- dovecot - dovecot.org

[Dovecot] Shared maildir through namespace help...
by Brice Figureau 14 Mar '06

14 Mar '06

Hi, I'm a happy user of dovecot since the 0.99.x days, and recently switched my user base to 1.0b2. Now, to the point, I got a request (from marketing) to share a lot of maildirs between two (and possibly more) accounts. Those two accounts have differents uid/gid. The maildirs are actually in one of the account. I thought I could possibly craft a public namespace for those maildirs as explained in the wiki, but alas, it doesn't quite work as I expected: excerpt of dovecot.conf: namespace public { separator = / prefix = marketing/ location = maildir:/home/marketing/Maildir:INDEX=%h/ } users belong to the marketing group. $ find /home/marketing/Maildir -ls 4767751 4 drwxrwxr-x 3 marketing marketing 4096 Mar 14 11:57 . 4767752 4 drwxrwsr-x 6 marketing marketing 4096 Mar 14 11:59 ./Maildir 4767753 4 drwxrwsr-x 2 marketing marketing 4096 Mar 14 11:57 ./Maildir/cur 4767754 4 drwxrwsr-x 2 marketing marketing 4096 Mar 14 11:57 ./Maildir/tmp 4767755 4 drwxrwsr-x 2 marketing marketing 4096 Mar 14 11:57 ./Maildir/new 4767756 0 -rw-r--r-- 1 marketing marketing 0 Mar 14 11:57 ./Maildir/dovecot-shared >From there, the namespace is visible from all the IMAP accounts. Now, if a user creates a new folder in this public namespace, here is what I get: 4767757 4 drwx--S--- 5 brice marketing 4096 Mar 14 12:05 ./Maildir/.test 4767758 4 drwx--S--- 2 brice marketing 4096 Mar 14 11:59 ./Maildir/.test/cur 4767759 4 drwx--S--- 2 brice marketing 4096 Mar 14 11:59 ./Maildir/.test/new 4767760 4 drwx--S--- 2 brice marketing 4096 Mar 14 11:59 ./Maildir/.test/tmp 4767761 0 -rw-r--r-- 1 brice marketing 0 Mar 14 11:59 ./Maildir/.test/dovecot-shared 4767762 4 -rw------- 1 brice marketing 6 Mar 14 11:59 ./Maildir/subscriptions As you can see: the cur,new,tmp dir don't have the right permissions (they're not rw for the group), and moreover, the 'subscriptions' file has the same problem. The result is that any other user don't have access to this directory even if it is in a public namespace. Now, the question, is: is that setup could work only with virtual users setup with a static uid/gid ? Is there a mean to implement what I want ? Does using symlinks instead of the namespace could work ? Regards, -- Brice Figureau <brice+dovecot(a)daysofwonder.com>

2 2

[Dovecot] operation not supported ?
by Frank Bonnet 14 Mar '06

14 Mar '06

Hello I have this error message in the errorlog but I configured dovecot to use /var/mail/%u anyone could explain ? dovecot: Mar 14 10:49:36 Error: imap(xxxxxx): flock() failed with file /user/xxxxxx/Mail/.imap/INBOX/dovecot.index.log: Operation not supported Thank you

2 1

[Dovecot] mbox to maildir conversion - good idea regarding Outlook?
by Gerhard Hofmann 14 Mar '06

14 Mar '06

Hi list, first of all, many thanks to the Dovecot authors for supplying an IMAP server that works well with M$-Outlook! I have used UW-imapd for quite a while and was annoyed by frequent "imap...timeout..." error messages. Now I'd like to give maildir format a try because I want to use email sub-folders. What are other Outlook users' experiences with maildir? Is it as stable as mbox? Regards Gerhard

6 7

RE: [Dovecot][solved] imap permission denied
by Roland Schmid 13 Mar '06

13 Mar '06

> You better take a look at doc/mail-storages.txt as stated in the comments > of the configuration file. > thanks, now it works. The dovecot.conf was wrong configured and the permissions in the /home folders where given not correctly Now we are able to read our mail with outlook and via SquirellMails Kind regards, Roland

2 1

Re: [Dovecot] Migrating UW-IMAP to Dovecot on Solaris 9
by Bertrand Leboeuf 13 Mar '06

