- dovecot - dovecot.org

doveadm-server hangs with 100% cpu usage
by Dennis Kuhn 02 Sep '15

02 Sep '15

we have some replication issues. From time to time a doveadm-server process takes 100% cpu in the state recv_mailbox_tree_deletes on the replica. The process runs forever until it is manually killed. Strace on this process doesn't show anything. Sometimes we have several doveadm-server processes in this state, all for the same account, all with 100% CPU Load. The logfile on the master says: Error: Timeout during state=recv_mailbox_tree Error: dsync(dobby5.heinlein-support.de): I/O has stalled, no activity for 600 seconds My workaround is to delete the user directory on the replica so that the whole account is replicated again. This solves the problem for this specific account. The dovecot version is 2.2.15 on the master and 2.2.16 on the replica. Dennis Kuhn -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-57 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

3 4

Moving mails from shared folder to shared folder doesn't work
by Peer Heinlein 02 Sep '15

02 Sep '15

Hi, having the attached configuration with Dovecot 2.2.9, Dovecot's crashing when moving a mail from a shared folder into another shared folder. Moving that mail into a "real" folder of the user or moving that mail from a real folder into the shared folder is always working. But moving from a shared folder into a shared folder doesn't work. Sep 2 11:47:42 mail02 dovecot: imap(peer.heinlein(a)example.com): Panic: file mail-index.c: line 380 (mail_index_keywords_unref): assertion failed: (keywords->refcount > 0) Sep 2 11:47:42 mail02 dovecot: imap(peer.heinlein(a)example.com): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x62792) [0x7f87e455f792] -> /usr/lib/dovecot/libdovecot.so.0(+0x627f6) [0x7f87e455f7f6] -> /usr/lib/dovecot/libdovecot.so.0(+0x1c5ca) [0x7f87e45195ca] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xb032f) [0x7f87e487232f] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_copy+0x75) [0x7f87e4838315] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_move+0x1d) [0x7f87e48383dd] -> dovecot/imap [peer.heinlein(a)example.com 172.31.xxx.xxx UID move](+0xec4a) [0x7f87e4cfbc4a] -> dovecot/imap [peer.heinlein(a)example.com 172.31.xxx.xxx UID move](command_exec+0x3d) [0x7f87e4d06acd] -> dovecot/imap [peer.heinlein(a)example.com 172.31.xxx.xxx UID move](+0x18b60) [0x7f87e4d05b60] -> dovecot/imap [peer.heinlein(a)example.com 172.31.xxx.xxx UID move](+0x18c4d) [0x7f87e4d05c4d] -> dovecot/imap [peer.heinlein(a)example.com 172.31.xxx.xxx UID move](client_handle_input+0x11d) [0x7f87e4d05edd] -> dovecot/imap [peer.heinlein(a)example.com 172.31.xxx.xxx UID move](client_input+0x72) [0x7f87e4d06292] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f87e456f5f6] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xaf) [0x7f87e45706cf] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f87e456f568] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f87e451e0c3] -> dovecot/imap [peer.heinlein(a)example.com 172.31.xxx.xxx UID move](main+0x303) [0x7f87e4d10043] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7f87e4192c8d] -> dovecot/imap [peer.heinlein(a)example.com 172.31.xxx.xxx UID move](+0xd0e9) [0x7f87e4cfa0e9] Sep 2 11:47:42 mail02 dovecot: imap(peer.heinlein(a)example.com): Fatal: master: service(imap): child 18707 killed with signal 6 (core dumps disabled) Peer -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-42 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

1 0

Single Instance Storage after the fact
by Joe Beaubien 02 Sep '15

02 Sep '15

Hi everyone, I tried to find info about this online, but I couldn't find anything talking specifically about what I am trying to accomplish. I am sending and receiving the same attachments pretty often and as a result my email accounts are growing much more rapidly than I would like. *My goal* is to set up a second instance of Dovecot with SIS enabled and transfer everything over to this new Dovecot setup. I was thinking of simply running a dsync backup from the old instance and then a dsync backup -R on the new instance with SIS. Would this effectively create a new set of mailboxes without attachments (and a new folder full of attachments)? If not, can someone point me to information on how to accomplish this? Best regards, Joe B.

1 0

Problem with the Path argument in pigeonhole 0.4.3 at ubuntu 14.04
by Jakob-Matthias Böttger 31 Aug '15

31 Aug '15

Hello list members I want dovecot managesieve to store its config unter ~/.dovecot.sieve additionally dovecot should read as sieve_after the file ~/.sieve It's working fine BUT dovecot managesieve is always symlinking the sieve file at activation to ~/.sieve and not to ~/.dovecot.sieve as i configured it. Any idears about this strange behaviour? dovecot is configured as follows # 2.2.9: /etc/dovecot/dovecot.conf # OS: Linux 3.13.0-53-generic x86_64 Ubuntu 14.04.3 LTS auth_mechanisms = plain login dict { acl = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext expire = mysql:/etc/dovecot/dovecot-dict-expire.conf.ext } disable_plaintext_auth = no lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = *,[::] log_timestamp = "%Y-%m-%d %H:%M:%S " mail_plugins = " expire quota acl" mail_privileged_group = vmail maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = prefix = separator = / type = private } namespace { list = children location = maildir:%%h/Maildir:INDEXPVT=~/Maildir/shared/%%u prefix = shared/%%u/ separator = / subscriptions = yes type = shared } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { acl = vfile acl_shared_dict = proxy::acl expire = Trash expire2 = Trash/* expire3 = Spam expire4 = Junk expire_dict = proxy::expire quota = dict:user::file:/var/vmail/%d/%n/.quotausage sieve = file:~/sieve;active=~/.dovecot.sieve sieve_after = ~/.sieve } postmaster_address = admin(a)domain.tld protocols = imap lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } user = root } service dict { unix_listener dict { group = vmail mode = 0660 user = vmail } } service imap-login { client_limit = 1000 process_limit = 500 } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl = required ssl_cert = </etc/ssl/own_certs/certs/stern.domain.tld.chain.crt ssl_key = </etc/ssl/own_certs/private/stern.domain.tld.key ssl_protocols = !SSLv2 !SSLv3 userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { mail_max_userip_connections = 100 mail_plugins = quota imap_quota expire acl imap_acl } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } protocol lda { mail_plugins = sieve quota } protocol lmtp { mail_plugins = sieve quota }

2 1

HG port=0 changes still problematic
by Thomas Leuxner 31 Aug '15

31 Aug '15

Aug 30 12:35:04 nihlus.leuxner.net systemd[1]: Started Dovecot IMAP/POP3 email server. Aug 30 12:35:04 nihlus.leuxner.net dovecot[60404]: doveconf: Fatal: Error in configuration file /etc/dovecot/conf.d/10-master.conf line 24: Invalid port number 0 Aug 30 12:35:04 nihlus.leuxner.net systemd[1]: dovecot.service: main process exited, code=exit System with HG e1c7fcd62813 fails on inet_listener imaps { port = 0 #port = 993 #ssl = yes } Regards Thomas

3 3

Post-migration questions
by Grant 29 Aug '15

29 Aug '15

I just migrated from courier-imap to dovecot and dovecot is a lot faster. My only client is webmail on the same server as dovecot. Max ~10 users. Should I still run imapproxy like I did with courier? Does dovecot periodically empty the trash folder like courier does? I reduced the number of processes courier was running to save RAM and improve performance. Are there any performance tweaks I should consider for dovecot? - Grant

