- dovecot - dovecot.org

[Dovecot] MainConfig for dovecot 2.0
by Sascha Peters 31 Aug '10

31 Aug '10

Hey, for dovecot 1.2 there is a very good reference page for all options. http://wiki.dovecot.org/MainConfig is there a reference for dovecot 2.0 in the new wiki? If not, when will be this page online? Thanks a lot. -- Gruß Sascha

2 1

[Dovecot] NTLM authentication does not work
by Alexander Cherniak 31 Aug '10

31 Aug '10

Dear Experts, I configured Samba, Kerberos, etc., can login to my CentOS using ADS account, but missing something in my Dovecot config. Windbind seems to work: [root@aCentOs2 dovecot]# wbinfo -a wAlex%pass plaintext password authentication succeeded challenge/response password authentication succeeded Same is true for ntlm_auth helper: [root@aCentOs2 dovecot]# /usr/bin/ntlm_auth --username=wAlex --password=pass NT_STATUS_OK: Success (0x0) But I couldn't get into Dovecot (with or without auth_use_winbind option): . login wAlex pass . NO [ALERT] Unsupported authentication mechanism. Despite very verbose logging, there no clues there. Bellow's my dovecot -n output: # 2.0.0: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.11.1.el5 i686 CentOS release 5.5 (Final) auth_debug = yes auth_debug_passwords = yes auth_master_user_separator = * auth_mechanisms = ntlm auth_use_winbind = yes auth_verbose = yes auth_verbose_passwords = plain debug_log_path = /var/log/Dovecot/dovecot_debug.log disable_plaintext_auth = no info_log_path = /var/log/Dovecot/dovecot_info.log log_path = /var/log/Dovecot/dovecot.log mail_location = maildir:~/Maildir protocols = imap ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = uid=vmail gid=vmail home=/home/vmail/%u allow_all_users=yes driver = static } It might be irrelevant, but although the lines "auth_use_winbind = yes" and "auth_winbind_helper_path = /usr/bin/ntlm_auth" are close together in the config file, I cannot see the latter when run dovecot -n. I am quite new to Dovecot and will appreciate any help. Thanks, Alex.

2 2

[Dovecot] Possible erroneous "aborted login attempts"
by Jerrale G 31 Aug '10

31 Aug '10

Aug 29 22:51:27 server1 dovecot: imap-login: Aborted login (no auth attempts): rip=(obfuscated), lip=173.50.101.12, TLS Aug 29 22:51:27 server1 dovecot: imap-login: Login: user=........... before most every successful login, the same second of time, dovecot has the above message. This is not a huge problem but our firewall is looking for aborted login attempts, for imap/pop3 (relevant to dovecot) dos attempts and, if many people start having problems of their packets being dropped, we will have to stop looking for the statement or lower security slightly, more attempts over a period of time before filtering. However, thanks to your idle feature, there is less of these messages; so, I don't think we will have a problem. The only client that doesn't have a problem is our php webmail but we don't look in dovecot's log for failed attempts from here; as, it is from the same ip, to dovecot from php, constantly without reference to the user. This has been happening since 1.2.11 with us. We don't use any imap relay but was looking into imapproxy for cacheing speed and preventing advanced ddos attempts, those from users with access. Jerrale G. errale G. SC Senior Admin

2 1

[Dovecot] dovecot lda issue
by Joy 31 Aug '10

31 Aug '10

I am using dovecot lda and everything is working fine for me except the sieve rule which is built for rejecting mail from a specific sender. message is being rejected but from address is not correct in rejection mail which looks like the following :- <<>@mail.xyz.net> sieve rule :- require ["fileinto","envelope","reject","vacation","imap4flags","relational","comparator-i;ascii-numeric","regex","body","date"]; if address :contains "From" "xyz(a)gmail.com" { reject text: Please do not send mail to me piyush .... . ; } Please let me know where is the issue with sieve rule or with lda setting :- lda has been configured with the following parameter :- postmaster_address = postmaster(a)xyz.net

