- dovecot - dovecot.org

Dovecot 2.1.7 randomly lost emails
by Paolo Rinaldo 13 May '16

13 May '16

Hi Dovecot 2.1.7 Postfix 2.9.6 Maildir backend, emails filtered by a Postfix frontend (Sqlgrey, Amavis). Lmtp delivering emails using a simple sieve script. Ubuntu 12.04 VMware virtual server. When email are CCed to other recipients on the same domain (the same backend), sometimes they are lost. We hosts approx. 1500 mailboxes, the problem occurs one or two times a day. Recently I changed the frontend, the previous one was delivering one email for each recipient, we had a couple of error per year, we thought it was due to client-side error. The frequency increased with the new frontend, no more “splitting” messages for more than one recipient. The following sample is from a client using a POP3 connection, leaving emails on server. the Postfix mail.log May 11 01:26:55 lmail01 postfix/qmgr[7054]: 96E9CA6628: from=<sender(a)external.com>, size=11822371, nrcpt=2 (queue active) May 11 01:26:55 lmail01 postfix/lmtp[3106]: 96E9CA6628: to=<user-one(a)domain.com>, relay=mail4.robinson.it[private/dovecot-lmtp], delay=0.64, delays=0.45/0/0/0.19, dsn=2.0.0, status=sent (250 2.0.0 <user-one(a)domain.com> 0vNzHyptMlezHgAAk+lh+g Saved) May 11 01:26:55 lmail01 postfix/lmtp[3106]: 96E9CA6628: to=user-two(a)domain.com>, relay=mail4.robinson.it[private/dovecot-lmtp], delay=0.74, delays=0.45/0/0/0.29, dsn=2.0.0, status=sent (250 2.0.0 user-two(a)domain.com> 0vNzHyptMlezHgAAk+lh+g Saved) May 11 01:26:55 lmail01 postfix/qmgr[7054]: 96E9CA6628: removed the dovecot-info.log May 11 01:26:55 lmtp(7859, user-one(a)domain.com) Info: 0vNzHyptMlezHgAAk+lh+g: sieve: msgid=<003A2D931FFF0E48A2314A1ADC87E23E8E4BA1DE(a)t49-ms-exmb02.INTRANET.SAKSROOT.SAKSINC.com>: stored mail into mailbox 'INBOX' May 11 01:26:55 lmtp(7859, user-two(a)domain.com) Info: 0vNzHyptMlezHgAAk+lh+g: sieve: msgid=<003A2D931FFF0E48A2314A1ADC87E23E8E4BA1DE(a)t49-ms-exmb02.INTRANET.SAKSROOT.SAKSINC.com>: stored mail into mailbox 'INBOX' I cannot find the email 0vNzHyptMlezHgAAk+lh+g for user-two(a)domain.com<mailto:user-two@domain.com>, nor I cannot suppose problems on the client, nothing changed on the back-end. Please let me know if you need some more info or config dump. Any help will be appreciated Paolo Rinaldo Dovecot config: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.11.0-15-generic x86_64 Ubuntu 12.04.4 LTS auth_mechanisms = plain login debug_log_path = /var/log/dovecot/dovecot-debug.log disable_plaintext_auth = no info_log_path = /var/log/dovecot/dovecot-info.log log_path = /var/log/dovecot/dovecot.log mail_plugins = " quota" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = prefix = INBOX. separator = . } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { autocreate = INBOX.Trash autocreate2 = INBOX.Spam autocreate3 = INBOX.Sent autocreate4 = INBOX.Drafts autosubscribe = INBOX.Trash autosubscribe2 = INBOX.Spam autosubscribe3 = INBOX.Sent autosubscribe4 = INBOX.Drafts quota = maildir:User quota quota_exceeded_message = Impossibile consegnare il messaggio: spazio insufficiente sulla casella di destinazione quota_grace = 10%% quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_path = /var/lib/dovecot/sieve/spam.sieve } protocols = imap pop3 lmtp sieve service auth-worker { user = vmail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } user = dovecot } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = vmail } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol lmtp { hostname = mail.robinson.it mail_plugins = sieve quota postmaster_address = postmaster(a)robinson.it } protocol lda { log_path = /var/log/dovecot/dovecot-lda.log postmaster_address = postmaster(a)robinson.it } protocol imap { mail_plugins = " quota autocreate imap_quota" } The spam.sieve require ["fileinto", "envelope", "subaddress", "mailbox"]; if envelope :detail "to" "spam"{ fileinto :create "INBOX.Spam"; }

2 1

How do I share folders ?
by chaouche yacine 12 May '16

12 May '16

Hello dovecot, First poster here. What I want : give a.chaouche(a)algerian-radio.dz list and read permissions on a.chaouche(a)backup.algerian-radio.dz. Let's just discuss sharing the inbox then I can do the same for subfolders, in any. a.chaouche(a)algerian-radio.dz and a.chaouche(a)backup.algerian-radio.dz are two different users. Details about the domains aren't relevant here I guess. My dovecot configuration, what I believe to be the important parts :userdb { args = uid=vmail gid=vmail home=/var/vmail/%d/%n/ driver = static } namespace partage { location = maildir:%%h:INDEX=~/%%u prefix = shared.%%u. separator = . type = shared } mail_location = Maildir:~/ Both users can access their respective inboxes just fine, I only need to give a.chaouche(a)algerian-radio.dz access to a.chaouche(a)backup.algerian-radio.dz Full output of doveconf -n : # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 3.16.0-4-amd64 x86_64 Debian 8.3 auth_mechanisms = plain login debug_log_path = /var/log/dovecot.debug disable_plaintext_auth = no first_valid_uid = 100 log_path = /var/log/dovecot.log mail_debug = yes mail_location = Maildir:~/ mail_plugins = " quota acl" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX. separator = . type = private } namespace partage { hidden = no location = maildir:%%h:INDEX=~/%%u prefix = shared.%%u. separator = . type = shared } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile quota = maildir:User quota quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = root(a)algerian-radio.dz protocols = " imap lmtp sieve" service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } ssl = no userdb { args = uid=vmail gid=vmail home=/var/vmail/%d/%n/ driver = static } protocol lmtp { mail_plugins = " quota acl sieve quota" } protocol lda { mail_plugins = " quota acl sieve" } protocol imap { mail_plugins = " quota acl imap_quota imap_acl" } I don't know if it's possible to share folders with the doveadm acl command ? root(a)messagerie[10.10.10.20] ~ # doveadm acl debug -u a.chaouche(a)algerian-radio.dz shared/a.chaouche(a)backup.algerian-radio.dz doveadm(a.chaouche(a)algerian-radio.dz): Error: Can't open mailbox shared/a.chaouche(a)backup.algerian-radio.dz: Mailbox doesn't exist: shared/a.chaouche(a)backup.algerian-radio.dz root(a)messagerie[10.10.10.20] ~ #

2 3

Bug Report - Crash on imap with core dump - Alternate storage related
by Daniel van Ham Colchete 12 May '16

12 May '16

I would like to report a bug we are seeing on an new deployment here: Linux: Debian Jessie, inside a Docker container Dovecot version: 2.2.23 (806d709) / 2.2.23-1~bpo8+1 doveconf -n: http://pastebin.com/2xA2xuRw Filesystem: CephFS - Jewel After migrating our users from our old server to our new one we can't access a few mailboxes. Backtrace follows: root@dovecot:/# gdb --args /usr/lib/dovecot/imap -u daniel.colchete(a)mav.com.br GNU gdb (Debian 7.7.1+dfsg-5) 7.7.1 Copyright (C) 2014 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html > This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from /usr/lib/dovecot/imap...Reading symbols from /usr/lib/debug/.build-id/e2/488f839ac2b10504ef74b1b2f2146891ca2f62.debug...done. done. (gdb) run Starting program: /usr/lib/dovecot/imap -u daniel.colchete(a)mav.com.br * PREAUTH [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS BINARY MOVE SPECIAL-USE QUOTA] Logged in as daniel.colchete(a)mav.com.br a select INBOX Program received signal SIGSEGV, Segmentation fault. strrchr () at ../sysdeps/x86_64/strrchr.S:32 32 ../sysdeps/x86_64/strrchr.S: No such file or directory. (gdb) where #0 strrchr () at ../sysdeps/x86_64/strrchr.S:32 #1 0x00007ffff7b0a261 in sdbox_file_move (file=file@entry=0x5555557e6530, alt_path=alt_path@entry=true) at sdbox-file.c:312 #2 0x00007ffff7b0cd11 in dbox_sync_file_move_if_needed (type=SDBOX_SYNC_ENTRY_TYPE_MOVE_TO_ALT, file=0x5555557e6530) at sdbox-sync.c:30 #3 sdbox_sync_file (type=SDBOX_SYNC_ENTRY_TYPE_MOVE_TO_ALT, uid=13120, seq=819, ctx=0x5555557e32e0) at sdbox-sync.c:58 #4 sdbox_sync_add (sync_rec=0x7fffffffe570, ctx=0x5555557e32e0) at sdbox-sync.c:96 #5 sdbox_sync_index (ctx=0x5555557e32e0) at sdbox-sync.c:131 #6 sdbox_sync_begin (mbox=mbox@entry=0x5555557ce500, flags=flags@entry=(unknown: 0), ctx_r=ctx_r@entry=0x7fffffffe680) at sdbox-sync.c:234 #7 0x00007ffff7b0d07d in sdbox_sync (mbox=mbox@entry=0x5555557ce500, flags=flags@entry=(unknown: 0)) at sdbox-sync.c:297 #8 0x00007ffff7b0d108 in sdbox_storage_sync_init (box=0x5555557ce500, flags=(MAILBOX_SYNC_FLAG_FULL_READ | MAILBOX_SYNC_FLAG_FIX_INCONSISTENT)) at sdbox-sync.c:323 #9 0x00007ffff7aea85b in mailbox_sync_init (box=0x5555557ce500, flags=(MAILBOX_SYNC_FLAG_FULL_READ | MAILBOX_SYNC_FLAG_FIX_INCONSISTENT)) at mail-storage.c:1664 #10 0x00007ffff7aea9a7 in mailbox_sync (box=<optimized out>, flags=<optimized out>, flags@entry=MAILBOX_SYNC_FLAG_FULL_READ) at mail-storage.c:1712 #11 0x0000555555568fa0 in select_open (readonly=false, mailbox=<optimized out>, ctx=0x5555557c9928) at cmd-select.c:303 #12 cmd_select_full (cmd=<optimized out>, readonly=<optimized out>) at cmd-select.c:426 #13 0x000055555556fdbd in command_exec (cmd=cmd@entry=0x5555557c9800) at imap-commands.c:180 #14 0x000055555556e182 in client_command_input (cmd=cmd@entry=0x5555557c9800) at imap-client.c:958 #15 0x000055555556e210 in client_command_input (cmd=0x5555557c9800) at imap-client.c:1018 #16 0x000055555556e5d5 in client_handle_next_command (remove_io_r=<synthetic pointer>, client=0x5555557c8c00) at imap-client.c:1058 #17 client_handle_input (client=0x5555557c8c00) at imap-client.c:1070 #18 0x000055555556ead5 in client_input (client=0x5555557c8c00) at imap-client.c:1117 #19 0x00007ffff7837c3c in io_loop_call_io (io=0x5555557c96f0) at ioloop.c:564 #20 0x00007ffff78390a1 in io_loop_handler_run_internal (ioloop=ioloop@entry=0x5555557966e0) at ioloop-epoll.c:220 #21 0x00007ffff7837cc5 in io_loop_handler_run (ioloop=ioloop@entry=0x5555557966e0) at ioloop.c:612 #22 0x00007ffff7837e68 in io_loop_run (ioloop=0x5555557966e0) at ioloop.c:588 #23 0x00007ffff77ce0e3 in master_service_run (service=0x555555796580, callback=<optimized out>) at master-service.c:640 #24 0x0000555555561ab2 in main (argc=3, argv=0x555555796390) at main.c:454 (gdb) One important info is that I used to use Alternate Storage on the older servers, but the not on the new one. Code seems to be trying to move a message to an alternate storage that doesn't exist. doveadm dump dovecot.index will show that we still have the ALTERNATE_STORAGE flag set: root@dovecot:/srv/dovecot/mail/ mav.com.br/daniel.colchete/mailboxes/INBOX/dbox-Mails# doveadm dump dovecot.index|grep RECORD|head -- RECORDS: 932 RECORD: seq=1, uid=9393, flags=0x49 (Seen Answered) RECORD: seq=2, uid=9442, flags=0x40 RECORD: seq=3, uid=10253, flags=0x48 (Seen) RECORD: seq=4, uid=10268, flags=0x48 (Seen) RECORD: seq=5, uid=10283, flags=0x48 (Seen) RECORD: seq=6, uid=10309, flags=0x48 (Seen) RECORD: seq=7, uid=10311, flags=0x40 RECORD: seq=8, uid=10324, flags=0x49 (Seen Answered) RECORD: seq=9, uid=10330, flags=0x48 (Seen) Thank you very much. Best, Daniel Colchete