2 2

IMAP hibernate feature committed
by Timo Sirainen 29 Aug '15

29 Aug '15

http://hg.dovecot.org/dovecot-2.2/rev/64c73e6bd397 Today I finally committed the "imap-hibernate" feature that I first started developing about a year ago (and had been thinking about for several years before that). The main purpose here is to reduce the number of imap processes and the amount of memory they use by moving IDLEing connections into imap-hibernate processes where they are waiting for something to happen (changes to the mailbox or IMAP client to do something). Mailbox changes are noticed only if inotify/kqueue is enabled, so without them the hibernation feature won't work well. For now only the IMAP connections that are in IDLE can be hibernated. In theory non-IDLEing connections could also be hibernated, but the main problem here is that if EXPUNGEs can't be sent at the time the hibernation is over, the current code can't handle it. They would require recreating a view that contains such expunged messages, which could be possible with some extra work. Some IMAP extensions aren't supported yet: - NOTIFY: This would just need to import/export the NOTIFY state. Also hibernation could be done at any time if VANISHED replies could be sent to the selected mailbox. - SEARCH=CONTEXT: A bit more troublesome extension to support. I'm not sure how big the trouble would be. It's rarely used though. - COMPRESS: The [de]compression code would need to be moved to login process instead of being done in imap-compress plugin. This would be a larger change, although it's also useful for various other purposes. The hibernation can be enabled for now simply by setting imap_hibernate_timeout setting to non-zero, which controls how long to wait after client has issued IDLE (and nothing happens) until the process hibernates. Some future work might include: - Moving the hibernation all the way to the first Dovecot proxy layer to avoid the need for imap-hibernate process at all. (Also moving the COMPRESS handling all the way there.) - Dynamically adjusting when the client should be hibernated instead of just a fixed imap_hibernate_timeout setting. Especially try to avoid such a situation where the hibernation is almost always terminated soon after it started. Although that probably is unlikely, so maybe not worth the trouble to prevent.. - Hibernation could be used to control the load of the server. If it's running too slow or if there are already too many imap processes, some of the connections could be moved to hibernation stage. Or just kept in hibernation for a while longer even after the imap process would normally be recreated (e.g. wait for several minutes before reporting new emails, or several seconds before replying to DONE). - The EXPUNGE/VANISHED and FETCH FLAGS replies aren't sent asynchronously, but instead fully buffered to the output buffer. This works as long as the list of changes after hibernation isn't huge, but otherwise it's wasting a lot of memory. - Maybe support non-inotify/kqueue change notifications from lib-storage. This could be complicated though to do efficiently. Or a simple way would be to just send a UDP or UNIX datagram packet on all changes to all the imap-hibernate processes and see if anybody cares about those. I'm not sure how efficient that would be.

4 13

virtual users with postfix
by Andreas Meyer 29 Aug '15

29 Aug '15

Hello! My passwd file looks like this: info@nimmini.de:{CRAM-MD5}e33cbd144b372a9c919228923464c806b57e35df2d6d1484ceaabe7e3530cd58:5000:5000::/var/spool/vhosts/nimmini.de/info::userdb_mail=maildir:~/ When I login for the first time, I see this in the log: Aug 29 09:52:57 imap(info(a)nimmini.de): Error: mkdir_parents(/var/lib/dovecot/db) failed: Permission denied Aug 29 09:52:57 imap(info(a)nimmini.de): Error: acl: dict commit failed Although the mailbox "info" is created with this content: drwx------ 2 5000 5000 4096 29. Aug 09:52 cur -rw------- 1 5000 5000 0 29. Aug 09:52 dovecot-acl-list -rw------- 1 5000 5000 272 29. Aug 09:52 dovecot.index.log -rw------- 1 5000 5000 72 29. Aug 09:52 dovecot.mailbox.log -rw------- 1 5000 5000 51 29. Aug 09:52 dovecot-uidlist -rw------- 1 5000 5000 8 29. Aug 09:52 dovecot-uidvalidity -r--r--r-- 1 5000 5000 0 29. Aug 09:52 dovecot-uidvalidity.55e164dc drwx------ 5 5000 5000 4096 29. Aug 09:52 .Drafts drwx------ 2 5000 5000 4096 29. Aug 09:52 new drwx------ 5 5000 5000 4096 29. Aug 09:52 .Sent -rw------- 1 5000 5000 18 29. Aug 09:52 subscriptions drwx------ 2 5000 5000 4096 29. Aug 09:52 tmp drwx------ 5 5000 5000 4096 29. Aug 09:52 .Trash /var/lib looks like this: ... drwxr-xr-x 2 root root 4096 29. Aug 00:28 dovecot ... Should the folder dovecot be owned by the user dovecot? What causes the error above? Greetings Andreas

4 9

Dovecot proxy and password scheme updating
by efs efefsfse 28 Aug '15

28 Aug '15

Hello, I run a dovecot proxy (which is doing authentification itself) and a dovecot backend on separate boxes. I want to change the actual password scheme. Since postlogin scripting is not supported by proxies and %w variable is not forwaded to dovecot backend is there any way that I can update the password scheme with my current setup ? Thanks in advance.

1 0

Allow delivery to existing accounts only with LDAP and static
by Miloslav Hůla 28 Aug '15

28 Aug '15

Hi, we are using LDAP binding as a passdb, and static with allow_all_users=yes as an userdb. Works fine, but problem is, Maildirs are created for non-existent accounts too. We would like to prevent it. The LDAP binding does not supporta user lookups. Is the correct way to use checkpassword as a passdb before LDAP, check for account existency here and: result_success=continue result_failure=return-fail ? Thank you, regards, Miloslav

2 4

Merging maildirs
by Petter Gunnerud 28 Aug '15

28 Aug '15

Hi List How do I merge files from one maildir into another maildir? Long version: I've been using dovecot/postfix for a 12 user environment for several years, and today was the first time I ran into an issue I could not solve from reading the documentation. The server is gentoo running on esxi. A few times a year I've made a snapshot of the server and copied the files to my home esxi server as a full system backup. 5 days ago the internet connection at the office broke, and I decided to power on the last copy of the server at my home and change public dns so that users could access their new mails via webmail from this spare server. (I didn't allow imap through firewall.) Now the network at the office is back. DNS is updated so that mails are delivered to the office server again. But all the mails sent / received during those 5 days is only at my house. How can I merge those into the office server?I'd like to do this as a server administrator. I do not want to have each user forward the mails to them self from the temporarily webmail. I tried to just copy the mail files on my own account - like I did once when I used courier-imap, but that did not work with dovecot. I hope someone has an idea of how to solve this.

3 2

Panic in service(log)
by Eugene Paskevich 27 Aug '15

27 Aug '15

Hello, I'm using the Debian builds of dovecot-2.2 by S[r]us. Today I started getting the following panic: log: Panic: file priorityq.c: line 122 (priorityq_remove_idx): assertion failed: (idx < count) log: Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x7f1ae) [0x7fd368dc31ae] -> /usr/lib/dovecot/libdovecot.so.0(+0x7f269) [0x7fd368dc3269] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fd368d6c81e] -> /usr/lib/dovecot/libdovecot.so.0(+0xa0de8) [0x7fd368de4de8] -> /usr/lib/dovecot/libdovecot.so.0(priorityq_remove+0xb) [0x7fd368de4eeb] -> /usr/lib/dovecot/libdovecot.so.0(+0x9179c) [0x7fd368dd579c] -> /usr/lib/dovecot/libdovecot.so.0(master_status_update+0x93) [0x7fd368d71263] -> /usr/lib/dovecot/libdovecot.so.0(+0x2ecf3) [0x7fd368d72cf3] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x4c) [0x7fd368dd6b2c] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xc5) [0x7fd368dd7e35] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x25) [0x7fd368dd6bb5] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7fd368dd6d58] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fd368d72213] -> dovecot/log(main+0x11c) [0x555e9f81771c] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7fd3689bcb45] -> dovecot/log(+0x277d) [0x555e9f81777d] master: Error: service(log): child 28845 killed with signal 6 (core dumps disabled) Could anyone please advise? -- Eugene Paskevich | *==)----------- | Plug me into eugene(a)raptor.kiev.ua | -----------(==* | The Matrix

2 2

mailbox deletion is not replicated correctly
by Dennis Kuhn 27 Aug '15

27 Aug '15

i can't delete several folders at once. I have a folder structure like folder1/folder2/folder3 (we use slash as hierarchy separator). When i delete folder1 server1 executes the command correctly Apr 16 13:44:28 server1 dovecot: imap(d.kuhn(a)heinlein-support.de): Mailbox deleted: INBOX/Trash/folder1/folder2/folder3 Apr 16 13:44:28 server1 dovecot: imap(d.kuhn(a)heinlein-support.de): Mailbox deleted: INBOX/Trash/folder1/folder2 Apr 16 13:44:28 server1 dovecot: imap(d.kuhn(a)heinlein-support.de): Mailbox deleted: INBOX/Trash/folder1 but the replica server2 reverses the order: Apr 16 13:44:29 server2 dovecot: dsync-server(d.kuhn(a)heinlein-support.de): Mailbox deleted: INBOX/Trash/folder1 Apr 16 13:44:29 server2 dovecot: dsync-server(d.kuhn(a)heinlein-support.de): Mailbox deleted: INBOX/Trash/folder1/folder2 Apr 16 13:44:29 server2 dovecot: dsync-server(d.kuhn(a)heinlein-support.de): Mailbox deleted: INBOX/Trash/folder1/folder2/folder3 This creates the folder INBOX/Trash/folder1/folder2 on server2 again which replicates back to server1. Regards, Dennis Kuhn -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-57 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

