- dovecot - dovecot.org

[Dovecot] soft quota lda question
by toni＠dingsbums.org 11 Oct '09

11 Oct '09

hi all, i'm using dovecot deliver (lda) and i want to show quota to the users via imap/pop3, but i don't want to enforce it (i.e. don't reject/bounce mails when quota is exceeded). protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota } # In case you're using deliver: protocol lda { #mail_plugins = quota } does it work if i just comment out the "mail_plugin = quota" in the protocol lda section and leave the imap/pop3 configuration or is there another better way to do this? thanks in advance, someone2.0

2 1

[Dovecot] status & use-case of fts_solr?
by PGNet Dev 10 Oct '09

10 Oct '09

i've deployed a Solr server, and setup Dovecot for *both* squat & solr FTS. iiuc, reading at, http://wiki.dovecot.org/Plugins/FTS http://wiki.dovecot.org/Plugins/FTS/Solr as of dovecot v1.1.2, squat's required for IMAP compliance; solr search breaks it. is that still the case in v1.2? Is IMAP-compliant Solr search possible? planned? if the goal is fast, indexed FTS of dovecot IMAP stores from within a MUA, is fts_solr even helpful? or is it targeted for web interfaces to search ... ? thanks.

3 7

[Dovecot] mail archiving
by dhottinger＠harrisonburg.k12.va.us 10 Oct '09

10 Oct '09

Im curious if anyone is archiving emails and what they are using. I currently utilize sendmail/procmail/dovecot. thanks, ddh -- Dwayne Hottinger Network Administrator Harrisonburg City Public Schools "Everything should be made as simple as possible, but not simpler." -- Albert Einstein "The hottest places in Hell are reserved for those who, in times of moral crisis, preserved their neutrality." -- Dante

4 5

Re: [Dovecot] What exactly do you mean by archiving?
by dhottinger＠harrisonburg.k12.va.us 10 Oct '09

10 Oct '09

I mean every single email sent and recieved is kept for a period of time (3 -5 years) separate from users mail, and emails cant be deleted. Ideally emails would have compression, mailboxes need to be searchable easily, and some mechanism whereby attachments sent to multiple people only get saved once, and emails sent to multiple people only get saved once. I could do something with procmail that copies every email coming in to another directory easily, but that doesnt solve the sent email. Ive looked at several commercial products, but none seem to work nicely with sendmail. Thanks for the information, I'll look and see if sieve will work better for me than procmail. Im not sure thought that your method will pass the test come litigation time (if that every happens). thanks, ddh -- Dwayne Hottinger Network Administrator Harrisonburg City Public Schools "Everything should be made as simple as possible, but not simpler." -- Albert Einstein "The hottest places in Hell are reserved for those who, in times of moral crisis, preserved their neutrality." -- Dante

2 1

[Dovecot] @2.0, --sysconfdir incorrectly populated with dovecot/*.conf
by PGNet Dev 10 Oct '09

10 Oct '09

to document from #irc, in 1.2.x, specifying ./configure ... --sysconfdir=/path/to/dir ... correctly results in dovecot.conf looked for as "/path/to/dir/dovecot.conf". in 2.0, dovecot incorrectly creates a dovecot dir in the sysconfdir, and looks for, /path/to/dir/dovecot/dovecot.conf 2.0's behavior should be made consistent with the correct implementation in 1.2.x, or clarified as different in --help/docs. thanks.

