- dovecot - dovecot.org

[Dovecot] issues with ACL and Public Namespaces
by Anton Dollmaier 06 Oct '09

06 Oct '09

Hi all, after configuring dovecot to serve private and Public Namespaces per domain with ACLs per shared folder, everything worked great: In every shared folder I created a "dovecot-acl"-file with the permissions of every user: > user=user5(a)example.com > user=user6(a)example.com lrwstiea The subscriptions are handled with "subscriptions=no", so every local User can subscribe to shared folders as he likes. As the shared folders are managed via webinterface, the cronjob creating and deleting the folders also changes the subscriptions of every user, adding or removing the public folders as permissions are granted. RoundCube Webmail, Thunderbird and Outlook have no problems accessing and using the public folders, but a customer has problems with his Mac: In Apple Mail the folders are not visible, even when subscriptions are previously set in another mailclient. In RoundCube, I spottet another issue: subscribed public folders are usable in the "Mail"-area, but no public folder is listed in the "Folder"-settings - not even the already subscribed ones. Setting "list=yes" to the public namespace, RC lists only the prefix "shared" as a folder, but no subfolders - "list=children" shows no folder at all. As I checked the rawlog and debug-infos with "mail_debug=yes", I saw the possible cause for my problems: When checking the Folder Subscriptions in RoundCube, Dovecot tries to find an ACL file for the public folders, but does not check the public folders, but in the private Maildir: > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Loading modules from directory: /usr/lib/dovecot/modules/imap > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib01_acl_plugin.so > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib10_quota_plugin.so > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib11_imap_quota_plugin.so > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib20_autocreate_plugin.so > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib20_expire_plugin.so > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Effective uid=249, gid=249, home=/var/mail/vmail/example.com/user6/ > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl: No acl_shared_dict setting - shared mailbox listing is disabled > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Quota root: name=INBOX backend=dict args=:proxy::quotadict > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Quota rule: root=INBOX mailbox=* bytes=52428800 messages=0 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Quota rule: root=INBOX mailbox=Trash bytes=62914560 messages=0 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Quota warning: bytes=49807360 (95%) messages=0 command=/usr/local/bin/quota-warning.sh 95 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Quota warning: bytes=41943040 (80%) messages=0 command=/usr/local/bin/quota-warning.sh 80 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Quota root: name=shared backend=dict args=example.com:ns=shared.:proxy::quotadict > Oct 6 15:24:16 ipx02 dovecot: imap-login: Login: user=<user6(a)example.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Quota rule: root=shared mailbox=* bytes=524288000 messages=0 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): expire: pattern=Trash type=expunge secs=604800 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): expire: pattern=Spam type=expunge secs=2592000 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): dict quota: user=user6(a)example.com, uri=proxy::quotadict, noenforcing=0 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): dict quota: user=example.com, uri=proxy::quotadict, noenforcing=0 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Namespace: type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): maildir: data=~/Maildir > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): maildir++: root=/var/mail/vmail/example.com/user6//Maildir, index=, control=, inbox=/var/mail/vmail/example.com/user6//Maildir > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl: initializing backend with data: vfile > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl: acl username = user6(a)example.com > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl: owner = 1 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: Global ACL directory: (null) > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Namespace: type=public, prefix=shared., sep=., inbox=no, hidden=no, list=yes, subscriptions=no > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): maildir: data=/var/mail/vmail/example.com/shared:INDEX=~/shared > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): maildir++: root=/var/mail/vmail/example.com/shared, index=/var/mail/vmail/example.com/user6//shared, control=, inbox= > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl: initializing backend with data: vfile > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl: acl username = user6(a)example.com > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl: owner = 0 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: Global ACL directory: (null) > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Namespace : Using permissions from /var/mail/vmail/example.com/user6//Maildir: mode=0700 gid=-1 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: file /var/mail/vmail/example.com/user6//Maildir/.Sent/dovecot-acl not found > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: file /var/mail/vmail/example.com/user6//Maildir/.Spam/dovecot-acl not found > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: file /var/mail/vmail/example.com/user6//Maildir/.Trash/dovecot-acl not found > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: reading file /var/mail/vmail/example.com/user6//Maildir/dovecot-acl > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: file /var/mail/vmail/example.com/user6//Maildir/.shared.Transfer/dovecot-acl not found > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: file /var/mail/vmail/example.com/user6//Maildir/.shared.Transfer.Test1/dovecot-acl not found > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Disconnected: Logged out bytes=73/819 (last three lines are important) When checking the Folder itself, Dovecot checks in the IMHO correct folder: > Oct 6 15:25:02 ipx02 dovecot: imap-login: Login: user=<user6(a)example.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Loading modules from directory: /usr/lib/dovecot/modules/imap > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib01_acl_plugin.so > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib10_quota_plugin.so > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib11_imap_quota_plugin.so > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib20_autocreate_plugin.so > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib20_expire_plugin.so > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Effective uid=249, gid=249, home=/var/mail/vmail/example.com/user6/ > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl: No acl_shared_dict setting - shared mailbox listing is disabled > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Quota root: name=INBOX backend=dict args=:proxy::quotadict > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Quota rule: root=INBOX mailbox=* bytes=52428800 messages=0 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Quota rule: root=INBOX mailbox=Trash bytes=62914560 messages=0 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Quota warning: bytes=49807360 (95%) messages=0 command=/usr/local/bin/quota-warning.sh 95 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Quota warning: bytes=41943040 (80%) messages=0 command=/usr/local/bin/quota-warning.sh 80 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Quota root: name=shared backend=dict args=example.com:ns=shared.:proxy::quotadict > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Quota rule: root=shared mailbox=* bytes=524288000 messages=0 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): expire: pattern=Trash type=expunge secs=604800 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): expire: pattern=Spam type=expunge secs=2592000 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): dict quota: user=user6(a)example.com, uri=proxy::quotadict, noenforcing=0 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): dict quota: user=example.com, uri=proxy::quotadict, noenforcing=0 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Namespace: type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): maildir: data=~/Maildir > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): maildir++: root=/var/mail/vmail/example.com/user6//Maildir, index=, control=, inbox=/var/mail/vmail/example.com/user6//Maildir > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl: initializing backend with data: vfile > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl: acl username = user6(a)example.com > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl: owner = 1 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: Global ACL directory: (null) > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Namespace: type=public, prefix=shared., sep=., inbox=no, hidden=no, list=yes, subscriptions=no > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): maildir: data=/var/mail/vmail/example.com/shared:INDEX=~/shared > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): maildir++: root=/var/mail/vmail/example.com/shared, index=/var/mail/vmail/example.com/user6//shared, control=, inbox= > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl: initializing backend with data: vfile > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl: acl username = user6(a)example.com > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl: owner = 0 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: Global ACL directory: (null) > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Namespace : Using permissions from /var/mail/vmail/example.com/user6//Maildir: mode=0700 gid=-1 > Oct 6 15:25:03 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: reading file /var/mail/vmail/example.com/shared/.Transfer.Test1/dovecot-acl > Oct 6 15:25:03 ipx02 dovecot: IMAP(user6(a)example.com): expire: No expiring in mailbox: shared.Transfer.Test1 > Oct 6 15:25:03 ipx02 dovecot: IMAP(user6(a)example.com): Disconnected: Logged out bytes=85/743 (last four lines are important) Is this a possible bug related to ACL and Public Namespaces, or do I have to create the public folders also in the local Maildir and symlink the dovecot-acl to the public folder? With the symlinks in place (per Folder), dovecot finds the ACL-files and lists the folders also in RoundCube's "Folder"-pane and Apple Mail finds the public folders too. Upgrading to 1.2.5 failed so far, as my build-server has problems with automake, have to look into this too. Thanks in advance! best regards, Anton Dollmaier Output of dovecot -n: > # 1.2.3: /etc/dovecot/dovecot.conf > # OS: Linux 2.6.18-6-686 i686 Debian 5.0.3 > log_timestamp: %Y-%m-%d %H:%M:%S > protocols: imap imaps pop3s pop3 > listen: *, [::] > ssl_cert_file: /etc/dovecot/dovecot.pem > ssl_key_file: /etc/dovecot/dovecot.pem > disable_plaintext_auth: no > login_dir: /var/run/dovecot/login > login_executable(default): /usr/lib/dovecot/imap-login > login_executable(imap): /usr/lib/dovecot/imap-login > login_executable(pop3): /usr/lib/dovecot/pop3-login > mail_max_userip_connections(default): 25 > mail_max_userip_connections(imap): 25 > mail_max_userip_connections(pop3): 10 > first_valid_uid: 249 > mail_access_groups: poponly > mail_privileged_group: poponly > mail_location: maildir:~/Maildir > mail_debug: yes > mail_executable(default): /usr/lib/dovecot/rawlog /usr/lib/dovecot/imap > mail_executable(imap): /usr/lib/dovecot/rawlog /usr/lib/dovecot/imap > mail_executable(pop3): /usr/lib/dovecot/pop3 > mail_plugins(default): quota imap_quota acl autocreate expire > mail_plugins(imap): quota imap_quota acl autocreate expire > mail_plugins(pop3): quota expire > mail_plugin_dir(defamiult): /usr/lib/dovecot/modules/imap > mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap > mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 > imap_client_workarounds(default): netscape-eoh > imap_client_workarounds(imap): netscape-eoh > imap_client_workarounds(pop3): > pop3_client_workarounds(default): > pop3_client_workarounds(imap): > pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh > namespace: > type: private > separator: . > inbox: yes > list: yes > subscriptions: yes > namespace: > type: public > separator: . > prefix: shared. > location: maildir:/var/mail/vmail/%d/shared:INDEX=~/shared > list: yes > lda: > postmaster_address: postmaster(a)server.example.com > mail_plugins: quota expire > quota_full_tempfail: yes > auth_socket_path: /var/run/dovecot/auth-master > log_path: /var/log/dovecot-deliver.log > info_log_path: /var/log/dovecot-deliver.log > sieve_global_dir: /etc/dovecot/sieve/ > sieve_global_path: /etc/dovecot/default.sieve > auth default: > mechanisms: plain login > passdb: > driver: sql > args: /etc/dovecot/dovecot-sql.conf > passdb: > driver: sql > args: /etc/dovecot/dovecot-sql-master.conf > userdb: > driver: sql > args: /etc/dovecot/dovecot-sql.conf > socket: > type: listen > client: > path: /var/spool/postfix/private/auth > mode: 432 > user: postfix > group: postfix > master: > path: /var/run/dovecot/auth-master > mode: 432 > user: vmail > group: vmail > plugin: > quota: dict:INBOX::proxy::quotadict > quota2: dict:shared:%d:ns=shared.:proxy::quotadict > quota_rule: *:storage=50M:messages=1000 > quota_rule2: Trash:storage=50M:messages=100 > quota2_rule: *:storage=100M:messages=1000 > quota_warning: storage=95%% /usr/local/bin/quota-warning.sh 95 > quota_warning2: storage=80%% /usr/local/bin/quota-warning.sh 80 > acl: vfile > expire: Trash 7 Spam 30 > expire_dict: proxy::expire > autocreate: Trash > autocreate2: Spam > autocreate3: Sent > autosubscribe: Trash > autosubscribe2: Spam > autosubscribe3: Sent > dict: > quotadict: mysql:/etc/dovecot/dovecot-dict-quota.conf > expire: mysql:/etc/dovecot/dovecot-dict-expire.conf

