- dovecot - dovecot.org

[Dovecot] configuration guidelines.
by Ian Mortimer 05 Sep '06

05 Sep '06

Our imap/pop service is moving from UW imap to dovecot 0.99.11 on RHEL4. This is for around 200 users with lots of different email clients, e.g.: Windows: outlook, outlook Express, eudora, thunderbird, netscape OS X: mail, eudora, thunderbird Unix/Linux: evolution, thunderbird, pine, mutt Web: squirrelmail Apart from the example configuration file, I can't find any guides for optimal values to use for dovecot's many configuration options. A few that look like they might need changing are: login_process_size = 32 login_process_per_connection = yes login_processes_count = 3 mbox_dotlock_change_timeout = 30 auth_count = 1 client_workarounds = Does anyone have any pointers to reasonable values for those or other settings? Thanks -- Ian

3 3

Re: [Dovecot] rc7 bug? [Was: deliver LDA and INBOX location] (fwd)
by David Lee 05 Sep '06

05 Sep '06

Anyone had any thoughts on the item below? If the problem is with my config, I'd like to be guided towards how I might resolve it. If it is a bug in rc7, it would be good to fix it, and I'd be happy to beta-test. -- : David Lee I.T. Service : : Senior Systems Programmer Computer Centre : : Durham University : : http://www.dur.ac.uk/t.d.lee/ South Road : : Durham DH1 3LE : : Phone: +44 191 334 2752 U.K. : ---------- Forwarded message ---------- Date: Fri, 1 Sep 2006 10:22:20 +0100 (BST) From: David Lee <t.d.lee(a)durham.ac.uk> To: dovecot(a)dovecot.org Subject: Re: [Dovecot] rc7 bug? [Was: deliver LDA and INBOX location] On Thu, 31 Aug 2006, David Lee wrote: > [...] > We have a well-established different convention which subdivides this, > based on the last two digits of the uid: "/var/spool/mail/12/fred" (for > fred's uid as something ending "[...]12"). This is working nicely with > dovecot, using the new rc7 functionality: > default_mail_env = mbox:%h:INBOX=/var/spool/mail/%-2.02i/%u:[...] > > I am now trying to get sendmail to use dovecot's "deliver" as the LDA, > [...] The main problem is that, according to the log file, the delivery > attempt is being made to an INBOX "/var/spool/mail//fred". That is, it > seems to be ignoring the "default_mail_env" setting. > > Have I missed something in the wiki, or is this a bug of some sort? I have looked deeper at my problem (abov). It seems to be a bug in rc7, and probably an "always been there" bug. I sprinked a few "i_info(...)" diagnostics into "deliver.c" where it does 'getenv("MAIL")' and 'getenv("DEFAULT_MAIL_ENV")'. It shows that these are being successfully read from the 'dovecot.conf' file (good). But, crucially, it seems that the "%" variable substitution is incomplete: line 483: MAIL [null] line 486: MAIL mbox:%h:INBOX=/var/spool/mail/%-2.02i/%u:INDEX=/var/spool/mail/indexes/%d/%n line 492: MAIL mbox:/home/fred:INBOX=/var/spool/mail//fred:INDEX=/var/spool/mail/indexes//fred (Aside: The act of inserting the 'i_info' will have knocked the line numbers adrift by a couple. But it shows what is (not) happening.) Note in the "INBOX=..." clause that while "%u" and "%h" have been successfully expanded (good), the "%i" variant (UNIX uid) has failed to get expanded (bad). I'm new to dovecot, so am on a steep learning curve and am unfamiliar with the source code and dovecot's principles. So it would probably take me ages to work out a suitable patch, and even then it might be inappropriate. But hopefully the above information is sufficient and suitable for someone (Timo?) to investigate more expertly and fully. If someone can produce a patch (or hints of what to patch and where) I would certainly intend to test it and work on it for you. Hope that helps. Many thanks in advance. -- : David Lee I.T. Service : : Senior Systems Programmer Computer Centre : : Durham University : : http://www.dur.ac.uk/t.d.lee/ South Road : : Durham DH1 3LE : : Phone: +44 191 334 2752 U.K. :