2 3

[Dovecot] very frequent disconnections
by Dan Christensen 09 Oct '09

09 Oct '09

I've installed dovecot 1:1.1.11-0ubuntu4.1 on my jaunty system. Access from the same host works well, but when I access remotely (from various MUAs and networks) I get *very* frequent disconnects. Authentication is fine, and I can usually open a mail folder, but larger operations such as copying 20 messages into an imap folder always get disconnected. I can reconnect, but I often get disconnected again in a few seconds, especially if I do more than very light access. I've enabled all the logging I'm aware of, but I don't see any explanations. I get things like Oct 7 20:19:38 jdc dovecot: auth(default): new auth connection: pid=390 Oct 7 20:19:39 jdc dovecot: auth(default): client in: AUTH^I1^IPLAIN^Iservice=imap^Isecured^Ilip=129.100.75.85^Irip=65.95.132.250^Ilport=143^Irport=62044^Iresp=<hidden> Oct 7 20:19:39 jdc dovecot: auth-worker(default): pam(jdc,65.95.132.250): lookup service=dovecot Oct 7 20:19:39 jdc dovecot: auth-worker(default): pam(jdc,65.95.132.250): #1/1 style=1 msg=Password: Oct 7 20:19:39 jdc dovecot: auth(default): client out: OK^I1^Iuser=jdc Oct 7 20:19:39 jdc dovecot: auth(default): master in: REQUEST^I2^I367^I1 Oct 7 20:19:39 jdc dovecot: auth(default): passwd(jdc,65.95.132.250): lookup Oct 7 20:19:39 jdc dovecot: auth(default): master out: USER^I2^Ijdc^Isystem_user=jdc^Iuid=1000^Igid=1000^Ihome=/home/jdc Oct 7 20:19:39 jdc dovecot: IMAP(jdc): Effective uid=1000, gid=1000, home=/home/jdc Oct 7 20:19:39 jdc dovecot: IMAP(jdc): maildir: data=~/Maildir Oct 7 20:19:39 jdc dovecot: IMAP(jdc): maildir++: root=/home/jdc/Maildir, index=, control=, inbox=/home/jdc/Maildir Oct 7 20:19:40 jdc dovecot: IMAP(jdc): Connection closed bytes=303/1423 and Oct 7 20:43:54 jdc dovecot: auth(default): new auth connection: pid=6620 Oct 7 20:43:55 jdc dovecot: auth(default): client in: AUTH^I1^IPLAIN^Iservice=imap^Isecured^Ilip=129.100.75.85^Irip=65.95.132.250^Ilport=143^Irport=62633^Iresp=<hidden> Oct 7 20:43:55 jdc dovecot: auth-worker(default): pam(jdc,65.95.132.250): lookup service=dovecot Oct 7 20:43:55 jdc dovecot: auth-worker(default): pam(jdc,65.95.132.250): #1/1 style=1 msg=Password: Oct 7 20:43:55 jdc dovecot: auth(default): client out: OK^I1^Iuser=jdc Oct 7 20:43:55 jdc dovecot: auth(default): master in: REQUEST^I5^I6594^I1 Oct 7 20:43:55 jdc dovecot: auth(default): passwd(jdc,65.95.132.250): lookup Oct 7 20:43:55 jdc dovecot: auth(default): master out: USER^I5^Ijdc^Isystem_user=jdc^Iuid=1000^Igid=1000^Ihome=/home/jdc Oct 7 20:43:55 jdc dovecot: imap-login: Login: user=<jdc>, method=PLAIN, rip=65.95.132.250, lip=129.100.75.85, TLS Oct 7 20:43:55 jdc dovecot: IMAP(jdc): Effective uid=1000, gid=1000, home=/home/jdc Oct 7 20:43:55 jdc dovecot: IMAP(jdc): maildir: data=~/Maildir Oct 7 20:43:55 jdc dovecot: IMAP(jdc): maildir++: root=/home/jdc/Maildir, index=, control=, inbox=/home/jdc/Maildir Oct 7 20:44:00 jdc dovecot: IMAP(jdc): Disconnected in APPEND bytes=1081/1965 The output of dovecot -n is: # 1.1.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.28-15-generic x86_64 Ubuntu 9.04 log_timestamp: %Y-%m-%d %H:%M:%S ssl_cert_file: /etc/ssl/certs/dovecot.pem ssl_key_file: /etc/ssl/private/dovecot.pem verbose_ssl: yes login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login login_greeting_capability: yes max_mail_processes: 25 mail_max_userip_connections: 20 mail_privileged_group: mail mail_location: maildir:~/Maildir mail_debug: yes maildir_copy_preserve_filename: yes auth default: verbose: yes debug: yes passdb: driver: pam userdb: driver: passwd The clients I have tried are Gnus (with starttls and gnutls-cli) and evolution, on a jaunty system; and k9mail-beta on an HTC Dream cell phone. All four configurations show similar connection issues, and the jaunty client system has a solid DSL connection to the server. The clients don't have informative error messages either. To them it just appears that the connection was closed. Any idea what could be causing this? Or how to debug it? Thanks, Dan -- Dan Christensen jdc(a)uwo.ca

2 4

[Dovecot] Binary locations
by Timo Sirainen 09 Oct '09

09 Oct '09

Where do you think the following binaries should be installed to? The possible locations are: - bin/ - sbin/ - libexec/dovecot/ (or lib/dovecot/ in most Linux distros) So the binaries are: 1) These probably belong to bin/ or sbin/ or both: - authtest - dovecotpw - doveadm 2) Binaries that you might want to call from mail_executable setting: - rawlog - gdbhelper 3) Index file dumping programs, mostly meant for debugging problems: - idxview - listview - logview - mailboxlogview - threadview 4) Some extra tools that might be useful sometimes: - imap-utf7 : Encode/decode IMAP mailbox names (mUTF-7 <-> UTF-8) - maildirlock : Lock a Maildir, primarily intended for compressing files in maildir And perhaps some of the binaries should be renamed? The authtest actually now looks like a bad name. Maybe it should have been "doveauthtest" or "dovecot-authtest" or ..?

9 11

[Dovecot] Using sieve with virtual delivery & maildir
by Jerry 09 Oct '09

09 Oct '09

I am using Postfix virtual users/domains with Dovecot virtual delivery to maildir style mailboxes. Now I want to get sieve working to sort out a few minor delivery problems. I want all mail with a message header "Delivered-To: foo+bar(a)domain.com placed in the /var/mail/vhost/example.com/foo/new directory. Would this work: require "fileinto"; if anyof (header :contains "Delivered-To" "foo+bar(a)domain.com") { fileinto "foo(a)example.com"; stop; } Running 'sieve-test' works OK; however, I do not want to implement it and suddenly start losing mail. -- Jerry gesbbb(a)yahoo.com Outside of a dog, a book is a man's best friend: and inside a dog, it's too dark to read. Groucho Marx

3 2

[Dovecot] how to config dovecot for multiple domains, multiple SSL certs, and conditional IP access -- with passwd-file passdb?
by PGNet Dev 09 Oct '09

