + dup2(null_fd, STDOUT_FILENO) < 0 || + dup2(null_fd, STDERR_FILENO) < 0) i_fatal("dup2(null_fd) failed: %m"); pidfile_path = -=-=-=-=-=-=-=-=-=-=-

2 1

[Dovecot] login_trusted_networks (v2.0.8)
by Don Buchholz 10 Feb '11

10 Feb '11

I just spent a bit puzzling over "login_trusted_networks". My problem was using "10.1.2/24" instead of "10.1.2.0/24". Here are some things I looked for during troubleshooting that didn't pan out: (1) No messages printed to syslog. (2) Search for "login_trusted_networks" on the Wiki (wiki2) failed. (3) Comments in example config file didn't specify expected format. Anyway, it works now. <shrug> - Don =================== 'doveconf -n' (redacted): > *[root@postal ~]# **doveconf -n* > # 2.0.8: /etc/dovecot/dovecot.conf > # OS: Linux 2.6.9-67.0.1.ELsmp i686 Red Hat Enterprise Linux WS > release 4 (Nahant Update 6) ext3 > auth_username_format = %Lu > auth_verbose = yes > auth_verbose_passwords = sha1 > login_log_format_elements = user=<%u> service=%Us method=%m rip=%r > lip=%l mpid=%e %c > login_trusted_networks = xx.xx.x.0/24 xx.xx.xx.0/23 > mail_location = maildir:/Virtual_Users/%u/Mail > passdb { > driver = pam > } > passdb { > args = scheme=CRYPT username_format=%u /etc/dovecot/users > driver = passwd-file > } > ssl_ca = </etc/dovecot/ssl/iMove_2011_CAcert.pem > ssl_cert = </etc/dovecot/ssl/postal_cert.pem > ssl_key = </etc/dovecot/ssl/postal_key+req.pem > ssl_key_password = ******** > ssl_parameters_regenerate = 12 > userdb { > driver = passwd > } > userdb { > args = username_format=%u /etc/dovecot/users > driver = passwd-file > } > verbose_proctitle = yes > protocol imap { > ssl_cert = </etc/dovecot/ssl/imap_cert.pem > ssl_key = </etc/dovecot/ssl/imap_key+req.pem > ssl_key_password = </etc/dovecot/ssl/imap.pw > } > protocol pop3 { > ssl_cert = </etc/dovecot/ssl/pop3_cert.pem > ssl_key = </etc/dovecot/ssl/pop3_key+req.pem > ssl_key_password = </etc/dovecot/ssl/pop3.pw > } > *[root@postal ~]#*

2 1