2 3

[Dovecot] Effective UIDs Nad GID for VIrtual Users
by rammstein-den 05 Sep '06

05 Sep '06

Hello to All. I have a system with FreeBSD 6.1 Release, Dovecot 1.0 Release Candidate 7. I am a novice user in unix world and when my first deal with with Dovecot is Virtual users. User databes in master.passwd file (like a /etc/master.passwd) created by "pw". All works fine, BUT --- If user exclusivly virtual (there is no user with same name in system) IMAP folders are created normal with a right access rights(they described in dovecot.conf statically UID 555) - all cool - BUT when i trying to login with a Virtual user with the SAME LOGIN NAME as in SYSTEM (FreeBSD's /etc/master.passwd user) USER ---- going something strange: imap folders that creating for this user takig wrong ACCES RIGHTS (access rights for system user), not statically with UID 555! What the ... ?! -----------------------Edited Part of Dovecot.conf----------------------------------------------------- default_mail_env = mbox:/var/new/%u:INBOX=/var/virtual/%u auth default { # Space separated list of wanted authentication mechanisms: # plain login digest-md5 cram-md5 ntlm rpa apop anonymous gssapi #mechanisms = digest-md5 # /etc/passwd or similar, using getpwnam() # In many systems nowadays this uses Name Service Switch, which is # configured in /etc/nsswitch.conf. # passdb passwd { # } #auth_user=root #userdb passwd-file { # args = /bsd/dove/passwd #} userdb passwd { args = /bsd/dove/passwd } passdb passwd-file { args = /bsd/dove/master.passwd } # /etc/passwd or similar, using getpwnam() # In many systems nowadays this uses Name Service Switch, which is # configured in /etc/nsswitch.conf. # static settings generated from template userdb static { # Template for settings. Can return anything a userdb could normally # return, eg.: uid, gid, home, mail, nice # # A few examples: # # args = uid=500 gid=500 home=/var/mail/%u # args = uid=500 gid=500 home=/home/%u mail=mbox:/home/%u/mail nice=10 # args = uid=555 gid=125 } } ------------------------------------END------------------------------------- In logs I also have: dovecot: Sep 04 22:47:03 Info: IMAP(radeon): Effective uid=1001, gid=1001 instead dovecot: Sep 04 22:59:39 Info: IMAP( ): Effective uid=555, gid=125 - - - - -- - -- - - I so angry! P.S. Sorry for my english,my native language is Russian :)

1 0

[Dovecot] Upgrading from Package on OpenBSD
by Michael Starks 05 Sep '06

05 Sep '06

Hi, First, let me say I looked for a way to search the archives online but must be missing something. Can someone point me to a URL? On to the question: I'm currently running dovecot-0.99.14p1 from packages on OpenBSD 3.8. I'm interested in running the latest version. What is the best practice for migrating/upgrading on OpenBSD? Thanks in advance.

2 1

[Dovecot] Maildir messages owned by Root.
by Simon 05 Sep '06

05 Sep '06

G'day I am having an interesting issue, that I can not find a fixe for. I am running dovecot 1.0 rc7, on a Freebsd 5.4 x86 box, with around 1500ish users, using Maildir storage format. I have a very small number of user, with the same problem, when messages are moved from ~username/Maildir/new to ~username/Maildir/cur a random number, of the files ownership, will change to root. And my users can then not download any mail until this has been fixed. I have an identical setup running on Solaris 10 x86, that does not have this problem. Has anybody come across this before on Freebsd or any other operating system. Or have any suggestions, on what I can try to fix the problem. I have not been able to emulate it in a lab environment, and the logs on the server do not produce an error.

1 0

[Dovecot] OT: NIS Authentication
by Jeff Graves 04 Sep '06

04 Sep '06

Ran into a major issue with my setup overnight: We have a Win2K AD domain running SFU with a master and 1 slave NIS server. Our mail server is a FC1 box that runs dovecot and a MailScanner/sendmail config. The mail server is configured as a NIS client. The problem is that we lost power overnight and all of the boxes shutdown after the UPS's ran out of battery. After the power came back on, all of the boxes automatically rebooted. The problem is that our mail server is somewhat faster than the rest of the servers. It booted up before the master or slave NIS servers were up and running. Since the mail server uses a PAM NIS authentication scheme, it knows nothing about our users unless it connects to a NIS server. So, this morning users were getting "unknown username" type errors with outlook. Furthermore, the mail logs show that sendmail was rejecting mail with "unknown user" errors. It wasn't until we rebooted the mail server and it was able to reconnect to the NIS servers that mail resumed being received and users could access it. It seems like a fundamental problem with our setup. Since I'll eventually be updating the box to a newer OS and configuration, I need to plug this hole somehow without changing the authentication scheme. Furthermore, I'm concerned that if the master or slave went down while the mail server was still up, we'd see similar results. I'm thinking of one of two options to fix this but wanted to run it by everyone to see if there was a better way: 1) Configure the boot loader to wait 5 minutes before loading the OS (it uses GRUB so I'll set it display the OS menu screen for 5 minutes and then boot). Then if I'm doing maintenance to the box I can just hit enter to boot immediately and hopefully the 5 minute delay will allow the other boxes to boot after a power outage. This won't cover me if it's not a power outage (Eg. The master or slave dies). 2) Configure the mail server as an NIS slave. I'm thinking that this will basically "copy" the user info (username, password, homedir, etc.) on a schedule and store it locally on the mail server (is this how it works?). This covers both issues - power outage and a server dying. But I've read about problems getting password sync to happen quickly. I'd ideally like it to happen immediately (without any manual intervention) but I don't think this is possible. Thoughts? Jeff Graves, MCSA Customer Support Engineer Image Source, Inc. 10 Mill Street Bellingham, MA 02019 508.966.5200 - Phone 508.966.5170 - Fax jeff(a)image-src.com - Email www.image-src.com