09 Oct '09

at them moment, i've configured dovecot for a flat passwd-file, annd static userdb. from dovecot.conf, ... auth default { mechanisms = plain digest-md5 cram-md5 user = mail ... passdb passwd-file { args = /data/mail/users/imap_user_file } userdb static { args = static uid=mail gid=mail home=/data/mail/store/Domains/%d/Accounts/%n quota=maildir:storage=4096 nice=10 } ... i'd like to configure dovecot to, host multiple domains, each on a separate IP setup a separate SSL cert for each domain respond with a different login_greeting for each domain restrict access to, and access type (e.g., TLS req'd vs noTLS, secure auth OK) of, imap login based with conditional rules based on the guest's IP address. all of these things are currently implemented on the non-dovecot imap server i'm migrating _from_, and i'd like to preserve these capabilities. can any/all of these be accomplished with a passwd-file flatfile lookup? i know i can restrict IP access in passwd-file with 'allow_nets=', but atm i'm unclear how i'd do that for multiple domains, etc. i understand that much can be accomplished with custom SQL queries, but for a small install would _prefer_ to stay flat file. i'm finding bits & pieces of capability in docs, etc -- but, so far, nothing comprehensive/all-inclusive. which makes me wonder a bit -- why not? any comments/advice would be much appreciated. thanks!

3 2

[Dovecot] Move messages marked as Spam
by michel＠casa.co.cu 08 Oct '09

08 Oct '09

Hello I have implemented recently in my work bogofilter to mark messages as Spam or Ham, currently is working perfectly, but I want to move those messages marked as spam to a folder called spam. I installed dovecot-sieve with the intention of using fileinto to accomplish this. my question is: where I put this: require "fileinto"; if header :contains "X-Bogosity" "Spam" { fileinto "Spam"; } so that all messages that come to my users go into the spam folder? and how i handle messages that are marked as "Unsure" X-Bogosity: Unsure Thanks Michel ---------------------------------------------- Webmail, servicio de correo electronico Casa de las Americas - La Habana, Cuba.

5 11

[Dovecot] Logging in with '+' delimiter
by Jerry 07 Oct '09

07 Oct '09

Dovecot v1.2.4 FreeBSD-7.2 I have Postfix configured to use Virtual Users & Domains and use Dovecot for virtual delivery. Postfix also sends, dovecot correctly places mail with '+'addressing; i.e., "foo+bar(a)domain.com" into "path-to-mail/domain.com/foo+bar". The problem is when I attempt to access the mailbox, the user name: foo+bar(a)domain.com is rejected. Is this by design, or is there a way to circumvent this problem? -- Jerry gesbbb(a)yahoo.com Fortune favors the lucky.

3 3

[Dovecot] compiling issue 1.2.6 - Solaris
by Jernej Porenta 07 Oct '09

07 Oct '09

Heya, I am expiriencing compiling issues on Solaris 8 and Solaris 10 boxes with dovecot 1.2.6. On Solaris 8 the compiler is gcc 64bit 3.2.2, on Solaris 10 gcc 3.4.3. On both systems the compiling fails with: /bin/bash ../../libtool --tag=CC --mode=link gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -L/opt/gcc-3.1-64bit/lib -R/opt/gcc-3.1-64bit/lib -L/usr/local/ssl/lib -R/usr/local/ssl/lib -L/opt/kerberos-heimdal/lib -R/opt/kerberos-heimdal/lib -o imap-login client.o client-authenticate.o imap-proxy.o ../login-common/liblogin-common.a ../lib-imap/libimap.a ../lib-auth/libauth.a ../lib/liblib.a -lssl -lcrypto -ldl -lrt -lnsl -lsocket -lrt libtool: link: gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -o imap-login client.o client-authenticate.o imap-proxy.o -L/opt/gcc-3.1-64bit/lib -L/usr/local/ssl/lib -L/opt/kerberos-heimdal/lib ../login-common/liblogin-common.a ../lib-imap/libimap.a ../lib-auth/libauth.a ../lib/liblib.a -lssl -lcrypto -ldl -lnsl -lsocket -lrt -R/opt/gcc-3.1-64bit/lib -R/usr/local/ssl/lib -R/opt/kerberos-heimdal/lib Undefined first referenced symbol in file SSL_COMP_get_name ../login-common/liblogin-common.a(ssl-proxy-openssl.o) SSL_get_current_compression ../login-common/liblogin-common.a(ssl-proxy-openssl.o) ld: fatal: Symbol referencing errors. No output written to imap-login collect2: ld returned 1 exit status The configure script is the same on both systems: CPPFLAGS='-I/usr/local/ssl/include -I/opt/kerberos-heimdal/include' LDFLAGS='-L/usr/local/ssl/lib -R/usr/local/ssl/lib -L/opt/kerberos-heimdal/lib -R/opt/kerberos-heimdal/lib' ./configure --prefix=/opt/dovecot --with-ssldir=/usr/local/ssl/certs --with-ssl=openssl --without-passwd-file --with-passwd --with-shadow --without-bsdauth --without-static-userdb --without-prefetch-userdb --without-checkpassword --with-gssapi=yes --without-pgsql --without-sql --without-ldap --without-vpopmail --without-sia --enable-header-install Install prefix . : /opt/dovecot File offsets ... : 64bit I/O polling .... : poll I/O notifys .... : none SSL ............ : yes (OpenSSL) GSSAPI ......... : yes passdbs ........ : passwd shadow pam : -passwd-file -checkpassword -bsdauth -sia -ldap -sql -vpopmail userdbs ........ : passwd : -static -prefetch -passwd-file -checkpassword -ldap -sql -vpopmail -nss SQL drivers .... : : -pgsql -mysql -sqlite Version 1.2.4 compiles with no problems... regards, Jernej