2 4

Dovecot + libsodium
by Andreas Meyer 12 May '16

12 May '16

Hi, Thank you very much for creating and maintaining dovecot! In my scenario, I want to use the password hash algorithms provided by libsodium: https://download.libsodium.org/doc/ So my difficulty is to have dovecot support libsodium's hash algorithms, particularly: crypto_pwhash_scryptsalsa208sha256_str On the sodium maillinglist I asked for help and received an adjusted dovecot code, which exactly does what I need. You find it here: https://github.com/jedisct1/core/tree/scrypt-argon2 Obviously I need to apply these changes everytime I upgrade to a new dovecot version now. So my question ist, what do I need to do so that you will include libsodium support in future versions of dovecot? Thank you very much for your attention, Andreas

3 3

Automatic packages for Dovecot v2.3
by Stephan Bosch 11 May '16

11 May '16

Hi, The Xi repository for v2.3 is now public. The information is updated here: http://wiki2.dovecot.org/PrebuiltBinaries#Automatically_Built_Packages Xi now modifies the version string in the Dovecot sources. This way `dovecot -n` output includes the Xi package version. This is currently only true for the v2.3 packages though. I am still testing a new v2.2 builder that follows both the master and latest release branch. Packages from the release branch are published in a separate repository, so that a more stable package stream is obtained; it is only updated when the developers start working on making a release. The intermittent beta or rc release tags on that release branch are recognized and reflected in the package versions. If a new release branch is detected, the the development packages for the master branch get an alpha version with a lower version digit that is one higher than the upcoming release. For example, when a release-2.2.25 branch is created, packages from the master branch will get version 2.2.26~alpha0-1 in anticipation of the next release in this series. Packages from the release branch will have version 2.2.25~beta0-1 until the first release tag is seen. Regards, Stephan.

2 1

Undeletable mailboxes
by thomas.hofmann＠post.ch 11 May '16

11 May '16

Hi I have to maintain a dovcot installation where users may access there mails through IMAPS and/or via self-developed portal. >From time to time users complain about mailboxes showing up they have deleted bevor. The only way to get these mailboxes away is to do a backup of the user and delete dovecot home of the user and do a selective restore. hostname:~ # doveadm mailbox list -u $u -s 'INBOX/01_OHO/*' hostname:~ # doveadm mailbox list -u $u 'INBOX/01_OHO/*' INBOX/01_OHO/02_Orchestermatinée 10.01.16 hostname:~ # doveadm mailbox delete -u $u 'INBOX/01_OHO/02_Orchestermatinée 10.01.16' doveadm(username(a)domain.com): Info: Mailbox deleted: INBOX/01_OHO/02_Orchestermatinée 10.01.16 hostname:~ # doveadm mailbox list -u $u 'INBOX/01_OHO/*' INBOX/01_OHO/02_Orchestermatinée 10.01.16 hostname:~ # doveadm -v purge -u $u hostname:~ # doveadm mailbox list -u $u 'INBOX/01_OHO/*' INBOX/01_OHO/02_Orchestermatinée 10.01.16 hostname:~ # doveadm mailbox metadata list -u $u 'INBOX/01_OHO/02_Orchestermatinée 10.01.16' doveadm(username(a)domain.com): Error: Failed to open mailbox: Mailbox doesn't exist: INBOX/01_OHO/02_Orchestermatinée 10.01.16 hostname:~ # hostname:~ # dovecot --version 2.2.21 (5345f22) hostname:~ # Is there another (simpler) way to rid of these "deleted" mailboxes? Thanks for any help! Regards Thom

1 0

ACLs over imapc
by abi＠oleane.net 10 May '16

10 May '16

hello i've struggled various times trying to setup shared mailboxes to no avail. the same setup with local file access works imapc seems to work with generic shared mailboxes nevertheless, i never managed to get a working setup with both user-defined acls and imapc has anyone been successful in doing so ? is this supposed to work ? i've been experimenting with dovecot 2.2.9 and 2.2.22 and never saw any imap acl commands issued by the builtin imap client. thanks abi(a)oleane.net

1 0

Mailbox doesn't exist response
by Cornelius Charlie 10 May '16

10 May '16

Hello, Using the latest dovecot version, selecting a non-existing mailbox with non printable characters encoded in utf7, the mailbox doesn't exist response contains the folder name encoded in utf8. Is that legal regarding the rfc ? If yes, how the client can be aware of the used encoding ? Thanks.

2 1

Workaround for rcpt suffix
by Robban 10 May '16

10 May '16

Hi all! I'm stuck again, let me start with explaining my setup. The PassDB and UserDB is LDAP (FreeIPA) and I'm using ldap mail attribute to search after the recipient so one user can have multiple mail aliases. So far so good. Next is to have an catchall(a)domain.tld, that is done via an static userdb backend (I know you are strongly against catchall adresses), and they are delivered to public folders (${mail_location}/domain.tld). I also use address extension so sort a mail to correct folder (+ sign). Now I need to fix so mail to <mail attr>-sievetest is handled by the user assigned to <mail attr>, is this somehow possible? //Robban

2 1

resorting emails by date order after move/copy to sub folder ?
by voytek＠sbt.net.au 10 May '16

10 May '16

I have just used Squirrel web client to re organize some old emails to subfolders. that worked OK, EXCEPT, all these emails are now in order that I have moved them rather than original date, is that some 'simple' way to re-sort them back by original date ? thanks for any pointers, sorry for dumb question Voytek

2 2

more info about deleting users
by Matteo Gaito Test Account 09 May '16

09 May '16

Hi, i've search a lot in order to find a way to delete account by dovecot but i found only this way http://dovecot.org/list/dovecot/2011-November/079273.html It's possible today delete a maildir remotely with doveadm or with dovecot api? Thanks Matteo

6 8

Panic: file doveadm-mail.c: line 417 (doveadm_mail_single_user): assertion failed: (cctx->username != NULL)
by Daniel van Ham Colchete 08 May '16

08 May '16

Hello everyone! So, I'm trying to move away from a few older servers into new ones but I can't get dsync to work this time (the 2013 migration went perfectly). This is what I get: root@dovecot:/# dsync sync -u user(a)domain.org.br tcp:XXXX:12345 Panic: file doveadm-mail.c: line 417 (doveadm_mail_single_user): assertion failed: (cctx->username != NULL) Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x85dee) [0x7f500d3cddee] -> /usr/lib/dovecot/libdovecot.so.0(+0x85e68) [0x7f500d3cde68] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f500d3725be] -> dsync(+0x28d50) [0x55dcb11bad50] -> dsync(+0x28ded) [0x55dcb11baded] -> dsync(doveadm_mail_try_run+0x219) [0x55dcb11bb779] -> dsync(main+0x441) [0x55dcb11aba91] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f500cfbeb45] -> dsync(+0x19c06) [0x55dcb11abc06] Aborted (core dumped) root@dovecot:/# doveconf -N is here: http://pastebin.ca/3594094 doveadm user '*" will list all the users correctly doveadm user user(a)domain.org.br will show all the user info correctly. Thank you very much! Best, Daniel Colchete

1 0

Is there a way to override Sieve's "not sending notification for auto-submitted message" behavior?
by deoren 07 May '16

07 May '16

Goal: 1) Setup a Google Calendar entry for a biweekly task 2) Configure the email notification schedule 3) When the email notification from Google arrives have Sieve send a notification to an alias I have setup for my cell provider's email to text messaging gateway 4) Receive text message I know there are other products which likely handle this better, but I'm specifically attempting to replicate old behavior by getting text message reminders when a specific Google Calendar event occurs. The problem I'm having is that Sieve is attempting to help by NOT sending a notification for emails that it finds are automatically generated. I didn't found a lot of information when I searched for additional details, but I didn't find an earlier message thread on this list that led me to believe that the default behavior is likely chosen as some sort of safety net to prevent common issues from occurring. What I would like to do is override this behavior at some level (per rule, per user, system-wide, whatever) to allow for Sieve notifications when emails matching a specific pattern are detected regardless of whether they are auto-generated or not. I already found mention in the documentation[1] that the editheader extension refuses to remove the Auto-Submitted header, so setting up a per user or global rule to do just that wouldn't help. I also haven't come upon a way to simply modify the value for the Auto-Submitted header, so that doesn't look to work in this situation either. Does anyone know of a way to accomplish this? Thanks in advance for your help! [1] http://wiki2.dovecot.org/Pigeonhole/Sieve/Extensions/Editheader

2 5

Re: Cannot connect to Dovecot IMAP or POP
by Joseph Tam 06 May '16

06 May '16

C. Andrews Lavarre writes: > Presumably, as Joseph shows with his nc call, imap calls are to ServerName mail.privustech.com. No, nc is just a dumb tool -- it knows nothing about IMAP or SSL. You didn't even get to the SSL handshake. Your problem has nothing to do with the interaction of client and server -- it's strictly a server problem. > ssl = required > ssl_cert = </etc/apache2/ssl.crt/mail.privustech.com_start.crt > ssl_key = </etc/apache2/ssl.key/mailprivustech.key > ssl_ca = </etc/apache2/ssl.crt/mailprivustech_root_bundle.crt ssl_ca is not analogous to Apache's SSLCertificateChainFile. I believe "ssl_ca" is used to validate clients (i.e. mutual authentication). You ought to concatenate your intermediate CA chain certificates and your public key into ssl_cert. See http://wiki2.dovecot.org/SSL/DovecotConfiguration Also, anything enlinghtening in the logs when ssl_verbose turned on? Joseph Tam <jtam.home(a)gmail.com>

1 0

Dovecot/Rainloop 2.0.13-1_129.el5
by Chris Smith 06 May '16

06 May '16

I configured Dovecot on our mail server under Centos 5.3 (I think) some while ago now (about 2 years) and, to the best of my knowledge,it had been working correctly all that time. However, one of the team wanted to use webmail while away from base and found that, although he could receive emails OK, he was unable to reply or send fresh emails. When he pressed Send he got a message “Authentication failed" in a pop-up box. He assured me that sending mail had been working and I was certain that I had tested that aspect when I was setting Dovecot up, at least for local mail. I tried to send email from my Dovecot account and had the same problem. Our MTA is sendmail and that is not configured to authenticate on outgoing mail, The configuration for sendmail hasn’t changed at least since the last update in 16 March 2015 (sendmail 8.13.8-10.el5_11). Dovecot uses php-5.5.5 in this set up. The relevant entry in /var/log/maillog when I attempt to send an email from Dovecot is: May 5 16:34:29 firewall dovecot: auth: Debug: auth client connected (pid=13001) May 5 16:34:29 firewall dovecot: auth: Debug: client in: AUTH 1 PLAIN service=imap secured lip=127.0.0.1 rip=127.0.0.1 lport=143 rport=51861 resp=AGNocmlzADB1dFkwdUcwNDkh May 5 16:34:29 firewall dovecot: auth: Debug: pam(chris,127.0.0.1): lookup service=dovecot May 5 16:34:29 firewall dovecot: auth: Debug: pam(chris,127.0.0.1): #1/1 style=1 msg=Password: May 5 16:34:29 firewall dovecot: auth: Debug: client out: OK 1 user=chris May 5 16:34:29 firewall dovecot: auth: Debug: master in: REQUEST 2607546369 13001 1 0bcf2e3a108cd9cd18eaff4b7de9c428 May 5 16:34:29 firewall dovecot: auth: Debug: passwd(chris,127.0.0.1): lookup May 5 16:34:29 firewall dovecot: auth: Debug: master out: USER 2607546369 chris system_groups_user=chris uid=514 gid=100 home=/home/chris May 5 16:34:29 firewall dovecot: imap-login: Login: user=<chris>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=13002, secured May 5 16:34:29 firewall dovecot: imap(chris): Disconnected: Logged out bytes=11/334 May 5 16:34:29 firewall sendmail[13003]: u45FYTtd013003: localhost.localdomain [127.0.0.1] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA The webmail server and our mail server are the same system. The firewall is open for port 143. It is only send from Dovecot that fails authentication, all other outgoing mail is sent correctly. Does anyone have any idea where else I can look for clues as to why there is this behaviour? Suplementary question: what does the “Sign me” check box on the webmail log in page do? Many thanks. Chris

3 2

Long delays when deleting a message in inbox
by Yves Goergen 05 May '16

05 May '16

Hi, Since recently, there's a long delay when deleting any message from my inbox folder. This affects deleting and moving messages, but only the inbox of a single mailbox. The delay is a few seconds. Other operations work instantly. The server is Ubuntu 14.04 running Dovecot version "1:2.2.9-1ubuntu2". The filesystem is local ext4. My MUA is Thunderbird on Windows, latest version, connecting with IMAP. What could be the cause for this extreme delay? Yves Goergen http://unclassified.software

