- dovecot - dovecot.org

[Dovecot] out-of-tree plugins and installed header files
by Timo Sirainen 22 Feb '07

22 Feb '07

I added --with-headers configure option now to CVS (not enabled by default). It makes Dovecot install all the useful .h files so that it's possible to compile out-of-tree plugins without having compiled Dovecot sources. I'd hope that binary package builders add a new dovecot-dev package which contains the headers (and $libdir/dovecot- config). I also updated dovecot-sieve so that it compiles against only the header files, except then sievec and sieved binaries aren't compiled (because they require liblib.a).

1 0

[Dovecot] Mixing POP and IMAP
by Dominic Lepiane 22 Feb '07

22 Feb '07

Hi, I run a small site, about a dozen users, and many of the users POP their mail. I have just installed Squirrelmail which uses IMAP. Has anyone had any significant problems with mixing POP and IMAP for mail retreival? Your feedback is greatly apprecianted, -- Dominic Lepiane The IRMACS Centre Simon Fraser University

5 4

[Dovecot] Crash: index-mail.c: line 790
by Bill Boebel 22 Feb '07

22 Feb '07

Here is the first crash I've seen with the current CVS... Feb 19 00:45:52 mail35a dovecot: IMAP(mnash(a)stest1.com): Corrupted transaction log file /var/index//data1/mail/st/stest1.com/mn/mnash//.Trash/dovecot.index.log: Append with UID 5736, but next_uid = 5744 Feb 19 00:45:55 mail35a dovecot: IMAP(mnash(a)stest1.com): Corrupted transaction log file /var/index//data1/mail/st/stest1.com/mn/mnash//.Trash/dovecot.index.log: Append with UID 5737, but next_uid = 5744 Feb 19 00:46:34 mail35a dovecot: IMAP(mnash(a)stest1.com): file index-mail.c: line 790: unreached Feb 19 00:46:34 mail35a dovecot: IMAP(mnash(a)stest1.com): Raw backtrace: imap [0x8091552] -> imap [0x80910cf] -> imap [0x806c891] -> imap(mail_set_seq+0x10) [0x8084ce0] -> imap(index_storage_search_next+0x3b) [0x806f28b] -> imap(mailbox_search_next+0x14) [0x8085ae4] -> imap(imap_expunge+0x8a) [0x805b3e6] -> imap(cmd_expunge+0x61) [0x8056e69] -> imap [0x805a51e] -> imap [0x805a498] -> imap(_client_input+0x5a) [0x805a5e6] -> imap(io_loop_handler_run+0x10c) [0x80965fc] -> imap(io_loop_run+0x25) [0x8095a75] -> imap(main+0x6b) [0x80614f7] -> /lib/tls/libc.so.6(__libc_start_main+0xda) [0xd9478a] -> imap(setuid+0xa1) [0x8055825] Feb 19 00:46:34 mail35a dovecot: child 23564 (imap) killed with signal 6 Feb 19 00:46:38 mail35a dovecot: IMAP(mnash(a)stest1.com): fscking index file /var/index//data1/mail/st/stest1.com/mn/mnash//.Trash/dovecot.index Feb 19 00:46:38 mail35a dovecot: IMAP(mnash(a)stest1.com): Fixed index file /var/index//data1/mail/st/stest1.com/mn/mnash//.Trash/dovecot.index: first_recent_uid_lowwater 5744 -> 5738

2 1

[Dovecot] 1.0.rc23 released
by Timo Sirainen 22 Feb '07

22 Feb '07

http://dovecot.org/releases/dovecot-1.0.rc23.tar.gz http://dovecot.org/releases/dovecot-1.0.rc23.tar.gz.sig Documentation is probably the only important thing left before v1.0. * deliver doesn't ever exit with Dovecot's internal exit codes anymore. All its internal exit codes are changed to EX_TEMPFAIL. * mbox: X-Delivery-ID header is now dropped when saving mails. * mbox: If pop3_uidl_format=%m, we generate a unique X-Delivery-ID header when saving mails to make sure the UIDL is unique. + PAM: blocking=yes in args uses an alternative way to do PAM checks. Try it if you're having problems with PAM. + userdb passwd: blocking=yes in args makes the userdb lookups be done in auth worker processes. Set it if you're doing remote NSS lookups (eg. nss_ldap problems are fixed by this). + If PAM child process hasn't responded in two minutes, send KILL signal to it (only with blocking=no) - IMAP: APPEND ate all CPU while waiting for more data from the client (broken in rc22) - mbox: Broken X-UID headers assert-crashed sometimes - mbox: When saving a message to an empty mbox file it got an UID which immediately got incremented. - mbox: Fixed some wrong "uid-last unexpectedly lost" errors. - auth cache: In some situations we crashed if passdb had extra_fields. - auth cache: Special extra_fields weren't saved to auth cache. For example allow_nets restrictions were ignored for cached entries. - A lot of initial login processes could cause auth socket errors in log file at startup, if dovecot-auth started slowly. Now the login processes are started only after dovecot-auth has finished initializing itself. - imap/pop3 proxy: Don't crash if the remote server disconnects before we're logged in. - deliver: Don't bother trying to save the mail twice into the default mailbox (eg. if it's over quota). - mmap_disable=yes + non-Linux was really slow with large dovecot.index.cache files - MySQL couldn't be used as a masterdb - Trash plugin was more or less broken - imap/pop3 couldn't load plugins if they chrooted - imap/pop3-login process could crash in some conditions - checkpassword-reply crashed if USER/HOME wasn't set

