- dovecot - dovecot.org

[Dovecot] i386->amd64: tls-certificate cannot be read anymore
by Andreas Barth 26 Oct '06

26 Oct '06

Hi, after rsyncing a tls-certificate from an i386-host to an amd64-one, I got this error message; Oct 25 21:13:23 alius dovecot: imap-login: Can't load private key file /etc/ssl/private/dovecot.pem: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch This happened with dovecot 1.0.rc7-1 (Debian etch) - the version on the i386 was 1.0.rc2-1bpo1. Any hints for me what to do? Cheers, Andi -- http://home.arcor.de/andreas-barth/

2 1

[Dovecot] mail_extra_groups and home directory permissions
by Joe Cooper 26 Oct '06

26 Oct '06

Hi all, I've got a virtual hosting environment, where each user lives in /home/domain/homes/user, and the mailbox is Maildir within that directory. I've been running into a permissions problem, because it seems Dovecot doesn't get the users group membership (which seems odd, but I'm not confident enough of my comprehension of Dovecot to call say it looks like a bug). In short, when Dovecot hits the /home/domain directory which is owned by domain:domain and set to 750 permissions, it gets a permission denied, despite the user having the needed group membership to traverse these directories. So, in an effort to work around this problem, I came upon the mail_extra_groups option, which seems to allow me to drop dovecot into additional groups. If I add the domain group to this list, dovecot is able to traverse to the correct directory and all works exactly as I want it to with the domain directories being set to 750 permissions. Hooray! My only question, since this is not the documented purpose of this option, is: Is it safe to do this? Am I opening up some other kind of security problem by setting this option to include all domain groups? Thanks for any thoughts anyone might have on this...

2 2

[Dovecot] "Real" users AND Virtual users
by Muhamad A. Martoprawiro 25 Oct '06

25 Oct '06

Dear all, How can I use dovecot for both "real" users and virtual users? I could configure dovecot for real users, by using these lines in /etc/dovecot.conf: default_mail_env = maildir:%h/Maildir auth default { passdb pam { } userdb passwd { } } To accept virtual users, I used these lines: default_mail_env = maildir:/usr/local/virtual/%u/ auth default { passdb sql { args = /etc/dovecot-mysql.conf } userdb sql { args = /etc/dovecot-mysql.conf } } But, again, how to accept both kind of users? I use Postfix as mail server, and use LDAP/PAM for real users that have home-directory on the system. My OS is Mandriva 2007, and I use dovecot that is bundled as an RPM package (dovecot 1.9 rc7) in the OS. The content of file /etc/pam.d/dovecot: #%PAM-1.0 auth required pam_stack.so service=system-auth account required pam_stack.so service=system-auth Thanks. Regards, Muhamad

4 6

[Dovecot] P0P3 problems
by Nick 25 Oct '06

25 Oct '06

Hi, I'm setting up Dovecot on a Linux (Ubuntu) server and IMap works but P0P3 doesn't. When I try to get the eMail, it appears to do everything it should (no errors) but nothing gets downloaded. I'm also a little confused with this: If I select either "Password authentication source" Unix passwd or shadow file (using WEBmin or text edit the config file) Dovecot errors: Unknown setting: line 648: and yet, if I take it out it works fine. How does Dovecot get the passwords if no source is included ??? Please advise, Thanks, Nick. . . 1(973)614-8385 _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ . . . . . . . . Please visit my Web Hosting/Design Business at: http://MyHost.org -=[ The prices are great - as is the service ]=- . . . . . . . . _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/

9 10

[Dovecot] performance problems with rc10 and solaris 10
by Dominik Saar 25 Oct '06