7 10

[Dovecot] IMAP fchown failed: Operation not permitted
by Juergen Obermann 07 Oct '09

07 Oct '09

Hello, today I switched from dovecot 1.1.17 to 1.2.6 and since then the following new error messages appeared. To me they seems to be harmless, as I noticed no problems so far. But can I be sure? Oct 7 08:39:13 smail dovecot: [ID 583609 local0.error] IMAP(sv4073): fchown(/home/smailw9/sv4073/Mail/.imap/INBOX/dovecot.index.cache.lock, -1, 6(mail)) failed: Operation not permitted (egid=3229(smailw9), group based on /var/mail/sv4073) Oct 7 08:39:34 smail dovecot: [ID 583609 local0.error] IMAP(sv8785): fchown(/home/smail05/sv8785/Mail/.imap/INBOX/dovecot.index.cache.lock, -1, 6(mail)) failed: Operation not permitted (egid=3265(smail05), group based on /var/mail/sv8785) Oct 7 08:41:32 smail dovecot: [ID 583609 local0.error] IMAP(sv7662): fchown(/home/smailz6/sv7662/Mail/.imap/INBOX/dovecot.index.cache.lock, -1, 6(mail)) failed: Operation not permitted (egid=3256(smailz6), group based on /var/mail/sv7662) Oct 7 08:47:39 smail dovecot: [ID 583609 local0.error] IMAP(su8501): fchown(/home/smailt3/su8501/Mail/.imap/INBOX/dovecot.index.cache.lock, -1, 6(mail)) failed: Operation not permitted (egid=3193(smailt3), group based on /var/mail/su8501) Oct 7 08:49:22 smail dovecot: [ID 583609 local0.error] IMAP(sv2131): fchown(/home/smailv4/sv2131/Mail/.imap/INBOX/dovecot.index.tmp, -1, 6(mail)) failed: Operation not permitted (egid=3214(smailv4), group based on /var/mail/sv2131) Oct 7 08:49:22 smail dovecot: [ID 583609 local0.error] IMAP(sv2131): fchown(/home/smailv4/sv2131/Mail/.imap/INBOX/dovecot.index.cache.lock, -1, 6(mail)) failed: Operation not permitted (egid=3214(smailv4), group based on /var/mail/sv2131) Oct 7 08:51:22 smail dovecot: [ID 583609 local0.error] IMAP(sw2109): fchown(/home/smail23/sw2109/Mail/.imap/INBOX/dovecot.index.tmp, -1, 6(mail)) failed: Operation not permitted (egid=3283(smail23), group based on /var/mail/sw2109) Oct 7 08:51:22 smail dovecot: [ID 583609 local0.error] IMAP(sw2109): fchown(/home/smail23/sw2109/Mail/.imap/INBOX/dovecot.index.log.newlock, -1, 6(mail)) failed: Operation not permitted (egid=3283(smail23), group based on /var/mail/sw2109) Oct 7 08:51:22 smail dovecot: [ID 583609 local0.error] IMAP(sw2109): fchown(/home/smail23/sw2109/Mail/.imap/INBOX/dovecot.index.tmp, -1, 6(mail)) failed: Operation not permitted (egid=3283(smail23), group based on /var/mail/sw2109) Oct 7 08:56:53 smail dovecot: [ID 583609 local0.error] IMAP(sv2483): fchown(/home/smailv6/sv2483/Mail/.imap/INBOX/dovecot.index.cache.lock, -1, 6(mail)) failed: Operation not permitted (egid=3216(smailv6), group based on /var/mail/sv2483) Oct 7 08:57:42 smail dovecot: [ID 583609 local0.error] IMAP(sv2483): fchown(/home/smailv6/sv2483/Mail/.imap/INBOX/dovecot.index.tmp, -1, 6(mail)) failed: Operation not permitted (egid=3216(smailv6), group based on /var/mail/sv2483) Oct 7 08:57:42 smail dovecot: [ID 583609 local0.error] IMAP(sv2483): fchown(/home/smailv6/sv2483/Mail/.imap/INBOX/dovecot.index.log.newlock, -1, 6(mail)) failed: Operation not permitted (egid=3216(smailv6), group based on /var/mail/sv2483) This is a Solaris 9 system that acts as a NFS-Server for mailboxes in /var/mail and home directories under automounter control in /home/group/user. Thanks for any help. # 1.2.6: /opt/local/etc/dovecot.conf # OS: SunOS 5.9 sun4u syslog_facility: local0 protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/ssl/server.crt ssl_key_file: /etc/ssl/server.key disable_plaintext_auth: no version_ignore: yes login_dir: /opt/local/var/run/dovecot/login login_executable(default): /opt/local/libexec/dovecot/imap-login login_executable(imap): /opt/local/libexec/dovecot/imap-login login_executable(pop3): /opt/local/libexec/dovecot/pop3-login login_process_per_connection: no login_processes_count: 12 max_mail_processes: 4096 mail_location: mbox:~/Mail:INBOX=/var/mail/%u mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes mail_executable(default): /opt/local/libexec/dovecot/imap mail_executable(imap): /opt/local/libexec/dovecot/imap mail_executable(pop3): /opt/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /opt/local/lib/dovecot/imap mail_plugin_dir(imap): /opt/local/lib/dovecot/imap mail_plugin_dir(pop3): /opt/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): %08Xv%08Xu pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: Mail/ hidden: yes list: no subscriptions: yes lda: postmaster_address: postmaster(a)hrz.uni-giessen.de auth default: passdb: driver: pam userdb: driver: passwd plugin: quota: fs:Home-Verzeichnis:noenforcing -- Hochschulrechenzentrum der | Mail: Juergen.Obermann(a)hrz.uni-giessen.de Justus-Liebig-Universitaet | WWW: http://www.uni-giessen.de/~g033 Heinrich-Buff-Ring 44 | Tel: 0641-99-13054 (0641-99-13001) D-35392 Giessen, Germany | Fax: 0641-99-13009