4 8

[Dovecot] Solaris/SSLonly/Lots of Users
by Steven F Siirila 22 Feb '07

22 Feb '07

Anyone running Dovecot on Solaris, requiring only SSL connections, and servicing thousands of simultaneous users? Our past attempts to do so have failed due to dovecot-auth using up all 256 of its file descriptors. I say 256 since we are limited to that by the 32-bit libraries. We are looking at either compiling Dovecot in 64-bit and letting dovecot-auth file descriptors accumulate (not ideal), or providing Timo with access to one of our test servers so he can debug the problem. However, I would like to hear of anyone in the same boat first. Thanks! -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593

4 5

[Dovecot] Dovecot Quota + LDAP
by Venilton Junior 22 Feb '07

22 Feb '07

Hie Folks, I'm having a little problem with quota + ldap. I want to use per user quota settings. So I configured quota on my /etc/dovecot.conf like this site http://wiki.dovecot.org/Quota examples. Here follows my /etc/dovecot.conf: protocols = imap imaps pop3 pop3s ssl_disable = no ssl_cert_file = /usr/share/ssl/certs/cert.pem ssl_key_file = /usr/share/ssl/private/pkey.pem mail_extra_groups = mail valid_chroot_dirs = /var/lib/imap/vmail/domains default_mail_env = maildir:/var/lib/imap/vmail/domains/%d/%n/mail::INDEX=/var/run/dovecot/i ndexes/%n lock_method = dotlock mmap_disable = yes auth_debug = yes auth_debug_passwords = yes first_valid_uid = 202 last_valid_uid = 202 first_valid_gid = 202 last_valid_gid = 202 maildir_copy_with_hardlinks = no login_greeting = Sercomtel Internet ready. disable_plaintext_auth = no protocol imap { mail_plugins = quota imap_quota } protocol lda { postmaster_address = postmaster(a)domain.com mail_plugins = quota } protocol pop3 { pop3_uidl_format = %08Xu%08Xv mail_plugins = quota } auth default_with_listener { mechanisms = plain login userdb ldap { args = /etc/dovecot-ldap.conf } passdb ldap { args = /etc/dovecot-ldap.conf } socket listen { master { path = /var/run/dovecot/auth-master mode = 0660 user = vmail group = mail } } } plugin { # quota = maildir:/var/lib/imap/vmail/%d/%u/mail:storage=102400 # convert_mail = maildir:/var/lib/imap/vmail/%d/%u/mail #quota = maildir:storage=102400 } And here is my user attributes in my dovecot-ldap.conf: user_attrs = mail,homeDirectory,,,,quotaStorage=quota=dirsize:storage user_filter = (&(objectClass=VirtualMailAccount)(mail=%u)(accountActive=TRUE)(delete=F ALSE)) As you can see above in my dovecot.conf, I made a comment at plugin section to ensure that there's no quota usage for all system. I'd like to have per user quota stored in my ldap base. Here is a value off my quota attribute: quota = 122880 Making tests, the user already have 138 Mb. Does anyone have any idea how to set up quota with ldap and get it working? Tnx for any reply. Best regards, Venilton C. Junior