2 1

[Dovecot] dovecot - mac firewall problem
by Patrick Fay 31 Aug '10

31 Aug '10

> >>>> Hi, >>>> I am running dovecot 1.2.11 on mac osx 1.5.8. Everything works >>>> perfectly with the application-level firewall off, but enabling the >>>> application firewall prevents dovecot connections. I have tried >>>> explicitly authorizing dovecot in the firewall, but it does not work. I >>>> have searched everywhere I can think of to look, and haven't found a >>>> solution, but have seen a couple other reports of what seems to be the >>>> same problem. The firewall logs the activity with what looks like a >>>> corrupt process name: a typical appfirewall.log entry looks like: >>>> >>>> Aug 26 20:43:45 hostname Firewall[55]: Deny ^L connecting from >>>> XX.XX.XX.XX:37310 uid = 0 proto=6 >>>> Aug 26 20:43:53 hostname Firewall[55]: Deny ^H?^U???^Z connecting from >>>> XX.XX.XX.XX:37310 uid = 0 proto=6 >>>> Aug 26 20:44:09 hostname Firewall[55]: Deny ^L connecting from >>>> XX.XX.XX.XX:37310 uid = 0 proto=6 >>>> Aug 26 20:44:34 hostname Firewall[55]: Deny ^L connecting from >>>> XX.XX.XX.XX:37312 uid = 0 proto=6 >>>> Aug 26 20:44:45: --- last message repeated 6 times --- >>>> >>>> where "hostname" is my server name and the XX's are my client's IP >>>> address. For all of the other services I've used, the process name >>>> (e.g. dovecot) should appear after "Deny" when blocking traffic, instead >>>> of the funny characters. Any advice on how I could resolve this issue >>>> would be greatly appreciated. Thanks! >>> >>> >> >> I was hoping to use the application firewall because this machine gets used both as a server as well as a client machine for more general use. I haven't been able to find any specific documentation for it, but I have found that the firewall works fine with postfix and several file services I use (enabling/disabling works as expected, process names get logged as expected, etc). Thanks! >> >> Patrick > > So, you're running Dovecot and Postfix on a laptop? WTF? > > -- > Stan Hi, Sorry for the confusion--no laptop involved. Postfix, dovecot, etc, all running on intel-based desktop mac (a mac pro). Patrick

5 5

[Dovecot] mixing 1.2 and 2.0?
by Cor Bosman 31 Aug '10

31 Aug '10

Hi all, anyone know if it's safe to mix a 1.2 environment with 2.0 servers? Im planning on adding some 2.0 servers for test purposes, but now im wondering if thats going to mess up index files or other files for users selecting the test server and then switching back to our normal servers. Regards, Cor

2 1

Re: [Dovecot] dovecot - mac firewall problem
by Patrick Fay 31 Aug '10

31 Aug '10

Hi, Thanks everyone for your help and input. I think perhaps my attempt to be brief and focused in posing my question has led to some confusion about my needs and configuration. I do not have the luxury of being able to segregate the server (postfix and dovecot) from client (GUI, etc) on different machines. I am, as Charles' surmised, using this to aggregate disparate mail streams into a single location, and using dovecot to serve it. Since I must run client-ish applications on this machine, the application firewall is desirable. The anticipated load on this system from the server side is quite light, so the throughput overhead incurred by the application firewall is negligible. The problem appears to be that--for some reason--dovecot identifies itself incorrectly to the application firewall, resulting in the garbage shown in the logs and failure to permit this connection (the firewall is configured to explicitly permit connections for dovecot). I note that other daemons (e.g. postfix, sshd, etc) do not exhibit this defect; the firewall works as expected for every other service I've tried except dovecot. The logs for the firewall appear as: Aug 26 20:43:45 hostname Firewall[55]: Deny ^L connecting from XX.XX.XX.XX:37310 uid = 0 proto=6 Aug 26 20:43:53 hostname Firewall[55]: Deny ^H?^U???^Z connecting from XX.XX.XX.XX:37310 uid = 0 proto=6 Both of these are dovecot hits--but the name is different each time. Also the ?'s aren't really "?" marks; they're trans-ascii characters with high bits set that my mailer doesn't like very much. It really looks like a misdirected pointer or something somewhere, but I'm not familiar enough with the codebase to know where to start looking, or if in fact it is something else that is misconfigured. Any thoughts on how to resolve this? Patrick

3 2

[Dovecot] getdents() with 4KB buffer - seems slow (Maildir, large inbox)
by Marinos Yannikos 31 Aug '10