3 4

Re: Cannot connect to Dovecot IMAP or POP
by Joseph Tam 05 May '16

05 May '16

> 2. openssl s_client -connect mail.privustech.com:xxx > a. xxx=25, 110, 143 all return > error:140770FC You need to add the "-starttls protocol" parameter, otherwise "openssl s_client" thinks your using SSL, not STARTTLS i.e. openssl s_client -starttls pop3 -connect mail.privustech.com:110 openssl s_client -starttls imap -connect mail.privustech.com:143 But even if you do that, you get the same error because it can't start the TLS session: $ nc mail.privustech.com 143 * OK [CAPABILITY IMAP4REV1 I18NLEVEL=1 LITERAL+ SASL-IR LOGIN-REFERRALS STARTTLS LOGINDISABLED AUTH=CRAM-MD5] privustech.com IMAP4rev1 2007e.404 at Wed, 4 May 2016 22:26:36 -0400 (EDT) x STARTTLS x NO Server certificate not installed So there you go, dovecot can't get at your server certificate. You can start the search of your problem from there. The configuration verbose_ssl = yes will help to log the problem. > ssl_dh_parameters_length = 2048 Probably not related to your problem, but this will cause wildly variable dovecot initialization times, as temp key generation of this length can result in a lot of candidate primailty testing. Joseph Tam <jtam.home(a)gmail.com>

2 1

Changing Password Schemes
by Carl A Jeptha 03 May '16

03 May '16

Good Day, I have been following this tutorial without much luck - http://wiki2.dovecot.org/HowTo/ConvertPasswordSchemes#CA-26af2b83a43b810052… It is obvious to me that I am not following the instructions correctly and need to be shown what I am misunderstanding. I have an old postfix + dovecot + Roundcube mailserver (mail.domain.Tld). Server clock is loosing time and adjusting it causes dovecot to kill itself, we cannot install more memory, bigger hard-drives, etc. I have built a new server box (mail2.domain.Tld) With Postfix + dovecot + Roundcube. This server is functioning, with a client's new domain, and my personal domain. it's password system is SHA512-CRYPT. I have imported the users from the old server over to the new server. I have created a new column "plain_pass" for the plain passwords. I will be using imapsync to transfer the mail folders from the one server to the other, but will not proceed until I fix this issue. # 2.2.18: /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.8 (0c4ae064f307+) # OS: Linux 4.2.0-35-generic x86_64 Ubuntu 15.10 ext4 auth_mechanisms = plain login first_valid_gid = 8 first_valid_uid = 150 last_valid_gid = 8 last_valid_uid = 150 listen = * mail_gid = mail mail_location = maildir:/var/vmail/%d/%n mail_uid = vmail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota_grace = 10%% quota_rule = *:storage=1G quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u } postmaster_address = postmaster(a)airnet.ca protocols = imap pop3 lmtp lmtp pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = mail mode = 0666 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service imap-postlogin { executable = script-login /usr/local/etc/popafter.sh user = $default_internal_user } service imap { executable = imap imap-postlogin } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service pop3-postlogin { executable = script-login /usr/local/etc/popafter.sh user = $default_internal_user } service pop3 { executable = pop3 pop3-postlogin } ssl_cert = </etc/ssl/certs/ssl-cert-snakeoil.pem ssl_cipher_list = ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA ssl_dh_parameters_length = 2048 ssl_key = </etc/ssl/private/ssl-cert-snakeoil.key ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } -- ------------ You have a good day now, en mag jou môre ook so wees, Carl A Jeptha

9 35

Director ignores nologin, reason etc.
by Tom Sommer 03 May '16

03 May '16

I want my director to do all authentication, but it ignores the nologin and reason etc. fields returned by my director password_query I have my director password_query returning proxy=y, password=X, master=XXXX, pass=XXXX It works fine, but even if nologin is Y and 'reason' is set, the user still gets proxied to the backend and gets to login? -- Tom

1 0

Re: %{domain} (or %d) is empty
by Robban 02 May '16

02 May '16

Hi again! I manage to solve this by removing the option auth_username_translation. The reason I wanted to have auth_username_translation was to be able to let sieve handle <mail-attribute><auth_username_translation><extension> Is this possible with other configuration options? //Robban ----- Forwarded message from Robban <dovecot(a)netnerdz.se> ----- Date: Mon, 2 May 2016 20:15:48 +0200 From: Robban <dovecot(a)netnerdz.se> To: dovecot(a)dovecot.org Subject: %{domain} (or %d) is empty User-Agent: Mutt/1.5.21 (2010-09-15) Hi all! I have two userdb's, for one of them it's ldap based and the 2nd one is static. I want mail to ldap-users to be saved in /home/vmail/<username>/Maildir So far so good. Now I want mail to non-existent users to be placed in /home/vmail/<domain.tld>/Maildir (notice the double-slashes that indicate that %d is empty): # doveadm user publicfolder(a)vendelso.se rs(a)netnerdz.se field value uid 500 gid 500 home /home/vmail// mail maildir:/home/vmail//Maildir/ uid vmail gid vmail home /home/vmail/rs mail maildir:/home/vmail/rs uidNumber 500 gidNumber 500 And here's my configuration files: # cat /etc/dovecot/dovecot-ldap.conf.ext hosts = 172.20.202.60 dn=uid=dovecot,cn=sysaccounts,cn=etc,dc=netnerdz,dc=se dnpass=<suppressed> auth_bind = yes auth_bind_userdn = uid=%u,cn=users,cn=accounts,dc=netnerdz,dc=se ldap_version = 3 base = cn=accounts,dc=netnerdz,dc=se deref = never scope = subtree user_filter = (&(objectClass=posixAccount)(mail=%u@*)) user_attrs = \ =user=%{ldap:uid}, \ =home=/home/vmail/%{ldap:uid}, \ =mail=maildir:/home/vmail/%{ldap:uid}, \ =uidNumber=500, \ =gidNumber=500 pass_filter = (&(objectClass=posixAccount)(mail=%u@*)) pass_attrs = uid=user,userPassword=password # dovecot -n # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-327.10.1.el7.x86_64 x86_64 CentOS Linux release 7.2.1511 (Core) auth_mechanisms = login gssapi plain auth_socket_path = /var/run/dovecot/auth-userdb auth_username_format = %n auth_username_translation = -@.@/@_@ auth_verbose = yes base_dir = /var/run/dovecot/ imap_id_log = * imap_id_send = name imap_urlauth_host = * import_environment = TZ lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lda_original_recipient_header = X-Original-To lmtp_save_to_detail_mailbox = yes login_greeting = IMAPd ready. login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_access_groups = vmail mail_attachment_hash = %{sha256} mail_debug = yes mail_gid = vmail mail_location = maildir:~/Maildir mail_log_prefix = "%s(%u)::%n: " mail_plugins = acl virtual mail_privileged_group = vmail mail_shared_explicit_inbox = yes mail_uid = vmail mailbox_list_index = yes maildir_broken_filename_sizes = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes namespace NetnerdzSE { list = yes location = maildir:/home/vmail/netnerdz.se/:INDEX=/home/vmail/%u/public prefix = NetnerdzSE/ separator = / subscriptions = yes type = public } namespace Shared { list = children location = maildir:/home/vmail/%%n/Maildir/:INDEX=/home/vmail/%n/shared/%%u prefix = Shared/%%n/ separator = / subscriptions = yes type = shared } namespace VendelsöSE { list = yes location = maildir:/home/vmail/xn--vendels-g1a.se/:INDEX=/home/vmail/%u/public prefix = VendelsöSE/ separator = / subscriptions = yes type = public } namespace VendelsoSE { list = yes location = maildir:/home/vmail/vendelso.se/:INDEX=/home/vmail/%u/public prefix = VendelsoSE/ separator = / subscriptions = yes type = public } namespace inbox { hidden = no inbox = yes list = yes location = mailbox Archive { auto = subscribe special_use = \Archive } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile:/home/vmail/dovecot-acl acl_shared_dict = file:/home/vmail/shared-mailboxes.db mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size sieve = /home/vmail/%u/dovecot.sieve sieve_default = /etc/dovecot/default.sieve sieve_default_name = roundcube sieve_dir = /home/vmail/%u/sieve sieve_global_dir = /etc/dovecot/sieve/global.sieve sieve_global_path = /etc/dovecot/sieve/global.sieve sieve_max_actions = 0 sieve_max_redirects = 4 sieve_max_script_size = 0 } postmaster_address = postmaster@%d protocols = imap lmtp sieve service auth-worker { user = root } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-client { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = vmail mode = 0660 user = vmail } unix_listener auth-userdb { group = mode = 0666 user = } user = $default_internal_user } service dict { unix_listener dict { group = mail mode = 0600 user = mail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 0 service_count = 1 vsz_limit = 256 M } service imap { process_limit = 1024 vsz_limit = 256 M } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } unix_listener lmtp { mode = 0666 } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl = required ssl_ca = </etc/dovecot/dovecot-ca.crt ssl_cert = </etc/dovecot/imap.netnerdz.se.crt ssl_client_ca_file = /etc/pki/tls/cert.pem ssl_key = </etc/dovecot/imap.netnerdz.se.key ssl_prefer_server_ciphers = yes submission_host = 127.0.0.1:25 userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } userdb { args = uid=500 gid=500 home=/home/vmail/%{domain}/ allow_all_users=yes driver = static override_fields = mail=maildir:/home/vmail/%d/Maildir/ result_failure = return-ok skip = found } valid_chroot_dirs = /home/vmail verbose_proctitle = yes protocol sieve { disable_plaintext_auth = yes info_log_path = /var/log/dovecot/dovecot-sieve.log log_path = /var/log/dovecot/dovecot-sieve-errors.log managesieve_implementation_string = dovecot managesieve_max_line_length = 65536 } protocol lda { auth_socket_path = /var/run/dovecot/auth-master info_log_path = /var/log/dovecot/dovecot-lda.log log_path = /var/log/dovecot/dovecot-lda-errors.log mail_plugins = acl virtual sieve postmaster_address = postmaster } protocol imap { mail_max_userip_connections = 10 mail_plugins = acl virtual imap_acl } protocol lmtp { info_log_path = /var/log/dovecot/dovecot-lmtp.log log_path = /var/log/dovecot/dovecot-lmtp-errors.log mail_plugins = acl virtual sieve postmaster_address = postmaster } -- Robert Soderlund ----- End forwarded message ----- -- Robert Soderlund

1 0

Sieve + Vacation
by Jerry 02 May '16

02 May '16

I am not sure if this is possible. When I use "vacation" in a sieve script, it always sends the response using "<>". I need it to send the response using a specific address. Is this possible? Thanks :) -- Jerry

