- dovecot - dovecot.org

[Dovecot] Dovecot statistics -- I hope this is a stupid question
by Jon Callas 11 Jun '06

11 Jun '06

Is there a way for me to know the last time a user logged in? i'm running Dovecot with Postfix with the authentication bridge and completely virtual everything. It would be nice to know the last time someone logged in, so four years from now I can delete the ones that haven't been used in three years. Jon

2 1

[Dovecot] Slow caching
by John Rowe 11 Jun '06

11 Jun '06

I have just installed dovecot on a RedHat Enterprise 4 clone with exim MTA, procmail LDA and mbox format. I'm getting complaints of slow caching from a Mac user: I think there's still something very sick with [host]'s IMAP server: it just took a full five minutes to cache an attachment (350kb) in an email from [person]. In that time, I couldn't do anything else with mail; it was essentially locked. The user's inbox is in /var/spool/mail (where there are no idexes), there areindex files within his home directory: ./.imap/INBOX: total 1160 -rw------- 1 xyz users 60656 May 30 14:22 dovecot.index -rw------- 1 xyz users 891904 May 30 14:22 dovecot.index.cache -rw------- 1 xyz users 78428 May 30 14:22 dovecot.index.log -rw------- 1 xyz users 131920 May 26 11:29 dovecot.index.log.2 Everything is on local disk, there are no NFS mounts at all. Any thoughts? Thanks John

3 3

[Dovecot] Inbox in two different locations
by arilinux 11 Jun '06

11 Jun '06

Hello I'm running dovecot v1.0.beta3 on a fedora 4 machine. I'm looking for the way to tell dovecot that some users have inbox (mailbox) in /var/mail/%u and some have inbox (maildir) in /home/%u/mail. Anyway?

2 1

[Dovecot] deliver LDA status?
by Lev Serebryakov 11 Jun '06

11 Jun '06

Hello dovecot, wiki mentions `deliver', but it doesn't include into 1.0.beta8 dovecot distribution. It can be downlaoded from CVS, and even contains two tags on files, that seems to eb release tags :) But what is official status of `deliver' tool? Is it stable, or experemental, or what? Are here any plans when it will be packaged ad announced? -- Best regards, Lev mailto:lev@serebryakov.spb.ru

2 1

[Dovecot] Can't run POP3 and IMAP simultaneously from xinetd...
by Timothy Meader 11 Jun '06

11 Jun '06

Hello all, I'm hoping you can help out with an issue I'm having running dovecot-beta8 on Solaris 9 (SPARC). The reason I need to run them from xinetd is that we require the filtering ability that tcp_wrappers provide. My issue is that, when running both from xinetd, IMAP runs fine, but then, when you try to POP in to check mail on the same box, it seems that the login section is handled via pop3-login... but all subsequent commands are handled via the imap interpreter. It's as if it's getting passed off to /usr/local/libexec/dovecot/imap instead of /usr/local/libexec/dovecot/pop3 as is specified in dovecot.conf. Here's an example from running a direct telnet session to the box in question: [operator@yyyy operator]# telnet yyyy 110 Trying xxx.xxx.xxx.xxx... Connected to yyyy. Escape character is '^]'. +OK Unauthorized access prohibited USER joeblow +OK PASS joeblowspass +OK Logged in. LIST LIST BAD Error in IMAP command : Unknown command. QUIT QUIT BAD Error in IMAP command : Unknown command. 1 logout If you do a ps -ef on the box and check the processes, at no time does a pop3 process start through this process. However, if you do the ps -ef right after the "LIST" command, you can see that there's an imap process started for user 'joeblow'. Now, if I take xinetd out of the equation and instead use the daemon mode /usr/local/sbin/dovecot... everything works perfectly. I've tried using the tcp_wrappers patch that's available in the unsupported directory on dovecot.org, but I cannot get the configure script to recognize the libwrap I have on the system when I compile dovecot with "--with-libwrap" as specified. I'm using tcp_wrappers for Solaris 9 off sunfreeware, so I know it's on there. I've also created sym links to libwrap.a and tcpd.h in /usr/lib and /usr/include respectively... still no dice. Honestly, I don't care which way dovecot runs (though daemon mode WOULD actually be preferred for performance reasons IF tcp_wrappers were available for use), but I just need it running both IMAP and POP3 somehow. Here are the applicable pop3 and imap sections of my dovecot.conf: -- default_mail_env = mbox:~/mail:INBOX=/var/mail/%1u/%1.1u/%u protocol pop3 { login_executable = /usr/local/libexec/dovecot/pop3-login mail_executable = /usr/local/libexec/dovecot/pop3 pop3_no_flag_updates = no pop3_enable_last = no pop3_uidl_format = %08Xu%08Xv pop3_logout_format = top=%t/%T, retr=%r/%R, del=%d/%m, size=%s pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol imap { login_executable = /usr/local/libexec/dovecot/imap-login mail_executable = /usr/local/libexec/dovecot/imap login_greeting_capability = yes } -- And the respective sections from xinetd.conf: -- service pop3 { socket_type = stream protocol = tcp wait = no user = root server = /usr/local/libexec/dovecot/pop3-login port = 110 flags = REUSE IPv4 rlimit_cpu = 150 instances = 80 cps = 110 10 disable = no } service imap { socket_type = stream protocol = tcp wait = no user = root server = /usr/local/libexec/dovecot/imap-login port = 143 flags = REUSE IPv4 rlimit_cpu = 120 disable = no } -- I hope someone can shed some light on this situation for me. Thank you in advance. --- Tim Meader CNE Internet Services NetCommerce Corporation Tim.Meader(a)gsfc.nasa.gov (301) 286-8013