13 Mar '06

Works well if I use default_mail_env = mbox:~/mail/:INBOX=/var/mail/%u but everything stays in mbox format How can I set new users to Maildir format, old ones with mbox, If I use default_mail_env = maildir:%h/Maildir mailboxes get created in Maildir but I don't get any new email the new emails are sent to /var/mail/%u right now. > >if you're using wu-imap, you'll need this for pop to work. > >pop3_uidl_format = %08Xv%08Xu > >and if your site is relatively big, dovecot may run out of file >descriptors, you may need to use this. > >/usr/bin/plimit -n 8192,8192 `cat /usr/local/var/run/dovecot/master.pid` > > >and watch the logs :) > > >> In the process of migrating to Dovecot 1.0beta3, any tips or >> step-by-step instructions that might relate to Solaris 9. >> >> Thanks >> >> Bertrand Leboeuf >> leboeuf(a)emt.inrs.ca >> >> >

1 0

[Dovecot] tls
by lenny＠edpausa.com 13 Mar '06

13 Mar '06

is it possible to turn off TLS and only SSL ? The reason are many reasons for this, one major being the fact that TLS is automatically discovered by many clients on the standard ports, thus requiring a valid cert for production use, while SSL could be set up on some unknown to anybody port with self signed cert for testing, etc... thank you

1 0

RE: [Dovecot] imap permission denied
by Roland Schmid 13 Mar '06

13 Mar '06

> Are you sure that the home directory is correctly specified? > no I am not sure. In my dovecot.conf I have added this line: default_mail_env = mbox:/var/mail/:INBOX=/var/mail/%u Does each user have its own INBOX files in their home folder? Kind regards, Roland

1 0

[Dovecot] imap permission denied
by Roland Schmid 13 Mar '06

13 Mar '06

Hello, we have problems to access our users mailboxes with SquirrelMail. The log file /var/log/mail.log says permission denied, only one user is allowed to read his mail with SquirrelMail. We are running Debian Sarge, Mailserver is Postfix, imap server is dovecot. Our Mailboxes are stored in the mbox format. Folder of the mbox files is /var/mail/ the users are unix system accounts. Normally we read are mail with the POP-Client Outlook, this works well. But we also want to be able to read our mail (each user his own mails) via SquirrelMail /var/log/mail.log says: Mar 13 10:54:40 webserver dovecot: imap(unix-system-account): mkdir_parents(/var/mail/.imap/INBOX) failed: Permission denied In the folder where the mbox files are stored exists 3 folders called INBOX.drafts INBOX.sent INBOX.trash These folders are owned by the user who is able to read his mail via SquirrelMail and owned by the group mail. Only the user has read and write permissions. Does each user need to have his own INBOX Files? Could you please help me Kind regards, Roland

1 0

[Dovecot] Help please: Error: net_connect
by Brad 13 Mar '06

13 Mar '06

Having some issues with having the deliver lda deliver properly. Here are the vitals of the config : ============================= socket listen { master { path = /var/run/dovecot-auth-master mode = 0660 user = maildir group = maildir } } protocol lda { module_dir = /usr/local/lib/dovecot/lda postmaster_address = postmaster(a)bradphinney.com auth_socket_path = /var/run/dovecot-auth-master } passdb passwd-file { # Path for passwd-file args = /etc/dovecot-passdb } userdb static { # Template for settings. Can return anything a userdb could normally # return, eg.: uid, gid, home, mail, nice # # A few examples: # args = uid=600 gid=600 home=/export/mail/maildir/%u mail=maildir:/export/mail/maildir/%u ==================================== The deliver program is setuid and setgid maildir. The passdb seems to be working fine since I can log in fine using a client. When I try to deliver mail however .. I get this dovecot: Mar 12 20:42:02 Info: auth(default): master out: USER 1 superduper uid=600 gid=600 home=/export/mail/maildir/superduper mail=maildir:/export/mail/maildir/superduper dovecot: Mar 12 20:42:02 Error: auth(default): and then after a while .. this appears deliver: Error: net_connect(/var/run/dovecot-auth-master) failed: Permission denied And the really odd thing is that the mail seems to be delivered and placed in the maildir. Any help would be appreciated ..