2 3

[Dovecot] v1.2.6 released
by Timo Sirainen 06 Oct '09

06 Oct '09

http://dovecot.org/releases/1.2/dovecot-1.2.6.tar.gz http://dovecot.org/releases/1.2/dovecot-1.2.6.tar.gz.sig A couple of random things: - I decided to start using "hg sign" to gpg sign all releases in mercurial repository. - v2.0.alpha1 will hopefully be released in a week or two. Changes since 1.2.5: * Upgraded to Unicode 5.2.0 + Added authtest utility for doing passdb and userdb lookups. + login: ssl_security string now also shows the used compression. - quota: Don't crash with non-Maildir++ quota backend. - imap proxy: Fixed crashing with some specific password characters. - dovecot --exec-mail was broken. - Avoid assert-crashing when two processes try to create index at the same time.

2 1

[Dovecot] Proxy setup & upgrade from 1.0.3 to 1.1.7
by Adrian Wojcicki | Unternehmensberatung Wojcicki 06 Oct '09

06 Oct '09

Hi guys! I hope somebody can help me with my problem: We have a server running dovecot and proxying IMAPS connections to our internal network. This worked so far very good until we upgraded the server to a new SUSE Linux version and with it dovecot from version 1.0.3 to 1.1.7. My guess is that something changed in the way dovecot reads the user file as the configuration stayed the same: dovecot.conf: base_dir = /var/run/dovecot/ protocols = imaps disable_plaintext_auth = yes ssl_cert_file = /<pathtocertificate> ssl_key_file = /<pathtocertificate> ssl_disable = no ssl_listen = 80.149.64.98:993 log_path = /var/log/dovecot.log login_dir = /var/run/dovecot/login login_process_per_connection = yes login_processes_count = 3 login_greeting = main.xbdx.de IMAP What can we do for you? imap_client_workarounds = tb-extra-mailbox-sep mail_debug = no auth_debug = yes auth_cache_size = 4096 auth_cache_ttl = 7200 auth_worker_max_count = 30 auth default { userdb static { args = uid=5000 gid=5000 } passdb { driver = passwd-file args = /etc/dovecot/dovecot.passdb } socket listen { client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } mechanisms = plain login user = root count = 1 } dovecot.passdb: testuser1:::::::host=<internalip> port=143 nodelay=y nologin=y proxy=y testuser2:::::::host=<internalip> port=143 nodelay=y nologin=y proxy=y dovecot.log: dovecot: Oct 06 10:37:26 Info: Dovecot v1.1.7 starting up dovecot: Oct 06 10:37:26 Info: auth(default): passwd-file /etc/dovecot/dovecot.passdb: Read 2 users dovecot: Oct 06 10:37:27 Info: auth(default): new auth connection: pid=8135 dovecot: Oct 06 10:37:27 Info: auth(default): new auth connection: pid=8136 dovecot: Oct 06 10:37:27 Info: auth(default): new auth connection: pid=8137 dovecot: Oct 06 10:37:39 Info: auth(default): new auth connection: pid=8139 dovecot: Oct 06 10:37:39 Info: auth(default): client in: AUTH 1 PLAIN service=imap secured lip=80.149.64.98 rip=217.91.33.32 lport=993 rport=61752 resp=<hidden> dovecot: Oct 06 10:37:39 Info: auth(default): cache(adrian.wojcicki,217.91.33.32): miss dovecot: Oct 06 10:37:39 Info: auth(default): passwd-file(testuser1,217.91.33.32): lookup: user=testuser1 file=/etc/dovecot/dovecot.passdb dovecot: Oct 06 10:37:39 Info: auth(default): passwd-file(testuser1,217.91.33.32): Password mismatch dovecot: Oct 06 10:37:41 Info: auth(default): client out: FAIL 1 user=testuser1 host=<internalip> port=143 nologin proxy pass=<hidden> dovecot: Oct 06 10:37:41 Info: imap-login: Aborted login (auth failed, 1 attempts): user=<testuser1>, method=PLAIN, rip=217.91.33.32, lip=80.149.64.98, TLS Thanks! Adrian

2 2

[Dovecot] How to calculate auth_cache_size ?
by Frank Bonnet 06 Oct '09

06 Oct '09

Hello Is there a way to calculate this parameter for my site which has approx 4000 users authenticating thru NIS ? Thanks a lot

2 1

[Dovecot] Delivery failure about update to 1.2.4 (Debian)
by William Witteman 06 Oct '09

