- dovecot - dovecot.org

Re: [Dovecot] imap/pop proxy and filter
by Mike Korizek 07 Dec '10

07 Dec '10

On 12/07/2010 12:18 AM, Paul Cartwright wrote: > On 12/06/2010 06:04 PM, Mike Korizek wrote: >> I use dovecot as imap/pop proxy. >> Is it possible to filter the messages before they get delivered to the >> client? >> > > http://wiki.dovecot.org/LDA/Sieve My understanding was, that Sieve requires LDA but I do not have local mailboxes as I only use the imap/pop proxy functionality. Can I use Sieve for mail filtering despite I do not have local mailboxes? Thanks, Mike

1 0

[Dovecot] imap limits please ?
by Spyros Tsiolis 06 Dec '10

06 Dec '10

Hello, Finally managed to sync an outlook client to dovecot. Looks like it's working. Questions though ; : What are the limits? Number of Folders ? Number of mails per folder ? E.g. for a client of mine, I know that she uses about 5Gb of data at the moment (and counting). Now, this same outlook client consists of the following : 1. about thirty (30) folders ranging from 1000 messages per folder to 100 messages per folder 2. A "Sent Items" folder with about 4,000 messages (and counting) 3. A "Deleted Items" folder with about 5,500 messages (and counting) System, now, is a CentOS 5.5 32-bit on an hp/compaq dl360 (G3) with RAID1 76,3Gb Disks UW320 and four (4Gb) of RAM Output of "dovecot -n" : ------------------------------------------------------------ # 1.2.16: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.17.4.el5 i686 CentOS release 5.5 (Final) ext3 base_dir: /var/run/dovecot/ log_path: /var/log/dovecot/dovecot.log info_log_path: /var/log/dovecot/dovecot-info.log ssl_parameters_regenerate: 48 verbose_ssl: yes login_dir: /var/run/dovecot//login login_executable: /usr/local/dovecot/libexec/dovecot/imap-login login_greeting: * Dovecot ready * login_max_processes_count: 32 mail_location: maildir:/var/MailRoot/domains/%d/%n/Maildir mail_plugins: zlib auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd-file args: /etc/dovecot/passwd passdb: driver: pam userdb: driver: static args: uid=vmail gid=vmail home=/home/vmail/%u userdb: driver: passwd ------------------------------------------------------------ Any answer would be greatly appreciated since I am trying to know the systems' limits. Thank you kindly all, spyros ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

2 1

[Dovecot] CentOS 5 + selinux
by Marcelo Roccasalva 06 Dec '10

06 Dec '10

I've just installed CentOS 5.5 and dovecot 2.0.7. Out of the box, it worked ok with local user accounts. Then I enable selinux and I could no loger login to imap server. I can deal with that via a local policy. But I found dovecot tried to open /etc/shadow: type=AVC msg=audit(1291490764.101:670): avc: denied { read } for pid=16130 comm="auth" name="shadow" dev=md2 ino=96335 scontext=user_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file type=AVC msg=audit(1291500097.318:818): avc: denied { getattr } for pid=17350 comm="auth" path="/etc/shadow" dev=md2 ino=95396 scontext=user_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file even it is configured for pam passdb: # dovecot -n # 2.0.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.26.1.el5 x86_64 CentOS release 5.5 (Final) mbox_write_locks = fcntl passdb { driver = pam } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } I straced the process and it efectively tries to open /etc/shadow. I don't want to disable selinux but I'm not happy letting dovecot read my /etc/shadow. Is there a guide to selinux and dovecot? -- Marcelo "¿No será acaso que ésta vida moderna está teniendo más de moderna que de vida?" (Mafalda)

2 1

[Dovecot] 1.2.15 - segfault if host field attribute not present in ldap. (proxy)
by Mohit Chawla 06 Dec '10

06 Dec '10

In case this is relevant: kernel: [17549.714369] imap-login[11704]: segfault at 0 ip b75c3d23 sp bf888178 error 4 in libc-2.11.2.so[b7551000+140000] If no host field attribute is present in ldap (like mailHost for qmail-ldap), and we are trying to use proxy, then dovecot segfaults. If more information's needed, let me know. Also, somewhat unrelated, but maybe the wiki needs to be edited since using a template as =proxy_maybe=y works, while in wiki its kinda opposite. I don't know of specifics, but should I try using a recent release ?

2 8

[Dovecot] Problem with ACLs
by Micha Krause 06 Dec '10

06 Dec '10

Hi, i want to use unix groups in my ACLs. http://wiki2.dovecot.org/ACL says, I can do that with a post-login script (http://wiki2.dovecot.org/PostLoginScripting) I have verified, that the script is running, and that ACL_GROUPS is correct. But I still can't access the Mailbox. Logfile says: Dec 3 11:19:35 mailint1 dovecot: imap(micha): Debug: acl vfile: reading file /var/mail/mailboxes/shared/mails/server-root/dovecot-acl Dec 3 11:19:35 mailint1 dovecot: imap(micha): Debug: acl vfile: reading file /var/mail/mailboxes/shared/mails/dovecot-acl Im using: dovecot 2.0.7 (5e82c5b1b4a9) Micha Krause

2 2

[Dovecot] Internal Error form delivery from LDAP lookup.
by Jorgen Lundman 06 Dec '10