25 Oct '06

Hi, i have 2 dovecot imap server running on solaris 10 The primary server with dovecot 1.0.alpha4 is running with best performance on Sun Sparc E4k5 with 8x 450MHz The secondary with rc10 has ugly performanceproblems on Sun E450 wth 4x 450MHz. Every new imap process takes permanent 25% cpu usage List the folder and fetch message are both slowy! Both servers are configred with ldap backend preventive i deleted for rc10 the complet index and controlfiles, because the spooldir is a sync from the masterserver with dovecot alpha4. I thought its a little bit slowy because of my 30.000 mails. the indexfiles are created now, but the still ugly slow .... For debugging i compiled rc10 again --with-debug=yes and start dovecot with solaris truss truss tells nothing to explain this behavor logentrys from dovecot has this warnings: --> dovecot: Oct 18 14:51:47 Warning: IMAP(saar): Growing pool 'storage' with: 1024 dovecot: Oct 18 14:51:47 Info: IMAP(saar): dirsize quota limit = 750000kB dovecot: Oct 18 14:51:47 Warning: IMAP(saar): Growing data stack with: 32768 dovecot: Oct 18 14:51:47 Warning: IMAP(saar): Growing data stack with: 65536 dovecot: Oct 18 14:51:48 Warning: IMAP(saar): Growing data stack with: 131072 dovecot: Oct 18 14:51:48 Warning: IMAP(saar): Growing pool 'uidlist record_pool' with: 32768 <-- also i compiled rc10 --with-notify=none, no result to ensure it isn´t the solaris system, i compiled alpha4. Result: good performance Any ideas? Cheers Dominik

3 10

[Dovecot] Unsolved : mbox-sync-rewrite.c : assertion failed
by Jakob Curdes 25 Oct '06

25 Oct '06

Some days ago I wrote about an inaccessible mailbox after an upgrade from 0.99.14 to 1.0rc10. Today I get this problem with another mailbox but it seems to be it is not only related to the upgrade : - user comes back from holiday, does not see his inbox : dovecot: Oct 24 18:51:09 Error: IMAP(abcd): file mbox-sync-rewrite.c: line 405 (mbox_sync_read_and_move): assertion failed: (need_space == (uoff_t)-mails[idx].space) (he accessed it last with the old dc version) Solution : moving account to other server, copy everything over to the old account and it worked. This is what I did and afterwards the mailbox was readable. Now the user goes back to his PC (I made my work from another machine) and opens his mailclient (with the still existing account) and BINGO dovecot crashes again on the mailbox as berfore. Once ist has crashed on it, it than crashes always, even if you make a new account or remove the index. So I suppose it has rather to do with cached information in the client than with the upgrade itself. But nothing the client sends should be able to crash the server ! Hoping for an idea, Jakob Curdes

3 3

[Dovecot] Status of Shared Folders?
by Charles Marcus 24 Oct '06

24 Oct '06

Hi Timo, I'm just curious... is the Wiki up to date regarding the status of Shared Folder support for Dovecot? Specifically, does Dovecot still have a problem with Read-only (for certain users) maildirs using Shared folders defined via namespaces? I'm about ready to start testing a rollout, but wanted to find out what to expect with regard to Shared Folders - we use them extensively right now (Courier-imap), so it is important for us. Having per-user read/unread flags will be a very nice bonus, but I don't see anything about support for those... -- Best regards, Charles Marcus I.T. Director Media Brokers International 678.514.6200 x224 678.514.6299 fax

3 8

[Dovecot] LDAP Dovecot Configuration Problem
by kleiton＠pcs.com.br 24 Oct '06

24 Oct '06

Good Morning I have a problem with my dovecot configuration, somepeople can help-me sending me a example of a dovecot with ldap configuration ? dovecot.conf slapd.conf I'm have - dovecot-1.0-0.beta8.2.fc5 - kernel-smp-2.6.17-1.2157_FC5 - openldap-2.3.19-4 - Fedora Core 5 Today we connect using PAM but we like connect by LDAP because we have some problems. Thanks !