31 Aug '10

Hi, I have a very large inbox (~146K mails) in Maildir format and dovecot seems to spend a lot of time rescanning the directory, especially when the server is loaded. I'm not sure whether this is triggered by Thunderbird or done regularly, but it takes longer when the server is loaded, so sometimes it seems that it is scanning continuously. Since it takes around 2000 getdents64() syscalls to scan my inbox, I'm wondering whether the buffer size is a bit small with 4KB and might benefit from being configurable: ... getdents64(8, /* 73 entries */, 4096) = 4088 getdents64(8, /* 73 entries */, 4096) = 4088 getdents64(8, /* 73 entries */, 4096) = 4088 getdents64(8, /* 73 entries */, 4096) = 4088 getdents64(8, /* 73 entries */, 4096) = 4088 ... (strace output of an imap process belonging to me) The behaviour is identical on 1.0.15 and 1.2.13 (I just upgraded). Regards, Marinos PS. I know that the main reason for slowness is my large inbox and the server being loaded (disk I/O), but still, so many syscalls just to rescan the inbox seems wasteful. # dovecot -n # 1.2.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-6-xen-686 i686 Debian 4.0 log_timestamp: %Y-%m-%d %H:%M:%S ssl_listen: * ssl_cert_file: XXXXX (censored) ssl_key_file: XXXXX login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login login_process_size: 32 login_processes_count: 8 verbose_proctitle: yes mail_privileged_group: mail mail_location: maildir:~/Maildir mbox_write_locks: fcntl dotlock mail_process_size: 2048 imap_client_workarounds: outlook-idle auth default: passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix

2 1

[Dovecot] Mail error in log
by Ian macdonald 31 Aug '10

31 Aug '10

Hi All, I am getting the following in the mail error log deliver(julie): safe_mkstemp(/home/julie/.temp.geomail.10443.) failed: Permission denied This is correct julie does not have access to write to her home directory Julie is a system user who is chrooted so her home is owned by root, this is for when she logs in via sftp to retrieve files she can only access folders below her home. I am using Maildir and julie does have access to ~Maildir, is there any reason why deliver is attempting to use her user directory and not her Maildir? Cheers Ian

3 3

[Dovecot] istream_read like zlib, but without zlib
by Alex Baule 31 Aug '10

31 Aug '10

Hy Timo ! I Made some modification in stream_read in zlib. I remove all zlib part, because i don't need this, but i need to read a istream to change it. Well, i create a size_t called supersize, with is a substitute for stream->zs.avail_in. The trouble is, my debug file have a lot of "READ Plugin\n", and i think it's because my read becomes a loop, i think it's because i don't know to identify the EOF from the istream. you can help me to identify the EOF and set it ? Tks .!!! static ssize_t i_stream_emx_read(struct istream_private *stream) { struct emx_istream *emxstream = (struct emx_istream *)stream; const unsigned char *data; uoff_t high_offset; size_t size; int ret; fprintf(emxstream->debug,"READ Plugin\n"); fflush(emxstream->debug); high_offset = stream->istream.v_offset + (stream->pos - stream->skip); if (emxstream->eof_offset == high_offset) { i_assert(emxstream->high_pos == 0); stream->istream.eof = TRUE; return -1; } if (stream->pos < emxstream->high_pos) { /* we're here because we seeked back within the read buffer. */ ret = emxstream->high_pos - stream->pos; stream->pos = emxstream->high_pos; emxstream->high_pos = 0; return ret; } emxstream->high_pos = 0; if (stream->pos + CHUNK_SIZE > stream->buffer_size) { /* try to keep at least CHUNK_SIZE available */ if (!emxstream->marked && stream->skip > 0) { /* don't try to keep anything cached if we don't have a seek mark. */ i_stream_compress(stream); } if (stream->max_buffer_size == 0 || stream->buffer_size < stream->max_buffer_size) i_stream_grow_buffer(stream, CHUNK_SIZE); if (stream->pos == stream->buffer_size) { if (stream->skip > 0) { /* lose our buffer cache */ i_stream_compress(stream); } if (stream->pos == stream->buffer_size) return -2; /* buffer full */ } } if(emxstream->supersize == 0){ /* need to read more data. try to read a full CHUNK_SIZE */ i_stream_skip(stream->parent, emxstream->prev_size); if (i_stream_read_data(stream->parent, &data, &size, CHUNK_SIZE-1) == -1 && size == 0) { if (stream->parent->stream_errno != 0) { stream->istream.stream_errno = stream->parent->stream_errno; } else { i_assert(stream->parent->eof); stream->istream.stream_errno = EPIPE; } return -1; } emxstream->prev_size = size; if (size == 0) { /* no more input */ stream->istream.eof = TRUE; i_assert(!stream->istream.blocking); return 0; } fprintf(emxstream->debug,"READ =|%s|= Plugin\n",data); fflush(emxstream->debug); memcpy(stream->w_buffer + stream->pos, data,size); emxstream->supersize = size; } size = stream->buffer_size - stream->pos; stream->pos += size; if(stream->istream.eof == TRUE){ emxstream->eof_offset = stream->istream.v_offset + stream->pos; i_stream_skip(stream->parent, emxstream->prev_size - emxstream->supersize); emxstream->supersize = 0; emxstream->prev_size = 0; } if (size == 0) { /* read more input */ return i_stream_emx_read(stream); } return size; }