06 Dec '10

Solaris-x86-10u8 Dovecot-1.2.7 Large mail setup, with quite a few MX servers working well. Generally everything is super. But every now and then, we get "bouts of bad weather" - which only lasts a short time, and curiously nearly always occur when mail is sent to customer mailing lists. I suspect mostly because of that 1 message has multiple recipients within the same domain. Perhaps. Delivery setup as: main.cf: virtual_transport = dovecot dovecot_destination_recipient_limit = 1 dovecot_destination_concurrency_limit=300 master.cf: dovecot unix - n n - 70 pipe flags=DRhu user=dovecot:dovecot argv=/usr/local/libexec/dovecot/deliver -f ${sender} -d ${recipient} Errors look something like: example.com Dec 06 08:46:25 deliver(rbc-005(a)example.com): Info: msgid=<A22A602A940A45A49EA2C4CC53D27655(a)UQC.local>: saved mail to INBOX Dec 06 08:46:25 deliver(rbc-002(a)example.com): Info: msgid=<A22A602A940A45A49EA2C4CC53D27655(a)UQC.local>: saved mail to INBOX Dec 06 08:46:28 deliver(rbc-004(a)example.com): Error: userdb lookup(rbc-004(a)example.com) failed: Internal failure Dec 06 08:46:28 deliver(rbc-011(a)example.com): Error: userdb lookup(rbc-011(a)example.com) failed: Internal failure Dec 06 08:46:28 deliver(rbc-013(a)example.com): Error: userdb lookup(rbc-013(a)example.com) failed: Internal failure Dec 06 08:46:28 deliver(rbc-006(a)example.com): Error: userdb lookup(rbc-006(a)example.com) failed: Internal failure Later on, when it retries, everything goes according to plan and delivery is achieved. Now this is actually due to slapd saying: Dec 6 08:46:25 vmx15.unix slapd[3958]: [ID 763815 local4.debug] connection_input: conn=72057 deferring operation: too many executing And since it happens most frequently with mailing-lists, or mails with many recipients, I would guess it is due to a large number of lookups happening in a very short time. Since dovecot_destination_recipient_limit=1, I believe 'deliver' is only ever called with just one recipient for "-d", and 'deliver' probably-does-not (?) query LDAP for any of the other "To:" addresses in the message body. Is that the case? Secondary, the dovecot-ldap.conf for dovecot-auth has: hosts = 127.0.0.1 172.20.12.33 172.20.12.23 172.20.12.113 So even though localhost's slapd was busy at the time, the other three hosts were definitely not. Is LDAP fail-over ... failing... in this case? How many concurrent queries does dovecot-auth perform? Any way to tweak this value? Admittedly, postfix/dovecot does handle this situation correctly, as 'temporary failure' and mail delivery is merely delayed. But at the same time, it *could* be something with an easy fix as well. Thoughts? Lund -- Jorgen Lundman | <lundman(a)lundman.net> Unix Administrator | +81 (0)3 -5456-2687 ext 1017 (work) Shibuya-ku, Tokyo | +81 (0)90-5578-8500 (cell) Japan | +81 (0)3 -3375-1767 (home)

2 6

Re: [Dovecot] Doveadm import emails
by Timo Sirainen 06 Dec '10

06 Dec '10

On 5.12.2010, at 14.47, Alex Baule wrote: > I have a maildir with 6800 emails and i try to import this to 1000 users. > The import begins well, but in the user 150 the script stop because doveadm > say the directory have wrong file permissions, but the script dont change > notthing and the permissions its ok. What exactly is the error message? Is it always the same specific user, or if you reorder users is it always the 150th?

1 0

[Dovecot] Dovecot v2.1 plans
by Timo Sirainen 06 Dec '10

06 Dec '10

Now that v2.0 seems to be getting stable, I finally started v2.1 branch: http://hg.dovecot.org/dovecot-2.1/ So far there are just some API changes to fix some annoyances and to make it simpler. They'll probably keep coming for a while more to make future work easier. As for larger upcoming features, I'm hoping for: - simplify index files and make it write only via lib-fs (but keep backwards compatibility & make v2.0 forwards compatible) - make lib-storage API support asynchronous and support parallel lookups - use async disk io as much as possible & get rid of all lock waits inside lib-storage -> it'll be ok to have lots of imap/pop3 connections per process, at least for some storage backends - write imap-client lib-storage backend (make it fast using above async stuff - using configurable number of IMAP connections) - this could maybe also be used to access other users' shared mailboxes when it can't be done directly - design a mailbox format (maybe based on dbox) for key-value databases, implement it via lib-fs and implement a lib-fs backend for one such database - merge Apple's CATENATE and URLAUTH patch But if some company desperately wants me to work on other stuff, that list can change. BTW. I'm moving back to Finland in two weeks. Maybe I'll also get some studying done towards my Master's degree. :)