2 1

[Dovecot] missing empty line in mbox folders with Outlook 2000 client
by Gary Funck 11 Jun '06

11 Jun '06

I recently looked into a problem that has been plaguing me since the switch to dovecot a couple of years back, documented here: http://mailman.rwth-aachen.de/pipermail/procmail/2006-May/024363.html The gist is that when I tell Outlook 2000 to write all outgoing mail into a Sent-mail folder on the IMAP server (using mbox format), I find that the mbox's don't have empty lines separating the messages, (though the Content-Length field is correct. This leads to interoperability problems with programs and scripts that expect each mbox message to be separated by an empty line. (We're running dovecot-1.0-0.beta2.7 under Fedora Core 5 on an x86_64 platform.) Has this mbox behavior been reported before? Is it considered a bug or a feature? Is there a configuration option, or Outlook tweak, that can be enabled to ensure that the mbox's produced by writing messages to them via Outlook, are well-formed (have an empty line separating messages)?

2 1

[Dovecot] Server settings for a busy server
by Pat Hastings 11 Jun '06

11 Jun '06

Hi, We are migrating from a windows server and i have very few stats as to what our current concurrent usage stats are other than about 50,000 active users and 90,000 email messages a day inbound 20,000 outbound. Anyone got some tips for tuning dovecot to handle this load? Below is my config - do the values of login_process_size etc sound correct? Also my logs seem to be written out as root which seems kind of scary do how do I / should I have these written out by the dovecot user. Any feedback greatfully accepted. Regards, Pat protocols = imap pop3 listen = * ssl_disable = no disable_plaintext_auth = no shutdown_clients = yes log_path = /var/log/dovecot/mainlog info_log_path = /var/log/dovecot/infolog log_timestamp = "%Y-%m-%d %H:%M:%S " login_dir = /var/run/dovecot/login login_chroot = yes login_user = dovecot login_process_size = 256 login_process_per_connection = no login_processes_count = 48 login_max_logging_users = 2048 login_greeting = Email server ready. login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c login_log_format = %$: %s first_valid_uid = 100 mail_extra_groups = mail valid_chroot_dirs = /var/vmail mail_debug = no default_mail_env = maildir:/var/vmail/dovecoterror/%domain/%u maildir_copy_with_hardlinks = yes protocol imap { } protocol pop3 { pop3_reuse_xuidl = no pop3_uidl_format =%u pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_client_workarounds = outlook-no-nuls, oe-ns-eoh } auth_executable = /usr/lib/dovecot/dovecot-auth auth_verbose = yes auth_debug = yes auth_debug_passwords = yes auth default { mechanisms = plain passdb pam { } passdb ldap { args = /etc/dovecot/dovecot-ldap.conf } userdb passwd { } userdb ldap { args = /etc/dovecot/dovecot-ldap.conf } user = root } --- [This E-mail has been scanned for viruses but it is your responsibility to maintain up to date anti virus software on the device that you are currently using to read this email. ]

2 1

[Dovecot] Dovecot 1.0beta8 dovecot-auth consumes 100% CPU time on Solaris 10 amd64
by Tore André Klock 11 Jun '06