06 Oct '09

Version: 1.2.4 Config: # 1.2.4: /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-686 i686 Debian squeeze/sid ext3 log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot-info.log log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s ssl_ca_file: /etc/ssl/certs/gd_intermediate_bundle2.crt ssl_cert_file: /etc/ssl/certs/theta.crt ssl_key_file: /etc/ssl/private/theta.key ssl_key_password: obfuscated disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_location: maildir:/home/vmail/%d/%n mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 lda: log_path: /home/vmail/dovecot-deliver.log auth_socket_path: /var/run/dovecot/auth-master postmaster_address: obfuscated mail_plugins: cmusieve global_script_path: /home/vmail/globalsieverc auth default: mechanisms: plain login digest-md5 user: vmail debug: yes passdb: driver: passwd-file args: /etc/dovecot/passwd userdb: driver: static args: uid=5000 gid=5000 home=/home/vmail/%d/%n socket: type: listen client: path: /var/run/dovecot/auth-client mode: 438 master: path: /var/run/dovecot/auth-master mode: 384 user: vmail I recently updated Debian (testing). Now, no mail is getting from postfix to dovecot, but postfix didn't get upgraded. dovecot seems happy (after I fixed the "ssl = yes" change (speaking of which, that line is not in the dovecot -n output)), but postfix is unable to deliver email to it. Here is a sample mail.log entry: Oct 5 14:47:07 theta postfix/pipe[30972]: 451873B5B8: to=<obfuscated>, relay=dovecot, delay=168521, delays=168521/0.01/0/0.02, dsn=4.3.0, status=deferred (temporary failure) I cannot seem to figure out what changed and why things are now broken. Can anyone help? Thanks. -- yours, William

3 8

[Dovecot] Apple mail troubles
by Frank Bonnet 06 Oct '09

06 Oct '09

Hello I have an Apple computer user who has great problems using IMAP and Dovecot. Some same messages seems to stay in two or more folders and are impossible to erase from the Apple mail client Anyone has that kind of troubles ? Thanks

7 8

[Dovecot] Dovecot And ThunderBird
by Михаил Захаренко 05 Oct '09

05 Oct '09

Hello All! i`m using Dovecot 1.2.4 and Thunderbird 2.0.0.23 (Ubuntu) Trouble with shared folder and marks. For example: 1. first user set flag "important", other users can see it - all ok. 2. first user unset flag "important", other users see it yet, it`s don`t change. But with asterisk (\Flagged) all OK. Please help find - who are wrong? ThunderBird or dovecot? my conf: # 1.2.4: /etc/dovecot/dovecot.conf # OS: Linux 2.6.28-hardened-r9 i686 Gentoo Base System release 1.12.11.1 reiserfs log_path: /var/log/dovecot_err.log info_log_path: /var/log/dovecot_info.log protocols: imap pop3 imaps pop3s managesieve ssl_cert_file: /etc/dovecot/ssl/mail.proton-sss.ru.pem ssl_key_file: /etc/dovecot/ssl/mail.proton-sss.ru.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_executable(managesieve): /usr/libexec/dovecot/managesieve-login mail_location: maildir:/home/%u/.maildir mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_executable(managesieve): /usr/libexec/dovecot/managesieve mail_plugins(default): acl imap_acl mail_plugins(imap): acl imap_acl mail_plugins(pop3): mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/managesieve namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: shared separator: / prefix: shared/%%u/ location: maildir:%%h/.maildir/:INDEX=%h/.maildir/shared/%%u list: children lda: postmaster_address: postmaster(a)example.com mail_plugins: acl mail_plugin_dir: /usr/lib/dovecot/lda auth default: passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 group: mail master: path: /var/run/dovecot/auth-master mode: 432 user: mail group: users plugin: acl: vfile acl_shared_dict: file:/var/lib/dovecot/shared-mailboxes sieve: ~/.dovecot.sieve sieve_dir: ~/sieve dict: expire: db:/var/lib/dovecot/expire.db file dovecot-shared in shared maildir presents, and flag \Seen are private. -- С уважением Системный администратор ООО НПП "СПЕЦСТРОЙ-СВЯЗЬ" Захаренко Михаил тел. +78634 311562 доб. 478

2 3

[Dovecot] Dovecot fails when vpopmail is enabled
by Sherin George 05 Oct '09

05 Oct '09

Hello Friends, ===================================================== -bash-3.2# dovecot --version 1.2.5 -bash-3.2# dovecot -n # 1.2.5: /usr/local/etc/dovecot.conf # OS: Linux 2.6.18-128.4.1.el5xen x86_64 CentOS release 5.2 (Final) login_dir: /usr/local/var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login lda: postmaster_address: postmaster(a)example.com auth default: passdb: driver: pam userdb: driver: passwd ===================================================== I am trying to enable vpomail support in dovecot. I modified default dovecot conf file as given below. =============================================== -bash-3.2# diff /etc/dovecot.conf /etc/dovecot.conf.original 691c691 < auth_cache_size = 1000 --- > #auth_cache_size = 0 886c886 < passdb vpopmail { --- > #passdb vpopmail { 888,890c888,890 < args = cache_key=%u%s * < } < --- > #args = > #} > =============================================== I am not able to run dovecot after this. ========================================= -bash-3.2# /etc/init.d/dovecot restart Stopping Dovecot Imap: [FAILED] Starting Dovecot Imap: [ OK ] -bash-3.2# /etc/init.d/dovecot restart Stopping Dovecot Imap: [FAILED] Starting Dovecot Imap: [ OK ] -bash-3.2# /etc/init.d/dovecot restart Stopping Dovecot Imap: [FAILED] Starting Dovecot Imap: [ OK ] -bash-3.2# ========================================= Could some one please help me to find what went wrong. -- Thanks, Sherin

2 2

[Dovecot] dovecot 1.0.15 upgrading to dovecot 1.1.x or 1.2.x, and POP3 UIDL issue
by Ariel Biener 05 Oct '09

05 Oct '09

Hi, We're upgrading a cluster of servers from v1.0.15 to v1.1.x or v1.2.x. It appears that the UIDL generation mechanism has changed, and thus we'll be getting POP3 dups with users that leave mail on server (which is a nasty practice, I know). From checking the sources, and performing a number of controlled tests in various scenarios, here is the outcome: upgrade from 1.0.15 to 1.1.x (latest), UIDLs change (no change to the mail backend, that is, mbox) However, the interesting part is that if for example I read a mailbox for the first time with the 1.1.x version, and then I migrate the mailbox to a different server, running 1.1.x or 1.2.x, with Maildir or mailbox the UIDL does *NOT* change. We do not have X-UIDL headers in the mailboxes. I did every possible permutation of these tests. It appears that the way UIDLs are created in 1.0.x is different than what is used in 1.1.x and 1.2.x. (I am not talking about the format, we're using the same format in both, that is, UW compatible). Since we're a largish site (university), and we have some >60k accounts, even the smallest percentage of users who use POP3 and "leave mail on server" is a large number of angry staff members landing on our helpdesk, which is the reason why we're not migrating. Has anyone ever ported the UIDL generation algorithm from 1.0.x to 1.1.x/1.2.x to maintain compatibility ? Is there some other option that I am missing ? --Ariel

2 2

[Dovecot] Quota exceeded delivery message
by michel＠casa.co.cu 05 Oct '09

05 Oct '09

Hi I have assigned quotas to my users and in turn use quota_warning for my users send them a message saying that the level of its quota is about to be exceeded. when the quota is exceeded, the script runs again sending a message to the user and is rejected by the server. there is any way to get the message when the postmaster, is delivered to the mailbox even when exceeded the quota or simply not send it once exceeded the quota level? quota_warning = storage=95%% /usr/local/bin/quota-warning.sh 95 quota = maildir quota_rule = *:storage=40M Another question: I've implemented recently in my work Bogofilter to mark messages as SPAM or HAM. Using dovecot as IMAP and POP3 server and deliver, there is some way to move messages marked as SPAM to a folder called spam or junk? I've heard that can be done with sieve, is this true? fileinto? Thanks Michel ---------------------------------------------- Webmail, servicio de correo electronico Casa de las Americas - La Habana, Cuba.