3 4

mail_log proposal: recipient
by Peter Chiochetti 27 Aug '15

27 Aug '15

As Timo seems to be on a committing spree; I'd like to propose that in the mail_log_fields the recipient would be available. Like probably many dovecot users, my MUAs save to Sent; so when grepping the log to learn etc. that would just be useful Kind regards -- peter

2 2

Duplicate folder names
by Paulo Matos 26 Aug '15

26 Aug '15

Hi, I have setup message filtering and for example, I might move a message which a given sender to folder special/. This folder is created and shows up twice in INBOX/special/ and special/. They are however exactly the same folder. If I subscribe to one I am automatically subscribed to the other and viceversa. Not too happy with this configuration. I have a feeling this is related to namespaces but I am not sure in which way to configure things in order to have only INBOX/special but not special/. How can I set this up. My current configuration is: $ dovecot -n # 2.2.18: /etc/dovecot/dovecot.conf # OS: Linux 4.1.0-x86_64-linode59 x86_64 Fedora release 22 (Twenty Two) ext4 auth_debug = yes auth_mechanisms = plain login digest-md5 cram-md5 auth_verbose = yes auth_verbose_passwords = yes default_internal_user = root imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_debug = yes mail_location = maildir:/home/vmail/%d/%n/Maildir maildir_very_dirty_syncs = yes mbox_write_locks = fcntl namespace { inbox = yes location = prefix = INBOX. separator = . type = private } namespace inbox { location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } postmaster_address = pmatos protocols = imap quota_full_tempfail = yes service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { mode = 0600 user = vmail } user = $default_internal_user } ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes driver = static } protocol lda { auth_socket_path = /var/run/dovecot/auth-master deliver_log_format = msgid=%m: %$ log_path = /home/vmail/dovecot-deliver.log } protocol imap { mail_max_userip_connections = 100 } Regards, Paulo Matos

2 2

PROXY protocol
by Hoggins! 26 Aug '15

26 Aug '15

Hello folks, Any plans on implementing the PROXY protocol to allow Dovecot being behind a TCP proxy, and still logging the real IP address of the users ? See : http://blog.haproxy.com/haproxy/proxy-protocol/ Thanks !

6 15

Shared Mailboxes Not Visible
by Mark Usrey 26 Aug '15

26 Aug '15

OK, gurus, I've spent the last 2 days crawling through all of the posts and web postings regarding shared folders, and I simply cannot get it to work. I'm sure that there is something simple that I've overlooked, but cannot for the life of me see it :) Here's my current config: # 2.2.9: /etc/dovecot/dovecot.conf # OS: Linux 3.16.0-46-generic x86_64 Ubuntu 14.04.3 LTS xfs auth_mechanisms = plain login debug_log_path = /var/log/debug.log listen = * mail_gid = mail mail_location = mdbox:/mail/data/private/%n:INDEX=/mail/index/private/%n mail_plugins = acl notify mail_log stats mail_privileged_group = mail namespace { list = children location = mdbox:/mail/data/shared/%%n:INDEXPVT=/mail/index/private/%n/shared_indices/%%n prefix = Shared/%%n/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = file:/mail/dict/shared-mailboxes autocreate = Trash autocreate2 = Spam autocreate3 = Drafts autocreate4 = Junk autosubscribe = Trash autosubscribe2 = Spam autosubscribe3 = Drafts autosubscribe4 = Junk mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid size subject stats_refresh = 30 secs stats_track_cmds = yes } protocols = " imap lmtp" service auth { unix_listener /var/spool/postfix/private/auth { user = postfix } } service dict { unix_listener dict { group = mail mode = 0600 user = root } } service imap-login { process_min_avail = 5 service_count = 0 } service imap { process_limit = 4096 } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service stats { fifo_listener stats-mail { group = mail mode = 0660 user = root } } ssl_ca = </etc/dovecot/thawte2.crt ssl_cert = </etc/dovecot/dovecot2.pem ssl_key = </etc/dovecot/private/solaray-sunglasses.com.key userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { postmaster_address = postmaster(a)solaray-sunglasses.com } protocol imap { mail_plugins = acl notify mail_log stats imap_acl imap_stats } All of our users are "real" (no virtual users or domains) and only a single domain supported. We have a user, rself, that is attempting to share his inbox with a few others that also need access to it. So the corresponding ACL files: root@srv56:/mail/data/shared/rself# ls -la /mail/data/shared/rself/ total 20 drwx------ 4 rself mail 79 Aug 24 15:22 . drwxrwx--- 7 mail mail 71 Aug 24 16:01 .. -rw------- 1 rself mail 17 Aug 24 15:22 dovecot-acl-list drwx------ 10 rself mail 130 Aug 24 12:28 mailboxes drwx------ 2 rself mail 12288 Aug 25 16:25 storage -rw------- 1 rself mail 70 Aug 24 12:28 subscriptions And the contents of dovecot-acl-list: root@srv56:/mail/data/shared/rself# cat dovecot-acl-list 1440447778 INBOX root@srv56:/mail/data/shared/rself# And the mailbox-specific files: root@srv56:/mail/data/shared/rself/mailboxes/INBOX/dbox-Mails# ls -la total 4 drwx------ 2 rself mail 24 Aug 25 08:16 . drwx------ 3 rself mail 23 Aug 24 12:28 .. -rw------- 1 rself mail 24 Aug 24 15:22 dovecot-acl root@srv56:/mail/data/shared/rself/mailboxes/INBOX/dbox-Mails# Content: root@srv56:/mail/data/shared/rself/mailboxes/INBOX/dbox-Mails# cat dovecot-acl user=musrey akxeilprwts root@srv56:/mail/data/shared/rself/mailboxes/INBOX/dbox-Mails# Now, the global ACL dictionary (just a flat file, not enough users to justify SQL :) root@srv56:~# ls -la /mail/dict/ total 12 drwxrwxr-x 2 root mail 4096 Aug 24 18:05 . drwxr-xr-x 5 root root 4096 Aug 23 08:51 .. -rw-r--r-- 1 rself mail 40 Aug 24 18:05 shared-mailboxes And contents: root@srv56:~# cat /mail/dict/shared-mailboxes shared/shared-boxes/user/musrey/rself 1 root@srv56:~# So, as far as I can tell from my RTFM activities, I think the configuration is correct. Now, I go to attempt to check the ACL using doveadm, and I get this: root@srv56:~# doveadm acl debug -u musrey Shared/rself/INBOX doveadm(musrey): Error: Can't open mailbox Shared/rself/INBOX: Mailbox doesn't exist: Shared/rself/INBOX root@srv56:~# WTH, over? So, not thinking this is an ACL issue, but simply a namespace issue - either I have the shared namespace configured incorrectly, or I'm using it incorrectly in attempting to identify rself's INBOX when trying to verify that the ACL is working. So, I thought to myself, let's try a mailbox list, so I executed root@srv56:~# doveadm mailbox list -u musrey ACT! ACT!/General AES Outdoors AES Outdoors/Christy AES Outdoors/Gwen .... (many, many mailboxes in here - I should probably eliminate some of them :) VMWare Watchguard Xata Corporation Xata Corporation/Mike Brossman Xata Corporation/Mike Uremovich INBOX root@srv56:~# But no "Shared" or "rself" to be found. Help, please. I'm quickly going bald over this one. -- *Mark Usrey* Director of Information Technologies *Solaray LLC Solaray LLC* 620 S. Linden Sapulpa, Ok 74066 (918) 227-0722 Ext. 527

1 0

sieve_after seems to ignored ?
by Per Jessen 25 Aug '15

25 Aug '15

sieve and managesieve are both working fine, have been for years. Now I want to add a sieve_after script: /etc/dovecot/conf.d/90-sieve.conf : plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_before = sieve_after = ~/sieve/personal.sieve sieve_subaddress_sep = + } I have compiled ~/sieve/personal.sieve to ~/sieve/personal.svbin, but it doesn't seem to be read. Any hints? thanks Per Jessen -- Per Jessen, Zürich (17.2°C) http://www.hostsuisse.com/ - dedicated server rental in Switzerland.