1 0

[Dovecot] login and plain-md5 in sql query
by Adrian Stoica 22 Feb '07

22 Feb '07

i use last dovecot rc23 with users/passwords in mysql 1) How can i define a sql query for each auth mechanism ? 2)Why i can't set "default_pass_scheme = login" in my dovecot-sql.conf? : dovecot: Feb 21 09:46:22 Info: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=127.0.0.1 rip=127.0.0.1 resp=AGFkaUBhZHJpYW4uZXUAcGFyb2xh dovecot: Feb 21 09:46:22 Info: auth-worker(default): sql(adi(a)adrian.eu,127.0.0.1): query: SELECT IF('adrian.eu'='',clear,crypt) AS password , user FROM mailbox WHERE user = 'adi' AND domain = 'adrian.eu' AND status = '1' LIMIT 1 dovecot: Feb 21 09:46:22 Info: auth-worker(default): auth(adi(a)adrian.eu,127.0.0.1): username changed adi(a)adrian.eu -> adi dovecot: Feb 21 09:46:22 Error: auth-worker(default): sql(adi,127.0.0.1): Unknown password scheme login dovecot: Feb 21 09:46:23 Info: auth(default): client out: FAIL 1 user=adi(a)adrian.eu dovecot: Feb 21 09:46:23 Info: imap-login: Disconnected: user=<adi(a)adrian.eu>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 3)Whi i can't use plain-md5 in dovecot.conf : auth default { mechanisms = login plain <- plain-md5 passdb sql { args=/etc/dovecot-sql.conf } userdb sql { args=/etc/dovecot-sql.conf } } dovecot: Feb 21 09:43:48 Error: auth(default): Unknown authentication mechanism 'plain-md5'

2 1

[Dovecot] pop3_lock_session
by Rene Luria 22 Feb '07

22 Feb '07

Hi guys, How can I modify the timeout value for the pop3_lock_session ? I'd like it to be much bigger.

2 4

[Dovecot] crash in mail_cache_transaction_reset on rc22
by Dan Price 22 Feb '07

22 Feb '07

I've not been able to roll out rc23 yet (tonight, I hope) but I just saw a crash which I'm not sure I've seen reported before, following a server outage (that is to say, the server came back up and one of the users had a dovecot core). #0 0x0005d720 in mail_cache_transaction_reset (ctx=0xcf928) at mail-cache-transaction.c:71 No locals. #1 0x0005e8bc in mail_cache_add (ctx=0xcf928, seq=233, field=4294967295, data=0xb7600, data_size=1063) at mail-cache-transaction.c:752 file_field = 19 data_size32 = 1063 fixed_size = 4294967295 full_size = 831272 __PRETTY_FUNCTION__ = "mail_cache_add" #2 0x00057160 in index_mail_parse_header (part=0xe9, hdr=0x14, mail=0xd33e8) at index-mail-headers.c:125 data = (struct index_mail_data *) 0xd3450 cache_field_name = 0xe9 <Address 0xe9 out of bounds> field_idx = 0 count = 21 match = (uint8_t *) 0xcf928 "" __PRETTY_FUNCTION__ = "index_mail_parse_header" #3 0x00079848 in _read (stream=0xe2aa0) at istream-header-filter.c:173 ret = 0 pos = 854336 #4 0x00085818 in i_stream_read (stream=0xe2ac8) at istream.c:58 _stream = (struct _istream *) 0xcaf28 #5 0x00085ca4 in i_stream_read_data (stream=0xe2ac8, data=0xffbff5ec, size=0xffbff5e8, threshold=1) at istream.c:250 ret = 0 read_more = false #6 0x0007e8c4 in message_get_body_size (input=0xe2ac8, body=0xffbff660, has_nuls=0x0) at message-size.c:105 msg = ( const unsigned char *) 0xe2cf7 "\ndary_(ID_/CFD74Co3EWCZqYkdHlE8A)\"\r\nt>\r\nSS(a)cox.net>,\r\nil.com>,\r\n\r\n" i = 0 ---Type <return> to continue, or q <return> to quit--- size = 1 missing_cr_count = 0 __PRETTY_FUNCTION__ = "message_get_body_size" #7 0x0002e5e4 in fetch_body_header_fields (ctx=0xc6a08, mail=0xffbff660, context=0xc6c98) at imap-fetch-body.c:448 size = {physical_size = 1357, virtual_size = 0, lines = 26} old_offset = Unhandled dwarf expression opcode 0x93 -- Daniel Price - Solaris Kernel Engineering - dp(a)eng.sun.com - blogs.sun.com/dp