11 Jun '06

Hello. I hope someone out there can help with this. It is getting pretty urgent. I am running a Solaris 10 server on Opteron (amd64) hardware and have compiled Dovecot 1.0beta8 from source. It has openssl compiled in (after much mucking around with various environment variables and modifying the Makefile), and was built with: $ ./configure --with-ldap --with-ssl-dir=/etc/ssl $ make # make install The variables: CC=/usr/sfw/bin/gcc CFLAGS='-m64 -I/usr/local/ssl/include:/usr/sfw/include:/opt/sfw/include' CPP=/usr/sfw/bin/cpp CPPFLAGS=-I/usr/local/ssl/include/openssl:/usr/sfw/include:/opt/sfw/include CXX=/usr/sfw/bin/g++ LDFLAGS='-m64 -L/usr/local/ssl/lib -R/usr/local/ssl/lib:/usr/sfw/lib:/opt/sfw/lib' LD_LIBRARY_PATH=/usr/local/ssl/lib:/usr/sfw/lib:/opt/sfw/lib It was compiled with gcc version 3.4.3 (csl-sol210-3_4-branch+sol_rpath). I modified the SSL_CFLAGS and SSL_LIBS variables in the Makefile to make it find my openssl install in /usr/local/ssl. The one that came with the OS was broken[1], so I compiled 0.9.8b from source. The configure script for some reason didn't pick this up, even when using CFLAGS, LDFLAGS, etc. At any rate, I successfully set it up to accept SSL/TLS connections and authenticate against an LDAP server. I use the auth_bind authentication method and only one LDAP host. I have confirmed that this works. In fact, dovecot runs just fine with the exception of the dovecot-auth proces, which is thrown into an endless loop. It starts off at maybe 1-2% CPU time, but after a few minutes it is back up to 100%. This is the output from truss(1) pointed at the dovecot-auth process: --cut-- pollsys(0xFFFFFD7FFFDFF6F0, 5, 0xFFFFFD7FFFDFF6D0, 0x00000000) = 0 pollsys(0xFFFFFD7FFFDFF6F0, 5, 0xFFFFFD7FFFDFF6D0, 0x00000000) = 0 pollsys(0x00467DC0, 10, 0xFFFFFD7FFFDFFB10, 0x00000000) = 1 [same sequence repeats ad nauseum] --cut-- This is a sample of top(1) output: --cut-- load averages: 1.00, 1.00, 1.00 08:51:38 60 processes: 55 sleeping, 3 running, 1 zombie, 1 on cpu CPU states: 0.0% idle, 68.3% user, 31.7% kernel, 0.0% iowait, 0.0% swap Memory: 1024M real, 680M free, 71M swap in use, 591M swap free PID USERNAME LWP PRI NICE SIZE RES STATE TIME CPU COMMAND 22875 nobody 1 0 0 0K 0K run 726:22 99.68% dovecot-auth --cut-- Here is a condensed version of my ldap-config: (comments removed, names changed to protect the innocent) --cut-- hosts = ldap.example.com auth_bind = yes auth_bind_userdn = uid=%u,ou=People,o=example.com,o=example.com ldap_version = 3 base = uid=%,ou=People,o=example.com,o=example.com --cut-- This is my condensed dovecot.conf: --cut-- base_dir = /var/run/dovecot/ protocols = imap pop3 listen = * ssl_disable = no ssl_cert_file = /etc/ssl/certs/host.cert ssl_key_file = /etc/ssl/private/host.key ssl_cipher_list = ALL:!LOW disable_plaintext_auth = no shutdown_clients = yes log_path = /var/log/dovecot log_timestamp = "%b %d %H:%M:%S " login_user = dovecot login_process_per_connection = yes verbose_proctitle = yes verbose_ssl = yes first_valid_uid = 100 last_valid_uid = 60000 mail_debug = yes default_mail_env = maildir:/var/mail/%u/Maildir mail_full_filesystem_access = no protocol imap { login_executable = /usr/local/libexec/dovecot/imap-login mail_executable = /usr/local/libexec/dovecot/imap login_greeting_capability = yes imap_client_workarounds = outlook-idle tb-extra-mailbox-sep } protocol pop3 { login_executable = /usr/local/libexec/dovecot/pop3-login mail_executable = /usr/local/libexec/dovecot/pop3 pop3_uidl_format = %08Xu%08Xv pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s mail_plugin_dir = /usr/local/lib/dovecot/pop3 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } auth_executable = /usr/local/libexec/dovecot/dovecot-auth auth_cache_size = 0 auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_verbose = yes auth_debug = no auth default { mechanisms = plain passdb ldap { args = /usr/local/etc/dovecot-ldap.conf } userdb passwd { } user = nobody } --cut-- I may have commented out more than necessary in an attempt to be explicit while I was trying to narrow this down. This is the output of ldd dovecot-auth: --cut-- libpam.so.1 => /lib/64/libpam.so.1 libldap.so.5 => /usr/lib/64/libldap.so.5 libsocket.so.1 => /lib/64/libsocket.so.1 libnsl.so.1 => /lib/64/libnsl.so.1 librt.so.1 => /lib/64/librt.so.1 libsendfile.so.1 => /lib/64/libsendfile.so.1 libc.so.1 => /lib/64/libc.so.1 libcmd.so.1 => /lib/64/libcmd.so.1 libsasl.so.1 => /usr/lib/64/libsasl.so.1 libmd5.so.1 => /lib/64/libmd5.so.1 libnspr4.so => /usr/lib/mps/64/libnspr4.so libplc4.so => /usr/lib/mps/64/libplc4.so libnss3.so => /usr/lib/mps/64/libnss3.so libssl3.so => /usr/lib/mps/64/libssl3.so libmp.so.2 => /lib/64/libmp.so.2 libscf.so.1 => /lib/64/libscf.so.1 libaio.so.1 => /lib/64/libaio.so.1 libpthread.so.1 => /lib/64/libpthread.so.1 libthread.so.1 => /lib/64/libthread.so.1 libdl.so.1 => /lib/64/libdl.so.1 libsoftokn3.so => /usr/lib/mps/amd64/libsoftokn3.so libplds4.so => /usr/lib/mps/amd64/libplds4.so libdoor.so.1 => /lib/64/libdoor.so.1 libuutil.so.1 => /lib/64/libuutil.so.1 libm.so.2 => /lib/64/libm.so.2 --cut-- Notes: - The problem *seems* to occur only when I use LDAP authentication. - Disabling SSL in the config has no effect on the CPU usage. - I am not using NFS for anything. - I use Thunderbird 1.5.0.2 and another client runs Outlook. - There is no indication of any problem in the dovecot or system logs. - I suspected this had to do with the poll method dovecot is compiled with (poll), but it happens even when I compiled it with the select method. As far as I know, none of the other methods are available on Solaris. - I noted that the poll(2) call in Solaris will return immediately given a timeout of zero (-1 is 'forever'). I tried tacking down the use of that system call, but I had to give up on that. I only mention it in case it is a dovecot bug and of any help to Timo. Any help is greatly appreciated. Thank you. - Tore [1] If you use the factory-installed version, you get messages like "Warning: imap-login: SSL_accept() failed: error:1409D08A:SSL routines:SSL3_SETUP_KEY_BLOCK:cipher or hash unavailable" in your dovecot log.