1 0

[Dovecot] Centos 5.5 upgrade to dovecot 1.2
by Agim Cami 06 Dec '10

06 Dec '10

Hello, I am trying to upgrade dovecot from 1.0.7 (the dovecot verison in base repo) to 1.2. The installation of .rpm got from atrpms.net aborted with a dependency error : error: Failed dependencies: libpq.so.5()(64bit) is needed by dovecot-1.2.16-1_114.el5.x86_64 This is strange because the libraries are there : yum list libpq* Installed Packages libpqxx.x86_64 2.6.9-3.el5.rf installed libpqxx-devel.x86_64 2.6.9-3.el5.rf installed Any advice on this ? Thanks! Hello, I am trying to upgrade dovecot from 1.0.7 (the dovecot verison in base repo) to 1.2. The installation of .rpm got from atrpms.net aborted with a dependency error : error: Failed dependencies: libpq.so.5()(64bit) is needed by dovecot-1.2.16-1_114.el5.x86_64 This is strange because the libraries are there : yum list libpq* Installed Packages libpqxx.x86_64 2.6.9-3.el5.rf installed libpqxx-devel.x86_64 2.6.9-3.el5.rf installed Any advice on this ? Thanks! Hello, I am trying to upgrade dovecot from 1.0.7 (the dovecot verison in base repo) to 1.2. The installation of .rpm got from atrpms.net aborted with a dependency error : error: Failed dependencies: libpq.so.5()(64bit) is needed by dovecot-1.2.16-1_114.el5.x86_64 This is strange because the libraries are there : yum list libpq* Installed Packages libpqxx.x86_64 2.6.9-3.el5.rf installed libpqxx-devel.x86_64 2.6.9-3.el5.rf installed Any advice on this ? Thanks! Hello, I am trying to upgrade dovecot from 1.0.7 (the dovecot verison in base repo) to 1.2. The installation of .rpm got from atrpms.net aborted with a dependency error : error: Failed dependencies: libpq.so.5()(64bit) is needed by dovecot-1.2.16-1_114.el5.x86_64 This is strange because the libraries are there : yum list libpq* Installed Packages libpqxx.x86_64 2.6.9-3.el5.rf installed libpqxx-devel.x86_64 2.6.9-3.el5.rf installed Any advice on this ? Thanks! Hello, I am trying to upgrade dovecot from 1.0.7 (the dovecot verison in base repo) to 1.2. The installation of .rpm got from atrpms.net aborted with a dependency error : error: Failed dependencies: libpq.so.5()(64bit) is needed by dovecot-1.2.16-1_114.el5.x86_64 This is strange because the libraries are there : yum list libpq* Installed Packages libpqxx.x86_64 2.6.9-3.el5.rf installed libpqxx-devel.x86_64 2.6.9-3.el5.rf installed Any advice on this ? Thanks! Hello, I am trying to upgrade dovecot from 1.0.7 (the dovecot verison in base repo) to 1.2. The installation of .rpm got from atrpms.net aborted with a dependency error : error: Failed dependencies: libpq.so.5()(64bit) is needed by dovecot-1.2.16-1_114.el5.x86_64 This is strange because the libraries are there : yum list libpq* Installed Packages libpqxx.x86_64 2.6.9-3.el5.rf installed libpqxx-devel.x86_64 2.6.9-3.el5.rf installed Any advice on this ? Thanks! Hello, On a Centos 5.5 installation, I am trying to upgrade dovecot from 1.0.7 (the dovecot verison in base repo) to 1.2. The installation of .rpm got from atrpms.net aborted with a dependency error : error: Failed dependencies: libpq.so.5()(64bit) is needed by dovecot-1.2.16-1_114.el5.x86_64 This is strange because the libraries are there : yum list libpq* Installed Packages libpqxx.x86_64 2.6.9-3.el5.rf installed libpqxx-devel.x86_64 2.6.9-3.el5.rf installed Any advice on this ? Thanks!

3 2

Re: [Dovecot] Dovecot 1.2.16 compiling error
by Timo Sirainen 05 Dec '10

05 Dec '10

On 3.12.2010, at 8.36, Mart Pirita wrote: > RedHat 9 based distro, 2.6.24.2 kernel, OpenSSL 1.0.0a 1 Jun 2010 Hmm. v1.0.0a, really?.. > /usr/src/redhat/BUILD/dovecot-1.2.16/src/login-common/ssl-proxy-openssl.c:950: undefined reference to `OpenSSL_add_all_algorithms' I just hate OpenSSL. You can comment out that line from the code until I figure out what to do about this. That function was supposed to have existed since forever in OpenSSL. Or did the compiling log any warnings?

4 25

[Dovecot] 2.0.8 & enable-header-install
by Tamsy 05 Dec '10

05 Dec '10

Dear List, up to Dovecot 2.07 I used "--enable-header-install" for the Sieve Plugin when configuring Dovecot before compiling. With 2.0.8 I get the following message when running the configure script: "configure: WARNING: unrecognized options: --enable-header-install" Is this intentionally? Is there a substitute directive for Sieve when compiling Dovecot 2.08? Rgds Tamsy

2 2

[Dovecot] Strange config behaviour while using /etc/dovecot/auth.d/somename.auth
by Mark Alan 04 Dec '10

04 Dec '10

While using Ubuntu 10.10 + Dovecot 1.2.12 + Postfix 2.7.1-1: To export the authentication interface to Postfix, besides the usual smtpd_sasl_* lines at postfix, I am using: the following /etc/dovecot/auth.d/somename.auth file: socket listen { client { path = /var/spool/postfix/private/auth-client mode = 0660 user = postfix group = postfix } } But after restarting dovecot and doing a 'sudo dovecot -n' I get: ... socket: type: listen client: path: /var/spool/postfix/private/auth-client mode: 432 user: postfix group: postfix As 660<>432, is this Dovecot 1.2.12's expected behaviour? Thank you. M.