2 1

[Dovecot] Understanding fcntl() error messages
by Dean Manners 22 Feb '07

22 Feb '07

Hey guys, After many trials and tribulations I have now got some fairly stable NFS clients serving dovecot-lda and pop3/imap. Over a 9 hour postal/rabid stress test only saw 5 errors for the 4 servers. Wondering if anyone can shed a bit more light on what they mean exactly. I have tried to find "Resource temporarily unavailable" and "No locks available" in the src to get some understanding - however it appears these messages are from a lower level. With pop3: ------------------ Feb 22 03:36:32 mailget01 dovecot: POP3(test992(a)mailtest06.com): fcntl() failed with file /mnt/mailstore/mailtest06.com/8/test992/dovecot.index.log: Resource temporarily unavailable Feb 22 03:36:32 mailget01 dovecot: POP3(test992(a)mailtest06.com): mail_index_wait_lock_fd() failed with file /mnt/mailstore/mailtest06.com/8/test992/dovecot.index.log: Resource temporarily unavailable Feb 22 04:16:45 mailget01 dovecot: POP3(test445(a)mailtest03.com): fcntl() failed with file /mnt/mailstore/mailtest03.com/4/test445/dovecot.index.log: Resource temporarily unavailable Feb 22 04:16:45 mailget01 dovecot: POP3(test445(a)mailtest03.com): mail_index_wait_lock_fd() failed with file /mnt/mailstore/mailtest03.com/4/test445/dovecot.index.log: Resource temporarily unavailable ------------------ ------------------ Feb 22 13:07:27 mailget01 dovecot: POP3(test999(a)mailtest06.com): fcntl() failed with file /mnt/mailstore/mailtest06.com/8/test999/dovecot.index: Resource temporarily unavailable Feb 22 13:07:27 mailget01 dovecot: POP3(test999(a)mailtest06.com): fcntl() failed with file /mnt/mailstore/mailtest06.com/8/test999/dovecot.index: Resource temporarily unavailable Feb 22 13:07:27 mailget01 dovecot: POP3(test999(a)mailtest06.com): Couldn't open INBOX: Internal error occurred. Refer to server log for more information. [2007-02-22 13:07:27] Feb 22 13:07:27 mailget01 dovecot: POP3(test999(a)mailtest06.com): No INBOX for user top=0/0, retr=0/0, del=0/0, size=0 ------------------ Does this mean that pop3 was waiting for a lock, but timed out ? What are the likely affects of this on a client POPing - session times out and they need to reconnect? The "No INBOX" error is little more odd, the same user had successful login 90 minutes earlier. With deliver: ------------------ Feb 22 01:42:03 mailfilter01 deliver(test680(a)mailtest04.com): fcntl() failed with file /mnt/mailstore/mailtest04.com/10/test680/dovecot.index: No locks available Feb 22 01:42:06 mailfilter01 deliver(test265(a)mailtest03.com): fcntl() failed with file /mnt/mailstore/mailtest03.com/1/test265/dovecot.index: No locks available Feb 22 03:25:42 mailfilter02 deliver(test454(a)mailtest03.com): fcntl() failed with file /mnt/mailstore/mailtest03.com/2/test454/dovecot.index: No locks available Feb 22 03:25:45 mailfilter02 deliver(test397(a)mailtest03.com): fcntl() failed with file /mnt/mailstore/mailtest03.com/7/test397/dovecot.index: No locks available ------------------ I assume this means deliver tried to obtain a lock on the index file (probably many times) but failed. Are the likely affects that the message still gets saved to the maildir but the index doesn't get updated? Regards __________________________________________ Dean Manners

2 2

[Dovecot] critical performance problem
by Rene Luria 22 Feb '07

22 Feb '07

I have been using dovecot 1.0alpha4 + deliver/sieve in production for a few accounts (400'000). After testing 1.0.rc22 I decided to upgrade one of the imap servers... And... what a mess ! The server just gets unusable. I don't know why but with new release, it just overloads the system with I/O. It turns that with 1.0.rc22 I get 15Mo/s read on disk average, without any reason. What did really change ? How come a system (with a few thousand accounts) works perfectly and then with 1.0.rc22 gets unusable with a load approaching 300 ? If you have any ideas...

5 18

[Dovecot] 1.0.rc23 tomorrow
by Timo Sirainen 22 Feb '07

22 Feb '07

http://dovecot.org/nightly/dovecot-latest.tar.gz Would be nice to get some testing before the actual release. I've now finally gone through all the "TODO" mails in this list and my INBOX and fixed pretty much every problem I know of. There are still some mbox bugs, but I can't really get them fixed unless someone figures out how to reproduce them (http://wiki.dovecot.org/MboxProblems) I think documentation is the last thing that should be done before v1.0. I'm happy enough with the code as it is now, unless some new bugs again appear. The notable changes since rc22: * deliver doesn't ever exit with Dovecot's internal exit codes anymore. All its internal exit codes are changed to EX_TEMPFAIL. + PAM: blocking=yes in args uses an alternative way to do PAM checks. Try it if you're having problems with PAM. + userdb passwd: blocking=yes in args makes the userdb lookups be done in auth worker processes. Set it if you're doing remote NSS lookups (eg. nss_ldap problems are fixed by this). + If PAM child process hasn't responded in two minutes, send KILL signal to it (only with blocking=no) - IMAP: APPEND ate all CPU while waiting for more data from the client (broken in rc22) - mbox: When saving a message to an empty mbox file it got one UID which immediately was incremented. - mbox: Fixed some wrong "uid-last unexpectedly lost" errors. - auth cache: In some situations we crashed if passdb had extra_fields. - auth cache: Special extra_fields weren't saved to auth cache. For example allow_nets restrictions were ignored for cached entries. - A lot of initial login processes could cause auth socket errors in log file at startup, if dovecot-auth started slowly. Now the login processes are started only after dovecot-auth has finished initializing itself. - imap/pop3 proxy: Don't crash if the remote server disconnects before we're logged in. - deliver: Don't bother trying to save the mail twice into the default mailbox (eg. if it's over quota). - mmap_disable=yes + non-Linux was really slow with large dovecot.index.cache files - MySQL couldn't be used as a masterdb - Trash plugin was more or less broken - imap/pop3 couldn't load plugins if they chrooted - imap/pop3-login process could crash in some conditions - checkpassword-reply crashed if USER/HOME wasn't set

