- dovecot - dovecot.org

[Dovecot] Dovecot 1.0beta7: STARTTLS/SSL not wanting to start
by Mike Brudenell 11 Jun '06

11 Jun '06

Greetings - I have been looking at Dovecot with a view to migrating us to it from the Washington IMAP server on our Sun systems. To start our testing we first of all installed the pre-built version of Dovecot from the Blastwave (www.blastwave.org) community supported packaged software site. This was Dovecot 0.99.10.4 and we successfully got it working in our test environment: at first just with regular IMAP, then with STARTTLS too. For the latter we installed a properly signed certificate and it works fine: mail clients can connect, use STARTTLS and then use the encrypted connection. I then downloaded the source code for Dovecot 1.0beta7 and built this myself from source, against the OpenSSL 0.9.8 libraries. I configured Dovecot to use the same certificate and key files as had been used for the earlier version we had just tried out. Whilst 1.0beta7 works fine for regular IMAP it just does not want to start SSL using STARTTLS at all. The error that is getting logged in the syslog file is: <date etc> ... dovecot: [ID 107833 mail.warning] imap-login: SSL_accept() failed: error:140D308A:SSL routines:TLS1_SETUP_KEY_BLOCK:cipher or hash unavailable [ddd.ddd.ddd.ddd] I see in the archived for the list archives that this same problem was asked about for 1.0beta3 but without a solution I could see. Could someone offer any insight/help, please? Cheers, Mike Brudenell -- The Computing Service, University of York, Heslington, York Yo10 5DD, UK Tel:+44-1904-433811 FAX:+44-1904-433740 * Unsolicited commercial e-mail is NOT welcome at this e-mail address. *

3 3

[Dovecot] Quotas and LDAP
by Stephan Müller 11 Jun '06

11 Jun '06

Hi, first of all, it is very nice that dovecot has quotas now! Thank you very much. Now, I want to use quotas with LDAP requests, but I am having the following issues. First, contrary to what is written in the Wiki about quota and LDAP ("# quotaStorage must be in the format mentioned above, # For example: dirsize:storage=10240"), it is possible to have an LDAP field with just a number in it. The configuration in dovecot-ldap.conf looks like: user_attrs = homedir=home,uidnumber=uid,primaryGroupID=gid,quotanumber=quota=maildir:storage This works (as tested - I guess, it works as long as the quota entry is the last entry) and you also see it in the logs: Jun 11 19:10:36 inet dovecot: auth(default): master out: USER^I8^Ismueller^Iuid= 76340^Igid=513^Iquota=maildir:storage=90000000^Ihome=/home/dozenten/smueller/ Question now: is this intended (meaning, is this configuration possibility here to stay)? If yes, can you please update the wiki? Second issue: according to the description, the quota number is the size in KB. Is there a chance to change it to bytes? Reason: I am using Postfix with the VDA extension. There, the quota is to be given in bytes. Now, as lazy as I am, I only want to maintain one value for the quota. As I personally think that a quota given in bytes is more flexible, I would ask whether the following change can be made to dovecot: --- quota-maildir.c.orig 2006-06-11 19:15:55.000000000 +0200 +++ quota-maildir.c 2006-06-11 19:16:13.000000000 +0200 @@ -526,7 +526,7 @@ for (; *args != '\0'; args++) { if (strncmp(*args, "storage=", 8) == 0) { - size = strtoull(*args + 8, NULL, 10) * 1024; + size = strtoull(*args + 8, NULL, 10); if (size != 0) root->message_bytes_limit = size; root->master_message_limits = TRUE; Thanks Stephan -- | Those that bite the hand that feeds them are | | doomed to lick the boot that kicks them. |

2 2

[Dovecot] beta8: complaint about tilde at startup
by Jeff A. Earickson 11 Jun '06

11 Jun '06

Timo, After installing beta8 on Solaris 10 sparc and starting it for the first time, I noticed this in my syslog: May 14 19:35:45 emerald dovecot: [ID 475045 mail.info] Dovecot v1.0.beta8 starting up May 14 19:35:47 emerald dovecot: [ID 536776 mail.error] stat(~) failed: No such file or directory The only appearance of the tilde (~) in my dovecot.conf is here: default_mail_env = mbox:~/mail:INBOX=/var/mail/%1u/%u:INDEX=~ Is the INDEX definition wrong? Or is this a bug? My setup: Solaris 10, mbox format, home directories are local UFS filesystems, INBOX is an NFS-mounted filesystem from another S10 box (NFS version 4). Jeff Earickson Colby College

4 3

[Dovecot] maildir quota not including INBOX
by Bill Boebel 11 Jun '06

11 Jun '06

The maildir quota plugin doesn't appear to be including the INBOX in the quota calculation that is reported by GETQUOTAROOT. I took a look at the code and it appears that in this file "src/plugins/quota/quota-maildir.c", the function "maildirsize_recalculate" relies on all of the folders being listed when "maildir_list_init" is called. However the INBOX is not included in that listing, so its current storage size is not included. I couldn't figure out what patch would be needed to fix this, but I'm sure it is something simple. Any ideas? Bill

