- dovecot - dovecot.org

Sieve: Avoiding duplicates in a folder while keeping in Inbox
by Nick Urbanik 13 May '24

13 May '24

Dear Folks, I am in the process of learning Sieve, and want to be able to keep an email in Inbox, while also keeping *one* copy in another folder. However, the same mail is copied from Inbox multiple times when I run sieve-filter -Wev .dovecot.sieve Inbox My attempt to prevent this fails: ... } elsif header :comparator "i;octet" :contains "From" "paypal(a)paypal.com.au" { if not duplicate { fileinto "paypal"; } keep; } Please can anyone enlighten me?

3 4

Re: Failing to archive many messages
by Francis Augusto Medeiros-Logeay 10 May '24

10 May '24

> On 9 May 2024, at 19:45, dovecot-request(a)dovecot.org wrote: > > Francis Augusto Medeiros-Logeay via dovecot skrev den 2024-05-09 12:29: > >>> If you want to analyze emails, why not do it with scheduled crons >>> after they are archived? > > maybe ask for skip older then one day in here > https://github.com/isbg/isbg/tree/master > > while roundcube just set the needed flag for retest ? > >> wouldn't it reanalyze all archived messages anyway? > > sometimes email is ham at recpt stage, while its spam later on test, > this is why isbg is made imho :) I see. But I wonder if there is something wrong with what I already have. It worked fine for years, and it works fine for most of my users. I tested with a few accounts, and Archving (with its sa-learn script) works blazingly fast. But with one user - happens to be mine - it is super slow when archiving, most likely due the sa-learn. Best, Francis

1 0

Authentication questions
by Francis Augusto Medeiros-Logeay 09 May '24

09 May '24

Hi, I was wondering: 1 - Is it possible to configure authentication methods per user? For example, oauth2 for most users, but plain for others? 2 - I had a feeling that when oauth2 authentication fails, dovecot tries to authenticate via plain with the received token. Doesn’t seem logical, but I get my user blocked on my directory server (freeipa) after a few failed oath authentications. If so, can this be prevented? Best, Francis

3 4

Re: Failing to archive many messages
by Francis Augusto Medeiros-Logeay 09 May '24

09 May '24

> On 9 May 2024, at 12:55, dovecot-request(a)dovecot.org wrote: > > Francis Augusto Medeiros-Logeay via dovecot skrev den 2024-05-09 11:28: > >> Actually, I don’t know here if that’s the sieve that’s slowing down the >> process, or if it is something else. >> I see that yeah, sa-learn takes a little while to execute. But maybe >> the issue is that Dovecot doesn’t seem to >> release the IMAP connection until each message went through sieve. This >> gives me some timeout on >> Roundcube (it says just «server error»). All the messages are indeed >> archived. >> >> Is that something here I could do better? > > use tmpfs to store tmp content, or try solve it without pipe with imho > creates tmp files > > https://doc.dovecot.org/configuration_manual/howto/antispam_with_sieve/ > > try spamc Thanks Benny. Using spamc and sa-learn isn’t a bit the same? But I’ll check the docs. Bestm Francis

1 0

Re: Failing to archive many messages
by Francis Augusto Medeiros-Logeay 09 May '24

09 May '24

I noticed that my sieve rules are taking a very long time when archiving messages. I can see on my logs that every message takes about two-three seconds to be evaluated. My sieve for the Archive is this: cat /var/mail/vmail/mail/sieve/global/report-ham.sieve require ["vnd.dovecot.pipe", "copy", "imapsieve", "environment", "variables"]; if environment :matches "imap.mailbox" "*" { set "mailbox" "${1}"; } if string "${mailbox}" "Trash" { stop; } if environment :matches "imap.user" "*" { set "username" "${1}"; } pipe :copy "sa-learn-ham.sh" [ "${username}" ]; And my sa-learn-ham.sh is this: #!/bin/sh export PATH="/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin:$PATH" exec /usr/bin/sa-learn -u ${1} —ham May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: multi-script: Start execute sequence May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: Executing script from `/var/mail/vmail/mail/sieve/global/report-ham.svbin' May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: multi-script: Run script `/var/mail/vmail/mail/sieve/global/report-ham.svbin' May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: Started running script `/var/mail/vmail/mail/sieve/global/report-ham.svbin' May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: Finished running script `ok' (status=/var/mail/vmail/mail/sieve/global/report-ham.svbin, resource usage: no usage recorded) May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: multi-script: Execute result May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: uid=191458: Executing result (status=ok, commit=no) May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: uid=191458: Starting execution of actions May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: uid=191458: Executing actions May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: uid=191458: Executing pipe action May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: action pipe: running program: sa-learn-ham.sh May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: program exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh: Created May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: program exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh: Pass environment: USER=francis(a)med-lo.eu May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: program exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh: Pass environment: HOME=/var/mail/vmail/med-lo.eu/francis May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: program exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh: Pass environment: HOST=fb58607074fd May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: Mailbox Archive: UID 191458: Opened mail because: mail stream May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: uid=191458: Finished executing pipe action (status=ok, keep=implicit) May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: uid=191458: Finished executing actions (status=ok, keep=implicit) May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: uid=191458: Finished executing result (no commit, status=ok, keep=yes) May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: multi-script: Sequence active May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: multi-script: Finishing sequence (status=ok) May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: uid=191458: Executing result (status=ok, commit=yes) May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: uid=191458: Starting execution of actions May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: uid=191458: Executing actions May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: uid=191458: Finished executing actions (status=ok, keep=implicit) May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: uid=191458: Execute implicit keep (failure=no) May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: uid=191458: Start storing into mailbox Archive May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: uid=191458: Executing implicit keep action May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: uid=191458: Execute storing into mailbox 'Archive' May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: uid=191458: Updated existing mail in mailbox 'Archive' May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: uid=191458: Finished executing implicit keep action (status=ok) May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: uid=191458: Finalizing actions May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: uid=191458: Finalize pipe action (status=ok, action_status=ok, commit_status=ok, pre-commit=yes) May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: uid=191458: Commit pipe action May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: program exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh: Establishing connection May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: program exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh: Forked child process May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: program exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh (9354): Connected to program May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: program exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh (9354): Finished streaming payload to program May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: program exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh (9354): Finished input to program May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: program exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh (9354): Disconnected May 09 09:17:10 imap(francis(a)med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: program exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh (9354): Waiting for program to finish after 4 msecs (timeout = 9996 msecs) I also noticed this happens for a few accounts. Do you know what could be causing this? Best, Francis

3 4

sieve duplicate with 2.3.16
by Jean-Max Reymond 09 May '24

09 May '24

Hi, I was running dovecot 2.3.7.2 with ubuntu 20.04 Lastweek, I upgrade to Ubuntu 22.04 and dovecot 2.3.16 My configuration was migrated and all is fine expected the sieve duplicate. It does notwork and i don't understand why. % doveconf -n # 2.3.16 (7e2e900c1a): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.16 (09c29328) managesieve(ubuntu): Debug: sieve: Pigeonhole version 0.5.16 (09c29328) initializing managesieve(ubuntu): Debug: sieve: include: sieve_global is not set; it is currently not possible to include `:global' scripts. # OS: Linux 5.15.0-105-generic x86_64 Ubuntu 22.04.4 LTS ext4 # Hostname: 2D17911.online-server.cloud auth_mechanisms = plain login first_valid_uid = 8 log_debug = category=sieve mail_fsync = never mail_location = maildir:/home/Mails/%u managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_before = /var/lib/dovecot/sieve/default.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)ckr-solutions.com protocols = imap sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } } service stats { unix_listener stats-writer { mode = 0666 } } ssl_cert = </etc/letsencrypt/live/mail.ckr-solutions.com/fullchain.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = # hidden, use -P to show it userdb { driver = passwd } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 10 } protocol lmtp { mail_fsync = optimized } protocol lda { deliver_log_format = msgid=%m: %$ mail_fsync = optimized mail_plugins = sieve postmaster_address = postmaster(a)ckr-solutions.com quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } trace dovecot for debug ... May 9 12:04:50 2D17911 dovecot: lda(jmreymond(a)ckr-solutions.com)<2292077><8XgtAcKfPGZt+SIA4rRGvA>: sieve: msgid=<00fb2844-f7b0-47af-8684-bcb090ec9cb9(a)ik.me>: stored mail into mailbox 'INBOX' May 9 12:04:50 2D17911 dovecot: lda(jmreymond(a)ckr-solutions.com)<2292077><8XgtAcKfPGZt+SIA4rRGvA>: Debug: sieve: msgid=<00fb2844-f7b0-47af-8684-bcb090ec9cb9(a)ik.me>: Finish implicit keep action May 9 12:04:50 2D17911 dovecot: lda(jmreymond(a)ckr-solutions.com)<2292077><8XgtAcKfPGZt+SIA4rRGvA>: Debug: sieve: msgid=<00fb2844-f7b0-47af-8684-bcb090ec9cb9(a)ik.me>: Finishing actions May 9 12:04:50 2D17911 dovecot: lda(jmreymond(a)ckr-solutions.com)<2292077><8XgtAcKfPGZt+SIA4rRGvA>: Debug: sieve: msgid=<00fb2844-f7b0-47af-8684-bcb090ec9cb9(a)ik.me>: Finish duplicate_mark action May 9 12:04:50 2D17911 dovecot: lda(jmreymond(a)ckr-solutions.com)<2292077><8XgtAcKfPGZt+SIA4rRGvA>: Debug: sieve: msgid=<00fb2844-f7b0-47af-8684-bcb090ec9cb9(a)ik.me>: Finished executing result (final, status=ok, keep=yes) May 9 12:04:50 2D17911 dovecot: lda(jmreymond(a)ckr-solutions.com)<2292077><8XgtAcKfPGZt+SIA4rRGvA>: Debug: sieve: multi-script: Sequence finished (status=ok, keep=yes) May 9 12:04:50 2D17911 dovecot: lda(jmreymond(a)ckr-solutions.com)<2292077><8XgtAcKfPGZt+SIA4rRGvA>: Debug: sieve: multi-script: Destroy May 9 12:04:50 2D17911 postfix/pipe[2292075]: DE15D396023E: to=<jmreymond(a)ckr-solutions.com>, orig_to=<testsieve(a)ckr-solutions.com>, relay=dovecot, delay=0.35, delays=0.09/0.01/0/0.25, dsn=2.0.0, status=sent (delivered via dovecot service) May 9 12:04:50 2D17911 postfix/qmgr[1855785]: DE15D396023E: removed

1 0

Re: Failing to archive many messages
by Francis Augusto Medeiros-Logeay 09 May '24

09 May '24

> I noticed that my sieve rules are taking a very long time when archiving messages. I can see on my logs that every message takes about two-three seconds to be evaluated. > > I also noticed this happens for a few accounts. Do you know what could be causing this? > > Best, > Francis > Actually, I don’t know here if that’s the sieve that’s slowing down the process, or if it is something else. I see that yeah, sa-learn takes a little while to execute. But maybe the issue is that Dovecot doesn’t seem to release the IMAP connection until each message went through sieve. This gives me some timeout on Roundcube (it says just «server error»). All the messages are indeed archived. Is that something here I could do better? Best, Francis

2 1

OAUTH2 problem when migrating to Ubuntu 24.04
by Francis Augusto Medeiros-Logeay 09 May '24

09 May '24

Hi, I have a Dovecot server on Ubuntu 22.04, which works fine with Oauth2. I am building a new container based on Ubuntu 24.04. IMAP seems to work fine with plain authentication, but oauth2 fails (Dovecot v2.3.21). Same configuration as before. However, I got this message: May 09 09:41:57 auth: Error: oauth2(fran(a)mydomain.eu,10.110.41.32,<o+TCjQZZYJAaaige>): oauth2 failed: Introspection failed: No username returned Weird, as it does indeed seems to get the username (as seen on the log). Any clue on why this fails? Best, Francis

2 2

Namespace configuration for archive in different storage
by drinaldi＠trustitalia.it 06 May '24

06 May '24

Hello, i made this namespace configuration inside "10-mail.conf": namespace Archives { type = private disabled = no hidden = no list = yes ignore_on_failure = no inbox = no location = maildir:/mnt/archive-mail-storage/%n/Maildir prefix = "Archive." subscriptions = yes separator = . I need to set up the storage for archive on a different storage than the inbox is located. Thunderbird, now seems that can see the subfolders inside the archive that start with dot but cannot access the "cur" folder where inbox mail are stored. Can you help me?

3 3

Password storage
by Rupert Gallagher 06 May '24

06 May '24

What is dovecot's state of the art on password storage? Can we use bcrypt instead of plain text?