2 1

[Dovecot] Is it possible to authenticate against Active Direcotry using the whole e-mail?
by Δημήτριος Καραπιπέ ρης 07 Oct '09

07 Oct '09

Hi all! Is it possible to authenticate against Active Directory, using the whole e-mail address and not the user part (%n), so that if you support mutiple domains, all users should authenticate with their e-mail addresses. I use auth_bind_userdn = DOMAIN \ %u but somehow the *mail* attribute of Active/LDAP should be employed. thanks in advance Dimitrios Karapiperis

3 4

[Dovecot] Fwd: Re: "Time just moved backwards" in Dovecot in a Xen DomU
by Patrick Domack 07 Oct '09

07 Oct '09

Dunno, your email provider doesn't want to talk to me, heh, screw them :) They claim i'm on an rbl, no rbl checks verify this. Even tried to submit a request using their website, but it's broken and doesn't work (http://postmaster.ausics.net/pmg.php) ----- Forwarded message from patrickdk(a)patrickdk.com ----- Date: Tue, 06 Oct 2009 23:31:37 -0400 From: Patrick Domack <patrickdk(a)patrickdk.com> Subject: Re: [Dovecot] "Time just moved backwards" in Dovecot in a Xen DomU To: Noel Butler <noel.butler(a)ausics.net> yes, using a pool server for that isn't good. but atleast it will let us know if it's just an internet path, or ALL internet paths for him that is causing issues, as it should give a good random sampling. I have a few servers in the pool set to gigabit speeds. If people configure their settings correctly, the dsl/cable ones shouldn't get selected very often. And the pool servers aren't the cause of his issues, as he isn't using any pools servers. I think he has a network issue personally. Quoting Noel Butler <noel.butler(a)ausics.net>: > On Tue, 2009-10-06 at 23:08 -0400, Patrick Domack wrote: > > >> >> Jitter stops ntp from doing it's job properly. I'm not sure what is >> causing you jitter to be so bad, but it's caused by the delay amount >> changing from packet to packet. The delay should stay consistant (like >> a ping time). If it keeps bouncing all over the place, ntp can't >> figure out what time it really is, cause it doesn't know how long that >> packet was on the network. You can safely ignore offset, it is just >> how much different your clock is from what the other computer is. >> >> Try adding some of the pool servers in there, like: >> server 0.us.pool.ntp.org >> server 1.us.pool.ntp.org >> server 2.us.pool.ntp.org >> > > > this can also be the cause of it all, there is no QA on hosts in pools, > I've seen DSL and cable connected hosts in pools causing all sorts of > problems for some, I'm lucky enough to be in a position where we have > access to atomic servers so I can avoid all that, but most people are > not. > > > -- > Kind Regards, > Noel Butler > L.C.P #251002 (http://counter.li.org) > > ________________________________________________________________________ > This Email, including any attachments, may contain legally privileged > information, therefor remains strictly confidential and is protected > under Australian Laws and international treaties. You may not > disseminate or reveal any part to anyone without the authors express > written authority to do so. If you are not the intended recipient, > please notify the sender and delete all relevance of this message > including attachments immediately. Confidentiality and legal privilege > are not waived or lost by reason of the mistaken delivery of this > message. Only PDF or ODF documents are accepted, do not send Microsoft > proprietary formatted documents - see > http://www.gnu.org/philosophy/no-word-attachments.html > > ________________________________________________________________________ > ----- End forwarded message -----

