- dovecot - dovecot.org

[Dovecot] Dovecot still failing with RC10...
by Brent Spencer 24 Oct '06

24 Oct '06

Are you getting a "chdir (null)" type of message just prior to the Error: Maximum number of mail processes exceeded"? Thanks, Brent Spencer XsiteDesigns _________________________________________________ This email has been scanned for viruses by ClamAV

1 0

[Dovecot] Proxy using passd file
by Clayton Epp 23 Oct '06

23 Oct '06

I'm trying to create a proxy using passwd files. Can I use the existing passwd files created by the system (ie passwd and shadow) or do I have to create new passwd files for the email proxy users? How would the passwd and shadow files for a proxy using passwd files look? I've tried the example on the wiki but I'm not getting anywhere, pop and imap requests are not getting sent to the other server.

3 4

Re: [Dovecot] any idea why the mail downloading is slow?
by LeVA 23 Oct '06

23 Oct '06

2006. October 23. 18:46, Ejay Hire: > What client are you using? I've found Outlook to be a huge > bottleneck compared to Tbird. I'm using KMail 1.9.5. Indeed, with Tbird, the download is faster with KMail. Any idea what could be the problem? I don't think this is a "bug" in KMail; maybe a configuration issue? Daniel > > -ejay > > -----Original Message----- > From: dovecot-bounces(a)dovecot.org > [mailto:dovecot-bounces@dovecot.org] On Behalf Of LeVA > Sent: Saturday, October 21, 2006 4:37 AM > To: dovecot(a)dovecot.org > Subject: [Dovecot] any idea why the mail downloading is slow? > > Hi! > > I'm using rc10, but had this problem with previous releases too. Not > sure if this is a dovecot problem, but I can not think of anything > else. The mail downloading with pop3 is ~very slow, approx. 20 Kbyte > / sec. no matter how many mails I've got in my mailbox, or how big > are the mails. My ISP provides me a dedicated 100mbit line, and > everything else works as fast as expected eg. http, ftp, scp... > The OS is OpenBSD 3.9-stable and the system is not under heavy load > at all. I've tried to turn off TLS but there was no change. > > Is the pop3 protocol this slow by design or there is something wrong > with my setup? > > Thanks! > > Daniel > > -- > LeVA -- LeVA

1 0

Re: [Dovecot] 1.0.rc10 status report
by "Αποστόλης Παπαγιαννάκη ς (Apostolis Papagiannakis)" 23 Oct '06

23 Oct '06

>> Axel Thimm wrote: >> >>> On Mon, Oct 23, 2006 at 11:04:18AM +0300, "????????? >>> ????????????? (Apostolis Papagiannakis)" wrote: >>> >>> >>>> I've had similar "User unknowns" with nscd in the past. I was using >>>> dovecot ->getpwent -> nscd -> nss_ldap -> LDAP. >>>> >>>> >>> Are you using ldapi? >>> >>> >> Oops, I think I sent my previous post with unreadable HTML formating. I >> hope this one is OK. >> >> In /etc/ldap.conf (nss_ldap conf file) I use two ldap servers as >> "ldaps" URIs. >> >> # /etc/ldap.conf >> uri ldaps://ldap1.auth.gr/ ldaps://ldap2.auth.gr/ >> >> apap >> >> > > You need to make sure that the user nscd is running as has proper > permissions to the required resources (r/w on ldapi sockets, read on > ldaps' ca certs and the like). Turn on the debug level in ldap.conf > (nss_ldap's, not openssl's) and sudo to the nscd user/group to test > the access. > > Also nscd doesn't use rootbinddn, it uses binddn. > I think file permissions have always been ok because nscd and nss_ldap usually work ok. The problem appears only when the ldap connection breaks (e.g. remote ldap server restart). We don't use rootbinddn at all. Anyway I just checked the latest version of nss_ldap and now I see interesting new relevant options are available (e.g. nss_connect_policy persist/oneshot). I will give it a try and respond back in a few days. Definately nss_ldap's bad behaviour is not really a dovecot problem. Dovecot has been rock solid here serving 30000 users (4000 different active users every day) on a single server. apap