2 7

[Dovecot] Can't read dovecot.conf
by E P 11 Jun '06

11 Jun '06

Hello all, I'm attempting to run dovecot on an HP-UX 11.11 system ... the built went fine, and I've got the program installed. I copied dovecot-example.conf to dovecot.conf and made a few changes to it, then went to sbin and ran the dovecot binary to see what would happen. What happened was this: colin:/usr/local/dovecot/sbin# ./dovecot Error: Error in configuration file /usr/local/dovecot/etc/dovecot.conf line 1: Unknown setting: _cert_file ... which is odd; line 1 of dovecot.conf was actually this: ## Dovecot configuration file ... and the first line that wasn't commented out was this: protocols = imaps So just for fun I changed the first non-commented line to this: protocols=imaps ... and then ran the dovecot binary again. This time the error was subtly different: colin:/usr/local/dovecot/sbin# ./dovecot Error: Error in configuration file /usr/local/dovecot/etc/dovecot.conf line 1: Unknown setting: ert_file ... "aha" says I, "it's having some issue with comments." So I took out every line in dovecot.conf that wasn't a comment, leaving me with just 23 lines: protocols=imaps listen=<IP address> ssl_cert_file=/opt/openssl/certs/imapd.pem ssl_key_file=/opt/openssl/certs/imapd.pem disable_plaintext_auth=yes protocol imap { login_executable=/usr/local/dovecot/libexec/dovecot/imap-login mail_executable=/usr/local/dovecot/libexec/dovecot/imap mail_plugin_dir=/usr/local/dovecot/lib/dovecot } protocol pop3 { } auth_executable=/usr/local/dovecot/libexec/dovecot/dovecot-auth auth default { mechanisms=plain passdb pam { } userdb passwd { } user=root } plugin { } This time, when I ran the binary, I got a new error: colin:/usr/local/dovecot/sbin# ./dovecot Error: Can't use SSL certificate /opt/openssl/certs/dovecot.pem: No such file or directory ... this is odd, because the config file clearly states that it should look for the certificate elsewhere. But just for fun, I made dovecot.pem symlinks in /opt/openssl/certs and /opt/openssl/private. Then I try running again: colin:/usr/local/dovecot/sbin# ./dovecot Error: Missing auth section for server default At this point, it's becoming clear to me that my current tactic isn't doing much, so I read some READMEs, checked the wiki, googled around a bit, and now I'm here. Anyone have hints on this? Thanks -- Elliott

2 1

[Dovecot] Dovecot wont start.
by Cesar Diaz 11 Jun '06

11 Jun '06

I installed Dovecot along with Postfix on a FreeBSD server using the port. When I try to start dovecot I get the following error: Fatal: Can't resolve address : hostname nor servname provided, or not known I have the hostname define on the server and can ping it by FQDN and by just hostname with out problems. Any suggestions are greatly appreciated.

2 1

[Dovecot] postmaster alias
by Tracy R Reed 11 Jun '06

11 Jun '06

I have dovecot configured to use an LDAP database for mail delivery with dovecot-lda. All of of my user accounts and aliases work fine except for postmaster@ which consistantly bounces. I have compared the entry for postmaster with another working alias and see no difference. When I send mail to postmaster I get the following in the logs: Jun 11 02:11:13 server1 postfix/pipe[12083]: 6D6CF33444: to=<postmaster(a)mydomain.com>, orig_to=<postmaster>, relay=dovecot, delay=3, status=bounced (user unknown)Jun 11 02:11:13 server1 deliver(treed(a)mydomain.com): saved mail to INBOX Jun 11 02:11:13 server1 postfix/pipe[12193]: 6D6CF33444: to=<treed(a)mydomain.com>, orig_to=<postmaster>, relay=dovecot, delay=3, status=sent (mydomain.com) Jun 11 02:11:13 server1 postfix/cleanup[12055]: 49F1F33431: message-id=<20060611091113.49F1F33431(a)mail.mydomain.com> Jun 11 02:11:13 server1 postfix/qmgr[29342]: 49F1F33431: from=<>, size=2138, nrcpt=2 (queue active) Jun 11 02:11:13 server1 postfix/qmgr[29342]: 6D6CF33444: removed Jun 11 02:11:13 server1 postfix/smtpd[12089]: 6464D33415: client=d150-39-102.home.cgocable.net[24.150.39.102] Jun 11 02:11:13 server1 postfix/pipe[12193]: 49F1F33431: to=<treed(a)mydomain.com>, orig_to=<root(a)mydomain.com>, relay=dovecot, delay=0, status=sent (mydomain.com) Jun 11 02:11:13 server1 postfix/pipe[12083]: 49F1F33431: to=<myboss(a)mydomain.com>, orig_to=<root(a)mydomain.com>, relay=dovecot, delay=0, status=sent (mydomain.com) Then I get a bounce email back saying: <postmaster(a)drjays.com> (expanded from <postmaster>): user unknown The strange thing is that first I get the bounce and then the mail goes on to be delivered to the two users (me and my boss) specified in the alias as it should be. How is this possible that the user is unknown and then it goes on to deliver to the alias? I am running 1.0.beta8 pulled from CVS May 23 16:46 (PDT) with openldap-2.2.13-4 on CentOS 4.3 Thanks for any clues you can provide! -- Tracy R Reed http://ultraviolet.org

2 1

[Dovecot] mkcert.sh broken
by Erick Calder 10 Jun '06

10 Jun '06

I've just installed dovecot on my FC5 box. I tweaked the dovecot-openssl.cnf and attempted to recreate the cert but get the errors below. I see older postings about this problem on FC2. help? - e # ./mkcert.sh /etc/ssl/certs directory doesn't exist /etc/ssl/private directory doesn't exist error on line -1 of dovecot-openssl.cnf 2810:error:02001002:system library:fopen:No such file or directory:bss_file.c:122:fopen('dovecot-openssl.cnf','rb') 2810:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:125: 2810:error:0E078072:configuration file routines:DEF_LOAD:no such file:conf_def.c:197:

4 6

[Dovecot] IMAP FILE MOVE ERROR
by agreig＠protectionprojects.co.za 10 Jun '06

10 Jun '06

I recently installed dovecot.x86_64 1.0-0.beta8.1.fc5 on a new server. Our network users use Pegasus as their mail readers, accessing their home folder on the server via Samba. Each user has a pop3 set of folders, and we have a shared imap set of folders. This has worked very well for previous versions of dovecot. When moving files between folders on the imap set, we get an error message from Pegasus, as follows: "The IMAP server that manages this mailbox or folder has reported an error during the operation you have attempted to perform." The operation cannot be completed." Operation of the imap INBOX only restores once it is "refreshed" via Pegasus. The maillog shows the following message for this error: "dovecot: IMAP(tekstaff): file mail-cache-transaction.c: line 709 (mail_cache_add): assertion failed: (fixed_size == (unsigned int)-1 || fixed_size == data_size)" A search using find / -name mail-cache-transaction.c does not find such file. I am stumped. Any help to fix this will be much appreciated.

1 0

[Dovecot] imap default folder dont appear..,
by John Von Essen 10 Jun '06

10 Jun '06

Hi, New to list. I am having some issues with dovecot and Outlook. Mail server is sendmail with procmail LDA for supporting /home/username/Maildir. I am talking to IMAP with both Outlook and SquirrelMail. SquirrelMail shows the default IMAP folders under INBOX, namely Sent, Drafts, and Trash for all users. However Outlook does not. Actually, to be more specific, some clients Outlook show the default folders but some do not. On the ones that do not, I am not sure what to do? Those accounts receive mail into the Inbox, but there is no Sent mail folder for outbound email, etc.,. Can someone point me in the right direction. I have six Outlook clients for six users, 2 show the default folders, the others do not. On the users Outlook that do not see the defaults folders, like Sent mail... If I go into SquirrelMail and send an email, I see it in SquirrelMails Sent, but not Outlook?! Thanks in advance for any help.... John

1 0

[Dovecot] Dovecot, IMAP, and mutt
by Travis Poppe 09 Jun '06

09 Jun '06

Hello, I'm running FreeBSD 6.0 release on x86 hardware and am using mutt version 1.5.11. Not running dovecot on/over NFS or anything, just the standard UFS2 filesystem. I'm also using SSL for IMAP. Since dovecot 1.0.b8, I've had to instruct mutt to do things twice (such as deleting) before the changes will actually occur. I've confirmed that this does not happen with dovecot 1.0.b7, which is what I'm using now to work around the problem. To repeat, use mutt 1.5.11 in IMAP/SSL mode with dovecot 1.0.b8 and try to mark some mail for deletion. Then, press the '$' key to enact the changes. You'll see that the piece(s) of mail will still be there after doing so. Pressing the '$' key again will cause the mail to be removed. Any ideas as to what's going on? Thanks, -- Travis Poppe IRC: tlp @ irc.freenode.net

3 2

[Dovecot] Problem with dovecot-lda
by Jef Driesen 09 Jun '06

09 Jun '06

I have installed the dovecot 1.0 beta3 (package included with Ubuntu Dapper Drake) and everything is working very well. Next I wanted to try the dovecot lda (for sieve filtering). In postfix I have "mailbox_command = /usr/lib/dovecot/deliver" and I followed the instructions from http://wiki.dovecot.org/LDA. I only changed "postmaster_address = postmaster(a)localdomain.local" and "user = dovecot" from the example configuration. With this configuration, no mail is delivered (discarded?) and in the logfile there is this error: Jun 5 18:10:08 localhost postfix/local[9630]: BFA6D5A403: to=<jef(a)localdomain.local>, relay=local, delay=0, status=bounced (local configuration error. Command output: Fatal: open(/etc/dovecot/dovecot.conf) failed: Permission denied ) Changing permissions on /etc/dovecot/dovecot.conf to 644 fixes the problem, but I think this is not the best solution. Any ideas?

2 2

[Dovecot] Problem Compiling Dovecot-LDA
by Timothy White 09 Jun '06

09 Jun '06

I'm trying to setup Dovecot-LDA. I grab dovecot beta8 and compiled it with the following options. $ ./configure --without-deliver --with-mysql $ make # make install It builds fine, and I have it running fine now. I then tried to build dovecot-lda from cvs, with the following. $ ./configure --with-dovecot=../dovecot-1.0.beta8/ $ make and it then fails with the following gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -o sievec sievec.o libsieve.a /home/tim/src/dovecot-1.0.beta8/src/lib/liblib.a libsieve.a(script.o)(.text+0xa23): In function `sieve_script_load': /home/tim/src/dovecot-lda/src/libsieve/script.c:435: undefined reference to `map_refresh' libsieve.a(script.o)(.text+0xaf0): In function `sieve_script_unload': /home/tim/src/dovecot-lda/src/libsieve/script.c:462: undefined reference to `map_free' libsieve.a(sieve.o)(.text+0x1e6e): In function `verify_flag': /home/tim/src/dovecot-lda/src/libsieve/sieve.y:951: undefined reference to `imparse_isatom' collect2: ld returned 1 exit status make[2]: *** [sievec] Error 1 make[2]: Leaving directory `/home/tim/src/dovecot-lda/src/libsieve' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/home/tim/src/dovecot-lda/src' make: *** [all-recursive] Error 1 Any ideas as to what is wrong? Grepping the src files for map_refresh, map_free, and imparse_isatom only show references in dovecot-lda, in src/imparse.c and src/map.c. It seems to be a problem with src/libsieve when trying to build the sieve stuff. But I'm not sure. Thanks Tim -- Linux Counter user #273956