3 2

Pigeonhole : how to automatically subscribe to newly created folders
by Erwan David 06 May '24

06 May '24

Hello, In my sieve script I use fileinto :create "mailbox" Is it possible that the created mailbox is then automatically added to the subsccribe list for the account ? -- Erwan David

1 0

RE: temporary auth errors
by Michael Slusarz 02 May '24

02 May '24

> On 05/02/2024 7:48 AM MDT Marc via dovecot <dovecot(a)dovecot.org> wrote: > > > auth_failure_delay = 2 secs ? > > > > That will still simply wait before *rejecting* the login, compared to > > *dropping the connection*. > > > > We are thus looking for three different behaviours: > > > > 1. If backend confrims auth, ACK auth + proceed (grant access) to email. > > > > 2. If backend confirm "no such user" or "invalid creds", wait for > > auth_failure_delay and then *reject* the login. > > > > 3. If the backend fails (ie, can neither confirm nor deny), simply drop > > the connection. > > > > I hope this is more clear. > > > > Yes that is more clear, but no idea (seems a little out of scope to support by design) In complicated, localized authentication scenarios, Lua auth is likely the best answer. https://doc.dovecot.org/configuration_manual/authentication/lua_based_authe… michael

1 0

temporary auth errors
by Jaco Kroon 02 May '24

02 May '24

Hi All, Looking for some advise. We ran into a situation yesterday where our SQL cluster (mariadb-galera) stopped serving requests due to some DDL queries locking the wsrep provider. We're addressing this separately, so just background as to the cause of the problem. As far as I know both POP3 and IMAP protocols only have two possible responses when a user tries to authenticate, either ACK (yes, you're fine let's proceed) and NACK (no, something with authentication failed, and either you've got credential issues, or something is wrong with the backend). An ACK results in granting the user access. A NACK results in the user having to retry. This is all good and well, but the *typical* response by a MUA is to re-prompt the user for credentials, to which the response is usually to retry random passwords until it works again (confirmed with Outlook and Thunderbird). What I'm hoping is that dovecot has some way to in case of such "authentication backend" problem scenarios to ignore protocol and politeness and simply disconnect the client, ie, just shut the connection without saying anything, this could even be with a small delay (I'd say 1 second or so, just to avoid tight auth retry loops, up to 4 or 5 seconds IMHO would be fine). The hope is that this will result in the mail client treating this like a connection error rather than an authentication error, and hopefully not prompt for new credentials, but simply an alert of the "there has been a problem communicating with your mail server please retry or contact your service provider" kind of error messages. For reference, the errors in dovecot logs looks like: May 1 04:42:25 uriel dovecot[352]: auth-worker(11615): Warning: sqlpool(mysql): Query failed, retrying: WSREP has not yet prepared node for application use May 1 04:42:25 uriel dovecot[352]: auth-worker(11615): Error: conn unix:auth-worker (pid=11453,uid=76): auth-worker<68>: sql(user(a)domain,a.b.c.d,<XXXX>): Password query failed: WSREP has not yet prepared node for application use May 1 04:42:27 uriel dovecot[352]: pop3-login: Disconnected: Aborted login by logging out (auth service reported temporary failure): user=<user@domain>, method=PLAIN, rip=a.b.c.d, lip=e.f.g.h, TLS, session=<XXXX> Kind regards, Jaco

2 3

Re: Failing to archive many messages
by Francis Augusto Medeiros-Logeay 01 May '24

01 May '24

It is weird. At first, it seems that the logs are going fine. It goes like this for many minutes: May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: Mailbox Archive: UID 25719: Looked up field hdr.IN-REPLY-TO from mail cache May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: Mailbox Archive: UID 25719: Looked up field hdr.MESSAGE-ID from mail cache May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: Mailbox Archive: UID 25719: Looked up field hdr.SUBJECT from mail cache May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: Mailbox Archive: UID 25719: Looked up field hdr.TO from mail cache May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: Mailbox Archive: UID 25719: Looked up field hdr.X-PRIORITY from mail cache May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: Mailbox Archive: UID 25719: Looked up field hdr.BCC from mail cache May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: Mailbox Archive: UID 25719: Looked up field hdr.REPLY-TO from mail cache May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: Mailbox Archive: UID 25719: Looked up field hdr.DISPOSITION-NOTIFICATION-TO from mail cache May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: Mailbox Archive: UID 25719: Looked up field hdr.LIST-POST from mail cache May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: multi-script: Start execute sequence May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: Executing script from `/var/mail/vmail/mail/sieve/global/report-ham.svbin' May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: multi-script: Run script `/var/mail/vmail/mail/sieve/global/report-ham.svbin' May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: Started running script `/var/mail/vmail/mail/sieve/global/report-ham.svbin' May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: Finished running script `ok' (status=/var/mail/vmail/mail/sieve/global/report-ham.svbin, resource usage: no usage recorded) May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: multi-script: Execute result May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: uid=25719: Executing result (status=ok, commit=no) May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: uid=25719: Starting execution of actions May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: uid=25719: Executing actions May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: uid=25719: Executing pipe action May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: action pipe: running program: sa-learn-ham.sh May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: program exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh: Created May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: program exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh: Pass environment: USER=francis(a)mydomain.com May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: program exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh: Pass environment: HOME=/var/mail/vmail/med-lo.eu/francis May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: program exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh: Pass environment: HOST=fb58607074fd May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: Mailbox Archive: UID 25719: Opened mail because: mail stream May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: uid=25719: Finished executing pipe action (status=ok, keep=implicit) May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: uid=25719: Finished executing actions (status=ok, keep=implicit) May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: uid=25719: Finished executing result (no commit, status=ok, keep=yes) May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: multi-script: Sequence active May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: multi-script: Finishing sequence (status=ok) May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: uid=25719: Executing result (status=ok, commit=yes) May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: uid=25719: Starting execution of actions May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: uid=25719: Executing actions May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: uid=25719: Finished executing actions (status=ok, keep=implicit) May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: uid=25719: Execute implicit keep (failure=no) May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: uid=25719: Start storing into mailbox Archive May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: uid=25719: Executing implicit keep action May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: uid=25719: Execute storing into mailbox 'Archive' May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: uid=25719: Updated existing mail in mailbox 'Archive' May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: uid=25719: Finished executing implicit keep action (status=ok) May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: uid=25719: Finalizing actions May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: uid=25719: Finalize pipe action (status=ok, action_status=ok, commit_status=ok, pre-commit=yes) May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: sieve: uid=25719: Commit pipe action May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: program exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh: Establishing connection May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: program exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh: Forked child process May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: program exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh (416): Connected to program May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: program exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh (416): Finished streaming payload to program May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: program exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh (416): Finished input to program May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: program exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh (416): Disconnected May 01 14:20:04 imap(francis(a)mydomain.com)<226><zNW3d2MX9uku45qA>: Debug: program exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh (416): Waiting for program to finish after 6 msecs (timeout = 9994 msecs) The client stays just like «Moving 1 of 4000 messages». Then the logs start to go like this: May 01 14:43:09 imap: Error: ERROR: the Bayes learn function returned an error, please re-run with -D for more information at /usr/bin/sa-learn line 500. May 01 14:43:12 imap: Error: ERROR: the Bayes learn function returned an error, please re-run with -D for more information at /usr/bin/sa-learn line 500. ^C root@fb58607074fd:/# tail -f /var/log/dovecot.log | grep Error May 01 14:43:15 imap: Error: plugin: eval failed: interrupted at /usr/bin/sa-learn line 513. May 01 14:43:15 imap: Error: ERROR: the Bayes learn function returned an error, please re-run with -D for more information at /usr/bin/sa-learn line 500. May 01 14:43:15 imap(francis(a)mydomain.com)<295><TwG1fGMXCuou45qA>: Error: sieve: failed to pipe message to program `sa-learn-ham.sh': refer to server log for more information. [2024-05-01 14:43:15] May 01 14:43:15 imap(francis(a)mydomain.com)<295><TwG1fGMXCuou45qA>: Error: sieve: Execution of script /var/mail/vmail/mail/sieve/global/report-ham.sieve failed May 01 14:43:16 imap(francis(a)mydomain.com)<292><Ei2ofGMXBeou45qA>: Error: program exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh (2978): Forcibly terminated with signal 15 May 01 14:43:16 imap(francis(a)mydomain.com)<292><Ei2ofGMXBeou45qA>: Error: sieve: failed to pipe message to program `sa-learn-ham.sh': refer to server log for more information. [2024-05-01 14:43:16] May 01 14:43:16 imap(francis(a)mydomain.com)<292><Ei2ofGMXBeou45qA>: Error: sieve: Execution of script /var/mail/vmail/mail/sieve/global/report-ham.sieve failed May 01 14:43:17 imap: Error: plugin: eval failed: interrupted at /usr/bin/sa-learn line 513. May 01 14:43:17 imap: Error: ERROR: the Bayes learn function returned an error, please re-run with -D for more information at /usr/bin/sa-learn line 500. For many minutes, the mail client gets an error about reaching the max connections from ip, and the logs go on and on with the errors above. What could be the issue? Best, Francis -- Francis Augusto Medeiros-Logeay Oslo, Norway

1 0

ENV{"PATH"}. errors on my log
by Francis Augusto Medeiros-Logeay 01 May '24

01 May '24

Hi, I'm getting this error a lot on my logs: May 01 12:57:03 imap: Error: Use of uninitialized value $ENV{"PATH"} in split at /usr/lib/x86_64-linux-gnu/perl-base/File/Spec/Unix.pm line 136. I googled a bit and the only reference I found was related to the possibility of imapsieve scripts that could be generating this. I haven't found any perl script on my install, but I momentarily turned off spamassassin, but the logs continued. Any hint on how I can debug this? Turning the debug logs on dovecot didn't bring me any extra information of what the source of this could be. Best, Francis -- Francis Augusto Medeiros-Logeay Oslo, Norway

2 2

Failing to archive many messages
by Francis Augusto Medeiros-Logeay 01 May '24

01 May '24

Hi, When I archive one or two messages, the messages are correctly moved to the Archive. However, when I archive more messages - like 50 or more, dovecot seems to fail. The error I get is this one: Warning: Failed to do incremental sync for mailbox Archive, retry with a full sync (Modseq 17277 no longer in transaction log (highest=17323, last_common_uid=12216, nextuid=15767)) No messages end up being moved to the Archive folder. I tried to do this both from a mail client and from roundcube. What could be the problem here?

1 0

Dovecot, migrating mailboxes from old to new server and from old to new format?
by David Mehler 01 May '24

01 May '24

Hello, I've got a task to migrate a Dovecot mailstore, mailboxes, public folders, etc from an older server (it runs Dovecot 2.2.x) to a new server (running Dovecot 2.3.x). At the same time I'm needing to change mailbox storage formats, going from Mbox (on old server) to Maildir (on new server). I'm not sure if any of the mailboxes are compressed with zlib or encrypted, there's a lot of them, is there a way to find out compression or encryption and decompress/decrypt them prior to migration? Suggestions welcome. Thanks. Dave. -- Sent from Mozilla Thunderbird 91.13.1

2 1

Re: Time moved forwards
by Param 30 Apr '24

30 Apr '24

There is already ntpd configured and working properly.

1 0

Time moved forwards
by Param 30 Apr '24

30 Apr '24

Is there any solution for this? I am on FreeBSD 13.3 with dovecot-2.3.21_4 built from ports and have noticed warnings: Apr 26 08:42:29 mstore17 dovecot[41779]: master: Warning: Time moved forwards by 0.181936 seconds - adjusting timeouts. Apr 26 08:43:39 mstore17 dovecot[41779]: master: Warning: Time moved forwards by 0.146834 seconds - adjusting timeouts. Apr 26 08:48:40 mstore17 dovecot[41779]: master: Warning: Time moved forwards by 0.489300 seconds - adjusting timeouts. The more emails coming in, the more often warning. dovecot --version 2.3.21 (47349e2482) FreeBSD 13.3-RELEASE

3 2

doveadm backup empties the remote host? SERIOUSLY???
by Nils 29 Apr '24

29 Apr '24

Sure it's my own fault - no discussion about that, but seriously? How dangerously unintuitive it that? I found it when I was searching for a good practice to migrate a mail server with rsync and I mistakably assumed it works in the same direction as rsync. Luckily i have a backup from all mails except today's. Please, someone tell me what's the best procedure to migrate dovecot.