2 2

[Dovecot] Passwords not returned without auth_bind ?
by Mohit Chawla 04 Dec '10

04 Dec '10

Hi, Maybe I am missing something simple, but I can't get users authenticated using password lookups, as opposed to auth_bind. This is how the log looks like when using password lookup: dovecot: auth(default): new auth connection: pid=2449 dovecot: auth(default): client in: AUTH#0111#011PLAIN#011service=imap#011secured#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=43458#011resp=<hidden> dovecot: auth(default): ldap(foo,127.0.0.1): pass search: base=uid=foo,ou=people,dc=djb,dc=hell,dc=qua scope=base filter=(accountStatus=noaccess) fields=(none) slapd[1834]: conn=1083 op=1 SRCH base="uid=foo,ou=people,dc=djb,dc=hell,dc=qua" scope=0 deref=0 filter="(accountStatus=noaccess)" slapd[1834]: conn=1083 op=1 SRCH attr=(none) slapd[1834]: conn=1083 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text= dovecot: auth(default): ldap(foo,127.0.0.1): unknown user dovecot: auth(default): ldap(foo,127.0.0.1): pass search: base=ou=people,dc=djb,dc=hell,dc=qua scope=subtree filter=(accountStatus=active) fields=uid,userPassword,homeDirectory,uidNumber,gidNumber,mailQuotaSize slapd[1834]: conn=1084 op=1 SRCH base="ou=people,dc=djb,dc=hell,dc=qua" scope=2 deref=0 filter="(accountStatus=active)" slapd[1834]: conn=1084 op=1 SRCH attr=uid userPassword homeDirectory uidNumber gidNumber mailQuotaSize dovecot: auth(default): ldap(foo,127.0.0.1): result: uid(user)=foo uidNumber(userdb_uid)=1008 gidNumber(userdb_gid)=1008 homeDirectory(userdb_home)=/home/foo mailQuotaSize(userdb_quota_rule=*:bytes=%$)=*:bytes=10000000 dovecot: auth(default): ldap(foo,127.0.0.1): No password returned (and no nopassword) slapd[1834]: conn=1084 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= dovecot: auth(default): client out: FAIL#0111#011user=foo *dovecot-ldap.pass* uris = ldap://10.5.3.101 dn = uid=dove,ou=people,dc=djb,dc=hell,dc=qua dnpass = debian auth_bind = no ldap_version = 3 base = ou=people,dc=djb,dc=hell,dc=qua scope = subtree pass_filter = (accountStatus=active) pass_attrs = uid=user,userPassword=password,\ homeDirectory=userdb_home,uidNumber=userdb_uid,gidNumber=userdb_gid,mailQuotaSize=userdb_quota_rule=*:bytes=%$ *dovecot-ldap.deny* uris = ldap://10.5.3.101 ldap_version = 3 base = uid=%u,ou=people,dc=djb,dc=hell,dc=qua scope = base auth_bind = no pass_filter = (accountStatus=noaccess) pass_attrs = (none) *dovecot.conf* # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-3-686 i686 Debian squeeze/sid log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap managesieve listen(default): * listen(imap): * listen(managesieve): *:2000 ssl: no disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_privileged_group: mail mail_location: maildir:~/Maildir mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): quota mail_plugins(imap): quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve managesieve_logout_format(default): bytes=%i/%o managesieve_logout_format(imap): bytes=%i/%o managesieve_logout_format(managesieve): bytes=%i%o lda: postmaster_address: bar(a)djb.hell.qua mail_plugins: quota sieve deliver_log_format: msgid=%m: %$ sendmail_path: /usr/lib/sendmail log_path: /var/log/ldaone info_log_path: /var/log/ldatwo debug: yes auth default: debug: yes passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.deny deny: yes passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.pass userdb: driver: prefetch userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.user socket: type: listen master: path: /var/run/dovecot/auth-master mode: 438 plugin: quota: maildir sieve: ~/.dovecot.sieve sieve_dir: ~/sieve

2 5

[Dovecot] SIS errors - was Error from mobile client (Palm Pre)
by Daniel L. Miller 04 Dec '10

04 Dec '10

Continuing to see errors on this with some new messages. Is it possible this has anything to do with zlib plugin, or possibly having a mix of zlib compressed & uncompressed messages with mdbox? I recently added zlib to deliver plugin list. -- Daniel L. Miller, VP - Engineering, SET AM Fire & Electronic Services, Inc. [AMFES] dmiller(a)amfes.com 702-312-5276

2 15

[Dovecot] typo
by Mike Abbott 04 Dec '10

04 Dec '10

Typo on line 292 of src/lib-master/master-login-auth.c in 2.0.8: tuah.

2 1

[Dovecot] thunderbird crashed-mail_max_userip
by Paul Cartwright 04 Dec '10

04 Dec '10

thunderbird just crashed, and I've never seen this before. Any idea what happened? this was in the dovecot log: 2010-12-02 13:06:40 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:40 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:40 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:40 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:41 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:41 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:41 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:41 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:42 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:42 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured -- Paul Cartwright Registered Linux user # 367800

4 5

[Dovecot] v2.0.8 released
by Timo Sirainen 03 Dec '10

03 Dec '10

http://dovecot.org/releases/2.0/dovecot-2.0.8.tar.gz http://dovecot.org/releases/2.0/dovecot-2.0.8.tar.gz.sig There are many small fixes all around, plus some more noticeable changes: * Services' default vsz_limits weren't being enforced correctly in earlier v2.0 releases. Now that they are enforced, you might notice that the default limits are too low and you need to increase them. This problem will show up in logs as "out of memory" errors. See default_vsz_limit and service { vsz_limit } settings. * LMTP: In earlier versions if mail was delivered to user+detail@domain address, LMTP server always attempted to deliver the mail to mailbox named "detail". This was rather unintentional and shouldn't have been the default. lmtp_save_to_detail_mailbox=yes setting now preserves this behavior (default is no). + Added systemd support (configure --with-systemdsystemunitdir). Based on patch by Christophe Fergeau. + Replaced broken mbox-snarf plugin with a new more generic snarf plugin. - dbox: Fixes to handling external mail attachments - verbose_proctitle=yes didn't work for all processes in v2.0.7 - imap, pop3: When service { client_count } was larger than 1, the log messages didn't use the correct prefix. Last logged in user's prefix was always used, regardless of what user's session actually logged it. Now the proper log prefix is always used. - MySQL: Only the first specified host was ever used