4 4

%{domain} (or %d) is empty
by Robban 02 May '16

02 May '16

Hi all! I have two userdb's, for one of them it's ldap based and the 2nd one is static. I want mail to ldap-users to be saved in /home/vmail/<username>/Maildir So far so good. Now I want mail to non-existent users to be placed in /home/vmail/<domain.tld>/Maildir (notice the double-slashes that indicate that %d is empty): # doveadm user publicfolder(a)vendelso.se rs(a)netnerdz.se field value uid 500 gid 500 home /home/vmail// mail maildir:/home/vmail//Maildir/ uid vmail gid vmail home /home/vmail/rs mail maildir:/home/vmail/rs uidNumber 500 gidNumber 500 And here's my configuration files: # cat /etc/dovecot/dovecot-ldap.conf.ext hosts = 172.20.202.60 dn=uid=dovecot,cn=sysaccounts,cn=etc,dc=netnerdz,dc=se dnpass=<suppressed> auth_bind = yes auth_bind_userdn = uid=%u,cn=users,cn=accounts,dc=netnerdz,dc=se ldap_version = 3 base = cn=accounts,dc=netnerdz,dc=se deref = never scope = subtree user_filter = (&(objectClass=posixAccount)(mail=%u@*)) user_attrs = \ =user=%{ldap:uid}, \ =home=/home/vmail/%{ldap:uid}, \ =mail=maildir:/home/vmail/%{ldap:uid}, \ =uidNumber=500, \ =gidNumber=500 pass_filter = (&(objectClass=posixAccount)(mail=%u@*)) pass_attrs = uid=user,userPassword=password # dovecot -n # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-327.10.1.el7.x86_64 x86_64 CentOS Linux release 7.2.1511 (Core) auth_mechanisms = login gssapi plain auth_socket_path = /var/run/dovecot/auth-userdb auth_username_format = %n auth_username_translation = -@.@/@_@ auth_verbose = yes base_dir = /var/run/dovecot/ imap_id_log = * imap_id_send = name imap_urlauth_host = * import_environment = TZ lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lda_original_recipient_header = X-Original-To lmtp_save_to_detail_mailbox = yes login_greeting = IMAPd ready. login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_access_groups = vmail mail_attachment_hash = %{sha256} mail_debug = yes mail_gid = vmail mail_location = maildir:~/Maildir mail_log_prefix = "%s(%u)::%n: " mail_plugins = acl virtual mail_privileged_group = vmail mail_shared_explicit_inbox = yes mail_uid = vmail mailbox_list_index = yes maildir_broken_filename_sizes = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes namespace NetnerdzSE { list = yes location = maildir:/home/vmail/netnerdz.se/:INDEX=/home/vmail/%u/public prefix = NetnerdzSE/ separator = / subscriptions = yes type = public } namespace Shared { list = children location = maildir:/home/vmail/%%n/Maildir/:INDEX=/home/vmail/%n/shared/%%u prefix = Shared/%%n/ separator = / subscriptions = yes type = shared } namespace VendelsöSE { list = yes location = maildir:/home/vmail/xn--vendels-g1a.se/:INDEX=/home/vmail/%u/public prefix = VendelsöSE/ separator = / subscriptions = yes type = public } namespace VendelsoSE { list = yes location = maildir:/home/vmail/vendelso.se/:INDEX=/home/vmail/%u/public prefix = VendelsoSE/ separator = / subscriptions = yes type = public } namespace inbox { hidden = no inbox = yes list = yes location = mailbox Archive { auto = subscribe special_use = \Archive } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile:/home/vmail/dovecot-acl acl_shared_dict = file:/home/vmail/shared-mailboxes.db mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size sieve = /home/vmail/%u/dovecot.sieve sieve_default = /etc/dovecot/default.sieve sieve_default_name = roundcube sieve_dir = /home/vmail/%u/sieve sieve_global_dir = /etc/dovecot/sieve/global.sieve sieve_global_path = /etc/dovecot/sieve/global.sieve sieve_max_actions = 0 sieve_max_redirects = 4 sieve_max_script_size = 0 } postmaster_address = postmaster@%d protocols = imap lmtp sieve service auth-worker { user = root } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-client { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = vmail mode = 0660 user = vmail } unix_listener auth-userdb { group = mode = 0666 user = } user = $default_internal_user } service dict { unix_listener dict { group = mail mode = 0600 user = mail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 0 service_count = 1 vsz_limit = 256 M } service imap { process_limit = 1024 vsz_limit = 256 M } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } unix_listener lmtp { mode = 0666 } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl = required ssl_ca = </etc/dovecot/dovecot-ca.crt ssl_cert = </etc/dovecot/imap.netnerdz.se.crt ssl_client_ca_file = /etc/pki/tls/cert.pem ssl_key = </etc/dovecot/imap.netnerdz.se.key ssl_prefer_server_ciphers = yes submission_host = 127.0.0.1:25 userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } userdb { args = uid=500 gid=500 home=/home/vmail/%{domain}/ allow_all_users=yes driver = static override_fields = mail=maildir:/home/vmail/%d/Maildir/ result_failure = return-ok skip = found } valid_chroot_dirs = /home/vmail verbose_proctitle = yes protocol sieve { disable_plaintext_auth = yes info_log_path = /var/log/dovecot/dovecot-sieve.log log_path = /var/log/dovecot/dovecot-sieve-errors.log managesieve_implementation_string = dovecot managesieve_max_line_length = 65536 } protocol lda { auth_socket_path = /var/run/dovecot/auth-master info_log_path = /var/log/dovecot/dovecot-lda.log log_path = /var/log/dovecot/dovecot-lda-errors.log mail_plugins = acl virtual sieve postmaster_address = postmaster } protocol imap { mail_max_userip_connections = 10 mail_plugins = acl virtual imap_acl } protocol lmtp { info_log_path = /var/log/dovecot/dovecot-lmtp.log log_path = /var/log/dovecot/dovecot-lmtp-errors.log mail_plugins = acl virtual sieve postmaster_address = postmaster } -- Robert Soderlund

1 0

autoexpunge wildcard mailbox from userdb
by Leon Kyneur 02 May '16

02 May '16

Was excited to see that wildcards are now possible on autoexpunge in the 2.2.24 release. However I'm trying to configure these from the userdb lookup and it doesn't appear to be working. if I set in 15-mailboxes.conf mailbox Trash/* { ... autoexpunge = 10m } everything works.. however if I return =namespace/inbox/mailbox/Trash/*/autoexpunge=10m via userdb - it does not. Logs say: Debug: Unknown userdb setting: plugin/namespace/inbox/mailbox/Trash/*/autoexpunge=10m Is what I am trying to do even possible? Thanks Leon

2 4

Re: Changing Password Schemes
by cajeptha 02 May '16

02 May '16

That one is there to close the left one after IF Sent from my Samsung device -------- Original message -------- From: Christian Kivalo <ml+dovecot(a)valo.at> Date: 2016-05-02 11:58 (GMT+02:00) To: dovecot(a)dovecot.org Subject: Re: Changing Password Schemes On 2016-05-02 11:32, Carl Jeptha wrote: > password_query = \ > SELECT username AS USER, \ > IF(cryptpwd IS NULL OR cryptpwd='', CONCAT('{PLAIN}',clearpwd), > cryptpwd) AS PASSWORD, \ > '/var/vmail/%d/%n' as userdb_home, \ > 'maildir:/var/vmail/%d/%n' as userdb_mail, 150 as userdb_uid, 8 > as > userdb_gid \ > FROM mailbox \ > WHERE username = '%u' AND active = '1' You have a right parenthesis after clearpwd in your sql statement CONCAT('{PLAIN}',clearpwd),cryptpwd) > user_query = \ > SELECT '/var/vmail/%d/%n' as home, 'maildir:/var/vmail/%d/%n' as > mail, \ > 150 AS uid, 8 AS gid, concat('dirsize:storage=', quota) AS quota \ > FROM mailbox WHERE username = '%u' AND active = '1' > > Above is what I have done, but still getting an error: > > May 2 05:26:03 |****** dovecot: auth-worker(3442): Error: > sql(user(a)domain.tld,xxx.xxx.xxx.xxx): Password query must return a > field named 'password' > > For testing purposes I put the query in PHPMyAdmin and it complains > this > (notice it drops "PASSWORD", but shows it in the query: > #1064 - You have an error in your SQL syntax; check the manual that > corresponds to your MySQL server version for the right syntax to use > near '\ > IF(cryptpwd IS NULL OR cryptpwd='', CONCAT('{PLAIN}',clearpwd), > cryptpwd) as ' at line 1 The PHPMyAdmin error message shows the relevant part to inspect. -- Christian Kivalo

1 0

deb repo with dovecot-antispam ?
by Håkon Alstadheim 02 May '16

02 May '16

There are .debs available for version 2.2 both from backports and ix.dovecot.fi, but neither seem to have the antispam plugin built for version 2.2. Anybody know why, and (if there is no particular reason) how to get dovecot-antispam in a proper .deb package for dovecot-2.2.* ?

2 2

Dovecot (LDAP) get the quota limitation from windows Active directory
by Dogz 02 May '16

02 May '16

Hi, I can't get the quota limitation from windows AD, I did read the dovecot wiki like http://wiki2.dovecot.org/Quota/Configuration and search from google, but failed. *doveadm -D quota get -u dogz:* ... doveadm(dogz): Debug: auth input: dogz(a)mail.com home=/vmail/dogz/ mail=maildir:/vmail/dogz/Maildir/ uid=500 gid=500 mobile=quota_rule=*:storage=M ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ doveadm(dogz): Debug: changed username to dogz(a)mail.com doveadm(dogz): Debug: Added userdb setting: mail=maildir:/vmail/dogz/Maildir/ doveadm(dogz): Debug: Added userdb setting: plugin/mobile=quota_rule=*:storage=M ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ doveadm(dogz): Debug: Effective uid=1000, gid=1000, home=/vmail/dogz/ ... Quota name Type Value Limit % User quota STORAGE 72 - 0 User quota MESSAGE 82 - 0 *ldapsearch -x -h 192.168.90.20 -b dc=mail,dc=com -D cn=ldapquery,cn=users,dc=mail,dc=com -W '(&(mail=*dogz(a)mail.com*))'* ... objectClass: top objectClass: person objectClass: organizationalPerson objectClass: user ... maxStorage: 500 ... sAMAccountName: dogz ... mail: dogz(a)mail.com mobile: 200 carLicense: 2 My configuration files are as follwing */etc/dovecot/dovecot-ldap.conf :* .... scope = subtree deref = never user_filter = (&(objectCategory=person)(|(mail=%Lu)(otherIpPhone=%Lu))(!(userAccountControl:1.2.840.113556.1.4.803:=2))) pass_filter = (&(objectCategory=person)(|(mail=%Lu)(otherIpPhone=%Lu))(!(userAccountControl:1.2.840.113556.1.4.803:=2))) #PS: I don't know why I can't use otherMailbox to be the alias, but I can use otherIpPhone field successfully. user_attrs = =home=/vmail/%Ln/, =mail=maildir:/vmail/%Ln/Maildir/, =uid=1000, =gid=1000, =mobile=quota_rule=*:storage=%$M ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ default_pass_scheme = CRYPT pass_attrs = userPassword=password */etc/dovecot/conf.d/auth-ldap.conf.ext* auth_username_format = %Lu passdb { driver = ldap args = /etc/dovecot/dovecot-ldap.conf } userdb { driver = ldap args = /etc/dovecot/dovecot-ldap.conf } */etc/dovecot/conf.d/90-quota.conf:* ... plugin { #quota = dict:user::proxy::quota #quota2 = dict:domain:%d:proxy::quota_domain #quota_rule = *:storage=102400 #quota2_rule = *:storage=1048576 #quota = dict:User quota::file:%h/Maildir/dovecot-quota quota = dict:User quota::file:~/Maildir/dovecot-quota } I also tried different form as following, but still can't work it out, please help me and thank you in advance. user_attrs = =home=/vmail/%Ln/, =mail=maildir:/vmail/%Ln/Maildir/, =quota_rule=*:storage=%{ldap:mobile}M or user_attrs = =home=/vmail/%Ln/, =mail=maildir:/vmail/%Ln/Maildir/, =mobile=quota_rule=*:storage=%{ldap:mobile}M Is there any information I should provide? Please advise me and thank you in advance. -- Best Regards, Dogz

1 1

IX Out of Order?
by Harald Leithner 01 May '16

01 May '16

Hi, It seams that ix.dovecot.fi has not build a new version since 2016-04-19 20:03 regards, -- Harald Leithner ITronic Wiedner Hauptstraße 120/5.1, 1050 Wien, Austria Tel: +43-1-545 0 604 Mobil: +43-699-123 78 4 78 Mail: leithner(a)itronic.at | itronic.at

3 4

issues with doveadm sieve commands
by Michael Grimm 30 Apr '16

30 Apr '16

Hi This is dovecot-pigeonhole 0.4.13 and dovecot 2.2.23 at FBSD 10.3-STABLE. I am used to run doveadm sieve commands for some time now whenever updating a sieve script. Recently those commands fail with a user set explicitly, e.g.: mail> doveadm sieve list -u test doveadm(root): Error: User doesn't exist When asking for all users, I do not run into any error: mail> doveadm sieve list -u '*' user1 default ACTIVE [snip] test default ACTIVE mail> doveadm sieve list -A user1 default ACTIVE [snip] test default ACTIVE That is true for all doveadm sieve commands, but other will work, like: mail> doveadm user -u test userdb: test user : test mail : mdbox:/—path-to-maildir--/test Hmm, any idea what is going on? I do not know when those commands stopped to work, I didn't try to update my sieve scripts for some time now. Thanks and regards, Michael