2 1

[Dovecot] Error: userdb lookup: connect(/var/run/dovecot/auth-master) failed: Permission denied
by Jerry 05 Oct '09

05 Oct '09

I am making my first attempt to get dovecot working with Postfix virtual users/domains. The following is the error log and the output of "dovecot -n". I am probably doing something really stupid; however, I do not know what. Oct 03 17:50:41 pop3-login: Info: Login: user=<user(a)mydomain.com>, method=PLAIN, rip=192.168.1.103, lip=192.168.1.103, TLS Oct 03 17:50:41 POP3(user(a)mydomain.com): Info: Effective uid=1001, gid=1001, home=/var/mail/virtual/mydomain.com/user Oct 03 17:50:41 POP3(user(a)mydomain.com): Info: maildir: data=/var/mail/vhost/seibercom.net/budman Oct 03 17:50:41 POP3(user(a)mydomain.com): Info: maildir++: root=/var/mail/vhost/seibercom.net/budman, index=, control=, inbox=/var/mail/vhost/mydomain.com/user Oct 03 17:50:41 POP3(user(a)mydomain.com): Info: Namespace : Using permissions from /var/mail/vhost/mydomain.com/user: mode=0755 gid=-1 Oct 03 17:50:41 POP3(user(a)mydomain.com): Info: Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Oct 03 18:13:13 deliver(user(a)mydomain.com): Error: userdb lookup: connect(/var/run/dovecot/auth-master) failed: Permission denied # dovecot -n # 1.2.4: /usr/local/etc/dovecot.conf # OS: FreeBSD 7.2-STABLE i386 ufs log_path: /usr/home/gerard/tmp/dovecot.log protocols: pop3 pop3s disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/pop3-login login_greeting: Dovecot serving mydomain.net greets you! verbose_proctitle: yes first_valid_uid: 1000 first_valid_gid: 1000 mail_privileged_group: mail mail_location: maildir:/var/mail/vhost/%d/%n mail_debug: yes mail_executable: /usr/local/libexec/dovecot/pop3 mail_plugin_dir: /usr/local/lib/dovecot/pop3 pop3_client_workarounds: outlook-no-nuls oe-ns-eoh dict_db_config: /usr/local/etc/dovecot-db.conf lda: postmaster_address: postmaster(a)mydomain.net sendmail_path: /usr/sbin/sendmail auth default: mechanisms: plain login username_format: %Lu verbose: yes debug_passwords: yes passdb: driver: pam passdb: driver: passwd-file args: /usr/local/etc/dovecot_passwd userdb: driver: passwd args: blocking=yes userdb: driver: static args: uid=gerard gid=gerard home=/var/mail/virtual/%d/%n socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 master: path: /var/run/dovecot/auth-master mode: 384 -- Jerry gesbbb(a)yahoo.com "What do you do when your real life exceeds your wildest fantasies?" "You keep it to yourself." Broadcast News