1 0

[Dovecot] Limiting Dovecot access by user-spesific ip addresses?
by Timo Neuvonen 13 Mar '06

13 Mar '06

Hi, Is there any possibility to limit access to mailboxes by user-spesific ip addresses? So, I'd like to have a configuration which by default restricts reading emails to company's own ip-address range. So far, this could be achieved by a basic firewall rule, but not any more the following: However, there is need for a few users to access their emails from world-wide internet, so there should be a possibility to define for certain users an option to skip the allowed address range check. Regards, Timo

3 5

Re: [Dovecot] How to substitute colon `:' for another character in Maildir message files?
by Timo Sirainen 12 Mar '06

12 Mar '06

On Sat, 2006-03-11 at 17:05 -0500, My BSD wrote: > Need to back Maildirs to a smb share as a nightly Cron job (NFS is not > an option). > > Unfortunately, because Dovecot (1.0.beta2) adds a colon `:' to the name > of the message file, Samba (actually "mount_smbfs") truncates the file > names. As a result, files with truncated duplicate file names are > overwritten. > > Would prefer a build option or configuration parameter (a hack is O.K. > if nothing else is available). src/lib-storage/maildir/maildir-storage.h MAILDIR_INFO_SEP MAILDIR_INFO_SEP_S Changing that breaks maildir standard, so I don't want to make it any easier to change it.

1 0

[Dovecot] dovecot-1.0b3 kevent error/warning message
by John Wong 12 Mar '06

12 Mar '06

i use openbsd/i386, dovecot-1.0b3, i see some kevent error/warning message in maillog like this: -------------------------------------------------------- imap(username): kevent(1) in io_loop_handle_add() failed: Bad file descriptor imap(username): kevent(1) in io_loop_handle_remove failed: Bad file descriptor --------------------------------------------------------

5 4

[Dovecot] Suggested patch: retain user's group privileges after logging into IMAP
by Lior Okman 11 Mar '06

11 Mar '06

Hi, I'm attaching a suggested patch that lets an authenticated user access shared IMAP folders even if the user doesn't directly own the storage, but is a part of a group that has permissions on the storage. This allows for the administrator to setup a shared mailbox with permissions given to a group instead of a user, and allow all of the users that belong to the group to access the mail according to the file-system permissions. What do you think? Is this the right way to do this, or am I missing something security-wise? I'm also attaching a bug fix for the LDAP passdb, where if the password scheme wasn't PLAIN, the password would be cleared from memory before being used to authenticate the user, and the authentication would fail. Regards, Lior

1 0

[Dovecot] Segfault problem when using TWO dovecot servers!
by Adam M. Dunn 10 Mar '06

10 Mar '06

Forgive me if this gets submitted twice. I had issues signing up for the listserv but I think I'm strait now. Hi all, I just started working with Dovecot and I'd like to use it for my organization, but I've run into a little problem. So far I love it and it does what I need. One thing we need is to be able to write to multiple mailbox formats on a per user basis (mbox or Maildir), and it does just that. I want users to be able to choose their format, and I can let it autodetect for me. The way I do that is I have Maildrop filters check for the presence of a ~Maildir, and if it finds that it writes to it, otherwise it writes to ~mbox. Dovecot is the only IMAP server I've found to read either or without hard coding one or the other in the config file. The problem: We also want failover. Mail/home directories are NFS mounted. I was planning to setup two dovecot servers, and noticed that whenever one server writes its temp files to the mail directory, if another server tries to read it you get a segfault and the child process fails and dies. So it basically looks like only one server can own the files, and it won't share. I considered trying to set the INDEX option on the mail boxes to write local indexes, but if I try to specify something like: default_mail_env = INDEX=/var/indexes/%d/%n, it doesn't work. Sure I can make it work by putting in a mailbox format before the INDEX, but then I can't use the autodetect which I need. Here's the syslog error: kernel: imap[13689]: segfault at 00007fffffe38000 rip 00002aaaaad3823f rsp 00007fffffe351f0 error 4 Any solutions? I really need this to work badly, or we may have to rethink our entire mail strategy. I'm also using the latest version 1.0beta3. I considered namespaces, but correct me if I'm wrong, you can't setup two namespaces and have it pick the first mailbox format available like the autodetect feature does. I tried seting up namespaces for both mbox and Maildir, but it just creates both. Please help someone. I need a solution to present to my boss, even if that means we have to run one server until the bug is fixed in the next version. Thanks, Adam

2 2

[Dovecot] Setup Dovecot on os X
by Martin Kvapil 10 Mar '06

10 Mar '06

Hey, can anybody help me with this? i get it to work but i get errors when i try to login a client, i guess it is because the authentication part is messed up. What methods should i use? PAM for password i guess but for account? /martin

1 0

[Dovecot] Error question?
by Matt Juszczak 10 Mar '06

10 Mar '06

Mar 9 16:15:19 bob dovecot: imap(username): file mbox-sync-rewrite.c: line 106(mbox_sync_headers_add_space): assertion failed: (start_pos < data_size) Getting these errors like crazy. Any ideas? Thanks! Regards, Matt Juszczak

