- dovecot - dovecot.org

Show other users quota
by Kristjan Eentsalu 19 Jun '17

19 Jun '17

Hey, Is there a way to show other users quota under shared namespace? Right now when I try to "a getquotaroot user/other.user" I get "NO Not showing other users' quota" Dovecot version 2.2.27 Relevant part of the config: namespace user { list = children location = maildir:%%h/Maildir:LAYOUT=fs:DIRNAME=iiuuuuiiiuuu:INDEXPVT=%h/shared/%%n prefix = user/%%n/ separator = / subscriptions = no type = shared } Kristjan

1 0

Re: Minor patches for builds against ancient platforms
by Joseph Tam 17 Jun '17

17 Jun '17

> I've tried changing how I symbolically linked the mailboxes, i.e., > creating a sub-directory that is symlinked into the user's mail/ > directory versus symbolically linking the mbox files themselves, etc. > No dice. Permissions are fine. I've even resorted to changing the > index locking strategy, to no avail. I've tested my setup by symlinking both folders and boxes with user/0700 permissions, and they all work fine. > Folders that are NOT symbolically linked work perfectly, and have various > levels of hierarchy that are selectable as expected. Nothing appears in the logs. > > $ cd ~/mail > $ ls -l > -rw------- 1 2411625 Dec 16 09:12 Dovecot > lrwxrwxrwx 1 21 Jun 13 18:01 OldMail -> /u2/usermail/luser > -rwx------ 8 4096 Jan 1 12:09 "Open Source Projects" If this is output on the dovecot server itself so there's no mismatch in pathnames. Have you checked whether the dovecot user can traverse all the way from / to /u2/usermail/luser/ > I've (rm ~/mail/.subscriptions && touch ~/mail/.subscriptions) to flush any > subscriptions file issues. I'm thinking no .subscription would be better. > Is there a subtle interaction with mail_full_filesystem_access settings, or > similar that might be getting in the way? Dovecot does have chroot-ing stuff that might impede symlink following: https://wiki.dovecot.org/Chrooting > Other data: there are fs quotas on / but not /u2. That shouldn't matter, but > I will concede that I'm not a little ignorant about such things. It seems you have more basic file access problems. > How might I go about further debugging this? I've tried to manually doveadm > index those mailboxes, which doesn't give me any errors, but it also returns > far too quickly to give me the impression that it's done anything. Same result. Nothing with verbose logging (set mail_debug = yes)? Try the simple case ln -s /u2/usermail/luser/OLD_INBOX/INBOX_2016_01_to_08 ~luser/mail/testbox then $ telnet localhost 10143 x0 login luser *** x1 SELECT testbox What do you get here and in your logs? If this doesn't produce any usable diagnostics, I would pull out the heavy duty process trace tool and trace the imap process to figure out what it's really doing and where it's failing. Joseph Tam <jtam.home(a)gmail.com>

2 1

Need Help to analyze the error or is it a bug?
by Dipl.-Ing. Harald E. Langner 16 Jun '17

16 Jun '17

After done an update to dovecot-2.2.30.2 my connection is broken since days. all what I try every time the same error: Jun 15 00:02:18 auth: Error: auth: environment corrupt; missing value for DOVECOT_ Jun 15 00:02:18 auth: Fatal: unsetenv(RESTRICT_SETUID) failed: Bad address Jun 15 00:02:18 master: Error: service(auth): command startup failed, throttling for 2 secs I try this: # doveadm -Dv auth test -x service=imap theusername mypassword output: Debug: Loading modules from directory: /usr/local/lib/dovecot Debug: Module loaded: /usr/local/lib/dovecot/lib20_virtual_plugin.so Debug: Loading modules from directory: /usr/local/lib/dovecot/doveadm Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so: Undefined symbol "acl_user_module" (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so: Undefined symbol "expire_set_lookup" (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so: Undefined symbol "quota_user_module" (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.so: Undefined symbol "fts_filter_filter" (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_mail_crypt_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/libdoveadm_mail_crypt_plugin.so: Undefined symbol "mail_crypt_user_get_public_key" (this is usually intentional, so just ignore this message) Error: Timeout waiting for handshake from auth server. my pid=63521, input bytes=0 Fatal: Couldn't connect to auth socket dlopen() failed, Undefined symbols ... Is this a bug? How do I check what is going wrong with this auth socket error? 2nd) I'm using dovecot.conf protocols = imap lmtp !include conf.d/*.conf 10-auth.conf , 10-master.conf, auth-passwdfile.conf.ext, 10-ssl.conf and 10-logging.conf (all logs are on) All others, form the 29 configuration files, I haven't touch. It has worked, before I have done the update. What has changed? For what in the *.conf should I locking for? Thanks a lot.

2 2

Error: fts_solr: received invalid uid '0'?
by Larry Rosenman 16 Jun '17

16 Jun '17

I'm getting a lot of: Jun 16 11:40:40 thebighonker dovecot: imap(ler/58755): Error: fts_solr: received invalid uid '0' Jun 16 11:40:40 thebighonker dovecot: imap(ler/58755): Error: fts_solr: received invalid uid '0' in my logs. What can I supply to help get to the bottom of it? doveconf -n: # 2.2.30.2 (c0c463e): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.18 (29cc74d) # OS: FreeBSD 11.1-BETA1 amd64 auth_default_realm = lerctr.org auth_mechanisms = plain login auth_realms = lerctr.org thebighonker.lerctr.org tbh.lerctr.org auth_username_format = %Ln default_vsz_limit = 1 G deliver_log_format = msgid=%m: %$ (subject=%s from=%f size=%w) lda_mailbox_autocreate = yes listen = 192.147.25.65, :: lmtp_save_to_detail_mailbox = yes login_access_sockets = tcpwrap mail_attribute_dict = file:%h/mail/.imap/dovecot-mail-attributes mail_debug = yes mail_location = mbox:~/mail:INBOX=~/mail/INBOX mail_log_prefix = "%s(%u/%p): " mail_plugins = " fts fts_solr notify stats virtual" mail_privileged_group = mail mail_server_admin = mailto:ler@lerctr.org mail_server_comment = LERCTR Mail Server mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vacation-seconds editheader mboxmetadata servermetadata imapsieve vnd.dovecot.imapsieve namespace archive { hidden = no list = no location = mbox:~/MAIL-ARCHIVE prefix = ARCHIVE/ separator = / } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox INBOX { auto = create } mailbox SENT { special_use = \Sent } mailbox SPAM { special_use = \Junk } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } mailbox virtual/Flagged { special_use = \Flagged } mailbox virtual/all { special_use = \All } prefix = } namespace virtual { hidden = no list = yes location = virtual:~/MAIL-VIRTUAL:INDEX=MEMORY prefix = Virtual/ separator = / } passdb { args = failure_show_msg=yes session=yes max_requests=20 driver = pam } plugin { fts = solr fts_autoindex = yes fts_solr = url=http://thebighonker.lerctr.org:8983/solr/dovecot/ fts_tika = http://localhost:9998/tika/ imapsieve_mailbox1_before = file:/usr/local/share/dovecot-pigeonhole/sieve/report-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = SPAM imapsieve_mailbox2_before = file:/usr/local/share/dovecot-pigeonhole/sieve/report-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = SPAM imapsieve_mailbox2_name = * imapsieve_url = sieve://thebighonker.lerctr.org mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid size from subject vsize flags recipient_delimiter = + sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_execute_bin_dir = /usr/local/share/dovecot-pigeonhole/sieve sieve_extensions = +editheader +vacation-seconds +mboxmetadata +servermetadata sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.execute sieve_pipe_bin_dir = /usr/local/share/dovecot-pigeonhole/sieve sieve_plugins = sieve_imapsieve sieve_extprograms stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_refresh = 5s stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-client { mode = 0666 } unix_listener auth-master { mode = 0666 } } service indexer-worker { drop_priv_before_exec = yes } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0666 user = } fifo_listener stats-user { group = mode = 0666 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service tcpwrap { unix_listener login/tcpwrap { group = $default_login_user mode = 0600 user = $default_login_user } } ssl_cert = </home/ler/letsencrypt-home/lerctr.org/fullchain.cer ssl_cipher_list = EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+AESGCM:EECDH:EDH+AESGCM:EDH+aRSA:HIGH:!MEDIUM:!LOW:!aNULL:!eNULL:!LOW:!RC4:!MD5:!EXP:!PSK:!SRP:!DSS ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv2 !SSLv3 userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { mail_plugins = " fts fts_solr notify stats virtual sieve mail_log" } protocol lda { mail_plugins = " fts fts_solr notify stats virtual sieve mail_log" } protocol pop3 { mail_plugins = " fts fts_solr notify stats virtual mail_log" } protocol !doveadm { mail_plugins = " fts fts_solr notify stats virtual mail_log" } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags imap_logout_format = in=%i out=%o fhc=%{fetch_hdr_count} fhb=%{fetch_hdr_bytes} fbc=%{fetch_body_count} fbb=%{fetch_body_bytes} del=%{deleted} exp=%{expunged} trash=%{trashed} imap_metadata = yes mail_max_userip_connections = 50 mail_plugins = " fts fts_solr notify stats virtual mail_log imap_sieve imap_stats stats" } -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: larryrtx(a)gmail.com US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