1 0

Re: [Dovecot] 1.0.rc10 status report
by "Αποστόλης Παπαγιαννάκη ς (Apostolis Papagiannakis)" 23 Oct '06

23 Oct '06

dovecot-request(a)dovecot.org wrote: > Date: Fri, 20 Oct 2006 13:26:03 +0100 (BST) > From: David Lee <t.d.lee(a)durham.ac.uk> > Subject: [Dovecot] 1.0.rc10 status report > > > 1. "User unknown": We use NIS for our passwd information. On the earlier > rc8 test we had had several occurences of "User unknown" (from "deliver") > giving "dsn=5..." for perfectly valid users. So for this rc10 test I > applied a local patch so these were reduced to "EX_TEMPFAIL" (dsn=4...). > (This was triggered, as epected, a few times and subsequent delivery > attemtps succeeded.) I strongly suspect that this is some sort of issue > with FC5, probably "nscd" and nothing to do with dovecot. Hints would be > nice, but from the dovecot perspective you may probably ignore this item. > > I've had similar "User unknowns" with nscd in the past. I was using dovecot ->getpwent -> nscd -> nss_ldap -> LDAP. I found out that whenever the ldap server got restarted, nscd did not restart properly and immediately its permanent ldap connection, and was giving 'user unknown' replies at least for a few minutes. Restarting nscd would fix the problem immediately. Running without nscd would also fix the problem. There was no problem with pam_ldap authentication. As a result, the system got ignorant of its uncached users for a few moments. My workaround was a crontab that kept /etc/passwd up-to-date as well as an entry in the /etc/resolv.conf 'passwd: ldap files' (cat /etc/passwd ; getent passwd ) |sort -u >/etc/passwd.tmp && mv /etc/passwd.tmp /etc/passwd > So should I have the indexes on the fileserver (one instance), or should they > be on each cluster machine's private storage (possibly several instances; > one per cluster machine)? The suggestion is that if you need to have mailboxes over NFS, use local disk for indexes. If you read the complete list archive you will find too many people that have had troubles with indexes over NFS. Local indexes have a performance penalty, only when you have access from different imap servers (especially concurrent) . apap

3 4

[Dovecot] mysql-5.0.26 stored procedure authorization, take 2
by Chaos Engine 22 Oct '06

22 Oct '06

Last time I came up with a problem with concernin MySQL authorization with stored procedures. Timo helped me get going by with modified client_flags (MULTISTATEMENT keyword). Now all it happened again but from another way. My stored proce for MySQL is causing fillowing error: "Oct 21 12:39:22 haos dovecot: auth-worker(default): sql(user,192.168.X.X): Password query fai led: Commands out of sync; you can't run this command now" Looks like it is partly mysql-5.0.26 thing because of this: http://dev.mysql.com/doc/refman/5.0/en/commands-out-of-sync.html On the other hand with my previous mysql installation (mysql-5.0.24-r1) this error is gone (I checked by downgrading). My dovecot-sql.conf: driver = mysql connect = host=/var/run/mysqld/mysqld.sock dbname=mailbase user=mailuser password=******** client_flags=65536 #655536 is equivalent of CLIENT_MULTI_STATEMENTS flag #yes, I still insist on using stored proc for authorization. This gives me few usefull features I like. password_query = call Authenticat('%u', '%n', '%d') With this config on mysq-5.0.26 I get "...Commands out of sync; you can't run this command now..." but not on mysql-5.0.24-r1. Personally I think mysql guys changed something; I can't tell what and why (changelog review?) Maybe you guys know what it was? -- Chaos greets U

2 1

[Dovecot] Using saslauthd with dovecot
by Gerard Seibert 21 Oct '06

21 Oct '06

FreeBSD 6.1 STABLE Postfix-2.4-20061006 Dovecot-1.0.rc7 I am using 'saslauthd -a sasldb -c' for authentication with Postfix. Since Dovecot and Postfix are using the same users and passwords, I was wondering if it would be possible to use this mechanism with Dovecot also. -- Gerard "There is nothing wrong with making love with the light on. Just make sure the car door is closed." George Burns