6 19

[Dovecot] --log-error and the mysterious "not starting" problem
by Marshal Newrock 22 Feb '07

22 Feb '07

I've finally upgraded to 1.0.rc21. If I run "dovecot --log-error", then dovecot fails to start. The following appears in the log: Feb 5 10:54:00 taurus1 dovecot: Dovecot v1.0.rc21 starting up Feb 5 10:54:00 taurus1 dovecot: This is Dovecot's error log Without --log-error, it will start up fine from command-line. Dovecot still fails to start, as near as I can tell, in the specific condition that it is being started from a non-interactive shell and there is a mail_plugin set in "protocol imap". mail plugins set for pop or lda do not cause this problem. The failure to start appears in only two instances that I can see: on boot, or by a monitoring script if dovecot crashes, or, since I haven't seen dovecot die, when I manually stop it to see if the monitoring program will restart it. With the above problem, if the init script has --log-error when I try to make the monitoring program restart dovecot, then nothing still gets logged. -- Marshal Newrock, Ideal Solution LLC http://www.idealso.com

2 8

[Dovecot] False "new mail" warning from Thunderbird, using RC23
by Stephen Warren 21 Feb '07

21 Feb '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I am continually getting false "New Mail" warning from Thunderbird. I'm running Thunderbird 1.5.0.9 on Windows, and it's talking to two different Dovecot 1.0.RC23 servers (one home server, one work server). This was happening in older Dovecot versions too, so it's not new in RC23. Very often, Thunderbird will pop up the "new mail" notification window, and put a "new mail" icon in the Windows icon bar. However, when I view the main Thunderbird window, there will be no folders with new mail. Simply changing the currently selected folder in Thunderbird will clear the tray icon. Sometimes the notification window will say something small like "7 new messages", but right now, it's showing huge numbers like "587 new messages", which could be the total message count in one of my folders... Sometimes restarting Thunderbird will stop this happening for a short while. Is this a Thunderbird bug? Am I the only one seeing this? Does it have to do with having two separate IMAP servers configured? Perhaps it's because Thunderbird is configured to cache 5 connections to the server (although I think that's the default?) Should I delete all my accounts in Thunderbird, delete the (Thunderbird) cache files etc. on disk, and re-create it all? I do notice that whenever Thunderbird starts, it displays a whole load of folders that don't exist (e.g. got renamed/deleted) and/or multiple copies (e.g. Sent, Sent-1, Sent-2), which disappear very quickly. Is this related? -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFF2+eJhk3bo0lNTrURAh9uAKCWYrcNByF+wE2e1FPvL6x8N48/uACgtwxR 07fYmnaG9P/JCBOkKscCZIA= =XWXG -----END PGP SIGNATURE-----

2 1

[Dovecot] auth_user setting?
by Joseba Torre 21 Feb '07

21 Feb '07

Hi all, I've installed rc23 in a new testing machine, and i've had some permission problems related to dovecot-master.conf. As I have my master passwords in that file, I don't want it to be world readable. dovecot -n shows that auth_user is nobody, so setting the permissions to nobody.whatever 640 solves the problem. Anyway, I've tried to change the auth_user setting with no effect. Is it configurable? Aaaaaaaaaagur. -- Joseba Torre. CIDIR Bizkaia.