1 0

doveadm-server core dump
by FUSTE Emmanuel 16 Jun '17

16 Jun '17

Hello, coredump found after a force-resync and a replicate Emmanuel. (dovecot-ee 2.2.30.2-1) [New LWP 17168] Core was generated by `dovecot/doveadm-server'. Program terminated with signal SIGABRT, Aborted. #0 0x00007fa334127c37 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 #0 0x00007fa334127c37 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 resultvar = 0 pid = 17168 selftid = 17168 #1 0x00007fa33412b028 in __GI_abort () at abort.c:89 save_stage = 2 act = {__sigaction_handler = {sa_handler = 0x20d2b48, sa_sigaction = 0x20d2b48}, sa_mask = {__val = {34255104, 0, 140338942616871, 1, 0, 181, 140338929827120, 140725975364353, 0, 0, 140338942645461, 0, 140338930777984, 140338937001888, 34203576, 140725975364140}}, sa_flags = 0, sa_restorer = 0x7ffd51c5b1c8} sigs = {__val = {32, 0 <repeats 15 times>}} #2 0x00007fa334546766 in default_fatal_finish (type=<optimized out>, status=status@entry=0) at failures.c:201 backtrace = 0x209df68 "/usr/lib/dovecot/libdovecot.so.0(+0x8d770) [0x7fa334546770] -> /usr/lib/dovecot/libdovecot.so.0(+0x8d84e) [0x7fa33454684e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fa3344dcffb] -> dovecot/do"... #3 0x00007fa33454684e in i_internal_fatal_handler (ctx=0x7ffd51c5b3b0, format=<optimized out>, args=<optimized out>) at failures.c:670 status = 0 #4 0x00007fa3344dcffb in i_panic (format=format@entry=0x4530f8 "file %s: line %d (%s): assertion failed: (%s)") at failures.c:275 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0, timestamp_usecs = 0} args = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7ffd51c5b4a0, reg_save_area = 0x7ffd51c5b3e0}} #5 0x000000000043a1eb in dsync_brain_sync_mailbox_deinit (brain=brain@entry=0x20d2b48) at dsync-brain-mailbox.c:371 last_common_uid = 0 last_messages_count = 0 last_common_modseq = 4428091 changes_during_sync = 0x0 last_common_pvt_modseq = 140725975364904 require_full_resync = false error = MAIL_ERROR_NONE __FUNCTION__ = "dsync_brain_sync_mailbox_deinit" #6 0x000000000043adc6 in dsync_brain_slave_recv_mailbox (brain=brain@entry=0x20d2b48) at dsync-brain-mailbox.c:841 dsync_box = 0x20d0878 local_dsync_box = {mailbox_guid = "\344B\277\017j\022\271T\002\253\000\000\367\362\265", <incomplete sequence \346>, mailbox_lost = false, have_guids = true, have_save_guids = true, have_only_guid128 = false, uid_validity = 1497621508, uid_next = 10, messages_count = 9, first_recent_uid = 1, highest_modseq = 3, highest_pvt_modseq = 0, cache_fields = {arr = {buffer = 0x209d208, element_size = 24}, v = 0x209d208, v_modifiable = 0x209d208}} box = 0x20e0f88 errstr = 0x2f <error: Cannot access memory at address 0x2f> resync_reason = 0x466b58 "UIDVALIDITY changed during a stateful sync, need to restart" error = MAIL_ERROR_NONE ret = <optimized out> resync = 255 __FUNCTION__ = "dsync_brain_slave_recv_mailbox" #7 0x00000000004387db in dsync_brain_run_real (changed_r=0x7ffd51c5b67f, brain=0x20d2b48) at dsync-brain.c:651 ret = true orig_state = DSYNC_STATE_SLAVE_RECV_MAILBOX orig_box_recv_state = DSYNC_BOX_STATE_MAILBOX orig_box_send_state = DSYNC_BOX_STATE_MAILBOX changed = false #8 dsync_brain_run (brain=brain@entry=0x20d2b48, changed_r=changed_r@entry=0x7ffd51c5b67f) at dsync-brain.c:687 _data_stack_cur_id = 5 #9 0x0000000000438ae1 in dsync_brain_run_io (context=0x20d2b48) at dsync-brain.c:110 brain = 0x20d2b48 changed = false try_pending = true #10 0x000000000044cc7f in dsync_ibc_stream_input (ibc=0x20c1a10) at dsync-ibc-stream.c:230 ibc = 0x20c1a10 #11 0x00007fa33455a802 in io_loop_call_io (io=0x20becc0) at ioloop.c:599 ioloop = 0x20a9f20 t_id = 4 __FUNCTION__ = "io_loop_call_io" #12 0x00007fa33455bd47 in io_loop_handler_run_internal (ioloop=ioloop@entry=0x20a9f20) at ioloop-epoll.c:223 ctx = 0x20ab100 list = 0x20c14f0 io = <optimized out> tv = {tv_sec = 4, tv_usec = 999912} events_count = <optimized out> msecs = <optimized out> ret = 1 i = 0 call = <optimized out> __FUNCTION__ = "io_loop_handler_run_internal" #13 0x00007fa33455a89c in io_loop_handler_run (ioloop=ioloop@entry=0x20a9f20) at ioloop.c:648 No locals. #14 0x00007fa33455aa58 in io_loop_run (ioloop=0x20a9f20) at ioloop.c:623 __FUNCTION__ = "io_loop_run" #15 0x000000000042065e in cmd_dsync_server_run (_ctx=0x20b6168, user=<optimized out>) at doveadm-dsync.c:1169 ctx = 0x20b6168 ibc = 0x20c1a10 brain = 0x20d2b48 temp_prefix = 0x209cb68 state_str = 0x0 sync_type = <optimized out> name = 0x20a9f00 "10.33.207.136" process_title_prefix = 0x209cb40 "10.33.207.136 " mail_error = MAIL_ERROR_NONE #16 0x0000000000421f96 in doveadm_mail_next_user (ctx=ctx@entry=0x20b6168, cctx=cctx@entry=0x7ffd51c5b8e0, error_r=error_r@entry=0x7ffd51c5b8d8) at doveadm-mail.c:416 input = {module = 0x0, service = 0x4592b0 "doveadm", username = 0x209b5e1 "T0146937", session_id = 0x0, session_id_prefix = 0x0, session_create_time = 0, local_ip = {family = 2, u = {ip6 = {__in6_u = {__u6_addr8 = "\n!χ", '\000' <repeats 11 times>, __u6_addr16 = {8458, 34767, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {2278498570, 0, 0, 0}}}, ip4 = {s_addr = 2278498570}}}, remote_ip = {family = 2, u = {ip6 = {__in6_u = {__u6_addr8 = "\n!ψ", '\000' <repeats 11 times>, __u6_addr16 = {8458, 35023, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {2295275786, 0, 0, 0}}}, ip4 = {s_addr = 2295275786}}}, local_port = 12345, remote_port = 55819, userdb_fields = 0x0, flags_override_add = (unknown: 0), flags_override_remove = (unknown: 0), no_userdb_lookup = 0, debug = 0} error = 0x20 <error: Cannot access memory at address 0x20> ip = <optimized out> ret = <optimized out> __FUNCTION__ = "doveadm_mail_next_user" #17 0x0000000000422909 in doveadm_mail_single_user (ctx=ctx@entry=0x20b6168, cctx=cctx@entry=0x7ffd51c5b8e0, error_r=error_r@entry=0x7ffd51c5b8d8) at doveadm-mail.c:447 __FUNCTION__ = "doveadm_mail_single_user" #18 0x0000000000435484 in doveadm_mail_cmd_server_run (cctx=0x7ffd51c5b8e0, mctx=0x20b6168, conn=0x20b1d48) at client-connection.c:164 error = 0x0 ret = <optimized out> #19 doveadm_cmd_handle (cctx=0x7ffd51c5b8e0, argv=0x209b618, argc=3, cmd_name=<optimized out>, conn=0x20b1d48) at client-connection.c:247 ioloop = 0x20a9f20 mail_cmd = 0x20aa138 mctx = 0x20b6168 cmd_ver2 = <optimized out> prev_ioloop = 0x20a39d0 cmd = 0x0 #20 client_handle_command (args=<optimized out>, conn=0x20b1d48) at client-connection.c:315 cctx = {cmd = 0x0, argc = 0, argv = 0x0, username = 0x209b5e1 "T0146937", cli = false, tcp_server = true, local_ip = {family = 2, u = {ip6 = {__in6_u = {__u6_addr8 = "\n!χ", '\000' <repeats 11 times>, __u6_addr16 = {8458, 34767, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {2278498570, 0, 0, 0}}}, ip4 = {s_addr = 2278498570}}}, remote_ip = {family = 2, u = {ip6 = {__in6_u = {__u6_addr8 = "\n!ψ", '\000' <repeats 11 times>, __u6_addr16 = {8458, 35023, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {2295275786, 0, 0, 0}}}, ip4 = {s_addr = 2295275786}}}, local_port = 12345, remote_port = 55819, conn = 0x20b1d48} flags = <optimized out> cmd_name = <optimized out> argc = <optimized out> #21 client_connection_input (conn=0x20b1d48) at client-connection.c:432 args = <optimized out> _data_stack_cur_id = 3 line = <optimized out> ok = true #22 0x00007fa33455a802 in io_loop_call_io (io=0x20a8660) at ioloop.c:599 ioloop = 0x20a39d0 t_id = 2 __FUNCTION__ = "io_loop_call_io" #23 0x00007fa33455bd47 in io_loop_handler_run_internal (ioloop=ioloop@entry=0x20a39d0) at ioloop-epoll.c:223 ctx = 0x20af660 list = 0x20a35c0 io = <optimized out> tv = {tv_sec = 2147483, tv_usec = 0} events_count = <optimized out> msecs = <optimized out> ret = 1 i = 0 call = <optimized out> __FUNCTION__ = "io_loop_handler_run_internal" #24 0x00007fa33455a89c in io_loop_handler_run (ioloop=ioloop@entry=0x20a39d0) at ioloop.c:648 No locals. #25 0x00007fa33455aa58 in io_loop_run (ioloop=0x20a39d0) at ioloop.c:623 __FUNCTION__ = "io_loop_run" #26 0x00007fa3344e6e43 in master_service_run (service=0x20a3870, callback=callback@entry=0x437690 <client_connected>) at master-service.c:666 No locals. #27 0x0000000000413ff7 in main (argc=1, argv=0x20a35e0) at main.c:143 set_roots = {0x464b40 <doveadm_setting_parser_info>, 0x0} input = {roots = 0x7ffd51c5ba60, config_path = 0x0, preserve_environment = false, preserve_user = false, preserve_home = false, never_exec = false, use_sysexits = false, parse_full_config = false, module = 0x4592b0 "doveadm", service = 0x4592b0 "doveadm", username = 0x0, local_ip = {family = 0, u = {ip6 = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}}, remote_ip = {family = 0, u = {ip6 = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}}, local_name = 0x0} output = {specific_services = 0x0, service_uses_local = 0, service_uses_remote = 0, used_local = 0, used_remote = 0, permission_denied = 0} error = 0x7fa334f3f520 "\200\364\363\064\243\177" c = <optimized out>

1 0

Re: Minor patches for builds against ancient platforms
by Joseph Tam 15 Jun '17

15 Jun '17

> I do know that this little box of horrors has 200-300MB mbox INBOXes on an > ext3 filesystem formatted in 2005. I am very nervous about converting them to > Maildir at this point. Fortunately, it just involves reformatting the data and a little reconmfiguration of dovcot. If you can find the tool and disk space, it's well worth doing. Of course, when running a proverbial dinosaur, you're often more preoccupied with preventing the next proverbial meteorite strike. > What I meant was, are certain types of filenames "blocked" by policy from > being created via IMAP commands? I'm sure I could run a few tests to answer > this for myself, or better still, go through Timo's code. I never saw anything that could do that -- maybe you can torture the virtual mailbox facility to get that done. If all your concerned is dovecot dot-files, you can place the indices somewhere else other than the user's filesapace. > One last problem area is that many users have soft-links to mailboxes > located on a second drive, but these never appear in folder enumeration > lists or they appear grayed out in SeaMonkey/Thunderbird. I've tried > just symbolically linking to directories containing other mboxes, but > sometimes it works, and sometimes it doesn't. I wonder if there's > paranoia checking in the code that follows symbolic links to ensure > that uids/gids of the "owning" directory and the linked-to directory > (or files within it) are the same. It works for me. From what I see, the ownership of the symlink is ignored; it's the underlying file that counts. Maybe a subscription issue? Joseph Tam <jtam.home(a)gmail.com>

2 1

Re: Minor patches for builds against ancient platforms
by Joseph Tam 14 Jun '17

14 Jun '17

"M. Balridge" <dovecot(a)r.paypc.com> writes: > I assume it's a rarely seen issue because few Dovecot users compile the > software in caves on computers powered by horse-pulled generator > wheels. I resemble that remark. >> Warning: Transaction log file /home/luser/mail/.imap/INBOX/dovecot.index.log >> was locked for 95 seconds (rotating while syncing) Timo recently explained to me it's probably caused by slow I/O or processing. This explanation is consistent with my observation that the users who get these messages have jumbo mailboxes. > imap(luser): Error: fchown(/home/luser/mail/.subscriptions.lock, > group=501(coregroup)) failed: Operation not permitted (egid=200(users), group > based on /home/luser/mail - see http://wiki2.dovecot.org/Errors/ChgrpNoPerm) > > imap(luser): Error: file_dotlock_open() failed with subscription file > /home/luser/mail/.subscriptions: Operation not permitted > > .subscriptions doesn't exist either as a file or a directory in the named > directories. > > Is there a "filter" against dot-files being opened within the bowels of dovecot? You can disable dotclock altogether, but I don't think this is what you meant. You can use locking method "dotlock_try" rather than "dotlock" -- the former will ignore quota/permissions problems and plow on. (It still logs it.) You could also align luser's mail folder group with with luser's GID, which is usually what I do. Maybe locks are created even when files don't exist as there may be a race condition where another process is creating/deleting it at the same time. Joseph Tam <jtam.home(a)gmail.com>

4 5

v2.2.30 released
by Timo Sirainen 13 Jun '17

13 Jun '17

https://dovecot.org/releases/2.2/dovecot-2.2.30.tar.gz https://dovecot.org/releases/2.2/dovecot-2.2.30.tar.gz.sig * auth: Use timing safe comparisons for everything related to passwords. It's unlikely that these could have been used for practical attacks, especially because Dovecot delays and flushes all failed authentications in 2 second intervals. Also it could have worked only when passwords were stored in plaintext in the passdb. * master process sends SIGQUIT to all running children at shutdown, which instructs them to close all the socket listeners immediately. This way restarting Dovecot should no longer fail due to some processes keeping the listeners open for a long time. + auth: Add passdb { mechanisms=none } to match separate passdb lookup + auth: Add passdb { username_filter } to use passdb only if user matches the filter. See https://wiki2.dovecot.org/PasswordDatabase + dsync: Add dsync_commit_msgs_interval setting. It attempts to commit the transaction after saving this many new messages. Because of the way dsync works, it may not always be possible if mails are copied or UIDs need to change. + imapc: Support imapc_features=search without ESEARCH extension. + imapc: Add imapc_features=fetch-bodystructure to pass through remote server's FETCH BODY and BODYSTRUCTURE. + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on the remote server. + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters. + If dovecot.index.cache corruption is detected, reset only the one corrupted mail instead of the whole file. + doveadm mailbox status: Add "firstsaved" field. + director_flush_socket: Add old host's up/down and vhost count as parameters - More fixes to automatically fix corruption in dovecot.list.index - dsync-server: Fix support for dsync_features=empty-header-workaround - imapc: Various bugfixes, including infinite loops on some errors - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't enabled modseq tracking via CONDSTORE/QRESYNC. - fts-lucene: Fix it to work again with mbox format - Some internal error messages may have contained garbage in v2.2.29 - mail-crypt: Re-encrypt when copying/moving mails and per-mailbox keys are used. Otherwise the copied mails can't be opened. - vpopmail: Fix compiling

7 12

rescann / reindex / rebuild a subfolder structure
by Götz Reinicke - IT Koordinator 13 Jun '17

13 Jun '17

Hi, an user is missing all mail from a folder and all subfolders which are still saved in the users maildir directory on the dovecot server. From an imap client she sees the main folder but empty. No subfolders. She told me with an other imap client and a new created account she has the same problem. Question: Can I resync / regenerate some folder... index.... something....-files from the dovecot side? Thanks for hints and regards . Götz

1 0

Re: Minor patches for builds against ancient platforms
by Joseph Tam 13 Jun '17

13 Jun '17

> On that note, has anyone written a tool that "harmonises" users mail > directories' permissions - ideally reading the dovecot configuration to assess > where *THE* mail directories are actually used by dovecot? doveadm user $user which will supply the second half: it will spit out the UID, GID, home and mail directories of a user as specified by dovecot's configuration. > I was surprised by the pickiness of the group ownership/permissions > issues, though reflecting on things, I can see why you'd at least want > some logging by default for those conditions. This is a consequence of writing secure software: it employs least privilege so that a fault will not result in someone being able to mess around with someone else's mail (or indices). GID can also govern access to shared mailboxes. Joseph Tam <jtam.home(a)gmail.com>

1 0

Re: namespace and folders
by Joseph Tam 13 Jun '17

13 Jun '17

Gregory Sloop <gregs(a)sloop.net> writes: > Using mbox format and this namespace > > namespace { > inbox = yes > hidden = yes > prefix = INBOX/ > } > ... > This is not a terrible problem, but it's cosmetically ugly and confusing for users. > I'd prefer to only see these folders as subscribed as sub-folders [or sub-items] under inbox. Pardon my naievty, but couldn't you just remove this namespace altogether and get rid of at least one set of duplicates (although it probably keep the non-preferred one). Joseph Tam <jtam.home(a)gmail.com>

1 0

service(auth): command startup failed?
by HL1234 12 Jun '17

12 Jun '17

Hello, I need help because since some days I can not figure out what error this is and where it come from. I have used dovecot since years. Know after an update it is broken. First I like to give you some data: It's a FreeBSD 11.0 Server with sendmail (SMTP) and dovecot for IMAP with SSL. #dovecot --build-options Build options: ioloop=kqueue notify=kqueue ipv6 openssl io_block_size=8192 Mail storages: shared mdbox sdbox maildir mbox cydir imapc pop3c raw fail SQL drivers: mysql Passdb: checkpassword ldap pam passwd passwd-file sql Userdb: checkpassword ldap nss passwd prefetch passwd-file sql #dovecot --version 2.2.30.2 (c0c463e) I install the update with the FreeBSD ports. Before the update all was running fine. The state know is: form my client Outlook I can send eMail above SMTP. When I try to get my eMails by the IMAP-Server it is blocked. I have look around in the config files but I see nothing what has could be changed. I have tried to make new *.pem files with using the script in /usr/local/share/examples/dovecot/ but this havn't bring a solution. I need help for this error i see in the logs: dovecot.log master: Error: service(auth): command startup failed, throttling for 2 secs auth: Error: auth: environment corrupt; missing value for DOVECOT_ auth: Fatal: unsetenv(RESTRICT_SETUID) failed: Bad address auth: Error: auth: environment corrupt; missing value for DOVECOT_ auth: Fatal: unsetenv(RESTRICT_SETUID) failed: Bad address ..... dovecot-info.log imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 1 secs): user=<>, rip=77.178.105.78, lip=88.74.25.120, TLS Jun 12 23:01:15 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 8 secs): user=<>, rip=58.218.194.81, lip=88.74.25.120, TLS handshaking .... dovecot-debug.log imap-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [77.178.105.78] imap-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [77.178.105.78] imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client hello A [77.178.105.78] imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server hello A [77.178.105.78] imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate A [77.178.105.78] imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write key exchange A [77.178.105.78] imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server done A [77.178.105.78] imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [77.178.105.78] imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client certificate A [77.178.105.78] imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [77.178.105.78] imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [77.178.105.78] auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth auth: Debug: Module loaded: /usr/local/lib/dovecot/auth/lib20_auth_var_expand_crypt.so auth: Debug: Read auth token secret from /var/run/dovecot//auth-token-secret.dat Have anyone an idea what is going wrong and how to fix it? Harald -- View this message in context: http://dovecot.2317879.n4.nabble.com/service-auth-command-startup-failed-tp… Sent from the Dovecot mailing list archive at Nabble.com.