1 0

Re: [Dovecot] fetchmail wakeup
by Amon Ott 31 Aug '10

31 Aug '10

On Tuesday 31 August 2010 wrote Peter Dungel: > Does someone know, if in the new release of dovecot 2.x.x there is a > feature implemented, that wakes fetchmail or any other program on a client > request, or is the "fetchmail wakeup" plugin still the only way to do this > (at least I've not found any other, and that plugin never worked for me),.. You could replace the imap or pop3 helper program with a wrapper that first sends the fetchmail daemon a wakeup signal, waits a few secs and then calls the original. Amon Ott -- Dr. Amon Ott - m-privacy GmbH Am Köllnischen Park 1, 10179 Berlin Tel: +49 30 24342334 Fax: +49 30 24342336 Web: http://www.m-privacy.de Handelsregister: Amtsgericht Charlottenburg HRB 84946 Geschäftsführer: Dipl.-Kfm. Holger Maczkowsky, Roman Maczkowsky GnuPG-Key-ID: EA898571

1 0

[Dovecot] fetchmail wakeup
by Peter Dungel 31 Aug '10

31 Aug '10

Does someone know, if in the new release of dovecot 2.x.x there is a feature implemented, that wakes fetchmail or any other program on a client request, or is the "fetchmail wakeup" plugin still the only way to do this (at least I've not found any other, and that plugin never worked for me),.. Yours Peter

1 0

[Dovecot] Wrong MySQL sintax, I can't login
by Pablo 31 Aug '10

31 Aug '10

Hi guys: I can't login as a user: The output of mail.log: Aug 31 08:39:45 socrates dovecot: auth(default): client in: AUTH^I1^IPLAIN^Iservice=imap^Ilip=178.63.82.247^Irip=81.39.27.227^Ilport=143^Irport=33715^Iresp=AHBhYmxvLnJvZHJpZ3VlekBlc2N1ZWxhc3VwZXJpb3JkZWNvYWNoaW5nLmNvbQBwZXJpa2l0YS4= Aug 31 08:39:45 socrates dovecot: auth-worker(default): sql(pablo.rodriguez(a)escuelasuperiordecoaching.com,81.39.27.227): query: SELECT password FROM mailbox WHERE username = 'pablo.rodriguez(a)escuelasuperiordecoaching.com' Aug 31 08:39:45 socrates dovecot: auth(default): client out: OK^I1^Iuser=pablo.rodriguez(a)escuelasuperiordecoaching.com Aug 31 08:39:45 socrates dovecot: auth(default): master in: REQUEST^I65^I16796^I1 Aug 31 08:39:45 socrates dovecot: auth-worker(default): sql(pablo.rodriguez(a)escuelasuperiordecoaching.com,81.39.27.227): SELECT maildir, 1001 AS uid, 1001 AS gid FROM mailbox WHERE username = 'pablo.rodriguez(a)escuelasuperiordecoaching.com Aug 31 08:39:45 socrates dovecot: auth-worker(default): sql(pablo.rodriguez(a)escuelasuperiordecoaching.com,81.39.27.227): User query failed: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''pablo.rodriguez(a)escuelasuperiordecoaching.com' at line 1 Aug 31 08:39:45 socrates dovecot: auth(default): master out: FAIL^I65 Aug 31 08:39:45 socrates dovecot: imap-login: Internal login failure (auth failed, 1 attempts): user=<pablo.rodriguez(a)escuelasuperiordecoaching.com>, method=PLAIN, rip=81.39.27.227, lip=178.63.82.247 My Dovecot version: 1.2.9 My Dovecot configuration: # 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-23-server x86_64 Ubuntu 10.04.1 LTS reiserfs log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/ssl/mail/dovecot.crt ssl_key_file: /etc/ssl/mail/dovecot.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_location: maildir:/home/vmail/%u/ mail_debug: yes mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 auth default: mechanisms: plain login verbose: yes debug: yes debug_passwords: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail My Dovecot MySQL configuration: driver=mysql connect = host=localhost dbname=postfix user=postfix password=xxxxxx default_pass_scheme = CRYPT password_query = SELECT password FROM mailbox WHERE username = '%u' user_query = SELECT maildir, 1001 AS uid, 1001 AS gid FROM mailbox WHERE username = '%u Can anyone help me? I've seen that log told me "wrong syntax", but I think upper query is right, isn't it? Any hint? Thanks in advance :-)

2 2

[Dovecot] Combining ManageSieve with hand-written scripts
by Jason Bleazard 30 Aug '10