2 3

[Dovecot] Virtual Users
by Gerard Seibert 20 Oct '06

20 Oct '06

Dovecot 1.0.rc7 Postfix 2.4-20061006 FreeBSD 6.1 STABLE I have dovecot up and running with postfix. I now want to switch over to a system using purely virtual users. I have gotten postfix configured to deliver the mail to virtual mailboxes correctly. The problem I am having is with dovecot. After configuring the dovecot.conf file, dovecot will POP mail from the virtual mailboxes. However, that is only for users who are in the /etc/password file. I will have a large number of users who are truly virtual and therefore not be in that file. I know I am dumb, but I do not know how to set up either a MySQL data base, or just a plain flat file with the required information. I tried Googling, but I cannot find the exact syntax to use. Perhaps someone could point me in the right direction or give me a brief example of how to go about this. Thanks! -- Gerard "It is not the OS's job to stop you from shooting your foot. If you so choose to do so, then it is OS's job to deliver Mr. Bullet to Mr Foot in the most efficient way it knows."

2 1

[Dovecot] md5 password storage
by Andrey Bibiano Jardim 20 Oct '06

20 Oct '06

Hi List. I've got a dovecot running with mysql. All my users data are there. But I intend to use MD5 instead of clear passwords at MySQL. Someone can help-me? []s; Andrey Here's my dovecot-mysql.conf: # Dovecot queries db_host = localhost db_unix_socket = /var/lib/mysql/mysql.sock db_port = 3306 db = mail db_user = my_conn_user db_passwd = my_conn_passwd # # Pehapes i need to change this, but I tryied changing it do md5 with no success. # default_pass_scheme = PLAIN # # This I changed for own reasons, but works. # password_query = SELECT clear FROM postfix_users WHERE user=substring_index('%u', "@", 1) user_query = SELECT concat('/var/spool/mail/', maildir) AS mail, uid, gid FROM postfix_users WHERE user=substring_index('%u', "@", 1)

2 1

[Dovecot] 1.0.rc10 in inetd mode
by Phil Oleson 20 Oct '06

20 Oct '06

Hey.. I'm finding that I can force dovecot (setup in inetd mode) into a wedged state by spamming it with carrage returns. As I've not had enough time to familiarize myself with the code.. I thought I'd ping the list before 1.0 is christened. -Phil.

2 3

[Dovecot] Problem with indexes
by crs 20 Oct '06

20 Oct '06

Hello. Dovecot is really good software but I have one big problem with indexes. I have server with a lot of mailboxes - filesystem has quota enabled and I can't resign it from different reasons. When mailbox achieve quota size and user wants to pick mails via pop3, error "-ERR Mailbox is in inconsistent state, please relogin." is given. I know it's because dovecot can't write indexes. Is it possible to force dovecot to write indexes with definite owner/group f.e dovecot/dovecot and not owner/group of mailbox? I can set quotas for user dovecot to unlimited and problem would disappear. Thanks in advance for any answers. Best regards - Chris. ---------------------------------------------------------------------- PS. >>> http://link.interia.pl/f19a6

3 2

[Dovecot] POP State
by LDB 20 Oct '06

20 Oct '06

I upgraded Dovecot and it was smooth except some of my users using POP3 and leaving their mail on the server, are getting all their mail again. Is there a way to prevent this from happening in the future? /var/run/dovecot was kept during the upgrade ... Thanks, LDB

2 2

[Dovecot] Subscription file
by Steven F Siirila 19 Oct '06

19 Oct '06

Background: We are a UW-IMAP shop, using mbox format. (!) We are in the process of upgrading to Dovecot, hopefully to 1.0 proper. :) One of the modifications we have been using in test versions of Dovecot involve the move of the user subscription file from: IMAP-root/.subscriptions to: $HOME/.mailboxlist Rather than having to make changes to Dovecot source code each time a new release comes out, it would seem to make sense to have a way to configure this from dovecot.conf. Something like: # Default (%i denotes IMAP root): #imap_subscription_file = %i/.subscriptions # UW-imap-style (%h denotes home directory): #imap_subscription_file = %h/.mailboxlist While it makes sense to me to have the subscription file where it is in Dovecot by default, it would be a substantial undertaking to determine where to move the .mailboxlist to in our environment for each user, since there is no easy way to determine what a user's IMAP root directory is set to in their client. Thoughts? -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593