2 1

Re: [Dovecot] Samba AD and Dovecot
by Timo Sirainen 07 Oct '09

07 Oct '09

Ccing mailing list, since I'm not all-knowing.. On Oct 7, 2009, at 12:49 AM, Trever L. Adams wrote: > Timo Sirainen wrote: >> On Oct 7, 2009, at 12:36 AM, Trever L. Adams wrote: >>> 1) I have seen how to configure for LDAP and Kerberos. AD uses both >>> together. All user information is in AD/LDAP and authentication is >>> AD/Kerberos. How can I configure Dovecot to use both appropriately? >> You could forget about the Kerberos part and just use AD as an LDAP >> server. > I really want to use kerberos/SPNEGO everywhere I can for various > reasons. The LDAP would be for the configuration. Do you actually want the IMAP/POP3 clients to use Kerberos? For plaintext auth I don't see any benefit in Dovecot using Kerberos rather than LDAP (and it doesn't support that, except via pam_kerberos or whatever I guess). But for clients to use Kerberos (GSSAPI) and authenticate against AD while Dovecot is in the middle... I've no idea. I guess that's possible somehow. >>> 2) For example if I have a directory /var/mail/domain/user. Can >>> I have Dovecot auto create (with proper permissions) the domain/user >>> part? These would be used for maildir. >> If you're using the same UNIX UID for all users, there's really >> nothing you need to do. Dovecot tries to create missing directories >> automatically. > No, I will be using the new Samba IDMAP stuff that hashes all the > parts > of the windows ID to a 32 bit UID. Anyway to do to this, or will I > need > to find another solution (not for mailing, but for directory > creation)? There's no great way to do this.. A couple of kludgy ways. Like chmod 01777 /var/mail. Or override mail_executable setting to a script that still runs as root and can create the directory with proper permissions. http://wiki.dovecot.org/PostLoginScripting

3 2

[Dovecot] Samba AD and Dovecot
by Trever L. Adams 07 Oct '09

07 Oct '09

Hello All, I haven't seen the answer to this, maybe I am just using the wrong searches. I have two queries related to this: 1) I have seen how to configure for LDAP and Kerberos. AD uses both together. All user information is in AD/LDAP and authentication is AD/Kerberos. How can I configure Dovecot to use both appropriately? 2) I can cause Samba to create certain directories on login, etc. However, I am needing to do this for Dovecot (and Postfix using Dovecot deliver). I would prefer to use Dovecot functionality for this, not Samba.This is not the autocreate folder/subscribe stuff, at least I think not. For example if I have a directory /var/mail/domain/user. Can I have Dovecot auto create (with proper permissions) the domain/user part? These would be used for maildir. Thank you, Trever Adams

2 1

[Dovecot] "Time just moved backwards" in Dovecot in a Xen DomU
by PGNet Dev 07 Oct '09

07 Oct '09

i've dovecot --version 1.2.5 hg log | grep changeset | head -n 1 changeset: 9407:a3e16df805e3 in my logs, i'm seeing ... Oct 05 16:51:40 dovecot: Error: Time just moved backwards by 1 seconds. I'll sleep now until we're back in present. http://wiki.dovecot.org/TimeMovedBackwards Oct 05 17:07:22 dovecot: Error: Time just moved backwards by 1 seconds. I'll sleep now until we're back in present. http://wiki.dovecot.org/TimeMovedBackwards Oct 05 17:23:15 dovecot: Error: Time just moved backwards by 1 seconds. I'll sleep now until we're back in present. http://wiki.dovecot.org/TimeMovedBackwards Oct 05 17:38:23 dovecot: Error: Time just moved backwards by 1 seconds. I'll sleep now until we're back in present. http://wiki.dovecot.org/TimeMovedBackwards ... i'm running Dovecot in a Xen DomU, uname -a Linux mail 2.6.27.29-0.1-xen #1 SMP 2009-08-15 17:53:59 +0200 x86_64 x86_64 x86_64 GNU/Linux reading @, http://wiki.dovecot.org/TimeMovedBackwards Bugs/Issues * With Xen you should run ntpd only in dom0. Other domains should synchronize time automatically (see this Xen FAQ). @ my Dom0, ps ax | grep ntp\.conf 5696 ? Ss 1:05 /usr/sbin/ntpd -p /var/run/ntp/ntpd.pid -g -u ntp:ntp -i /var/lib/ntp -c /etc/ntp.conf and, grep localtime /etc/xen/vm/mail.cfg localtime = 0 looking at my ntp logs around the same time(s). ... 5 Oct 16:41:17 ntpd[5696]: synchronized to 64.125.78.85, stratum 1 5 Oct 16:51:38 ntpd[5696]: time reset -2.140133 s 5 Oct 16:56:40 ntpd[5696]: synchronized to 66.220.9.122, stratum 1 5 Oct 17:01:28 ntpd[5696]: synchronized to 64.125.78.85, stratum 1 5 Oct 17:07:20 ntpd[5696]: time reset -2.137760 s 5 Oct 17:11:49 ntpd[5696]: synchronized to 204.152.184.72, stratum 1 5 Oct 17:15:01 ntpd[5696]: synchronized to 207.200.81.113, stratum 1 5 Oct 17:20:49 ntpd[5696]: synchronized to 66.220.9.122, stratum 1 5 Oct 17:23:14 ntpd[5696]: time reset -2.221749 s 5 Oct 17:27:57 ntpd[5696]: synchronized to 64.125.78.85, stratum 1 5 Oct 17:32:52 ntpd[5696]: synchronized to 207.200.81.113, stratum 1 5 Oct 17:38:22 ntpd[5696]: time reset -2.104476 s 5 Oct 17:42:48 ntpd[5696]: synchronized to 66.220.9.122, stratum 1 ... 1 second is not a terribly big deal, but it IS an error ... not clear to me as to what/where the problem actually is. i've not seen an other dameons report any time issues; of course, i'm not sure they're _checking_ :-/ any suggestions as to what/how to fix? thanks!