2 2

[Dovecot] deliver stopped working
by vwc72283＠voicenet.com 05 Oct '09

05 Oct '09

Hi: I have been using Dovecot for well over a year now and it has always worked with few problems. The mail setup is not simple... Postfix+MailScanner+ClamAV+Docvecot+MySql+postfix.admin... just to mention the major things. The system is CentOS 5.3 on VMware. The maildir is on an NFS share, index and control is local. About a month ago I thought I upgraded from 1.1.x to 1.2.x. by doing an rpmbuild and deploying. I say thought because today I determined the binaries were still 1.1x. Today a reboot was done after a kernel upgrade (2.6.18-128.x -> 2.6.18-164). The mail system never came back up. My assumption is that the working binaries were in memory but the images on disk were changed. Anyway, the problem is with deliver writing to the mail dir. The error is: Oct 3 21:33:58 myserver dovecot: auth(default): master in: USER 1 myaccount(a)mydomain.net service=deliver Oct 3 21:33:58 myserver dovecot: auth(default): prefetch(myaccount(a)mydomain.net): passdb didn't return userdb entries, trying the next userdb Oct 3 21:33:58 myserver dovecot: auth-worker(default): sql(myaccount(a)mydomain.net): SELECT '/home/vmail/mydomain.net/myaccount' as home, 'maildir:/home/vmail/mydomain.net/myaccount:INDEX=/var/indexes/mydomain.net/…' as mail, 5000 AS uid, 5000 AS gid, concat('dirsize:storage=', quota) AS quota FROM mailbox WHERE username = 'myaccount(a)mydomain.net' AND active = '1' Oct 3 21:33:58 myserver dovecot: auth(default): master out: USER 1 myaccount(a)mydomain.net home=/home/vmail/mydomain.net/myaccount mail=maildir:/home/vmail/mydomain.net/myaccount:INDEX=/var/indexes/mydomain… uid=5000 gid=5000 quota=dirsize:storage=0 Oct 3 21:33:58 myserver dovecot: deliver(myaccount(a)mydomain.net): auth input: home=/home/vmail/mydomain.net/myaccount Oct 3 21:33:58 myserver dovecot: deliver(myaccount(a)mydomain.net): auth input: mail=maildir:/home/vmail/mydomain.net/myaccount:INDEX=/var/indexes/mydomain… Oct 3 21:33:58 myserver dovecot: deliver(myaccount(a)mydomain.net): auth input: uid=5000 Oct 3 21:33:58 myserver dovecot: deliver(myaccount(a)mydomain.net): auth input: gid=5000 Oct 3 21:33:58 myserver dovecot: deliver(myaccount(a)mydomain.net): auth input: quota=dirsize:storage=0 Oct 3 21:33:58 myserver dovecot: deliver(myaccount(a)mydomain.net): maildir: data=/home/vmail/mydomain.net/myaccount:INDEX=/var/indexes/mydomain.net/mya… Oct 3 21:33:58 myserver dovecot: deliver(myaccount(a)mydomain.net): maildir++: root=/home/vmail/mydomain.net/myaccount, index=/var/indexes/mydomain.net/myaccount, control=/var/indexes/mydomain.net/myaccount, inbox=/home/vmail/mydomain.net/myaccount Oct 3 21:33:58 myserver dovecot: deliver(myaccount(a)mydomain.net): Namespace : Using permissions from /home/vmail/mydomain.net/myaccount: mode=0770 gid=-1 Oct 3 21:33:58 myserver dovecot: deliver(myaccount(a)mydomain.net): open(/home/vmail/mydomain.net/myaccount/tmp/1254620038.M241510P27678.myserv… failed: Permission denied Oct 3 21:33:58 myserver dovecot: deliver(myaccount(a)mydomain.net): msgid=<200910040116.n941GjtJ001913(a)nm2srvp01.mydomain.net>: save failed to INBOX: Internal error occurred. Refer to server log for more information. [2009-10-03 21:33:58] Oct 3 21:33:58 myserver postfix/pipe[27677]: 89A24914CB: to=<myaccount(a)mydomain.net>, orig_to=<server.ops(a)mydomain.net>, relay=dovecot, delay=1033, delays=1032/0.16/0/0.31, dsn=4.3.0, status=deferred (temporary failure) The files are being created: (root@myserver:/home/vmail/mydomain.net/myaccount/tmp)# ls -la total 156 drwxrwx--- 2 vmail vmail 4096 Oct 3 21:49 . drwxrwx--- 9 vmail vmail 4096 Oct 3 20:19 .. ---------- 1 vmail vmail 0 Nov 30 1970 1254620038.M241510P27678.myserver.mydomain.net The user does have permission: (root@myserver:/home/vmail/mydomain.net/myaccount/tmp)# su - vmail -bash-3.2$ pwd /home/vmail/mydomain.net/myaccount/tmp -bash-3.2$ ls -la total 160 drwxrwx--- 2 vmail vmail 4096 Oct 3 21:54 . drwxrwx--- 9 vmail vmail 4096 Oct 3 20:19 .. ---------- 1 vmail vmail 0 Nov 30 1970 1254620038.M241510P27678.myserver.mydomain.net -bash-3.2$ rm 1254620038.M241510P27678.myserver.mydomain.net rm: remove write-protected regular empty file `1254620038.M241510P27678.myserver.mydomain.net'? y -bash-3.2$ echo this > 1254620038.M241510P27678.myserver.mydomain.net -bash-3.2$ ls -la 1254620038.M241510P27678.myserver.mydomain.net -rw-r--r-- 1 vmail vmail 5 Oct 3 21:58 1254620038.M241510P27678.myserver.mydomain.net -bash-3.2$ cat 1254620038.M241510P27678.myserver.mydomain.net this -bash-3.2$ rm 1254620038.M241510P27678.myserver.mydomain.net -bash-3.2$ If you delete the directory it does get recreated. I upgraded to 1.2.5 but it did not help. There were a lot of errors in the audit.log, however SELinux was already in permissive mode and switching it to disabled did no good. I created the following policy to get rid of all of the errors in the audit log: module local_postfix 1.0; require { type postfix_etc_t; type home_root_t; type apmd_t; type setrans_t; type port_t; type etc_mail_t; type snmpd_t; type tmp_t; type dovecot_deliver_t; type postfix_smtp_t; type nfs_t; type var_run_t; type usr_t; type httpd_t; type audisp_t; type postfix_cleanup_t; type inetd_t; type portmap_t; type postfix_pickup_t; type hald_t; type getty_t; type avahi_t; type etc_t; type sysctl_kernel_t; type unconfined_t; type init_t; type auditd_t; type lib_t; type dovecot_auth_t; type syslogd_t; type hostname_exec_t; type postfix_smtpd_t; type var_spool_t; type system_dbusd_t; type mysqld_etc_t; type initrc_t; type proc_t; type restorecond_t; type etc_runtime_t; type postfix_bounce_t; type ntpd_t; type kernel_t; type postfix_master_t; type rpcd_t; type dovecot_t; type klogd_t; type udev_t; type clamd_t; type mysqld_port_t; type initrc_var_run_t; type var_t; type postfix_qmgr_t; type postfix_pipe_t; type crond_t; class process ptrace; class unix_stream_socket connectto; class tcp_socket { name_bind name_connect }; class file { rename execute read lock create ioctl execute_no_trans write getattr link unlink }; class sock_file { setattr create write getattr unlink }; class lnk_file { read getattr }; class dir { search setattr read create write getattr remove_name add_name }; } #============= clamd_t ============== allow clamd_t proc_t:file { read getattr }; allow clamd_t sysctl_kernel_t:dir search; allow clamd_t sysctl_kernel_t:file read; allow clamd_t var_t:dir read; allow clamd_t var_t:file { read getattr }; #============= dovecot_auth_t ============== allow dovecot_auth_t mysqld_etc_t:file { read getattr }; allow dovecot_auth_t mysqld_port_t:tcp_socket name_connect; allow dovecot_auth_t var_run_t:dir { write remove_name add_name }; allow dovecot_auth_t var_run_t:sock_file { write create unlink setattr }; #============= dovecot_deliver_t ============== allow dovecot_deliver_t nfs_t:dir { write search add_name create getattr }; allow dovecot_deliver_t nfs_t:file create; allow dovecot_deliver_t postfix_master_t:file read; allow dovecot_deliver_t postfix_pipe_t:file read; allow dovecot_deliver_t var_run_t:sock_file write; allow dovecot_deliver_t var_t:file { read write getattr lock }; #============= dovecot_t ============== allow dovecot_t initrc_var_run_t:file read; allow dovecot_t lib_t:dir { write create add_name }; allow dovecot_t lib_t:file create; allow dovecot_t nfs_t:dir { write search read remove_name create add_name }; allow dovecot_t nfs_t:file { read rename getattr unlink link }; allow dovecot_t var_run_t:sock_file { write getattr unlink create setattr }; allow dovecot_t var_t:dir { write remove_name add_name setattr }; allow dovecot_t var_t:file { rename write getattr read lock create unlink }; #============= httpd_t ============== allow httpd_t apmd_t:dir { getattr search }; allow httpd_t apmd_t:file read; allow httpd_t audisp_t:dir { getattr search }; allow httpd_t audisp_t:file read; allow httpd_t auditd_t:dir { getattr search }; allow httpd_t auditd_t:file read; allow httpd_t avahi_t:dir { getattr search }; allow httpd_t avahi_t:file read; allow httpd_t clamd_t:dir { getattr search }; allow httpd_t clamd_t:file read; allow httpd_t crond_t:dir { getattr search }; allow httpd_t crond_t:file read; allow httpd_t dovecot_auth_t:dir { getattr search }; allow httpd_t dovecot_auth_t:file read; allow httpd_t dovecot_t:dir { getattr search }; allow httpd_t dovecot_t:file read; allow httpd_t etc_mail_t:dir { read search getattr }; allow httpd_t etc_mail_t:file { read getattr ioctl }; allow httpd_t etc_mail_t:lnk_file read; allow httpd_t etc_runtime_t:file { write rename unlink }; allow httpd_t etc_t:dir { write remove_name add_name }; allow httpd_t getty_t:dir { getattr search }; allow httpd_t getty_t:file read; allow httpd_t hald_t:dir { getattr search }; allow httpd_t hald_t:file read; allow httpd_t hostname_exec_t:file { read getattr execute execute_no_trans }; allow httpd_t inetd_t:dir { getattr search }; allow httpd_t inetd_t:file read; allow httpd_t init_t:dir { getattr search }; allow httpd_t init_t:file read; allow httpd_t initrc_t:dir { getattr search }; allow httpd_t initrc_t:file read; allow httpd_t kernel_t:dir { getattr search }; allow httpd_t kernel_t:file read; allow httpd_t klogd_t:dir { getattr search }; allow httpd_t klogd_t:file read; allow httpd_t mysqld_port_t:tcp_socket name_connect; allow httpd_t ntpd_t:dir { getattr search }; allow httpd_t ntpd_t:file