2 1

[Dovecot] LIST command ignores "hidden=yes" for default namespace
by Bill Boebel 11 Jun '06

11 Jun '06

I'm not sure if this is a bug or just an undesirable feature, but when I have our namespace configured to match Courier's "INBOX." functionality, Dovecot forces me to also define a default namespace (with no prefix). Without the default namespace defined I get "NO Unknown namespace." errors when trying to subscribe or unsubscribe folders. So I have configured my namespaces like this: namespace private { separator = . prefix = INBOX. inbox = no } namespace private { separator = . prefix = inbox = yes hidden = yes } However with this configuration, LIST commands ignore the "hidden = yes" setting on the default namespace and IMAP clients end up displaying an identical folder listing twice... 2 list "" "*" * LIST (\HasChildren) "." "INBOX" * LIST (\HasNoChildren) "." "INBOX.spam" * LIST (\HasNoChildren) "." "INBOX.Trash" * LIST (\HasNoChildren) "." "INBOX.Sent" * LIST (\HasNoChildren) "." "INBOX.Drafts" * LIST (\HasNoChildren) "." "INBOX.RSS" * LIST (\HasNoChildren) "." "INBOX.test" * LIST (\HasNoChildren) "." "INBOX.test2" * LIST (\HasNoChildren) "." "spam" * LIST (\HasNoChildren) "." "Trash" * LIST (\HasNoChildren) "." "Sent" * LIST (\HasNoChildren) "." "Drafts" * LIST (\HasNoChildren) "." "RSS" * LIST (\HasNoChildren) "." "test" * LIST (\HasNoChildren) "." "test2" 2 OK List completed. Again, I am not sure if this was intended, but either way it is undesirable for us. I even had a couple customers delete one of their duplicate folders thinking that was safe, but it deleted both folders - of course. To force Dovecot to hide mailboxes in the default namespace I made the following change: src/imap/cmd-list.c: @247 + if (ns->hidden) { + return; + }

2 1

[Dovecot] Bug: maildirsize not updated when deleting folders
by Bill Boebel 11 Jun '06

11 Jun '06

When using maildir++ quotas, if you delete an IMAP folder, the maildirsize file should get updated so that it subtracts the size of the messages that were contained in the deleted IMAP folder. However Dovecot is not doing this, resulting in Dovecot showing an incorrect quota value until the next time the maildirsize file is rebuilt. Bill

2 2

[Dovecot] Outside mails
by Tolga 11 Jun '06

11 Jun '06

Hi, I recently found out that I was able to get system mails, but not mails from the outside world. What setting do I have to fiddle with for this? Regards,

5 6

[Dovecot] Quotas and LDAP
by Stephan Müller 11 Jun '06

11 Jun '06

Hi, first of all, it is very nice that dovecot has quotas now! Thank you very much. Now, I want to use quotas with LDAP requests, but I am having the following issues. First, contrary to what is written in the Wiki about quota and LDAP ("# quotaStorage must be in the format mentioned above, # For example: dirsize:storage=10240"), it is possible to have an LDAP field with just a number in it. The configuration in dovecot-ldap.conf looks like: user_attrs = homedir=home,uidnumber=uid,primaryGroupID=gid,quotanumber=quota=maildir:storage This works (as tested - I guess, it works as long as the quota entry is the last entry) and you also see it in the logs: Jun 11 19:10:36 inet dovecot: auth(default): master out: USER^I8^Ismueller^Iuid= 76340^Igid=513^Iquota=maildir:storage=90000000^Ihome=/home/dozenten/smueller/ Question now: is this intended (meaning, is this configuration possibility here to stay)? If yes, can you please update the wiki? Second issue: according to the description, the quota number is the size in KB. Is there a chance to change it to bytes? Reason: I am using Postfix with the VDA extension. There, the quota is to be given in bytes. Now, as lazy as I am, I only want to maintain one value for the quota. As I personally think that a quota given in bytes is more flexible, I would ask whether the following change can be made to dovecot: --- quota-maildir.c.orig 2006-06-11 19:15:55.000000000 +0200 +++ quota-maildir.c 2006-06-11 19:16:13.000000000 +0200 @@ -526,7 +526,7 @@ for (; *args != '\0'; args++) { if (strncmp(*args, "storage=", 8) == 0) { - size = strtoull(*args + 8, NULL, 10) * 1024; + size = strtoull(*args + 8, NULL, 10); if (size != 0) root->message_bytes_limit = size; root->master_message_limits = TRUE; Thanks Stephan -- | Those that bite the hand that feeds them are | | doomed to lick the boot that kicks them. |

1 0

[Dovecot] RFC 3501 compliance issue: body-type-msg incorrect
by Tony Kay 11 Jun '06