5 4

[Dovecot] Can't build with PAM support
by Neil Briscoe 04 Sep '06

04 Sep '06

I'm having trouble getting dovecot to compile with PAM support. Output from the configure command says its checking for pam_start in -lpam .... no. I've checked, there is a pam_start in there. So how can I force configure to see what its looking for? I've tried the --with-pam switch and that doesn't work. I'm trying to build the latest RC7 on a Debian Sarge box. Regards Neil ------------------------------------------------------------------------------------ Scanned for viruses, spam and offensive content by CensorNet MailSafe Professional Web & E-mail Filtering from www.censornet.com

2 5

[Dovecot] Emails corrupted...
by Jean-François Guyet 04 Sep '06

04 Sep '06

Hi All, I have just setup a Dovecot Imap server on a Ubuntu 6.06 Lamp box. Basically I use fetchmail to retrieve emails from foregin pop accounts and then procmail transfers emails for /var/mail/username to ~/Maildir/new and other folders. Everything works fine *except* if my Thunderbird client is connected (I haven't tried any other client). If an email is received while TB is connected, then the file for the email is empty (eg size 0) leading to an empty email dated 1/jan/1970!. As I'm quite to Dovecot (and Linux in general), I'm quite a bit lost. Anyone there who could help ? Best regards Jean-François -- ----- Fin du message transféré ----- --

2 1

[Dovecot] Mailbox Limnits
by Chris Kenward 04 Sep '06

04 Sep '06

Hi Folks Can anyone tell me whether there is a default limit on the size of IMAP mailboxes using Dovecot or, if not, where I would set that up? We're wanting to give our customers the choice of IMAP vs POP but don't want to end up with Gigabyte mailboxes. Regards Chris

1 0

[Dovecot] SPA (NTLM) Authentication
by Neil Briscoe 03 Sep '06

03 Sep '06

Hello I have just spent a happy day (!) configuring Exim4 to accept authenticated connections from full blown Outlook clients. That works. Unfortunately, by ticking the "Use SPA" box in Outlook it now demands SPA on the POP3 server as well. The existing POP3 server doesn't support this style of authentication. I believe Dovecot will. We're already using it as an IMAP server. What I'm worried about is diverting its current view from /etc/passwd. I have an /etc/exim4/passwd file which contains three fields for the users tested so far, their name, an encrypted password, and a clear text one. Timo has already told me that the system needs access to the cleartext password (or an NTLM style password) in order to work. It would be nice if I could have the system check the /etc/exim4/passwd file and if the user wasn't there then check the /etc/passwd file - and ignore NTLM as it would normally. Regards Neil -- Neil Briscoe Adelix Ltd neil.briscoe(a)adelix.com web: www.adelix.com tel: 0845 230 9592 / fax: 0845 230 9591 / main office: 0845 230 9590 snail: The Old Post Office, Bristol Rd, Hambrook, Bristol BS16 1RY. UK. skype: stonefish001 Adelix Ltd is BS EN ISO 9001:2000 Certified (No. GB 12763) Any views expressed in this email communication are those of the individual sender, except where the sender specifically states them to be the views of a member of Adelix Ltd. Adelix Ltd. does not represent, warrant or guarantee that the integrity of this communication has been maintained nor that the communication is free of errors or interference. ------------------------------------------------------------------------------------ Scanned for viruses, spam and offensive content by CensorNet MailSafe Professional Web & E-mail Filtering from www.censornet.com

1 1

[Dovecot] Dovecot with STARTTLS
by Dovecot Mailing List 03 Sep '06

03 Sep '06

Dovecot rc7 I have Dovecot working fine with using SSL on port 995. However, if I attempt to use STARTTLS on port 110, I receive the following error message from my MUA: >>> Connecting to "192.168.0.2" (SSL/TLS) [9/1/2006 5:36:12 PM] <<< +OK Seibercom.net at your service [ISafe POP3 Proxy] STLS +OK Begin TLS negotiation now. The connection then times out. This is the only entry in the Dovecot.log: dovecot: Sep 01 17:36:52 Info: pop3-login: Disconnected: Inactivity: rip=192.168.0.4, lip=192.168.0.2, TLS handshake Does anyone have an idea what the problem might be? Thanks! -- Gerard Seibert gerard(a)seibercom.net

6 9

[Dovecot] imap fails, policy wrong?
by rob＠adeed.tele.com 02 Sep '06

02 Sep '06

up until a week or so ago, I had no problem using IMAP logging into a server running Fedora Core (I think 4 or 5 ) with dovecot 1.0. Had used squirrelmail and other mail agents using IMAP with no problem. as of 2 days ago, I get a squirrelmail error "ERROR: Connection dropped by IMAP server. Query: CAPABILITY" and turning on dovecot debugging shows the following: audit(1157176740.621:14111): avc: denied { search } for pid=9431 comm="doveco t" name="rob" dev=dm-0 ino=23560377 scontext=user_u:system_r:dovecot_t:s0 tconte xt=user_u:object_r:httpd_sys_content_t:s0 tclass=dir can someone point me in the right direction? apologies if this doesn't contain enough info, will try to get more if necesssary, thanks in advance. (incidentally, the simpler dovecot error message says it can't chdir to my $HOME or its parent, but I see no problem with perms or ownership. ) Rob Lingelbach rob(a)colorist.org