5 9

doveadm backup has problems with some accounts
by roger.meier＠4synergy.com 29 Apr '24

29 Apr '24

I try to setup for our mailserver (in a dc) a job backup to a secondary server (in our office) with "doveadm backup" via the -R option. (rsync , rsnapshot and so on tooks too long at the moment) For the most user accounts all work as expected, but for three users it always fails First run: /usr/bin/doveadm -Dv backup -Ru user1 tcp:mua01.domain.intra:12345 > Dec 01 08:54:21 doveadm(user1)<70126><qfzHDjyfaWXuEQEAy5X8iQ>: Debug: Mailbox INBOX: Mailbox opened because: copy caching decisions > Dec 01 08:54:22 doveadm(user1)<70126><qfzHDjyfaWXuEQEAy5X8iQ>: Warning: Deleting mailbox 'Archiv.Allgemein unsortiert': UID=1 GUID=1350559209.P2052Q54.lin-mail1.intra is missing locally > Dec 01 08:54:22 doveadm(user1)<70126><qfzHDjyfaWXuEQEAy5X8iQ>: Debug: brain M: Import Archiv.Allgemein unsortiert: Import change type=save GUID=1350559209.P2052Q54.mail1.intra UID=1 > hdr_hash= result=Reverting local change by deleting mailbox - No more local mails found > Dec 01 08:54:22 doveadm(70126): Debug: brain M: Import Archiv.Allgemein unsortiert: Saved UIDs: > Dec 01 08:54:22 doveadm(70126): Debug: auth-master: conn unix:/run/dovecot/auth-userdb (pid=661,uid=0): Disconnected: Connection closed (fd=9) So it aborts on the lines above and a incomplete maildir is on the local server. so the next doveadm try say's that he can't delete INBOX , etc. > Dec 01 09:03:33 doveadm(user1)<70169><TzH+MmKhaWUZEgEAy5X8iQ>: Error: Mailbox INBOX sync: mailbox_delete failed: INBOX can't be deleted. This a very old account on our server which was migrated over different iterations of our dovecot mailserver. The user behind the account uses outlook over years. Is the space here a problem? Another user with a similiar issue has the following error message at the end: > Dec 01 09:22:14 doveadm(user2)<70354><RU12FsWlaWXSEgEAy5X8iQ>: Debug: Mailbox INBOX: Mailbox opened because: copy caching decisions > Dec 01 09:22:56 doveadm(user2)<70354><RU12FsWlaWXSEgEAy5X8iQ>: Error: read(mua01.domain.intra) failed: EOF (last sent=mailbox, last recv=mailbox) > Dec 01 09:22:56 doveadm(70354): Debug: auth-master: conn unix:/run/dovecot/auth-userdb (pid=661,uid=0): Disconnected: Connection closed (fd=9) I see that the user has a very big inbox? when i check in the source server in the "cur" folder of the INBOX it count's around 269372 mails. Is this perhaps the issue for this message? And on the last user it looks like: Dec 01 09:25:19 doveadm(user3)<70376><UoiQAHWmaWXoEgEAy5X8iQ>: Warning: Deleting mailbox 'Entwürfe': UID=1265 GUID=1521832311.M6830P7652.mail-mx1.intra,S=1764,W=1809 is missing locally Dec 01 09:25:19 doveadm(user3)<70376><UoiQAHWmaWXoEgEAy5X8iQ>: Debug: brain M: Import Entwürfe: Import change type=save GUID=1521832311.M6830P7652.mail-mx1.intra,S=1764,W=1809 UID=1265 hdr_hash= result=Reverting local change by deleting mailbox - No more local mails found Dec 01 09:25:19 doveadm(70376): Debug: brain M: Import Entwürfe: Saved UIDs: Dec 01 09:25:19 doveadm(70376): Debug: auth-master: conn unix:/run/dovecot/auth-userdb (pid=661,uid=0): Disconnected: Connection closed (fd=9) The "Entwürfe" folder directly cannot be the issue? On the filesystem the folder has the name ".Entw&APw-rfe" and also other users has similar folders in their mailboxes. The source server has dovecot version 2.2.36 (centos 7.9.2009) and the current destination server dovecot version 2.3.16 (ubuntu 22.04 lts)

2 3

Dovecot Server issue, cache corruption
by David Mehler 28 Apr '24

28 Apr '24

Hello, I'm using Thunderbird 102 to atempt to retrieve my messages via imap (have tried both 143 and 993) first I wasn't getting any error messages now I am. This is with Dovecot 2.3 on Debian 12.5. Here's the error messages. I do not believe the first set related to public mailboxes is related but I'm not sure what it's problem is either, the problem seems to be corrupted cache. 2024-04-26T02:01:47.832997-04:00 hostname dovecot: imap(username(a)example.com)<586617><WEyTo/kWUwpoDWll>: Error: Mailbox public/example-1: mkdir(/var/vmail/public/.example-1/cur) failed: Permission denied (euid=999(vmail) egid=992(vmail) missing +w perm: /var/vmail/public/.example-1, dir owned by 0:0 mode=0755) 2024-04-26T02:01:48.742111-04:00 hostname dovecot: imap(username(a)example.com)<586617><WEyTo/kWUwpoDWll>: Error: Mailbox INBOX: Deleting corrupted cache record uid=34640: UID 34640: Broken physical size in mailbox INBOX: read(/var/vmail/mailboxes/example.com/username/mail/mailboxes/INBOX/dbox-Ma… failed: Cached message size smaller than expected (1376 < 1647, box=INBOX, UID=34640) 2024-04-26T02:01:48.742239-04:00 hostname dovecot: imap(username(a)example.com)<586617><WEyTo/kWUwpoDWll>: Error: Mailbox INBOX: UID=34640: read(/var/vmail/mailboxes/example.com/username/mail/mailboxes/INBOX/dbox-Ma… failed: Cached message size smaller than expected (1376 < 1647, box=INBOX, UID=34640) (read reason=) 2024-04-26T02:01:48.742308-04:00 hostname dovecot: imap(username(a)example.com)<586617><WEyTo/kWUwpoDWll>: Disconnected: FETCH failed: Mailbox INBOX: UID=34640: read(/var/vmail/mailboxes/example.com/username/mail/mailboxes/INBOX/dbox-Ma… failed: Cached message size smaller than expected (1376 < 1647, box=INBOX, UID=34640) (read reason=) in=889 out=6253 deleted=0 expunged=0 trashed=0 hdr_count=5 hdr_bytes=10 body_count=0 body_bytes=0 Here is a doveconf -n output: # doveconf -n # 2.3.19.1 (9b53102964): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.19 (4eae2f79) # OS: Linux 4.19.0 x86_64 Debian 12.5 # Hostname: hostname.example.com auth_mechanisms = plain login dict { lastlogin = mysql:/etc/dovecot/dovecot-last-login.conf } imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags listen = * lmtp_rcpt_check_quota = yes mail_attribute_dict = file:%h/Maildir/dovecot-attributes mail_gid = vmail mail_home = /var/vmail/mailboxes/%d/%n mail_location = dbox:~/mail:LAYOUT=fs mail_plugins = acl quota welcome mail_privileged_group = vmail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapsieve vnd.dovecot.imapsieve namespace { list = children location = maildir:/var/vmail/public:INDEXPVT=~/public prefix = public/ separator = / subscriptions = no type = public } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { acl = vfile:/etc/dovecot/dovecot-acl imapsieve_mailbox1_before = file:/var/vmail/sieve/global/learn-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Spam imapsieve_mailbox2_before = file:/var/vmail/sieve/global/learn-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Spam imapsieve_mailbox2_name = * last_login_dict = proxy::lastlogin last_login_key = # hidden, use -P to show it quota = count:User quota quota2 = maildir:Shared quota:ns=public/ quota_exceeded_message = User %u has exhausted allowed storage space. quota_grace = 10%% quota_max_mail_size = 100M quota_rule = *:storage=1G quota_rule2 = Trash:storage=+100M quota_rule3 = SPAM:ignore quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO quota_vsizes = yes quota_warning = storage=100%% quota-warning +100 %u quota_warning2 = storage=95%% quota-warning +95 %u quota_warning3 = storage=80%% quota-warning +80 %u quota_warning4 = -storage=100%% quota-warning -100 %u sieve = file:/var/vmail/sieve/%d/%n/scripts;active=/var/vmail/sieve/%d/%n/active-script.sieve sieve_before = /var/vmail/sieve/global/spam-global.sieve sieve_global_extensions = +vnd.dovecot.pipe sieve_pipe_bin_dir = /usr/bin sieve_plugins = sieve_imapsieve sieve_extprograms stats_refresh = 30 secs stats_track_cmds = yes welcome_script = welcome %u welcome_wait = no } protocols = imap lmtp sieve service auth-worker { vsz_limit = 0 } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { client_limit = 1 unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } user = vmail } service managesieve-login { inet_listener sieve { port = 4190 } service_count = 1 } service quota-status { client_limit = 1 executable = quota-status -p postfix unix_listener /var/spool/postfix/private/dovecot-quota { group = postfix mode = 0660 user = postfix } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { group = vmail mode = 0660 user = vmail } user = vmail } service stats { fifo_listener stats-mail { mode = 0644 user = vmail } inet_listener { address = 127.0.0.1 port = 24242 } } service welcome { executable = script /usr/local/bin/welcome.sh unix_listener welcome { group = vmail mode = 0660 user = vmail } } ssl = required ssl_cert = </etc/ssl/example.com/example.com.fullchain.crt ssl_cipher_list = ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305 ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it ssl_prefer_server_ciphers = yes userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { imap_idle_notify_interval = 29 mins imap_metadata = yes mail_max_userip_connections = 20 mail_plugins = acl quota welcome imap_acl imap_quota imap_sieve last_login welcome quota } protocol lmtp { mail_fsync = optimized mail_plugins = acl quota welcome last_login quota sieve postmaster_address = postmaster(a)example.com } Suggestions welcome. Thanks. Dave. -- Sent from Mozilla Thunderbird 91.13.1

1 0

Is it possible to setup ntlm authentication then proxy it to the mail server ?
by karl.l＠as7600.net 26 Apr '24

26 Apr '24

Hi, This is my dovecot version: ``` root@freebsdsvr:~ # dovecot --version 2.3.21 (47349e2482) ``` I'm having trouble in making dovecot as proxy to the mail server when using ntlm authentication. My setup looks like this: email client ------> dovecot (will act as proxy) -------> mail server so basically the email client will connect to dovecot but dovecot will forward it to the mail server. Proxying using auth_mechanism as PLAIN is working but if I use ntlm authentication it just connects into the dovecot server and dovecot server does not proxy to to the mail server. I tried using passdb driver = sql, passdb driver = static, passdb driver = lua and all of them are working when the email client connects using plain auth, once dovecot authenticates the user it will proxy it to the mail server but when I use ntlm authentication it just connects to dovecot and does not do a proxy to the mail server. I switched on all the debugs and I found out in the log that when I connect using PLAIN auth it calls the passdb and gets my default_fields or my proxy fields ```proxy=y``` and ```host=mailserver_domain``` which causes dovecot to proxy into the host(my mail server). but when I connect using NTLM auth it calls the passdb but it does not return my default fields for proxying (when it uses the sql passdb driver it just connects to the database and does not run the password_query) and I think it uses the output from the ```ntlm_auth``` of samba that dovecot uses because it retunrs the field user=username and original_user=username@domain This is the example logs that I recieved once I connect using ntlm and it does not proxy it to my mail server ``` Apr 18 03:37:29 freebsdsvr dovecot[12084]: auth: Debug: mysql(192.168.254.131): Connecting Apr 18 03:37:29 freebsdsvr dovecot[12084]: auth: Debug: auth client connected (pid=12268) Apr 18 03:37:29 freebsdsvr dovecot[12084]: auth: Debug: auth client connected (pid=12270) Apr 18 03:37:30 freebsdsvr dovecot[12084]: auth: Debug: client in: AUTH 1 NTLM service=imap session=Js8TT04WcMnAqP5/ lip=192.168.254.131 rip=192.168.254.127 lport=143 rport=51568 Apr 18 03:37:30 freebsdsvr dovecot[12084]: auth: Debug: client passdb out: CONT 1 Apr 18 03:37:30 freebsdsvr dovecot[12084]: auth: Debug: client in: CONT 1 TlRMTVNTUAABAAAAB4IIAAAAAAAAAAAAAAAAAAAAAAA= (previous base64 data may contain sensitive data) Apr 18 03:37:30 freebsdsvr dovecot[12084]: auth: Debug: client passdb out: CONT 1 TlRMTVNTUAACAAAAFAAUADgAAAAFgooC57WwKq2q4U8sdAAAAAAAAAAFwAXABMAAAABgEAAAasdasdasdAAAA9FAFMAQwAuAE4ARQBUAC4AQQBVAAIAFABFAFMAQwAuAE4ARQBUACad4AQdsQBVAAEasAFABFAFMAQwAuAE4AdaRQBUAC4AQQBVAAQAAAADABQAZQBzAGMALgBuAGUAdAAuAGEAdQAHAAgA/h8T7O2Q2gEAAAAA Apr 18 03:37:30 freebsdsvr dovecot[12084]: auth: Debug: client in: CONT 1 TlRMTVNTUAADAAAAGAAYAFwAAACIAIgAdAAAAAAAAeABAAAAABgAGAEAAAAAWABYARgAAAAAAAAAAAAAABYIIAHMAcwAzAFcATwBSAEsAUwBUAEEAVABJAE8ATgBXKrBA2vF7fMicRiasLK/IyI3fbM46rQ7JHcti/0TU02AqasdasdasdhceI+BaeqMjrAQEAAAAAAACAL88ampDaARzhirKymxxcAAAAAAIAFABFAFMAQwAuAE4ARQBUAC4AQQBVAAEAFABFAFMAQwAuAE4ARQBUAC4AQQBVAAQAAAADABQAZQBzAGMALgBuAGUAdAAuAGEAdQAHAAgA/h8T7O2Q2gEAAAAA (previous base64 data may contain sensitive data) Apr 18 03:37:30 freebsdsvr dovecot[12084]: auth: Debug: auth(userName,192.168.254.127,<Js8TT04WcMnAqP5/>): Auth request finished Apr 18 03:37:30 freebsdsvr dovecot[12084]: auth: Debug: client passdb out: OK 1 user=userName original_user=userName@FREEBSD-TEST ``` Here's the logs that I get when I connect via Plain Auth and it does the proxy to my mail server ``` Apr 18 03:27:39 freebsdsvr dovecot[12084]: auth-worker(12138): Debug: mysql(192.168.254.131): Connecting Apr 18 03:27:39 freebsdsvr dovecot[12084]: auth-worker(12138): Debug: conn unix:auth-worker (uid=0): Server accepted connection (fd=15) Apr 18 03:27:39 freebsdsvr dovecot[12084]: auth-worker(12138): Debug: conn unix:auth-worker (uid=0): Sending version handshake Apr 18 03:27:39 freebsdsvr dovecot[12084]: auth-worker(12138): Debug: conn unix:auth-worker (uid=0): auth-worker<1>: Handling PASSV request Apr 18 03:27:39 freebsdsvr dovecot[12084]: auth-worker(12138): Debug: conn unix:auth-worker (uid=0): auth-worker<1>: sql(ss3,192.168.254.127,<zwTdK04W9MbAqP5/>): Performing passdb lookup Apr 18 03:27:39 freebsdsvr dovecot[12084]: auth-worker(12138): Debug: conn unix:auth-worker (uid=0): auth-worker<1>: sql(ss3,192.168.254.127,<zwTdK04W9MbAqP5/>): query: SELECT destuser, password, host, 'Y' as proxy FROM proxy WHERE user = 'userName'; Apr 18 03:27:39 freebsdsvr dovecot[12084]: auth-worker(12138): Debug: mysql(192.168.254.131): Finished query 'SELECT destuser, password, host, 'Y' as proxy FROM proxy WHERE user = 'userName';' in 0 msecs Apr 18 03:27:39 freebsdsvr dovecot[12084]: auth-worker(12138): Debug: conn unix:auth-worker (uid=0): auth-worker<1>: sql(userName,192.168.254.127,<zwTdK04W9MbAqP5/>): Finished passdb lookup Apr 18 03:27:39 freebsdsvr dovecot[12084]: auth-worker(12138): Debug: conn unix:auth-worker (uid=0): auth-worker<1>: Finished Apr 18 03:27:39 freebsdsvr dovecot[12084]: auth: Debug: sql(userName,192.168.254.127,<zwTdK04W9MbAqP5/>): Finished passdb lookup Apr 18 03:27:39 freebsdsvr dovecot[12084]: auth: Debug: auth(userName,192.168.254.127,<zwTdK04W9MbAqP5/>): Auth request finished Apr 18 03:27:39 freebsdsvr dovecot[12084]: auth: Debug: conn unix:dns-client: dns(mailserver.domain): Lookup started Apr 18 03:27:39 freebsdsvr dovecot[12084]: auth: Debug: conn unix:dns-client: Connecting Apr 18 03:27:39 freebsdsvr dovecot[12084]: auth: Debug: conn unix:dns-client (uid=0): Client connected (fd=27) Apr 18 03:27:39 freebsdsvr dovecot[12084]: auth: Debug: conn unix:dns-client (uid=0): Sending version handshake Apr 18 03:27:40 freebsdsvr dovecot[12084]: auth: Debug: conn unix:dns-client (uid=0): dns(mailserver.domain): Lookup successful after 658 msecs Apr 18 03:27:40 freebsdsvr dovecot[12084]: auth: Debug: client passdb out: OK 1 user=userName destuser=userName host=mailserver.domain proxy hostip=mailserverip pass=password ``` Is there a right way to configure ntlm to do proxy? because it does not seem to use the passdb in sql,lua, and static drivers. This is my dovecot -n ``` root@freebsdsvr:~ # dovecot -n # 2.3.21 (47349e2482): /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 13.2-RELEASE amd64 zfs # Hostname: freebsdsvr auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login ntlm auth_use_winbind = yes auth_username_format = %n auth_verbose = yes auth_verbose_passwords = plain auth_winbind_helper_path = /usr/local/bin/ntlm_auth disable_plaintext_auth = no mail_debug = yes mail_gid = 1001 mail_location = maildir:/var/mail/vhosts/%n mail_uid = 1001 namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } protocols = imap pop3 service auth { user = root } ssl_cert = </root/dovecot.crt ssl_cipher_list = ALL:!DH:!kRSA:!SRP:!kDHd:!DSS:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH ssl_key = # hidden, use -P to show it passdb { driver = sql # Path for SQL configuration file, see example-config/dovecot-sql.conf.ext args = /usr/local/etc/dovecot/dovecot-sql.conf.ext } userdb { driver = prefetch } ``` dovecot-sql.conf.ext ``` driver = mysql connect = host=192.168.254.134 port=3306 dbname=mails user=karl password=adminpassword password_query = SELECT destuser, password, host, 'Y' as proxy FROM proxy WHERE user = '%u'; ``` Thanks :)