11 Jun '06

Hi, I am using Dovecot 1.0 beta 7, moving to beta8 probably tomorrow. I am seeing a few RFC compliance issues with IMAP responses. I have an in-house IMAP client that caches IMAP data for a web mail system (it parses millions of IMAP interactions a day), and it reports whenever it gets a line that does not look RFC compliant. Unfortunately, users modify their mailboxes before I can get a copy that allows me to reproduce the errors. However, I can at least show you some examples of the response lines I'm seeing, since they are copied verbatim to my logs when they happen. I saw one case of imap-literal coming across without a \r\n sequence: * 1135 FETCH (UID 1345 RFC822.SIZE 4813894 BODY (("text" "plain" ("charset" "ISO-8859-1") NIL NIL "7bit" 415 6)("application" "octet-stream" ("name" {59}C:\\Documents and Settings\\Mitch\\Desktop\\AIR JORDANS.ppt) NIL NIL "base64" 4811938) "mixed") BODY[1]<0> {80} We sorted out what technical difficulties we having and have posted a corrected BODY[HEADER.FIELDS (FROM TO SUBJECT)] {90} From: XXX To: XXX Subject: Sports group II back online ) This one is probably some weird malformed message, since literal strings processing is certainly not broken in general. The much more common problem is when people receive a message that has a message embedded using the RFC3501 body-type-msg rule. Here is a sample incorrect response: * 4154 FETCH (UID 27140 RFC822.SIZE 14078 BODY (("text" "plain" ("charset" "ISO-8859-1" "format" "flowed") NIL NIL "7bit" 2 1)("message" "rfc822" ("name" "casbudmgr: FW: deans-dirs: Scholarship Announcement") NIL NIL "7bit" 11694 ("Wed, 12 Apr 2006 14:42:04 -0700" "casbudmgr: FW: deans-dirs: Scholarship Announcement" (("xxxxxxx xxxx" NIL "xxxxxx" "xxx.xxxxxxx.xxx")) ((NIL NIL "xxxxxxxxxxxxxxx" "lists.xxxxxxxxxxx")) ((NIL NIL "casbudmgr" "xxxxx.xxxxxxx.xxx")) ((NIL NIL "xxxxxxxxx" "xxxxxxxxxxxxxxxxx")) NIL NIL NIL <AF3B91355406B440A6E838338E63A742C6435B@xxxxxxxxxxxxxxxxxxxxxdu>") ("text" "plain" ("charset" "us-ascii") NIL NIL "quoted-printable" 2047 50)("text" "html" ("charset" "us-ascii") NIL NIL "quoted-printable" 6565 189) "alternative" 302)("text" "x-vcard" ("charset" "utf-8" "name" "ddkintz.vcf") NIL NIL "7bit" 415 14) "mixed")) Look through the line to the point where you see: "alternative" 302. The part the proceeds this is a body-type-mpart rule, but it is missing a set of parentheses...i.e. there should be an ending paren after alternative, and a beginning paren before the set of 1parts that precede it. This looks like a similar problem to what was in imap_bodystructure.c a while back. -- Anthony Kay University Computing Center (541) 346-1719 GPG Fingerprint: B0DB D46A 60AF FAE7 A94A 5075 0CB4 4D88 9F4F 7F09 Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the Universe trying to produce bigger and better idiots. So far, the Universe is winning. Rich Cook

3 4

[Dovecot] Fatal: chdir(/home/xxxxx) failed with uid xxx: Permission denied
by Nick Ortiz 11 Jun '06

11 Jun '06

I've had this issue for sometime, I finally gave up and switched to Courier-Imap but I'm finding I hate data storage / structure so I decided to give dovecot another go but am still running into the same issue. I had this working once upon a time and can not for the life of me figure it out. Here's some basic info. Dist: Gentoo 2005.1 Emerge Info: net-mail/dovecot-1.0_beta8 USE="ipv6 pam ssl -debug -kerberos -ldap -mbox -mysql* -pop3d -postgres -vpopmail" Permissions for /home: drwxr-x--x Owner for /home: root Permissions for /home/*: drwxr-xr-x Owner for /home/*: username:username dovecot: May 18 23:40:04 Info: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=xxx.xxx.xxx.xxx rip=xxx.xxx.xxx.xxx dovecot: May 18 23:40:04 Info: auth(default): client out: CONT 1 dovecot: May 18 23:40:04 Info: auth(default): client in: CONT<hidden> dovecot: May 18 23:40:04 Info: auth(default): client out: OK 1 user=xxxx dovecot: May 18 23:40:04 Fatal: chdir(/home/xxxxx) failed with uid 502: Permission denied dovecot: May 18 23:40:04 Info: auth(default): master in: REQUEST 2 4464 1 dovecot: May 18 23:40:04 Info: auth(default): master out: USER 2 xxxx system_user=xxxx uid=502 gid=506 home=/home/xxxx ovecot: May 18 23:40:04 Info: imap-login: Login: user=<xxxx>, method=plain, rip=xxx.xxx.xxx.xxx, lip=xxx.xxx.xxx.xxx, TLS dovecot: May 18 23:40:04 Error: child 4488 (imap) returned error 89 Only real resolution I can find refers to SELinux which I do not have installed. I can provide my dovecot.conf if needed.