2 1

[Dovecot] Passwd-file extra-fields ...which ones
by Luis Venegas 01 Sep '06

01 Sep '06

Hi list., >From http://wiki.dovecot.org/AuthDatabase/PasswdFile I can tell there is mail and allow_nets fields. Which ones dovecot supports? In particular one for quota?? Thanks Luis Venegas

1 0

[Dovecot] DIGEST-MD5 doesn't work
by Jürgen Herz 01 Sep '06

01 Sep '06

Hi, my dovecot installation works since months and clients authenticate using CRAM-MD5. But today I got the first chance to test an client that supports DIGEST-MD5 - and it doesn't work. Because of lack of other supporting clients and servers I'm now at the point I don't know which side is to blame. The error I get after the client answers the servers challenge is "-ERR Authentication failed: Missing nonce parameter". Though I don't know how DIGEST-MD5 works I wonder about the message because the clients answer contains a nonce parameter (captured with tcpdump): YXV0aHppZD0ib3RycyIsY2hhcnNldD11dGYtOCxjbm9uY2U9IjFlOTZkYmZiZWEwZjUxNmVhZjEyYmM0NjU1M2JmZjVlIixkaWdlc3QtdXJpPSJwb3AzL25hbm8iLG5jPTAwMDAwMDAxLG5vbmNlPSJPVGpGWmhjS2FIVjZSVGMyZlRDTXJ3PT0iLHFvcD1hdXRoLHJlYWxtPSIiLHJlc3BvbnNlPTVmMTQyZWVlN2FmMWVmYTJhYWI5ZmM0ODNiOGJjOTJhLHVzZXJuYW1lPSJvdHJzIg== authzid="otrs",charset=utf-8,cnonce="1e96dbfbea0f516eaf12bc46553bff5e", digest-uri="pop3/nano",nc=00000001,nonce="OTjFZhcKaHV6RTc2fTCMrw==", qop=auth,realm="",response=5f142eee7af1efa2aab9fc483b8bc92a,username="otrs" Client is a Perl script using Net::POP3 and Authen::SASL Modules Dovecot is version 0.99.14 - I know it's old and not supported. If one tells me the bug is known and fixed in 1.0rc, then I'll think about upgrading, but I just to test I don't want to change my running system. Regards, Jürgen

1 1

[Dovecot] Stale imap processes
by Michael Bond 01 Sep '06

01 Sep '06

I read through the thread on Stale imap process and would like to chime in that I too am having the problem. The only imap user on the system is using Mail.app 2.1. The other users are using pop with thunderbird. After quiting mail.app and stopping dovecot I can still see many imap sessions opened. Over the course of the day a good number of imap process will be open and no one will be able to connect to the server via imap or pop. Typically I have to restart dovecot twice a day with the following: /etc/init.d/dovecot stop killall imap /etc/init.d/dovecot start I've narrowed it down to an imap issue. If i don't connect with imap the other users don't report any issues connecting with pop. I'm using mbox as my mail format on centos 4. I know that the default version on centos4 is .99, but it appears that people are still having issues into 1.0rc2. Could it have something to do with using mbox format? Mike. mbond(a)the-forgotten.org

1 0

[Dovecot] deliver LDA and INBOX location
by David Lee 01 Sep '06

01 Sep '06

(OS: Fedora Core 5; dovecot: 1.0 rc7) On a typical UNIX-like OS, the INBOXes are in "/var/spool/mail/" using the user identifier: so user 'fred' has INBOX "/var/spool/mail/fred". We have a well-established different convention which subdivides this, based on the last two digits of the uid: "/var/spool/mail/12/fred" (for fred's uid as something ending "[...]12"). This is working nicely with dovecot, using the new rc7 functionality: default_mail_env = mbox:%h:INBOX=/var/spool/mail/%-2.02i/%u:[...] I am now trying to get sendmail to use dovecot's "deliver" as the LDA, (following "http://wiki.dovecot.org/LDA") as a simple drop-in replacement for the normal LDA. (Actually our migration starting point is a UW-IMAP background using its 'tmail' as LDA.) 1. It seems that using "auth default {...socket listen {...}...}" is mandatory. Can someone confirm? This feels like an extra complication: is it strictly necessary in a NIS/PAM set-up? (Fair enough if so.) 2. The main problem is that, according to the log file, the delivery attempt is being made to an INBOX "/var/spool/mail//fred". That is, it seems to be ignoring the "default_mail_env" setting. Have I missed something in the wiki, or is this a bug of some sort? -- : David Lee I.T. Service : : Senior Systems Programmer Computer Centre : : Durham University : : http://www.dur.ac.uk/t.d.lee/ South Road : : Durham DH1 3LE : : Phone: +44 191 334 2752 U.K. :

1 1

[Dovecot] No tcp wrappers, other ideas to help stop brute force attacks?
by David Rees 01 Sep '06