3 6

ldap attribute modifiers. how to lowercase non ASCII
by matthias lay 24 Aug '15

24 Aug '15

hi all, I encountered some problem with lowercasing chars like an "Ä" with user_attrs like this: user_attrs = uid=home=/mail/%Lu, =myvar=%L{ldap:uid} the Ä doesnt get lower cased in both cases # doveadm user BLÄTULA field value user blÄtula uid vmail gid vmail home /mail/blÄtula mail maildir:~/Maildir:LAYOUT=fs:INBOX=~/Maildir/INBOX myvar blÄtula somebody knows if there a fix for that? Greetz Matze

2 2

Store ACL files within shared mailbox / rename shared folder problem
by Chris Laif 24 Aug '15

24 Aug '15

Hi. If $otheruser shares a mailbox to $myuser, my private index is stored in *my* Maildir, according to this template (from the dovecot docs): mail_location = maildir:%%h/Maildir:INDEXPVT=%h/Maildir/shared/%%u If $otheruser renames the shared mailbox, all my private mail flags (Seen) are lost because my mailclient couldn't find the private index anymore. Is there any way to store the private index within the shared mailbox? If $otheruser renames the mailbox, the index will be 'migrated' as well. Something like this: /data/mails/$otheruser/Maildir/.MagicSharedFolder/shared/$myuser.dovecot.index.pvt.log I see no way on how to do craft a INDEXPVT for this. Kind regards, Chris

2 1

plugin antispam sa-learn run program failed with exit code -1
by Guillaume Lakano - DOVECOT 24 Aug '15

24 Aug '15

Hello ! I've installed iRedMail on an Ubuntu Server 14.04.1 I'm not the only one on the iRedMail forum to have the problem, but the developpers of iRedMail doesn't found the problem and advice me to ask you directly. When I want to move an email directly to /Junk/ this not works. In Thunderbird, the error is : "[SERVERBUG] failed to send mail" In RoundCube, the error is : "Server Error: UID MOVE: failed to send mail ." But, if we firstly delete the email, then move the email from /Trash/ to /Junk/ this works. Here is the package versions: dovecot 2.2.9-1ubuntu2.1 dovecot-antispam 2.0+20130822-2build1 spamassassin 3.4.0-1ubuntu2.1 I have enabled antispam-debug in syslog, and the sa-learn seems to return an error: Aug 20 20:21:13 mail imap: antispam: plugin initialising (2.0-notgit) Aug 20 20:21:13 mail imap: antispam: verbose debug enabled Aug 20 20:21:13 mail imap: antispam: "Junk" is exact match spam folder Aug 20 20:21:13 mail imap: antispam: no unsure folders Aug 20 20:21:13 mail imap: antispam: "Trash" is exact match trash folder Aug 20 20:21:13 mail imap: antispam: pipe backend spam argument = --spam Aug 20 20:21:13 mail imap: antispam: pipe backend not-spam argument = --ham Aug 20 20:21:13 mail imap: antispam: pipe backend program = /usr/bin/sa-learn Aug 20 20:21:13 mail imap: antispam: pipe backend program arg[0] = -D --username=guillaume.XXXX(a)nydomain.com Aug 20 20:21:13 mail imap: antispam: pipe backend tmpdir /tmp Aug 20 20:21:14 mail imap: antispam: mailbox_is_unsure(Junk): 0 Aug 20 20:21:14 mail imap: antispam: mailbox_is_trash(INBOX): 0 Aug 20 20:21:14 mail imap: antispam: mailbox_is_trash(Junk): 0 Aug 20 20:21:14 mail imap: antispam: mail copy: from trash: 0, to trash: 0 Aug 20 20:21:14 mail imap: antispam: mailbox_is_spam(INBOX): 0 Aug 20 20:21:14 mail imap: antispam: mailbox_is_spam(Junk): 1 Aug 20 20:21:14 mail imap: antispam: mailbox_is_unsure(INBOX): 0 Aug 20 20:21:14 mail imap: antispam: mail copy: src spam: 0, dst spam: 1, src unsure: 0 Aug 20 20:21:14 mail imap: antispam: running mailtrain backend program /usr/bin/sa-learn Aug 20 20:21:14 mail imap: antispam: running mailtrain backend program /usr/bin/sa-learn Aug 20 20:21:14 mail imap: antispam: running mailtrain backend program parameter 1 -D --username=guillaume.XXXX(a)mydomain.com Aug 20 20:21:14 mail imap: antispam: running mailtrain backend program parameter 2 --spam Aug 20 20:21:16 mail imap: antispam: run program failed with exit code -1 There is no other log in /var/log/dovecot.log or /var/log/mail.log Here is my dovecot configuration: # dovecot -n # 2.2.9: /etc/dovecot/dovecot.conf # OS: Linux 3.13.0-62-generic x86_64 Ubuntu 14.04.1 LTS auth_master_user_separator = * auth_mechanisms = PLAIN LOGIN dict { acl = mysql:/etc/dovecot/dovecot-share-folder.conf quotadict = mysql:/etc/dovecot/dovecot-used-quota.conf } first_valid_uid = 2000 last_valid_uid = 2000 listen = * [::] log_path = /var/log/dovecot.log mail_gid = 2000 mail_location = maildir:%Lh/Maildir/:INDEX=%Lh/Maildir/ mail_plugins = quota mailbox_alias acl mail_uid = 2000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { auto = no special_use = \Sent } mailbox Spam { auto = no special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / type = private } namespace { list = children location = maildir:%%Lh/Maildir/:INDEX=%%Lh/Maildir/Shared/%%u prefix = Shared/%%u/ separator = / subscriptions = yes type = shared } passdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } passdb { args = /etc/dovecot/dovecot-master-users driver = passwd-file master = yes } plugin { acl = vfile acl_shared_dict = proxy::acl antispam_backend = pipe antispam_debug_target = syslog antispam_pipe_program = /usr/bin/sa-learn antispam_pipe_program_args = --username=%Lu antispam_pipe_program_notspam_arg = --ham antispam_pipe_program_spam_arg = --spam antispam_spam = Junk antispam_trash = Trash antispam_verbose_debug = 1 auth_socket_path = /var/run/dovecot/auth-master mailbox_alias_new = Sent Messages mailbox_alias_new2 = Sent Items mailbox_alias_old = Sent mailbox_alias_old2 = Sent quota = dict:user::proxy::quotadict quota_rule = *:storage=1G quota_warning = storage=85%% quota-warning 85 %u quota_warning2 = storage=90%% quota-warning 90 %u quota_warning3 = storage=95%% quota-warning 95 %u sieve = %Lh/sieve/dovecot.sieve sieve_before = /var/vmail/sieve/dovecot.sieve sieve_dir = %Lh/sieve sieve_execute_bin_dir = /usr/lib/dovecot/sieve-execute sieve_filter_bin_dir = /usr/lib/dovecot/sieve-filter sieve_global_dir = /var/vmail/sieve sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.filter +vnd.dovecot.execute sieve_pipe_bin_dir = /usr/lib/dovecot/sieve-pipe sieve_plugins = sieve_extprograms } protocols = pop3 imap sieve lmtp service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { group = vmail mode = 0666 user = vmail } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } service dict { unix_listener dict { group = vmail mode = 0660 user = vmail } } service imap-login { process_limit = 500 service_count = 1 } service lmtp { executable = lmtp -L inet_listener lmtp { address = 127.0.0.1 port = 24 } process_min_avail = 5 unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } user = vmail } service managesieve-login { inet_listener sieve { address = 127.0.0.1 port = 4190 } } service pop3-login { service_count = 1 } service quota-warning { executable = script /usr/local/bin/dovecot-quota-warning.sh unix_listener quota-warning { group = vmail mode = 0660 user = vmail } } ssl = required ssl_cert = </etc/ssl/certs/iRedMail.crt ssl_cipher_list = ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA ssl_dh_parameters_length = 2048 ssl_key = </etc/ssl/private/iRedMail.key ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 userdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } protocol lda { auth_socket_path = /var/run/dovecot/auth-master lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes log_path = /var/log/dovecot-sieve.log mail_plugins = quota mailbox_alias acl sieve postmaster_address = root } protocol lmtp { info_log_path = /var/log/dovecot-lmtp.log lmtp_save_to_detail_mailbox = yes mail_plugins = quota sieve postmaster_address = postmaster recipient_delimiter = + } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_max_userip_connections = 20 mail_plugins = quota mailbox_alias acl imap_quota imap_acl antispam } protocol pop3 { mail_max_userip_connections = 20 mail_plugins = quota mailbox_alias acl pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } I don't known if it's a problem related to dovecot or to spamassassin. If you could help me to solve the problem, this will be really appreciated :) Regards