1 0

[Dovecot] Debian Dovecot Repo and Lenny
by Stephan Jauernick 03 Dec '10

03 Dec '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I am running a Debian Lenny and i want to install/update Dovecot but i am getting these Dependency Problems: dovecot-common: Depends: libc6 (>= 2.10) but 2.7-18lenny6 is to be installed Depends: libgssapi-krb5-2 (>= 1.6.dfsg.2) but it is not installable Depends: libk5crypto3 (>= 1.6.dfsg.2) but it is not installable Depends: libkrb5-3 (>= 1.6.dfsg.2) but it is not installable Depends: libmysqlclient16 (>= 5.1.21-1) but it is not going to be installed Depends: libpq5 (>= 8.4~0cvs20090328) but 8.3.12-0lenny1 is to be installed Depends: libsqlite3-0 (>= 3.6.22) but 3.5.9-6 is to be installed Depends: libssl0.9.8 (>= 0.9.8m-1) but 0.9.8g-15+lenny9 is to be installed dovecot-imapd: Depends: libssl0.9.8 (>= 0.9.8m-1) but 0.9.8g-15+lenny9 is to be installed dovecot-pop3d: Depends: libssl0.9.8 (>= 0.9.8m-1) but 0.9.8g-15+lenny9 is to be installed This are my sources.list entries for dovecot: deb http://xi.rename-it.nl/debian/ stable-auto/dovecot-2.0 main deb-src http://xi.rename-it.nl/debian/ stable-auto/dovecot-2.0 main Also when could i expect a release/deb package which includes this Commit(or how can in package it myself)? * src/lib/askpass.c: askpass: Allow reading password from stdin even if it's not a tty. [719ce27f9955] I need it because postfixadmin fails otherwise while using the doveadm tool. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (MingW32) Comment: Protect messages and files using GnuPG and OpenSSL! Comment: GnuPG-Pack: http://home.arcor.de/rose-indorf Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEVAwUBTPjoyOlWJjWCxiMpAQLpWQf6Axy22rqAEKGGyWK7eR/eBViFrtIgVP7R SNXnNe/b9QfbsSKsvBaZFtueiOm2GtfLC/8kQefzEfNoGHPqGPlSbJ5PQNZjgI9C wAkfFRD4dxH8YeACKk36HTPUJZOCHnxXXxBhdA39/ba8s+CNp0n6ct9ShG7tnmQe 382jYcxQMw1SOeXkf4sq4TPxqwR60Ij4ocUkzI2fHHoRXfIrlBsl/dsmyjhaJKt8 qElk2NK8IRSb7qMZSeV6a2y56QD9kgoBE7UDjGnwZ6SlMWXZ1L7rC3SvtJ8serkO vno3pzsG7dNwSVIyD4QkNneqH6OR+xZ8j6jHhOfg62W/xPdMxOZwRA== =1BUd -----END PGP SIGNATURE-----

3 4

Re: [Dovecot] how do I fix this
by donovan jeffrey j 03 Dec '10

03 Dec '10

On Dec 3, 2010, at 11:20 AM, Timo Sirainen wrote: > On 3.12.2010, at 13.31, donovan jeffrey j wrote: > >> so i can just take the files from /cur and copy them into the other directory ? >> >> like >> >> cd /Volumes/x/var/spool/imap/dovecot/9EE12CA8-CC7B-4889-ABBA-525E5D522831/cur >> >> cp -Rf * /Volumes/x/var/spool/imap/dovecot/330CE746-6F8D-4708-8877-A97FAFB9AAD/cur > > Yes. > >> what a bout syncing or index do I have to do anything like a restart or will dovecot pickup on the fly? > > Dovecot picks them up automatically. > thanks there was a little change perms that i needed to do, the cp made the owner of *.files root :) a mv should have been my choice but I did not want to risk loosing to some index land. thanks for your help. -j

1 0

[Dovecot] Indexes.
by Henrique Fernandes 03 Dec '10

03 Dec '10

Hello people! I have huge problems with IO wait becase dovecot configured to use maildir is under OCFS2 1.4. Now i have an question to OCFS2 each disk action is really heavy becaue it has no index. Now i am thinking in what can be done to heltp my system to use less disk. Looking for index and etc in dovecot i found this, this disables the index file on disk and leave it on ram or it disable the index files ? If you really want to, you can also disable the index files completely by appending :INDEX=MEMORY I am only trying to get dovecot to work faster. Right now we have to waing some seconds to dovecot list all emails or read an email. I am also thinking in right index to an NFS but i don't know if this makes any diferences in performance. Thanks to all! I use 3 servres wrinting on OCFS2 one is mailman, and other two are to email, I have ipvs to load balance the conections. []'sf.rique

3 5

[Dovecot] Dovecot lmtp
by Benedetto Vassallo 03 Dec '10

03 Dec '10

Hello to all, I am setting up a mail server using sendmail and dovecot 2.0.7 with maildir storage. I want to use dovecot lmtp as local mail delivery agent becouse when I send a message to multiple recipients it deliver the message to all recipients with hard links instead of store n copies of the message. The only think I can't set up is make dovecot-lmtp reading the .forward file in the user's home directory. I think I am missing something, becouse dovecot-lda read that file but don't do hard links when deliver the mail. What I am missing? Thank you -- Benedetto Vassallo Sistema Informativo di Ateneo Settore Gestione Reti Hardware e Software U.O. Sviluppo e manutenzione dei sistemi Università degli studi di Palermo Red Hat Certified Engineer Certificate Number: 804007793324656 Phone: +3909123860056 Fax: +390916529124 ------------------------------------------------------------------------- This message was sent using the University of Palermo web mail interface.