30 Aug '10

Hi, new to Dovecot, forgive me if I'm missing something basic... I'm trying to figure out if there's a way to use a couple of custom rules alongside ManageSieve. Most of the time I like the ManageSieve interface in Roundcube, but there's one rule that I can't get it to do the way I want (it's a notify rule, and I don't like the way Roundcube constructs the notify). I figured out how to write it by hand, but of course I can't put my own rules in Roundcube's file or it gets really confused. I tried adding an include to the generated file, but Roundcube politely removes it for me the next time I use the rule editor. (Squirrelmail doesn't seem to be any better in this regard.) I thought I could do something like sieve_before = ~/sieve/custom.sieve but that doesn't seem to work. I couldn't even see any evidence in the log that it attempted to look at that file. Apparently sieve_before isn't meant to work on a per-user basis. If I do a global sieve_before, can I have it "include :personal"? If so, what's going to happen with the script compilation? From what I understand, it can't be compiled globally, since each user has a different custom rule set. Am I trying to do the impossible here? Thanks for any ideas, Jason Bleazard

2 2

[Dovecot] Different IPs should use different ssl-certs/keys
by Peer Heinlein 30 Aug '10

30 Aug '10

I don't understand how to use multiple keys/certs on different IPs without SNI. http://wiki2.dovecot.org/SSL/DovecotConfiguration explains how to use different keys for different protocols like POP3 and IMAP. But how to bind those keys/ on IPs/Ports? Looks like it is not possible to use ssl_cert inside service { inet_listener {} } Is it still necessary to run multiple instances like it was in Dovecot 1.2.x? Peer -- Heinlein Professional Linux Support GmbH Linux: Akademie - Support - Hosting http://www.heinlein-support.de Tel: 030 / 40 50 51 - 0 Fax: 030 / 40 50 51 - 19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

2 1

[Dovecot] Dovecot dict process privileges
by Mike Mimic 30 Aug '10

30 Aug '10

Hi! Is it possible to configure Dovecot so that it drops privileges for dict process? Currently this process is running as root. (At least on my system with Dovecot 1.2.) Best regards Mike

3 8

Re: [Dovecot] dovecot - mac firewall problem
by Patrick Fay 30 Aug '10

30 Aug '10

> On 8/29/2010 8:51 PM, Patrick Fay wrote: >> Aug 26 20:43:45 hostname Firewall[55]: Deny ^L connecting from XX.XX.XX.XX:37310 uid = 0 proto=6 >> Aug 26 20:43:53 hostname Firewall[55]: Deny ^H?^U???^Z connecting from XX.XX.XX.XX:37310 uid = 0 proto=6 >> >> Both of these are dovecot hits--but the name is different each time. >> Also the ?'s aren't really "?" marks; they're trans-ascii characters >> with high bits set that my mailer doesn't like very much. It really >> looks like a misdirected pointer or something somewhere, but I'm not >> familiar enough with the codebase to know where to start looking, or >> if in fact it is something else that is misconfigured. Any thoughts >> on how to resolve this? > > Dovecot version? > > -- > > Best regards, > > Charles > My apologies-- dovecot version 1.2.11. Patrick

2 1

Re: [Dovecot] doveadm expunge -A mailbox Trash savedbefore 30d
by Jerrale G 30 Aug '10

30 Aug '10

Could you explain the iterate_query in any kind of sql. I'm guessing to just use the query, correctly, that's failing as iterate_query= and put it in the service auth file which includes password_query and user_query. then, I'm guessing to add something like: iteratedb { driver = sql args = /path/to/sql.conf } The wiki2 only says: "When the SQL userdb module is used make sure that the iterate_query setting in /etc/dovecot/dovecot-sql.conf.ext matches your database layout." it should give an example query. I don't know if its wanting to list the fields or the contents of a field. Thanks, Jerrale G Jerrale G. SC Senior Admin