01 Sep '06

I'm looking for a way to deny access to dovecot from certain IP addresses, basically to help prevent brute force attacks on the server. Right now I'm using denyhosts which scans /var/log/secure for authentication failures which then can add an entry to /etc/hosts.deny, but since dovecot doesn't have tcp wrappers support, that doesn't do anything. It doesn't look like I can run dovecot run xinetd. Any other ideas to help protect dovecot from brute force attacks? I don't think pam can help, can it? Otherwise I need to figure out a way to have denyhosts trigger iptables rules or something, or maybe there's another application that will work? -Dave

9 15

[Dovecot] one example, just one example ...
by OpenMacNews 01 Sep '06

01 Sep '06

... of a correctly formatted QUOTA spec in/for a static userdb. That's all I'm askin' for! i've tried a bunch of variants. the most recent two: user@domain.com:{PLAIN}testpass:::::: quota=maildir:storage=4096 user@domain.com:{PLAIN}testpass:::::: maildir:storage=4096 *none* (so far ...) work to override the spec in dovecot.conf. no errors in the logs; rather, simply: dovecot: Aug 31 08:54:25 Info: auth(default): passwd-file /var/MailServer/Data/USERS/imap_user_file: Read 2 users nobody? really, nobody does this successfully? richard

2 2

[Dovecot] [Fwd: dovecot-1.0_rc7 crashes (Login process died too early) with repeated deletes from thunderbird]
by Tim Schafer 01 Sep '06

01 Sep '06

I've run this test on every permutation of poll and notify: can NOT reproduce the crash: --with-ioloop=select --with-notify=none --with-ioloop=select --with-notify=dnotify --with-ioloop=select --with-notify=inotify --with-ioloop=poll --with-notify=none --with-ioloop=poll --with-notify=dnotify --with-ioloop=poll --with-notify=inotify CAN reproduce the crash: --with-ioloop=epoll --with-notify=none --with-ioloop=epoll --with-notify=dnotify --with-ioloop=epoll --with-notify=inotify So it would seem that epoll is related some how. As IDLE only seems to work well with epoll, I'm highly interested in resolving this crash. My Linux kernel is version 2.6.14.2 glibc 2.3.6 If any other info would help, please let me know. If any other test combinations would be helpful, I will try to do them ASAP. Regards, Tim Schafer -------- Original Message -------- Subject: [Dovecot] dovecot-1.0_rc7 crashes (Login process died too early) with repeated deletes from thunderbird Date: Thu, 24 Aug 2006 15:18:56 -0700 From: Tim Schafer <tim_schafer(a)shipfsp.com> To: Dovecot Mailing List <dovecot(a)dovecot.org> I can consistently reproduce a crash in dovecot: Select 20 or more messages and copy them to a test folder. Go into that test folder and SHIFT-DEL the messages rapidly (holding down SHIFT-DEL works best) Just rapidly DELing them (even holding down DEL) doesn't do it (unless it's the Trash folder) I'm using the following namespace (in case that's relevant) namespace private { separator = . prefix = INBOX. inbox = yes } The /var/log/syslog for the session reads: Aug 24 14:58:54 hostname dovecot: Dovecot v1.0.rc7 starting up Aug 24 14:58:55 hostname slapd[7243]: conn=147 fd=9 ACCEPT from IP=127.0.0.1:41074 (IP=0.0.0.0:389) Aug 24 14:58:55 hostname slapd[7243]: conn=147 op=0 BIND dn="" method=128 Aug 24 14:58:55 hostname slapd[7243]: conn=147 op=0 RESULT tag=97 err=0 text= Aug 24 14:59:09 hostname dovecot: auth(default): client in: AUTH^I1^IPLAIN^Iservice=IMAP^Ilip=192.168.0.7^Irip=192.168.0.100 Aug 24 14:59:09 hostname dovecot: auth(default): client out: CONT^I1^I Aug 24 14:59:09 hostname dovecot: auth(default): client in: CONT^I1^IAHRdfmkerjejfkdeie Aug 24 14:59:09 hostname dovecot: auth(default): client out: OK^I1^Iuser=username Aug 24 14:59:09 hostname dovecot: auth(default): master in: REQUEST^I1^I10081^I1 Aug 24 14:59:09 hostname dovecot: auth(default): master out: USER^I1^Iusername^Isystem_user=username^Iuid=1000^Igid=100^Ihome=/home/username Aug 24 14:59:09 hostname dovecot: imap-login: Login: user=<username>, method=plain, rip=192.168.0.100, lip=192.168.0.7 Aug 24 14:59:10 hostname dovecot: auth(default): client in: AUTH^I1^IPLAIN^Iservice=IMAP^Ilip=192.168.0.7^Irip=192.168.0.100 Aug 24 14:59:10 hostname dovecot: auth(default): client out: CONT^I1^I Aug 24 14:59:10 hostname dovecot: auth(default): client in: CONT^I1^IAHRdfmkerjejfkdeie Aug 24 14:59:10 hostname dovecot: auth(default): client out: OK^I1^Iuser=username Aug 24 14:59:10 hostname dovecot: auth(default): master in: REQUEST^I2^I10082^I1 Aug 24 14:59:10 hostname dovecot: auth(default): master out: USER^I2^Iusername^Isystem_user=username^Iuid=1000^Igid=100^Ihome=/home/username Aug 24 14:59:10 hostname dovecot: imap-login: Login: user=<username>, method=plain, rip=192.168.0.100, lip=192.168.0.7 Aug 24 14:59:12 hostname dovecot: auth(default): client in: AUTH^I1^IPLAIN^Iservice=IMAP^Ilip=192.168.0.7^Irip=192.168.0.100 Aug 24 14:59:12 hostname dovecot: auth(default): client out: CONT^I1^I Aug 24 14:59:12 hostname dovecot: auth(default): client in: CONT^I1^IAHRdfmkerjejfkdeie Aug 24 14:59:12 hostname dovecot: auth(default): client out: OK^I1^Iuser=username Aug 24 14:59:12 hostname dovecot: auth(default): master in: REQUEST^I3^I10085^I1 Aug 24 14:59:12 hostname dovecot: auth(default): master out: USER^I3^Iusername^Isystem_user=username^Iuid=1000^Igid=100^Ihome=/home/username Aug 24 14:59:12 hostname dovecot: imap-login: Login: user=<username>, method=plain, rip=192.168.0.100, lip=192.168.0.7 Aug 24 14:59:14 hostname dovecot: IMAP(username): Disconnected Aug 24 14:59:14 hostname dovecot: imap-login: Disconnected: rip=192.168.0.100, lip=192.168.0.7 Aug 24 14:59:14 hostname last message repeated 2 times Aug 24 14:59:14 hostname dovecot: Login process died too early - shutting down Aug 24 14:59:14 hostname dovecot: imap-login: Disconnected: rip=192.168.0.100, lip=192.168.0.7 Aug 24 14:59:14 hostname slapd[7243]: conn=147 op=1 UNBIND Aug 24 14:59:14 hostname slapd[7243]: conn=147 fd=9 closed -- Regards, Tim Schafer