5 14

Re: [Dovecot] deliver stopped working
by vwc72283＠voicenet.com 07 Oct '09

07 Oct '09

Note to all: If you are running Dovecot on a system where any of the mailboxes are nfs v4 mounted from a RHEL (or derivative) server DO NOT upgrade that server to an unpatched 2.6.18-164 kernel, it is very broken at this time. Not only will Dovecot fail but you're likely to have a myriad of other problems. https://bugzilla.redhat.com/show_bug.cgi?id=523797 https://bugzilla.redhat.com/show_bug.cgi?id=524520 > On Mon, 2009-10-05 at 10:30 -0400, vwc72283(a)voicenet.com wrote: >> So, it is reproducible. Now, if you take O_EXCL out it works even for the user: > .. >> Why I suddenly get the behavior I don't know. Clearly its not deliver, but deliver >> tries >> to do something that behaves badly on this system. > > I've no idea. Never heard of O_EXCL failing in that way. You could > always just remove the O_EXCL uses from Dovecot sources, Dovecot doesn't > rely on them. > >

1 0

[Dovecot] OpenBSD and Dovecot (mysql support)
by jean-francois 06 Oct '09

06 Oct '09

Hello All, I am having difficulties in running dovecot with mysql accounts. The db worked but the config file is hardly something I could do to work properly as it should be, it does even not run saying various errors found in dovecot.conf Has anyone already built dovecot server to run with with a mysql base ? Could it be so that one sends me a conf file that shall work to help me ? Thanks. Jean-François

4 5

Re: [Dovecot] compiling issue 1.2.6 - Solaris
by Bruce Bodger 06 Oct '09

06 Oct '09

On Oct 6, 2009, at 8:26 AM, Bruce Bodger wrote: >>> >>> Same type of problem here on OS X 10.5.8 Server. >>> >>> Command line to configure: ./configure --with-ssldir=/System/ >>> Library/OpenSSL --with-ssl=openssl >>> >>> .. >>> Undefined symbols: >>> "_SSL_get_current_compression", referenced from: >>> _ssl_proxy_get_security_string in liblogin-common.a(ssl-proxy- >>> openssl.o) >>> "_SSL_COMP_get_name", referenced from: >>> _ssl_proxy_get_security_string in liblogin-common.a(ssl-proxy- >>> openssl.o) >> >> What OpenSSL version do you have? I thought those compression >> functions were new enough that everyone would have them by now.. > > > bash-3.2# /usr/bin/OpenSSL version > OpenSSL 0.9.7l 28 Sep 2006 A bit of oddity I just discovered by viewing source code at http://www.opensource.apple.com/ OS X 10.5.8 - OpenSSL 0.9.7l 28 Sep 2006 OS X 10.6.0 - OpenSSL 0.9.6l 04 Nov 2003 OS X 10.6.1 - OpenSSL 0.9.6l 04 Nov 2003 Looks like they moved back to 0.96l in later versions. B. Bodger

3 3

[Dovecot] Move messages marked as Spam
by Michel Bulgado 06 Oct '09

06 Oct '09

Hello I have implemented recently in my work bogofilter utility to mark messages as Spam or Ham, currently is working perfectly, but I want to move those messages marked as spam to a folder called spam. I installed dovecot-sieve with the intention of using fileinto to accomplish this. my question is: where I put this: require "fileinto"; if header :contains "X-Bogosity" "Spam" { fileinto "Spam"; } so that all messages that come to my users go into the spam folder? and how i handle messages that are marked as "Unsure" X-Bogosity: Unsure Thanks Michel

1 0

[Dovecot] Dovecot 1.2.4 - assertion crash in view_lookup_seq_range
by Brandon Davidson 06 Oct '09

06 Oct '09

Hi all, We have a number of machines running Dovecot 1.2.4 that have been assert crashing occasionally. It looks like it's occurring when the users expunge their mailboxes, but I'm not sure as I can't reproduce it myself. The error in the logs is: Oct 6 07:33:09 oh-popmap3p dovecot: imap: user=<YYYY>, rip=XXXX, pid=11931: Panic: file mail-index-view.c: line 264 (view_lookup_seq_range): assertion failed: (first_uid > 0) Oct 6 07:33:09 oh-popmap3p dovecot: imap: user=<YYYY>, rip=XXXX, pid=11931: Raw backtrace: imap [0x49e130] -> imap [0x49e193] -> imap [0x49d816] -> imap [0x47e462] -> imap(mail_index_lookup_seq+0x12) [0x47e022] -> imap(mail_index_view_sync_begin+0x36a) [0x47ffba] -> imap(index_mailbox_sync_init+0x7f) [0x45e56f] -> imap(maildir_storage_sync_init+0x100) [0x43cb70] -> imap(imap_sync_init+0x67) [0x428177] -> imap(cmd_sync_delayed+0x174) [0x4283c4] -> imap(client_handle_input+0x19e) [0x420a0e] -> imap(client_input+0x5f) [0x4213ff] -> imap(io_loop_handler_run+0xf8) [0x4a5e98] -> imap(io_loop_run+0x1d) [0x4a4fad] -> imap(main+0x620) [0x428cc0] -> /lib64/libc.so.6(__libc_start_main+0xf4) [0x323dc1d994] -> imap [0x4199f9] Oct 6 07:33:09 oh-popmap3p dovecot: dovecot: child 11931 (imap) killed with signal 6 (core dumped) GDB stack information and some additional details are available here: http://uoregon.edu/~brandond/dovecot-1.2.4/stack.txt We are planning to go to 1.2.6 sometime in the next week or two, but I thought I'd try to track this particular error down just in case it's still an issue after the upgrade. -Brad