3 3

Re: [Dovecot] open-folder limit
by Bill Boebel 19 Oct '06

19 Oct '06

On Thu, October 19, 2006 11:57 am, "T. Horsnell" <tsh(a)mrc-lmb.cam.ac.uk> said: > Is there a way to limit the number of folders a user can > have open simultaneously? I am fairly certain that there is no way to do this. Bill

1 0

[Dovecot] open-folder limit
by T. Horsnell 19 Oct '06

19 Oct '06

Is there a way to limit the number of folders a user can have open simultaneously? I seem to remember a config option which would only permit one imap process per user, and would share this between his folders, but I cant find anything relevant in the docs now. Am I talking nonsense here? I'm new to Dovecot. Cheers, Terry.

1 0

[Dovecot] open-folder limit
by T. Horsnell 19 Oct '06

19 Oct '06

Is there a way to limit the number of folders a user can have open simultaneously? I seem to remember a config option which would only permit one imap process per user, and would share this between his folders, but I cant find anything relevant in the docs now. Am I talking nonsense here? I'm new to Dovecot. Cheers, Terry.

1 0

[Dovecot] Urgent - Inconsistent Inboxes
by Jakob Curdes 19 Oct '06

19 Oct '06

Hi, An urgent problem that I have : runninng dc 0.99.14 w mbox on local ext3 , nothing special, no nfs, nothing. For this machine we have a backup server rsyncing everything over. Now the main server went down and we started DC on the backup machine some day ago. Everything went well, besides one problem : people complained about missing mails that they had seen beforehand. When looking in the inbox, they were all there. After recreating the imap account (outlook express) or deleting the cache file (thunderbird .msf files) everything was well. But you can't really recreate all accounts after switching to the backup machine every time.... today we went back to the main server and in advance I deleted all .imap.index files hoping that they might have been the eventual cause of the problem, but no, same thing happens again. It now seems to me that this is a pure client issue, but nevertheless two questions : a) who knows a way to tell the client (OE or TB in this case) to disregard all local information and get everything fresh from the server ? b) Can this behavior be influenced from the server side? I know I'm behind with 0.99.14 but up to now there was no problem and "never change a running system". If upgrading could help, I would do it immediately. Any hints welcome, especially fast ones as tomorrow morning I have to get the clients running. Yours, Jakob Curdes

2 5

[Dovecot] Assertion failure with Dovecot 1.0rc10
by David Schweikert 19 Oct '06

19 Oct '06

Hi, I am seeing the following (with Dovecot 1.0 rc10): Oct 18 07:35:58 dovecot: IMAP(user): UIDs broken with partial sync in mbox file /var/mail/user Oct 18 07:35:58 dovecot: IMAP(user): mbox sync: UID inserted in the middle of mailbox /var/mail/user (15314 > 9604, seq=5, idx_msgs=224) Oct 18 07:35:59 dovecot: IMAP(user): file mbox-sync-rewrite.c: line 405 (mbox_sync_read_and_move): assertion failed: (need_space == (uoff_t)-mails[idx].space) Oct 18 07:37:42 dovecot: IMAP(user): mbox sync: UID inserted in the middle of mailbox /var/mail/user (15314 > 9604, seq=5, idx_msgs=224) Any idea of what this could be? The user is reporting that he is seeing multiple times the same mails and that the new flag is not being unset after he reads a mail. Cheers David -- David Schweikert | phone: +41 44 632 7019 System manager ISG.EE | walk: ETH Zentrum, ETL F24.1 ETH Zurich, Switzerland | web: http://people.ee.ethz.ch/dws

1 1

[Dovecot] LDAP Username Change
by Todd Johnson 19 Oct '06

19 Oct '06

I have a virtual setup using LDAP where the a user has an email address at 2 domain names. The want the mail kept separate but want to use the same password. I use the mail attribute and insert both email addresses. This works perfectly with deliver but opens the wrong Inbox when I IMAP. Is there a way to disable this in the conf file? host dovecot: auth(default): auth(jeff@idom.net,::ffff:127.0.0.1): username changed jeff(a)idom.net -> jeff(a)jdom.net