2 2

[Dovecot] SSL issues on separate IPs
by Tim Traver 03 Dec '10

03 Dec '10

Hi Timo, I have set up 2.07 to answer on several different IP's with different SSL certs, like the following : local 209.132.xx.4 { ssl_cert = </shared/templates/res/1040/certs/*.xxxxx.com.crt-pem-298 ssl_key = </shared/templates/res/1040/certs/*.xxxxx.com.key-298 } I have several of these, and there appears to be a problem with one in particular that is dropping connections, and I'm not sure why. In this case it is a wildcard cert issued from godaddy, and I have the cert file in pem format with the chain on it. I have another completely separate local IP setup with a different cert on it that works without any problems. This particular one drops the connection when I try to connect to IMAP using TLS on port 143, or using the IMAP SSL port of 993. When I try it using Thunderbird, I am using the default settings for both tests. The Thunderbird error I get is "The server has disconnected. The server may have gone down or there may be a network problem." I don't see any errors in the dovecot error log or the system error log, and when using doveadm who to view the current connections, it does not show a connection. I tried enabling the logs for SSL errors, but nothing appears for my IP when attempting to connect. FreeBSD 8.1 with openssl 0.9.8n. The IP's are on the box and are on the loopback interface if that makes any difference for a direct server return load balancing system. But, I don't know how that would make a difference since one of the separated IP's works with its cert, and the other one disconnects. Thanks, Tim. Here is my dovecot -n output : # 2.0.7: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.1-STABLE i386 auth_username_format = %Lu auth_username_translation = %@ auth_verbose = yes disable_plaintext_auth = no dotlock_use_excl = yes first_valid_uid = 100 listen = * lock_method = dotlock log_path = /local/logs/dovecot.errors mail_fsync = always mail_gid = 100 mail_location = maildir:%h/Maildir mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = " quota" mail_uid = 100 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date imapflags notify mmap_disable = yes passdb { args = /bin/checkpassword_dovecot_auth driver = checkpassword } plugin { quota = maildir:User quota quota_rule = Trash:storage=+100M sieve = ~/.dovecot.sieve sieve_after = /home/mailboxes/sieve/to_spam_folder.sieve sieve_dir = ~/Maildir/sieve sieve_extensions = +notify +imapflags } protocols = imap pop3 sieve service auth { unix_listener auth-userdb { group = sn mode = 0600 user = sn } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = prefetch } userdb { args = /bin/checkpassword_dovecot_deliver driver = checkpassword } verbose_proctitle = yes verbose_ssl = yes protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { info_log_path = /local/logs/dovecot-deliver.log log_path = /local/logs/dovecot-deliver-errors.log mail_plugins = " quota sieve" } protocol imap { mail_plugins = " quota imap_quota" } protocol sieve { managesieve_sieve_capability = comparator-i;ascii-numeric fileinto reject vacation imap4flags notify include envelope body relational regex subaddress copy } local 209.132.77.4 { ssl_cert = </shared/templates/res/1040/certs/*.xxxxx.com.crt-pem-298 ssl_key = </shared/templates/res/1040/certs/*.xxxxx.com.key-298 } local 209.132.79.1 { ssl_cert = </shared/templates/res/1000/certs/*.ssl.xxxxx.com.crt-278 ssl_key = </shared/templates/res/1000/certs/*.ssl.xxxxx.com.key-278 }

3 7

[Dovecot] Static userdb with LDAP passdb but without "allow_all_users=yes"?
by Andreas Ntaflos 03 Dec '10