3 3

Recent update causes segfault in proxy mode
by Ralf Hildebrandt 30 Apr '16

30 Apr '16

I'm using the auto builds (2:2.2.24-1~auto+3) for Ubuntu/Debian. The recent upgrade to 2.2.24 cause the follwoing error to appear: I can log in to a mailbox via dovecot I can delete emails Upon expunge, dovecot crashes: Apr 29 11:05:30 mproxy dovecot: imap(hildeb): expunge: box=INBOX, uid=142514, msgid=, size=10086 Apr 29 11:05:30 mproxy dovecot: imap(hildeb): expunge: box=INBOX, uid=142519, msgid=, size=1232 Apr 29 11:05:30 mproxy dovecot: imap(hildeb): expunge: box=INBOX, uid=142520, msgid=, size=1232 Apr 29 11:05:30 mproxy dovecot: imap(hildeb): expunge: box=INBOX, uid=142521, msgid=, size=1240 Apr 29 11:05:30 mproxy dovecot: imap(hildeb): expunge: box=INBOX, uid=142522, msgid=, size=1239 Apr 29 11:05:30 mproxy dovecot: imap(hildeb): expunge: box=INBOX, uid=142523, msgid=, size=1239 Apr 29 11:05:30 mproxy dovecot: imap(hildeb): expunge: box=INBOX, uid=142524, msgid=, size=6662 Apr 29 11:05:30 mproxy dovecot: imap(hildeb): expunge: box=INBOX, uid=142525, msgid=, size=5342 Apr 29 11:05:30 mproxy dovecot: imap(hildeb): expunge: box=INBOX, uid=142527, msgid=, size=9718 Apr 29 11:05:30 mproxy dovecot: imap(hildeb): expunge: box=INBOX, uid=142528, msgid=, size=3019 Apr 29 11:05:30 mproxy dovecot: imap(hildeb): expunge: box=INBOX, uid=142529, msgid=, size=7625 Apr 29 11:05:30 mproxy dovecot: imap(hildeb): expunge: box=INBOX, uid=142530, msgid=, size=31900 Apr 29 11:05:30 mproxy dovecot: imap(hildeb): expunge: box=INBOX, uid=142531, msgid=, size=4827 Apr 29 11:05:30 mproxy dovecot: imap(hildeb): expunge: box=INBOX, uid=142532, msgid=, size=4096 Apr 29 11:05:30 mproxy dovecot: imap(hildeb): expunge: box=INBOX, uid=142533, msgid=, size=7100 Apr 29 11:05:30 mproxy dovecot: imap(hildeb): expunge: box=INBOX, uid=142534, msgid=, size=4422 Apr 29 11:05:30 mproxy dovecot: imap(hildeb): expunge: box=INBOX, uid=142535, msgid=, size=10856 Apr 29 11:05:30 mproxy dovecot: imap(hildeb): expunge: box=INBOX, uid=142536, msgid=, size=13305 Apr 29 11:05:30 mproxy dovecot: imap(hildeb): expunge: box=INBOX, uid=142574, msgid=, size=3113 Apr 29 11:05:30 mproxy dovecot: imap(hildeb): expunge: box=INBOX, uid=142575, msgid=, size=4155 Apr 29 11:05:30 mproxy dovecot: imap(hildeb): expunge: box=INBOX, uid=142576, msgid=, size=5114 Apr 29 11:05:30 mproxy dovecot: imap(hildeb): expunge: box=INBOX, uid=142577, msgid=, size=3266 Apr 29 11:05:30 mproxy dovecot: imap(hildeb): Fatal: master: service(imap): child 12393 killed with signal 11 (core dumped) Unfortunately, I'm not getting a backtrace :( -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

3 4

Setting lmtp_user_concurrency_limit causes anvil permission error
by Tom Sommer 30 Apr '16

30 Apr '16

I've set lmtp_user_concurrency_limit to 5 and now LMTP throws this at me for every delivery: Apr 07 13:38:33 lmtp(4434): Error: net_connect_unix(/var/run/dovecot/anvil) failed: Permission denied ls -l /var/run/dovecot/anvil srw------- 1 root root 0 Apr 7 13:32 /var/run/dovecot/anvil If I set lmtp_user_concurrency_limit to 0, the error goes away. -- Tom

3 3

Panic: file message-part-serialize.c: line 90 (part_serialize): assertion failed: (part->children == NULL)
by Andreas Jobs 30 Apr '16

30 Apr '16

Hi, I just found this in my logs: Apr 29 11:05:20 lmtp(joerg.eggenstein(a)ruhr-uni-bochum.de): Panic: file message-part-serialize.c: line 90 (part_serialize): assertion failed: (part->children == NULL) Apr 29 11:05:20 lmtp(joerg.eggenstein(a)ruhr-uni-bochum.de): Error: Raw backtrace: /usr/local/dovecot/lib/dovecot/libdovecot.so.0(+0x9c7f9) [0x7fa88bfbf7f9] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(+0x9db92) [0x7fa88bfc0b92] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fa88bfbfb3f] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(+0x8a1bf) [0x7fa88bfad1bf] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(+0x8a163) [0x7fa88bfad163] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(message_part_serialize+0x27) [0x7fa88bfad20c] -> /usr/local/dovecot/lib/dovecot/libdovecot-storage.so.0(+0xccf29) [0x7fa88c327f29] -> /usr/local/dovecot/lib/dovecot/libdovecot-storage.so.0(+0xcdd01) [0x7fa88c328d01] -> /usr/local/dovecot/lib/dovecot/libdovecot-storage.so.0(index_mail_cache_parse_deinit+0xc9) [0x7fa88c32b236] -> /usr/local/dovecot/lib/dovecot/libdovecot-storage.so.0(dbox_save_end+0x1c4) [0x7fa88c2bed50] -> /usr/local/dovecot/lib/dovecot/libdovecot-storage.so.0(+0x5a6d5) [0x7fa88c2b56d5] -> /usr/local/dovecot/lib/dovecot/libdovecot-storage.so.0(mdbox_save_finish+0x18) [0x7fa88c2b5840] -> /usr/local/dovecot/lib/dovecot/lib10_quota_plugin.so(+0xe512) [0x7fa88b751512] -> /usr/local/dovecot/lib/dovecot/libdovecot-storage.so.0(mailbox_save_finish+0xb4) [0x7fa88c298dee] -> /usr/local/dovecot/lib/dovecot/libdovecot-storage.so.0(mail_storage_copy+0x6c) [0x7fa88c28a757] -> /usr/local/dovecot/lib/dovecot/libdovecot-storage.so.0(mdbox_copy+0x85) [0x7fa88c2b601e] -> /usr/local/dovecot/lib/dovecot/lib10_quota_plugin.so(+0xe322) [0x7fa88b751322] -> /usr/local/dovecot/lib/dovecot/libdovecot-storage.so.0(mailbox_copy+0xec) [0x7fa88c2990b4] -> /usr/local/dovecot/lib/dovecot/libdovecot-storage.so.0(mailbox_save_using_mail+0x34) [0x7fa88c29921a] -> /usr/local/dovecot/lib/dovecot/libdovecot-sieve.so.0(+0x51899) [0x7fa88b2b5899] -> /usr/local/dovecot/lib/dovecot/libdovecot-sieve.so.0(+0x45bc5) [0x7fa88b2a9bc5] -> /usr/local/dovecot/lib/dovecot/libdovecot-sieve.so.0(sieve_result_execute+0xbf) [0x7fa88b2aa250] -> /usr/local/dovecot/lib/dovecot/libdovecot-sieve.so.0(sieve_execute+0x7c) [0x7fa88b2c0597] -> /usr/local/dovecot/lib/dovecot/lib90_sieve_plugin.so(+0x32d8) [0x7fa88b53f2d8] -> /usr/local/dovecot/lib/dovecot/lib90_sieve_plugin.so(+0x40e1) [0x7fa88b5400e1] -> /usr/local/dovecot/lib/dovecot/lib90_sieve_plugin.so(+0x435c) [0x7fa88b54035c] -> /usr/local/dovecot/lib/dovecot/libdovecot-lda.so.0(mail_deliver+0x68) [0x7fa88c5db90c] -> dovecot/lmtp [DATA 134.147.53.148 redacted(a)ruhr-uni-bochum.de](+0x92ea) [0x7fa88ca102ea] Apr 29 11:05:20 lmtp(redacted(a)ruhr-uni-bochum.de): Fatal: master: service(lmtp): child 12080 killed with signal 6 (core dumped) It looks like that this may be caused by a mail where there is the blank line after a part header missing: I attach Backtrace and configuration. --Andreas -- ! Andreas Jobs Network Operation Center ! ! Ruhr-Universitaet Bochum ! ! One Day I Will Find This Peer Guy and Then I Will Reset HIS Connection !