2 1

[Dovecot] ssl certs
by lenny＠edpausa.com 10 Mar '06

10 Mar '06

is it possible to use 2 different sets of ssl certificates, for 2 different hostnames ( e.g. pop.domain.com and imap.domain.com ) ? thank you

4 3

[Dovecot] POP3 extension to accept UIDL ranges?
by Matthias Andree 10 Mar '06

10 Mar '06

Greetings, is anybody aware of an extension to POP3 that supports UIDL ranges? It would be very useful for keep-messages-on-server setups (yes, I know, IMAP4 domain) to be able to do UIDL 21-42 to obtain just these 22 UIDs (this would always have to be a multi-line reply, just like UIDL without argument). If such a thing does not exist yet, perhaps a keyword such as "[X]UIDLRANGES" in the CAPA response might advertise this feature to clients. Regards, -- Matthias Andree

2 2

[Dovecot] Migrating UW-IMAP to Dovecot on Solaris 9
by Bertrand Leboeuf 09 Mar '06

09 Mar '06

In the process of migrating to Dovecot 1.0beta3, any tips or step-by-step instructions that might relate to Solaris 9. Thanks Bertrand Leboeuf leboeuf(a)emt.inrs.ca

2 1

[Dovecot] Two namespaces with same prefix.
by Václav Haisman 09 Mar '06

09 Mar '06

Hi, I have yet another problem. First let me explain my setup. I used to use pine a lot so there are mbox mailboxes in ~/mail. Recently I added a Maildir too and moved most of the mbox mailboxes into Maildir format. Now I thoght it would be nice to have them all "in line" in Thunderbird so I tried this configuration: namespace private { separator = / prefix = location = %h/mbox inbox = yes } namespace private { separator = / prefix = location = maildir:%h/Maildir } The problem is that with this configuration I cannot access the ~/mail/box mailboxes. Thunderbird responds with "Mailbox doesn't exist: box" Is such kind of configuration with two namespaces having same prefix unsupported? Vaclav Haisman

2 1

[Dovecot] Dovecot LDA doesn't build against 1.0beta3
by Luca Corti 09 Mar '06

09 Mar '06

Here's what I get. Btw I'm on Linux/UltraSparc: gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -o deliver deliver.o duplicate.o imparse.o mail-send.o map.o sieve-cmu.o smtpclient.o -Wl,--export-dynamic libsieve/libsieve.a /root/luca/dovecot-1.0.beta3/src/lib-storage/register/libstorage-register.a /root/luca/dovecot-1.0.beta3/src/lib-storage/index/maildir/libstorage_maildir.a /root/luca/dovecot-1.0.beta3/src/lib-storage/index/mbox/libstorage_mbox.a /root/luca/dovecot-1.0.beta3/src/lib-storage/index/dbox/libstorage_dbox.a /root/luca/dovecot-1.0.beta3/src/lib-storage/index/libstorage_index.a /root/luca/dovecot-1.0.beta3/src/lib-index/libindex.a /root/luca/dovecot-1.0.beta3/src/lib-storage/libstorage.a /root/luca/dovecot-1.0.beta3/src/lib-storage/subscription-file/libstorage_subscription_file.a /root/luca/dovecot-1.0.beta3/src/lib-imap/libimap.a /root/luca/dovecot-1.0.beta3/src/lib-mail/libmail.a /root/luca/dovecot-1.0.beta3/src/lib-dict/libdict.a /root/luca/dovecot-1.0.beta3/src/lib-charset/libcharset.a /root/luca/dovecot-1.0.beta3/src/lib/liblib.a -ldl libsieve/libsieve.a(script.o)(.text+0x2e4): In function `sieve_script_parse': /root/luca/dovecot-lda/src/libsieve/script.c:141: undefined reference to `yylineno' libsieve/libsieve.a(script.o)(.text +0x2f8):/root/luca/dovecot-lda/src/libsieve/script.c:141: undefined reference to `yylineno' libsieve/libsieve.a(sieve.o)(.text+0x1184): In function `sieveparse': /root/luca/dovecot-lda/src/libsieve/sieve.c:1311: undefined reference to `sievelex' libsieve/libsieve.a(sieve.o)(.text+0x11bc): In function `sieve_parse': /root/luca/dovecot-lda/src/libsieve/sieve.y:551: undefined reference to `yyrestart' libsieve/libsieve.a(sieve.o)(.text+0x1210): In function `sieveerror': /root/luca/dovecot-lda/src/libsieve/sieve.y:568: undefined reference to `yylineno' libsieve/libsieve.a(sieve.o)(.text +0x1218):/root/luca/dovecot-lda/src/libsieve/sieve.y:568: undefined reference to `yylineno' libsieve/libsieve.a(addr.o)(.text+0x62c): In function `addrparse': /root/luca/dovecot-lda/src/libsieve/addr.c:958: undefined reference to `addrlex' collect2: ld returned 1 exit status make[3]: *** [deliver] Error 1 make[3]: Leaving directory `/root/luca/dovecot-lda/src' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/root/luca/dovecot-lda/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/root/luca/dovecot-lda' make: *** [all] Error 2 thanks -- Luca Corti PGP Key ID 1F38C091 BOFH excuse of the moment: Our ISP is having {switching,routing,SMDS,frame relay} problems