2 1

[Dovecot] LDAP imaps,pop3s authentication problem
by Peter Susán 11 Jun '06

11 Jun '06

Hi, i'm using LDAP authentication with dovecot, and it's working flawlessly,until i enable SSL.. (even imaps or pop3s) i can't log in... if i test the certificates, and the login with the `openssl s_client - host example.com -port 993 -verify -debug` command, it works, until i want to log in... it lists the capibilities, but when i login it says "01 NO LOGIN failed"... no log messages appears in the logfile, only when i login without SSL... i've tried the newest beta8 and older versions of the server, but the effect is the same.. i'm really confused, becouse i have lots servers running dovecot, but with mysql authentication, and i didn't have any problems with them... the biggest problem is, that no log messages being generated during the process (with or without auth_debug, and auth_verbose options enabled), so i can't figure it out why is it happening.. it's working if i authenticate from other sources, just like passdb, or mysql... thx for the answers in advance, ->Peter Susán tel.: +36-20-395-3751 mail: peter(a)susinet.hu

2 1

[Dovecot] beta8: cores on corrupted index file
by Jeff A. Earickson 11 Jun '06

11 Jun '06

Timo, I saw a couple of these cores over the weekend. The syslog says: May 21 19:04:48 emerald dovecot: [ID 107833 mail.error] IMAP(user): Corrupted index cache file /home/students/s/user/.imap/sent-mail-apr-2004/dovecot.index.cache: indexid changed With a resulting core file from imap at this time. I also discovered a remaining lock file on the person's imap file: -rw------- 1 user user 3088940 May 10 2004 sent-mail-apr-2004 -rw------- 1 user user 13 May 21 19:04 sent-mail-apr-2004.lock The lockfile contains the pid of the process that cores: May 21 19:04:48 emerald dovecot: [ID 684838 mail.error] child 17480 (imap) killed with signal 11 The gdb output of the core file is attached. Jeff Earickson Colby College

2 1

[Dovecot] Dovecot statistics -- I hope this is a stupid question
by Jon Callas 11 Jun '06

11 Jun '06

Is there a way for me to know the last time a user logged in? i'm running Dovecot with Postfix with the authentication bridge and completely virtual everything. It would be nice to know the last time someone logged in, so four years from now I can delete the ones that haven't been used in three years. Jon

2 1

[Dovecot] Slow caching
by John Rowe 11 Jun '06

11 Jun '06

I have just installed dovecot on a RedHat Enterprise 4 clone with exim MTA, procmail LDA and mbox format. I'm getting complaints of slow caching from a Mac user: I think there's still something very sick with [host]'s IMAP server: it just took a full five minutes to cache an attachment (350kb) in an email from [person]. In that time, I couldn't do anything else with mail; it was essentially locked. The user's inbox is in /var/spool/mail (where there are no idexes), there areindex files within his home directory: ./.imap/INBOX: total 1160 -rw------- 1 xyz users 60656 May 30 14:22 dovecot.index -rw------- 1 xyz users 891904 May 30 14:22 dovecot.index.cache -rw------- 1 xyz users 78428 May 30 14:22 dovecot.index.log -rw------- 1 xyz users 131920 May 26 11:29 dovecot.index.log.2 Everything is on local disk, there are no NFS mounts at all. Any thoughts? Thanks John

3 3

[Dovecot] Inbox in two different locations
by arilinux 11 Jun '06

11 Jun '06

Hello I'm running dovecot v1.0.beta3 on a fedora 4 machine. I'm looking for the way to tell dovecot that some users have inbox (mailbox) in /var/mail/%u and some have inbox (maildir) in /home/%u/mail. Anyway?

2 1

[Dovecot] deliver LDA status?
by Lev Serebryakov 11 Jun '06

11 Jun '06

Hello dovecot, wiki mentions `deliver', but it doesn't include into 1.0.beta8 dovecot distribution. It can be downlaoded from CVS, and even contains two tags on files, that seems to eb release tags :) But what is official status of `deliver' tool? Is it stable, or experemental, or what? Are here any plans when it will be packaged ad announced? -- Best regards, Lev mailto:lev@serebryakov.spb.ru

2 1

[Dovecot] Can't run POP3 and IMAP simultaneously from xinetd...
by Timothy Meader 11 Jun '06