1 0

[Dovecot] Can't get dovecot to see email folders
by Blaster 30 Aug '10

30 Aug '10

So I'm very frustrated, I've spent the better part of a day trying to get dovecot 2.0.1 working...Most of the documentation on the Wiki seems to think you are running an older version and therefore very little of it applies. I'm running 2.0.1 on OpenSolaris. I seem to have 2 remaining issues: 1) Dovecot is not able to determine the home directory 2) IMAP clients can not get to the mail folder directory. One client is reporting that it can't open it in read only mode. 3) I tried to get raw logging working, but apparently I couldn't because of #1. The architecture of Dovecot makes it difficult to transition from another IMAP server. If I force the MBOX to be /home/%u/mail, all of my clients think the folders are in /home/%u/mail/mail. If I set mbox location to /home/%u, then dovecot tries to create .subscription and .imap files/directories in the users home dir which it doesn't have permission to do. It would be nice if you could configure Dovecot in such a way as to make transition easier, such as the ability to strip off a duplicate trailing path, ie /home/%u/mail/mail becomes /home/%u/mail....Otherwise this necessitates visiting countless IMAP clients for reconfiguration... Here is my config file: /opt/sbin/dovecot -n # 2.0.1: /opt/etc/dovecot/dovecot.conf # OS: SunOS 5.11 i86pc base_dir = /var/run/dovecot/ mail_debug = yes mail_gid = mail mail_location = mbox:/home/%u/mail:INBOX=/var/mail/%u mail_privileged_group = mail mail_uid = dovecot passdb { driver = pam } plugin { home = /home/%u } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { address = * port = 993 } } service pop3-login { inet_listener pop3 { address = * port = 0 } inet_listener pop3s { address = * port = 0 } } ssl_cert = </usr/local/ssl/certs/dovecot.pem ssl_key = </usr/local/ssl/private/dovecot.pem gremlin [/opt/bin] # gremlin [/opt/bin] #

4 9

[Dovecot] PAM authentication fails
by Egbert Jan van den Bussche 29 Aug '10

29 Aug '10

Hi, I'm fighting all weekend on with auth and pam to authenticate local system users. testuser is such local user and is in passwd and shadow. I want to have local system users (testuser is one of them) and virtual users. The virtual part works fine but I cannot get the local user to connect. Still pam fails finding the user. The suggested password mismatch at the end is, in my eyes, because there is no user in the first place. I verified the password by interactive login to the account. The pam module (dovecot) is just the default file with three @includes in it. Syslog: Aug 29 20:18:02 mail-dev dovecot: auth(default): client in: AUTH#0112#011LOGIN#011service=imap#011lip=2a02:968:1:2:212:72:224:16#011rip=2001:888:1740:10:250:daff:fe41:4d1c#011lport=143#011rport=1093 Aug 29 20:18:02 mail-dev dovecot: auth(default): client out: CONT#0112#011VXNlcm5hbWU6 Aug 29 20:18:02 mail-dev dovecot: auth(default): client in: CONT#0112#011dGVzdHVzZXI= Aug 29 20:18:02 mail-dev dovecot: auth(default): client out: CONT#0112#011UGFzc3dvcmQ6 Aug 29 20:18:02 mail-dev dovecot: auth(default): client in: CONT#0112#011dmF4dm1z Aug 29 20:18:02 mail-dev dovecot: auth-worker(default): pam(testuser,2001:888:1740:10:250:daff:fe41:4d1c): lookup service=dovecot Aug 29 20:18:02 mail-dev dovecot: auth-worker(default): pam(testuser,2001:888:1740:10:250:daff:fe41:4d1c): #1/1 style=1 msg=Password: Aug 29 20:18:02 mail-dev dovecot: auth(default): cache(testuser,2001:888:1740:10:250:daff:fe41:4d1c): miss Aug 29 20:18:04 mail-dev dovecot: auth(default): cache(testuser,2001:888:1740:10:250:daff:fe41:4d1c): hit: Aug 29 20:18:04 mail-dev dovecot: auth(default): cache(testuser,2001:888:1740:10:250:daff:fe41:4d1c): User unknown Aug 29 20:18:04 mail-dev dovecot: auth-worker(default): pam(testuser,2001:888:1740:10:250:daff:fe41:4d1c): pam_authenticate() failed: Authentication failure (password mismatch?) (given password: xxxxxxxx) Aug 29 20:18:06 mail-dev dovecot: auth(default): client out: FAIL#0112#011user=testuser Relevant settings in dovecot: root@mail-dev:/etc/dovecot# dovecot -n # 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-24-server x86_64 Ubuntu 10.04.1 LTS ext4 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap pop3 imaps pop3s managesieve listen: *, [::] ssl_cert_file: /etc/ssl/certs/ssl-mail.pem ssl_key_file: /etc/ssl/private/ssl-mail.key ssl_cipher_list: ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM disable_plaintext_auth: no verbose_ssl: yes login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_max_userip_connections(default): 10 mail_max_userip_connections(imap): 10 mail_max_userip_connections(pop3): 3 mail_max_userip_connections(managesieve): 10 mail_privileged_group: mail mail_location: maildir:/home/vmail/%d/%n:INDEX=/home/vmail/%d/%n mail_debug: yes mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): imap_client_workarounds(managesieve): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh pop3_client_workarounds(managesieve): lda: postmaster_address: postmaster deliver_log_format: msgid=%m: %$ rejection_reason: Your message to <%t> was automatically rejected:%n%r auth_socket_path: /var/run/dovecot/auth-master auth default: mechanisms: plain login realms: kader.hcc.nl hobby.nl cache_size: 1024 user: vmail verbose: yes debug: yes debug_passwords: yes passdb: driver: pam args: setcred=yes failure_show_msg=yes cache_key=%u dovecot passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: passwd userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/dovecot-auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail Where should I look further for this dovecot pam problem? Is there such a thing as pam debugging? TIA Egbert Jan