2 1

[Dovecot] dovecot 1.2.5 - can't create auth listener
by dovecot＠nro.ca 06 Oct '09

06 Oct '09

Hi. I have version 1.1.11 working fine with multiple servers. When I upgrade to 1.2.4 or 1.2.5 I keep getting an error 'can't create auth listener' (address in use) I have two ip addresses (lets call them 1.0.0.1 and 1.0.0.2). Each ip address has it's own certificate and set of servers with custom ports. I don't know how the configuration is supposed to work and it was a lot of google and trial and error to get it working. My configuration file is pretty basic so maybe someone can point out where I'm going wrong. I stripped out the few comments and unrelated settings. #listen = * disable_plaintext_auth = no ssl_ca_file = myca.crt protocol lda { postmaster_address = postmaster(a)example.com } server a1 { protocols = pop3 ssl_cert_file = a1.crt ssl_key_file = a1.key listen = 1.0.0.2:110 1.0.0.2:111 auth default { mechanisms = plain passdb pam { } userdb passwd { }}} server a2 { protocols = pop3s ssl_cert_file = a1.crt ssl_key_file = a1.key listen = 1.0.0.2:995 auth default { mechanisms = plain passdb pam { } userdb passwd { }}} server n1 { protocols = pop3 ssl_cert_file = n1.crt ssl_key_file = n1.key listen = 127.0.0.1:110 127.0.0.1:111 1.0.0.1:110 1.0.0.1:111 auth default { mechanisms = plain passdb pam { } userdb passwd { }}} server n2 { protocols = pop3s ssl_cert_file = n1.crt ssl_key_file = n1.key listen = 127.0.0.1:995 1.0.0.1:995 auth default { mechanisms = plain passdb pam { } userdb passwd { }}} ...and repeat for imap, imaps Thanks, Sean

2 1

[Dovecot] Debugging IMAP ACLs
by Kerem Erciyes 06 Oct '09

06 Oct '09

Hello, I upgraded my server to 1.2.4 and now I'm trying to implement ACL support to use with Bynari Insight Connector. Starting out with the wiki page on shared namespaces from http://wiki.dovecot.org/SharedMailboxes/Shared I tried to implement shared mailbox support so that my customers can enjoy more exhange-like qualities with outlook. However I am not sure if the ACLs or Shared Namespaces are really working. I sure would like some help debugging ACL requests by clients, and the configuration I did. Thanks, Kerem Here is the run down of my configuration, if I have screwed up somewhere. *dovecot -n* # 1.2.4: /usr/local/etc/dovecot.conf # OS: FreeBSD 6.2-STABLE i386 base_dir: /var/run/dovecot/ log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot-debug.log protocols: imap imaps pop3 pop3s disable_plaintext_auth: no login_dir: /var/run/dovecot//login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_greeting: Kupyazilim IMAPS/POP3S Server - Dovecot ready. verbose_proctitle: yes first_valid_uid: 100 first_valid_gid: 6 mail_privileged_group: mail mail_location: mbox:~/mail/:INBOX=/usr/home/vmail/%d/%u mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): outlook-idle delay-newmail tb-extra-mailbox-sep imap_client_workarounds(imap): outlook-idle delay-newmail tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: shared separator: / prefix: shared/%%u/ location: mbox:/usr/home/vmail/%d/%u:INDEX=/usr/home/vmail/shared/%%u list: children lda: postmaster_address: postmaster(a)kupyazilim.com.tr mail_plugins: quota log_path: /var/log/dovecot-deliver.log info_log_path: /var/log/dovecot-deliver.log auth default: mechanisms: plain login user: nobody passdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: prefetch socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: mail master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: mail plugin: acl_shared_dict: proxy::acl dict: quota: maildir:storage=10240:messages=1000 trash: /usr/local/etc/trash.conf acl: mysql:/usr/local/etc/dovecot-dict-sql.conf * cat /usr/local/etc/dovecot-acl.conf * # mail_location copied from dovecot.conf for reference only # # mail_location: mbox:~/mail/:INBOX=/usr/home/vmail/%d/%u # note: it is %d/%u here but only %u in dovecot-sql.conf # You need to create also a private namespace: namespace private { separator = / prefix = #location defaults to mail_location. inbox = yes } namespace shared { separator = / prefix = shared/%%u/ #location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u location = mbox:/usr/home/vmail/%d/%u:INDEX=/usr/home/vmail/shared/%%u subscriptions = no list = children } # Set ACL to SQL Server and Reference sql-dictionary # Table implemented in mysql:/postfix/user_shares plugin { acl_shared_dict = proxy::acl } dict { acl = mysql:/usr/local/etc/dovecot-dict-sql.conf } *cat /usr/local/etc/dovecot-dict-sql.conf * map { pattern = shared/shared-boxes/user/$to/$from table = user_shares value_field = dummy fields { from_user = $from to_user = $to } } -- Kerem Erciyes Sistem Danismani http://proje.keremerciyes.com kerem.erciyes(a)gmail.com +90 532 737 05 83

3 6