2 1

[Dovecot] converting from courier questions
by Aaron P. Martinez 24 Oct '06

24 Oct '06

I currently run postfix and courier on my mail servers with squirrelmail. The problem with courier is it seems to run so slow. The webmail takes forever to load if you have many mails. I have this set up in virtual domains with all longin and path info in an mysql database. I just joined the list and DID google before asking, hope this isn't a common question. With courier it looks for a "homedir" and then a "maildir".. I tried doing a query as such: user_query = SELECT Homedir and Maildir AS home, VUID AS uid , VGID AS gid FROM users WHERE Email_address = '%u' to no avail, is my sql wrong or can you not cat the homedir and maildir fields together to create the complete path to home? . i got around the homedir problem by setting mail_chroot = /var/spool/postfix/virtuals (is this the general way, only way?) and then in my dovecot-mysql.conf i have user_query = SELECT Maildir AS home, VUID AS uid , VGID AS gid FROM users WHERE Email_address = '%u' This almost worked but as i was watching the logs it was looking for /var/spool/postfix/virtuals/<somedomainname>/Maildir//Maildir In courier the "Maildir" is not implied, it has to be spicified in the database. I have a LOT of users and would love to avoid chaning every line in my database. or add another filed just for dovecot. I would also like the ability to switch back and forth for testing with courier.. Is there anyway that this can be done? Thanks in advance, Aaron

2 1

[Dovecot] LDAP authentication blank password
by Matheus Antonio Oliveira 24 Oct '06

24 Oct '06

People, I have a situation: when use a passwd LDAP module against "microsoft active directory" and one user send a blank password the authentication module returns: "ERR [IN-USE] Internal login failure. Refer to server log for more information."; after this the authentication module never authenticate again "ERR Temporary authentication failure." Thanks in advanced. Trying 0.0.0.0... Connected to 0 (0.0.0.0). Escape character is '^]'. +OK Dovecot ready. user xyz@domain +OK pass <BLANK> -ERR [IN-USE] Internal login failure. Refer to server log for more information. Connection closed by foreign host. Trying 0.0.0.0... Connected to 0 (0.0.0.0). Escape character is '^]'. +OK Dovecot ready. user xyz@domain +OK pass correct-password -ERR Temporary authentication failure. -- Matheus Antonio Oliveira

3 2

[Dovecot] Creating MySQL db
by Gerard Seibert 24 Oct '06

24 Oct '06

I was just wondering if anyone was using or aware of a program to create MySQL Data Bases for use with Dovecot. For Postfix, there is the 'Postfixadmin' application. I have not seen anything similar for Dovecot and was wondering if one existed. My system consists of all virtual users. -- Gerard Never attribute to malice what can adequately be explained by incompetence.

2 1

[Dovecot] problems with authentication
by Paul Aguirre 24 Oct '06

24 Oct '06

Hi, I have some problems I'm using fetchmail to get my mail from the server to a local server, but the problem is that my user name of the mail is "user@virtualdomain" and I can't make a system user with "@" on centos. So, I want to know how can I tell to dovecot the user "user@virtualdomain" is associate to a sistem user "user.virtualdoman". Or if any one knows another solution. Thanks Paul __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

[Dovecot] Dovecot still failing with RC10...
by Brent Spencer 24 Oct '06

24 Oct '06

Are you getting a "chdir (null)" type of message just prior to the Error: Maximum number of mail processes exceeded"? Thanks, Brent Spencer XsiteDesigns _________________________________________________ This email has been scanned for viruses by ClamAV

1 0

[Dovecot] Proxy using passd file
by Clayton Epp 23 Oct '06

23 Oct '06

I'm trying to create a proxy using passwd files. Can I use the existing passwd files created by the system (ie passwd and shadow) or do I have to create new passwd files for the email proxy users? How would the passwd and shadow files for a proxy using passwd files look? I've tried the example on the wiki but I'm not getting anywhere, pop and imap requests are not getting sent to the other server.