4 6

Delivering email to Maildir PreINBOX
by Paulo Matos 24 Aug '15

24 Aug '15

Hi all, I have a running dovecot with: $ dovecot -n # 2.2.18: /etc/dovecot/dovecot.conf # OS: Linux 4.1.0-x86_64-linode59 x86_64 Fedora release 22 (Twenty Two) ext4 auth_debug = yes auth_mechanisms = plain login digest-md5 cram-md5 auth_verbose = yes auth_verbose_passwords = yes default_internal_user = root imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_debug = yes mail_location = maildir:/home/vmail/%d/%n/Maildir maildir_very_dirty_syncs = yes mbox_write_locks = fcntl namespace { inbox = yes location = prefix = INBOX. separator = . type = private } namespace inbox { location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } postmaster_address = pmatos protocols = imap quota_full_tempfail = yes service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { mode = 0600 user = vmail } user = $default_internal_user } ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes driver = static } protocol lda { auth_socket_path = /var/run/dovecot/auth-master deliver_log_format = msgid=%m: %$ log_path = /home/vmail/dovecot-deliver.log } protocol imap { mail_max_userip_connections = 100 } I started to filter my email with imapfilter running on the same host as dovecot. I would therefore like to deliver email to a folder called PreINBOX so that imapfilter then sorts the email and ends up delivering only the useful email to INBOX. How can I change the name of the inbox dovecot delivers to? Best, -- Paulo Matos

1 1

IMAP Folder Mail Separator
by Alex 23 Aug '15

23 Aug '15

Hi, I have a fedora21 install with dovecot-2.2.18, and when creating a new subfolder with thunderbird, the actual folder name is "Folder1^Folder2" with a carat as a separator, instead of creating Folder2 in the Folder1 directory. Is this a thunderbird problem? I don't recall having this problem prior to upgrading to fedora21, so thought maybe it's a dovecot problem. Maybe the separator character is customizable? Thanks, Alex

3 5

migrating servers
by chris 23 Aug '15

23 Aug '15

Hi I am trying to migrate from a Centos dovecot 1.0.7 install to a debian dovecot 2.1.7 install. I thought simply replicating the maildirs would be fine (using rsync) but when I fetch mail from the new server using IMAP thunderbird wants to download all the messages again as duplicates. I searched the wiki over to see if I could find a solution and while it appeared I could use doveadm backup that seems to only work pushing changes from the new server to the old (wrong direction) and that program does not exist on the earlier version of dovecot on the old server. If I can be very blunt the documentation on the wiki assumes far too much knowledge from the reader. It is often hard to decipher exactly what is meant by many of the obtuse instructions. But that is an aside can anyone give me pointers on how to do this migration for all my users so they don't need to sort through hundreds of duplicated emails? Chris

2 1

Delivering email to Maildir PreINBOX
by Paulo Matos 22 Aug '15

22 Aug '15

Hi all, I have a running dovecot with: $ dovecot -n # 2.2.18: /etc/dovecot/dovecot.conf # OS: Linux 4.1.0-x86_64-linode59 x86_64 Fedora release 22 (Twenty Two) ext4 auth_debug = yes auth_mechanisms = plain login digest-md5 cram-md5 auth_verbose = yes auth_verbose_passwords = yes default_internal_user = root imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_debug = yes mail_location = maildir:/home/vmail/%d/%n/Maildir maildir_very_dirty_syncs = yes mbox_write_locks = fcntl namespace { inbox = yes location = prefix = INBOX. separator = . type = private } namespace inbox { location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } postmaster_address = pmatos protocols = imap quota_full_tempfail = yes service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { mode = 0600 user = vmail } user = $default_internal_user } ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes driver = static } protocol lda { auth_socket_path = /var/run/dovecot/auth-master deliver_log_format = msgid=%m: %$ log_path = /home/vmail/dovecot-deliver.log } protocol imap { mail_max_userip_connections = 100 } I started to filter my email with imapfilter running on the same host as dovecot. I would therefore like to deliver email to a folder called PreINBOX so that imapfilter then sorts the email and ends up delivering only the useful email to INBOX. How can I change the name of the inbox dovecot delivers to? Best, -- Paulo Matos

4 5

Error: User initialization failed
by ＠lbutlr 19 Aug '15

19 Aug '15

OK, I obviously forgot something when setting up new user accounts (which I did via postfix admin to add them to the MySQL database): dovecot: lda(chance(a)example.com): Error: User initialization failed: Namespace '': Ambiguous mail location setting, don't know what to do with it: /usr/local/virtual/chance@ example.com (try prefixing it with mbox: or milder:) I have lots of mysql users defined and working, but do I need to manually create the mail store for new ones? (Sorry, it’s been quite a long time since I had to add accounts). -- You start a conversation you can't even finish it You're talkin' a lot, but you're not sayin' anything When I have nothing to say, my lips are sealed Say something once, why say it again?

2 3

logging into user mailboxes with admin credentials
by Noam Birnbaum 19 Aug '15

19 Aug '15

Hey folks, We are planning a migration away from Dovecot (sorry) to Google Apps and are trying to figure out how to migrate the contents of user mailboxes to the new provider. Normally we would use an IMAP migration tool to log into each user's mailbox on the old and new providers and transfer the data that way. However, there is no central directory service; all accounts are local. We have a large number of users and for both management and security reasons it's not feasible to compile a list of all IMAP passwords. Is there a way to log into user IMAP accounts on Dovecot using a central administrative credential? Thanks! Warmest and bestest, Noam 510-332-3828 cell Noam Birnbaum Mac Daddy http://www.maccentricsolutions.com 877.luv.macs x666 tweet @noamb Tech support ---> 877.luv.macs or support(a)maccentricsolutions.com Luvvv us? _Yelp us!_ <http://www.yelp.com/biz/maccentric-solutions-san-francisco>

2 1

NFSv4 delegation
by brd 18 Aug '15

18 Aug '15

hi all, i'm managing a large installation of a dovecot cluster in director + NFS backend architecture and we are moving from NFSv3 to NFSv4. Our NFS server is a Netapp in clustered mode and reading technical specs of NFSv4 delegation feature it seems that enabling delegation in this type of dovecot architecture should bring great benefits: only one backend server access a specific mailbox at a time (even deliveries are managed by director hashing via LMTP) so the getattr rpc calls should decrease significantly while the risk of conflicting delegations is very low (impacting negatively on the benefits obtainable). Can anyone confirm this hypothesis? I've heard that the linux implementation of NFSv4 delegation is mature only for read delegation (and not yet for write delegation): is this true? And, if true, could this fact limit the benefits of activating NFS delegation feature? Best regards -brd

4 11

pop3-login: Disconnected (tried to use disallowed plaintext auth)
by Benjamin Cimerman 18 Aug '15

18 Aug '15

Hi I have problem with dovecot 2.2.10 - plaintext auth without SSL is not working. I'm upgrading old server and want that settings "stay same" as on old server. SSL has to be optional. /var/log/maillog *pop3-login: Disconnected (tried to use disallowed plaintext auth): user=<>, rip=_._._._, lip=_._._._, session=<cxPkm4Ud5gBb7YZ/>* my settings: [root@mail dovecot]# grep ssl * -R -n *conf.d/10-ssl.conf:8:ssl = yes* *conf.d/10-ssl.conf:40:ssl_verify_client_cert = no* *conf.d/10-auth.conf:90:auth_ssl_require_client_cert = no* *dovecot.conf:7:ssl = yes* [root@mail dovecot]# grep plain * -R -n *conf.d/10-auth.conf:11:disable_plaintext_auth = no* *conf.d/10-auth.conf:101:auth_mechanisms = plain login* Thanx you for any help.