1 1

[Dovecot] Sent mail issue
by Piyush Joshi 29 Aug '10

29 Aug '10

Dear All, I have few question regarding dovecot configuration for specific need which are as follows:- 1. I have IMAP folder with the name Sent Mail and i want whenever client uses any MUA to send mail from my server his mail must be kept in server's IMAP folder which is Sent Mail instead of local Sent folder. 2. Whenever user configures account in MUA, MUA automatically create some new folder like Junk Mail etc. while i am already using Spam folder to keep spam message in that folder so let me know how can i save myself from this. 3. Is there any thing which can also put deleted message in my server's Trash folder. Thanks

4 3

[Dovecot] "Multiple Commands in Progress" support
by Mike Cardwell 29 Aug '10

29 Aug '10

Section 5.5 of RFC3501 discusses the ability of IMAP servers to receive and execute multiple commands asynchronously on a single IMAP connection, not necessarily responding in the same order the commands were received: http://tools.ietf.org/html/rfc3501#section-5.5 Does Dovecot take advantage of this ability, or does it simply queue up the commands and execute them synchronously in order? -- Mike Cardwell - Perl/Java/Web developer, Linux admin, Email admin Read my tech Blog - https://secure.grepular.com/ Follow me on Twitter - http://twitter.com/mickeyc Hire me - http://cardwellit.com/ http://uk.linkedin.com/in/mikecardwell

1 0

Re: [Dovecot] dovecot - mac firewall problem
by Patrick Fay 28 Aug '10

28 Aug '10

>> Hi, >> I am running dovecot 1.2.11 on mac osx 1.5.8. Everything works >> perfectly with the application-level firewall off, but enabling the >> application firewall prevents dovecot connections. I have tried >> explicitly authorizing dovecot in the firewall, but it does not work. I >> have searched everywhere I can think of to look, and haven't found a >> solution, but have seen a couple other reports of what seems to be the >> same problem. The firewall logs the activity with what looks like a >> corrupt process name: a typical appfirewall.log entry looks like: >> >> Aug 26 20:43:45 hostname Firewall[55]: Deny ^L connecting from >> XX.XX.XX.XX:37310 uid = 0 proto=6 >> Aug 26 20:43:53 hostname Firewall[55]: Deny ^H?^U???^Z connecting from >> XX.XX.XX.XX:37310 uid = 0 proto=6 >> Aug 26 20:44:09 hostname Firewall[55]: Deny ^L connecting from >> XX.XX.XX.XX:37310 uid = 0 proto=6 >> Aug 26 20:44:34 hostname Firewall[55]: Deny ^L connecting from >> XX.XX.XX.XX:37312 uid = 0 proto=6 >> Aug 26 20:44:45: --- last message repeated 6 times --- >> >> where "hostname" is my server name and the XX's are my client's IP >> address. For all of the other services I've used, the process name >> (e.g. dovecot) should appear after "Deny" when blocking traffic, instead >> of the funny characters. Any advice on how I could resolve this issue >> would be greatly appreciated. Thanks! > > The application level firewall in OSX is aimed at _client_ use, not > server use. It's similar to Novell's AppArmor, etc. Leave it turned off. > > Simply because a piece of software (in this case an OS) offers any given > option does not mean every system needs it. Can you offer a compelling > reason why you _need_ the OSX application level firewall enabled? > Please point us to documentation that advises using it for any of your > services/daemons. > > -- > Stan > Hi was hoping to use the application firewall because this machine gets used both as a server as well as a client machine for more general use. I haven't been able to find any specific documentation for it, but I have found that the firewall works fine with postfix and several file services I use (enabling/disabling works as expected, process names get logged as expected, etc). Thanks! Patrick

2 1

[Dovecot] When should dictionary entries for the expire plugin be added/updated?
by Ralph Seichter 28 Aug '10