5 6

using keycloak
by A. Schulze 25 Apr '24

25 Apr '24

Hello, I'm relative new to oauth2. I like to understand a setup for dovecot but https://doc.dovecot.org/configuration_manual/authentication/oauth2/ is not enough for me. Could anybody describe a simple setup where dovecot uses keycloak. For simplification I would start with keycloak's builtin user management only. - how to configure dovecot - how to configure keycloak - how to test with 'curl --verbose --some-magic-options imap://dovecot-server' Thanks, Andreas

1 0

Which DKIM application for postfix 3.9.0
by dovecot＠outputservices.com 25 Apr '24

25 Apr '24

I am upgrading to postfix 3.9.0. I have not used DKIM in previous postfix installs, but I would like to start now with the new google rules. I have done some research and opendkim is the most recommended, however, other research states the opendkim has been abandoned by it's maintainers. So I am looking for a good alternative dkim software that will work with postfix that I can compile myself. I do not run on any linux version, so therefore I can not just apt-get a new dkim application. I run Solaris and therefore need to compile my applications, postfix and dkim. Any good suggestions will be appreciated.

7 8

HELP with email attachments ONLY clean up
by INFO ＠ TRIMLINE 25 Apr '24

25 Apr '24

Hello Dovecot Dev team, In my cpanel, we use your email management. This is what my hosting provider has allowed. Our problem: Since the introduction of "hi def cameras on mobile phones", we are getting emails with "huge attachments". The email which comes with the attachments is also important. However, once we download the email (imap), using any of the email clients (outlook, bluemail etc.) the mailbox still has these huge attachments. Because of this, our mailbox storage gets filled up quickly. In our email client software, we can delete (attachments only), and leave the email in our mailbox. So this work around helps us keep our mailbox size manageable. Unfortunately, not everyone does this "email attachment cleanup" regularly and end up being locked out of email storage space and probably lost a few hours of productive time. Our dev Request: Would it be possible to create a setting for end users in our Cpanel, in which we can delete the attachments without deleting the actual message? So query should have: <per email mailbox account> (drop down selection, like you have it now) * Filter 01: Select Messages older than nnn days (where nnn would be 100 to 999 days) (so for the first 99 days, every imap client would have the opportunity to download the email and the attachments) * From Filter 01 = Filter 02: Select messages which are >xxx Mb (where xxx could be 001 to 999 Mb) * From Filter 02 = Filter 03: Select only messages which contain attachments (Yes) * From Filter 03: Permanently Delete the attachments ONLY, So not deleting the actual email msg (OK). So on day 100 (or after the clean up is done), the imap email client will now only get the email but not the attachments (in the event they need to refresh their email setup). If such a query can be created and installed on our Cpanel, we can run this "clean up attachments" query regularly and as such reduce our mailbox size. Q: Would it be possible to create such a clean up tool (pre-defined) so that the cpanel web service admin user only has to enter (nnn and xxx and Yes) to finally click on "OK" to delete the attachments? If this would be possible, what will it cost us to have it installed on our Cpanel? There is so much information/documentation already on your website (doc.dovecot.org) and I spent about 60 min looking for such a "clean up tool" documentation, but started getting dizzy reading all that script language etc. Not my cup of tea. Please help. Thank you for considering and reading this request. Kind regards M. Akil Walji

3 2

Debian, Postfix, Dovecot, MySQL, and argon2 password hashing scheme?
by David Mehler 25 Apr '24

25 Apr '24

Hello, I have a quick question. Can Debian, and/or it's Postfix/Dovecot/MySQL/MariaDB packages support the argon2 password hashing scheme? I had a previously-working e-mail setup on a *BSD system, utilizing the argon2ID scheme with Dovecot, Postfix, and MySQL. Since changing systems to Debian 12.5 I can't send, though checking the password with a manual login to Dovecot works fine. I'm wondering if I have to migrate the passwords from argon2ID to SHA512-CRYPT? Thanks. Dave. -- Sent from Mozilla Thunderbird 91.13.1

2 1

RE: Which DKIM application for postfix 3.9.0
by Joseph Tam 24 Apr '24

24 Apr '24

On Tue, Apr 23, 2024 at 7:33 AM <dovecot-request(a)dovecot.org> wrote: > > I am upgrading to postfix 3.9.0. I have not used DKIM in previous postfix installs, but I >> would like to start now with the new google rules. I have done some research and opendkim >> is the most recommended, however, other research states the opendkim has been >> abandoned by it's maintainers. So I am looking for a good alternative dkim software >> that will work with postfix that I can compile myself. I do not run on any linux >> version, so therefore I can not just apt-get a new dkim application. >> I run Solaris and therefore need to compile my applications, postfix and dkim. >> Any good suggestions will be appreciated. I just rolled out a locally compiled opendkim on my mail server. It works, but there are a few gotchas. Although it seems like a moribund project, there is a late beta version that includes some important patches, most notably the "Header:\n LongHeaderValue" bug that needs fixing. You can look at https://sourceforge.net/p/opendkim/patches/ to find that patch, as well as others you deem important. As DKIM standards are not going to change soon, having end-of-line software is not as bad as it seems unless you need particular enhancements to make it work better in your circumstances. Once you get your setup dialed, you can probably set it and forget it. Most of the headaches have actually been internal: local mail injection via sendmail would skip miltering, From header canonicalization by the MTA would not be seen by the opendkim milter thereby creating messages with missing or invalid signatures, and mailing list/auto reply/forwarder software mangling messages. I think Postfix does a better job in this regard, so these issues may not present itself. (I did a Postfix/opendkim milter on an Ubuntu system and it was much less hassle.) You should look at *lots* of DMARC RUA reports. People are doing crazy batsh*t stuff with your mail domain. Joseph Tam <jtam.home(a)gmail.com>

4 3

Setting compression to specific namespace
by Filip Bartmann 23 Apr '24

23 Apr '24

Hello, is it possible to set compression for specific namespace or spefic mailbox folder? Thanks, Filip Bartmann

1 0

Question about line length limit in lmtp.
by Kamil Jońca 22 Apr '24

22 Apr '24

I have postfix + dovecot server. Mail for local users are saved by dovecot lmtp. Recently I got some messages from postfix: --8<---------------cut here---------------start------------->8--- 4NQ07L4h4LztXXr: breaking line > 998 bytes with <CR><LF>SPAC --8<---------------cut here---------------end--------------->8--- This is because postfix has configured with default value lmtp_line_length_limit (990). I can turn off this limit (set to 0) but I am curious if dovecot lmtp will accept so lengthty lines? Does dovecot lmtp has any line limits? KJ -- http://stopstopnop.pl/stop_stopnop.pl_o_nas.html

4 6

doveadm index to terminate non-zero in case of failure
by Jaco Kroon 22 Apr '24

22 Apr '24

Hi, It would be great if doveadm index could terminate non-zero in the case of index corruption, that way the tool can be used as a way to determine and remove corrupted indexes. Example: othala [13:56:24] ~ # doveadm index -u lumi_james INBOX doveadm(lumi_james): Error: Corrupted transaction log file /path/to/lumi_james/dovecot.list.index.log seq 2: Unexpected garbage at EOF (sync_offset=7168) doveadm(lumi_james): Error: Failed to map transaction log /path/to/lumi_james/dovecot.list.index.log at sync_offset=7168 after locking: Unexpected garbage at EOF othala [13:56:34] ~ # echo $? 0 othala [13:56:37] ~ # If doveadm index exited non-zero in above case we'd be able to: if ! doveadm index -u lumi_james INBOX; then rm /path/to/lumi_james/dovecot.index{,log,.cache} fi Which may be over-zealous in removing indexes, but we'd rather have that. We believe we already fixed the locking issue that caused the corrupt indexes and are busy cleaning them up based on log files, but it would still be great if the above could be integrated into our check battery if/when users report problems, of "run the script and it fixes 99% of things that are known to break". In the same breath, we're seeing that folders with & in the name are causing problems for doveadm index -u someuser '*' usage. Kind regards, Jaco

1 0

Variable expansion on %w
by Gandalf Corvotempesta 21 Apr '24

21 Apr '24

I'm following the guide for changing the password schema. Everything works as expected (i'm using a static passwd file), but when the plain password has a % inside, dovecot is trying to expand that, triggering an error: Apr 11 21:33:55 mail02 dovecot: pop3(x)<3962994><4soGPNcVXsoln9W6>: Error: Failed to expand plugin setting plain_pass = 'xxxxx%Yxxxxxx!%': Unknown variable '%Y' How can I block the variable expansion inside %w ?