read; allow httpd_t port_t:tcp_socket name_bind; allow httpd_t portmap_t:dir { getattr search }; allow httpd_t portmap_t:file read; allow httpd_t postfix_bounce_t:dir { getattr search }; allow httpd_t postfix_bounce_t:file read; allow httpd_t postfix_cleanup_t:dir { getattr search }; allow httpd_t postfix_cleanup_t:file read; allow httpd_t postfix_master_t:dir { getattr search }; allow httpd_t postfix_master_t:file read; allow httpd_t postfix_pickup_t:dir { getattr search }; allow httpd_t postfix_pickup_t:file read; allow httpd_t postfix_pipe_t:dir { getattr search }; allow httpd_t postfix_pipe_t:file read; allow httpd_t postfix_qmgr_t:dir { getattr search }; allow httpd_t postfix_qmgr_t:file read; allow httpd_t postfix_smtp_t:dir { getattr search }; allow httpd_t postfix_smtp_t:file read; allow httpd_t postfix_smtpd_t:dir { getattr search }; allow httpd_t postfix_smtpd_t:file read; allow httpd_t restorecond_t:dir { getattr search }; allow httpd_t restorecond_t:file read; allow httpd_t rpcd_t:dir { getattr search }; allow httpd_t rpcd_t:file read; allow httpd_t self:process ptrace; allow httpd_t setrans_t:dir { getattr search }; allow httpd_t setrans_t:file read; allow httpd_t snmpd_t:dir { getattr search }; allow httpd_t snmpd_t:file read; allow httpd_t syslogd_t:dir { getattr search }; allow httpd_t syslogd_t:file read; allow httpd_t system_dbusd_t:dir { getattr search }; allow httpd_t system_dbusd_t:file read; allow httpd_t udev_t:dir { getattr search }; allow httpd_t udev_t:file read; allow httpd_t unconfined_t:dir { getattr search }; allow httpd_t unconfined_t:file read; allow httpd_t var_spool_t:dir { read write remove_name }; allow httpd_t var_spool_t:file { read getattr unlink ioctl }; allow httpd_t var_t:file { read write getattr lock }; #============= postfix_master_t ============== allow postfix_master_t postfix_etc_t:lnk_file getattr; #============= postfix_pipe_t ============== allow postfix_pipe_t home_root_t:dir search; allow postfix_pipe_t initrc_t:unix_stream_socket connectto; allow postfix_pipe_t nfs_t:dir { write search add_name create getattr }; allow postfix_pipe_t nfs_t:file create; allow postfix_pipe_t tmp_t:dir search; allow postfix_pipe_t usr_t:file { read execute execute_no_trans }; allow postfix_pipe_t var_run_t:sock_file write; allow postfix_pipe_t var_t:file { read write getattr lock }; #============= postfix_smtpd_t ============== allow postfix_smtpd_t initrc_t:unix_stream_socket connectto; ...so now the audit.log is clean but no matter what I've tried I can't get deliver to deliver messages to the inboxes. Some of the system details: (root@myserver:/etc/dovecot)# dovecot -c /etc/dovecot/dovecot.conf -n # 1.2.5: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-164.el5 i686 CentOS release 5.3 (Final) base_dir: /var/run/dovecot/ log_timestamp: ¦%Y-%m-%d %H:%M:%S ¦ listen: 127.0.0.1:143 ssl_listen: *:993 ssl_ca_file: /etc/pki/mydomain/mailserver/certs/class3.crt ssl_cert_file: /etc/pki/mydomain/mailserver/certs/myserver.mydomain.net.crt ssl_key_file: /etc/pki/mydomain/mailserver/private/myserver.mydomain.net.key verbose_ssl: yes login_dir: /var/run/dovecot//login login_executable: /usr/libexec/dovecot/imap-login verbose_proctitle: yes first_valid_uid: 5000 last_valid_uid: 5000 mail_access_groups: vmail mail_location: maildir:/var/vmail/%d/%u:INDEX=/var/indexes/%d/%n mail_debug: yes mail_nfs_storage: yes mbox_read_locks: dotlock mbox_write_locks: dotlock mail_executable: /usr/libexec/dovecot/imap imap_client_workarounds: outlook-idle, tb-extra-mailbox-sep lda: postmaster_address: postmaster(a)mydomain.net sendmail_path: /usr/lib/sendmail auth_socket_path: /var/run/dovecot/auth-master auth_executable: /usr/libexec/dovecot/dovecot-auth auth default: user: nobody verbose: yes debug: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: prefetch userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: vmail (root@myserver:/etc/dovecot)# grep -v '^ *$#.*$\?$' dovecot-sql.conf driver = mysql connect = host=mydatabaseserver.mydomain.net dbname=mydatabasename user=mydovecotuser password=********** default_pass_scheme = MD5 user_query = SELECT '/home/vmail/%d/%n' as home, 'maildir:/home/vmail/%d/%n:INDEX=/var/indexes/%d/%n:CONTROL=/var/indexes/%d/%n' as mail, 5000 AS uid, 5000 AS gid, concat('dirsize:storage=', quota) AS quota FROM mailbox WHERE username = '%u' AND active = '1' password_query = SELECT password FROM mailbox WHERE username = '%u' AND active = '1' (root@ms1srvp01:/etc/dovecot)# ps -ef UID PID PPID C STIME TTY TIME CMD clamav 2138 1 0 12:49 ? 00:00:06 clamd root 26744 1 0 21:03 ? 00:00:00 /usr/sbin/dovecot -c /etc/dovecot/dovecot.conf nobody 26745 26744 0 21:03 ? 00:00:00 dovecot-auth nobody 26747 26744 0 21:03 ? 00:00:00 dovecot-auth -w dovecot 26748 26744 0 21:03 ? 00:00:00 imap-login dovecot 26749 26744 0 21:03 ? 00:00:00 imap-login dovecot 26750 26744 0 21:03 ? 00:00:00 imap-login root 26888 1 0 21:03 ? 00:00:00 /usr/libexec/postfix/master postfix 26889 26888 0 21:03 ? 00:00:00 qmgr -l -t fifo -u postfix 26890 26888 0 21:03 ? 00:00:00 pickup -l -t fifo -u postfix 26910 1 0 21:03 ? 00:00:00 MailScanner: master waiting for children, sleeping postfix 26911 26910 0 21:03 ? 00:00:03 MailScanner: waiting for messages postfix 26915 1 0 21:03 ? 00:00:00 MailWatch SQL postfix 26918 26910 0 21:03 ? 00:00:03 MailScanner: waiting for messages postfix 26923 26910 0 21:04 ? 00:00:03 MailScanner: waiting for messages postfix 26934 26910 0 21:04 ? 00:00:03 MailScanner: waiting for messages postfix 26939 26910 0 21:04 ? 00:00:03 MailScanner: waiting for messages postfix 26950 26888 0 21:04 ? 00:00:00 tlsmgr -l -t unix -u nobody 27002 26744 0 21:08 ? 00:00:00 dovecot-auth -w vmail 27035 26744 0 21:09 ? 00:00:01 imap [myaccount(a)mydomain.net 192.168.2.151] vmail 27036 26744 0 21:09 ? 00:00:01 imap [myotheraccount1(a)myotherdomain.com 192.168.2.151] vmail 27037 26744 0 21:09 ? 00:00:01 imap [myaccount(a)mydomain.com 192.168.2.151] dovecot 27038 26744 0 21:09 ? 00:00:00 imap-login dovecot 27039 26744 0 21:09 ? 00:00:00 imap-login dovecot 27040 26744 0 21:09 ? 00:00:00 imap-login dovecot 27041 26744 0 21:09 ? 00:00:00 imap-login dovecot 27042 26744 0 21:09 ? 00:00:00 imap-login dovecot 27043 26744 0 21:09 ? 00:00:00 imap-login vmail 27044 26744 0 21:09 ? 00:00:01 imap [myotheraccount2(a)myotherdomain.com 192.168.2.151] nobody 28288 26744 0 22:09 ? 00:00:00 dovecot-auth -w nobody 28292 26744 0 22:09 ? 00:00:00 dovecot-auth -w postfix 28938 26888 0 22:19 ? 00:00:00 pipe -n dovecot -t unix flags=DRhu user=vmail vmail argv=/usr/libexec/dovecot/deliver -c /etc/dovecot/dovecot.conf -f ${sender} -d ${recipient} postfix 28672 26888 0 22:19 ? 00:00:00 bounce -z -n defer -t unix -u ONLY RELEVENT ENTRIES (root@ms1srvp01:~)# lsof | grep 28938 pipe 28938 postfix cwd DIR 253,0 4096 425985 /var/spool/postfix pipe 28938 postfix rtd DIR 253,0 4096 2 / pipe 28938 postfix txt REG 253,0 241092 589991 /usr/libexec/postfix/pipe pipe 28938 postfix mem REG 253,0 99028 210032 /usr/lib/libsasl2.so.2.0.22 pipe 28938 postfix mem REG 253,0 46680 394117 /lib/libnss_files-2.5.so pipe 28938 postfix mem REG 253,0 33680 210024 /usr/lib/libkrb5support.so.0.1 pipe 28938 postfix mem REG 253,0 190712 210027 /usr/lib/libgssapi_krb5.so.2.2 pipe 28938 postfix mem REG 253,0 610836 210026 /usr/lib/libkrb5.so.3.3 pipe 28938 postfix mem REG 253,0 157304 210025 /usr/lib/libk5crypto.so.3.1 pipe 28938 postfix mem REG 253,0 1009712 395616 /lib/libdb-4.3.so pipe 28938 postfix mem REG 253,0 1452412 492061 /usr/lib/mysql/libmysqlclient.so.15.0.0 pipe 28938 postfix mem REG 253,0 53756 207273 /usr/lib/liblber-2.3.so.0.2.31 pipe 28938 postfix mem REG 253,0 1296900 393267 /lib/libcrypto.so.0.9.8e pipe 28938 postfix mem REG 253,0 286748 393429 /lib/libssl.so.0.9.8e pipe 28938 postfix mem REG 253,0 240584 203611 /usr/lib/libldap-2.3.so.0.2.31 pipe 28938 postfix mem REG 253,0 125736 393228 /lib/ld-2.5.so pipe 28938 postfix mem REG 253,0 1606812 394139 /lib/libc-2.5.so pipe 28938 postfix mem REG 253,0 16428 394142 /lib/libdl-2.5.so pipe 28938 postfix mem REG 253,0 242880 394174 /lib/libsepol.so.1 pipe 28938 postfix mem REG 253,0 93508 394176 /lib/libselinux.so.1 pipe 28938 postfix mem REG 253,0 125612 394153 /lib/libpthread-2.5.so pipe 28938 postfix mem REG 253,0 208352 394166 /lib/libm-2.5.so pipe 28938 postfix mem REG 253,0 75028 210017 /usr/lib/libz.so.1.2.3 pipe 28938 postfix mem REG 253,0 45288 394144 /lib/libcrypt-2.5.so pipe 28938 postfix mem REG 253,0 101404 395613 /lib/libnsl-2.5.so pipe 28938 postfix mem REG 253,0 76400 395609 /lib/libresolv-2.5.so pipe 28938 postfix mem REG 253,0 7748 395610 /lib/libcom_err.so.2.1 pipe 28938 postfix mem REG 253,0 7880 395608 /lib/libkeyutils-1.2.so pipe 28938 postfix 0u CHR 1,3 1482 /dev/null pipe 28938 postfix 1u CHR 1,3 1482 /dev/null pipe 28938 postfix 2u CHR 1,3 1482 /dev/null pipe 28938 postfix 3r FIFO 0,6 236941 pipe pipe 28938 postfix 4w FIFO 0,6 236941 pipe pipe 28938 postfix 5u unix 0xc4edeb80 236939 socket pipe 28938 postfix 6u unix 0xc4ede980 236936 private/dovecot pipe 28938 postfix 7u unix 0xc2f27c80 255271 socket pipe 28938 postfix 8u REG 253,0 0 491707 /var/spool/postfix/pid/unix.dovecot pipe 28938 postfix 9u unix 0xc2f27080 255281 socket pipe 28938 postfix 10r 0000 0,11 0 255283 eventpoll pipe 28938 postfix 13r 0000 0,11 0 236827 eventpoll If anyone has an idea what to look at next it would be appreciated. Thanks, -Ted-