28 Aug '10

I've set up Dovecot 2.0 with the expire plugin using an SQLite DB, and when mail is delivered via dovecto-lda, the DB gets updated as expected. However, when I use Thunderbird 3.1.2 for Mac OS X to move a message to any of the folders known to the expire plugin (e.g. the 'tmp' folder), the SQLite DB is not updated. Here is an excerpt of my current configuration: # /etc/dovecot/dovecot.conf dict { expire = sqlite:/etc/dovecot/dict-expire.conf } plugin { expire = Junk expire2 = Trash expire3 = tmp expire4 = *.News expire5 = *.Reports expire_dict = proxy::expire sieve = /etc/dovecot/sieve/%u.sieve } service dict { unix_listener dict { # Ensure that there is no permission-related problem mode = 0666 } } protocol lda { mail_plugins = expire sieve postmaster_address = postmaster(a)domain.tld sendmail_path = /usr/sbin/sendmail } # /etc/dovecot/dict-expire.conf connect = /var/lib/dovecot/expires.sqlite map { pattern = shared/expire/$user/$mailbox table = expires value_field = expire fields { username = $user mailbox = $mailbox } } # Schema dump of /var/lib/dovecot/expires.sqlite PRAGMA foreign_keys=OFF; BEGIN TRANSACTION; CREATE TABLE expires ( username VARCHAR(75) NOT NULL, mailbox VARCHAR(255) NOT NULL, expire integer NOT NULL, PRIMARY KEY (username, mailbox) ); CREATE TRIGGER mergeexpire BEFORE INSERT ON expires FOR EACH ROW BEGIN UPDATE expires SET expire=NEW.expire WHERE username=NEW.username AND mailbox=NEW.mailbox; SELECT RAISE(IGNORE) WHERE (SELECT 1 FROM expires WHERE username=NEW.username AND mailbox=NEW.mailbox) IS NOT NULL; END; COMMIT; With these settings, rows will be inserted to (or updated within) expires.sqlite when dovecot-lda stores messages to any of my "Reports" folders using sieve rules. When I manually move messages to "tmp" or "Junk", the database remains unchanged. Also, when I delete messages in Thunderbird, I'd expect database additions for the folder "Trash", but this does not happen either. What am I doing wrong here? -Ralph

5 27

[Dovecot] Error: service(auth): child 2212 killed with signal 11
by Toorop 28 Aug '10

28 Aug '10

Hi, Auth always crash (segfault) using vpopmail backend. Any idea ? vpopmail 5.5.0 os: ubuntu 10.04 on rackspace cloud # dovecot -n dovecot -n # 2.0.1: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.35.1-rscloud x86_64 Ubuntu 10.04.1 LTS auth_debug = yes auth_mechanisms = plain login cram-md5 auth_verbose = yes auth_verbose_passwords = plain disable_plaintext_auth = no first_valid_uid = 89 log_path = /var/log/dovecot/dovecot.log mail_debug = yes passdb { driver = vpopmail } protocols = imap pop3 service auth { unix_listener auth-userdb { group = vchkpw mode = 0600 user = vpopmail } user = root } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = vpopmail } Log: Aug 28 10:59:48 auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Aug 28 10:59:48 auth: Debug: auth client connected (pid=2211) Aug 28 10:59:49 auth: Debug: client in: AUTH 1 CRAM-MD5 service=imap secured lip=184.106.217.69 rip=178.32.33.247 lport=143 rport=49099 Aug 28 10:59:49 auth: Debug: client out: CONT 1 PDM3MjI0MzQ4NjQzNTI3NjUuMTI4Mjk5MzE4OUByYWNrc3BhY2UuZGVkaW1haWwuZXU+ Aug 28 10:59:49 auth: Debug: client in: CONT<hidden> Aug 28 10:59:49 auth: Debug: vpopmail(toorop(a)respublica.fr,178.32.33.247): lookup user=toorop domain=respublica.fr Aug 28 10:59:49 auth: Debug: client out: OK 1 user=toorop(a)respublica.fr Aug 28 10:59:49 auth: Debug: master in: REQUEST 1 2211 1 e4920e51f96ae453663098df19c5b374 Aug 28 10:59:49 auth: Debug: vpopmail(toorop(a)respublica.fr,178.32.33.247): lookup user=toorop domain=respublica.fr Aug 28 10:59:49 imap-login: Info: Internal login failure (auth failed, 1 attempts): user=<toorop(a)respublica.fr>, method=CRAM-MD5, rip=178.32.33.247, lip=184.106.217.69, mpid=2214, TLS Aug 28 10:59:49 master: Error: service(auth): child 2212 killed with signal 11 (core dumps disabled) strace : http://pastebin.com/kYsWHP5J Thanks, -- Toorop «Ils ne savaient pas que c'était impossible, alors ils l'ont fait.» Mark Twain

2 3