3 10

Sieve not getting recompiled
by Joan Moreau 21 Apr '24

21 Apr '24

Hi I have sieve = /mails/%d/%n/sieve/roundcube.sieve sieve_after = /mails/sieve/after.sieve sieve_before = /mails/sieve/before.sieve sieve_dir = /mails/%d/%n/sieve/ sieve_global_dir = /mails/sieve/ But sieve scripts are not compiled and not executed It was working until I removed the setting "sieve_global_path" Something I dont understand ? Thank you

2 2

exfat not supported ?
by Joan Moreau 21 Apr '24

21 Apr '24

Hi Would placing my storage on a exfat partition work ? If no, why ? Thank you

3 5

Logging e_debug messages
by D S 21 Apr '24

21 Apr '24

Is it possible to log the e_debug events in quota-status.c? [https://github.com/dovecot/core/blob/main/src/plugins/quota/quota-status.c] Running: Dovecot 2.3.19.1 (9b53102964) Here's the config I've tried: log_path = /var/log/dovecot.log event_exporter log { format = json format_args = time-rfc3339 transport = log } metric everything { exporter = log filter = event=* OR category=* } log_debug = event=* auth_verbose = yes auth_debug = yes mail_debug = yes This seems to capture events at INFO level or higher, and some Debug log messages, but not the e_debug messages in quota-status.c. Thanks, Daniel

1 0

thread->detach() creates confusion of dovecot
by Joan Moreau 20 Apr '24

20 Apr '24

Hi When I try to "detach" (https://en.cppreference.com/w/cpp/thread/thread/detach) a thread running inside a plugin, it seems the core dovecot has some influence on that , tries to close this for some unknown reason and usually ends up crashing What is the cause of this ? Thank you

1 0

Error: acl: dict_iterate() failed: sql dict iterate failed for shared : Invalid/unmapped path
by Syrosh 18 Apr '24

18 Apr '24

Hi, This error occurs if you have shared mailboxes configured, but not a map for sharing with "anyone". Dovecot then tries to perform a SQL query for something that doesn't exist and logs this error message. Error: acl: dict_iterate() failed: sql dict iterate failed for shared : Invalid/unmapped path There's a 14 year old discussion that talks about adding a dummy table and map to prevent the error: https://dovecot.dovecot.narkive.com/qWO58HYM/error-sql-dict-iterate-question I'd rather add this table since I'm not using sharing to anyone, is there a way to prevent dovecot from making this query? Best Regards, Syrosh

1 0

Bug report: invalid \HasNoChildren in response when asterisk is used in the name
by Merijn Schering 18 Apr '24

18 Apr '24

Hi, I'm using dovecot 2.3.4.1 (f79e8e7e4). I have created a folder called "Test with *". Now when I do a command: A3 LIST "" "%" RETURN (CHILDREN STATUS (MESSAGES UNSEEN)) It responds: * STATUS Test with * ( MESSAGES 0 UNSEEN 0 ) * LIST ( \HasNoChildren \UnMarked ) / Spam But it actually has children! This only happens when I use a * character in the name. I hope you can fix this some day. Thanks! Best regards, Merijn Schering Intermesh https://www.group-office.com https://twitter.com/GroupOffice

2 4

Wildcard !include statements fail if nothing matches
by Noah Meyerhans 17 Apr '24

17 Apr '24

Forwarding this report from Debian bug #1068478. Please see the full report for more context. [1] Per the documentation on "Including config files", "It’s not an error if wildcards don’t result in any matching files." [2] However, that statement does not seem to reflect the actual behavior of the code. Some relevant snippets of code from src/config/config-parser.c: from config_parse_line(): if (strcmp(key, "!include") == 0) return CONFIG_LINE_TYPE_INCLUDE; if (strcmp(key, "!include_try") == 0) return CONFIG_LINE_TYPE_INCLUDE_TRY; This return value is later handled with a case statement in config_parser_apply_line(): case CONFIG_LINE_TYPE_INCLUDE: case CONFIG_LINE_TYPE_INCLUDE_TRY: (void)settings_include(ctx, fix_relative_path(value, ctx->cur_input), type == CONFIG_LINE_TYPE_INCLUDE_TRY); break; The result of the "type == CONFIG_LINE_TYPE_INCLUDE_TRY" statement is passed as the bool ignore_errors parameter to bool ignore_errors(), so if it evaluates to false as it does when type == CONFIG_LINE_TYPE_INCLUDE, then we return an error: case GLOB_NOMATCH: if (ignore_errors) return 0; ctx->error = "No matches"; return -1; The code is pretty straightforward in how it handles this scenario, so maybe the documentation should be clarified? Thanks noah 1. https://bugs.debian.org/1068478 2. https://doc.dovecot.org/configuration_manual/config_file/#including-config-…