1 1

[Dovecot] Wrong configure.in entry in CVS branch_1_0
by Luca Corti 21 Feb '07

21 Feb '07

This line in configure.in src/plugins/mail-log/Makefile refers to a non existing direcory in the branch_1_0 tree, which breaks build. ciao Luca

3 2

[Dovecot] Possible Bug in quota-fs.c
by Martin Konopka 20 Feb '07

20 Feb '07

Hi, I'm using filesystem quotas with dovecot 1.0rc22 on my Linux 2.4.27 box. The quota limit gets correctly reported in kilobytes to the client but the amount of used space is reported in megabytes. In quota-fs.c I noticed that only the currently used space is divided by 1024: Line 241: *value_r = dqblk.dqb_curblocks / 1024; *limit_r = dqblk.dqb_bsoftlimit; After removing /1024 everything works fine. regards, Martin

3 4

[Dovecot] Convert plugin
by Jay Chandler 20 Feb '07

20 Feb '07

convert_mail = mbox:%h/mail Convert plugin. If set, specifies the source storage path which is converted to destination storage (mail_location) when the user logs in. The existing mail directory is renamed to <dir>-converted. I'm not entirely clear on what this does. If someone can clarify for me, I'll update the Wiki. I'm hoping it'll allow me to convert from mbox to Maildir-- otherwise I'm looking at a weekend of downtime when that project comes due... -- Jay Chandler Network Administrator, Chapman University 714.628.7249 / chandler(a)chapman.edu Today's Excuse: high pressure system failure

2 1

[Dovecot] Reading mail for Virtual and Real LDAP Users
by Aaron Luchko 20 Feb '07

20 Feb '07

I'm trying to setup a system with ldap+postfix+dovecot. Everyone who gets an email is stored in LDAP, some of these users also have a local unix account, regardless I want all users to be dealt with as virtual users. All the mail is stored by postfix in /var/spool/mail in Maildir format with permissions 600 vmail:vmail. Everything works fine when dovecot tries to read the mail of a completely virtual user, the problem is when dovecot tries to read mail for a user who has an account on the machine, dovecot finds the user's local account, then it tries to read the mail as that user. Even if first_valid_{u,g}id is low enough to allow login the user still doesn't have sufficient permissions to read the mail. I can't figure out why this is happening and was hoping someone could help me out. thanks, Aaron /etc/dovecot-ldap.conf: hosts = server.example.com base = dc=example,dc=com dn = cn=Directory Manager dnpass = password uris = ldap://127.0.0.1 user_attrs = mail user_filter = uid=%u user_global_uid = 5001 user_global_gid = 5001 pass_filter = uid=%u /etc/dovecot.conf: mail_location = maildir:/var/spool/mail/%u/ protocols = imap pop3 mail_log_prefix = "%Us(%u):%i:%h " first_valid_uid = 5001 first_valid_gid = 5001 protocol imap { } protocol pop3 { } protocol lda { postmaster_address = postmaster(a)example.com } auth_verbose = yes auth_debug = yes auth default { mechanisms = plain passdb pam { } userdb passwd { } userdb ldap { args = /etc/dovecot-ldap.conf } passdb ldap { args = /etc/dovecot-ldap.conf } user = root } dict { } plugin { }

2 2

[Dovecot] NTLM oddities
by Cassidy B. Larson 20 Feb '07

20 Feb '07

Started implementing the MasterUser changes to my config files so I can finally offer SPA for pop3/imap. Things are working fine with the MasterUser (horray!), however one of my guys started using SPA with Outlook Express and started getting another users mailbox. Turns out to be related to NTLM. His Outlook express is configured for the username of 'johnsmith'. However, you'll see the NTLM took the username from his XP machine login, it appears, which is just "John". However, what is really weird, is the "failed" on the "client out" line, but then the proxy went ahead and proxied to the storage server. Here's some output from debuggage: dovecot: Feb 19 16:15:56 Info: auth(mail.infowest.com): client in: AUTH 1 NTLM service=POP3 lip=204.17.177.60 rip=209.33.215.142 resp= dovecot: Feb 19 16:15:56 Info: auth(mail.infowest.com): client out: CONT 1 dovecot: Feb 19 16:15:56 Info: auth-worker(mail.infowest.com): sql(John, 209.33.215.142): query: SELECT a.clearpasswd AS password, v.storeIP AS host, CONCAT(IF('John' LIKE '%(a)%.%',CONCAT(LCASE('John'),''),CONCAT(LCASE('John'),'@',p.host)),'*masteruser') AS destuser, 'Y' AS nologin, 'Y' AS nodelay, 'Y' AS proxy, 'masterpass' AS pass FROM iwmailsystem.virtmailbox AS v INNER JOIN iwmailsystem.popserversAS p ON ( p.storeIP = '204.17.177.60') INNER JOIN authenticate.users AS a ON (a.userID= IF('John' LIKE '%(a)%.%',CONCAT(LCASE('John'),''),CONCAT(LCASE('John'),'@', p.host))) WHERE v.userID = IF('John' LIKE '%(a)%.%',CONCAT(LCASE('John'),''),CONCAT(LCASE('John'),'@',p.host)) AND v.client_active=1; dovecot: Feb 19 16:15:56 Info: auth(mail.infowest.com): password(John, 209.33.215.142): Credentials: 8447128CC04AD05D1CD15F0C2F17F136 dovecot: Feb 19 16:15:57 Info: auth(mail.infowest.com): client out: FAIL 1 user=John host=204.17.177.76 destuser= john(a)host.com*masteruser nologin proxy pass=masterpass dovecot: Feb 19 16:15:57 Info: pop3-login: proxy(John): started proxying to 204.17.177.76:110: user=<John>, method=NTLM, rip=209.33.215.142, lip= 204.17.177.60 Questions: 1) So is it possible to use OE for SPA authentication without it sending the "XP username", but the actual account username OE is configured for ? 2) Why, when it "FAIL"ed did it still proxy? This seems bad :) Thanks, Cassidy