1 1

[Dovecot] MANAGESIEVE patch v2
by Stephan Bosch 01 Sep '06

01 Sep '06

Hello Timo, Dispite the heat out here, I managed to come up with a new version of the managesieve patch for dovecot-1.0rc2: - Fixed the bug (missing CRLF) in the authenticate command - Modified the sieve storage library making the interface much less crude. - The scripts put on the server using the putscript command are now checked before they are accepted. - The reported SIEVE capability is now directly read from the sieve implementation (in this case cmu), listing much more than "FILEINTO VACATION". - Fixed some minor bugs in the putscript command Considering the dovecot-sieve plugin, I noticed that you obviously do not want to include the cmu sieve code in the main dovecot source tree. Unfortunately I did not see any other way but to include this library in my patch to make it support checking the uploaded scripts (for now). There are a few alternatives to solve this issue. We could combine de dovecot-sieve plugin with the managesieve patch yielding a single large sieve plugin. However, this would require some means to let the master know about the new managesieve process type. This could be achieved with some more plugin magic. Another way to solve this problem is by truly only excluding the cmu source from the main dovecot tree. If the interface of the sieve implementation is abstracted somehow, one could build a plugin interface for sieve implementations. This sieve interface would be common to dovecot-deliver and the managesieve daemon. This way, it does not matter how the sieve language is implemented (dovecot could even implement its own and still support cmu and others). I saw a hint to this solution in your original dovecot-lda plugin (i.e. sieve-mailutils.c etc), so you must have been playing with this idea as well. I took the liberty to define an example interface for the sieve implementations in the src/lib-sieve directory. It was concieved very quickly and it is far from complete, but it should support the current features of the delivery process. It is only tested for the managesieve putscript verification (no script was ever run though this interface). I am also not quite happy with the error reporting scheme of this interface. This needs more work and if you don't like it you can of course discard it entirely and define your own. Currently, I am also testing other sieve implementations. I am experimenting with libsieve2 (libsieve.sourceforge.net) and with building a wrapper around 'exim -bf'. This last solution is of course not useful for dovecot-lda, but I think the managesieve daemon is not only useful for dovecot itself. Support for these implementations is not yet included in this patch. The patch can be downloaded at: http://sinas.rename-it.nl/~sirius/dovecot-1.0.rc2-MANAGESIEVE-v2.diff.gz (Simply apply it (-p0) to a clean 1.0rc2 source tree and run autogen.sh etc.) For testing, I have tried other client implementations than horde-ingo, but somehow everyone is very focused on the timsieve daemon and they tend to require its protocol specifics. The only other implementation I got working is smartsieve. The others either crashed or produced protocol errors (i.e. sieveshell). I hope I can get more client implementations to work to ensure the incompatibilies are not my fault. I am very eager to know what you think about the sieve implementation ideas and what you think of the new managesieve patch. Regards, -- Stephan Bosch stephan(a)rename-it.nl