11 Jun '06

Hello all, I'm hoping you can help out with an issue I'm having running dovecot-beta8 on Solaris 9 (SPARC). The reason I need to run them from xinetd is that we require the filtering ability that tcp_wrappers provide. My issue is that, when running both from xinetd, IMAP runs fine, but then, when you try to POP in to check mail on the same box, it seems that the login section is handled via pop3-login... but all subsequent commands are handled via the imap interpreter. It's as if it's getting passed off to /usr/local/libexec/dovecot/imap instead of /usr/local/libexec/dovecot/pop3 as is specified in dovecot.conf. Here's an example from running a direct telnet session to the box in question: [operator@yyyy operator]# telnet yyyy 110 Trying xxx.xxx.xxx.xxx... Connected to yyyy. Escape character is '^]'. +OK Unauthorized access prohibited USER joeblow +OK PASS joeblowspass +OK Logged in. LIST LIST BAD Error in IMAP command : Unknown command. QUIT QUIT BAD Error in IMAP command : Unknown command. 1 logout If you do a ps -ef on the box and check the processes, at no time does a pop3 process start through this process. However, if you do the ps -ef right after the "LIST" command, you can see that there's an imap process started for user 'joeblow'. Now, if I take xinetd out of the equation and instead use the daemon mode /usr/local/sbin/dovecot... everything works perfectly. I've tried using the tcp_wrappers patch that's available in the unsupported directory on dovecot.org, but I cannot get the configure script to recognize the libwrap I have on the system when I compile dovecot with "--with-libwrap" as specified. I'm using tcp_wrappers for Solaris 9 off sunfreeware, so I know it's on there. I've also created sym links to libwrap.a and tcpd.h in /usr/lib and /usr/include respectively... still no dice. Honestly, I don't care which way dovecot runs (though daemon mode WOULD actually be preferred for performance reasons IF tcp_wrappers were available for use), but I just need it running both IMAP and POP3 somehow. Here are the applicable pop3 and imap sections of my dovecot.conf: -- default_mail_env = mbox:~/mail:INBOX=/var/mail/%1u/%1.1u/%u protocol pop3 { login_executable = /usr/local/libexec/dovecot/pop3-login mail_executable = /usr/local/libexec/dovecot/pop3 pop3_no_flag_updates = no pop3_enable_last = no pop3_uidl_format = %08Xu%08Xv pop3_logout_format = top=%t/%T, retr=%r/%R, del=%d/%m, size=%s pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol imap { login_executable = /usr/local/libexec/dovecot/imap-login mail_executable = /usr/local/libexec/dovecot/imap login_greeting_capability = yes } -- And the respective sections from xinetd.conf: -- service pop3 { socket_type = stream protocol = tcp wait = no user = root server = /usr/local/libexec/dovecot/pop3-login port = 110 flags = REUSE IPv4 rlimit_cpu = 150 instances = 80 cps = 110 10 disable = no } service imap { socket_type = stream protocol = tcp wait = no user = root server = /usr/local/libexec/dovecot/imap-login port = 143 flags = REUSE IPv4 rlimit_cpu = 120 disable = no } -- I hope someone can shed some light on this situation for me. Thank you in advance. --- Tim Meader CNE Internet Services NetCommerce Corporation Tim.Meader(a)gsfc.nasa.gov (301) 286-8013

2 1

[Dovecot] missing empty line in mbox folders with Outlook 2000 client
by Gary Funck 11 Jun '06

11 Jun '06

I recently looked into a problem that has been plaguing me since the switch to dovecot a couple of years back, documented here: http://mailman.rwth-aachen.de/pipermail/procmail/2006-May/024363.html The gist is that when I tell Outlook 2000 to write all outgoing mail into a Sent-mail folder on the IMAP server (using mbox format), I find that the mbox's don't have empty lines separating the messages, (though the Content-Length field is correct. This leads to interoperability problems with programs and scripts that expect each mbox message to be separated by an empty line. (We're running dovecot-1.0-0.beta2.7 under Fedora Core 5 on an x86_64 platform.) Has this mbox behavior been reported before? Is it considered a bug or a feature? Is there a configuration option, or Outlook tweak, that can be enabled to ensure that the mbox's produced by writing messages to them via Outlook, are well-formed (have an empty line separating messages)?

2 1

[Dovecot] Server settings for a busy server
by Pat Hastings 11 Jun '06

11 Jun '06

Hi, We are migrating from a windows server and i have very few stats as to what our current concurrent usage stats are other than about 50,000 active users and 90,000 email messages a day inbound 20,000 outbound. Anyone got some tips for tuning dovecot to handle this load? Below is my config - do the values of login_process_size etc sound correct? Also my logs seem to be written out as root which seems kind of scary do how do I / should I have these written out by the dovecot user. Any feedback greatfully accepted. Regards, Pat protocols = imap pop3 listen = * ssl_disable = no disable_plaintext_auth = no shutdown_clients = yes log_path = /var/log/dovecot/mainlog info_log_path = /var/log/dovecot/infolog log_timestamp = "%Y-%m-%d %H:%M:%S " login_dir = /var/run/dovecot/login login_chroot = yes login_user = dovecot login_process_size = 256 login_process_per_connection = no login_processes_count = 48 login_max_logging_users = 2048 login_greeting = Email server ready. login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c login_log_format = %$: %s first_valid_uid = 100 mail_extra_groups = mail valid_chroot_dirs = /var/vmail mail_debug = no default_mail_env = maildir:/var/vmail/dovecoterror/%domain/%u maildir_copy_with_hardlinks = yes protocol imap { } protocol pop3 { pop3_reuse_xuidl = no pop3_uidl_format =%u pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_client_workarounds = outlook-no-nuls, oe-ns-eoh } auth_executable = /usr/lib/dovecot/dovecot-auth auth_verbose = yes auth_debug = yes auth_debug_passwords = yes auth default { mechanisms = plain passdb pam { } passdb ldap { args = /etc/dovecot/dovecot-ldap.conf } userdb passwd { } userdb ldap { args = /etc/dovecot/dovecot-ldap.conf } user = root } --- [This E-mail has been scanned for viruses but it is your responsibility to maintain up to date anti virus software on the device that you are currently using to read this email. ]