3 3

[Dovecot] Dovecot Authentication through LDAP Server
by ashok cvs 09 Jun '06

09 Jun '06

I have a Samba PDC with LDAP (samba version 3.0.21c with Openldap 2.3.19). where i have all the users. I have configured sendmail on another system with dovecot as IMAP and POP3 server. I wanted to enable user authentication from LDAP server which is on samba PDC. So configured /etc/dovecot.conf ################################################################ protocols = pop3 imap imap_listen = [::] pop3_listen = [::] login_dir = /var/run/dovecot-login login = imap login_user = testuser login = pop3 verbose_proctitle = yes maildir_copy_with_hardlinks = yes mbox_locks = fcntl auth = default auth_mechanisms = plain digest-md5 auth_userdb = ldap /etc/dovecot-ldap.conf auth_passdb = ldap /etc/dovecot-ldap.conf auth_user = dovecot auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ ################################################################ configured /etc/dovecot-ldap.conf ####################################################################### # NOTE: We don't support "authentication binds", so you'll have to give # dovecot-auth read access to userPassword field in LDAP server. With OpenLDAP # this is done by modifying /etc/ldap/slapd.conf. There should already be # something like this: # # access to attribute=userPassword # by dn="<dovecot's dn>" read # add this # by anonymous auth # by self write # by * none # Space separated list of LDAP hosts to use. host:port is allowed too. hosts = 192.168.129.18 # Distinguished Name - the username used to login to the LDAP server dn = uid=root,ou=People,dc=msdpl,dc=com # Password for LDAP server dnpass = mobil5@b1d # LDAP protocol version to use. Likely 2 or 3. ldap_version = 3 # LDAP base base = dc=msdpl,dc=com # Dereference: never, searching, finding, always deref = never # Search scope: base, onelevel, subtree scope = subtree # User attributes in order: # Virtual user name (user@domain) # Home directory # MAIL environment # System user name (for initgroups()) # System UID # System GID #user_attrs = uid,homeDirectory,,uid,uidNumber,gidNumber user_attrs = uid,homeDirectory,,uid,, # Filter for user lookup. Some variables can be used: # %u - username # %n - user part in user@domain, same as %u if there's no domain # %d - domain part in user@domain, empty if user there's no domain user_filter = (&(objectClass=posixAccount)(uid=%u)) #ser_filter = (&(objectClass=sambaSamAccount)(uid=%u)) # Password checking attributes in order: # Virtual user name (user@domain) # Password, may optionally start with {type}, eg. {crypt} pass_attrs = uid,userPassword # Filter for password lookups #pass_filter = (&(objectClass=posixAccount)(uid=%u)) # Default password scheme. "{scheme}" before password overrides this. # Currently supported schemes include PLAIN, PLAIN-MD5, DIGEST-MD5, CRYPT #default_pass_scheme = CRYPT # You can use same UID and GID for all user accounts if you really want to. # If the UID/GID is still found from LDAP reply, it overrides these values. #user_global_uid = 100 #user_global_gid = 100 ####################################################################### The following is the error when we check using [root]#telnet mymailserverip 110 Trying 192.168.129.248 Connected to testmail.mydomain.com (192.168.129.248) Escape character is '^]`. user dcadmin pass mypass ERR-Authentication Failure The following is the log output of /var/log/maillog ######################################################################### Jun 8 13:09:16 testmail dovecot-auth: ldap(dcadmin): No password in reply Jun 8 13:10:16 testmail pop3-login: Disconnected: Inactivity [::ffff: 127.0.0.1] Jun 8 13:10:26 testmail dovecot-auth: ldap(root): No password in reply Jun 8 13:11:26 testmail pop3-login: Disconnected: Inactivity [::ffff: 127.0.0.1] Jun 8 13:11:38 testmail dovecot-auth: LDAP: ldap_result() failed: Can't contact LDAP server Jun 8 13:13:46 testmail dovecot-auth: ldap(root): No password in reply Jun 8 13:13:46 testmail imap-login: Disconnected [::ffff:127.0.0.1] Jun 8 13:14:03 testmail dovecot-auth: ldap(dcadmin): No password in reply Jun 8 13:14:03 testmail imap-login: Disconnected [::ffff:127.0.0.1] ############################################################################ Regards Niranjan

2 1

[Dovecot] Login issue
by "M. Tolga Özses" 09 Jun '06

09 Jun '06

Hi, cat /var/log/dovecot.log|grep -i jun\ 09 dovecot: Jun 09 09:35:26 Info: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=192.168.1.2 rip=212.98.201.1 resp=<hidden> dovecot: Jun 09 09:35:26 Info: auth(default): client out: CONT 1 dovecot: Jun 09 09:35:26 Info: auth(default): client in: CONT<hidden> dovecot: Jun 09 09:35:26 Info: auth(default): client out: OK 1 user=kabuto dovecot: Jun 09 09:35:26 Info: auth(default): master in: REQUEST 13 12652 1 dovecot: Jun 09 09:35:26 Info: auth(default): master out: USER 13 kabuto system_user=kabuto uid=1000 gid=100 home=/home/kabuto dovecot: Jun 09 09:35:26 Info: pop3-login: Login: user=<kabuto>, method=PLAIN, rip=212.98.201.1, lip=192.168.1.2 dovecot: Jun 09 09:35:26 Info: POP3(kabuto): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Does this look right? I'm still not getting any e-mails from outside world. My latest .conf file is at http://www.kunduz.org/dovecot.conf. The last change I made was to out uncomment pop3_uidl_format as I was suggested yesterday. Regards,