3 6

[Dovecot] Expire Plugin Configuration Question
by Roland Roberts 05 Oct '09

05 Oct '09

I am very confused looking at the expires plugin and its configuration. What is confusing me the most is that it appears that I have to configure expiration globally, meaning, for example, that the Trash mailbox expiration interval is the same regardless of the user. What I really am looking for is per-user configurable rules. Those would obviously not be able to be in a file configuration but would have to be in some shared/sharable resource. Is such a thing possible? What I really want is the ability to move my expiration rules out of my email client and into dovecot. That would be very useful for me since I access my mail from more than one host and via more than one client. roland -- PGP Key ID: 66 BC 3B CD Roland B. Roberts, PhD RL Enterprises roland(a)rlenter.com 6818 Madeline Court roland(a)astrofoto.org Brooklyn, NY 11220

3 5

[Dovecot] v1.1.19 released
by Timo Sirainen 04 Oct '09

04 Oct '09

http://dovecot.org/releases/1.1/dovecot-1.1.19.tar.gz http://dovecot.org/releases/1.1/dovecot-1.1.19.tar.gz.sig This is hopefully the last v1.1.x release. - file_set_size() was broken with OSes that didn't support posix_fallocate() (almost everyone except Linux), causing all kinds of index file errors. - ldap: Fixed hang when >128 requests were sent at once. - Fixed a crash in saving messages where message contained a CR character that wasn't followed by LF (and the CR happened to be the last character in an internal buffer). - deliver: Don't send rejects to any messages that have Auto-Submitted header. This avoids emails loops. - Message decoding fixes (mainly for IMAP SEARCH, Sieve).

2 1

[Dovecot] v1.2.5 released
by Timo Sirainen 04 Oct '09

04 Oct '09

http://dovecot.org/releases/1.2/dovecot-1.2.5.tar.gz http://dovecot.org/releases/1.2/dovecot-1.2.5.tar.gz.sig I'll be more or less gone for next two weeks. Tomorrow I'm heading to MacSysAdmin in Sweden to give a Dovecot talk, the next week I'll be in Finland on vacation. After that I'm hoping to get v2.0.alpha1 released in October. * Authentication: DIGEST-MD5 and RPA mechanisms no longer require user's login realm to be listed in auth_realms. It only made configuration more difficult without really providing extra security. * zlib plugin: Don't allow clients to save compressed data directly. This prevents users from exploiting (most of the) potential security holes in zlib/bzlib. + Added pop3_save_uidl setting. + dict quota: When updating quota and user isn't already in dict, recalculate and save the quota. - file_set_size() was broken with OSes that didn't support posix_fallocate() (almost everyone except Linux), causing all kinds of index file errors. - v1.2.4 index file handling could have caused an assert-crash - IMAP: Fixes to QRESYNC extension. - virtual plugin: Crashfix - deliver: Don't send rejects to any messages that have Auto-Submitted header. This avoids emails loops. - Maildir: Performance fixes, especially with maildir_very_dirty_syncs. - Maildir++ quota: Limits weren't read early enough from maildirsize file (when quota limits not enforced by Dovecot) - Message decoding fixes (mainly for IMAP SEARCH, Sieve).

4 3

[Dovecot] Configuring for virtual users in Postfix
by Jerry 03 Oct '09

03 Oct '09

FreeBSD-7.2 with Postfix-2.7x OK, this is my first attempt to configure Dovecot using Postfix and virtual users. In the LDA.Postfix.txt file, there is a reference to making the following setting: dovecot_destination_recipient_limit = 1 virtual_mailbox_domains = your.domain.here virtual_transport = dovecot However, Postfix does not recognize the dovecot_destination_recipient_limit = 1 setting. There is a "virtual_destination_recipient_limit =" setting in Postfix. Is that the setting that I should tweak? -- Jerry gesbbb(a)yahoo.com There is no TRUTH. There is no REALITY. There is no CONSISTENCY. There are no ABSOLUTE STATEMENTS. I'm very probably wrong.

4 4

[Dovecot] Mailbox locking problem with iphone and POP3
by Bill Dunn - VCI Internet Services 03 Oct '09

03 Oct '09

I have a problem I can't seem to fix. I have dovecot configured to do POP3 with plain text authentication using a MySQL database. I am using Dovecot 1.0.7 with fcntl locking. My problem has been when an iPhone/iPod checks email. The iPhone/iPod doesn't disconnect with a TCP FIN packet and it leaves the mailbox in a locked state and prevents the user's desktop from checking email. I have tried changing the file locking method and other config file options without any luck. Oddly, I am using the last version of cucipop on another server with fcntl and lockf file locking and it doesn't have this problem. If someone could clue me in I'd be very grateful. Bill

3 6

[Dovecot] Dovecot LDAP Auth & Usernames with dashes
by Chris Jones 02 Oct '09

02 Oct '09

Hi All, We're seeing an issue with LDAP auth when the username contains a - char. We're using 1.0.15 as packaged for Debian Lenny Oct 2 12:29:02 silver dovecot: auth(default): LDAP: binding failed (dn (none)): Protocol error Oct 2 12:29:03 silver dovecot: imap-login: Aborted login (1 authentication attempts): user=<sci-fi(a)sucs.org>, method=PLAIN, rip=::ffff:127.0.0.1, lip=::ffff:127.0.0.1, secured Setup works perfectly for the other 200 users, none of whom have a - in the username. Any suggestions? -- Chris Jones, SUCS Admin http://sucs.org Dovecot Conf dovecot -n # 1.0.15: /etc/dovecot/dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s listen: [::] ssl_cert_file: /usr/local/sucs-pki/certs/sucs+subCA.crt ssl_key_file: /usr/local/sucs-pki/private/sucs.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_privileged_group: mail mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv auth default: passdb: driver: pam args: dovecot passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: passwd From /etc/dovecot/dovecot-ldap.conf hosts = localhost auth_bind = yes base = ou=People,dc=sucs,dc=org user_filter = (&(objectClass=posixAccount)(uid=%u))

2 1

[Dovecot] IMAP proxying for ALL users to internal mail server
by Vitaliy Vladimirovich 02 Oct '09

02 Oct '09

Hi! How must I adjust Dovecot for proxying all users from the Internet to the internal Exchange Mail Server? This is my config files (most important): dovecot.conf protocol imap { #listen = *:10143 ssl_listen = 194.0.148.10:993 auth default { mechanisms = plain login passdb passwd-file { args = /usr/local/etc/dovecot-%Ls.conf } } dovecot-imap.conf testmail1@example.org::0:0::::proxy host=10.0.10.3 port=143 nopassword With this configurations all works fine, but if I trying change dovecot-imap.conf as below %n@%d::0:0::::proxy host=10.0.10.3 port=143 nopassword I get an error: Oct 2 15:10:58 relay dovecot: auth(default): client in: AUTH 1 PLAIN service=imap secured lip=199.10.149.10 rip=199.10.149.3 lport=993 rport=28316 resp=<hidden> Oct 2 15:10:58 relay dovecot: auth(default): passwd-file(testmail1(a)example.org,199.10.149.3): lookup: user=testmail1(a)example.org file=/usr/local/etc/dovecot-imap.conf Oct 2 15:10:58 relay dovecot: auth(default): passwd-file(testmail1(a)example.org,199.10.149.3): unknown user Oct 2 15:10:59 relay dovecot: auth(default): new auth connection: pid=62532 Oct 2 15:11:00 relay dovecot: auth(default): client out: FAIL 1 user=testmail1(a)example.org Any ideas??