1 0

Redis auth?
by Mark Moseley 12 Jun '17

12 Jun '17

I was curious what the status of this redis auth patch is: https://dovecot.org/list/dovecot/2016-June/104763.html

1 0

Re: Log authentication attempts
by j.emerlik 12 Jun '17

12 Jun '17

We alse have same problem, now we are running Dovecot 2.2.30.2 and also use Dovecot SASL for SMTP authentication (postfix 2.11). We need to save all failed login attempts to database as source IP address, username and date and time but post-login script can do this but only after successful login. Failed login attempts information may be useful in the fight with bruteforce attacks. It's possible to execude some script after failed login ("Password mismatch") ? Regards, Jacek

4 5

pigeonhole: imapsieve: AntiSpam example
by Larry Rosenman 12 Jun '17

12 Jun '17

Is there a reason why vnd.dovecot.execute is called out for sieve_global_extensions but no configuration or require is there for it on: https://wiki.dovecot.org/HowTo/AntispamWithSieve thanks! -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: larryrtx(a)gmail.com US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

2 3

namespace and folders
by Gregory Sloop 12 Jun '17

12 Jun '17

Using mbox format and this namespace namespace { inbox = yes hidden = yes prefix = INBOX/ } [Though I've also tried, seemingly, a million different namespace options to "fix" my problem.] It's a migrated setup from a 1.x dovecot install from Ubuntu 12.04, now on 16.04 The problem is in TBird [I haven't tested with any other mail clients] and IMAP; with that name-space I get all the folders both at the root level [same as inbox], as well as below inbox. [The same folders, pointing at the same underlying messages.] For example, if there's a folder "blah" and I subscribe to it, "blah" shows both at the same level as inbox, as well as a sub-item of inbox. If I unsubscribe from folder "blah" it also unsubscribes from the subfolder "blah" under inbox, and at the root level. [I hope that's clear enough...] This is not a terrible problem, but it's cosmetically ugly and confusing for users. I'd prefer to only see these folders as subscribed as sub-folders [or sub-items] under inbox. I'd guess I'm making some stupid beginner error, but I've not been able to figure it out, as of yet. Any help would be greatly appreciated. -Greg

1 1

AIX packaging: src/plugin/quota does not build
by Michael Felt 12 Jun '17

12 Jun '17

#stdout to /dev/null to see only the error messages It comes down to more issues with how IBM xlc handles (less elegantly) Compound Literals compared to GCC. michael@x071:[/data/prj/aixtools/github/dovecot/x071-test]make -i >/dev/null "../../../../src/x071-test/src/plugins/quota/quota.c", line 382.17: 1506-196 (S) Initialization between types "char* const" and "struct quota_param_parser" is not allowed. "../../../../src/x071-test/src/plugins/quota/quota.c", line 383.17: 1506-196 (S) Initialization between types "void(* const)(struct quota_root*,const char*)" and "struct quota_param_parser" is not allowed. "../../../../src/x071-test/src/plugins/quota/quota.c", line 384.17: 1506-196 (S) Initialization between types "char* const" and "struct quota_param_parser" is not allowed. "../../../../src/x071-test/src/plugins/quota/quota.c", line 385.17: 1506-196 (S) Initialization between types "void(* const)(struct quota_root*,const char*)" and "struct quota_param_parser" is not allowed. make[4]: [quota.lo] Error 1 (ignored) The above issues I resolved by changing /* * Sigh, xlc and Compound Literals * struct quota_param_parser quota_param_hidden = {.param_name = "hidden", .param_handler = hidden_param_handler}; struct quota_param_parser quota_param_ignoreunlimited = {.param_name = "ignoreunlimited", .param_handler = ignoreunlim_param_handler}; struct quota_param_parser quota_param_noenforcing = {.param_name = "noenforcing", .param_handler = noenforcing_param_handler}; struct quota_param_parser quota_param_ns = {.param_name = "ns=", .param_handler = ns_param_handler}; */ to #define quota_param_hidden {.param_name = "hidden", .param_handler = hidden_param_handler} #define quota_param_ignoreunlimited {.param_name = "ignoreunlimited", .param_handler = ignoreunlim_param_handler} #define quota_param_noenforcing {.param_name = "noenforcing", .param_handler = noenforcing_param_handler} #define quota_param_ns {.param_name = "ns=", .param_handler = ns_param_handler} Unfortunately, this did not help quota-fs.c, so I move the defines to quota.h. However, since hidden_param_handler() is defined as a static routine, it is not visible outside of quota.c. As such the error messages change from: "../../../../src/x071-test/src/plugins/quota/quota-fs.c", line 125.17: 1506-196 (S) Initialization between types "char* const" and "struct quota_param_parser" is not allowed. "../../../../src/x071-test/src/plugins/quota/quota-fs.c", line 125.37: 1506-196 (S) Initialization between types "void(* const)(struct quota_root*,const char*)" and "struct quota_param_parser" is not allowed. "../../../../src/x071-test/src/plugins/quota/quota-fs.c", line 125.62: 1506-196 (S) Initialization between types "char* const" and "struct quota_param_parser" is not allowed. "../../../../src/x071-test/src/plugins/quota/quota-fs.c", line 126.18: 1506-515 (S) Member designator cannot be applied to an object of type "const struct quota_param_parser[]". make[4]: [quota-fs.lo] Error 1 (ignored) "../../../../src/x071-test/src/plugins/quota/quota-dict.c", line 47.17: 1506-196 (S) Initialization between types "char* const" and "struct quota_param_parser" is not allowed. "../../../../src/x071-test/src/plugins/quota/quota-dict.c", line 47.37: 1506-196 (S) Initialization between types "void(* const)(struct quota_root*,const char*)" and "struct quota_param_parser" is not allowed. "../../../../src/x071-test/src/plugins/quota/quota-dict.c", line 47.66: 1506-196 (S) Initialization between types "char* const" and "struct quota_param_parser" is not allowed. "../../../../src/x071-test/src/plugins/quota/quota-dict.c", line 47.91: 1506-196 (S) Initialization between types "void(* const)(struct quota_root*,const char*)" and "struct quota_param_parser" is not allowed. make[4]: [quota-dict.lo] Error 1 (ignored) "../../../../src/x071-test/src/plugins/quota/quota-imapc.c", line 66.17: 1506-196 (S) Initialization between types "char* const" and "struct quota_param_parser" is not allowed. "../../../../src/x071-test/src/plugins/quota/quota-imapc.c", line 67.18: 1506-515 (S) Member designator cannot be applied to an object of type "const struct quota_param_parser[]". make[4]: [quota-imapc.lo] Error 1 (ignored) libtool: error: 'quota.lo' is not a valid libtool object make[4]: [lib10_quota_plugin.la] Error 1 (ignored) libtool: error: 'quota.lo' is not a valid libtool object make[4]: [quota-status] Error 1 (ignored) make[4]: *** No rule to make target `../quota/lib10_quota_plugin.la', needed by `lib11_imap_quota_plugin.la'. Stop. make[3]: [all-recursive] Error 1 (ignored) to: michael@x071:[/data/prj/aixtools/github/dovecot/x071-test/src/plugins/quota]make -i >/dev/null "../../../../src/x071-test/src/plugins/quota/quota-fs.c", line 125.17: 1506-045 (S) Undeclared identifier hidden_param_handler. "../../../../src/x071-test/src/plugins/quota/quota-fs.c", line 126.17: 1506-045 (S) Undeclared identifier noenforcing_param_handler. "../../../../src/x071-test/src/plugins/quota/quota-fs.c", line 127.17: 1506-045 (S) Undeclared identifier ns_param_handler. make: [quota-fs.lo] Error 1 (ignored) "../../../../src/x071-test/src/plugins/quota/quota-dict.c", line 47.17: 1506-045 (S) Undeclared identifier hidden_param_handler. "../../../../src/x071-test/src/plugins/quota/quota-dict.c", line 47.37: 1506-045 (S) Undeclared identifier ignoreunlim_param_handler. "../../../../src/x071-test/src/plugins/quota/quota-dict.c", line 47.66: 1506-045 (S) Undeclared identifier noenforcing_param_handler. "../../../../src/x071-test/src/plugins/quota/quota-dict.c", line 47.91: 1506-045 (S) Undeclared identifier ns_param_handler. make: [quota-dict.lo] Error 1 (ignored) "../../../../src/x071-test/src/plugins/quota/quota-imapc.c", line 66.17: 1506-045 (S) Undeclared identifier ns_param_handler. make: [quota-imapc.lo] Error 1 (ignored) libtool: error: 'quota-fs.lo' is not a valid libtool object make: [lib10_quota_plugin.la] Error 1 (ignored) libtool: error: 'quota-fs.lo' is not a valid libtool object make: [quota-status] Error 1 (ignored) For me, this is a procedure declaration issue I may not resolve on my own - I must assume there is a reason that these routines are "static". Michael p.s. Once this is resolved I hope to be able to use "make check". I had to massage the Makefiles to get gnulib/getopt to link into dovecot. Once I can run "make check" I'll request help on how to get a new directory included in the Makefile list, and also assistance with making sure it can also work with out-of-tree builds.

1 0

doveadm ssl error when upgrading from 2.2.27 to 2.2.29
by Pallissard, Matthew 12 Jun '17

12 Jun '17

I'm starting to see the following error when upgrading from 2.2.27 to 2.2.29. doveadm(ip.add.re.ss): Error: doveadm client disconnected before handshake: SSL_accept() failed: error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher Downgrading from 2.2.27 resolves, error still persists in 2.2.28. I'm using openssl 1.1.0.f and an ec cert/key with the following curve. ASN1 OID: prime256v1 NIST CURVE: P-256 Does anyone know anything about this off the top of their head? If not I'll try to git-bisect 2.2.27 -> 2.2.28 and see if I can find any offending commits later on this week. -- Matt Pallissard