03 Dec '10

Hi, Is it possible to have a static user database along with an LDAP password database and *not* be forced to set "allow_all_users=yes" for the userdb? The wiki page on static user database says "Normally static userdb handles this by doing a passdb lookup instead." How should the passdb behave in order for this to work? In my tests (on a test server) I am using Dovecot 2.0.7 and Postfix 2.7.0 on Ubuntu 10.04.1. I use (or am trying to use) LMTP with Dovecot and Postfix according to the HOWTO in the wiki [1] as well as dynamic address verification with LMTP [2]. Users are virtual, using a static userdb and passwords from LDAP. I also serve local system users which is why I also have userdb and passdb pam, but this isn't the issue here. Delivering mail to an existing virtual user works fine as far as I can see but when a non-existent user is the recipient Dovecot complains that the passdb doesn't support lookups: postfix/smtpd[26469]: connect from remote-smtp.example.net[10.0.0.10] postfix/cleanup[26474]: 772A760B25: message- id=<20101125172409.772A760B25(a)mailtest.example.com> postfix/qmgr[27672]: 772A760B25: from=<double- bounce(a)mailtest.example.com>, size=276, nrcpt=1 (queue active) dovecot: lmtp(22109): Connect from local dovecot: auth: Error: static(not-a-user(a)test01.example.com): passdb doesn't support lookups, can't verify user's existence dovecot: lmtp(22109): Error: user not-a-user(a)test01.example.com: Auth USER lookup failed dovecot: lmtp(22109): Disconnect from local: Client quit postfix/lmtp[26475]: 772A760B25: to=<not-a-user(a)test01.example.com>, relay=mailtest.example.com[private/dovecot-lmtp], delay=0.18, delays=0.17/0.01/0/0, dsn=4.3.0, status=undeliverable (host mailtest.example.com[private/dovecot-lmtp] said: 451 4.3.0 <not-a- user(a)test01.example.com> Internal error occurred. Refer to server log for more information. (in reply to RCPT TO command)) postfix/qmgr[27672]: 772A760B25: removed postfix/smtpd[26469]: NOQUEUE: reject: RCPT from remote- smtp.example.net[10.0.0.10]: 450 4.1.1 <not-a-user(a)test01.example.com>: Recipient address rejected: unverified address: ho st mailtest.example.com[private/dovecot-lmtp] said: 451 4.3.0 <not-a- user(a)test01.example.com> Internal error occurred. Refer to server log for more information. (in reply to RCPT TO command); from=<andreas.ntaflos(a)example.net> to=<not-a-user(a)test01.example.com> proto=ESMTP helo=<remote-smtp.example.net> postfix/smtpd[26469]: disconnect from remote-smtp.example.net[10.0.0.10] I've uploaded this log file excerpt for your viewing convenience to https://daff.pseudoterminal.org/misc/dovecot/failed_delivery.log More relevant information (doveconf -n, dovecot-ldap.conf) is found below. I can also provide a log excerpt from a successful delivery to an existing virtual user, if needed. To summarise: I want to use LMTP, dynamic address verification, a static user database and an LDAP password database. Can it be done without having to rely on the MTA (Postfix) to verify existing users? Thanks in advance! Andreas [1] http://wiki2.dovecot.org/HowTo/PostfixDovecotLMTP [2] http://wiki2.dovecot.org/LDA/Postfix dovecot-ldap.conf: uris = ldap://ldap.example.com:389 tls = yes tls_ca_cert_file = /etc/ssl/certs/ca-certificates.crt base = ou=virtualDomains,dc=example,dc=com dn = uid=dovecot,ou=services,dc=example,dc=com dnpass = xxx pass_attrs=uid=user, userPassword=password pass_filter=(&(objectClass=hostedAccount)(uid=%u)(accountEnabled=TRUE)) iterate_attrs = uid=user iterate_filter = (objectClass=hostedAccount) doveconf -n: https://daff.pseudoterminal.org/misc/dovecot/doveconf-n.txt -- Andreas Ntaflos Vienna, Austria GPG Fingerprint: 6234 2E8E 5C81 C6CB E5EC 7E65 397C E2A8 090C A9B4

2 4

Re: [Dovecot] Indexes.
by Robert Schetterer 03 Dec '10

03 Dec '10

Am 02.12.2010 14:53, schrieb Henrique Fernandes: > I have abou 9000 clients. many clients > > 500 GB of storage used small store anyway you shouldnt run into problems with that > > About the mail option at ocfs2 store creating, i guess the other guy > that format the storage system did not use. what a pitty , mail option help with small files performance like indexes and mail etc as far i remember > > We are looking into ocfs2 1.6 that was out few months ago. But we are > not able to get it running on or Centos5.5 yet. hm centos is more redhat style i speculate Red Hat GFS would have been the better choice is there a list at centos/redhat/ocfs you might can asked about bugs with your ocfs2/distro combination ? > > Are you talking abvout this optimizations? > > Dovecot supports reading a few fields from the <base filename>: > > * > > ,S=<size>: <size> contains the file size. Getting the size > from the filename avoids doing a stat(), which may improve the > performance. This is especially useful with Maildir++ quota > <http://wiki.dovecot.org/Quota/Maildir>. > > * > > ,W=<vsize>: <vsize> contains the file's RFC822.SIZE, ie. the > file size with linefeeds being CR+LF characters. If the > message was stored with CR+LF linefeeds, <size> and <vsize> > are the same. Setting this may give a small speedup because > now Dovecot doesn't need to calculate the size itself. > > A maildir filename with those fields would look something like: > 1035478339.27041_118.foo.org > <http://1035478339.27041_118.foo.org>,S=1000,W=1030:2,S as far i remember keep close to nfs recommands http://wiki2.dovecot.org/NFS FS caching problems NFS caching is a big problem when multiple computers are accessing the same mailbox simultaneously. The best fix for this is to prevent it from happening. Configure your setup so that a user always gets redirected to the same server (unless it's down). This also means that mail deliveries must be done by the same server, or alternatively it shouldn't update index files. Dovecot flushes NFS caches when needed if you set mail_nfs_storage=yes, but unfortunately this doesn't work 100%, so you can get random errors. Disabling NFS attribute cache helps a lot in getting rid of caching related errors, but this makes the performance MUCH worse and increases the load on NFS server. This can usually be done by giving actimeo=0 or noac mount option. Index files As described above, it's better to redirect users to the same server whenever possible. If you do this, it might also be a good idea to keep index files stored locally in that server. If user gets occasionally redirected to another server, the indexes will then be created locally there. This isn't a problem. However you might want to create a cronjob to delete old index directories. If you choose to keep the index files stored in NFS, you'll need to set mmap_disable=yes. Both the mmap_disable and indexing to NFS will result in a notable performance hit. If you're not running lockd you'll have to set lock_method=dotlock, but this degrades performance. Note that many NFS installations have problems with lockd. If you're beginning to get all kinds of locking related errors, try if the problems go away with dotlocking. ------------- but i agree, there should be more info with cluster file systems in the wiki perhaps Timo has time to send recommands by mail, i am not sure that mine are optimal ( whatever i have no problems yet ) > > > I will try send an image on the load of machine. > > > []'sf.rique > > > On Thu, Dec 2, 2010 at 11:25 AM, Robert Schetterer > <robert(a)schetterer.org <mailto:robert@schetterer.org>> wrote: > > Am 02.12.2010 14:10, schrieb Henrique Fernandes: > > With recomendation settings do you have ? > > http://wiki2.dovecot.org/MailLocation/SharedDisk > > and a few more optimizes about maildir > > > > how many clients ? > > i started the server not long ago so they are less yet ( about 100 > maildirs ) > but i have my own account in it which has massive mails ( 10 GB store > with over 1000 mails daily in out , and perhaps 10000 mails in store) > > > > > sorry, i did not say i use dovecot 2.0.6 > > looks fine, update to 2.0.8 if ready > > > did you use the mail option at ocfs2 store creation ? > > what os/distro do you use , i remember bugs with ocfs with some distro > versions > > > > > []'sf.rique > > > > > > On Thu, Dec 2, 2010 at 10:40 AM, Robert Schetterer > > <robert(a)schetterer.org <mailto:robert@schetterer.org> > <mailto:robert@schetterer.org <mailto:robert@schetterer.org>>> wrote: > > > > Am 02.12.2010 13:13, schrieb Henrique Fernandes: > > > Hello people! > > > > > > I have huge problems with IO wait becase dovecot configured > to use > > maildir > > > is under OCFS2 1.4. Now i have an question to OCFS2 each disk > > action is > > > really heavy becaue it has no index. > > > > > > Now i am thinking in what can be done to heltp my system to use > > less disk. > > > > > > Looking for index and etc in dovecot i found this, this > disables > > the index > > > file on disk and leave it on ram or it disable the index files ? > > > > > > If you really want to, you can also disable the index files > > completely by > > > appending :INDEX=MEMORY > > > > > > > > > I am only trying to get dovecot to work faster. Right now we > have > > to waing > > > some seconds to dovecot list all emails or read an email. > > > > > > I am also thinking in right index to an NFS but i don't know if > > this makes > > > any diferences in performance. > > > > > > Thanks to all! > > > > > > I use 3 servres wrinting on OCFS2 one is mailman, and other two > > are to > > > email, I have ipvs to load balance the conections. > > > > > > > > > []'sf.rique > > > > > > > hm , i have no problems with ocfs2 (1.4.3-1: amd64 ) on drbd > ubuntu > > lucid > > using dovecot vers 2 recommended settings for cluster file systems > > i have my index files in the maildir dir > > > > -- > > Best Regards > > > > MfG Robert Schetterer > > > > Germany/Munich/Bavaria > > > > > > > -- > Best Regards > > MfG Robert Schetterer > > Germany/Munich/Bavaria > > -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