2 2

doveadm import error: quota: Unknown namespace: INBOX/
by Ralf Becker 17 Apr '24

17 Apr '24

Dovecot version is 2.3.20 and I try to restore a folder hierarchy from an older snapshot of the mailbox (folders in question have been deleted): sudo -u dovecot doveadm -Dv import -u pbs(a)xyz.de -s mdbox:$(pwd)/pbs-2024-03-19/mdbox INBOX mailbox 'projekte/8-BZ/*' I'm getting the following error: Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Error: quota: Unknown namespace: INBOX/ I also tried restoring in a (not existing) restore folder: Restore-2024-03-19 and using search query "mailbox 'projekte/8-BZ'", all give the same result :( Any ideas what might be wrong, I did this many times before, and it worked, so I'm puzzeled ... Here is the full output of doveadm import command above and doveconf -n: root@aab41229427e:/var/dovecot/imap/xyz.de# sudo -u dovecot doveadm -Dv import -upbs(a)xyz.de -s mdbox:$(pwd)/pbs-2024-03-19/mdbox INBOX mailbox 'projekte/8-BZ/*' Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentional, so just ignore this message) Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_sieve_plugin.so Debug: Skipping module doveadm_fts_lucene_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_lucene_plugin.so: undefined symbol: lucene_index_iter_deinit (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_user_get_language_list (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_mail_crypt_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/libdoveadm_mail_crypt_plugin.so: undefined symbol: mail_crypt_box_get_pvt_digests (this is usually intentional, so just ignore this message) Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentional, so just ignore this message) Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_sieve_plugin.so Debug: Skipping module doveadm_fts_lucene_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_lucene_plugin.so: undefined symbol: lucene_index_iter_deinit (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_user_get_language_list (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_mail_crypt_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/libdoveadm_mail_crypt_plugin.so: undefined symbol: mail_crypt_box_get_pvt_digests (this is usually intentional, so just ignore this message) Apr 12 10:52:18 Debug: Loading modules from directory: /usr/lib/dovecot/modules Apr 12 10:52:18 Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so Apr 12 10:52:18 Debug: Module loaded: /usr/lib/dovecot/modules/lib01_mail_lua_plugin.so Apr 12 10:52:18 Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so Apr 12 10:52:18 Debug: Module loaded: /usr/lib/dovecot/modules/lib15_notify_plugin.so Apr 12 10:52:18 Debug: Module loaded: /usr/lib/dovecot/modules/lib20_mail_log_plugin.so Apr 12 10:52:18 Debug: Module loaded: /usr/lib/dovecot/modules/lib20_push_notification_plugin.so Apr 12 10:52:18 Debug: Module loaded: /usr/lib/dovecot/modules/lib20_replication_plugin.so Apr 12 10:52:18 Debug: Module loaded: /usr/lib/dovecot/modules/lib22_push_notification_lua_plugin.so Apr 12 10:52:18 Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm Apr 12 10:52:18 Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_acl_plugin.so Apr 12 10:52:18 Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so Apr 12 10:52:18 Debug: Skipping module doveadm_fts_lucene_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_lucene_plugin.so: undefined symbol: lucene_index_iter_deinit (this is usually intentional, so just ignore this message) Apr 12 10:52:18 Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_user_get_language_list (this is usually intentional, so just ignore this message) Apr 12 10:52:18 Debug: Skipping module doveadm_mail_crypt_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/libdoveadm_mail_crypt_plugin.so: undefined symbol: mail_crypt_box_get_pvt_digests (this is usually intentional, so just ignore this message) Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: auth-master: passdb lookup(pbs(a)xyz.de): Started passdb lookup Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: auth-master: conn unix:/run/dovecot/auth-userdb: Connecting Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: auth-master: conn unix:/run/dovecot/auth-userdb (pid=1,uid=0): Client connected (fd=8) Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: auth-master: passdb lookup(pbs(a)xyz.de): auth PASS input: Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: auth-master: passdb lookup(pbs(a)xyz.de): Passdb lookup failed Apr 12 10:52:18 doveadm(pbs(a)xyz.de 1416382): Debug: auth-master: userdb lookup(pbs(a)xyz.de): Started userdb lookup Apr 12 10:52:18 doveadm(pbs(a)xyz.de 1416382): Debug: auth-master: userdb lookup(pbs(a)xyz.de): auth USER input:pbs@xyz.de home=/var/dovecot/imap/xyz.de/pbs quota_rule=*:bytes=20971520000master_user=pbs@xyz.de acl_groups=_admins@xyz.de,_alle-festangestellte@xyz.de,_organisatorische einheiten@xyz.de,_zbt-festangestellte@xyz.de,_zbt-geschaeftsfuehrung@xyz.de, Apr 12 10:52:18 doveadm(pbs(a)xyz.de 1416382): Debug: auth-master: userdb lookup(pbs(a)xyz.de): Finished userdb lookup (username=pbs(a)xyz.de home=/var/dovecot/imap/xyz.de/pbs quota_rule=*:bytes=20971520000master_user=pbs@xyz.de acl_groups=_admins@xyz.de,_alle-festangestellte@xyz.de,_organisatorische einheiten@xyz.de,_zbt-festangestellte@xyz.de,_zbt-geschaeftsfuehrung@xyz.de,) Apr 12 10:52:18 doveadm(pbs(a)xyz.de 1416382): Debug: Added userdb setting:plugin/acl_groups=_admins@xyz.de,_alle-festangestellte@xyz.de,_organisatorische einheiten@xyz.de,_zbt-festangestellte@xyz.de,_zbt-geschaeftsfuehrung@xyz.de, Apr 12 10:52:18 doveadm(pbs(a)xyz.de 1416382): Debug: Added userdb setting:plugin/master_user=pbs@xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de 1416382): Debug: Added userdb setting: plugin/quota_rule=*:bytes=20971520000 Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: Effective uid=90, gid=101, home=/var/dovecot/imap/xyz.de/pbs Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: dict(file): dict created (uri=file:/var/dovecot/imap/xyz.de/shared-mailboxes.db, base_dir=/run/dovecot) Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: Quota root: name=User quota backend=dict args=:ns=INBOX/:file:/var/dovecot/imap/xyz.de/pbs/dovecot-quota Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: Quota rule: root=User quota mailbox=* bytes=20971520000 messages=0 Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: Quota grace: root=User quota bytes=2097152000 (10%) Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: quota-dict:user=pbs@xyz.de, uri=file:/var/dovecot/imap/xyz.de/pbs/dovecot-quota, noenforcing=0 Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: dict(file): dict created (uri=file:/var/dovecot/imap/xyz.de/pbs/dovecot-quota, base_dir=/run/dovecot) Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: lua: Loading /etc/dovecot/dovecot-push.lua Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: lua: Calling script_init Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: Namespace inboxes: type=private, prefix=INBOX/, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=no location=mdbox:~/mdbox Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: fs: root=/var/dovecot/imap/xyz.de/pbs/mdbox, index=, indexpvt=, control=, inbox=, alt= Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: initializing backend with data: vfile Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: acl username =pbs(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: owner = 1 Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _admins(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _alle-festangestellte(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _organisatorischeeinheiten(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _zbt-festangestellte(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _zbt-geschaeftsfuehrung(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl vfile: Global ACLs disabled Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: Namespace users: type=shared, prefix=user/%n/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=no location=mdbox:%h/mdbox Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: shared: root=/run/dovecot, index=, indexpvt=, control=, inbox=, alt= Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: initializing backend with data: vfile Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: acl username =pbs(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: owner = 0 Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _admins(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _alle-festangestellte(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _organisatorischeeinheiten(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _zbt-festangestellte(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _zbt-geschaeftsfuehrung(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl vfile: Global ACLs disabled Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: Namespace subs: type=private, prefix=, sep=/, inbox=no, hidden=yes, list=no, subscriptions=yes location=mdbox:~/mdbox Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: fs: root=/var/dovecot/imap/xyz.de/pbs/mdbox, index=, indexpvt=, control=, inbox=, alt= Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: initializing backend with data: vfile Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: acl username =pbs(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: owner = 1 Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _admins(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _alle-festangestellte(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _organisatorischeeinheiten(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _zbt-festangestellte(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _zbt-geschaeftsfuehrung(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl vfile: Global ACLs disabled Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: quota: quota_over_flag check: quota_over_script unset - skipping Apr 12 10:52:18 doveadm(pbs(a)xyz.de 1416382): Debug: auth-master: userdb lookup(pbs(a)xyz.de): Started userdb lookup Apr 12 10:52:18 doveadm(pbs(a)xyz.de 1416382): Debug: auth-master: userdb lookup(pbs(a)xyz.de): auth USER input:pbs@xyz.de home=/var/dovecot/imap/xyz.de/pbs quota_rule=*:bytes=20971520000master_user=pbs@xyz.de acl_groups=_admins@xyz.de,_alle-festangestellte@xyz.de,_organisatorische einheiten@xyz.de,_zbt-festangestellte@xyz.de,_zbt-geschaeftsfuehrung@xyz.de, Apr 12 10:52:18 doveadm(pbs(a)xyz.de 1416382): Debug: auth-master: userdb lookup(pbs(a)xyz.de): Finished userdb lookup (username=pbs(a)xyz.de home=/var/dovecot/imap/xyz.de/pbs quota_rule=*:bytes=20971520000master_user=pbs@xyz.de acl_groups=_admins@xyz.de,_alle-festangestellte@xyz.de,_organisatorische einheiten@xyz.de,_zbt-festangestellte@xyz.de,_zbt-geschaeftsfuehrung@xyz.de,) Apr 12 10:52:18 doveadm(pbs(a)xyz.de 1416382): Debug: Added userdb setting:plugin/acl_groups=_admins@xyz.de,_alle-festangestellte@xyz.de,_organisatorische einheiten@xyz.de,_zbt-festangestellte@xyz.de,_zbt-geschaeftsfuehrung@xyz.de, Apr 12 10:52:18 doveadm(pbs(a)xyz.de 1416382): Debug: Added userdb setting:plugin/master_user=pbs@xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de 1416382): Debug: Added userdb setting: plugin/quota_rule=*:bytes=20971520000 Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: Effective uid=90, gid=101, home=/var/dovecot/imap/xyz.de/pbs Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: dict(file): dict created (uri=file:/var/dovecot/imap/xyz.de/shared-mailboxes.db, base_dir=/run/dovecot) Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: Quota root: name=User quota backend=dict args=:ns=INBOX/:file:/var/dovecot/imap/xyz.de/pbs/dovecot-quota Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: Quota rule: root=User quota mailbox=* bytes=20971520000 messages=0 Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: Quota grace: root=User quota bytes=2097152000 (10%) Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: quota-dict:user=pbs@xyz.de, uri=file:/var/dovecot/imap/xyz.de/pbs/dovecot-quota, noenforcing=0 Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: dict(file): dict created (uri=file:/var/dovecot/imap/xyz.de/pbs/dovecot-quota, base_dir=/run/dovecot) Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: lua: Loading /etc/dovecot/dovecot-push.lua Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: lua: Calling script_init Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: fs: root=/var/dovecot/imap/xyz.de/pbs-2024-03-19/mdbox, index=, indexpvt=, control=, inbox=, alt= Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: initializing backend with data: vfile Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: acl username =pbs(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: owner = 1 Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _admins(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _alle-festangestellte(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _organisatorischeeinheiten(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _zbt-festangestellte(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _zbt-geschaeftsfuehrung(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl vfile: Global ACLs disabled Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Error: quota: Unknown namespace: INBOX/ Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: quota: quota_over_flag check: quota_over_script unset - skipping Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl vfile: file /var/dovecot/imap/xyz.de/pbs-2024-03-19/mdbox/mailboxes/dovecot-acl not found Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: User session is finished Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: dict(file): dict destroyed Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: dict(file): Waiting for dict to finish pending operations Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: dict(file): dict destroyed Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: User session is finished Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: dict(file): dict destroyed Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: dict(file): Waiting for dict to finish pending operations Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: dict(file): dict destroyed Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: auth-master: conn unix:/run/dovecot/auth-userdb (pid=1,uid=0): Disconnected: Connection closed (fd=8) root@aab41229427e:/var/dovecot/imap/xyz.de# doveconf -n # 2.3.20 (80a5ac675d): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.20 (149edcf2) # OS: Linux 5.4.0-174-generic x86_64 Ubuntu 20.04.6 LTS # Hostname: aab41229427e auth_cache_negative_ttl = 2 mins auth_cache_size = 10 M auth_cache_ttl = 5 mins auth_master_user_separator = * auth_mechanisms = plain login auth_username_chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@#" default_client_limit = 3500 default_process_limit = 512 disable_plaintext_auth = no doveadm_password = # hidden, use -P to show it doveadm_port = 12345 first_valid_uid = 90 listen = * lmtp_rcpt_check_quota = yes log_path = /dev/stderr login_greeting = Dovecot FRA.nfs ready mail_access_groups = dovecot mail_attribute_dict =file:%h/dovecot-metadata mail_gid = dovecot mail_location = mdbox:~/mdbox mail_log_prefix = "%s(%u %p): " mail_max_userip_connections = 200 mail_plugins = acl quota notify replication mail_log mail_lua notify push_notification push_notification_lua mail_uid = dovecot managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave vnd.dovecot.debug mbox_min_index_size = 1000 B mdbox_rotate_size = 50 M namespace inboxes { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Templates { auto = subscribe } mailbox Trash { auto = subscribe special_use = \Trash } prefix = INBOX/ separator = / subscriptions = no } namespace subs { hidden = yes list = no location = prefix = separator = / } namespace users { location = mdbox:%%h/mdbox prefix = user/%%n/ separator = / subscriptions = no type = shared } passdb { args = /etc/dovecot/dovecot-dict-master-auth.conf driver = dict master = yes } passdb { args = /etc/dovecot/dovecot-dict-auth.conf driver = dict } plugin { acl = vfile acl_shared_dict =file:/var/dovecot/imap/%d/shared-mailboxes.db mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size mail_replica = tcp:10.44.99.6 push_lua_url =http://push-proxy/ push_notification_driver = lua:file=/etc/dovecot/dovecot-push.lua quota =dict:User quota::ns=INBOX/:file:%h/dovecot-quota quota_rule = *:storage=200GB sieve = ~/sieve/dovecot.sieve sieve_after = /var/dovecot/sieve/after.d/ sieve_before = /var/dovecot/sieve/before.d/ sieve_dir = ~/sieve sieve_extensions = +editheader +vacation-seconds sieve_user_log = ~/.sieve.log sieve_vacation_min_period = 1s } postmaster_address =admins(a)egroupware.org protocols = imap pop3 lmtp sieve replication_dsync_parameters = -d -n INBOX -l 30 -U service aggregator { fifo_listener replication-notify-fifo { user = dovecot } unix_listener replication-notify { user = dovecot } } service auth-worker { user = $default_internal_user } service auth { drop_priv_before_exec = no inet_listener { port = 113 } } service doveadm { inet_listener { port = 12345 } inet_listener { port = 26 } vsz_limit = 640 M } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 5 service_count = 1 vsz_limit = 64 M } service imap { executable = imap process_limit = 2048 vsz_limit = 640 M } service lmtp { inet_listener lmtp { port = 24 } unix_listener lmtp { mode = 0666 } vsz_limit = 512 M } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service pop3 { executable = pop3 } service postlogin { executable = script-login -d rawlog -b -t } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { group = dovecot mode = 0660 user = dovecot } } ssl_cert = </etc/certs/mail.egroupware.org.pem ssl_cipher_list = ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it submission_host = fra-node-pool-internal.k8s.farm.egroupware.org:25 userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } userdb { args = /etc/dovecot/dovecot-dict-auth.conf driver = dict } verbose_proctitle = yes protocol lda { mail_plugins = acl quota notify replication mail_log mail_lua notify push_notification push_notification_lua acl sieve quota } protocol imap { imap_metadata = yes mail_max_userip_connections = 200 mail_plugins = acl quota notify replication mail_log mail_lua notify push_notification push_notification_lua acl imap_acl quota imap_quota } protocol lmtp { mail_max_lock_timeout = 25 secs mail_plugins = acl quota notify replication mail_log mail_lua notify push_notification push_notification_lua acl sieve quota } -- Ralf Becker EGroupware GmbH [www.egroupware.org] Handelsregister HRB Kaiserslautern 3587 Geschäftsführer Birgit und Ralf Becker Leibnizstr. 17, 67663 Kaiserslautern, Germany Telefon +49 631 31657-0 Dovecot version is 2.3.20 and I try to restore a folder hierarchy from an older snapshot of the mailbox (folders in question have been deleted): sudo -u dovecot doveadm -Dv import -u pbs(a)xyz.de -s mdbox:$(pwd)/pbs-2024-03- 19/mdbox INBOX mailbox 'projekte/8-BZ/*' I'm getting the following error: Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Error: quota: Unknown namespace: INBOX/ I also tried restoring in a (not existing) restore folder: Restore-2024-03-19 and using search query "mailbox 'projekte/8-BZ'", all give the same result :( Any ideas what might be wrong, I did this many times before, and it worked, so I'm puzzeled ... Here is the full output of doveadm import command above and doveconf -n: root@aab41229427e:/var/dovecot/imap/xyz.de# sudo -u dovecot doveadm -Dv import -u pbs(a)xyz.de -s mdbox:$(pwd)/pbs-2024-03-19/mdbox INBOX mailbox 'projekte/8- BZ/*' Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib/ dovecot/modules/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/lib/ dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentional, so just ignore this message) Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/ lib10_doveadm_sieve_plugin.so Debug: Skipping module doveadm_fts_lucene_plugin, because dlopen() failed: / usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_lucene_plugin.so: undefined symbol: lucene_index_iter_deinit (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib/ dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_user_get_language_list (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_mail_crypt_plugin, because dlopen() failed: / usr/lib/dovecot/modules/doveadm/libdoveadm_mail_crypt_plugin.so: undefined symbol: mail_crypt_box_get_pvt_digests (this is usually intentional, so just ignore this message) Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib/ dovecot/modules/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/lib/ dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentional, so just ignore this message) Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/ lib10_doveadm_sieve_plugin.so Debug: Skipping module doveadm_fts_lucene_plugin, because dlopen() failed: / usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_lucene_plugin.so: undefined symbol: lucene_index_iter_deinit (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib/ dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_user_get_language_list (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_mail_crypt_plugin, because dlopen() failed: / usr/lib/dovecot/modules/doveadm/libdoveadm_mail_crypt_plugin.so: undefined symbol: mail_crypt_box_get_pvt_digests (this is usually intentional, so just ignore this message) Apr 12 10:52:18 Debug: Loading modules from directory: /usr/lib/dovecot/modules Apr 12 10:52:18 Debug: Module loaded: /usr/lib/dovecot/modules/ lib01_acl_plugin.so Apr 12 10:52:18 Debug: Module loaded: /usr/lib/dovecot/modules/ lib01_mail_lua_plugin.so Apr 12 10:52:18 Debug: Module loaded: /usr/lib/dovecot/modules/ lib10_quota_plugin.so Apr 12 10:52:18 Debug: Module loaded: /usr/lib/dovecot/modules/ lib15_notify_plugin.so Apr 12 10:52:18 Debug: Module loaded: /usr/lib/dovecot/modules/ lib20_mail_log_plugin.so Apr 12 10:52:18 Debug: Module loaded: /usr/lib/dovecot/modules/ lib20_push_notification_plugin.so Apr 12 10:52:18 Debug: Module loaded: /usr/lib/dovecot/modules/ lib20_replication_plugin.so Apr 12 10:52:18 Debug: Module loaded: /usr/lib/dovecot/modules/ lib22_push_notification_lua_plugin.so Apr 12 10:52:18 Debug: Loading modules from directory: /usr/lib/dovecot/ modules/doveadm Apr 12 10:52:18 Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/ lib10_doveadm_acl_plugin.so Apr 12 10:52:18 Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/ lib10_doveadm_quota_plugin.so Apr 12 10:52:18 Debug: Skipping module doveadm_fts_lucene_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/ lib20_doveadm_fts_lucene_plugin.so: undefined symbol: lucene_index_iter_deinit (this is usually intentional, so just ignore this message) Apr 12 10:52:18 Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_user_get_language_list (this is usually intentional, so just ignore this message) Apr 12 10:52:18 Debug: Skipping module doveadm_mail_crypt_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/ libdoveadm_mail_crypt_plugin.so: undefined symbol: mail_crypt_box_get_pvt_digests (this is usually intentional, so just ignore this message) Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: auth-master: passdb lookup (pbs(a)xyz.de) Started passdb lookup Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: auth-master: conn unix:/run/ dovecot/auth-userdb: Connecting Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: auth-master: conn unix:/run/ dovecot/auth-userdb (pid=1,uid=0): Client connected (fd=8) Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: auth-master: passdb lookup (pbs(a)xyz.de) auth PASS input: Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: auth-master: passdb lookup (pbs(a)xyz.de) Passdb lookup failed Apr 12 10:52:18 doveadm(pbs(a)xyz.de 1416382): Debug: auth-master: userdb lookup (pbs(a)xyz.de) Started userdb lookup Apr 12 10:52:18 doveadm(pbs(a)xyz.de 1416382): Debug: auth-master: userdb lookup (pbs(a)xyz.de) auth USER input: pbs(a)xyz.de home=/var/dovecot/imap/xyz.de/pbs quota_rule=*:bytes=20971520000 master_user=pbs(a)xyz.de acl_groups=_admins@xyz.de,_alle-festangestellte@xyz.de,_organisatorische einheiten@xyz.de,_zbt-festangestellte@xyz.de,_zbt-geschaeftsfuehrung@xyz.de, Apr 12 10:52:18 doveadm(pbs(a)xyz.de 1416382): Debug: auth-master: userdb lookup (pbs(a)xyz.de) Finished userdb lookup (username=pbs(a)xyz.de home=/var/dovecot/ imap/xyz.de/pbs quota_rule=*:bytes=20971520000 master_user=pbs(a)xyz.de acl_groups=_admins@xyz.de,_alle-festangestellte@xyz.de,_organisatorische einheiten@xyz.de,_zbt-festangestellte@xyz.de,_zbt-geschaeftsfuehrung@xyz.de,) Apr 12 10:52:18 doveadm(pbs(a)xyz.de 1416382): Debug: Added userdb setting: plugin/acl_groups=_admins@xyz.de,_alle-festangestellte@xyz.de,_organisatorische einheiten@xyz.de,_zbt-festangestellte@xyz.de,_zbt-geschaeftsfuehrung@xyz.de, Apr 12 10:52:18 doveadm(pbs(a)xyz.de 1416382): Debug: Added userdb setting: plugin/master_user=pbs(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de 1416382): Debug: Added userdb setting: plugin/quota_rule=*:bytes=20971520000 Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: Effective uid=90, gid=101, home=/ var/dovecot/imap/xyz.de/pbs Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: dict(file): dict created (uri=file: /var/dovecot/imap/xyz.de/shared-mailboxes.db, base_dir=/run/dovecot) Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: Quota root: name=User quota backend=dict args=:ns=INBOX/:file:/var/dovecot/imap/xyz.de/pbs/dovecot-quota Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: Quota rule: root=User quota mailbox=* bytes=20971520000 messages=0 Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: Quota grace: root=User quota bytes=2097152000 (10%) Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: quota-dict: user=pbs(a)xyz.de, uri=file:/var/dovecot/imap/xyz.de/pbs/dovecot-quota, noenforcing=0 Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: dict(file): dict created (uri=file: /var/dovecot/imap/xyz.de/pbs/dovecot-quota, base_dir=/run/dovecot) Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: lua: Loading /etc/dovecot/dovecot- push.lua Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: lua: Calling script_init Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: Namespace inboxes: type=private, prefix=INBOX/, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=no location=mdbox:~/mdbox Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: fs: root=/var/dovecot/imap/xyz.de/ pbs/mdbox, index=, indexpvt=, control=, inbox=, alt= Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: initializing backend with data: vfile Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: acl username = pbs(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: owner = 1 Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _admins(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _alle- festangestellte(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _organisatorische einheiten(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _zbt- festangestellte(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _zbt- geschaeftsfuehrung(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl vfile: Global ACLs disabled Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: Namespace users: type=shared, prefix=user/%n/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=no location=mdbox:%h/mdbox Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: shared: root=/run/dovecot, index=, indexpvt=, control=, inbox=, alt= Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: initializing backend with data: vfile Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: acl username = pbs(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: owner = 0 Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _admins(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _alle- festangestellte(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _organisatorische einheiten(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _zbt- festangestellte(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _zbt- geschaeftsfuehrung(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl vfile: Global ACLs disabled Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: Namespace subs: type=private, prefix=, sep=/, inbox=no, hidden=yes, list=no, subscriptions=yes location=mdbox:~/mdbox Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: fs: root=/var/dovecot/imap/xyz.de/ pbs/mdbox, index=, indexpvt=, control=, inbox=, alt= Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: initializing backend with data: vfile Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: acl username = pbs(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: owner = 1 Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _admins(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _alle- festangestellte(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _organisatorische einheiten(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _zbt- festangestellte(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _zbt- geschaeftsfuehrung(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl vfile: Global ACLs disabled Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: quota: quota_over_flag check: quota_over_script unset - skipping Apr 12 10:52:18 doveadm(pbs(a)xyz.de 1416382): Debug: auth-master: userdb lookup (pbs(a)xyz.de) Started userdb lookup Apr 12 10:52:18 doveadm(pbs(a)xyz.de 1416382): Debug: auth-master: userdb lookup (pbs(a)xyz.de) auth USER input: pbs(a)xyz.de home=/var/dovecot/imap/xyz.de/pbs quota_rule=*:bytes=20971520000 master_user=pbs(a)xyz.de acl_groups=_admins@xyz.de,_alle-festangestellte@xyz.de,_organisatorische einheiten@xyz.de,_zbt-festangestellte@xyz.de,_zbt-geschaeftsfuehrung@xyz.de, Apr 12 10:52:18 doveadm(pbs(a)xyz.de 1416382): Debug: auth-master: userdb lookup (pbs(a)xyz.de) Finished userdb lookup (username=pbs(a)xyz.de home=/var/dovecot/ imap/xyz.de/pbs quota_rule=*:bytes=20971520000 master_user=pbs(a)xyz.de acl_groups=_admins@xyz.de,_alle-festangestellte@xyz.de,_organisatorische einheiten@xyz.de,_zbt-festangestellte@xyz.de,_zbt-geschaeftsfuehrung@xyz.de,) Apr 12 10:52:18 doveadm(pbs(a)xyz.de 1416382): Debug: Added userdb setting: plugin/acl_groups=_admins@xyz.de,_alle-festangestellte@xyz.de,_organisatorische einheiten@xyz.de,_zbt-festangestellte@xyz.de,_zbt-geschaeftsfuehrung@xyz.de, Apr 12 10:52:18 doveadm(pbs(a)xyz.de 1416382): Debug: Added userdb setting: plugin/master_user=pbs(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de 1416382): Debug: Added userdb setting: plugin/quota_rule=*:bytes=20971520000 Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: Effective uid=90, gid=101, home=/ var/dovecot/imap/xyz.de/pbs Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: dict(file): dict created (uri=file: /var/dovecot/imap/xyz.de/shared-mailboxes.db, base_dir=/run/dovecot) Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: Quota root: name=User quota backend=dict args=:ns=INBOX/:file:/var/dovecot/imap/xyz.de/pbs/dovecot-quota Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: Quota rule: root=User quota mailbox=* bytes=20971520000 messages=0 Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: Quota grace: root=User quota bytes=2097152000 (10%) Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: quota-dict: user=pbs(a)xyz.de, uri=file:/var/dovecot/imap/xyz.de/pbs/dovecot-quota, noenforcing=0 Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: dict(file): dict created (uri=file: /var/dovecot/imap/xyz.de/pbs/dovecot-quota, base_dir=/run/dovecot) Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: lua: Loading /etc/dovecot/dovecot- push.lua Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: lua: Calling script_init Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: fs: root=/var/dovecot/imap/xyz.de/ pbs-2024-03-19/mdbox, index=, indexpvt=, control=, inbox=, alt= Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: initializing backend with data: vfile Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: acl username = pbs(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: owner = 1 Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _admins(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _alle- festangestellte(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _organisatorische einheiten(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _zbt- festangestellte(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: _zbt- geschaeftsfuehrung(a)xyz.de Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl: group added: Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl vfile: Global ACLs disabled Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Error: quota: Unknown namespace: INBOX/ Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: quota: quota_over_flag check: quota_over_script unset - skipping Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: acl vfile: file /var/dovecot/imap/ xyz.de/pbs-2024-03-19/mdbox/mailboxes/dovecot-acl not found Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: User session is finished Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: dict(file): dict destroyed Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: dict(file): Waiting for dict to finish pending operations Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: dict(file): dict destroyed Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: User session is finished Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: dict(file): dict destroyed Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: dict(file): Waiting for dict to finish pending operations Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: dict(file): dict destroyed Apr 12 10:52:18 doveadm(pbs(a)xyz.de): Debug: auth-master: conn unix:/run/ dovecot/auth-userdb (pid=1,uid=0): Disconnected: Connection closed (fd=8) root@aab41229427e:/var/dovecot/imap/xyz.de# doveconf -n # 2.3.20 (80a5ac675d): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.20 (149edcf2) # OS: Linux 5.4.0-174-generic x86_64 Ubuntu 20.04.6 LTS # Hostname: aab41229427e auth_cache_negative_ttl = 2 mins auth_cache_size = 10 M auth_cache_ttl = 5 mins auth_master_user_separator = * auth_mechanisms = plain login auth_username_chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@#" default_client_limit = 3500 default_process_limit = 512 disable_plaintext_auth = no doveadm_password = # hidden, use -P to show it doveadm_port = 12345 first_valid_uid = 90 listen = * lmtp_rcpt_check_quota = yes log_path = /dev/stderr login_greeting = Dovecot FRA.nfs ready mail_access_groups = dovecot mail_attribute_dict = file:%h/dovecot-metadata mail_gid = dovecot mail_location = mdbox:~/mdbox mail_log_prefix = "%s(%u %p): " mail_max_userip_connections = 200 mail_plugins = acl quota notify replication mail_log mail_lua notify push_notification push_notification_lua mail_uid = dovecot managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave vnd.dovecot.debug mbox_min_index_size = 1000 B mdbox_rotate_size = 50 M namespace inboxes { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Templates { auto = subscribe } mailbox Trash { auto = subscribe special_use = \Trash } prefix = INBOX/ separator = / subscriptions = no } namespace subs { hidden = yes list = no location = prefix = separator = / } namespace users { location = mdbox:%%h/mdbox prefix = user/%%n/ separator = / subscriptions = no type = shared } passdb { args = /etc/dovecot/dovecot-dict-master-auth.conf driver = dict master = yes } passdb { args = /etc/dovecot/dovecot-dict-auth.conf driver = dict } plugin { acl = vfile acl_shared_dict = file:/var/dovecot/imap/%d/shared-mailboxes.db mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size mail_replica = tcp:10.44.99.6 push_lua_url = http://push-proxy/ push_notification_driver = lua:file=/etc/dovecot/dovecot-push.lua quota = dict:User quota::ns=INBOX/:file:%h/dovecot-quota quota_rule = *:storage=200GB sieve = ~/sieve/dovecot.sieve sieve_after = /var/dovecot/sieve/after.d/ sieve_before = /var/dovecot/sieve/before.d/ sieve_dir = ~/sieve sieve_extensions = +editheader +vacation-seconds sieve_user_log = ~/.sieve.log sieve_vacation_min_period = 1s } postmaster_address = admins(a)egroupware.org protocols = imap pop3 lmtp sieve replication_dsync_parameters = -d -n INBOX -l 30 -U service aggregator { fifo_listener replication-notify-fifo { user = dovecot } unix_listener replication-notify { user = dovecot } } service auth-worker { user = $default_internal_user } service auth { drop_priv_before_exec = no inet_listener { port = 113 } } service doveadm { inet_listener { port = 12345 } inet_listener { port = 26 } vsz_limit = 640 M } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 5 service_count = 1 vsz_limit = 64 M } service imap { executable = imap process_limit = 2048 vsz_limit = 640 M } service lmtp { inet_listener lmtp { port = 24 } unix_listener lmtp { mode = 0666 } vsz_limit = 512 M } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service pop3 { executable = pop3 } service postlogin { executable = script-login -d rawlog -b -t } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { group = dovecot mode = 0660 user = dovecot } } ssl_cert = </etc/certs/mail.egroupware.org.pem ssl_cipher_list = ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256: ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20- POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256- GCM-SHA384 ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it submission_host = fra-node-pool-internal.k8s.farm.egroupware.org:25 userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } userdb { args = /etc/dovecot/dovecot-dict-auth.conf driver = dict } verbose_proctitle = yes protocol lda { mail_plugins = acl quota notify replication mail_log mail_lua notify push_notification push_notification_lua acl sieve quota } protocol imap { imap_metadata = yes mail_max_userip_connections = 200 mail_plugins = acl quota notify replication mail_log mail_lua notify push_notification push_notification_lua acl imap_acl quota imap_quota } protocol lmtp { mail_max_lock_timeout = 25 secs mail_plugins = acl quota notify replication mail_log mail_lua notify push_notification push_notification_lua acl sieve quota } -- Ralf Becker EGroupware GmbH [www.egroupware.org] Handelsregister HRB Kaiserslautern 3587 Geschäftsführer Birgit und Ralf Becker Leibnizstr. 17, 67663 Kaiserslautern, Germany Telefon +49 631 31657-0