3 4

AIX lacks getopt_long
by Michael Felt 12 Jun '17

12 Jun '17

* As a test I added the 'struct option' to the file needing it, and this confirmed the need for getopt_long() which AIX libc.a does not include. * p.s. I ran this dry-run from the "root" directory, perhaps it would be better from the ./src directory --- src/x071-test/src/doveadm/doveadm-cmd.c 2017-06-12 06:10:53 +0000 +++ src/AIX-port/src/doveadm/doveadm-cmd.c 2017-06-10 12:24:53 +0000 @@ -13,23 +13,9 @@ /* * getopt.h is non-POSIX * on AIX getopt() is declared in unistd.h - * however, unistd.h does not include the 'struct option' */ #ifndef _AIX #include <getopt.h> -#else -/* - * copied from Debian 3.2.0 /usr/include/getopt.h - */ -struct option -{ - const char *name; - /* has_arg can't be an enum because some compilers complain about - type mismatches in all the code that assumes it is an int. */ - int has_arg; - int *flag; - int val; -}; #endif static struct doveadm_cmd *doveadm_commands[] = { * I searched for a possible solution - and I am hoping gnulib will be something you would consider. I downloaded the latest gnulib using 'git clone git://git.savannah.gnu.org/gnulib.git' * This is the --dry-run output. * As there maybe "license" issues, this is not something I am going to do "on my own" - in the package they speak of GPL and LGPL - but I know nothing about licensing issues. michael@x071:[/data/prj/aixtools/github/dovecot/src/x071-test]/data/prj/aixtools/github/dovecot/gnulib/gnulib-tool --dry-run --import getopt-posix Module list with included dependencies (indented): absolute-header extensions extern-inline getopt-posix gettext-h include_next snippet/arg-nonnull snippet/c++defs snippet/warn-on-use ssize_t stddef sys_types unistd File list: lib/arg-nonnull.h lib/c++defs.h lib/getopt-cdefs.in.h lib/getopt-core.h lib/getopt-ext.h lib/getopt-pfx-core.h lib/getopt-pfx-ext.h lib/getopt.c lib/getopt.in.h lib/getopt1.c lib/getopt_int.h lib/gettext.h lib/stddef.in.h lib/sys_types.in.h lib/unistd.c lib/unistd.in.h lib/warn-on-use.h m4/00gnulib.m4 m4/absolute-header.m4 m4/extensions.m4 m4/extern-inline.m4 m4/getopt.m4 m4/gnulib-common.m4 m4/include_next.m4 m4/off_t.m4 m4/onceonly.m4 m4/ssize_t.m4 m4/stddef_h.m4 m4/sys_types_h.m4 m4/unistd_h.m4 m4/warn-on-use.m4 m4/wchar_t.m4 Create directory ./lib Create directory ./lib Copy file lib/arg-nonnull.h Copy file lib/c++defs.h Copy file lib/getopt-cdefs.in.h Copy file lib/getopt-core.h Copy file lib/getopt-ext.h Copy file lib/getopt-pfx-core.h Copy file lib/getopt-pfx-ext.h Copy file lib/getopt.c Copy file lib/getopt.in.h Copy file lib/getopt1.c Copy file lib/getopt_int.h Copy file lib/gettext.h Copy file lib/stddef.in.h Copy file lib/sys_types.in.h Copy file lib/unistd.c Copy file lib/unistd.in.h Copy file lib/warn-on-use.h Copy file m4/00gnulib.m4 Copy file m4/absolute-header.m4 Copy file m4/extensions.m4 Copy file m4/extern-inline.m4 Copy file m4/getopt.m4 Copy file m4/gnulib-common.m4 Copy file m4/gnulib-tool.m4 Copy file m4/include_next.m4 Copy file m4/off_t.m4 Copy file m4/onceonly.m4 Copy file m4/ssize_t.m4 Copy file m4/stddef_h.m4 Copy file m4/sys_types_h.m4 Copy file m4/unistd_h.m4 Copy file m4/warn-on-use.m4 Copy file m4/wchar_t.m4 Create lib/Makefile.am Create m4/gnulib-cache.m4 # Copyright (C) 2002-2017 Free Software Foundation, Inc. # # This file is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 3 of the License, or # (at your option) any later version. # # This file is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this file. If not, see <http://www.gnu.org/licenses/>. # # As a special exception to the GNU General Public License, # this file may be distributed as part of a program that # contains a configuration script generated by Autoconf, under # the same distribution terms as the rest of that program. # # Generated by gnulib-tool. # # This file represents the specification of how gnulib-tool is used. # It acts as a cache: It is written and read by gnulib-tool. # In projects that use version control, this file is meant to be put under # version control, like the configure.ac and various Makefile.am files. # Specification in the form of a command-line invocation: # gnulib-tool --import --lib=libgnu --source-base=lib --m4-base=m4 --doc-base=doc --tests-base=tests --aux-dir=. --no-conditional-dependencies --no-libtool --macro-prefix=gl getopt-posix # Specification in the form of a few gnulib-tool.m4 macro invocations: gl_LOCAL_DIR([]) gl_MODULES([ getopt-posix ]) gl_AVOID([]) gl_SOURCE_BASE([lib]) gl_M4_BASE([m4]) gl_PO_BASE([]) gl_DOC_BASE([doc]) gl_TESTS_BASE([tests]) gl_LIB([libgnu]) gl_MAKEFILE_NAME([]) gl_MACRO_PREFIX([gl]) gl_PO_DOMAIN([]) gl_WITNESS_C_MACRO([]) Create m4/gnulib-comp.m4 # DO NOT EDIT! GENERATED AUTOMATICALLY! # Copyright (C) 2002-2017 Free Software Foundation, Inc. # # This file is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 3 of the License, or # (at your option) any later version. # # This file is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this file. If not, see <http://www.gnu.org/licenses/>. # # As a special exception to the GNU General Public License, # this file may be distributed as part of a program that # contains a configuration script generated by Autoconf, under # the same distribution terms as the rest of that program. # # Generated by gnulib-tool. # # This file represents the compiled summary of the specification in # gnulib-cache.m4. It lists the computed macro invocations that need # to be invoked from configure.ac. # In projects that use version control, this file can be treated like # other built files. # This macro should be invoked from ./configure.ac, in the section # "Checks for programs", right after AC_PROG_CC, and certainly before # any checks for libraries, header files, types and library functions. AC_DEFUN([gl_EARLY], [ m4_pattern_forbid([^gl_[A-Z]])dnl the gnulib macro namespace m4_pattern_allow([^gl_ES$])dnl a valid locale name m4_pattern_allow([^gl_LIBOBJS$])dnl a variable m4_pattern_allow([^gl_LTLIBOBJS$])dnl a variable # Pre-early section. AC_REQUIRE([gl_USE_SYSTEM_EXTENSIONS]) AC_REQUIRE([gl_PROG_AR_RANLIB]) # Code from module absolute-header: # Code from module extensions: # Code from module extern-inline: # Code from module getopt-posix: # Code from module gettext-h: # Code from module include_next: # Code from module snippet/arg-nonnull: # Code from module snippet/c++defs: # Code from module snippet/warn-on-use: # Code from module ssize_t: # Code from module stddef: # Code from module sys_types: # Code from module unistd: ]) # This macro should be invoked from ./configure.ac, in the section # "Check for header files, types and library functions". AC_DEFUN([gl_INIT], [ AM_CONDITIONAL([GL_COND_LIBTOOL], [false]) gl_cond_libtool=false gl_libdeps= gl_ltlibdeps= gl_m4_base='m4' m4_pushdef([AC_LIBOBJ], m4_defn([gl_LIBOBJ])) m4_pushdef([AC_REPLACE_FUNCS], m4_defn([gl_REPLACE_FUNCS])) m4_pushdef([AC_LIBSOURCES], m4_defn([gl_LIBSOURCES])) m4_pushdef([gl_LIBSOURCES_LIST], []) m4_pushdef([gl_LIBSOURCES_DIR], []) gl_COMMON gl_source_base='lib' AC_REQUIRE([gl_EXTERN_INLINE]) gl_FUNC_GETOPT_POSIX if test $REPLACE_GETOPT = 1; then AC_LIBOBJ([getopt]) AC_LIBOBJ([getopt1]) dnl Arrange for unistd.h to include getopt.h. GNULIB_GL_UNISTD_H_GETOPT=1 fi AC_SUBST([GNULIB_GL_UNISTD_H_GETOPT]) AC_SUBST([LIBINTL]) AC_SUBST([LTLIBINTL]) gt_TYPE_SSIZE_T gl_STDDEF_H gl_SYS_TYPES_H AC_PROG_MKDIR_P gl_UNISTD_H # End of code from modules m4_ifval(gl_LIBSOURCES_LIST, [ m4_syscmd([test ! -d ]m4_defn([gl_LIBSOURCES_DIR])[ || for gl_file in ]gl_LIBSOURCES_LIST[ ; do if test ! -r ]m4_defn([gl_LIBSOURCES_DIR])[/$gl_file ; then echo "missing file ]m4_defn([gl_LIBSOURCES_DIR])[/$gl_file" >&2 exit 1 fi done])dnl m4_if(m4_sysval, [0], [], [AC_FATAL([expected source file, required through AC_LIBSOURCES, not found])]) ]) m4_popdef([gl_LIBSOURCES_DIR]) m4_popdef([gl_LIBSOURCES_LIST]) m4_popdef([AC_LIBSOURCES]) m4_popdef([AC_REPLACE_FUNCS]) m4_popdef([AC_LIBOBJ]) AC_CONFIG_COMMANDS_PRE([ gl_libobjs= gl_ltlibobjs= if test -n "$gl_LIBOBJS"; then # Remove the extension. sed_drop_objext='s/\.o$//;s/\.obj$//' for i in `for i in $gl_LIBOBJS; do echo "$i"; done | sed -e "$sed_drop_objext" | sort | uniq`; do gl_libobjs="$gl_libobjs $i.$ac_objext" gl_ltlibobjs="$gl_ltlibobjs $i.lo" done fi AC_SUBST([gl_LIBOBJS], [$gl_libobjs]) AC_SUBST([gl_LTLIBOBJS], [$gl_ltlibobjs]) ]) gltests_libdeps= gltests_ltlibdeps= m4_pushdef([AC_LIBOBJ], m4_defn([gltests_LIBOBJ])) m4_pushdef([AC_REPLACE_FUNCS], m4_defn([gltests_REPLACE_FUNCS])) m4_pushdef([AC_LIBSOURCES], m4_defn([gltests_LIBSOURCES])) m4_pushdef([gltests_LIBSOURCES_LIST], []) m4_pushdef([gltests_LIBSOURCES_DIR], []) gl_COMMON gl_source_base='tests' changequote(,)dnl gltests_WITNESS=IN_`echo "${PACKAGE-$PACKAGE_TARNAME}" | LC_ALL=C tr abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ | LC_ALL=C sed -e 's/[^A-Z0-9_]/_/g'`_GNULIB_TESTS changequote([, ])dnl AC_SUBST([gltests_WITNESS]) gl_module_indicator_condition=$gltests_WITNESS m4_pushdef([gl_MODULE_INDICATOR_CONDITION], [$gl_module_indicator_condition]) m4_popdef([gl_MODULE_INDICATOR_CONDITION]) m4_ifval(gltests_LIBSOURCES_LIST, [ m4_syscmd([test ! -d ]m4_defn([gltests_LIBSOURCES_DIR])[ || for gl_file in ]gltests_LIBSOURCES_LIST[ ; do if test ! -r ]m4_defn([gltests_LIBSOURCES_DIR])[/$gl_file ; then echo "missing file ]m4_defn([gltests_LIBSOURCES_DIR])[/$gl_file" >&2 exit 1 fi done])dnl m4_if(m4_sysval, [0], [], [AC_FATAL([expected source file, required through AC_LIBSOURCES, not found])]) ]) m4_popdef([gltests_LIBSOURCES_DIR]) m4_popdef([gltests_LIBSOURCES_LIST]) m4_popdef([AC_LIBSOURCES]) m4_popdef([AC_REPLACE_FUNCS]) m4_popdef([AC_LIBOBJ]) AC_CONFIG_COMMANDS_PRE([ gltests_libobjs= gltests_ltlibobjs= if test -n "$gltests_LIBOBJS"; then # Remove the extension. sed_drop_objext='s/\.o$//;s/\.obj$//' for i in `for i in $gltests_LIBOBJS; do echo "$i"; done | sed -e "$sed_drop_objext" | sort | uniq`; do gltests_libobjs="$gltests_libobjs $i.$ac_objext" gltests_ltlibobjs="$gltests_ltlibobjs $i.lo" done fi AC_SUBST([gltests_LIBOBJS], [$gltests_libobjs]) AC_SUBST([gltests_LTLIBOBJS], [$gltests_ltlibobjs]) ]) LIBGNU_LIBDEPS="$gl_libdeps" AC_SUBST([LIBGNU_LIBDEPS]) LIBGNU_LTLIBDEPS="$gl_ltlibdeps" AC_SUBST([LIBGNU_LTLIBDEPS]) ]) # Like AC_LIBOBJ, except that the module name goes # into gl_LIBOBJS instead of into LIBOBJS. AC_DEFUN([gl_LIBOBJ], [ AS_LITERAL_IF([$1], [gl_LIBSOURCES([$1.c])])dnl gl_LIBOBJS="$gl_LIBOBJS $1.$ac_objext" ]) # Like AC_REPLACE_FUNCS, except that the module name goes # into gl_LIBOBJS instead of into LIBOBJS. AC_DEFUN([gl_REPLACE_FUNCS], [ m4_foreach_w([gl_NAME], [$1], [AC_LIBSOURCES(gl_NAME[.c])])dnl AC_CHECK_FUNCS([$1], , [gl_LIBOBJ($ac_func)]) ]) # Like AC_LIBSOURCES, except the directory where the source file is # expected is derived from the gnulib-tool parameterization, # and alloca is special cased (for the alloca-opt module). # We could also entirely rely on EXTRA_lib..._SOURCES. AC_DEFUN([gl_LIBSOURCES], [ m4_foreach([_gl_NAME], [$1], [ m4_if(_gl_NAME, [alloca.c], [], [ m4_define([gl_LIBSOURCES_DIR], [lib]) m4_append([gl_LIBSOURCES_LIST], _gl_NAME, [ ]) ]) ]) ]) # Like AC_LIBOBJ, except that the module name goes # into gltests_LIBOBJS instead of into LIBOBJS. AC_DEFUN([gltests_LIBOBJ], [ AS_LITERAL_IF([$1], [gltests_LIBSOURCES([$1.c])])dnl gltests_LIBOBJS="$gltests_LIBOBJS $1.$ac_objext" ]) # Like AC_REPLACE_FUNCS, except that the module name goes # into gltests_LIBOBJS instead of into LIBOBJS. AC_DEFUN([gltests_REPLACE_FUNCS], [ m4_foreach_w([gl_NAME], [$1], [AC_LIBSOURCES(gl_NAME[.c])])dnl AC_CHECK_FUNCS([$1], , [gltests_LIBOBJ($ac_func)]) ]) # Like AC_LIBSOURCES, except the directory where the source file is # expected is derived from the gnulib-tool parameterization, # and alloca is special cased (for the alloca-opt module). # We could also entirely rely on EXTRA_lib..._SOURCES. AC_DEFUN([gltests_LIBSOURCES], [ m4_foreach([_gl_NAME], [$1], [ m4_if(_gl_NAME, [alloca.c], [], [ m4_define([gltests_LIBSOURCES_DIR], [tests]) m4_append([gltests_LIBSOURCES_LIST], _gl_NAME, [ ]) ]) ]) ]) # This macro records the list of files which have been installed by # gnulib-tool and may be removed by future gnulib-tool invocations. AC_DEFUN([gl_FILE_LIST], [ lib/arg-nonnull.h lib/c++defs.h lib/getopt-cdefs.in.h lib/getopt-core.h lib/getopt-ext.h lib/getopt-pfx-core.h lib/getopt-pfx-ext.h lib/getopt.c lib/getopt.in.h lib/getopt1.c lib/getopt_int.h lib/gettext.h lib/stddef.in.h lib/sys_types.in.h lib/unistd.c lib/unistd.in.h lib/warn-on-use.h m4/00gnulib.m4 m4/absolute-header.m4 m4/extensions.m4 m4/extern-inline.m4 m4/getopt.m4 m4/gnulib-common.m4 m4/include_next.m4 m4/off_t.m4 m4/onceonly.m4 m4/ssize_t.m4 m4/stddef_h.m4 m4/sys_types_h.m4 m4/unistd_h.m4 m4/warn-on-use.m4 m4/wchar_t.m4 ]) Create ./lib/.gitignore Create ./m4/.gitignore Finished. You may need to add #include directives for the following .h files. #include <unistd.h> You may need to use the following Makefile variables when linking. Use them in <program>_LDADD when linking a program, or in <library>_a_LDFLAGS or <library>_la_LDFLAGS when linking a library. $(LTLIBINTL) when linking with libtool, $(LIBINTL) otherwise Don't forget to - add "lib/Makefile" to AC_CONFIG_FILES in ./configure.ac, - mention "lib" in SUBDIRS in Makefile.am, - mention "-I m4" in ACLOCAL_AMFLAGS in Makefile.am, - mention "m4/gnulib-cache.m4" in EXTRA_DIST in Makefile.am, - invoke gl_EARLY in ./configure.ac, right after AC_PROG_CC, - invoke gl_INIT in ./configure.ac. michael@x071:[/data/prj/aixtools/github/dovecot/src/x071-test]