2 1

[Dovecot] Dovecot 1.0beta8 dovecot-auth consumes 100% CPU time on Solaris 10 amd64
by Tore André Klock 11 Jun '06

11 Jun '06

Hello. I hope someone out there can help with this. It is getting pretty urgent. I am running a Solaris 10 server on Opteron (amd64) hardware and have compiled Dovecot 1.0beta8 from source. It has openssl compiled in (after much mucking around with various environment variables and modifying the Makefile), and was built with: $ ./configure --with-ldap --with-ssl-dir=/etc/ssl $ make # make install The variables: CC=/usr/sfw/bin/gcc CFLAGS='-m64 -I/usr/local/ssl/include:/usr/sfw/include:/opt/sfw/include' CPP=/usr/sfw/bin/cpp CPPFLAGS=-I/usr/local/ssl/include/openssl:/usr/sfw/include:/opt/sfw/include CXX=/usr/sfw/bin/g++ LDFLAGS='-m64 -L/usr/local/ssl/lib -R/usr/local/ssl/lib:/usr/sfw/lib:/opt/sfw/lib' LD_LIBRARY_PATH=/usr/local/ssl/lib:/usr/sfw/lib:/opt/sfw/lib It was compiled with gcc version 3.4.3 (csl-sol210-3_4-branch+sol_rpath). I modified the SSL_CFLAGS and SSL_LIBS variables in the Makefile to make it find my openssl install in /usr/local/ssl. The one that came with the OS was broken[1], so I compiled 0.9.8b from source. The configure script for some reason didn't pick this up, even when using CFLAGS, LDFLAGS, etc. At any rate, I successfully set it up to accept SSL/TLS connections and authenticate against an LDAP server. I use the auth_bind authentication method and only one LDAP host. I have confirmed that this works. In fact, dovecot runs just fine with the exception of the dovecot-auth proces, which is thrown into an endless loop. It starts off at maybe 1-2% CPU time, but after a few minutes it is back up to 100%. This is the output from truss(1) pointed at the dovecot-auth process: --cut-- pollsys(0xFFFFFD7FFFDFF6F0, 5, 0xFFFFFD7FFFDFF6D0, 0x00000000) = 0 pollsys(0xFFFFFD7FFFDFF6F0, 5, 0xFFFFFD7FFFDFF6D0, 0x00000000) = 0 pollsys(0x00467DC0, 10, 0xFFFFFD7FFFDFFB10, 0x00000000) = 1 [same sequence repeats ad nauseum] --cut-- This is a sample of top(1) output: --cut-- load averages: 1.00, 1.00, 1.00 08:51:38 60 processes: 55 sleeping, 3 running, 1 zombie, 1 on cpu CPU states: 0.0% idle, 68.3% user, 31.7% kernel, 0.0% iowait, 0.0% swap Memory: 1024M real, 680M free, 71M swap in use, 591M swap free PID USERNAME LWP PRI NICE SIZE RES STATE TIME CPU COMMAND 22875 nobody 1 0 0 0K 0K run 726:22 99.68% dovecot-auth --cut-- Here is a condensed version of my ldap-config: (comments removed, names changed to protect the innocent) --cut-- hosts = ldap.example.com auth_bind = yes auth_bind_userdn = uid=%u,ou=People,o=example.com,o=example.com ldap_version = 3 base = uid=%,ou=People,o=example.com,o=example.com --cut-- This is my condensed dovecot.conf: --cut-- base_dir = /var/run/dovecot/ protocols = imap pop3 listen = * ssl_disable = no ssl_cert_file = /etc/ssl/certs/host.cert ssl_key_file = /etc/ssl/private/host.key ssl_cipher_list = ALL:!LOW disable_plaintext_auth = no shutdown_clients = yes log_path = /var/log/dovecot log_timestamp = "%b %d %H:%M:%S " login_user = dovecot login_process_per_connection = yes verbose_proctitle = yes verbose_ssl = yes first_valid_uid = 100 last_valid_uid = 60000 mail_debug = yes default_mail_env = maildir:/var/mail/%u/Maildir mail_full_filesystem_access = no protocol imap { login_executable = /usr/local/libexec/dovecot/imap-login mail_executable = /usr/local/libexec/dovecot/imap login_greeting_capability = yes imap_client_workarounds = outlook-idle tb-extra-mailbox-sep } protocol pop3 { login_executable = /usr/local/libexec/dovecot/pop3-login mail_executable = /usr/local/libexec/dovecot/pop3 pop3_uidl_format = %08Xu%08Xv pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s mail_plugin_dir = /usr/local/lib/dovecot/pop3 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } auth_executable = /usr/local/libexec/dovecot/dovecot-auth auth_cache_size = 0 auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_verbose = yes auth_debug = no auth default { mechanisms = plain passdb ldap { args = /usr/local/etc/dovecot-ldap.conf } userdb passwd { } user = nobody } --cut-- I may have commented out more than necessary in an attempt to be explicit while I was trying to narrow this down. This is the output of ldd dovecot-auth: --cut-- libpam.so.1 => /lib/64/libpam.so.1 libldap.so.5 => /usr/lib/64/libldap.so.5 libsocket.so.1 => /lib/64/libsocket.so.1 libnsl.so.1 => /lib/64/libnsl.so.1 librt.so.1 => /lib/64/librt.so.1 libsendfile.so.1 => /lib/64/libsendfile.so.1 libc.so.1 => /lib/64/libc.so.1 libcmd.so.1 => /lib/64/libcmd.so.1 libsasl.so.1 => /usr/lib/64/libsasl.so.1 libmd5.so.1 => /lib/64/libmd5.so.1 libnspr4.so => /usr/lib/mps/64/libnspr4.so libplc4.so => /usr/lib/mps/64/libplc4.so libnss3.so => /usr/lib/mps/64/libnss3.so libssl3.so => /usr/lib/mps/64/libssl3.so libmp.so.2 => /lib/64/libmp.so.2 libscf.so.1 => /lib/64/libscf.so.1 libaio.so.1 => /lib/64/libaio.so.1 libpthread.so.1 => /lib/64/libpthread.so.1 libthread.so.1 => /lib/64/libthread.so.1 libdl.so.1 => /lib/64/libdl.so.1 libsoftokn3.so => /usr/lib/mps/amd64/libsoftokn3.so libplds4.so => /usr/lib/mps/amd64/libplds4.so libdoor.so.1 => /lib/64/libdoor.so.1 libuutil.so.1 => /lib/64/libuutil.so.1 libm.so.2 => /lib/64/libm.so.2 --cut-- Notes: - The problem *seems* to occur only when I use LDAP authentication. - Disabling SSL in the config has no effect on the CPU usage. - I am not using NFS for anything. - I use Thunderbird 1.5.0.2 and another client runs Outlook. - There is no indication of any problem in the dovecot or system logs. - I suspected this had to do with the poll method dovecot is compiled with (poll), but it happens even when I compiled it with the select method. As far as I know, none of the other methods are available on Solaris. - I noted that the poll(2) call in Solaris will return immediately given a timeout of zero (-1 is 'forever'). I tried tacking down the use of that system call, but I had to give up on that. I only mention it in case it is a dovecot bug and of any help to Timo. Any help is greatly appreciated. Thank you. - Tore [1] If you use the factory-installed version, you get messages like "Warning: imap-login: SSL_accept() failed: error:1409D08A:SSL routines:SSL3_SETUP_KEY_BLOCK:cipher or hash unavailable" in your dovecot log.