3 4

Re: [Dovecot] any idea why the mail downloading is slow?
by LeVA 23 Oct '06

23 Oct '06

2006. October 23. 18:46, Ejay Hire: > What client are you using? I've found Outlook to be a huge > bottleneck compared to Tbird. I'm using KMail 1.9.5. Indeed, with Tbird, the download is faster with KMail. Any idea what could be the problem? I don't think this is a "bug" in KMail; maybe a configuration issue? Daniel > > -ejay > > -----Original Message----- > From: dovecot-bounces(a)dovecot.org > [mailto:dovecot-bounces@dovecot.org] On Behalf Of LeVA > Sent: Saturday, October 21, 2006 4:37 AM > To: dovecot(a)dovecot.org > Subject: [Dovecot] any idea why the mail downloading is slow? > > Hi! > > I'm using rc10, but had this problem with previous releases too. Not > sure if this is a dovecot problem, but I can not think of anything > else. The mail downloading with pop3 is ~very slow, approx. 20 Kbyte > / sec. no matter how many mails I've got in my mailbox, or how big > are the mails. My ISP provides me a dedicated 100mbit line, and > everything else works as fast as expected eg. http, ftp, scp... > The OS is OpenBSD 3.9-stable and the system is not under heavy load > at all. I've tried to turn off TLS but there was no change. > > Is the pop3 protocol this slow by design or there is something wrong > with my setup? > > Thanks! > > Daniel > > -- > LeVA -- LeVA

1 0

Re: [Dovecot] 1.0.rc10 status report
by "Αποστόλης Παπαγιαννάκη ς (Apostolis Papagiannakis)" 23 Oct '06

23 Oct '06

>> Axel Thimm wrote: >> >>> On Mon, Oct 23, 2006 at 11:04:18AM +0300, "????????? >>> ????????????? (Apostolis Papagiannakis)" wrote: >>> >>> >>>> I've had similar "User unknowns" with nscd in the past. I was using >>>> dovecot ->getpwent -> nscd -> nss_ldap -> LDAP. >>>> >>>> >>> Are you using ldapi? >>> >>> >> Oops, I think I sent my previous post with unreadable HTML formating. I >> hope this one is OK. >> >> In /etc/ldap.conf (nss_ldap conf file) I use two ldap servers as >> "ldaps" URIs. >> >> # /etc/ldap.conf >> uri ldaps://ldap1.auth.gr/ ldaps://ldap2.auth.gr/ >> >> apap >> >> > > You need to make sure that the user nscd is running as has proper > permissions to the required resources (r/w on ldapi sockets, read on > ldaps' ca certs and the like). Turn on the debug level in ldap.conf > (nss_ldap's, not openssl's) and sudo to the nscd user/group to test > the access. > > Also nscd doesn't use rootbinddn, it uses binddn. > I think file permissions have always been ok because nscd and nss_ldap usually work ok. The problem appears only when the ldap connection breaks (e.g. remote ldap server restart). We don't use rootbinddn at all. Anyway I just checked the latest version of nss_ldap and now I see interesting new relevant options are available (e.g. nss_connect_policy persist/oneshot). I will give it a try and respond back in a few days. Definately nss_ldap's bad behaviour is not really a dovecot problem. Dovecot has been rock solid here serving 30000 users (4000 different active users every day) on a single server. apap

1 0

Re: [Dovecot] 1.0.rc10 status report
by "Αποστόλης Παπαγιαννάκη ς (Apostolis Papagiannakis)" 23 Oct '06