1 0

Changing the name of a compressed file
by Peter West 11 Jun '17

11 Jun '17

Concerning Maildir, the wiki page on compression has this: All mails must have ,S=<size> in their filename where <size> contains the original uncompressed mail size, otherwise there will be problems with quota calculation as well as other potential random failures. Note that if the filename doesn’t contain the ,S=<size> before compression, adding it afterwards changes the base filename and thus the message UID. The safest thing to do is simply to not compress such files. Further down on the same page is this: If the file does exist, rename() (mv) the compressed file over the original file. • Dovecot can now read the file, but to avoid compressing it again on the next run, you'll probably want to rename it again to include e.g. a "Z" flag in the file name to mark that it was compressed (e.g. 1223212411.M907959P17184.host,S=3271:2,SZ). These comments seem to contradict each. Or is there a difference between adding the size specifier to the filename and adding a Z flag to the end of the file name? -- Peter West pbw(a)pbw.id.au And the great throng heard him gladly.

2 9

Unix socket for quota-status?
by Peter West 11 Jun '17

11 Jun '17

The example configs for quota-status use inet_listener. Does quota-status support unix sockets? -- Peter West pbw(a)pbw.id.au And the great throng heard him gladly.

2 2

Pacaging/build issues with AIX and vac (dovecot-2.2.25)
by Michael Felt 10 Jun '17

10 Jun '17

Hi. I finally decided it was really time to stop being lazy and really move away from gmail. After I have a server in my basement using power, etc. So I turned on the imap provided - and did not quite cry - it will have to do for now, but imap2 is wanting. A real server yes, but not Linux. (Using linux would require another server AND I would feel I am being lazy again). So, I downloaded dovecot-2.2.25 and tried to build. Configure (messages to stderr) xlc is /usr/vacpp/bin/xlc + CPPFLAGS="-I/opt/include -I/opt/buildaix/include" CFLAGS="-I/opt/include -O2 -qmaxmem=-1 -qarch=pwr5 -I/opt/buildaix/includes ./configure\ --prefix=/opt \ --sysconfdir=/var/dovecot/etc\ --sharedstatedir=/var/dovecot/com\ --localstatedir=/var/dovecot\ --mandir=/usr/share/man\ --infodir=/opt/share/info/dovecot \ > .buildaix/configure.out xlc_r: 1501-216 (W) command option -dM is not recognized - passed to ld xlc_r: 1501-228 (W) input file c not found 1506-297 (S) Unable to open input file null. No such file or directory. ./configure[25617]: rpcgen: not found messages to stderr by make: + make > .buildaix/make.out ./update-version.sh[42]: git: not found. "askpass.c", line 59.18: 1506-359 (I) Automatic variable str contains a const member and is not initialized. It will be initia "guid.c", line 113.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will be initiali "iostream-rawlog.c", line 28.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will b "istream-base64-decoder.c", line 42.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It "istream-base64-encoder.c", line 47.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It "istream-jsonstr.c", line 70.26: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will b "mountpoint.c", line 222.39: 1506-068 (W) Operation between types "char*" and "const char*" is not allowed. "istream-decrypt.c", line 68.18: 1506-359 (I) Automatic variable ephemeral_key contains a const member and is not initialized. "istream-decrypt.c", line 276.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "istream-decrypt.c", line 369.26: 1506-359 (I) Automatic variable peer_key contains a const member and is not initialized. It "istream-decrypt.c", line 745.42: 1506-359 (I) Automatic variable db contains a const member and is not initialized. It will b "ostream-encrypt.c", line 135.65: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "ostream-encrypt.c", line 454.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "dcrypt-openssl.c", line 787.36: 1506-359 (I) Automatic variable key contains a const member and is not initialized. It will b "dcrypt-openssl.c", line 1099.33: 1506-359 (I) Automatic variable secret contains a const member and is not initialized. It wi "dcrypt-openssl.c", line 1295.18: 1506-359 (I) Automatic variable tmp contains a const member and is not initialized. It will "dcrypt-openssl.c", line 1365.18: 1506-359 (I) Automatic variable saltbuf contains a const member and is not initialized. It w "istream-decrypt.c", line 68.18: 1506-359 (I) Automatic variable ephemeral_key contains a const member and is not initialized. "istream-decrypt.c", line 276.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "istream-decrypt.c", line 369.26: 1506-359 (I) Automatic variable peer_key contains a const member and is not initialized. It "istream-decrypt.c", line 745.42: 1506-359 (I) Automatic variable db contains a const member and is not initialized. It will b "ostream-encrypt.c", line 135.65: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "ostream-encrypt.c", line 454.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "istream-decrypt.c", line 68.18: 1506-359 (I) Automatic variable ephemeral_key contains a const member and is not initialized. "istream-decrypt.c", line 276.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "istream-decrypt.c", line 369.26: 1506-359 (I) Automatic variable peer_key contains a const member and is not initialized. It "istream-decrypt.c", line 745.42: 1506-359 (I) Automatic variable db contains a const member and is not initialized. It will b "ostream-encrypt.c", line 135.65: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "ostream-encrypt.c", line 454.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "test-http-auth.c", line 27.27: 1506-022 (S) "scheme" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 27.37: 1506-196 (W) Initialization between types "struct http_auth_challenge_test* const" and "char*" "test-http-auth.c", line 28.33: 1506-022 (S) "data" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 28.41: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 29.33: 1506-022 (S) "params" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 30.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 30.52: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 30.70: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 30.76: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 33.33: 1506-022 (S) "scheme" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 33.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 43.27: 1506-022 (S) "scheme" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 43.37: 1506-196 (W) Initialization between types "struct http_auth_challenge_test* const" and "char*" "test-http-auth.c", line 44.33: 1506-022 (S) "data" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 44.41: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 45.33: 1506-022 (S) "params" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 46.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 46.52: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 47.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 47.50: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 48.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 48.52: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 49.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 49.53: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 50.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 50.49: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 53.33: 1506-022 (S) "scheme" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 53.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 60.27: 1506-022 (S) "scheme" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 60.37: 1506-196 (W) Initialization between types "struct http_auth_challenge_test* const" and "char*" "test-http-auth.c", line 61.33: 1506-022 (S) "data" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 61.41: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 62.33: 1506-022 (S) "params" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 63.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 63.52: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 64.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 64.51: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 65.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 65.52: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 66.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 66.49: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 69.33: 1506-022 (S) "scheme" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 69.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 70.33: 1506-022 (S) "data" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 70.41: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 71.33: 1506-022 (S) "params" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 72.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 72.52: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 73.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 73.49: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 76.33: 1506-022 (S) "scheme" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 76.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 187.27: 1506-196 (W) Initialization between types "struct http_auth_param* const" and "char*" is not a "test-http-auth.c", line 187.39: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 188.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 188.36: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 189.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 189.36: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 190.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 190.34: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 191.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 191.34: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 192.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 192.33: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 193.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 193.37: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 194.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 194.39: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 195.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 195.37: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 196.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 196.33: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. make: 1254-004 The error code from the last command is 1. I am quite willing to dig and dig - but I want to be know if there will be any interest and/or support for dovecot on AIX. Sincerely, Michael

3 22

v2.2.30.1 released
by Timo Sirainen 09 Jun '17

09 Jun '17

https://dovecot.org/releases/2.2/dovecot-2.2.30.1.tar.gz https://dovecot.org/releases/2.2/dovecot-2.2.30.1.tar.gz.sig Due to some release process changes I didn't notice that one important bugfix wasn't included in the v2.2.30 release branch before I made the release. So fixing it here with v2.2.30.1. Also included another less important fix. - quota_warning scripts weren't working in v2.2.30 - vpopmail still wasn't compiling Also I guess should mention that in v2.2.30+ the "script" service's protocol changed to a new version. If anyone had written their own script services (not using the included "script" binary) they would need some changes. I haven't heard of anyone having done that though.

7 16

[Dovecot] Dovecot stops with "Fatal: kevent(): Invalid argument"
by Henrik Larsson 09 Jun '17

09 Jun '17

# 2.0.11: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.2-STABLE amd64 Dovecot stops with the following logged: - master: Fatal: kevent(): Invalid argument I have found that a diff was created for "src/lib/ioloop-kqueue.c" for a similar issue: http://dovecot.org/pipermail/dovecot/2010-November/054855.html I have patched my system with this and haven't seen the problem since, but I don't know if this is a coincidence. Could you please explain if the diff should actually fix anything or just add some more logging in case it stops again? Best regards Henrik Larsson

4 9

Dovecot LDAP using custom field to allow users to connect
by Michael JOIGNY 09 Jun '17

09 Jun '17

Hi all, I'd like to know if it's possible to add a custom field when the authentification is made by users. My boolean custom field will be for example "AllowUser" (false/true). I'm trying to do something like that but it's not working : /user_filter = (&(objectClass=posixAccount)(uid=%u)(objectClass=myclass)(AllowUser=TRUE))/ This is my dovecot/ldap configuration below : /*# dovecot.conf* / /passdb {// // driver = ldap// // args = /etc/dovecot/dovecot-ldap.conf// //}/ *# dovecot-ldap.conf* /hosts = myurl:myport// //dn = cn=myuser,dc=mydomain,dc=com// //dnpass = ********// //a//uth_bind = yes// //auth_bind_userdn = uid=%u,ou=users,dc=mydomain,dc=com// //ldap_version = 3// //base = ou=Users,dc=mydomain,dc=com// //scope = base// //default_pass_scheme = SSHA512 / Do you have an idead ? Kind regards. -- Michael

2 3

lmtp: Error: Temp file creation to /tmp/ ... failed: No such file or directory on incoming mails with attachments
by Lars-Sören Steck 09 Jun '17

09 Jun '17

Dear list, I'm currently facing problems when receiving eMails with attachments, at least sometimes. My mailserver is set up with the tool 'Mailcow', and hence is based on Dovecot (2.2.22 (fe789d2)) and Postfix. Usually, there are no problems with receiving mails. If a mail has an attachment, however, it is possible that the following error occurs (extract from /var/log/mail.log): 'Jun 7 12:50:28 mail postfix/lmtp[26827]: 564E68A0515: to=<abc(a)def.ghj>, relay=my.mail.server[private/dovecot-lmtp], delay=0.71, delays=0.67/0.01/0.01/0.02, dsn=4.3.0, status=deferred (host my.mail.server[private/dovecot-lmtp] said: 451 4.3.0 Temporary internal failure (in reply to end of DATA command))' Extract from /var/log/mail.err: 'Jun 7 12:50:28 mail dovecot: lmtp(26828): Error: Temp file creation to /tmp/dovecot.lmtp.mail.26828. failed: No such file or directory' Once this happened the first time after dovecot is running, it will happen for all incoming mails with attachments. This can be solved temporarily by restarting the dovecot service and running postqueue -f, but that obviously does not solve the underlying problem. In this post to this list, it is stated that dovecot sometimes creates temp files to avoid 'excessive memory usage'. I'm guessing that this is the case here, also the error message is similiar: https://dovecot.org/list/dovecot/2016-June/104722.html Should I simply change the configuration variable mail_temp_dir to solve this? Why is dovecot not able to find the /tmp folder? In the list thread, it is stated that this is caused by dovecot running with enabled chrooting. As far as I understand it though (correct me if I'm wrong), chrooting is not enabled in my dovecot configuration. Please find attached the output of 'dovecot -n': # 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.13 (7b14904) # OS: Linux 4.4.0-78-generic x86_64 Ubuntu 16.04.2 LTS auth_mechanisms = plain login dict { sqlquota = mysql:/etc/dovecot/dovecot-dict-sql.conf } listen = * log_timestamp = "%Y-%m-%d %H:%M:%S " login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c %k mail_home = /var/vmail/%d/%n mail_location = maildir:~/ mail_max_userip_connections = 500 mail_plugins = quota acl fts fts_solr managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace { list = yes location = maildir:%%h/:INDEXPVT=~/Shared/%%u prefix = Shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Archiv { special_use = \Archive } mailbox Archive { auto = subscribe special_use = \Archive } mailbox Archives { special_use = \Archive } mailbox "Deleted Messages" { special_use = \Trash } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Entwürfe { special_use = \Drafts } mailbox "Gelöschte Objekte" { special_use = \Trash } mailbox Gesendet { special_use = \Sent } mailbox "Gesendete Objekte" { special_use = \Sent } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Papierkorb { special_use = \Trash } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } plugin { acl = vfile acl_anyone = allow acl_shared_dict = file:/var/vmail/shared-mailboxes.db fts = solr fts_autoindex = yes fts_solr = url=http://127.0.0.1:8983/solr/ quota = dict:Userquota::proxy::sqlquota quota_rule2 = Trash:storage=+100%% sieve = /var/vmail/sieve/%u.sieve sieve_after = /var/vmail/sieve/global.sieve sieve_max_script_size = 1M sieve_quota_max_scripts = 0 sieve_quota_max_storage = 0 } protocols = imap sieve lmtp pop3 service auth { unix_listener /var/spool/postfix/private/auth_dovecot { group = postfix mode = 0660 user = postfix } unix_listener auth-master { mode = 0600 user = vmail } unix_listener auth-userdb { mode = 0600 user = vmail } user = root } service dict { unix_listener dict { group = vmail mode = 0660 user = vmail } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } user = vmail } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 2 service_count = 1 vsz_limit = 128 M } service managesieve { process_limit = 256 } ssl_cert = </etc/ssl/mail/mail.crt ssl_cipher_list = EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA ssl_dh_parameters_length = 2048 ssl_key = </etc/ssl/mail/mail.key ssl_protocols = !SSLv3 !SSLv2 userdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } protocol imap { mail_plugins = quota imap_quota imap_acl acl fts fts_solr } protocol lmtp { auth_socket_path = /var/run/dovecot/auth-master mail_plugins = quota sieve acl fts fts_solr postmaster_address = postmaster(a)steck.cc } protocol sieve { managesieve_logout_format = bytes=%i/%o } remote 127.0.0.1 { disable_plaintext_auth = no } Thank you for your help. Lars