2 7

[Dovecot] Can't read dovecot.conf
by E P 11 Jun '06

11 Jun '06

Hello all, I'm attempting to run dovecot on an HP-UX 11.11 system ... the built went fine, and I've got the program installed. I copied dovecot-example.conf to dovecot.conf and made a few changes to it, then went to sbin and ran the dovecot binary to see what would happen. What happened was this: colin:/usr/local/dovecot/sbin# ./dovecot Error: Error in configuration file /usr/local/dovecot/etc/dovecot.conf line 1: Unknown setting: _cert_file ... which is odd; line 1 of dovecot.conf was actually this: ## Dovecot configuration file ... and the first line that wasn't commented out was this: protocols = imaps So just for fun I changed the first non-commented line to this: protocols=imaps ... and then ran the dovecot binary again. This time the error was subtly different: colin:/usr/local/dovecot/sbin# ./dovecot Error: Error in configuration file /usr/local/dovecot/etc/dovecot.conf line 1: Unknown setting: ert_file ... "aha" says I, "it's having some issue with comments." So I took out every line in dovecot.conf that wasn't a comment, leaving me with just 23 lines: protocols=imaps listen=<IP address> ssl_cert_file=/opt/openssl/certs/imapd.pem ssl_key_file=/opt/openssl/certs/imapd.pem disable_plaintext_auth=yes protocol imap { login_executable=/usr/local/dovecot/libexec/dovecot/imap-login mail_executable=/usr/local/dovecot/libexec/dovecot/imap mail_plugin_dir=/usr/local/dovecot/lib/dovecot } protocol pop3 { } auth_executable=/usr/local/dovecot/libexec/dovecot/dovecot-auth auth default { mechanisms=plain passdb pam { } userdb passwd { } user=root } plugin { } This time, when I ran the binary, I got a new error: colin:/usr/local/dovecot/sbin# ./dovecot Error: Can't use SSL certificate /opt/openssl/certs/dovecot.pem: No such file or directory ... this is odd, because the config file clearly states that it should look for the certificate elsewhere. But just for fun, I made dovecot.pem symlinks in /opt/openssl/certs and /opt/openssl/private. Then I try running again: colin:/usr/local/dovecot/sbin# ./dovecot Error: Missing auth section for server default At this point, it's becoming clear to me that my current tactic isn't doing much, so I read some READMEs, checked the wiki, googled around a bit, and now I'm here. Anyone have hints on this? Thanks -- Elliott