2 2

Auth fails for system users
by Christian H. Kuhn 13 Apr '24

13 Apr '24

Hi all, i try to migrate my dovecot to a new server. While everything works fine for my virtual mailbox domains via mysql, my system users for my main domain cannot authenticate. System users can login via ssh, can sudo etc. root@bywater ~ # lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 22.04.4 LTS Release: 22.04 Codename: jammy root@bywater ~ # doveconf -n # 2.3.16 (7e2e900c1a): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.16 (09c29328) # OS: Linux 5.15.0-102-generic x86_64 Ubuntu 22.04.4 LTS # Hostname: bywater.qno.de auth_debug = yes auth_debug_passwords = yes listen = 65.21.136.15, [::] mail_location = maildir:~/Maildir mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/tables.d/dovecot-sql.conf.ext driver = sql } passdb { args = dovecot driver = pam } plugin { sieve = file:~/sieve;active=~/.dovecot.sieve } postmaster_address = postmaster(a)qno.de protocols = " imap sieve" service auth-worker { user = vmail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = dovecot } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { unix_listener lmtp { group = postfix mode = 0600 user = postfix } } ssl = required ssl_cert = </etc/letsencrypt/live/imap2.qno.de/fullchain.pem ssl_cipher_list = ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305 ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it syslog_facility = local0 userdb { args = uid=vmail gid=vmail home=/var/mail/vhosts/%d/%u driver = static } userdb { driver = passwd } verbose_proctitle = yes /etc/pam.d/dovecot: #%PAM-1.0 @include common-auth @include common-account @include common-session root@bywater ~ # doveadm auth test qno 'xxxxxxx' passdb: qno auth failed extra fields: user=qno /var/log/auth.log: Apr 12 18:19:16 bywater unix_chkpwd[611002]: check pass; user unknown Apr 12 18:19:16 bywater unix_chkpwd[611003]: check pass; user unknown Apr 12 18:19:16 bywater unix_chkpwd[611003]: password check failed for user (qno) Apr 12 18:19:16 bywater auth worker: PASSV: pam_unix(dovecot:auth): authentication failure; logname= uid=5000 euid=5000 tty=dovecot ruser=qno rhost= user=qno /var/log/dovecot/dovecot.debug: Apr 12 18:19:16 bywater dovecot: auth: Debug: auth client connected (pid=0) Apr 12 18:19:16 bywater dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=doveadm#011debug#011resp=cW5vAHFu bwAhMTRKMDN6ODgu (previous base64 data may contain sensitive data) Apr 12 18:19:16 bywater dovecot: auth: Debug: sql(qno): Performing passdb lookup Apr 12 18:19:16 bywater dovecot: auth-worker(610993): Debug: conn unix:auth-worker (pid=610992,uid=110): auth-worker<5>: Handling PASSV request Apr 12 18:19:16 bywater dovecot: auth-worker(610993): Debug: conn unix:auth-worker (pid=610992,uid=110): auth-worker<5>: sql(qno): Performing passdb lookup Apr 12 18:19:16 bywater dovecot: auth-worker(610993): Debug: conn unix:auth-worker (pid=610992,uid=110): auth-worker<5>: sql(qno): query: SELECT email as user, password FROM user WHERE email='qno' Apr 12 18:19:16 bywater dovecot: auth-worker(610993): Debug: mysql(localhost): Finished query 'SELECT email as user, pas sword FROM user WHERE email='qno'' in 0 msecs Apr 12 18:19:16 bywater dovecot: auth-worker(610993): Debug: conn unix:auth-worker (pid=610992,uid=110): auth-worker<5>: sql(qno): Finished passdb lookup Apr 12 18:19:16 bywater dovecot: auth-worker(610993): Debug: conn unix:auth-worker (pid=610992,uid=110): auth-worker<5>: Finished: user_unknown Apr 12 18:19:16 bywater dovecot: auth: Debug: sql(qno): Finished passdb lookup Apr 12 18:19:16 bywater dovecot: auth: Debug: pam(qno): Performing passdb lookup Apr 12 18:19:16 bywater dovecot: auth-worker(610993): Debug: conn unix:auth-worker (pid=610992,uid=110): auth-worker<6>: Handling PASSV request Apr 12 18:19:16 bywater dovecot: auth-worker(610993): Debug: conn unix:auth-worker (pid=610992,uid=110): auth-worker<6>: pam(qno): Performing passdb lookup Apr 12 18:19:16 bywater dovecot: auth-worker(610993): Debug: conn unix:auth-worker (pid=610992,uid=110): auth-worker<6>: pam(qno): lookup service=dovecot Apr 12 18:19:16 bywater dovecot: auth-worker(610993): Debug: conn unix:auth-worker (pid=610992,uid=110): auth-worker<6>: pam(qno): #1/1 style=1 msg=Password: Apr 12 18:19:17 bywater dovecot: auth-worker(610993): Debug: conn unix:auth-worker (pid=610992,uid=110): auth-worker<6>: pam(qno): Finished passdb lookup Apr 12 18:19:17 bywater dovecot: auth-worker(610993): Debug: conn unix:auth-worker (pid=610992,uid=110): auth-worker<6>: Finished: password_mismatch Apr 12 18:19:17 bywater dovecot: auth: Debug: pam(qno): Finished passdb lookup Apr 12 18:19:17 bywater dovecot: auth: Debug: auth(qno): Auth request finished Same results with a real IMAP client. I have no further ideas where to look for my fault. Can somebody help? TIA QNo