23 Oct '06

dovecot-request(a)dovecot.org wrote: > Date: Fri, 20 Oct 2006 13:26:03 +0100 (BST) > From: David Lee <t.d.lee(a)durham.ac.uk> > Subject: [Dovecot] 1.0.rc10 status report > > > 1. "User unknown": We use NIS for our passwd information. On the earlier > rc8 test we had had several occurences of "User unknown" (from "deliver") > giving "dsn=5..." for perfectly valid users. So for this rc10 test I > applied a local patch so these were reduced to "EX_TEMPFAIL" (dsn=4...). > (This was triggered, as epected, a few times and subsequent delivery > attemtps succeeded.) I strongly suspect that this is some sort of issue > with FC5, probably "nscd" and nothing to do with dovecot. Hints would be > nice, but from the dovecot perspective you may probably ignore this item. > > I've had similar "User unknowns" with nscd in the past. I was using dovecot ->getpwent -> nscd -> nss_ldap -> LDAP. I found out that whenever the ldap server got restarted, nscd did not restart properly and immediately its permanent ldap connection, and was giving 'user unknown' replies at least for a few minutes. Restarting nscd would fix the problem immediately. Running without nscd would also fix the problem. There was no problem with pam_ldap authentication. As a result, the system got ignorant of its uncached users for a few moments. My workaround was a crontab that kept /etc/passwd up-to-date as well as an entry in the /etc/resolv.conf 'passwd: ldap files' (cat /etc/passwd ; getent passwd ) |sort -u >/etc/passwd.tmp && mv /etc/passwd.tmp /etc/passwd > So should I have the indexes on the fileserver (one instance), or should they > be on each cluster machine's private storage (possibly several instances; > one per cluster machine)? The suggestion is that if you need to have mailboxes over NFS, use local disk for indexes. If you read the complete list archive you will find too many people that have had troubles with indexes over NFS. Local indexes have a performance penalty, only when you have access from different imap servers (especially concurrent) . apap

3 4

[Dovecot] mysql-5.0.26 stored procedure authorization, take 2
by Chaos Engine 22 Oct '06

22 Oct '06

Last time I came up with a problem with concernin MySQL authorization with stored procedures. Timo helped me get going by with modified client_flags (MULTISTATEMENT keyword). Now all it happened again but from another way. My stored proce for MySQL is causing fillowing error: "Oct 21 12:39:22 haos dovecot: auth-worker(default): sql(user,192.168.X.X): Password query fai led: Commands out of sync; you can't run this command now" Looks like it is partly mysql-5.0.26 thing because of this: http://dev.mysql.com/doc/refman/5.0/en/commands-out-of-sync.html On the other hand with my previous mysql installation (mysql-5.0.24-r1) this error is gone (I checked by downgrading). My dovecot-sql.conf: driver = mysql connect = host=/var/run/mysqld/mysqld.sock dbname=mailbase user=mailuser password=******** client_flags=65536 #655536 is equivalent of CLIENT_MULTI_STATEMENTS flag #yes, I still insist on using stored proc for authorization. This gives me few usefull features I like. password_query = call Authenticat('%u', '%n', '%d') With this config on mysq-5.0.26 I get "...Commands out of sync; you can't run this command now..." but not on mysql-5.0.24-r1. Personally I think mysql guys changed something; I can't tell what and why (changelog review?) Maybe you guys know what it was? -- Chaos greets U

2 1

[Dovecot] Using saslauthd with dovecot
by Gerard Seibert 21 Oct '06

21 Oct '06

FreeBSD 6.1 STABLE Postfix-2.4-20061006 Dovecot-1.0.rc7 I am using 'saslauthd -a sasldb -c' for authentication with Postfix. Since Dovecot and Postfix are using the same users and passwords, I was wondering if it would be possible to use this mechanism with Dovecot also. -- Gerard "There is nothing wrong with making love with the light on. Just make sure the car door is closed." George Burns

2 3

[Dovecot] Virtual Users
by Gerard Seibert 20 Oct '06

20 Oct '06

Dovecot 1.0.rc7 Postfix 2.4-20061006 FreeBSD 6.1 STABLE I have dovecot up and running with postfix. I now want to switch over to a system using purely virtual users. I have gotten postfix configured to deliver the mail to virtual mailboxes correctly. The problem I am having is with dovecot. After configuring the dovecot.conf file, dovecot will POP mail from the virtual mailboxes. However, that is only for users who are in the /etc/password file. I will have a large number of users who are truly virtual and therefore not be in that file. I know I am dumb, but I do not know how to set up either a MySQL data base, or just a plain flat file with the required information. I tried Googling, but I cannot find the exact syntax to use. Perhaps someone could point me in the right direction or give me a brief example of how to go about this. Thanks! -- Gerard "It is not the OS's job to stop you from shooting your foot. If you so choose to do so, then it is OS's job to deliver Mr. Bullet to Mr Foot in the most efficient way it knows."