4 10

[Dovecot] Problem with local pine after upgrade to 1.2.5
by Gerhard Wiesinger 02 Oct '09

02 Oct '09

Hello, I upgraded from dovecot 1.1.17 to 1.2.5. Works well so far with e.g. Thunderbird and SSL. One problem left: pine doesn't work any more with rsh: cat .pinerc (filtered): rsh-path= rsh-command=/usr/sbin/dovecot --exec-mail imap Starting pine: 1.) Opening INBOX 2.) [>SECURITY PROBLEM: insecure server advertised AUTH=PLAIN<] 3.) Afterwards I'm asked for a password: HOST: localhost (INSECURE) ENTER LOGIN NAME [user] : 3.) cancel: [IMAP protocol error: Authentication aborted by client.] Config: no changes at all. Any ideas why this is broken? Thnx. Ciao, Gerhard

2 2

[Dovecot] Folder Management Dovecot >1.2
by Carlos Candeias 02 Oct '09

02 Oct '09

Regardless of the mail client no user can modify, move, delete or subscribe an imap folder with Dovecot >1.2.1 (meanwhile 1.2.5). Dovecot apparently have some dotlock problems: (From dovecot.log) Oct 02 14:58:19 IMAP(jcci): Error: fchown(/candeias/home/jcci/.mail/Maildir/subscriptions.lock, -1, 0(root)) failed: Operation not permitted (egid=1003(management), group based on /candeias/home/jcci/.mail/Maildir) Oct 02 14:58:19 IMAP(jcci): Error: file_dotlock_open() failed with subscription file /candeias/home/jcci/.mail/Maildir/subscriptions: Operation not permitted Oct 02 14:58:20 IMAP(jcci): Error: fchown(/candeias/home/jcci/.mail/Maildir/subscriptions.lock, -1, 0(root)) failed: Operation not permitted (egid=1003(management), group based on /candeias/home/jcci/.mail/Maildir) Oct 02 14:58:20 IMAP(jcci): Error: file_dotlock_open() failed with subscription file /candeias/home/jcci/.mail/Maildir/subscriptions: Operation not permitted Oct 02 14:58:20 IMAP(jcci): Error: fchown(/candeias/home/jcci/.mail/Maildir/subscriptions.lock, -1, 0(root)) failed: Operation not permitted (egid=1003(management), group based on /candeias/home/jcci/.mail/Maildir) Oct 02 14:58:20 IMAP(jcci): Error: file_dotlock_open() failed with subscription file /candeias/home/jcci/.mail/Maildir/subscriptions: Operation not permitted Oct 02 14:58:21 IMAP(jcci): Error: fchown(/candeias/home/jcci/.mail/Maildir/subscriptions.lock, -1, 0(root)) failed: Operation not permitted (egid=1003(management), group based on /candeias/home/jcci/.mail/Maildir) Oct 02 14:58:21 IMAP(jcci): Error: file_dotlock_open() failed with subscription file /candeias/home/jcci/.mail/Maildir/subscriptions: Operation not permitted Oct 02 14:58:21 IMAP(jcci): Error: fchown(/candeias/home/jcci/.mail/Maildir/subscriptions.lock, -1, 0(root)) failed: Operation not permitted (egid=1003(management), group based on /candeias/home/jcci/.mail/Maildir) Oct 02 14:58:21 IMAP(jcci): Error: file_dotlock_open() failed with subscription file /candeias/home/jcci/.mail/Maildir/subscriptions: Operation not permitted This was an attemt of changing a subscription. Another weird point: I can create an IMAP folder although it does not show up in the folder list. But the new folder is in the subscription list, just marked as unsubscribed and there is no way to change that. This problem is safely reproducible and I wonder whether I should be really the only person having this trouble. I'm using MAILDIR and simple plain test authentification (internal mail server). The location is mail_location: maildir:~/.mail/Maildir which means a subfolder in each user's home directory. All homes are exported to NFS, but the Dovecot is just on the same server and thus accesses locally. Downgrade to version 1.1.17 solves all problems. Archlinux x86_64, Linux 2.6.30 It would be really great if somebody could understand the cause and suggest a solution!

3 4

[Dovecot] Problem with LSUB and public namespace
by Julien Danjou 02 Oct '09

02 Oct '09

Hi, I'd like to know if the following is normal. I've a setup with 2 namespace (private/public) where each user can use subscriptions. This problem is triggered by claws-mail, which uses LSUB to get subscribed mailboxes: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE AUTH=PLAIN] Dovecot ready. . login user password . namespace * NAMESPACE (("INBOX." ".")) NIL (("public." ".")) . OK Namespace completed. . subscribe public.Admin . OK Subscribe completed. . LSUB "" "%" * LSUB () "." "INBOX" . OK Lsub completed. LSUB does not return "public" as namespace :-( Is this a bug in dovecot, a bug in Claws mail, or a misconfiguration of my dovecot server? I can provide more info if needed. Cheers, -- Julien Danjou // ᐰ <julien(a)danjou.info> http://julien.danjou.info // 9A0D 5FD9 EB42 22F6 8974 C95C A462 B51E C2FE E5CD // There is nothing under this line.

2 3

[Dovecot] Timeout waiting for handshake from auth server
by Frank Bonnet 02 Oct '09

02 Oct '09

Hello I have that kind of messages in dovecot.log anyone has those troubles ? the machine is Debian etch 64 bits dovecot 1.2.5 has been compiled on the machine it run NIS client to a YPLDAPD server thank you Oct 02 12:15:27 auth(default): Error: do_ypcall: clnt_call: RPC: Timed out Oct 02 12:15:33 pop3-login: Error: Timeout waiting for handshake from auth server. my pid=16755, input bytes=0 Oct 02 12:15:46 auth(default): Error: YPBINDPROC_DOMAIN: Domain not bound Oct 02 12:15:46 pop3-login: Error: Timeout waiting for handshake from auth server. my pid=16760, input bytes=0 Oct 02 12:15:51 imap-login: Error: Timeout waiting for handshake from auth server. my pid=16761, input bytes=0 Oct 02 12:15:51 imap-login: Error: Timeout waiting for handshake from auth server. my pid=16762, input bytes=0

2 2

[Dovecot] Disconnected: Too many invalid IMAP commands
by Gabriele 02 Oct '09

02 Oct '09

Greetings, I'm having big issues here, hope you can help me… Ubuntu Server 8.04, postfix 2.5.1, dovecot 1.0.10, postfixadmin (MySQL+ virtual users)… I am trying to move e-mails from an old IMAP account to my new dovecot IMAP server accounts. The old server is EIMS (Eudora Internet Mail Server, so a sort of mbox format)… I move messages by drag 'n' dropping in Mozilla Thunderbird. No problems with messages under 4MB size (there are huge messages, up to 25MB), but as soon as I try to move messages from 4MB and up, the connection hangs, nothing happens, the application becomes barely responsive, I have quit and re-open it to make it behave properly. In the logs, I read (user and IPs are fake, here): Sep 18 07:52:06 in dovecot: imap-login: Login: user=<user@my-domain>, method=PLAIN, rip=123.123.123.123, lip=123.123.123.123 Sep 18 07:52:06 in dovecot: IMAP(user@my-domain): Disconnected: Too many invalid IMAP commands. Could it be a client (Thunderbird) issue? I have tried with Apple Mail 4.1, same problem, same logs. Could it be a quota limit (googling around, I read that sometimes the error may be triggered by dovecot when exceeding the quota limit) Accout usage is actually at 1%… Could drag 'n' drop be the wrong way to have things done? I have also downloaded the huge e-mails from EIMS to Thunderbird Local Folders, the problem arises when I try to upload, so the culprit seems to be the new "system". I really need help at this point… any hints? Thanks in advance for any help you will offer. Gabriele

7 24

[Dovecot] Password and special caracter
by Gilles Albusac 02 Oct '09

02 Oct '09

Problem : I have a problem with special character in the password. Character like ! * é are deleted My configuration : - a smtp server with Postfix 2.6 and Dovcot 1.1.11. - a windows 2003 server with active directory for accounts and boxes I use SMTP / SASL on my postfix 2.6 to authenticate my remote laptop users (allow legitimate users to relay mail). To do that, I use SASL Dovecot fonctionnality and ldap request to verify login/password who are declared on a server in Windows 2003 (Active Directory). It works fine with simple password but not with complex password. I have a problem with special character in the password. Character like ! * é are deleted before comparaison. Any idea ? Regards

5 6