2 1

[Dovecot] rc >= 6, libtool and zsh
by Thomas Hummel 31 Aug '06

31 Aug '06

Hello Timo, On FreeBSD 6.1-STABLE, rc7 doesn't build (rc6 didn't either) because of a broken "sed" in the genarated "libtool" script, at least with the "zsh" shell comming from the ports (zsh-4.3.2). This has occured starting from your move from Autoconf 2.59 to Autoconf 2.60 since for some reason, now "libtool" is run by zsh (instead of sh as in 2.59). I didn't investigate if it comes from : . "me/FreeBSD" : my particular version of zsh, or some patch that may be included in the port . "you" : changes in config.in, some problems in autotools you are using . "Debian" : the 1.5.22 Debian 1.5.22-4 patches of "ltmain.sh" used . "Libtool" : maybe some strange interaction with zsh . "Autoconf" : maybe some bug with the libtool script generation by configure . or some other reason At least, it works if I force CONFIG_SHELL to be /bin/sh -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

1 0

[Dovecot] Dovecot as LDA with Postfix
by Gerard Seibert 31 Aug '06

31 Aug '06

I have been attempting to replace Procmail with Dovecot as the LDA for my Postfix mail server, but without success. Below is a truncated output from the /var/log/maillog. Aug 9 11:56:20 scorpio postfix/local[4338]: 88C3FC3D1: to=<gerard(a)localhost.seibercom.net>, orig_to=<gerard@localhost>, relay=local, delay=1119, delays=1118/0.71/0/0.11, dsn=4.3.0, status=deferred (temporary failure) Aug 9 11:56:20 scorpio postfix/local[4324]: 818AEBF6F: to=<gerard-gmail(a)localhost.seibercom.net>, orig_to=<gerard-gmail@localhost>, relay=local, delay=495, delays=494/0.06/0/0.81, dsn=4.3.0, status=deferred (temporary failure) Aug 9 11:57:37 scorpio postfix/postfix-script: stopping the Postfix mail system Aug 9 11:57:37 scorpio postfix/master[4233]: terminating on signal 15 Aug 9 12:00:09 scorpio postfix/postfix-script: starting the Postfix mail system Aug 9 12:00:09 scorpio postfix/master[4501]: daemon started -- version 2.4-2000727, configuration /usr/local/etc/postfix Aug 9 12:00:28 scorpio postfix/smtpd[4522]: connect from localhost[127.0.0.1] Aug 9 12:00:28 scorpio postfix/smtpd[4522]: A269EC46D: client=localhost[127.0.0.1] Aug 9 12:00:28 scorpio postfix/cleanup[4526]: A269EC46D: message-id=<44DA0115.40500(a)dlr.de> Aug 9 12:00:28 scorpio postfix/qmgr[4503]: A269EC46D: from=<samba-bounces+gerard=seibercom.net(a)lists.samba.org>, size=7308, nrcpt=1 (queue active) Aug 9 12:00:29 scorpio postfix/local[4527]: A269EC46D: to=<gerard(a)localhost.seibercom.net>, orig_to=<gerard@localhost>, relay=local, delay=0.58, delays=0.2/0.06/0/0.33, dsn=2.0.0, status=sent (delivered to command: /usr/local/bin/procmail) Aug 9 12:00:29 scorpio postfix/qmgr[4503]: A269EC46D: removed With Dovecot as the LDA, no mail is ever delivered. I keep getting this temporary failure message. As soon as I revert to Procmail everything works fine. I am simply trying to deliver to mbox format on a FreeBSD 6.1 STABLE system. Nothing exotic. I am using SASL2. Authentication is via saslauthd -a sasldb. Perhaps I do not have that configured correctly in Dovecot. Dovecot does work fine as a POP server though, so it is running at least partially correctly. I would appreciate any assistance. -- Gerard Seibert gerard(a)seibercom.net Democracy is a device that insures we shall be governed no better than we deserve. George Bernard Shaw