2 1

[Dovecot] md5 password storage
by Andrey Bibiano Jardim 20 Oct '06

20 Oct '06

Hi List. I've got a dovecot running with mysql. All my users data are there. But I intend to use MD5 instead of clear passwords at MySQL. Someone can help-me? []s; Andrey Here's my dovecot-mysql.conf: # Dovecot queries db_host = localhost db_unix_socket = /var/lib/mysql/mysql.sock db_port = 3306 db = mail db_user = my_conn_user db_passwd = my_conn_passwd # # Pehapes i need to change this, but I tryied changing it do md5 with no success. # default_pass_scheme = PLAIN # # This I changed for own reasons, but works. # password_query = SELECT clear FROM postfix_users WHERE user=substring_index('%u', "@", 1) user_query = SELECT concat('/var/spool/mail/', maildir) AS mail, uid, gid FROM postfix_users WHERE user=substring_index('%u', "@", 1)

2 1

[Dovecot] 1.0.rc10 in inetd mode
by Phil Oleson 20 Oct '06

20 Oct '06

Hey.. I'm finding that I can force dovecot (setup in inetd mode) into a wedged state by spamming it with carrage returns. As I've not had enough time to familiarize myself with the code.. I thought I'd ping the list before 1.0 is christened. -Phil.

2 3

[Dovecot] Problem with indexes
by crs 20 Oct '06

20 Oct '06

Hello. Dovecot is really good software but I have one big problem with indexes. I have server with a lot of mailboxes - filesystem has quota enabled and I can't resign it from different reasons. When mailbox achieve quota size and user wants to pick mails via pop3, error "-ERR Mailbox is in inconsistent state, please relogin." is given. I know it's because dovecot can't write indexes. Is it possible to force dovecot to write indexes with definite owner/group f.e dovecot/dovecot and not owner/group of mailbox? I can set quotas for user dovecot to unlimited and problem would disappear. Thanks in advance for any answers. Best regards - Chris. ---------------------------------------------------------------------- PS. >>> http://link.interia.pl/f19a6

3 2

[Dovecot] POP State
by LDB 20 Oct '06

20 Oct '06

I upgraded Dovecot and it was smooth except some of my users using POP3 and leaving their mail on the server, are getting all their mail again. Is there a way to prevent this from happening in the future? /var/run/dovecot was kept during the upgrade ... Thanks, LDB

2 2

[Dovecot] Subscription file
by Steven F Siirila 19 Oct '06

19 Oct '06

Background: We are a UW-IMAP shop, using mbox format. (!) We are in the process of upgrading to Dovecot, hopefully to 1.0 proper. :) One of the modifications we have been using in test versions of Dovecot involve the move of the user subscription file from: IMAP-root/.subscriptions to: $HOME/.mailboxlist Rather than having to make changes to Dovecot source code each time a new release comes out, it would seem to make sense to have a way to configure this from dovecot.conf. Something like: # Default (%i denotes IMAP root): #imap_subscription_file = %i/.subscriptions # UW-imap-style (%h denotes home directory): #imap_subscription_file = %h/.mailboxlist While it makes sense to me to have the subscription file where it is in Dovecot by default, it would be a substantial undertaking to determine where to move the .mailboxlist to in our environment for each user, since there is no easy way to determine what a user's IMAP root directory is set to in their client. Thoughts? -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593

3 3