3 2

[Dovecot] Virtual folder root cannot be opened, virtual folders ok
by Tom Talpey 02 Dec '10

02 Dec '10

I am running dovecot 1.2.16 and not able to figure out an error that happens whenever I select the root of a virtual mailbox tree. At the moment I have a simple maildir store, accessed via IMAP, and have successfully added a virtual fs namespace with two subdirectories. I have created dovecot-virtual entries in the subdirs and they are working fine; they show the expected messages, etc. My problem is with the top-level virtual directory. If I happen to select it in Thunderbird (Eudora, actually), I receive a popup "The current command did not succeed. The mail server responded:Mailbox doesn't exist: Mobile." It also fails in the same way during search, which interrupts it and makes other client operations fail. I have tried placing a dovecot-virtual rule in the directory, leaving the directory empty, moving it in or out of the maildir tree, tweaking namespace and INDEX/LAYOUT options all with the same result - the subdirs are fine, the virtual root fails. I must be missing something obvious. Clue, please? Thanks! Relevant configuration: [~] # dovecot -n # 1.2.16: /etc/dovecot/dovecot.conf # OS: Linux 2.6.33.2 i686 ext4 ... mail_location: maildir:/var/MailRoot/domains/%d/%n/Maildir mail_executable: /usr/libexec/dovecot/imap mail_plugins: fts fts_squat virtual namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: Mobile/ location: virtual:%h/Mobile:INDEX=MEMORY list: yes subscriptions: yes ... [~] # ls -lsaR /var/MailRoot/domains/<d>/<u>/Maildir/Mobile Mobile: 4 drwx------ 4 xmail xmail 4096 Nov 30 16:06 ./ 20 drwx------ 243 xmail xmail 20480 Nov 30 20:55 ../ 4 -rw------- 1 xmail xmail 19 Nov 26 17:18 .virtual-subscriptions 4 drwx------ 2 xmail xmail 4096 Nov 29 10:54 Mail1/ 4 drwx------ 2 xmail xmail 4096 Nov 29 10:54 Mail2/ 4 -rw------- 1 xmail xmail 14 Nov 30 16:06 dovecot-virtual Mobile/Mail1: 4 drwx------ 2 xmail xmail 4096 Nov 29 10:54 ./ 4 drwx------ 4 xmail xmail 4096 Nov 30 16:06 ../ 4 -rw------- 1 xmail xmail 27 Nov 26 17:16 dovecot-virtual Mobile/Mail2: 4 drwx------ 2 xmail xmail 4096 Nov 29 10:54 ./ 4 drwx------ 4 xmail xmail 4096 Nov 30 16:06 ../ 4 -rw------- 1 xmail xmail 22 Nov 26 17:16 dovecot-virtual [~] #

2 2