2 2

Unable to get mail?
by Jason Pruim 30 Apr '16

30 Apr '16

Hey everyone, I'm not sure I'm on the right list for this one... I have a postfix/dovecot install that was running fine on amazon web services that all of a sudden stopped receiving mail... In my mail log all I get is this: Apr 30 03:16:26 ip-172-31-28-46 dovecot: imap(beth(a)primelashdiva.info): Connection closed in=595 out=1459 Apr 30 03:16:31 ip-172-31-28-46 dovecot: imap-login: Login: user=< beth(a)primelashdiva.info>, method=PLAIN, rip=68.105.170.121, lip=172.31.28.46, mpid=31865, TLS, session=<cbidL6sxXQBEaap5> Apr 30 03:16:33 ip-172-31-28-46 dovecot: imap-login: Login: user=< beth(a)primelashdiva.info>, method=PLAIN, rip=68.105.170.121, lip=172.31.28.46, mpid=31867, TLS, session=<frXBL6sxYQBEaap5> Apr 30 03:16:34 ip-172-31-28-46 dovecot: imap(beth(a)primelashdiva.info): Disconnected: Logged out in=97 out=440 Apr 30 03:16:38 ip-172-31-28-46 dovecot: imap-login: Login: user=< beth(a)primelashdiva.info>, method=PLAIN, rip=68.105.170.121, lip=172.31.28.46, mpid=31869, TLS, session=<mvQGMKsxaABEaap5> Apr 30 03:19:14 ip-172-31-28-46 dovecot: imap(beth(a)primelashdiva.info): Disconnected: Logged out in=408 out=1385 Apr 30 03:19:14 ip-172-31-28-46 dovecot: imap(beth(a)primelashdiva.info): Disconnected: Logged out in=847 out=3067 Apr 30 03:20:25 ip-172-31-28-46 postfix/postfix-script[3891]: stopping the Postfix mail system Apr 30 03:20:25 ip-172-31-28-46 postfix/master[31225]: terminating on signal 15 Apr 30 03:20:25 ip-172-31-28-46 postfix/postfix-script[3963]: starting the Postfix mail system Apr 30 03:20:25 ip-172-31-28-46 postfix/master[3964]: daemon started -- version 2.6.6, configuration /etc/postfix Apr 30 03:20:44 ip-172-31-28-46 dovecot: master: Warning: Killed with signal 15 (by pid=3977 uid=0 code=kill) Apr 30 03:20:44 ip-172-31-28-46 dovecot: imap: Server shutting down. in=472 out=1366 Apr 30 03:20:45 ip-172-31-28-46 dovecot: master: Dovecot v2.2.10 starting up for imap, pop3, lmtp (core dumps disabled) Apr 30 03:21:17 ip-172-31-28-46 dovecot: imap-login: Aborted login (no auth attempts in 9 secs): user=<>, rip=68.105.170.121, lip=172.31.28.46, session=<Ar2lQKsxnQBEaap5> Apr 30 03:24:30 ip-172-31-28-46 postfix/postfix-script[4141]: stopping the Postfix mail system Apr 30 03:24:30 ip-172-31-28-46 postfix/master[3964]: terminating on signal 15 Apr 30 03:24:30 ip-172-31-28-46 dovecot: master: Warning: Killed with signal 15 (by pid=4147 uid=0 code=kill) Apr 30 03:25:28 ip-172-31-28-46 postfix/postfix-script[2761]: starting the Postfix mail system Apr 30 03:25:28 ip-172-31-28-46 postfix/master[2762]: daemon started -- version 2.6.6, configuration /etc/postfix Apr 30 03:26:22 ip-172-31-28-46 dovecot: master: Dovecot v2.2.10 starting up for imap, pop3, lmtp (core dumps disabled) Apr 30 03:27:03 ip-172-31-28-46 dovecot: imap-login: Aborted login (no auth attempts in 6 secs): user=<>, rip=68.105.170.121, lip=172.31.28.46, session=<eOVMVasxbQBEaap5> Apr 30 03:27:36 ip-172-31-28-46 dovecot: imap-login: Login: user=< beth(a)primelashdiva.info>, method=PLAIN, rip=68.105.170.121, lip=172.31.28.46, mpid=3001, TLS, session=<g49GV6sxiABEaap5> Apr 30 03:27:54 ip-172-31-28-46 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<beth(a)primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=<y6EuWKsxoAB/AAAB> Apr 30 03:28:06 ip-172-31-28-46 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=<beth(a)primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=</4W0WKsxogB/AAAB> Apr 30 03:28:10 ip-172-31-28-46 dovecot: imap-login: Login: user=< beth(a)primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=3008, secured, session=<zwtFWasxpAB/AAAB> Apr 30 03:28:10 ip-172-31-28-46 dovecot: imap(beth(a)primelashdiva.info): Disconnected: Logged out in=29 out=466 Apr 30 03:28:10 ip-172-31-28-46 dovecot: imap-login: Login: user=< beth(a)primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=3011, secured, session=<jLBHWasxpgB/AAAB> Apr 30 03:28:10 ip-172-31-28-46 dovecot: imap(beth(a)primelashdiva.info): Disconnected: Logged out in=44 out=538 Apr 30 03:28:11 ip-172-31-28-46 dovecot: imap-login: Login: user=< beth(a)primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=3014, secured, session=<CulYWasxqAB/AAAB> Apr 30 03:28:11 ip-172-31-28-46 dovecot: imap(beth(a)primelashdiva.info): Disconnected: Logged out in=314 out=6899 Apr 30 03:28:12 ip-172-31-28-46 dovecot: imap-login: Login: user=< beth(a)primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=3017, secured, session=<CH9iWasxqgB/AAAB> Apr 30 03:28:12 ip-172-31-28-46 dovecot: imap(beth(a)primelashdiva.info): Disconnected: Logged out in=209 out=816 Apr 30 03:29:12 ip-172-31-28-46 dovecot: imap-login: Login: user=< beth(a)primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=3024, secured, session=<lErzXKsxrgB/AAAB> Apr 30 03:29:12 ip-172-31-28-46 dovecot: imap(beth(a)primelashdiva.info): Disconnected: Logged out in=91 out=872 Apr 30 03:30:12 ip-172-31-28-46 dovecot: imap-login: Login: user=< beth(a)primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=3027, secured, session=<9r6GYKsxsAB/AAAB> Apr 30 03:30:12 ip-172-31-28-46 dovecot: imap(beth(a)primelashdiva.info): Disconnected: Logged out in=91 out=872 Apr 30 03:31:13 ip-172-31-28-46 dovecot: imap-login: Login: user=< beth(a)primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=3037, secured, session=<QogvZKsxsgB/AAAB> Apr 30 03:31:13 ip-172-31-28-46 dovecot: imap(beth(a)primelashdiva.info): Disconnected: Logged out in=91 out=872 Apr 30 03:32:14 ip-172-31-28-46 dovecot: imap-login: Login: user=< beth(a)primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=3043, secured, session=<Zp7SZ6sxtAB/AAAB> Apr 30 03:32:14 ip-172-31-28-46 dovecot: imap(beth(a)primelashdiva.info): Disconnected: Logged out in=91 out=872 Apr 30 03:33:17 ip-172-31-28-46 dovecot: imap-login: Login: user=< beth(a)primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=3051, secured, session=<djmLa6sxtgB/AAAB> Apr 30 03:33:17 ip-172-31-28-46 dovecot: imap(beth(a)primelashdiva.info): Disconnected: Logged out in=91 out=872 Apr 30 03:34:17 ip-172-31-28-46 dovecot: imap-login: Login: user=< beth(a)primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=3057, secured, session=<hSAhb6sxuAB/AAAB> Apr 30 03:34:17 ip-172-31-28-46 dovecot: imap(beth(a)primelashdiva.info): Disconnected: Logged out in=91 out=872 Apr 30 03:35:18 ip-172-31-28-46 dovecot: imap-login: Login: user=< beth(a)primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=3063, secured, session=<QerDcqsxugB/AAAB> Apr 30 03:35:18 ip-172-31-28-46 dovecot: imap(beth(a)primelashdiva.info): Disconnected: Logged out in=91 out=872 Apr 30 03:35:29 ip-172-31-28-46 dovecot: imap-login: Login: user=< beth(a)primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=3066, secured, session=<X8ttc6sxvAB/AAAB> Apr 30 03:35:29 ip-172-31-28-46 dovecot: imap(beth(a)primelashdiva.info): Disconnected: Logged out in=32 out=449 Apr 30 03:35:29 ip-172-31-28-46 dovecot: imap-login: Login: user=< beth(a)primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=3069, secured, session=<rpVwc6sxvgB/AAAB> Apr 30 03:35:29 ip-172-31-28-46 dovecot: imap(beth(a)primelashdiva.info): Disconnected: Logged out in=44 out=538 Apr 30 03:36:41 ip-172-31-28-46 postfix/postfix-script[3424]: stopping the Postfix mail system Apr 30 03:36:41 ip-172-31-28-46 postfix/master[2762]: terminating on signal 15 Apr 30 03:36:42 ip-172-31-28-46 postfix/postfix-script[3496]: starting the Postfix mail system Apr 30 03:36:42 ip-172-31-28-46 postfix/master[3497]: daemon started -- version 2.6.6, configuration /etc/postfix Apr 30 03:36:48 ip-172-31-28-46 dovecot: master: Warning: Killed with signal 15 (by pid=3509 uid=0 code=kill) Apr 30 03:36:48 ip-172-31-28-46 dovecot: imap: Server shutting down. in=586 out=1464 Apr 30 03:36:49 ip-172-31-28-46 dovecot: master: Dovecot v2.2.10 starting up for imap, pop3, lmtp (core dumps disabled) Apr 30 03:37:05 ip-172-31-28-46 dovecot: imap-login: Aborted login (no auth attempts in 6 secs): user=<>, rip=52.37.99.183, lip=172.31.28.46, session=<9D4ueasxaAA0JWO3> Apr 30 03:37:35 ip-172-31-28-46 dovecot: imap-login: Aborted login (no auth attempts in 8 secs): user=<>, rip=68.105.170.121, lip=172.31.28.46, session=<PN3weqsxwgBEaap5> Apr 30 03:41:46 ip-172-31-28-46 dovecot: imap-login: Aborted login (tried to use disallowed plaintext auth): user=<>, rip=68.105.170.121, lip=172.31.28.46, session=<xC7oiasxUwBEaap5> [ec2-user@ip-172-31-28-46 log]$ I'm not even sure where to go to start looking... Any pointers? Thanks Everyone!

1 0

segfault in imap "Warning: Timeout leak: 0x7fd584e8e050 (line 399)"
by Ralf Hildebrandt 29 Apr '16

29 Apr '16

Corresponding log entry: Apr 29 17:14:07 mproxy dovecot: imap(v******d): copy from INBOX: box=Trash, uid=512, msgid=, size=error Apr 29 17:14:07 mproxy dovecot: imap(v******d): expunge: box=INBOX, uid=3322, msgid=, size=22485 Apr 29 17:14:19 mproxy dovecot: imap(v******d): copy from INBOX: box=Trash, uid=513, msgid=, size=error Apr 29 17:14:19 mproxy dovecot: imap(v******d): expunge: box=INBOX, uid=3288, msgid=, size=60236 Apr 29 17:14:19 mproxy dovecot: imap(v******d): Warning: Timeout leak: 0x7fd584e8e050 (line 399) Apr 29 17:14:19 mproxy dovecot: imap(v******d): Connection closed (IDLE running for 0.043 + waiting input for 6654.979 secs, 2 B in + 10+10 B out, state=wait-input) in=7582 out=5928297 Apr 29 17:14:19 mproxy dovecot: imap(v******d): Fatal: master: service(imap): child 30554 killed with signal 11 (core dumped) Backtrace: Reading symbols from /usr/lib/dovecot/imap...Reading symbols from /usr/lib/debug/.build-id/5a/15dc6951744d026af424747e7b72a4fb550c6b.debug...done. done. [New LWP 30554] Core was generated by `dovecot/imap'. Program terminated with signal SIGSEGV, Segmentation fault. #0 0x00007fd584b8daa7 in timeout_remove (_timeout=0x7fd5875b5048) at ioloop.c:307 #0 0x00007fd584b8daa7 in timeout_remove (_timeout=0x7fd5875b5048) at ioloop.c:307 timeout = 0x7fd5875b8720 ioloop = 0x0 #1 0x00007fd584e8df0b in imapc_client_mailbox_close ( _box=_box@entry=0x7fd5875b3b38) at imapc-client.c:362 box = 0x7fd5875b5030 connp = <optimized out> #2 0x00007fd584e8c3af in imapc_mailbox_close (box=0x7fd5875b3850) at imapc-storage.c:651 mbox = 0x7fd5875b3850 #3 0x00007fd584e411aa in mailbox_close (box=0x7fd5875b5048) at mail-storage.c:1242 No locals. #4 0x00007fd584e41233 in mailbox_free (_box=_box@entry=0x7fd5875a3f00) at mail-storage.c:1262 box = 0x7fd5875b3850 #5 0x00007fd585584f74 in client_default_destroy (client=0x7fd5875a3e60, reason=<optimized out>) at imap-client.c:367 cmd = 0x0 #6 0x00007fd584b8e06c in io_loop_call_io (io=0x7fd5875a18d0) at ioloop.c:564 ioloop = 0x7fd587563740 t_id = 2 __FUNCTION__ = "io_loop_call_io" #7 0x00007fd584b8f4d1 in io_loop_handler_run_internal ( ioloop=ioloop@entry=0x7fd587563740) at ioloop-epoll.c:220 ctx = 0x7fd587565250 io = <optimized out> tv = {tv_sec = 4, tv_usec = 738842} events_count = <optimized out> msecs = <optimized out> ret = 1 i = 0 j = <optimized out> call = <optimized out> __FUNCTION__ = "io_loop_handler_run_internal" #8 0x00007fd584b8e0f5 in io_loop_handler_run ( ioloop=ioloop@entry=0x7fd587563740) at ioloop.c:612 No locals. #9 0x00007fd584b8e298 in io_loop_run (ioloop=0x7fd587563740) at ioloop.c:588 __FUNCTION__ = "io_loop_run" #10 0x00007fd584b23e63 in master_service_run (service=0x7fd5875635e0, callback=<optimized out>) at master-service.c:640 No locals. #11 0x00007fd585577b32 in main (argc=1, argv=0x7fd587563390) at main.c:460 set_roots = {0x7fd5857a1700 <imap_setting_parser_info>, 0x7fd585340400 <lda_setting_parser_info>, 0x0} login_set = {auth_socket_path = 0x7fd58755b048 "\001", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x7fd5855919d0 <login_client_connected>, failure_callback = 0x7fd5855912e0 <login_client_failed>, request_auth_token = 1} service_flags = <optimized out> storage_service_flags = <optimized out> username = 0x0 auth_socket_path = 0x7fd58559a34e "auth-master" c = <optimized out> -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

1 0

Password database extra fields and SQL
by Dave 29 Apr '16

29 Apr '16

Hi everyone, first post to the list, be gentle with me! Perhaps I'm missing something here, but it appears to me that many password database extra fields currently aren't much use inside SQL queries? All boolean fields like nologin/nodelay/nopassword are set if the column is present in the returned query, regardless of value (including NULL) For example, say you have a query like: password_query = SELECT hash AS password, NULLIF(active = 1, 'y') AS nologin FROM users WHERE name = '%u' Then nologin will always be set for this account, there's no realistic way to toggle the flag. Has anyone come across any workarounds for this problem that don't sacrifice efficiency by performing multiple lookups? I was considering what would happen if dovecot treated NULL fields as not present, but that immediately conflicts with advice to set password to NULL to satisfy the field requirement on nopassword. Any thoughts? -- Dave