5 13

[Dovecot] RC7: its issues or mine?
by David Lee 31 Aug '06

31 Aug '06

Background: I'm new to dovecot (although with many years Washington IMAP behind me). We're considering migrating from Washington IMAP to dovecot on the main service here, and have just started trying dovecot, using RC7. Washington, IMAP has the usual(-ish) "/var/spool/mail" shared area for the INBOX (trad. UNIX "From " format); a user's folders default to being in their home directory (same format). We are looking towards a "minimal effort" migration to dovecot, so wish to keep this layout. (In an ideal world, we would re-think, including "maildir" etc. But that's not an option at the moment.) I have encountered three issues (so far); I'm not sure whether their mine or something in dovecot (if the latter, whether bugs or features; whether RC7-specific issues; etc.). 1. The overall description of "default_mail_env" seems inadequate (in the conf file, "doc/variables.txt" and "doc/mail-storages.txt"). I'm trying: default_mail_env = mbox:~:INBOX=/var/spool/mail/%-2.02i/%u:INDEX=/tmp/indexes/%d/%n and that seems OK-ish. (The extra "%-2.02i" is because we subdivide the otherwise huge "/var/spool/mail/" directory using the user's uid-mod-100.) But the mere act of an IMAP "login" commands creates a directory (empty) with the liternal name of ~ (tilde). (An IMAP 'list "Mail" "*"' command successfully finds the usr folders in the 'Mail' subdirectory of the user's home directory.) It's almost as if the 'default_mail_env' is telling it to create (literal) '~' before realising that this is shorthand (as in C-shell) for home directory. 2. We have some Pine usage in our UNIX cluster. Historically this has taken advantage of the Pine "rsh mailmachine /etc/rimapd" ability to avoid the need for the password: pre-authentication etc. (Yes, we realise that 'rsh' has security issues.) But when I try making symlink "/etc/rimapd" point to "/usr/dovecot/sbin/dovecot" this fails: Error: Can't use SSL key file /etc/ssl/private/dovecot.pem: Permission denied We have: /etc/ssl/certs/dovecot.pem (mode 444) /etc/ssl/private/dovecot.pem (mode 400) for the sake of secure-IMAP (port 993). But why does this come into the equation at all for this (none-SSL) "rsh ... /etc/rimapd" usage? 3. I was developing and testing this here at work using an account that I mostly use from home using Outlook Express. I was very careful (I think!) only to use the read-only "examine INBOX" command (not "select INBOX"). When I went home and tried it as usual (connecting to our production Washington IMAP service reading that INBOX). But OE showed all the email (including previously read) as "unread" (closed envelope icon). It seems that dovecot has done something to the message headers (even under "examine") that has worried OE. Any thoughts? Finally any hints for NFS-based working? We have a farm of a few Fedora machines running the IMAP processes and the sendmail locally-delivery. Our current "/etc/fstab" NFS spec. for the INBOX area (on a NetApp) is: rw,noac,actimeo=0,vers=3,tcp,timeo=600,rsize=32768,wsize=32768,hard,intr,fg,nosuid Any changes? Issues? Thinks to consider? Etc. Many thanks. -- : David Lee I.T. Service : : Senior Systems Programmer Computer Centre : : Durham University : : http://www.dur.ac.uk/t.d.lee/ South Road : : Durham DH1 3LE : : Phone: +44 191 334 2752 U.K. :

5 8

[Dovecot] IMAPS + Outlook
by Mark Adams 31 Aug '06

31 Aug '06

Hi, We have been using Dovecot 1.0 to serve Maildir format over IMAPs to a client with an office of around 30 people, and a remote office of 10, all using Outlook 2003. While users in the base office (location of server) are not having issues with the server users in the remote office are often having problems with Outlook freezing, or not being able to connect. The dovecot log shows them logging in, but users report not being able to open any mail. We are having similar problems with 2 users that are often on 3G cards, in that the headers download but when they try to open the file it gives the 'must be online to download the message' error, even though they are still connected to their 3G. The net connection for the server is 2mb sdsl, which I have tested myself (using thunderbird on linux!) and achieved good throughput and reliable mailbox navigation. Is there any Outlook work arounds we could be using? (currently using idle timeout work around) Any help is very much appreciated. Thanks, Mark

5 5

[Dovecot] dovecot with Calendar or Contacts?
by ajmcello 31 Aug '06

31 Aug '06

I have the SyncKolab plugin installed with Thunderbird. I can't get it to work properly. Maybe I have to have a Kolab Server? I can get my Address Book contacts to sync with an IMAP folder when I check Sync IMAP, but I can't get it to work the other way around. From their website, it seems possible: [begin paste] SyncKolab SyncKolab was written to add kolab functionality to thunderbird. It reads a selected Imap folder and synchronizes it with the local address book and calendar. It has been tested under Thunderbird 1 for Windows and Linux. What is Kolab? What it does is, that it loads all your contacts (from a selected address book) as well as events and todos (from the selected calendar), and synchronizes them with a selected imap folder. Where every contact is stored as an vcard and every event,todo as iCalendar. For more information http://kolab.org/ The idea behind this is, that you can now have your contacts+calendar entries stored on the imap server. so you can actually have the same addresses on more than one computer. The kolab project has a groupware server that uses imap to exchange calendar entries and vcards. But you can also setup simple sharing in your office if you have f.e. cyrus by symlinking shared folders. [end paste] Yeah, I've explored the Outlook connectors some. Do any exist that are free/open source? On 8/30/06, Curtis Maloney <cmaloney(a)cardgate.net> wrote: > > ajmcello ajmcello wrote: > > When I attempted to import my Contacts list into dovecot, my mail > > client told me that the IMAP server did not support "Special" folders. > > > > Is there a way to to do the contacts, or sync up Contacts & Calendar > from a > > database or something else? > > > > I'm using both Thunderbird and Outlook. > > What are you using in Thunderbird to store your contacts+calendar info on > the > IMAP server? The only tool I've found like that is Kolab Sync, which > didn't > work last time I tried it. :/ > > As for Outlook - it's absolutely correct. You'd need some sort of > "Connector" > to translate their Contacts/Calendar storage to IMAP. > > -- > Curtis Maloney > cmaloney(a)cardgate.net >

2 1