2 2

Re: Any documentation around timeout states ?
by Joseph Tam 08 Jun '17

08 Jun '17

> Hi, this has been fixed in more recent release, where the states are > converted to human readable strings, see > > https://git.dovecot.net/dovecot/core/commit/e7d9dd003e6192b294507b9fbe9917a… Internal name I guess. For the rest of us: https://github.com/dovecot/core/commit/e7d9dd003e6192b294507b9fbe9917a514e4… Joseph Tam <jtam.home(a)gmail.com>

1 0

Re: Dovecot login is slow
by Aki Tuomi 08 Jun '17

08 Jun '17

Can you try adding blocking=yes to your dovecot-ldap.conf.ext Aki On 08.06.2017 11:15, Mitocariu Emilian wrote: > No, other servers use the same LDAP and the response is fast. The > weird part is that this morning i played a little with the > configuration, but in the end i came back to the settings i had > previously and now it works better, but from time to time it still > hangs a little > > On Thu, Jun 8, 2017 at 11:07 AM, Aki Tuomi <aki.tuomi(a)dovecot.fi > <mailto:aki.tuomi@dovecot.fi>> wrote: > > > > On 07.06.2017 16:34, Mitocariu Emilian wrote: > > Hi, > > > > I have an Ubuntu 16.04 server with dovecot 2.2.22 configured as > an imap > > server with an LDAP backend for authentication. This is the > output of > > "dovecot -n": > > # 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf > > The problem i'm having is that when i try to login it takes more than 10 > > seconds, making my webmail very slow. For testing i login to > imap like this > > "openssl s_client -connect localhost:993" and sometimes i get > this message > > "* OK Waiting for authentication master process to respond..". I > saw at > > other people, one of the problem was because they didn't > disabled pam > > authentication when using another backend (like ldap or sql), > but i already > > did that. > > > > Does anyone know what could cause such long login times and how > to fix it? > > Does your LDAP take long time to respond? > > Aki > >

1 0

mail storage auto detection failed?
by Alef Veld 08 Jun '17

08 Jun '17

Hi everyone. Nice to meet you. I’m new to dovecot and i came across a problem it seems. I setup a new user called sales with useradd, and gave it a password. Although it has a home directory, i set login to /sbin/nologin. When logging into the pop server on port 110 (with telnet) i get this in the logs: dovecot: pop3-login: Login: user=<sales>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=12938, secured, session=<94SotWVRoAB/AAAB> Jun 7 21:49:24 www dovecot: pop3(sales): Error: user sales: Initialization failed: Namespace '': Mail storage autodetection failed with home=/home/sales Jun 7 21:49:24 www dovecot: pop3(sales): Error: Invalid user settings. Refer to server log for more information. Did i have to initialise the mailbox in the homedirectory? What did i forget. I didn't change anything to the default dovecot.conf, i just installed the package with yum install dovecot (so latest version). This error also shows up when logging into port 143. Thanks for your help. My dovecot -n output if that helps is : [ec2-user@www log]$ dovecot -n # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 4.9.20-10.30.amzn1.x86_64 x86_64 mbox_write_locks = fcntl namespace inbox { inbox = yes location = prefix = } passdb { driver = pam } ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem ssl_protocols = !SSLv2 !SSLv3 userdb { driver = passwd } Thanks a lot. -atv

2 1

Any documentation around timeout states ?
by Matt Bryant 08 Jun '17

08 Jun '17

Been seeing a number of proxy timouts recently with errors such as ... timed out in state=4 timed out in state=2 Is there any doco around what state 2/4 actually means ... atm got auth_debug on to see if we can track further information down centos 7 x86_64 dovecot 2.2.19 rgds Matt

2 1

Dovecot login is slow
by Mitocariu Emilian 08 Jun '17

08 Jun '17

Hi, I have an Ubuntu 16.04 server with dovecot 2.2.22 configured as an imap server with an LDAP backend for authentication. This is the output of "dovecot -n": # 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.13 (7b14904) # OS: Linux 4.4.0-77-generic x86_64 Ubuntu 16.04.2 LTS auth_debug_passwords = yes mail_gid = vmail mail_location = maildir:~/ mail_privileged_group = mail mail_uid = vmail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocols = imap lmtp service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } ssl_cert = </path/to/my/cert ssl_key = </path/to/my/key userdb { args = /etc/dovecot/dovecot-ldap.conf.ext default_fields = home=/var/mail/vmail/%n driver = ldap } The problem i'm having is that when i try to login it takes more than 10 seconds, making my webmail very slow. For testing i login to imap like this "openssl s_client -connect localhost:993" and sometimes i get this message "* OK Waiting for authentication master process to respond..". I saw at other people, one of the problem was because they didn't disabled pam authentication when using another backend (like ldap or sql), but i already did that. Does anyone know what could cause such long login times and how to fix it?

2 1

Segmentation fault in imap_bodystructure_is_plain_7bit
by mihaiush 08 Jun '17

08 Jun '17

Hi, I have a lot of errors like this in my log: Fatal: master: service(imap): child 26049 killed with signal 11 (core dumped) Dovecot 2.2.18 build from sources ./configure --prefix=/opt/dovecot2 --with-mysql --with-sqlite --with-solr --with-ssl --disable-rpath --disable-static. Debian Wheezy 3.2.63-2 x86_64. Filesystem is ZFS. All the core files are similar: $ gdb /opt/dovecot2/libexec/dovecot/imap core GNU gdb (GDB) 7.4.1-debian Copyright (C) 2012 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html > This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /opt/dovecot2/libexec/dovecot/imap...done. [New LWP 11635] warning: Can't read pathname for load map: Input/output error. [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `/opt/dovecot2/libexec/dovecot/imap imap-postlogin'. Program terminated with signal 11, Segmentation fault. #0 imap_bodystructure_is_plain_7bit (part=part@entry=0x234cd50) at imap-bodystructure.c:458 458 if (data->content_subtype != NULL && (gdb) bt #0 imap_bodystructure_is_plain_7bit (part=part@entry=0x234cd50) at imap-bodystructure.c:458 #1 0x00007f920a0fbfaf in index_mail_body_parsed_cache_flags (mail=0x234be60) at index-mail.c:587 #2 index_mail_parse_body_finish (mail=mail@entry=0x234be60, field=field@entry=MAIL_CACHE_IMAP_BODYSTRUCTURE, success=success@entry=true) at index-mail.c:1007 #3 0x00007f920a0fc369 in index_mail_parse_body (mail=mail@entry=0x234be60, field=field@entry=MAIL_CACHE_IMAP_BODYSTRUCTURE) at index-mail.c:1081 #4 0x00007f920a0fc498 in index_mail_parse_bodystructure (mail=mail@entry=0x234be60, field=field@entry=MAIL_CACHE_IMAP_BODYSTRUCTURE) at index-mail.c:1222 #5 0x00007f920a0fcf1c in index_mail_get_special (_mail=_mail@entry=0x234be60, field=field@entry=MAIL_FETCH_IMAP_BODYSTRUCTURE, value_r=value_r@entry=0x7ffc1518fde8) at index-mail.c:1379 #6 0x00007f920a0b29cd in dbox_mail_get_special (_mail=_mail@entry=0x234be60, field=field@entry=MAIL_FETCH_IMAP_BODYSTRUCTURE, value_r=value_r@entry=0x7ffc1518fde8) at dbox-mail.c:229 #7 0x00007f920a0a83f0 in mdbox_mail_get_special (_mail=0x234be60, field=MAIL_FETCH_IMAP_BODYSTRUCTURE, value_r=0x7ffc1518fde8) at mdbox-mail.c:213 #8 0x00007f920a08f96d in mail_get_special (mail=<optimized out>, field=field@entry=MAIL_FETCH_IMAP_BODYSTRUCTURE, value_r=value_r@entry=0x7ffc1518fde8) at mail.c:317 #9 0x0000000000419a6a in fetch_bodystructure (ctx=0x232bbd8, mail=<optimized out>, context=<optimized out>) at imap-fetch.c:690 #10 0x0000000000419f9f in imap_fetch_more_int (ctx=ctx@entry=0x232bbd8, cancel=false) at imap-fetch.c:506 #11 0x000000000041af07 in imap_fetch_more (ctx=0x232bbd8, cmd=cmd@entry=0x232ba00) at imap-fetch.c:558 #12 0x000000000040f0c9 in cmd_fetch (cmd=0x232ba00) at cmd-fetch.c:286 #13 0x0000000000418aec in command_exec (cmd=cmd@entry=0x232ba00) at imap-commands.c:167 #14 0x0000000000417ad0 in client_command_input (cmd=cmd@entry=0x232ba00) at imap-client.c:814 #15 0x0000000000417b64 in client_command_input (cmd=0x232ba00) at imap-client.c:874 #16 0x0000000000417e45 in client_handle_next_command (remove_io_r=<synthetic pointer>, client=0x232ade0) at imap-client.c:912 #17 client_handle_input (client=client@entry=0x232ade0) at imap-client.c:924 #18 0x0000000000418212 in client_input (client=0x232ade0) at imap-client.c:966 #19 0x00007f9209df134b in io_loop_call_io (io=0x232b8f0) at ioloop.c:501 #20 0x00007f9209df1e5b in io_loop_handler_run_internal (ioloop=ioloop@entry=0x22ec790) at ioloop-epoll.c:220 #21 0x00007f9209df13d9 in io_loop_handler_run (ioloop=ioloop@entry=0x22ec790) at ioloop.c:548 #22 0x00007f9209df1458 in io_loop_run (ioloop=0x22ec790) at ioloop.c:525 #23 0x00007f9209d92993 in master_service_run (service=0x22ec620, callback=callback@entry=0x421140 <client_connected>) at master-service.c:581 #24 0x000000000040c60b in main (argc=2, argv=0x22ec390) at main.c:431 (gdb) q I wrote a patch which solved the problem but: - my C is absolutely basic, - dovecot is already at version 2.2.30, maybe problem was already fixed. Anyway I attached my patch, please have a look. Thanks.

1 0

Which allowed services can be defined (imap, pop3, etc.)
by Malte Schmidt 08 Jun '17

08 Jun '17

Hello, I am using Dovecot with an LDAP-backend for authentication. According to the documentation at https://wiki.dovecot.org/Authentication/RestrictAccess with LDAP and "pass_filter" it is possible to filter allowed services for the user with: pass_filter = (&(objectClass=posixAccount)(uid=%u)(service=%s)) Thats pretty cool. Now, in the LDAP-settings I created corresponding fields (service) and added the allowed services to tthese fields (imap, pop3, etc.). After that change, certain services were not available to that user anymore. So it seems that more services are there and after explicitly setting the services which are allowed, the other, not mentioned services stop to work. Now two questions: Is there any documented, full-featured list of the services that can be added? Is it possible to "flip" that setting so its not allowing certain services but denying the ones that are added to the "service"-fields? Cheers

2 3

Master users
by Noriyuki TAKEI 08 Jun '17

08 Jun '17

Hi,all What version of dovecot supports master users? Master users means as follows https://wiki2.dovecot.org/Authentication/MasterUsers -- ・‥…━━━━━━━━━━━━━━━━━━━━━━━…‥ サイオステクノロジー株式会社技術部クラウドソリューショングループ武井宜行〒106-0047 東京都港区南麻布二丁目 12 番 3 号サイオスビル TEL：03-6401-5314 (直通) 03-6401-5117 (部代表) URL：http://www.sios.com/ ■SIOSの最新情報はこちらから！「いいね！」をお待ちしています■ (SIOS Technology)：http://www.facebook.com/SIOSTechnology (OSSよろず相談室)：http://www.facebook.com/OSSyorozu ■Twitter公式アカウント■ https://twitter.com/#!/SIOS_Technology ・‥…━━━━━━━━━━━━━━━━━━━━━━━…‥

2 2

virtual isp address, local delivery
by Hugh Bragg 07 Jun '17

07 Jun '17

I'm trying to understand how to deliver mail to an address locally which is popped from my isps email account. I access and keep these emails backed up on dovecot and use postfix smtp to deliver mail. The problem is that while fetchmail uses dovecot lda directly, postfix can't include my isps domain in its $mydestination because I won't be able to send mail to other users in that domain. I want to be able to send mail to other users I'm popping for in that domain, or even send myself mail. Currently postfix just relays the mail to the isp and it returns through fetchmail, but I'd like to have it delivered locally and still be able to email my isp users that I don't pop. As far as I can tell, this can't be done because virtual users have to be in postfix $mydestination. Does someone have a better setup they can share or know how to do this? Hugh

2 3

doveadm sync SSL error when upgrading from 2.2.27 -> 2.2.29
by Pallissard, Matthew 07 Jun '17

07 Jun '17

I'm starting to see the following error from doveadm when upgrading from 2.2.27 to 2.2.29. > doveadm(ip.add.re.ss): Error: doveadm client disconnected before handshake: SSL_accept() failed: error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher I'm using a cert/key with the following curve. ASN1 OID: prime256v1 NIST CURVE: P-256 Downgrading to 2.2.27 resolves the issue. Does anyone know about this off the top of their head? If not I'll try to git-bisect 2.2.27->2.2.28 for any offending commits later on this week. -- Matt Pallissard

1 0

2.2.30.2 fails to compile on centos 7
by Matt Bryant 07 Jun '17

07 Jun '17

Just downloaded the latest release 2.2.30.2, ran ./configure with all defaults and make ... and it fails to build .. error somewhere whilst running Makefile in lib-http libtool: link: gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -Wl,--as-needed -o test-http-server-errors test-http-server-errors.o -Wl,--export-dynamic ./.libs/libhttp.a ../lib-dns/.libs/libdns.a ../lib-ssl-iostream/.libs/libssl_iostream.a ../lib-master/.libs/libmaster.a ../lib-settings/.libs/libsettings.a ../lib-test/.libs/libtest.a ../lib/.libs/liblib.a -ldl collect2: error: ld returned 1 exit status make[3]: *** [test-http-server-errors] Error 1 make[3]: Leaving directory `/home/rpmbuild/rpmbuild/BUILD/dovecot-2.2.30.2/src/lib-http' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/home/rpmbuild/rpmbuild/BUILD/dovecot-2.2.30.2/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/home/rpmbuild/rpmbuild/BUILD/dovecot-2.2.30.2' make: *** [all] Error 2 any ideas ?? 2.2.30.1 built ok ... rgds Matt

3 6

Moving from CentOS to GF RPMs
by Roger Klorese 07 Jun '17

07 Jun '17

Does anyone have fool-proof documentation for this fool on how to configure repos and what operations to perform to move from the distro RPMs to the GF ones without breaking stuff?