3 3

Backtrace:dovecot/imap
by Ralf Hildebrandt 29 Apr '16

29 Apr '16

Config: # 2.2.devel (2dc8e2d): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.devel (850d80b) # OS: Linux 3.13.0-77-generic x86_64 Ubuntu 16.04 LTS auth_mechanisms = plain login default_vsz_limit = 1 G imapc_host = email.charite.de imapc_port = 993 imapc_ssl = imaps imapc_ssl_verify = no listen = *,:: mail_gid = imapproxy mail_home = /home/imapproxy/%u mail_location = imapc:~/imapc mail_plugins = mail_log notify mail_uid = imapproxy passdb { args = host=email.charite.de port=993 ssl=imaps default_fields = userdb_imapc_user=%u userdb_imapc_password=%w userdb_imapc_host=email.charite.de userdb_imapc_ssl=imaps userdb_imapc_port=993 driver = imap } plugin { sieve = file:~/sieve;active=~/.dovecot.sieve } protocols = imap service auth { inet_listener { address = 127.0.0.1 port = 12345 } } ssl = required ssl_ca = </etc/ssl/certs/ca-certificates.crt ssl_cert = </etc/dovecot/dovecot.pem ssl_cipher_list = DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ALL:!LOW:!SSLv2:!EXP:!aNULL ssl_key = </etc/dovecot/private/dovecot.pem userdb { driver = prefetch } verbose_proctitle = yes Reading symbols from /usr/lib/dovecot/imap...Reading symbols from /usr/lib/debug/.build-id/5a/15dc6951744d026af424747e7b72a4fb550c6b.debug...done. done. [New LWP 21869] Core was generated by `dovecot/imap'. Program terminated with signal SIGSEGV, Segmentation fault. #0 buffer_delete (_buf=0x0, pos=0, size=0) at buffer.c:213 #0 buffer_delete (_buf=0x0, pos=0, size=0) at buffer.c:213 buf = 0x0 end_size = <optimized out> #1 0x00007f5729a7507e in array_delete_i (count=1, idx=125, array=0x7f572c12bbb8) at ../../../../src/lib/array.h:200 No locals. #2 imapc_untagged_expunge (reply=<optimized out>, mbox=0x7f572c12b840) at imapc-mailbox.c:473 msgmap = 0x7f572c146ed0 lseq = 739349904 uid = 51497 rseq = 126 #3 0x00007f5729a77632 in imapc_storage_client_untagged_cb ( reply=0x7ffdc857e400, context=0x7f572c0f7080) at imapc-storage.c:204 mcb__foreach_end = 0x7f572c12bf98 client = 0x7f572c0f7080 mbox = 0x7f572c12b840 cb = <optimized out> mcb = 0x7f572c12bf78 #4 0x00007f5729a7d90a in imapc_connection_input_untagged ( conn=conn@entry=0x7f572c119590) at imapc-connection.c:1144 imap_args = 0x7f572c11db38 data = <optimized out> size = 140012378250296 name = 0x7f572c11dc38 "EXPUNGE" value = <optimized out> parser = 0x7f572c119710 reply = {name = 0x7f572c11dc38 "EXPUNGE", num = 126, args = 0x7f572c11db38, file_args = 0x7f572c11b4c0, file_args_count = 0, resp_text_key = 0x0, resp_text_value = 0x0, untagged_box_context = 0x7f572c12b840} ret = <optimized out> #5 0x00007f5729a7f7d9 in imapc_connection_input_one (conn=0x7f572c119590) at imapc-connection.c:1398 tag = 0x7f572c11dc28 "*" ret = -1 #6 imapc_connection_input_pending (conn=0x7f572c119590) at imapc-connection.c:1766 _data_stack_cur_id = 6 ret = 1 conn = 0x7f572c119590 #7 0x00007f5729a7f82a in imapc_connection_input (conn=0x7f572c119590) at imapc-connection.c:1438 errstr = <optimized out> str = <optimized out> ret = <optimized out> #8 0x00007f572977a05c in io_loop_call_io (io=0x7f572c132740) at ioloop.c:564 ioloop = 0x7f572c136c10 t_id = 5 __FUNCTION__ = "io_loop_call_io" #9 0x00007f572977b4c1 in io_loop_handler_run_internal ( ioloop=ioloop@entry=0x7f572c136c10) at ioloop-epoll.c:220 ctx = 0x7f572c138dd0 io = <optimized out> tv = {tv_sec = 299, tv_usec = 999778} events_count = <optimized out> msecs = <optimized out> ret = 1 i = 0 j = <optimized out> call = <optimized out> __FUNCTION__ = "io_loop_handler_run_internal" #10 0x00007f572977a0e5 in io_loop_handler_run ( ioloop=ioloop@entry=0x7f572c136c10) at ioloop.c:612 No locals. #11 0x00007f572977a288 in io_loop_run (ioloop=0x7f572c136c10) at ioloop.c:588 __FUNCTION__ = "io_loop_run" #12 0x00007f5729a7ab7a in imapc_client_run_pre (client=0x7f572c0f7250, client=0x7f572c0f7250) at imapc-client.c:173 connp = 0x7f572c0f73e8 prev_ioloop = 0x7f572c0db740 #13 imapc_client_run (client=0x7f572c0f7250) at imapc-client.c:192 No locals. #14 0x00007f5729a785e0 in imapc_mailbox_run_nofetch ( mbox=mbox@entry=0x7f572c12b840) at imapc-storage.c:143 No locals. #15 0x00007f5729a78612 in imapc_mailbox_run (mbox=mbox@entry=0x7f572c12b840) at imapc-storage.c:137 No locals. #16 0x00007f5729a7a178 in imapc_sync_index (ctx=0x7f572c132140) at imapc-sync.c:405 mbox = 0x7f572c12b840 sync_rec = {uid1 = 51497, uid2 = 51497, type = MAIL_INDEX_SYNC_TYPE_EXPUNGE, add_flags = 4 '\004', remove_flags = 0 '\000', keyword_idx = 6315, guid_128 = "^kK\r2U\277\357\225`\030\220\257\330\a\t"} seq1 = 126 seq2 = 126 #17 imapc_sync_begin (force=<optimized out>, ctx_r=<synthetic pointer>, mbox=0x7f572c12b840) at imapc-sync.c:481 ctx = <optimized out> sync_flags = <optimized out> ret = <optimized out> #18 imapc_sync (mbox=0x7f572c12b840) at imapc-sync.c:537 sync_ctx = <optimized out> force = <optimized out> #19 imapc_mailbox_sync_init (box=0x7f572c12b840, flags=MAILBOX_SYNC_FLAG_EXPUNGE) at imapc-sync.c:590 mbox = 0x7f572c12b840 list = <optimized out> changes = false ret = <optimized out> #20 0x00007f5729a2ea7b in mailbox_sync_init (box=box@entry=0x7f572c12b840, flags=flags@entry=MAILBOX_SYNC_FLAG_EXPUNGE) at mail-storage.c:1672 _data_stack_cur_id = 4 ctx = <optimized out> #21 0x00007f572a17e102 in imap_sync_init (client=client@entry=0x7f572c11be50, box=<optimized out>, imap_flags=IMAP_SYNC_FLAG_SAFE, flags=MAILBOX_SYNC_FLAG_EXPUNGE) at imap-sync.c:229 __FUNCTION__ = "imap_sync_init" #22 0x00007f572a17ef97 in cmd_sync_client (sync_cmd=0x7f572c127a90) at imap-sync.c:737 ctx = <optimized out> flags = <optimized out> client = 0x7f572c11be50 imap_flags = <optimized out> no_newmail = <optimized out> #23 cmd_sync_delayed_real (client=0x7f572c11be50) at imap-sync.c:856 cmd = <optimized out> first_expunge = <optimized out> first_nonexpunge = <optimized out> #24 cmd_sync_delayed (client=client@entry=0x7f572c11be50) at imap-sync.c:864 _data_stack_cur_id = 3 #25 0x00007f572a1726d8 in client_handle_input (client=0x7f572c11be50) at imap-client.c:1088 remove_io = <optimized out> handled_commands = <optimized out> client = 0x7f572c11be50 #26 0x00007f572a172b65 in client_input (client=0x7f572c11be50) at imap-client.c:1119 cmd = 0x27284 output = 0x7f572c11d080 bytes = 153 __FUNCTION__ = "client_input" #27 0x00007f572977a05c in io_loop_call_io (io=0x7f572c1198c0) at ioloop.c:564 ioloop = 0x7f572c0db740 t_id = 2 __FUNCTION__ = "io_loop_call_io" #28 0x00007f572977b4c1 in io_loop_handler_run_internal ( ioloop=ioloop@entry=0x7f572c0db740) at ioloop-epoll.c:220 ctx = 0x7f572c0dd250 io = <optimized out> tv = {tv_sec = 1739, tv_usec = 992115} events_count = <optimized out> msecs = <optimized out> ret = 1 i = 0 j = <optimized out> call = <optimized out> __FUNCTION__ = "io_loop_handler_run_internal" #29 0x00007f572977a0e5 in io_loop_handler_run ( ioloop=ioloop@entry=0x7f572c0db740) at ioloop.c:612 No locals. #30 0x00007f572977a288 in io_loop_run (ioloop=0x7f572c0db740) at ioloop.c:588 __FUNCTION__ = "io_loop_run" #31 0x00007f572970fe63 in master_service_run (service=0x7f572c0db5e0, callback=<optimized out>) at master-service.c:640 No locals. #32 0x00007f572a165b32 in main (argc=1, argv=0x7f572c0db390) at main.c:460 set_roots = {0x7f572a38f700 <imap_setting_parser_info>, 0x7f5729f2e400 <lda_setting_parser_info>, 0x0} login_set = {auth_socket_path = 0x7f572c0d3048 "\001", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x7f572a17f9d0 <login_client_connected>, failure_callback = 0x7f572a17f2e0 <login_client_failed>, request_auth_token = 1} service_flags = <optimized out> storage_service_flags = <optimized out> username = 0x0 auth_socket_path = 0x7f572a18834e "auth-master" c = <optimized out> ----- End forwarded message ----- -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

2 2

Re: WP8/Windows 10 mail app can't login, tries double auth
by Joseph Tam 29 Apr '16

29 Apr '16

Attila Nagy writes: > Are there anybody who could make WP8 (and W10 desktop clients it seems) > devices working with Dovecot's POP3 server? > > The conversation looks like this: > S +OK ready > C CAPA > S +OK > S CAPA > S TOP > S UIDL > S RESP-CODES > S PIPELINING > S AUTH-RESP-CODE > S USER > S SASL PLAIN > S . > C AUTH > S +OK > S PLAIN > S . > C AUTH PLAIN > S + > C <base64 auth string) > S +OK[space] > C USER username > S -ERR unimplemented > > First I thought the extra space after that OK causes this, but removing > it changed nothing. > > So these devices try to log in with AUTH PLAIN, then even after a > successful login they want to log in again with USER, which gets rejected. I dimly remember some Windows clients preferring either "LOGIN" or "PLAIN" style mechanism. Have you tried allowing "LOGIN" style authentication? auth_mechanisms = plain login Joseph Tam <jtam.home(a)gmail.com>

2 1

Doveadm Replicator problem with PAM passdb
by Adam Joesbury 28 Apr '16

28 Apr '16

Hi Everyone, We are running two CentOS 7.2 servers with Sendmail 8.14.7 V10 and Dovecot 2.2.10 installed on both and are trying to configure Master-Master Replication using doveadm replicator. We are using system users with PAM authentication but are receiving the following fatal error when dsync tries to run: doveadm(user): Fatal: /var/run/dovecot/auth-userdb: Configured passdbs don't support crentials lookups (to see if user is proxied, because doveadm_port is set). Please could someone confirm whether it is possible to configure replication using PAM passdb as the above error seems to suggest it isn't but we have come across various people online who seem to have it working. I don't know whether we need to create a master user or whether we need to create a separate password file with a directory of all of our user's passwords? We do have all the user passwords as they are only internal accounts that we are servicing. Thanks in advance Output of dovecot -n: # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-327.13.1.el7.x86_64 x86_64 CentOS Linux release 7.2.1511 (Core) auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-userdb doveadm_password = secret doveadm_port = 12345 login_greeting = POP3-IMAP server ready. mail_location = maildir:~/Maildir mail_plugins = " notify replication" mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox "Deleted Items" { auto = subscribe special_use = \Trash } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox "Junk E-mail" { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } prefix = } passdb { args = session=yes setcred=yes failure_show_msg=yes dovecot driver = pam } plugin { mail_replica = tcp:VMAILSERVER1:12345 } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh service aggregator { fifo_listener replication-notify-fifo { mode = 0666 } unix_listener replication-notify { mode = 0666 } } service auth { unix_listener auth-userdb { mode = 0777 } } service doveadm { inet_listener { port = 12345 } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0600 } } ssl_ca = </etc/pki/tls/certs/chain.crt ssl_cert = </etc/pki/tls/certs/ca.crt ssl_key = </etc/pki/dovecot/private/dovecot.pem ssl_verify_client_cert = yes userdb { driver = passwd } verbose_ssl = yes

1 0

managesieve proxying not working
by Hawk Chen 28 Apr '16

28 Apr '16

Hi, I'm setting up the directors for proxying pop3/imap/lmtp/sieve. pop3/imap/lmtp proxying work fine, but sieve not working. The error messages in maillog look not using proxying but local passdb. Error message: Apr 03 12:09:25 managesieve-login: Info: Aborted login (no auth attempts in 0 secs): user=<>, rip=10.1.1.4, lip=10.1.1.201, session=<+SIcx4wvRQAKAQEE> sql in /etc/dovecot/dovecot-sql.conf.ext: password_query = SELECT NULL as password, host, 'Y' as nopassword, 'Y' as proxy FROM mailbox WHERE username = '%u' AND active='1' doveconf -n output is as follows, # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-327.10.1.el7.x86_64 x86_64 CentOS Linux release 7.2.1511 (Core) director_mail_servers = 10.1.4.5 10.1.4.6 director_servers = 10.1.1.1 10.1.1.2 lmtp_proxy = yes log_path = /var/log/dovecot.log login_greeting = DNT Mail Server managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 lmtp sieve service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { port = 9090 } unix_listener director-userdb { mode = 0600 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director service_count = 0 } service lmtp { inet_listener lmtp { port = 24 } } service managesieve-login { executable = managesieve-login director service_count = 0 } service pop3-login { executable = pop3-login director service_count = 0 } ssl = required ssl_cert = </etc/postfix/itsnow.crt ssl_key = </etc/postfix/itsnow.key userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } userdb { driver = passwd } protocol lmtp { auth_socket_path = director-userdb } Regards, Hawk

3 6

WP8/Windows 10 mail app can't login, tries double auth
by Nagy, Attila 27 Apr '16