3 2

Re: Dovecot somehow creating new local e-mails from a compromised account
by Joseph Tam 12 Apr '24

12 Apr '24

Greg Earle <earle(a)isolar.dyndns.org> writes: > Obviously I've changed the account password but I would really like to > know how they were able to create e-mails on my system when ostensibly I > would have assumed they could only read the account's e-mails via IMAP. The INBOX is not read-only. There's nothing really special about this mailbox versus other mailboxes. IMAP is used to create messages all the time. For example, if you have an outgoing "Sent" folder, once your mail reader gives it to your mail server, it then puts a copy into the outgoing folder via IMAP. Once someone gain controls over your IMAP account, they can create messages with a format totally different than what your mail server can make. Joseph Tam <jtam.home(a)gmail.com>

1 0

Dovecot somehow creating new local e-mails from a compromised account
by Greg Earle 12 Apr '24

12 Apr '24

Hello all, long-time listener, first-time caller ... I returned from an Eclipse trip to find a couple of sp*m e-mails in an account. I checked the logs and there was no Postfix activity during the delivery times. The 2 spams have basically no headers in them. I went back to the logs and instead found Dovecot IMAP server activity during those times. Apparently Russian hax0rs (hostnames stat_list.ip-ptr.tech and service_stat.ip-ptr.tech) compromised an account and logged into it via IMAP, and somehow were able to create these two sp*m e-mails on my system. Obviously I've changed the account password but I would really like to know how they were able to create e-mails on my system when ostensibly I would have assumed they could only read the account's e-mails via IMAP. If it matters it's an older version of Dovecot on Fedora with a fairly heavily customized set of .conf files. I ran "doveconf -a" but didn't see anything obvious in the output. I may enable rawlogs in case they come knocking again, even though the password has been changed. Thanks.

4 3

Re: Message Age Deletion Query
by Steve Hadachek 11 Apr '24

11 Apr '24

Thanks Lucas! I'll give these a try. On Wednesday, April 10, 2024 at 11:31:42 PM PDT, Lucas Rolff <lucas(a)lucasrolff.com> wrote: https://doc.dovecot.org/3.0/man/doveadm-search-query.7/ Probably something like savedbefore 4weeksOr even sentbefore 4weeks Sent from Outlook for iOSFrom: Steve Hadachek via dovecot <dovecot(a)dovecot.org> Sent: Thursday, April 11, 2024 10:03:22 AM To: dovecot(a)dovecot.org <dovecot(a)dovecot.org> Subject: Message Age Deletion Query Hello. Using Mochahost and want to delete mailbox items older than 1 month (approx) from receipt . Reading DoveCot documentation, not finding age query. Can you please specify this for me and provide an example? Thank you and Kind Regards, -Steve Hadachek Thanks Lucas! I'll give these a try. On Wednesday, April 10, 2024 at 11:31:42 PM PDT, Lucas Rolff <lucas(a)lucasrolff.com> wrote: https://doc.dovecot.org/3.0/man/doveadm-search-query.7/ Probably something like savedbefore 4weeks Or even sentbefore 4weeks Sent from Outlook_for_iOS =============================================================================== From: Steve Hadachek via dovecot <dovecot(a)dovecot.org> Sent: Thursday, April 11, 2024 10:03:22 AM To: dovecot(a)dovecot.org <dovecot(a)dovecot.org> Subject: Message Age Deletion Query Hello. Using Mochahost and want to delete mailbox items older than 1 month (approx) from receipt . Reading DoveCot documentation, not finding age query. Can you please specify this for me and provide an example? Thank you and Kind Regards, -Steve Hadachek

1 0

maybe list rocky and centos9 stream?
by Marc 11 Apr '24

11 Apr '24

maybe list rocky and centos9 stream on the repo page? https://repo.dovecot.org/

3 3

imap/pop proxy
by Gandalf Corvotempesta 11 Apr '24

11 Apr '24

Hi all first time user as dovecot imap/pop3 proxy. As i'm migrating some mailboxes to a new server, i would like to move a couple at once, not everything (more than 10k). The quickest way would be to setup the current (and old) dovecot server as pop3/imap server AND proxy. I'm thinking to start returning proxy_maybe in the password DB query, pointing to the mailbox server. If the mailbox server is migrated to the new one, proxy_maybe will point to the remote server, if the mailbox is still on the old server, proxy_maybe will point to localhost. Is this enough ? Password auth should be done on the "remote" server and not by the proxy itself. Ideas ?

1 0

Strange problem with sieve
by Peter 11 Apr '24

11 Apr '24

Hello, I use Dovecot 2.3.20 on FreeBSD 13.2 (in jail) as a part of iRedMail installation. Some mailboxes are configured for automatic mails processing using sieve (execute :pipe) and a custom binary (started by script). The system was configured and was working correctly during several weeks. Since ~10 days the system starts to work strangely. _*/Some/*_ mails cannot be decoded anymore. No changes at our side, no updates etc. I dumped the content received by my binary, and it looks really strange: pOUc9Z33O0GbfzbW5Mrmi 3L4tTlvKfsD8wP+hc6vN1v1bv+Vx827kW+YX5n/Zxtl240erH4t+nNyeuL1zh92O0p24nYKd vbtcd1UVyBdkFwztDtrdsIexJ2/Pu71L914vnFdYto+0T7JvoCiwqGm/7v6d+78UJxf3lHiU 1B9QO7D1wIeD3IO3S91K68rUy/LLPv/E/6m/3Le8oUK/ovAQ7lDWoaeHow63/8z8ubpStTK/ This is a start of one mail. No headers, no readable data. I removed "discard;" from sieve script to put such mails in the mailbox, and the mails look normally: Mime-Version:1.0 Content-Type:multipart/mixed; boundary="=-/3n/zeVGlN5thgeL28RKiw==" --=-/3n/zeVGlN5thgeL28RKiw== Content-Type: multipart/alternative; boundary="=-sE/MdvfJZlakBmrKkcdzCg==" --=-sE/MdvfJZlakBmrKkcdzCg== Content-Type: multipart/related; boundary="=-cgJVnLNlzX5YuD6yaI5USQ==" --=-cgJVnLNlzX5YuD6yaI5USQ== Content-Transfer-Encoding: base64 Content-Type: text/html; charset=utf-8 etc. Really, I have no idea about any direction to explore. The server is totally under my control, I can do anything, but I have no idea how to debug this situation. I tried to redirect such mails to another mailbox and process them there, but I get the same strange data. If I connect Thunderbird to the mailbox - I can read the mails correctly. So, the problem arrives at the moment when the sieve system is invoked - the mail data is corrupted somehow. Any advise will be really appreciated. Peter Hello, I use Dovecot 2.3.20 on FreeBSD 13.2 (in jail) as a part of iRedMail installation. Some mailboxes are configured for automatic mails processing using sieve (execute :pipe) and a custom binary (started by script). The system was configured and was working correctly during several weeks. Since ~10 days the system starts to work strangely. Some mails cannot be decoded anymore. No changes at our side, no updates etc. I dumped the content received by my binary, and it looks really strange: pOUc9Z33O0GbfzbW5Mrmi 3L4tTlvKfsD8wP+hc6vN1v1bv+Vx827kW+YX5n/Zxtl240erH4t+nNyeuL1zh92O0p24nYKd vbtcd1UVyBdkFwztDtrdsIexJ2/Pu71L914vnFdYto+0T7JvoCiwqGm/7v6d+78UJxf3lHiU 1B9QO7D1wIeD3IO3S91K68rUy/LLPv/E/6m/3Le8oUK/ovAQ7lDWoaeHow63/8z8ubpStTK/ This is a start of one mail. No headers, no readable data. I removed "discard;" from sieve script to put such mails in the mailbox, and the mails look normally: Mime-Version:1.0 Content-Type:multipart/mixed; boundary="=-/3n/zeVGlN5thgeL28RKiw==" --=-/3n/zeVGlN5thgeL28RKiw== Content-Type: multipart/alternative; boundary="=-sE/MdvfJZlakBmrKkcdzCg==" --=-sE/MdvfJZlakBmrKkcdzCg== Content-Type: multipart/related; boundary="=-cgJVnLNlzX5YuD6yaI5USQ==" --=-cgJVnLNlzX5YuD6yaI5USQ== Content-Transfer-Encoding: base64 Content-Type: text/html; charset=utf-8 etc. Really, I have no idea about any direction to explore. The server is totally under my control, I can do anything, but I have no idea how to debug this situation. I tried to redirect such mails to another mailbox and process them there, but I get the same strange data. If I connect Thunderbird to the mailbox - I can read the mails correctly. So, the problem arrives at the moment when the sieve system is invoked - the mail data is corrupted somehow. Any advise will be really appreciated. Peter

2 4

Message Age Deletion Query
by Steve Hadachek 11 Apr '24

11 Apr '24

Hello. Using Mochahost and want to delete mailbox items older than 1 month (approx) from receipt . Reading DoveCot documentation, not finding age query. Can you please specify this for me and provide an example? Thank you and Kind Regards, -Steve Hadachek Hello. Using Mochahost and want to delete mailbox items older than 1 month (approx) from receipt . Reading DoveCot documentation, not finding age query. Can you please specify this for me and provide an example? Thank you and Kind Regards, -Steve Hadachek

2 1

Re: server migration
by Gandalf Corvotempesta 11 Apr '24

11 Apr '24

Guys, any help? Also, what would happen if the new server has a different hostname ? Il giorno dom 10 mar 2024 alle ore 14:28 Gandalf Corvotempesta <gandalf.corvotempesta(a)gmail.com> ha scritto: > > Hi guys > I have to migrate around 10k mailboxes from dovecot 2.13 to (i think) > the same version but on a different server. > > I have to reduce as much as possible the inconveniences to the users, > at least in this (temporary) phase. > > What do you suggest to move everything ? Same config, same maildir > location and rsync everything ? > > Better ideas ? i've thought to use the exact same config on both > servers, then start multiple rsync to sync as much as possible and > when ready, drop the old dovecot in the old server, rsync the latest > changes, and then move the dns pointment from the old ip to the new > one. > > But what about the MUA downloading emails ? I think this would be > safe...or there is a chance that some MUA would re-download everything > ? This would be unacceptable. > > thank you

5 11

Users with enough rope to hang themselves
by Rupert Gallagher 10 Apr '24

10 Apr '24

Hello, I keep finding myself in a corner with a user. He uses mail extensively, which is fine, he has a huge archive of own professional correspondence, which is fine, but he uses mail folders as if they were regular system folders, with very long paths, and keeps renaming them and moving them around, daily, breaking the mail index and ultimately wasting his own time looking around for lost mail. His Inbox holds a gargantuan of subfolders, causing both the client and the server to overwork each time he opens the mail. His Archive is a maze of subfolders with repeating names. I advised him almost daily across 20 year on how to stay organised, but he keeps abusing the service. I want to help him by limiting what he can do with folders. This is the agenda: 1. the Archive is the only place where he can create folders; 2. folder names have a maximum length of 20 characters. Can I do that with Dovecot? Hello, I keep finding myself in a corner with a user. He uses mail extensively, which is fine, he has a huge archive of own professional correspondence, which is fine, but he uses mail folders as if they were regular system folders, with very long paths, and keeps renaming them and moving them around, daily, breaking the mail index and ultimately wasting his own time looking around for lost mail. His Inbox holds a gargantuan of subfolders, causing both the client and the server to overwork each time he opens the mail. His Archive is a maze of subfolders with repeating names. I advised him almost daily across 20 year on how to stay organised, but he keeps abusing the service. I want to help him by limiting what he can do with folders. This is the agenda: 1. the Archive is the only place where he can create folders; 2. folder names have a maximum length of 20 characters. Can I do that with Dovecot?

2 3