1 1

[Dovecot] Logging authentication failures?
by dri 19 Oct '06

19 Oct '06

I use a script that watches log files looking for failed ssh login attempts and adds firewall rules when there are enough login failures within a certain amount of time. I would like to apply this to Dovecot to automatically firewall attackers trying to brute-force an IMAP account. Is there a way to make Dovecot log authentication failures (I'm running 1.0.rc10)? In other words, can I configure Dovecot to put something in the log the instant "NO Authentication failed" is sent to the IMAP user? With "auth_verbose = yes" I can see individual authentication mechanisms fail, but I have multiple passdb sections so a failure in one mechanism doesn't mean a complete login failure. Thus, configuring the script to watch for individual mechanism failures may result in the firewalling of legitimate users. Thanks for any info!

1 0

[Dovecot] Proxy not working using passwd-file
by Clayton Epp 18 Oct '06

18 Oct '06

I've been having problems setting up my proxy using dovecot. I'm using the passwd-file for authentication as well as the regular unix passwd file. Can someone provide me with a complete example of how this should be done, I'm finding that the documentation on http://wiki.dovecot.org/AuthSpecials is sparse on the details. Please do not assume anything as I am new to both Dovecot as well as Linux (FC5).

1 0

[Dovecot] Dovecot-compatible web-based sieve configurator
by Koen Vermeer 18 Oct '06

18 Oct '06

Hi, I've set up dovecot with postfix and I'm using the dovecot LDA. It seems that sieve works, but I'm not that good at writing sieve scripts and I'd like to install something more user-friendly anyway. So: Does anyone know of a web-based sieve configurator that works with the dovecot implementation? I haven't been able to find one yet... Koen

3 4

[Dovecot] trash plugin causes crashes in quota plugin?
by Mike Horwath 18 Oct '06

18 Oct '06

I just lost my scrollback - so I'll have to recreate it the issue. Using both 1.0r7 and 1.0r10 on FreeBSD 6.1-STABLE. For the: mail_plugins = quota imap_quota that works fine (using maildir for quota plugin) But... mail_plugins = quota imap_quota trash will cause the quota plugin to die at line 156 of quota.c: root->v.deinit(root); I haven't dug through the code enough to find the actual area for this piece of code to add some debugging. Once I can generate a new traceback, I'll drop another email. -- Mike Horwath drechsau(a)iphouse.net ipHouse - Welcome home!