27 Apr '16

Hi, Are there anybody who could make WP8 (and W10 desktop clients it seems) devices working with Dovecot's POP3 server? The conversation looks like this: S +OK ready C CAPA S +OK S CAPA S TOP S UIDL S RESP-CODES S PIPELINING S AUTH-RESP-CODE S USER S SASL PLAIN S . C AUTH S +OK S PLAIN S . C AUTH PLAIN S + C <base64 auth string) S +OK[space] C USER username S -ERR unimplemented First I thought the extra space after that OK causes this, but removing it changed nothing. So these devices try to log in with AUTH PLAIN, then even after a successful login they want to log in again with USER, which gets rejected. The only solution here seems to be giving back -ERR to the client's AUTH command, which makes it try USER instead. I'm not aware of any configuration options which makes this possible. Any other ideas? Thanks,

1 1

Creating Dovecot Master user throws "Username character disallowed by auth_username_chars : 0x2a " error
by David Okwii 27 Apr '16

27 Apr '16

Hello, Am trying to create a master user on dovecot. However, it throws dovecot: auth: plain(?,127.0.0.1): Username character disallowed by auth_username_chars: 0x2a (username: loginuser*master) ". #telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN 1 login loginuser*master mypassword 1 NO [AUTHENTICATIONFAILED] Authentication failed. # log output dovecot: auth: plain(?,127.0.0.1): Username character disallowed by auth_username_chars: 0x64 (username: master) # cat passwd.master master:{SHA}LORtG60Uqg2bPSlOB8PW2cLI0TE= #And here's the output of my dovecot -n # 2.0.16: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.2-RELEASE amd64 auth_master_user_separator = * disable_plaintext_auth = no mail_location = maildir:~/Maildir namespace { inbox = yes location = prefix = INBOX. separator = . type = private } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf driver = sql } passdb { args = /usr/local/etc/dovecot/passwd.master driver = passwd-file master = yes } protocols = imap pop3 service auth { client_limit = 6000 } service imap { process_limit = 2048 vsz_limit = 1256 M } service pop3 { process_limit = 2048 } userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf driver = sql } protocol pop3 { pop3_uidl_format = UID%u-%v } I don't know what am doing wrong. Any help would be welcome. Thanks -- Thanks & regards, David Okwii, Mobile(default): +256-791-040-262 Christ in me the Hope of Glory(Col.1:27)

1 0

Option to not add "Received" header ?
by Florent B 27 Apr '16

27 Apr '16

Hi everyone, I use Dovecot in lmtp mode to receive mails. I would like an option to tell Dovecot to not add a "Reveived" header on each server (I use a director, so Director also adds this header). Is it possible to do this ? Or could it be a future feature ? Thank you. Florent

5 6

Crash: setannotation Trash "/vendor/cmu/cyrus-imapd/expire" ("value.shared" NIL)
by Heiko Schlittermann 27 Apr '16

27 Apr '16

Hi, Using 2.2.9 (ubuntu 14.04 LTS) and sending the following command, the server crashes when I try to delete an annotation: … login … C: 2 setannotation Trash "/vendor/cmu/cyrus-imapd/expire" ("value.shared" NIL) Apr 27 09:29:16 backend1 dovecot: imap-login: Login: user=<heiko>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=6651, secured Apr 27 09:29:16 backend1 dovecot: imap(heiko): Fatal: master: service(imap): child 6651 killed with signal 11 (core dumped) Sending a real value it works: … login … C: 2 setannotation Trash "/vendor/cmu/cyrus-imapd/expire" ("value.shared" "27") S: 2 OK Completed. Is this a known bug that is fixed in later releases? Best regards from Dresden/Germany Viele Grüße aus Dresden Heiko Schlittermann -- SCHLITTERMANN.de ---------------------------- internet & unix support - Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} - gnupg encrypted messages are welcome --------------- key ID: F69376CE - ! key id 7CBF764A and 972EAC9F are revoked since 2015-01 ------------ -

3 6

apt pinning specific dovecot version
by Regan Jelčić 27 Apr '16

27 Apr '16

I currently have the dovecot-core package from wheezy-backports pinned on one of my servers to version '2.2.9', which has been working great. I now want to upgrade that to the newest version under wheezy-backports which is: dovecot-core (1:2.2.13-11~bpo70+1) but I can't figure out how to get do it. I've tried a few different formats of the name but apt-get update then apt-get dost-upgrade doesn't pick up the new version - it ignores it when trying to do an update. This is what I've got in my apt preferences and pin files... /etc/apt/preferences Explanation: Stop ALL wheezy-backports updating system. Package: * Pin: release a=wheezy-backports,n=wheezy-backports Pin-Priority: 100 /etc/apt/preferences.d/dovecot.pref Explanation: Promote wheezy-backports version of Dovecot only Package: dovecot-core /2\.2\.9/ Pin: release a=wheezy-backports Pin-Priority: 500 Can anyone advise how I get it to pull the newer version?? Thanks,

3 2

Re: dovecot Digest, Vol 156, Issue 44
by Ron Cleven 27 Apr '16

27 Apr '16

> On 26 Apr 2016, at 21:52, Hauke Fath<hf(a)spg.tu-darmstadt.de> wrote: >> > >> >On Tue, 26 Apr 2016 18:20:00 +0300, Timo Sirainen wrote: >>> >>This should be a good release.:) >> > >> >Would this release address the "reappearing emails" issue that 2.2.23 >> >introduced? > I guess you're talking about replication. I'm not aware of any specific change in v2.2.23 that could have even potentially caused it. I also don't know how I could reproduce it. Can you use git bisect to find out the specific change that broke it? > > The only thing I remember even remotely related to this ishttps://github.com/dovecot/core/commit/950a6e61d6c2dac961ce031bdd8b2895bc… but that was supposed to only fix things and I can't think of how it might break things. > > One possibility is that nothing broke this in v2.2.23. I've heard about the same issue for a long time. Maybe you just suddenly started having this problem now and it would have happened even with the old Dovecot version. I was (perhaps one of) the people who reported "reappearing emails" with 2.2.10 in the context of Maildir with replication under CentOS 7. I had spent a great deal of time making it reproducible, difficult because there was a timing element. In that context, 2.2.23 absolutely fixed the problem which was absolutely related to a timing issue with replication. If I remember right, this person was reporting a similar-sounding problem, but it did not involve replication and was not under CentOS 7. Creating a script that reproduces the problem is an important first step. Good luck.

1 0

Released Pigeonhole v0.4.14 for Dovecot v2.2.24.
by Stephan Bosch 27 Apr '16

27 Apr '16

Hello Dovecot users, The most important feature that this new release adds is the IMAPSIEVE capability, which allows executing Sieve scripts at IMAP events. It also adds the ability to obtain trace logs from Sieve execution at actual delivery (or from IMAP), rather than only using the sieve-test command line tool. This release also fixes a bug in the Sieve extprograms plugin that has been bothering a few people for a while now. Changelog v0.4.14: * The address test now allows specifying the X-Original-To header. + Implemented the Sieve imapsieve extension and its IMAP counterpart (RFC 6785) as a set of plugins. This allows running Sieve scripts at IMAP activity, rather than at delivery. There are also facilities for the familiar sieve_before/sieve_after administrator scripts. A user script is defined for a mailbox using an IMAP METADATA entry, whereas administrator scripts are configured using mailbox matching rules defined in the plugin settings. + Adjusted the Sieve ihave extension to allow capability tests to be performed at runtime. This way, scripts can be written that work both at delivery and from IMAP. + Implemented support for runtime trace debugging. This means that detailed information about which commands, actions and tests are performed is written to a file. That file is created in the configured directory, but only if that directory exists. This way, a particular user can be easily singled out for debugging. This works much like the Dovecot rawlog facility. The trace output is identical to what is produced using sieve-test with its "-t" command line option. + Added a "sieve_user_email" setting that configures the user's primary email address. This is mainly useful to have a user email address available in IMAP, where envelope data is unavailable. + Implemented the dovecot-specific "vnd.dovecot.report" extension. This allows sending report messages in the Message Abuse Reporting Format (RFC 5965). - extprograms plugin: Fixed epoll() panic caused by closing the output FD before the output stream. - Made sure that the local part of a mail address is encoded properly using quoted string syntax when it is not a dot-atom. The release is available as follows: http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.14.ta… http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.14.ta… Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

help with sieve
by dovecot＠paulkoppen.com 27 Apr '16

27 Apr '16

Dear Dovecot / Pigeonhole community, I have a very specific issue, but trying to solve this for a full day, I am now getting so bold from pulling my hairs out, I thought it was time I asked for help. I hope this is a good place for that. At my hosting provider, who have been extremely helpful by the way but are not specifically skilled in Sieve, I have a catch-all address set up: *(a)domain.org (where * is literal), with a sieve script to control how messages are forwarded. Currently my rules are of the form: if address :localpart :is ["To","Cc","Bcc"] ["name1", "name2", ...] { ... } This works most of the time, but sometimes the messages are not directly addressed to me and so they slip through the filters. I figured that using envelope would solve this, so I require envelope and then do: if envelope :localpart :is "To" ["name1", "name2", ...] { ... } But this fails. After endlessly trying different combinations I figured out that the reason for failure is that the envelope believes the "To" is actually "*(a)domain.org", so it is never going to match any of the names. However, the following test succeeds: if header :contains "Envelope-To" "name1@" { ... } From this I deduce that a previous script has already done the conversion from name1 to *, and at the point where my sieve script is run the envelope picks up the *(a)domain.org address, leaving the Envelope-To header for what it is. But I am new to this. Is that likely to be the case? Is it a common sieve set-up? And most importantly, is there a better way around the issue than testing header :contains? With kind regards, Paul

2 1

v2.2.24 released
by Timo Sirainen 26 Apr '16

26 Apr '16

http://dovecot.org/releases/2.2/dovecot-2.2.24.tar.gz http://dovecot.org/releases/2.2/dovecot-2.2.24.tar.gz.sig This should be a good release. :) * doveconf now warns if it sees a global setting being changed when the same setting was already set inside some filters. (A common mistake has been adding more plugins to a global mail_plugins setting after it was already set inside protocol { .. }, which caused the global setting to be ignored for that protocol.) * LMTP proxy: Increased default timeout 30s -> 125s. This makes it less likely to reach the timeout and cause duplicate deliveries. * LMTP and indexer now append ":suffix" to session IDs to make it unique for the specific user's delivery. (Fixes duplicate session ID warnings in stats process.) + Added dict-ldap for performing read-only LDAP dict lookups. + lazy-expunge: All mails can be saved to a single specified mailbox. + mailbox { autoexpunge } supports now wildcards in mailbox names. + doveadm HTTP API: Added support for proxy commands + imapc: Reconnect when getting disconnected in non-selected state. + imapc: Added imapc_features=modseq to access MODSEQs/HIGHESTMODSEQ. This is especially useful for incremental dsync. + doveadm auth/user: Auth lookup performs debug logging if -o auth_debug=yes is given to doveadm. + Added passdb/userdb { auth_verbose=yes|no } setting. + Cassandra: Added user, password, num_threads, connect_timeout and request_timeout settings. + doveadm user -e <value>: Print <value> with %variables expanded. - Huge header lines could have caused Dovecot to use too much memory (depending on config and used IMAP commands). (Typically this would result in only the single user's process dying with out of memory due to reaching service { vsz_limit } - not a global DoS). - dsync: Detect and handle invalid/stale -s state string better. - dsync: Fixed crash caused by specific mailbox renames - auth: Auth cache is now disabled passwd-file. It was unnecessary and it broke %variables in extra fields. - fts-tika: Don't crash if it returns 500 error - dict-redis: Fixed timeout handling - SEARCH INTHREAD was crashing - stats: Only a single fifo_listeners was supported, making it impossible to use both auth_stats=yes and mail stats plugin. - SSL errors were logged in separate "Stacked error" log lines instead of as part of the disconnection reason. - MIME body parser didn't handle properly when a child MIME part's --boundary had the same prefix as the parent.

2 2

Subject: Re: v2.2.24 released
by Joseph Tam 26 Apr '16

26 Apr '16

Timo Sirainen wrote: > - auth: Auth cache is now disabled passwd-file. It was unnecessary and > it broke %variables in extra fields. So settings like auth_cache_size = 65536 auth_cache_ttl = 86400 auth_cache_negative_ttl = 600 are ignored/useless, and passwd-file auth lookups always results in file read operation? Joseph Tam <jtam.home(a)gmail.com>

2 2

Solr with shared mailboxes
by Ricardo Branco 26 Apr '16

26 Apr '16

We have multiple logins assigned to single mailboxes, so we can give one login to different devices. Does this cause a problem with mailbox guids in solr or is the ID stored within the indexes and not related to username.

2 3

doveadm search when using solr problems
by Ricardo Branco 26 Apr '16

26 Apr '16

Is there a way when using doveadm to search a users mailbox to disable using solr plugin (without changing config file). We have found that solr does not work well with certain search types and reverting to non solr searching works much better.

2 3