2 2

Re: v2.2.30.1
by Joseph Tam 07 Jun '17

07 Jun '17

Aki Tuomi <aki.tuomi(a)dovecot.fi> wrote: > On 06.06.2017 14:11, Olaf Hopp wrote: >> On 06/05/2017 11:05 AM, Angel L. Mateo wrote: >>> I have updated my dovecot proxy servers from 2.2.28 to 2.2.30. >>> Since the upgrade I'm having the error: >>> >>> Jun 5 10:54:51 musio12 dovecot: auth: Fatal: master: service(auth): >>> child 63632 killed with signal 11 (core not dumped) +1. > We have identified a bug in auth process, and are working with a fix. This is the 1 line context around the same thing I am seeing, if it helps. It seems to happen with brute force scanning Jun 6 06:13:30 server dovecot: imap-login: Warning: Auth connection closed with 1 pending requests (max 7 secs, pid=20675 , EOF) Jun 6 06:13:30 server dovecot: auth: Fatal: master: service(auth): child 20676 killed with signal 11 (core not dumped - set service auth { drop_priv_before_exec=yes }) Jun 6 06:13:30 server dovecot: imap-login: Disconnected (auth failed, 1 attempts in 7 secs): user=<{dead@account}>, method=PLAIN, rip=5.188.11.11, lip={my-ip}, TLS, session=<EpJbYkpRInsFvAsL> Bots aren't known to exit cleanly, so it's probably related to prematurely dropped connections. Apart from that, I'm not seeing this with real users. Joseph Tam <jtam.home(a)gmail.com>

1 1

Bug with 2.2.29-1~auto+25 back to haunt me
by Ralf Hildebrandt 06 Jun '17

06 Jun '17

After upgrading from 2.2.28-1~auto+45 to 2.2.29-1~auto+25 I'm gettings this: May 31 16:44:31 mproxy dovecot: auth: Fatal: passdb imap: Cannot verify certificate without ssl_ca_dir or ssl_ca_file setting May 31 16:44:31 mproxy dovecot: master: Error: service(auth): command startup failed, throttling for 8 secs May 31 16:44:31 mproxy dovecot: imap-login: Disconnected: Auth process broken (disconnected before auth was ready, waited 2 secs): user=<>, rip=141.42.206.36, lip=141.42.206.11, TLS, session=<ze1A9dJQZ8yNKs4k> # doveconf -n # 2.2.devel (215fd61): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.devel (403042e) # OS: Linux 4.4.0-71-generic x86_64 Ubuntu 16.04.2 LTS auth_mechanisms = plain login default_vsz_limit = 1 G imapc_host = exchange-imap.charite.de imapc_port = 993 imapc_ssl = imaps imapc_ssl_verify = no listen = *,:: mail_gid = imapproxy mail_home = /home/imapproxy/%u mail_location = imapc:~/imapc mail_plugins = mail_log notify mail_uid = imapproxy passdb { args = host=exchange-imap.charite.de port=993 ssl=imaps default_fields = userdb_imapc_user=%u userdb_imapc_password=%w userdb_imapc_host=exchange-imap.charite.de userdb_imapc_ssl=imaps userdb_imapc_port=993 driver = imap } plugin { sieve = file:~/sieve;active=~/.dovecot.sieve } protocols = imap service auth { inet_listener { address = 127.0.0.1 port = 12345 } } ssl = required ssl_ca = </etc/ssl/certs/ca-certificates.crt ssl_cert = </etc/dovecot/dovecot.pem ssl_cipher_list = EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4 ssl_client_ca_file = /etc/ssl/certs/ca-certificates.crt ssl_key = # hidden, use -P to show it ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 userdb { driver = prefetch } verbose_proctitle = yes So I added ssl_ca_file = /etc/ssl/certs/ca-certificates.crt But alas: May 31 16:50:24 mproxy dovecot: config: Warning: Obsolete setting in /etc/dovecot/conf.d/10-ssl.conf:36: ssl_ca_file has been replaced by ssl_ca = <file Gnarf! As you can see I do HAVE ssl_ca in my doveconf -n output! ssl_ca = </etc/ssl/certs/ca-certificates.crt So what gives? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | https://www.charite.de

2 6

v2.2.30.2 released
by Timo Sirainen 06 Jun '17

06 Jun '17

https://dovecot.org/releases/2.2/dovecot-2.2.30.2.tar.gz https://dovecot.org/releases/2.2/dovecot-2.2.30.2.tar.gz.sig Hopefully the last 2.2.30.x.. - auth: Multiple failed authentications within short time caused crashes - push-notification: OX driver crashed at deinit

1 0

2.2.29.8: YACD (Yet Another Core Dump)
by Luciano Mannucci 06 Jun '17

06 Jun '17

I'm getting this in my logfile, should I worry?: Jun 06 12:28:47 imap(paco_mcs): Error: Next message unexpectedly corrupted in mbox file /var/spool/mail/paco_mcs at 639279728 Jun 06 12:28:47 imap(paco_mcs): Error: Unexpectedly lost From-line from mbox file /var/spool/mail/paco_mcs at 639279728 Jun 06 12:28:47 imap(paco_mcs): Panic: file mbox-sync.c: line 1338 (mbox_sync_handle_eof_updates): assertion failed: (trailer_size <= 2) Jun 06 12:28:47 imap(paco_mcs): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x9cd16) [0xb75e7d16] -> /usr/lib/dovecot/libdovecot.so.0(+0x9cd9f) [0xb75e7d9f] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0xb757104e] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x81698) [0xb76d4698] -> /usr/lib/dovecot/libdovecot-storage.so.0(mbox_sync+0x4b) [0xb76d71cb] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x7728c) [0xb76ca28c] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x778c6) [0xb76ca8c6] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_get_stream_because+0x5f) [0xb768112f] -> /usr/lib/dovecot/libdovecot-storage.so.0(imap_msgpart_open+0x811) [0xb774bef1] -> dovecot/imap() [0x8064c76] -> dovecot/imap() [0x80629c6] -> dovecot/imap(imap_fetch_more+0x31) [0x8063ed1] -> dovecot/imap(cmd_fetch+0x4bb) [0x805574b] -> dovecot/imap(command_exec+0x4a) [0x80613aa] -> dovecot/imap() [0x805f8d6] -> dovecot/imap() [0x805f961] -> dovecot/imap(client_handle_input+0x185) [0x805fcc5] - > dovecot/imap(client_input+0x71) [0x80601b1] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x67) [0xb75ff997] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xeb) [0xb76013ab] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x45) [0xb75ffa55] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x48) [0xb75ffc18] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x2d) [0xb757c1ad] -> dovecot/imap(main+0x344) [0x806dbc4] -> /lib/libc.so.6(__libc_start_main+0xfe) [0xb73d6c2e] Jun 06 12:28:48 imap(paco_mcs): Fatal: master: service(imap): child 4989 killed with signal 6 (core dumped) Jun 06 12:28:52 imap(paco_mcs): Error: Next message unexpectedly lost from mbox file /var/spool/mail/paco_mcs at 1073259120 (noncached) Jun 06 12:28:52 imap(paco_mcs): Error: Sync failed for mbox file /var/spool/mail/paco_mcs: Couldn't get body size for seq=11213 My doveconf -n: # 2.2.29.1 (e0b76e3): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.17 (e179378) # OS: Linux 3.0.101-105-pae i686 openSUSE 11.4 (i586) ext3 auth_cache_size = 3 k auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_verbose = yes default_client_limit = 1249 default_vsz_limit = 712 M disable_plaintext_auth = no first_valid_gid = 0 first_valid_uid = 100 info_log_path = /var/log/dovecot/logfile.info listen = * log_path = /var/log/dovecot/logfile login_greeting = Dovecot at Baobab ready. login_trusted_networks = 127.0.0.0/8 212.45.144.0/24 192.168.134.0/24 mail_location = mbox:/var/spool/mailboxes/%u:INBOX=/var/spool/mail/%u:DIRNAME=mbox:INDEX=/var/dovecot_indexes/%u maildir_copy_with_hardlinks = no managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mbox_lock_timeout = 443 secs namespace { inbox = yes location = prefix = separator = . type = private } passdb { driver = pam } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size } protocols = pop3 imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service imap-login { inet_listener imaps { address = * } process_limit = 512 } service pop3-login { chroot = executable = pop3-login -D inet_listener pop3s { address = * } process_limit = 512 } ssl_ca = </etc/ssl/ca.crt ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = # hidden, use -P to show it userdb { driver = passwd } version_ignore = yes protocol imap { imap_client_workarounds = delay-newmail mail_plugins = mail_log notify } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_enable_last = yes } protocol lda { info_log_path = /var/log/dovecot/lda.log log_path = /var/log/dovecot/lda-errors.log postmaster_address = postmaster(a)mcs.it } Cheers, Luciano. -- /"\ /Via A. Salaino, 7 - 20144 Milano (Italy) \ / ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250 X AGAINST HTML MAIL / E-MAIL: posthamster(a)sublink.sublink.ORG / \ AND POSTINGS / WWW: http://www.lesassaie.IT/

2 2

Multiuser attachment storage (mail_attachment_dir)
by megaone＠yandex.ru 06 Jun '17

06 Jun '17

Was trying to set up attachment storage, but folders are receiving permission only for current user, so if another user is receiving a mail with same attachment he is getting permission denied error on reading hash file. Is it possible to setup global attachment storage to work with all users, at least in domain? mail_access_groups won't help, as folders are given 0 group permission. Umask and setfacl won't help either.

2 1

Two domains - same user names filter
by Sandbox 06 Jun '17

06 Jun '17

Hi, I have two LDAP domains, which has some equal users, eg: abc(a)domain1.com abc(a)domain2.com I sat up this config: domain1 users maildirs are stored in /home/vmail/username domain2 users maildirs are stored in /home/vmail/domain2/username This works fine except one thing: i cant set up the ldap query to choose the correct maildir if the user names are equal. Is it possible to use a user_filter which will choose the correct maildir and user/domain from the email address? My current ldap.conf for domain1: hosts = ldap.domain1.com base = ou=People,dc=domain1,dc=com ldap_version = 3 user_attrs = uid=user user_filter = (uid=%n) pass_attrs = uid=user,userPassword=password pass_filter = (uid=%n) default_pass_scheme = MD5 and for domain2: hosts = ldap.domain2.com base = ou=People,dc=domain2,dc=com ldap_version = 3 user_attrs = \ =mail=maildir:/home/vmail/%{ldap:departmentNumber)/%n/Maildir user_filter = (uid=%n) pass_attrs = uid=%n,userPassword=password pass_filter = (uid=%n) default_pass_scheme = MD5 Thanks, Robert

4 7

vnd.dovecot.pipe in sieve: what user....
by Larry Rosenman 06 Jun '17

06 Jun '17

I have a site-wide bayes database, that currently gets populated by scripts running as a user that is also the user that Exim uses to call spamd. When a script is running from the vnd.dovecot.pipe call, what user is it running as? Would a setuid script work? -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: larryrtx(a)gmail.com US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

2 1

Re: corrupted indexes rebuilding over and over
by Joseph Tam 06 Jun '17

06 Jun '17

micah <micah(a)riseup.net> wrote: > Now, about 50 users have a problem where their indexes are > corrupted. Dovecot tries to fix them, but for some reason it is > failing. The users are seeing their mails duplicated and they cannot > delete mails. I can see in the logs dovecot detecting this and trying to > rebuild operations during delivery and imap login, but its repeating > over and over and over. For one user, I've seen more than 4k lines in > the logs about this. > > If i try to do doveadm force-resync -u username INBOX > > I get this: > > doveadm(nuffsaid): Warning: mdbox /n/nuffsaid/mdbox/storage: Inconsistency in map index (3494,32332 != 3494,383536) I think mdbox is sensitive to index corruption. mbox/maildir indices can be rebuilt, but data loss can result if mdbox indices are corrupted: https://wiki2.dovecot.org/MailboxFormat/dbox "Grubert, Gordon" <gordon.grubert+lists(a)uni-greifswald.de> then writes: > we had the same problem after a system failure. Our problem could be > solved by > > rm /PATH/USER/mdbox/storage/dovecot.map.index* > doveadm -D -v force-resync -u USER INBOX Not sure given the above URL whether this will solve your problem of make it far worse. Better back up what you have before trying anything. Joseph Tam <jtam.home(a)gmail.com>