2 1

[Dovecot] passdb checkpassword and lastauth
by Max A 18 Oct '06

18 Oct '06

Hi. If checkpassword interface is used for working with vpopmail, function vpopmail "Record time and ip of last auth attempt" (--enable-auth-logging option for configure) won't work - the file "lastauth" is created in Maildir, but does not contain ip-address. If I had correctly understood, dovecot woldn't have set a enviroment variable TCPREMOTEIP for vchkpw. If changes are made in auth/passdb-checkpassword.c (a patch in attachment), everything will work. Probably, the patch is incorrect and does not solve all problems, however the request is to pay attention to existence of the problem. Also it is possible, that a similar problem exists with other variables TCP UCSPI protocol (http://cr.yp.to/proto/ucspi-tcp.txt) P.S. If use the interface vpopmail instead of checkpassword, the file "lastauth" will not be created at all, that is a little bit inconvenient. ********************************** System: dovecot-1.0.rc10 vpopmail-5.4.17 ASP Linux Server II (RHEL3 clone) kernel 2.4.21-47.EL.aspsmp CPU architecture: x86 (IBM xSeries 336) Filesystem: ext3 ********************************** dovecot configuration: base_dir = /var/run/dovecot/ protocols = imap pop3 disable_plaintext_auth = no ssl_disable = yes login_greeting = Ready. first_valid_uid = 89 last_valid_uid = 89 first_valid_gid = 89 last_valid_gid = 89 protocol imap { listen = 81.26.136.8:144 mail_executable = /usr/local/libexec/dovecot/imap mail_plugins = quota imap_quota mail_plugin_dir = /usr/local/lib/dovecot/imap imap_client_workarounds = delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep } protocol pop3 { listen = 81.26.136.8:112 login_executable = /usr/local/libexec/dovecot/pop3-login mail_executable = /usr/local/libexec/dovecot/pop3 pop3_uidl_format = %f mail_plugins = quota mail_plugin_dir = /usr/local/lib/dovecot/pop3 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } auth default { mechanisms = plain login passdb checkpassword { args = /var/qmail/vpopmail/bin/vchkpw } userdb prefetch { } user = root } dict { } plugin { quota = maildir } *************************************** dovecot configure options: ./configure \ --disable-ipv6 \ --prefix=/usr/local \ --sysconfdir=/etc/dovecot \ --without-passwd \ --without-passwd-file \ --without-shadow \ --without-pam \ --without-bsdauth \ --with-checkpassword \ --with-vpopmail \ --without-static-userdb \ --with-prefetch-userdb \ --without-sql \ --without-pgsql \ --without-mysql \ --without-sqlite \ --with-ssl=openssl \ --with-pop3d \ --without-deliver \ --with-storages=maildir \ --with-docs ***************************************** vpopmail configure options: ./configure \ --enable-auth-module=cdb \ --enable-logging=p \ --enable-md5-passwords \ --enable-make-seekable \ --enable-file-sync \ --enable-ip-alias-domains \ --enable-clear-passwd \ --disable-roaming-users \ --disable-learn-passwords \ --disable-passwd \ --enable-auth-logging diff -ur dovecot-1.0.rc10.orig/src/auth/passdb-checkpassword.c dovecot-1.0.rc10/src/auth/passdb-checkpassword.c --- dovecot-1.0.rc10.orig/src/auth/passdb-checkpassword.c 2006-08-22 06:37:56.000000000 +0400 +++ dovecot-1.0.rc10/src/auth/passdb-checkpassword.c 2006-10-17 16:47:09.000000000 +0400 @@ -226,6 +226,10 @@ env_put(t_strconcat("REMOTE_IP=", net_ip2addr(&request->remote_ip), NULL)); + env_put(t_strconcat("TCPREMOTEIP=", + net_ip2addr(&request->remote_ip), + NULL)); + } if (request->master_user != NULL) { env_put(t_strconcat("MASTER_USER=",

1 0

[Dovecot] 1.0.rc10 released
by Timo Sirainen 18 Oct '06

18 Oct '06

http://dovecot.org/releases/dovecot-1.0.rc10.tar.gz http://dovecot.org/releases/dovecot-1.0.rc10.tar.gz.sig I've finally read all the mails in the mailing list and in my INBOX. If I haven't replied to some of your mail, please resend it. Remember that since 1.0.rc9 release dovecot.index.cache files will get rebuilt in 64bit systems, and it's probably better to delete them manually so you don't get errors in log files. There are only a couple of issues left in my v1.0-TODO list: - Master process appears to be leaking log fds with kqueue. Could someone again give me access to a system where this happens? - Login process problems. How well does it work now? Hopefully well enough that v1.0 could be released. - LDAP authentication is leaking memory? Can anyone confirm this? Even better, can someone figure out what exactly is leaking? :) Not a v1.0 blocker though. I think v1.0 will be released once no-one has reported any major problems for a Dovecot release in 2-4 weeks. I think login process handling is the only potentially major problem left. There are a few patches from people that I haven't forgotten, but I've decided not to put them into v1.0 anymore: - Filesystem quota group. I don't think it's that important feature, and it might break something. - HFS+ hardlink avoiding - Managesieve - vmailmgr support And finally the changes in this release: * When matching allowed_nets IPs, convert IPv6-mapped-IPv4 addresses to actual IPv4 addresses first. + IMAP: Try to avoid sending duplicate/useless message flag updates + Added support for non-plaintext authentication for vpopmail if it returns plaintext passwords. Based on patch by Remi Gacogne. + Added %D modified to return "sub.domain.org" as "sub,dc=domain,dc=org" (for LDAP queries). Patch by Andrey Panin. - rc9 broke cache files in 64bit systems - deliver works now with mail_chroot - auth cache didn't work properly with multiple passdbs - Fixes to handling CRLF linefeeds in mboxes.

13 22