1 0

Segfaults after upgrade to Debian Jessie
by Andrew Beverley 18 Aug '15

18 Aug '15

Hi, I've just upgrade from Debian Wheezy to Debian Jessie and am getting: Fatal: master: service(lmtp): child 6761 killed with signal 11 (core dumped) It seems to be something to do with sieve. When I disable that from lmtp then everything works fine. OS: Debian Jessie Dovecot version: 2.2.13 CPU: x86 This is the gdb output: Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `dovecot/lmtp'. Program terminated with signal SIGSEGV, Segmentation fault. #0 0x00007f8e4c94f626 in sieve_validator_register_command () from /usr/lib/dovecot/libdovecot-sieve.so.0 And dovecot -n # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 8.1 ext3 auth_mechanisms = plain login dict { sieve = mysql:/etc/dovecot/pigeonhole-sieve.dict } mail_location = maildir:/var/mail/vhosts/%d/%n mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave vnd.dovecot.extdata namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { sieve = dict:proxy::sieve;name=active sieve_dir = ~/sieve sieve_extdata_dict_uri = proxy::sieve sieve_plugins = sieve_extdata } protocols = " imap lmtp sieve" service auth-worker { user = vmail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { mode = 0600 user = vmail } user = dovecot } service dict { unix_listener dict { mode = 0600 user = vmail } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } ssl = required ssl_cert = </etc/ssl/certs/ctrlo.com.pem ssl_key = </etc/ssl/private/ctrlo.com.key userdb { driver = passwd } userdb { args = uid=vmail gid=vmail home=/var/mail/vhosts/%d/%n driver = static } protocol imap { mail_max_userip_connections = 20 } Any ideas? Thanks, Andy

2 16

multiple messages per second to a single mailbox
by Chad M Stewart 18 Aug '15

18 Aug '15

Dovecot 2.2.18 on CentOS 6 I have a pair of servers setup with MySQL, Postfix, and Dovecot. Replication is setup and working between the two dovecot instances. The problem I'm running into is that a single mailbox receives a lot of messages, at times the rate is multiple messages per second. Delivery from Postfix to Dovecot is via tcp based LMTP. When I do 'ps -aef|grep lmtp|wc -l' I get 62 and does not appear to go higher than that. At the moment I have 4500 and 8300 messages queued on two Postfix instances waiting to deliver via LMTP to the same dovecot instance. Deliveries only happen via LMTP and only one of the two nodes actually gets the deliveries. What I'm seeing is very high load on the system (40) and queues building on the Postfix side. Replication is keeping up. Looking at the logs now I see anywhere from 4-7 messages per second delivered to this single mailbox. I would like to increase that rate a lot. These machines are VMs hosted on Xenserver 6.x. I have them setup with 8 vCPUs (2 sockets with 4 cores per socket), the dom0 machines have dual HBA connectors back to a SAN and have 128 CPUs and 256GB of RAM and are not taxed. I added a 2nd virtual disk that is used for storing mailbox data. It is ext4 and has noatime set during mount. /var is also mounted with noatime. The performance graphs in XenCenter show nearly all 8 vCPUs at about 50%, and the writes on the mailbox data disk are about 20%. iostat is showing mostly <5 for await times for the disks, though I do see a 10 now and again. I'm guessing that maybe I'm hitting a mailbox locking issue and not sure how to reduce the contention and thereby increase the delivery rate to this mailbox. -Chad

5 12

Syncing two mail servers?
by Knute Johnson 17 Aug '15

17 Aug '15

I currently have a mail server using Dovecot and sendmail. I was thinking I would like to have a backup of my mail and an additional server in case of hardware failure. Is it possible to run two identical or nearly identical server setups and sync the mail files between them? If it is possible, in general terms how would one go about this? Thanks, -- Knute Johnson

2 2

Re: Duplicate mails with pop3 + dsync replication
by Nikolaos Milas 17 Aug '15

17 Aug '15

On 17/8/2015 2:29 μμ, Wolfgang Hennerbichler wrote: >> I was wondering if the same behavior persists with latest version(s), for example 2.2.18. > I don’t know, I have to deal with the packages that come with my distribution’s repository. > >> >If so, how do you overcome this issue? What is the suggested practice? > All I can say is that it works for me with the above setting and a cron-job that runs every minute which expunges mails for the pop3 users. > Thank you for your reply. I am on CentOS 5 and 6, but I am building RPMs for our test and production servers. I recently built v2.2.18 and I decided to give it a try. (I run it with postfix - also just upgraded to 2.11.6.) The issue seems to not occur any more. I had already tested on two test servers, and I hoped someone could provide independent feedback before I decided to upgrade production servers. However, I now also upgraded our two production servers and things seem to be running smoothly. All the best, Nick

1 0

sieve-filter failure problems
by Jost Krieger 17 Aug '15

17 Aug '15

I use sieve-filter for postprocessing misclassified mail. For false positives I use the following script: require [ "variables", "include", "fileinto" ]; global [ "FORCENOSPAM", "ext", "ext1" ]; set "FORCENOSPAM" "YES"; fileinto "JUNK-PRENOUCE"; if header :matches "Delivered-To" "*+*@*" { set "ext" "${2}"; set "ext1" "${2}"; } include :personal "production"; FORCENOSPAM suppresses the spam handling and the Delivered-To stuff tries to regenerate envelope info. This is my crontab entry: 1-57/4 * * * * cd ~kriegjcb; /usr/local/dovecot/bin/sieve-filter -v -e -W -u kriegjcb -m Spam/U0-failed ~kriegjcb/sieve/nospamfilter.sieve Spam/U0 Most things work fine, but a few of my rules will try to forward mail. This will fail and my idea was I handle this manually from the folder Spam/U0-failed. Unfortunately the mail will arrive there but will also be left in the source folder Spam/U0 and will be processed again every 4 minutes ... This is probably not intentional? Yours Jost Krieger -- | Jost.Krieger+sig(a)ruhr-uni-bochum.de Please help stamp out spam! | | Postmaster, JAPH, resident answer machine at RUB Comp. Center | | Sincere words are not sweet, sweet words are not sincere. | | Lao Tse, Tao Te King 81 |

2 2

Duplicate mails with pop3 + dsync replication
by Wolfgang Hennerbichler 17 Aug '15

17 Aug '15

Hi, When I enable (and it only happens when it is actually running) replication over TCP my users get duplicate mails via pop3. Here’s what happens: * User gets mail * Mail appears in (Maildir) new/ folder on both replicas * user retrieves mail (retr), calls dele. Mail still exists in new/ folder on both replicas. * user runs retr (and gets the duplicate) and dele a second time, the mail is actually removed. If I disable replication this behaviour goes away. I use dovecot from debian stable resources. Any help would _really_ be appreciated. I found one german thread that dealt with the same problem, but no solution for it (http://www.dovecot-buch.de/mailingliste/pop3-fehler-bei-delete-und-dsync-re…) wogri # dovecot --version 2.2.13 # dovecot -n # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 3.16.0-4-amd64 x86_64 Debian 8.0 ext4 auth_verbose = yes doveadm_password = XXX first_valid_gid = 113 first_valid_uid = 108 last_valid_gid = 113 last_valid_uid = 108 mail_gid = dovecot mail_location = maildir:/var/mail/%n mail_plugins = quota fts fts_lucene virtual notify replication mail_temp_dir = /var/lib/dovecot/tmp mail_uid = dovecot namespace { list = children location = virtual:/var/mail/%n/virtual prefix = virtual. separator = . } namespace inbox { inbox = yes list = yes location = mailbox "Deleted Messages" { auto = subscribe special_use = \Trash } mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { auto = no special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } [48/4646] mailbox Trash { special_use = \Trash } prefix = separator = . subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { default_language = de fts = lucene fts_lucene = whitespace_chars=@. mail_replica = tcp:172.16.1.1:12345 quota = maildir:User quota quota_rule = *:storage=4G quota_rule2 = Trash:storage=+100M quota_rule3 = Spam:ignore quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = /etc/sieve/%n.sieve sieve_default = /etc/sieve/default.sieve sieve_dir = ~/sieve sieve_extensions = +editheader } postmaster_address = postmaster(a)wogri.at protocols = " imap lmtp pop3" service aggregator { fifo_listener replication-notify-fifo { user = dovecot } unix_listener replication-notify { user = dovecot } } service doveadm { inet_listener { port = 12345 } } service imap { process_limit = 1024 } } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 2003 } user = dovecot } service managesieve-login { inet_listener sieve { port = 4190 } service_count = 1 } service pop3 { process_limit = 1024 } service quota-warning { executable = script /usr/local/sbin/quota-warning.sh unix_listener quota-warning { user = dovecot } user = dovecot } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0600 } } ssl = required ssl_cert = </etc/exim4/server.cert.pem ssl_key = </etc/exim4/server.key.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = quota sieve virtual notify replication } protocol lda { mail_plugins = quota fts fts_lucene virtual notify replication sieve } protocol imap { mail_max_userip_connections = 50 mail_plugins = quota fts fts_lucene virtual notify replication imap_quota }