2 1

[Dovecot] Dovecot wont start.
by Cesar Diaz 11 Jun '06

11 Jun '06

I installed Dovecot along with Postfix on a FreeBSD server using the port. When I try to start dovecot I get the following error: Fatal: Can't resolve address : hostname nor servname provided, or not known I have the hostname define on the server and can ping it by FQDN and by just hostname with out problems. Any suggestions are greatly appreciated.

2 1

[Dovecot] postmaster alias
by Tracy R Reed 11 Jun '06

11 Jun '06

I have dovecot configured to use an LDAP database for mail delivery with dovecot-lda. All of of my user accounts and aliases work fine except for postmaster@ which consistantly bounces. I have compared the entry for postmaster with another working alias and see no difference. When I send mail to postmaster I get the following in the logs: Jun 11 02:11:13 server1 postfix/pipe[12083]: 6D6CF33444: to=<postmaster(a)mydomain.com>, orig_to=<postmaster>, relay=dovecot, delay=3, status=bounced (user unknown)Jun 11 02:11:13 server1 deliver(treed(a)mydomain.com): saved mail to INBOX Jun 11 02:11:13 server1 postfix/pipe[12193]: 6D6CF33444: to=<treed(a)mydomain.com>, orig_to=<postmaster>, relay=dovecot, delay=3, status=sent (mydomain.com) Jun 11 02:11:13 server1 postfix/cleanup[12055]: 49F1F33431: message-id=<20060611091113.49F1F33431(a)mail.mydomain.com> Jun 11 02:11:13 server1 postfix/qmgr[29342]: 49F1F33431: from=<>, size=2138, nrcpt=2 (queue active) Jun 11 02:11:13 server1 postfix/qmgr[29342]: 6D6CF33444: removed Jun 11 02:11:13 server1 postfix/smtpd[12089]: 6464D33415: client=d150-39-102.home.cgocable.net[24.150.39.102] Jun 11 02:11:13 server1 postfix/pipe[12193]: 49F1F33431: to=<treed(a)mydomain.com>, orig_to=<root(a)mydomain.com>, relay=dovecot, delay=0, status=sent (mydomain.com) Jun 11 02:11:13 server1 postfix/pipe[12083]: 49F1F33431: to=<myboss(a)mydomain.com>, orig_to=<root(a)mydomain.com>, relay=dovecot, delay=0, status=sent (mydomain.com) Then I get a bounce email back saying: <postmaster(a)drjays.com> (expanded from <postmaster>): user unknown The strange thing is that first I get the bounce and then the mail goes on to be delivered to the two users (me and my boss) specified in the alias as it should be. How is this possible that the user is unknown and then it goes on to deliver to the alias? I am running 1.0.beta8 pulled from CVS May 23 16:46 (PDT) with openldap-2.2.13-4 on CentOS 4.3 Thanks for any clues you can provide! -- Tracy R Reed http://ultraviolet.org

2 1

[Dovecot] mkcert.sh broken
by Erick Calder 10 Jun '06

10 Jun '06

I've just installed dovecot on my FC5 box. I tweaked the dovecot-openssl.cnf and attempted to recreate the cert but get the errors below. I see older postings about this problem on FC2. help? - e # ./mkcert.sh /etc/ssl/certs directory doesn't exist /etc/ssl/private directory doesn't exist error on line -1 of dovecot-openssl.cnf 2810:error:02001002:system library:fopen:No such file or directory:bss_file.c:122:fopen('dovecot-openssl.cnf','rb') 2810:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:125: 2810:error:0E078072:configuration file routines:DEF_LOAD:no such file:conf_def.c:197:

4 6

[Dovecot] IMAP FILE MOVE ERROR
by agreig＠protectionprojects.co.za 10 Jun '06

10 Jun '06

I recently installed dovecot.x86_64 1.0-0.beta8.1.fc5 on a new server. Our network users use Pegasus as their mail readers, accessing their home folder on the server via Samba. Each user has a pop3 set of folders, and we have a shared imap set of folders. This has worked very well for previous versions of dovecot. When moving files between folders on the imap set, we get an error message from Pegasus, as follows: "The IMAP server that manages this mailbox or folder has reported an error during the operation you have attempted to perform." The operation cannot be completed." Operation of the imap INBOX only restores once it is "refreshed" via Pegasus. The maillog shows the following message for this error: "dovecot: IMAP(tekstaff): file mail-cache-transaction.c: line 709 (mail_cache_add): assertion failed: (fixed_size == (unsigned int)-1 || fixed_size == data_size)" A search using find / -name mail-cache-transaction.c does not find such file. I am stumped. Any help to fix this will be much appreciated.

1 0