2 2

[Dovecot] Error building on OpenBSD 3.9
by B.O.F.H. 08 Jun '06

08 Jun '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 This is for all versions from 1.0b3 - 1.0b8 All crash at the same place: Making all in auth gmake[3]: Entering directory `/src/mail/dovecot-1.0.beta8/src/auth' if gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../../src/lib - -I../../src/lib-sql -I../../src/lib-settings -I../../src/lib-ntlm - -DAUTH_MODULE_DIR=\""/usr/local/lib/dovecot/auth"\" - -DPKG_LIBEXECDIR=\""/usr/local/libexec/dovecot"\" -I@includedir@ @INCLUDE_des@ -I/usr/local/include -I/usr/include/kerberosV - -std=gnu99 -O2 -march=athlon -pipe -Wall -W -Wmissing-prototypes - -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 - -Wbad-function-cast -MT mycrypt.o -MD -MP -MF ".deps/mycrypt.Tpo" - -c -o mycrypt.o mycrypt.c; \ then mv -f ".deps/mycrypt.Tpo" ".deps/mycrypt.Po"; else rm -f ".deps/mycrypt.Tpo"; exit 1; fi gcc: cannot specify -o with -c or -S and multiple compilations gmake[3]: *** [mycrypt.o] Error 1 gmake[3]: Leaving directory `/src/mail/dovecot-1.0.beta8/src/auth' gmake[2]: *** [all-recursive] Error 1 gmake[2]: Leaving directory `/src/mail/dovecot-1.0.beta8/src' gmake[1]: *** [all-recursive] Error 1 gmake[1]: Leaving directory `/src/mail/dovecot-1.0.beta8' gmake: *** [all] Error 2 Gnu-make versus BSD make doesn't differ. Compile options were: ./configure \ - --sysconfdir=/etc/dovecot \ - --localstatedir=/var \ - --infodir=/usr/share/info \ - --mandir=/usr/share/man \ - --disable-rpath \ - --enable-ipv6 \ - --enable-asserts \ - --without-shadow \ - --without-pam \ - --without-vpopmail \ - --with-pgsql \ - --with-mysql \ - --with-ssl=openssl \ - --with-ssldir=/etc/ssl \ - --with-storages='maildir mbox' \ - --with-sql-drivers \ CFLAGS='-O2 -march=athlon -pipe' \ LDFLAGS='-L/usr/local/lib' \ CPPFLAGS='-I/usr/local/include -I/usr/include/kerberosV' What other data can I provide to help figure out what's going wrong? - -- Ed V. IBM: Into Building Money 7 June 2006 17:52:03 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (MingW32) iQIVAwUBRIdnZKfRmhqF/IZAAQrVUg//U0L4agoc5WGQ8gvj0XiEclzj+izer635 NYppYOc4AicVKq1Hp3HbcwaYcWYBY0nubkcUemSk+t8V/2qcZY2Y3rvaQo6B2aj8 rQF8Wj8BdqIzVMsX4IeVJO7XQlI7xUA/vaEOeL69dx43M/+7VE673YuaBpHYLvez UwXx/4pWujg0HbSuuX1SqFg5VntAE2XppxfukHmbK4FYfNbmWWGYKuAwAMqdr35t r+2cN8GOrk9nRBgisl2ADJW8YbDYvrj1DVcrNeo2cIeK68kqXU8knhCNxs9fXr75 pNRP811rdDLXQur66JHSlGdcJWOSNuoKUDUWLoJ5vpuQP/QlCpF2IfJ5kiK7rraJ 56q4Jbw63IHqYOiEC+yb2pGcgoh7tOOBSGTtlmzorym+0lOBS2SSKz7xd0+zfeU2 yHlRs5af13nCWG5ZV9e+gdyLuvZkd+8H9RTQyv2pbBgn9GHjq62HreDP/Drj6/DA HfHMXOtDF0tkfWbedIDD6SCeH4ptPf6FOqRd0BVdzuMk0Hi4uFeiChmkdXJYo9Vn c3176FN31fHmc7ZJm1P7MjAPdzAI/QP+vGiucMJg9bNTZVVOs5t/4aKMdG183zRT 5UZR4x+7ZA1JKZ4NgfVuaTM3khsgo9lQgw+A8QwrOOwKFGaek9By0AKxbJ06wIcg BFOZZSoKgWc= =U0oQ -----END PGP SIGNATURE-----

3 6

[Dovecot] a bug in the LDAP code
by Udo Rader 08 Jun '06

08 Jun '06

Hi, I was heaving some grave problems with dovecot's ldap client that left me with the following settings for virtual users: -------CUT------- mbox: data=/virtual/oeush.at/home/f.someone/mail/:INBOX=/var/mail/f.someone.oeush.at -------CUT------- data in that case was correct, yet the INBOX location was wrong, this should have been /virtual/oeush.at/var/mail/f.someone.oeush.at instead. My settings for the retrieval of the mail environment in /etc/dovecot/dovecot-ldap.conf were like this: -------CUT------- user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid,MailMessageStore=mail -------CUT------- now at first glance this seems correct, but the problem was the upper cased "MailMessageStore" attribute name. changing it to "mailMessageStore" gave me the correct settings: -------CUT------- mbox: data=/virtual/oeush.at/home/f.someone/mail/:INBOX=/virtual/oeush.at/var/mail/f.someone.oeush.at -------CUT------- I don't have any of the LDAP RFCs ready, but I think that per default the case of the attribute _names_ should not matter when querying an ldap server. Udo Rader -- B e s t S o l u t i o n . a t EDV Systemhaus GmbH ------------------------------------------------------------------------ udo rader technischer leiter/CTO mobile ++43 660 5263642 ------------------------------------------------------------------------ eduard-bodem-gasse 8/3 A-6020 innsbruck fax ++43 512 935833 http://www.bestsolution.at phone ++43 512 935834