2 3

sieve and antispam
by Andrew McN 17 Aug '15

17 Aug '15

I have a fairly standard antispam/dspam setup: postfix delivers to dspam, which classifies and tags the mail, and then passes it to postfix which uses sieve to put mail into the appropriate folders based on dspam's classification. I also have the antispam plugin watching mail being moved between folders and re-training dpsam accordingly. If I now add some sieve filter rules which put incoming mail into appropriate folders, possibly overriding what would normally result from dspam's classification, will that be seen by the antispam plugin and used for training dspam? Regards, Andrew McNaughton

2 1

Re: Multidomain / IP Address Setup (Dovevot 2.2.10 on CentOS7 ) is failing: Fatal: Couldn't parse private ssl_key: error:0906D06C:PEM
by Christian Kivalo 16 Aug '15

16 Aug '15

>But can you explain why you use globally: > >ssl_cert = </etc/ssl/dovecot.pem >ssl_key = </etc/ssl/private/dovecot.pem > >and certs for any additional Domain each? > >## >local_name mail.pettijohn-web.com { > ssl_cert = </etc/ssl/mail.pettijohn-web.com.crt > ssl_key = </etc/ssl/private/mail.pettijohn-web.com.key >} >## he configured the top level "default" ssl_{cert,key} as requested by the documentation i may quote myself >from the dovecot ssl wiki page http://wiki2.dovecot.org/SSL/DovecotConfiguration >Multiple SSL certificates >Different certificates per IP and protocol > >[snip] > >Note that you will still need a top-level "default" ssl_key and ssl_cert as well, or you will receive errors. i think, but untested, this default ssl_{cert,key} are used for those clients that don't support SNI (as with apache, which uses the cert of the first site). >I configured it the way you do, but within the default >/etc/dovecot/confd structure but >i had no luck. I testet local_name (SNI), local, local <IPv6> >(dedicated >IPv6 Address but had no lock it should make no difference whether you use one large config file or the conf.d structure. your doveconf -n output would really be helpful regards - c >Configinfo: >1) MTA (Postfix 2.10.1) and MDA (Dovecot 2.2.10) configured on IPv6 >Addresses >2) The MTA and MDA are connected to MariaDB (the default MySQL >replacement on CentOS7 now for virtual domains, users, passwords, >aliaes ect >3) Postfix uses Dovecots SASL Implementation and Postfix and Dovecot >talking via LMTP and UNIX Sockets. > >Details: >### yum info postfix ### >Name : postfix >Arch : x86_64 >Epoche : 2 >Version : 2.10.1 >Release : 6.el7 >Size : 12 M >From : installed > From Source : debian.n-ix.net_centos_7_os_x86_64_ >Summary : Postfix Mail Transport Agent >URL : http://www.postfix.org >License : IBM and GPLv2+ >Description : Postfix is a Mail Transport Agent (MTA), supporting LDAP, > >SMTP AUTH (SASL), TLS > >### yum info dovecot ### >Name : dovecot >Arch : i686 >Epoche : 1 >Version : 2.2.10 >Ausgabe : 4.el7_0.1 >Größe : 3.2 M >Quelle : debian.n-ix.net_centos_7_os_x86_64_ >Summary : Secure imap and pop3 server >URL : http://www.dovecot.org/ >Lizenz : MIT and LGPLv2 >Description : Dovecot is an IMAP server for Linux/UNIX-like systems, >written with security > : primarily in mind. It also contains a small POP3 >server. It supports mail > : in either of maildir or mbox formats. > >Cheers, >Drav

1 0

Multidomain / IP Address Setup (Dovevot 2.2.10 on CentOS7 ) is failing: Fatal: Couldn't parse private ssl_key: error:0906D06C:PEM
by dravion.smith＠gmx.net 16 Aug '15

16 Aug '15

Hi, I want to say hello and here is my big problem ;D Iam trying to archive a Postfix/Dovecot 2.2.10 CentOS7 Multidomain Setup with multiple (valid StartSSL Certs), but iam only able to run a single Domain Cert server only. ps: I need a multiple domainssetup for every customer and it is not an option for me redirecting any email to a single domain server. I really need this setup working. IMHO: I think it SELinux could interfere with multiple Certs in diffrent folders (it is activated in CentOs7 by default and is needed by other apps) Ok, here is my logfile data: systemctl start postfix.service [OK] systemctl start dovecot.service [OK] /var/log/messages *systemd: Stopping Dovecot IMAP/POP3 email server... *systemd: Starting Dovecot IMAP/POP3 email server... *systemd: Started Dovecot IMAP/POP3 email server. /var/log/maillog *dovecot: master: Dovecot v2.2.10 starting up for imap, pop3, lmtp (core dumps disabled) ### This works (Thunderbird, Outlook 2013, Opera Mail ect.) #### local mydomain01.tld { protocol imap { ssl_cert = </etc/ssl/domains/mydomain.tld/imap/imap.mydomain02.tld.crt.pem ssl_key = </etc/ssl/domains/mydomain.tld/imap/imap.mydomain02.tld.key.pem } } ### this 10-ssl.conf ### --- FAILS (the error occurs after an email client accesses IMAP Folders) local mydomain01.tld { protocol imap { ssl_cert = </etc/ssl/domains/mydomain.tld/imap/imap.mydomain02.tld.crt.pem ssl_key = </etc/ssl/domains/mydomain.tld/imap/imap.mydomain02.tld.key.pem } } local mydomain02.tld { protocol imap { ssl_cert = </etc/ssl/domains/mydomain.tld/imap/imap.mydomain02.tld.crt.pem ssl_key = </etc/ssl/domains/mydomain.tld/imap/imap.mydomain02.tld.key.pem } } /var/log/mailog ### Error log ### Aug 14 12:50:38 matrix dovecot: imap-login: Fatal: Couldn't parse private ssl_key: error:0906D06C:PEM routines:PEM_read_bio:no start line: Aug 14 12:50:38 matrix dovecot: master: Error: service(imap-login): command startup failed, throttling for 60 secs I really dont know why a single domain is no problem but if i enable multiple domains dovecots start with any error, even if i set debug verbose leven to extrem high but if i access dovecot with Thunderbird my server loggile explodes with something like this Couldn't parse private ssl_key: error:0906D06C:PEM but the certs are 100% valid and checked over and over again. Any help is greatly appreciated! Greetings, Dravion

4 12

ipv4 imap not accepting connections in mixed ipv4/ipv6
by djk 15 Aug '15

15 Aug '15

I have two installations of dovecot 2.18, apart from the necessary changes to allow them to replicate amongst themselves the configs are identical. Both are running Ubuntu 14.04 and are kept up to date. One is running 64bit and the other 32 bit (for historical reasons). Both have ipv4 and ipv6 addresses. The 64 bit installation allows access on port 143 and 993 on both ipv4 and ipv6. The 32 bit installation does not allow access on 143 on ipv4, but allows ipv4/ipv6 on 993. Both installations happily allow connections to any other ports that dovecot might be using on both ipv4/ipv6, as well as everything else that is running (on other ports) on those machines. There are firewalls, but no warning messages. Switching firewalls off makes no difference. Tcpdump shows the SYN packets arriving on the (correct) interface. Any suggestions? Dirk

1 0

IMAP folder separator issue
by Alex 15 Aug '15

15 Aug '15

Hi, I'm using dovecot-2.2.18 on fedora22 and having a problem with Thunderbird. I reported this problem some time ago, and received some tips, but no solution that's worked. I'm now trying to fix this in earnest, and having problems. The problem is sub-folders are created with a caret in them, instead of a new folder below the parent folder. So instead of folder/sub-folder, folder^sub-folder is created. I'm using mbox folders, and it worked under previous versions of fedora and dovecot. I believe it has to do with the separator character that's used, based on this wiki page: http://wiki2.dovecot.org/Plugins/Listescape The problem is that those instructions cause errors: Aug 14 20:00:01 orion dovecot: pop3(cerberus): Error: User initialization failed: namespace configuration error: Duplicate namespace prefix: "" Aug 14 20:00:01 orion dovecot: pop3(cerberus): Error: Invalid user settings. Refer to server log for more information. I've also had to change the "namespace private" to "namespace { type=private }" as that's apparently a deprecated syntax. Perhaps there's an updated page with more instruction and correct information? I'm unsure where this duplicate namespace is that it's talking about... I've included my doveconf output below, in hopes someone can help. I should also point out that "separator = $" is quoted in the original doveconf.conf but apparently doveconf doesn't properly print it. # 2.2.18: /etc/dovecot/dovecot.conf # OS: Linux 4.0.7-300.fc22.x86_64 x86_64 Fedora release 22 (Twenty Two) default_client_limit = 2000 mail_gid = mail mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u mail_plugins = " listescape" mail_privileged_group = mail mbox_write_locks = fcntl namespace { inbox = yes location = prefix = separator = $ type = private } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } passdb { driver = pam } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { port = 993 } process_min_avail = 20 service_count = 0 } service pop3-login { inet_listener pop3 { port = 0 } inet_listener pop3s { address = 192.168.1.100 port = 995 } } ssl_ca = </etc/pki/dovecot/certs/ca-bundle.pem ssl_cert = </etc/pki/dovecot/certs/orion-2015.pem ssl_key = </etc/pki/dovecot/certs/orion-2015.key userdb { driver = passwd } userdb { driver = passwd }

2 1

backing up email / saving maildir on external hard drives
by Kevin Laurie 15 Aug '15

15 Aug '15

Hello, Yesterday I tried to back up a 40GB maildir . I tried to move the maildir from home to external HDD but failed. Decided then to compress it(which took several hours). Now changing the disk format from FAT to exFAT to allow the transfer for the large compressed file. How does one back up emails on a external drive? Some advice would be greatly appreciated.