3 3

[Dovecot] rc22 segv when over quota
by Steffen Kaiser 20 Feb '07

20 Feb '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I just pulled and built version 1.0.rc22 root@ux-2s11-9:/mnt/mailcache/dvtest/MailDir# dovecot -n # /usr/local/etc/dovecot.conf log_path: /var/tmp/dovecot.log info_log_path: /var/tmp/dovecot.info ssl_disable: yes disable_plaintext_auth: no verbose_ssl: yes login_dir: /usr/local/var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login verbose_proctitle: yes mail_location: maildir:/mnt/mailcache/%u/MailDir:CONTROL=/var/cache/dovecot/%i/control:INDEX=/var/cache/dovecot/%i/index mail_debug: yes mail_plugins: quota imap_quota auth default: mechanisms: plain login cache_size: 10 verbose: yes debug: yes debug_passwords: yes passdb: driver: pam args: cache_key=%u dovecot userdb: driver: passwd On Linux Debian Etch on Debian kernel v2.6.18; tested with XFS and Extended3. repquota /mnt/mailcache *** Report for user quotas on device /dev/mapper/mailstaff-mailcache Block grace time: 7days; Inode grace time: 7days Block limits File limits User used soft hard grace used soft hard grace - ---------------------------------------------------------------------- dvtest -- 560 600 1024 17 0 0 Then I copy messages in a directory via Thunderbird, the log shows: dovecot: Feb 20 12:12:27 Error: IMAP(dvtest): o_stream_send_istream(/mnt/mailcache/dvtest/MailDir/.test/tmp/1171969947.P22138Q3.ux-2s11-9) failed: Resource temporarily unavailable dovecot: Feb 20 12:12:27 Error: child 22138 (imap) killed with signal 11 - -or- dovecot: Feb 20 12:09:42 Error: IMAP(dvtest): o_stream_send_istream(/mnt/mailcache/dvtest/MailDir/.test/tmp/1171969782.P22134Q6.ux-2 s11-9) failed: Disk quota exceeded dovecot: Feb 20 12:09:42 Error: child 22134 (imap) killed with signal 11 and repquota /mnt/mailcache dvtest +- 616 600 1024 6days 20 0 0 The Thunderbird continues to copy other messages believing everthing is OK. There is also this message on the screen (started via dovecot -F): dm-1: write failed, user block limit reached. Bye, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iQEVAwUBRdr0Vy9SORjhbDpvAQIKfwgA0vONUFwD5nZ1iOb0z+bRf2Kxz9/9r6QE yqZ/iL6FylJMDQwNi9hY3EbzIbu+pEs3SJrz3VVKuWO7bVyhVTFpxQaSS8vBokXo 6cnLuG5V+n3jtyqy26lM1VQWDCifEY/++YAs/KmJ5NQHm0mk5bUEc6fhDeL4D6MJ UcKUBrQ8S2B6vJMBQfcabgnC8KR9kh+xvvUtvlnsfpoaInAKx8x4r1S+9mMjbAEv lIjHt+yavW6Hlq+HmVCirTddesy1rQDFiDSrrV9F8Sp43GpxHyjun9iK6CGrQkJf AO4o2DsBIbBrhvyUrzUks1dR8ZHasyBQDuMVG02/s1bM3UIkJVX3RA== =/MmG -----END PGP SIGNATURE-----

2 2

[Dovecot] Apple Mail/Tiger Bug came up on the pf mailing list. . .
by Sean Kamath 20 Feb '07