2 1

[Dovecot] Login issue
by "M. Tolga Özses" 08 Jun '06

08 Jun '06

Hi, I have a login issue. I do everything I can think of, but can't login. My .conf file is at http://kabuto.kunduz.org/dovecot.conf and I make slight changes everytime I try a new thing. I last set disable_plaintext_auth to yes and when I try to login using Thunderbird, I get *Code:* Sending of username did not succeed. Mail server mail.somedomain.org responded: Plaintext authentication disabled. , and dovecot.log reads *Code:* Info: pop3-login: Login failed: Plaintext authentication disabled: method=PLAIN, rip=212.98.201.1, lip=192.168.1.2. When I set disable_plaintext_auth to no and try again, I get *Code:* Sending of password did not succeed. Mail server mail.somedomain.org responded: Authentication failed and dovecot.log reads *Code:* dovecot: Jun 07 16:05:45 Info: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=192.168.1.2 rip=212.98.201.1 resp=<hidden> dovecot: Jun 07 16:05:45 Info: auth(default): client out: CONT 1 dovecot: Jun 07 16:05:45 Info: auth(default): client in: CONT<hidden> dovecot: Jun 07 16:05:45 Info: auth(default): pam(kabuto,212.98.201.1): pam_authenticate() failed: Authentication failure dovecot: Jun 07 16:05:46 Info: auth(default): client out: FAIL 1 user=kabuto dovecot: Jun 07 16:05:47 Info: auth(default): client in: AUTH 2 PLAIN service=POP3 lip=192.168.1.2 rip=212.98.201.1 resp=<hidden> dovecot: Jun 07 16:05:47 Info: auth(default): pam(kabuto,212.98.201.1): pam_authenticate() failed: Authentication failure dovecot: Jun 07 16:05:48 Info: auth(default): client out: FAIL 2 user=kabuto dovecot: Jun 07 16:05:51 Info: pop3-login: Disconnected: user=<kabuto>, method=PLAIN, rip=212.98.201.1, lip=192.168.1.2 Can you help me with this? Sorry that it is long, but it was the only way to describe completely. Best regards,

3 3

RE: [Dovecot] Using MySQL to store email?
by Joshua Goodall 08 Jun '06

08 Jun '06

Marc Perkel scribbled: > Repeat after me - think outside the box. Did you miss the part where I said we've already tried this? Not only have we thought outside the box, but we've smashed it up and built several alternatives to see which one sucked the least. Turns out, SQL backends suck the most. Please try to keep up :) Marc Perkel also scribbled: > To do this with MySQL would be trivial. To do it without a database > isn't possible. Actually you could do that with a tiny Sieve extension. I don't think you really understand what you are even proposing. Your statement would be better phrased "to do it without an index would be slow". If you wanted to create a database server for mail, with a mail-specific query language, then that database might be called "Dovecot", and the query language might be called "IMAP". Innovation is not an excuse for lousy engineering. As usual, it turns out to be bad design practice to say "let's deploy shinytoy for feature X!" rather than say "we need capability X! What's a creative way to achieve that?". Which is why necessity is the mother of invention. /JG

1 0

RE: [Dovecot] Using MySQL to store email?
by Joshua Goodall 07 Jun '06

07 Jun '06

Marc Perkel: > Suppose I want to move all message from a specific host to another folder. > UPDATE table SET folder=new-folder WHERE host=value; > > With databases you can do things you would have to write complex programs > to do with files. Things that you would consider to be impossible are > trivial with databases. > > This outside the box. People who optimise their systems for shiny cute features rather than the common case get all the hacks they deserve. Repeat after me: design for the common case. Also your proposed sql above and implications (arbitrary operations based on mail metadata i.e. headers) seems to involve indexing every mail header on delivery. Good luck with that one large scale mail storage. Did you want a mail database, or an OLAP system? >-) /jg

3 2

RE: [Dovecot] Using MySQL to store email?
by Joshua Goodall 07 Jun '06

07 Jun '06

Marc Perkel trolled: > So Timo, > > Have you considered the idea of storing all the email in a MySQL > database? Seems to me that MySQL could somplify all the backend stuff > that everyone struggles with and with replication one could create very > massive and reliable systems. What would it take to use MySQL that way? Maybe we could recode Dovecot in PHP, too. Sorry, that was nasty. However, having recently experimented with a very large mail storage system using mysql, I strongly advise against this avenue. In particular, the two main backends have serious deficiencies when you get up to the multi-gigabyte ranges: * MyISAM doesn't restart in constant time. * InnoDB's next-key locking kills performance on large blob inserts & deletes. Anyway, what do you mean, everyone struggles with backends? Dovecot's backends are fast, modular and reliable. Regarding replication; all good logical volume managers can do this. Regarding massive; all good filesystems can do this. Regarding reliable; I guarantee that mysql reliability (when properly managed) is still lower than that of a filesystem (when properly managed). In fact, the whole argument is specious. Filesystems already are databases, optimised for storing arbitrary-sized data objects using a hierarchical key, which is practically the definition of mail storage. /jg

2 1