2 4

[Dovecot] Dovecot + FreeBSD 6.0 + pam_ldap + nss_ldap
by Frank Bonnet 09 Mar '06

09 Mar '06

Hello all I am new to dovecot and I have some troubles to make it working on a FreeBSD 6.0 box On this machine I have nss_ldap + pam_ldap working to login users but dovecot is not working for "ldap" users, it works only for users that are "really" in /etc/passwd file. I have configured dovecot to use the passwd auth mechanism as the OS is suppose to do the job, but it won't work. See attached my dovecot.conf file. Thanks for any help. -- Regards Frank Bonnet

1 0

[Dovecot] Default SELinux policy on Fedora FC4 prevents dovecot service from starting
by slohcine＠verizon.net 09 Mar '06

09 Mar '06

Hello, I recently setup a Fedora FC4 server to host e-mail and webapps. During the install, I turned on SELinux in active mode. All apps seems to work OK but Dovecot daemon won't start. In the audit log, I see this entry when I try to start the dovecot daemon. type=AVC msg=audit(1141464818.541:40305): avc: denied { read } for pid=1989 comm="dovecot" name=dovecot.pem dev=md2 ino=3646976 scontext=system_u:system_r:dovecot_t tcontext=system_u:object_r:cert_t tclass=file type=PATH msg=audit(1141499436.214:3266533): item=0 name="/etc/pki/dovecot/dovecot.pem" inode=3646976 dev=09:02 mode=0100600 ouid=0 ogid=0 rdev=00:00 I put SELinux into permissive mode and Dovecot works OK. Looks like dovecot does not assume the correct security context when it initializes and reads the cert file. My question for the list is what changes should I make to the SELinux policy to safely permit dovecot to read the file? I'm no expert at SELinux but hoping for some direction, or another way to solve this problem. Ideally, I'd like to keep SELinux in enforcing mode. Many thanks, Eric

2 1

[Dovecot] MySQL problem when using Dovecot as proxy
by Christian Jensen 09 Mar '06

09 Mar '06

Hi, I have just installed Dovecot as a POP3 proxy with great success. Its works flawlessly when i keep to the standard but since I am proxying a Microsoft Exchange 2003 (because the build-in POP3 in MS sux bigtime) I would very much like to use account names like: DOMAIN\username and this doesn't work when I include that in the MySQL table. In the logfile it clearly writes DOMAIN\username so its some kind of translation between dovecot and MYSQL. Any suggestions. I another solution would be to allow all users instead of having to create them in the MySQL table. Is this possible ? /Christian P.S Before Dovecot some Outlook users could only download max. 250kB through POP3 - now with Dovecot there is NO LIMIT! :)

1 0

[Dovecot] :INDEX and :CONTROL in 0.99.14
by Karl Latiss 09 Mar '06

09 Mar '06

Before anyone say "upgrade" for various reasons I can't right now (and at any rate everything else works well with this version). My problem is that I can't get :INDEX and :CONTROL working at all: default_mail_env = maildir:~/:INDEX=/home/dovecot/index/%d/% n:CONTROL=/home/dovecot/control/%d/%n ls -l /home/dovecot/ total 8 drwxrwxrwx 3 dovecot dovecot 4096 Mar 8 07:52 control drwxrwxrwx 3 dovecot dovecot 4096 Mar 8 07:55 index (I've made everything 777 for testing) The error I get is: Mar 8 09:54:26 host imap(user(a)domain.com): mkdir (/home/dovecot/index/domain.com/user/.INBOX) failed: Permission denied If I su to the user(a)domain.com user I can manually create the directory OK. I'm using LDAP for authentication if that makes any difference. Any clues? Pointers? Need more information? -- Karl Latiss <karl.latiss(a)atvert.com.au> Atvert Systems

3 7