1 0

corrupted indexes rebuilding over and over
by micah 05 Jun '17

05 Jun '17

Hi, On saturday one of our dovecot machines had an OOPS, and we had to powercycle it. When it came up, it did a filesystem fsck (ext4) and fixed a couple things, but nothing in lost+found. Now, about 50 users have a problem where their indexes are corrupted. Dovecot tries to fix them, but for some reason it is failing. The users are seeing their mails duplicated and they cannot delete mails. I can see in the logs dovecot detecting this and trying to rebuild operations during delivery and imap login, but its repeating over and over and over. For one user, I've seen more than 4k lines in the logs about this. If i try to do doveadm force-resync -u username INBOX I get this: doveadm(nuffsaid): Warning: mdbox /n/nuffsaid/mdbox/storage: Inconsistency in map index (3494,32332 != 3494,383536) doveadm(nuffsaid): Warning: fscking index file /srv/dovecot_indexes/n/nuffsaid/storage/dovecot.map.index doveadm(nuffsaid): Warning: mdbox /n/nuffsaid/mdbox/storage: rebuilding indexes doveadm(nuffsaid): Warning: fscking index file /srv/dovecot_indexes/n/nuffsaid/storage/dovecot.map.index doveadm(nuffsaid): Warning: mdbox /n/nuffsaid/mdbox/storage: Inconsistency in map index (3494,32332 != 3494,384024) doveadm(nuffsaid): Warning: fscking index file /srv/dovecot_indexes/n/nuffsaid/storage/dovecot.map.index but then if i do it again, I get the same thing, over and over and over (the numbers change a little). This is dovecot 2.2.27 with mdbox format.... what can I do to fix this? Its driving users mad, and they keep going over quota as their space fills. thanks! micah

2 2

fts_solr: uid0?
by Larry Rosenman 05 Jun '17

05 Jun '17

I'm seeing the following: Jun 5 11:10:52 thebighonker dovecot: imap(ler): Error: fts_solr: received invalid uid '0' Is there something I can get for you to debug? doveconf -n: # 2.2.30.1 (eebd877): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.18 (29cc74d) # OS: FreeBSD 11.1-PRERELEASE amd64 auth_debug_passwords = yes auth_default_realm = lerctr.org auth_mechanisms = plain login auth_realms = lerctr.org thebighonker.lerctr.org tbh.lerctr.org auth_username_format = %Ln default_vsz_limit = 1 G deliver_log_format = msgid=%m: %$ (subject=%s from=%f size=%w) lda_mailbox_autocreate = yes listen = 192.147.25.65, :: lmtp_save_to_detail_mailbox = yes login_access_sockets = tcpwrap mail_attribute_dict = file:%h/mail/.imap/dovecot-mail-attributes mail_debug = yes mail_location = mbox:~/mail:INBOX=~/mail/INBOX mail_plugins = " fts fts_solr notify stats virtual" mail_privileged_group = mail mail_server_admin = mailto:ler@lerctr.org mail_server_comment = LERCTR Mail Server mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vacation-seconds editheader mboxmetadata servermetadata imapsieve vnd.dovecot.imapsieve namespace archive { hidden = no list = no location = mbox:~/MAIL-ARCHIVE prefix = ARCHIVE/ separator = / } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox INBOX { auto = create } mailbox Junk { special_use = \Junk } mailbox SA/FN { special_use = \Junk } mailbox SENT { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } mailbox virtual/Flagged { special_use = \Flagged } mailbox virtual/all { special_use = \All } prefix = } namespace virtual { hidden = no list = yes location = virtual:~/MAIL-VIRTUAL:INDEX=MEMORY prefix = Virtual/ separator = / } passdb { args = failure_show_msg=yes session=yes max_requests=20 driver = pam } plugin { fts = solr fts_autoindex = yes fts_solr = url=http://thebighonker.lerctr.org:8983/solr/dovecot/ fts_tika = http://localhost:9998/tika/ imapsieve_url = sieve://thebighonker.lerctr.org mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid size from subject vsize flags recipient_delimiter = + sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +editheader +vacation-seconds +mboxmetadata +servermetadata sieve_plugins = sieve_imapsieve stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_refresh = 5s stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-client { mode = 0666 } unix_listener auth-master { mode = 0666 } } service indexer-worker { drop_priv_before_exec = yes } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0666 user = } fifo_listener stats-user { group = mode = 0666 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service tcpwrap { unix_listener login/tcpwrap { group = $default_login_user mode = 0600 user = $default_login_user } } ssl_cert = </home/ler/letsencrypt-home/lerctr.org/fullchain.cer ssl_cipher_list = EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+AESGCM:EECDH:EDH+AESGCM:EDH+aRSA:HIGH:!MEDIUM:!LOW:!aNULL:!eNULL:!LOW:!RC4:!MD5:!EXP:!PSK:!SRP:!DSS ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv2 !SSLv3 userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { mail_plugins = " fts fts_solr notify stats virtual sieve mail_log" } protocol lda { mail_plugins = " fts fts_solr notify stats virtual sieve mail_log" } protocol pop3 { mail_plugins = " fts fts_solr notify stats virtual mail_log" } protocol !doveadm { mail_plugins = " fts fts_solr notify stats virtual mail_log" } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags imap_logout_format = in=%i out=%o fhc=%{fetch_hdr_count} fhb=%{fetch_hdr_bytes} fbc=%{fetch_body_count} fbb=%{fetch_body_bytes} del=%{deleted} exp=%{expunged} trash=%{trashed} imap_metadata = yes mail_max_userip_connections = 50 mail_plugins = " fts fts_solr notify stats virtual mail_log imap_sieve imap_stats stats" } -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: larryrtx(a)gmail.com US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

1 0

SIG11/Auth/FreeBSD
by Larry Rosenman 05 Jun '17

05 Jun '17

I'm seeing lots of: Jun 2 00:00:05 thebighonker exim[57437]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51339 I=[192.147.25.65]:465: 535 Incorrect authentication data (set_id=web) Jun 2 00:00:06 thebighonker exim[57439]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51363 I=[192.147.25.65]:465: 535 Incorrect authentication data (set_id=web) Jun 2 00:00:06 thebighonker exim[57438]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51355 I=[192.147.25.65]:465: 535 Incorrect authentication data (set_id=web) Jun 2 00:00:06 thebighonker exim[57443]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51385 I=[192.147.25.65]:465: 435 Unable to authenticate at present: authentication socket read error or premature e of Jun 2 00:00:06 thebighonker exim[57442]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51368 I=[192.147.25.65]:465: 435 Unable to authenticate at present: authentication socket read error or premature e of Jun 2 00:00:06 thebighonker exim[57441]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51361 I=[192.147.25.65]:465: 435 Unable to authenticate at present: authentication socket read error or premature e of Jun 2 00:00:06 thebighonker exim[57440]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51362 I=[192.147.25.65]:465: 435 Unable to authenticate at present: authentication socket read error or premature e of Jun 2 00:00:06 thebighonker dovecot: auth: Fatal: master: service(auth): child 55916 killed with signal 11 (core not dumped - set s ervice auth { drop_priv_before_exec=yes }) The suggestion to drop_priv_before_exec=yes breaks auth totally. doveconf -n: # 2.2.30.1 (eebd877): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.18 (29cc74d) # OS: FreeBSD 11.0-STABLE amd64 auth_default_realm = lerctr.org auth_mechanisms = plain login auth_realms = lerctr.org thebighonker.lerctr.org tbh.lerctr.org auth_username_format = %Ln default_vsz_limit = 1 G deliver_log_format = msgid=%m: %$ (subject=%s from=%f size=%w) lda_mailbox_autocreate = yes listen = 192.147.25.65, :: lmtp_save_to_detail_mailbox = yes login_access_sockets = tcpwrap mail_attribute_dict = file:%h/mail/.imap/dovecot-mail-attributes mail_debug = yes mail_location = mbox:~/mail:INBOX=~/mail/INBOX mail_plugins = " fts fts_solr notify stats virtual" mail_privileged_group = mail mail_server_admin = mailto:ler@lerctr.org mail_server_comment = LERCTR Mail Server mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vacation-seconds editheader mboxmetadata servermetadata imapsieve vnd.dovecot.imapsieve namespace archive { hidden = no list = no location = mbox:~/MAIL-ARCHIVE prefix = ARCHIVE/ separator = / } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox INBOX { auto = create } mailbox Junk { special_use = \Junk } mailbox SA/FN { special_use = \Junk } mailbox SENT { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } mailbox virtual/Flagged { special_use = \Flagged } mailbox virtual/all { special_use = \All } prefix = } namespace virtual { hidden = no list = yes location = virtual:~/MAIL-VIRTUAL:INDEX=MEMORY prefix = Virtual/ separator = / } passdb { args = failure_show_msg=yes session=yes max_requests=20 driver = pam } plugin { fts = solr fts_autoindex = yes fts_solr = url=http://thebighonker.lerctr.org:8983/solr/dovecot/ fts_tika = http://localhost:9998/tika/ imapsieve_url = sieve://thebighonker.lerctr.org mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid size from subject vsize flags recipient_delimiter = + sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +editheader +vacation-seconds +mboxmetadata +servermetadata sieve_plugins = sieve_imapsieve stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_refresh = 5s stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-client { mode = 0666 } unix_listener auth-master { mode = 0666 } } service indexer-worker { drop_priv_before_exec = yes } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0666 user = } fifo_listener stats-user { group = mode = 0666 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service tcpwrap { unix_listener login/tcpwrap { group = $default_login_user mode = 0600 user = $default_login_user } } ssl_cert = </home/ler/letsencrypt-home/lerctr.org/fullchain.cer ssl_cipher_list = EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+AESGCM:EECDH:EDH+AESGCM:EDH+aRSA:HIGH:!MEDIUM:!LOW:!aNULL:!eNULL:!LOW:!RC4:!MD5:!EXP:!PSK:!SRP:!DSS ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv2 !SSLv3 userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { mail_plugins = " fts fts_solr notify stats virtual sieve mail_log" } protocol lda { mail_plugins = " fts fts_solr notify stats virtual sieve mail_log" } protocol pop3 { mail_plugins = " fts fts_solr notify stats virtual mail_log" } protocol !doveadm { mail_plugins = " fts fts_solr notify stats virtual mail_log" } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags imap_logout_format = in=%i out=%o fhc=%{fetch_hdr_count} fhb=%{fetch_hdr_bytes} fbc=%{fetch_body_count} fbb=%{fetch_body_bytes} del=%{deleted} exp=%{expunged} trash=%{trashed} imap_metadata = yes mail_max_userip_connections = 50 mail_plugins = " fts fts_solr notify stats virtual mail_log imap_sieve imap_stats stats" } -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: larryrtx(a)gmail.com US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

2 4

Possible RENAME bug
by Gabriele Bulfon 05 Jun '17

05 Jun '17

Hello, I'm having some trouble working on a webapp managing the imap tree on Dovecot. The same doesn't happen on other imap servers (e.g. Cyrus). Looks like if I receive shared folders from another user, and try to rename a folder in it, the rename command returns "ok", then if you list the new folder name, it isn't there. Looks like you've lost all the original folder because if you try listing the parent folder, you don't have nor the original nor the new name, even trying to logout/disconnect and reconnect/login. Luckily nothing is lost actually, if you try to create a new folder on the parent folder, and then list the parent folder, you get both the newly created one and the renamed one also appears magically! Here is the IMAP trace to reproduce: *** ON ACCOUN RECEIVING SHARED FOLDER *** PREPARE A FOLDER IN SHARED TREE WITH JUST ONE CHILD "aaaa" *** THEN RENAME aaaa FOLDER TO bbbb *** AFTER "OK Rename" FOLDER IS NOT PRESENT IN LIST A3 LIST "" Shared/gabriele.prova(a)sonicle.com/Junk/aaaa * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Junk/aaaa A3 OK List completed. A4 RENAME Shared/gabriele.prova(a)sonicle.com/Junk/aaaa Shared/gabriele.prova(a)sonicle.com/Junk/bbbb A4 OK Rename completed. A5 LIST "" Shared/gabriele.prova(a)sonicle.com/Junk/bbbb A5 OK List completed. *** bbbb IS NOT LISTED AFTER "OK Rename"! *** LOGOUT/DISCONNECT - CONNECT/LOGIN AND LIST BRANCH *** A66 LIST "" "Shared/gabriele.prova(a)sonicle.com/%" * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Sent * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Drafts * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Trash * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Spam * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Junk * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/INBOX A66 OK List completed. *** Junk HAS NO CHILDREN! *** CREATE A NEW FOLDER IN Junk *** A68 CREATE Shared/gabriele.prova(a)sonicle.com/Junk/zzzz A68 OK Create completed. A69 LIST "" Shared/gabriele.prova(a)sonicle.com/Junk/zzzz * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Junk/zzzz A69 OK List completed. *** "zzzz" IS LISTED, SO NOW LIST PARENT BRANCH *** A26 LIST "" "Shared/gabriele.prova(a)sonicle.com/%" * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Sent * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Drafts * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Trash * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Spam * LIST (\HasChildren) "/" Shared/gabriele.prova(a)sonicle.com/Junk * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/INBOX A26 OK List completed. *** Junk NOW HAS CHILDREN, SO NOW LIST Junk BRANCH *** A29 LIST "" "Shared/gabriele.prova(a)sonicle.com/Junk/%" * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Junk/bbbb * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Junk/zzzz A29 OK List completed. *** bbbb MAGICALLY APPEARS! NOTHING IS LOST. Is there anything I can do to force "bbbb" to reappear without having to create a new folder? Any idea? Thanks in advance, Gabriele ---------------------------------------------------------------------------------------- Sonicle S.r.l. : http://www.sonicle.com Music: http://www.gabrielebulfon.com Quantum Mechanics : http://www.cdbaby.com/cd/gabrielebulfon

2 2