20 Feb '07

Hi all, Just FYI, this post showed up on the pf mailing list a couple of days ago: Cc: pf(a)benzedrine.cx From: Axel Rau <Axel.Rau(a)Chaos1.DE> Subject: Re: mismatch on route through packet/byte counts Date: Sun, 18 Feb 2007 14:37:56 +0100 To: Daniel Hartmeier <daniel(a)benzedrine.cx> X-Mailer: Apple Mail (2.752.2) Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by insomnia.benzedrine.cx id l1IDc2fg029064 Sender: owner-pf(a)benzedrine.cx Thank you, Daniel, for taking the time to analyze my traces and to explain the problem so perfect, that even non-net-developers, like I, can understand it. (-;) > > This looks like a bug in the client's TCP/IP stack, and how to fix it > depends on the client's OS. IMO, the RST is invalid, and pf is > right in > blocking it. The OS is Darwin 8.8 / Mac OS X 10.4.8, a 4.4BSD descendant and the relevant source may be in netinet/tcp_output.c, found here http://www.opensource.apple.com/darwinsource/10.4.8.ppc/xnu-792.12.6 Good news is that your diagnosis could bring us forward to resolve a long running painful bug filed against Mail.app, the Apple email client. If you agree, I would like to add your diagnosis to my open bug report and cross-post the mail on the Darwin Developers list, before filing a new bug against Darwin. Axel --------------------------------------------------------------------- Axel Rau, â˜€Frankfurt , Germany +49 69 9514 18 0

1 0

[Dovecot] relocating indexes.
by Rob Shepherd 20 Feb '07

20 Feb '07

Dear Dovecot users, I'd like to relocate indexes from NFS to local storage. I plan to replace... default_mail_env = maildir:~/.maildir with mail_location = maildir:~/.maildir:INDEX=/usr/local/var/dovecot/index/%u However, to minimise disruption, by avoiding dovecot rebuilding indexes for many user's large and numerous folders, I'd like to copy the existing indexes to the new location. Here is a list of _my_ indexes (in and under ~/.maildir) ./.Drafts/dovecot-uidlist ./.Drafts/dovecot.index ./.Drafts/dovecot.index.cache ./.Drafts/dovecot.index.log ./.OpenLDAP/dovecot-keywords ./.OpenLDAP/dovecot-uidlist ./.OpenLDAP/dovecot.index ./.OpenLDAP/dovecot.index.cache ./.OpenLDAP/dovecot.index.log ./.OpenLDAP/dovecot.index.log.2 ./.Sent/dovecot-keywords ./.Sent/dovecot-uidlist ./.Sent/dovecot.index ./.Sent/dovecot.index.cache ./.Sent/dovecot.index.log ./.Trash/dovecot-keywords ./.Trash/dovecot-uidlist ./.Trash/dovecot.index ./.Trash/dovecot.index.cache ./.Trash/dovecot.index.log ./.mailscanner/dovecot-keywords ./.mailscanner/dovecot-uidlist ./.mailscanner/dovecot.index ./.mailscanner/dovecot.index.cache ./.mailscanner/dovecot.index.log ./.mailscanner/dovecot.index.log.2 ./.nagios/dovecot-keywords ./.nagios/dovecot-uidlist ./.nagios/dovecot.index ./.nagios/dovecot.index.cache ./.nagios/dovecot.index.log ./.samba/dovecot-keywords ./.samba/dovecot-uidlist ./.samba/dovecot.index ./.samba/dovecot.index.cache ./.samba/dovecot.index.log ./.samba/dovecot.index.log.2 ./.sw-announce/dovecot.index ./.sw-announce/dovecot.index.cache ./.sw-announce/dovecot.index.log ./dovecot-keywords ./dovecot-uidlist ./dovecot.index ./dovecot.index.cache ./dovecot.index.log ./dovecot.index.log.2 Would I be correct in copying these to /usr/local/var/dovecot/index/rob/ (_my_ new index loc) whilst preserving the structure of the folders etc. Thanks Rob -- Rob

4 3

[Dovecot] startup script under FreeBSD 6.2 / dovecot-1.0rc22
by Alexis Susset 20 Feb '07

20 Feb '07

Hi all, I recently installed Dovecot rc22 from the FreeBSD ports and I have some problem with the dovecot startup: - If I start dovecot manually, it works fine, it starts and I get messages in /var/log/maillog - If I reboot the machine, that's where the problem appears, dovecot doesn't seem to start and I get nothing, no errors in /var/log/maillog Any idea if this is a known problem and how to fix it ? Thanks in advance, Regards, -- Alexis

4 5

[Dovecot] Run fetchmail after login?
by Brett B. 20 Feb '07

20 Feb '07

Hello all, I was wondering if it is possible to run fetchmail after a user logs into dovecot? So far I have tried to make a small script that contains the command for fetchmail. Then I told the dovecot mail_executable to look at that script. However this ends up leaving the server hanging and does not seem to work. Thanks

2 1