7 12

need help debugging deleted mails
by Vu Ngoc VU 13 Aug '15

13 Aug '15

hello, one of our users complained about the fact that he doesn't receive some messages (randomly) that his teamates have. Grepping for the message-ID in the mail.log, I can see lmtp says it is saved : Aug 12 15:23:23 imap-01 dovecot: lmtp(4943, johndoe(a)example.net) fFuCO09Hy1VPEwAA2t/0+w: sieve: vsize= msgid=<037e01d0d502$0e3687d0$2aa39770$(a)example.net>: stored mail into mailbox 'INBOX' The only difference with others recipients is the 'sieve:... stored mail' instead of 'saved mail to' when there is no sieve. But when he asked me, the message was no more in his maildir (I checked with doveadm search). As we have checked and disabled all the filters in his MUA and on the server (sieve) and this issue still continue, I did mkdir a dovecot.rawlog inside his home. With the help of rawlog, I can see that the message can be found in a .out file (by grepping the Message-ID). And by reading this .out log raw log, the entire message were sent to the client. So I guess that : * the message was written to disk * it was sent to the MUA But I need your help because I don't get how this message disappear from his maildir. My assumptions was that the client must do some commands like : * STORE the \Deleted flag to this message UID * and then, later do EXPUNGE but I did : * grep -i expunge * 20150812* => no match * grep -iE '\+flags .*\\deleted' => a few matches but not with the appropriate UID snippet from the 20150812-133858-13317.in file: 8nk1 UID FETCH 208209 (UID FLAGS RFC822.SIZE BODY.PEEK[HEADER] INTERNALDATE) p7uv IDLE DONE 6yk3 NOOP 83g6 IDLE DONE yhbd UID FETCH 208209 (UID FLAGS BODY.PEEK[]) fy16 IDLE DONE snippet from the 20150812-133858-13317.out file: * 56295 FETCH (UID 208209) wn2p OK Fetch completed. * 56295 FETCH (UID 208209 FLAGS (\Deleted \Seen \Recent) RFC822.SIZE 17138 INTERNALDATE "12-Aug-2015 15:23:22 +0200" BODY[HEADER] {2836} Considering these points: * I cannot find any match with 208209 early in raw logs * I don't see any expunge for the whole day * I've grepped for \Deleted (insensitive) and didn't find matching like a interval of messages UID. What did I miss to find out how/when the message got \Deleted flag and was removed from his maildir? A few about my setup : * system is ubuntu 14.04 inside OpenVZ containers (Proxmox) * dovecot version is 2.2.9 from Ubuntu packages * 2 director with Internet and local ip addresses * 2 backends with only local addresses * these dovecot access storage servers by NFSv3 (that's why we have director) * imap/lmtp are proxied Thanks a lot for reading, I'm really disappointed about this problem. For the moment, I'll delete his script even if all rules are disabled (via roundcube, and I checked the rule is commented in the file). And also I'll try to watch what happens with inotify on the storage server.

4 6

backing up IMAP server on a hard drive
by Kevin Laurie 13 Aug '15

13 Aug '15

Hi, I am trying to back up my IMAP server to a hard drive. Later I intend to extract all mails for attachments. What do you reckon is the best too to perform this ? Imapsync or Thunderbird (or something else, please recommend) One problem I am having with imapsync is the setting for host2 (being a localhost computer). How does one set a parameter for host2 being a desktop computer. Thanks Kevin

3 6

Error when reading attachment - one byte overhead?
by Ачилов Рашид Нурмухамед ович 13 Aug '15

13 Aug '15

After converting maildir to mdbox mail periodically obtained these messages: Aug 13 11:22:27 mailsrv dovecot: imap(user-aaa): Error: read(/usr/share/smbusers/user-aaa/mail/attachments/a0/8e/a08e3e63e11aae3f37020bdca0da7d-7b39ab07ea73ba559d450000dec08558[base64:18 b/l]) failed: Stream is larger than expected (434427 > 434426, eof=1) Aug 13 11:22:27 mailsrv dovecot: imap(user-aaa): Error: read(attachments-connector(/usr/share/smbusers/user-aaa/mail/storage/m.23)) failed: read(/usr/share/smbusers/user-aaa/mail/attachments/a0/8e/a08e3e63e11aae3f37020bdca0da7d-7b39ab07ea73ba559d450000dec08558[base64:18 b/l]) failed: Stream is larger than expected (434427 > 434426, eof=1) (FETCH BODY[] for mailbox Разное полезное/Для памяти UID 20) Aug 13 11:22:27 mailsrv dovecot: imap(user-aaa): Disconnected: FETCH read() failed in=16923 out=497431 How to correct it? Conversion was did with 2.2.8 version, next will installed 2.2.18. -- С Уважением. Ачилов Рашид Нурмухамедович (AchilovRN(a)granch.ru) Главный специалист по защите информации ООО НПФ "Гранч", тел: +7 (383) 233-35-12, доб. 107

1 0

SiS does not work
by Ачилов Рашид Нурмухамед ович 13 Aug '15

13 Aug '15

How do you do. I have tried to use SiS to deduplicate attachments in mail storage. Unsuccesful. When goes mail with reasonable size, and SiS try to start, I have receive error, when this mail must be delivered for group of receivers (i.e. through aliases). Below is error log, valuable parts of mail addresses masked by X and Y chars Aug 6 16:11:12 mailsrv dovecot: lmtp(xxxxx): AL1SNrkyw1VPBAAABJcpmA: msgid=<2015080614471325760993(a)chinacoalchem.com> (from zsy(a)chinacoalchem.com) saved mail to INBOX This receiver has received mail. But next one does not. And to receive I must restart _sendmail_ (not dovecot!). I must restart sendmail as many times as there were recipients in envelope. Aug 6 16:11:12 mailsrv dovecot: lmtp(yyyy): Error: read(/usr/share/smbusers/xxxxx/mail/attachments /e4/3d/e43db6e8af6fb1df4a08f9c1f3f31e93e61781c4c1d2395e04dd96a583aa-01bd5236b932c3554f04000004972998[base64 :19 b/l]) failed: Stream is smaller than expected (0 < 4080128) Aug 6 16:11:12 mailsrv dovecot: lmtp(yyyy): Error: read(attachments-connector(/usr/share/smbusers/xxxxx/mail/storage/m.35)) failed: read(/usr/share/smbusers/xxxxx/mail/attachments/e4/3d/e43db6e8af6f b1df4a08f9c1f3f31e93e61781c4c1d2395e04dd96a583aa-01bd5236b932c3554f04000004972998[base64:19 b/l]) failed: Stream is smaller than expected (0 < 4080128) Aug 6 16:11:12 mailsrv dovecot: lmtp(yyyy): Error: copy: i_stream_read(attachments-connector(/usr/share/smbusers/xxxxx/mail/storage/m.35)) failed: read(/usr/share/smbusers/xxxxx/mail/attachments/e4/ 3d/e43db6e8af6fb1df4a08f9c1f3f31e93e61781c4c1d2395e04dd96a583aa-01bd5236b932c3554f04000004972998[base64:19 b/l]) failed: Stream is smaller than expected (0 < 4080128) Aug 6 16:11:12 mailsrv dovecot: lmtp(yyyy): Error: read(attachments-connector(/usr/share/smbusers/xxxxx/mail/storage/m.35)) failed: read(/usr/share/smbusers/xxxxx/mail/attachments/e4/3d/e43db6e8af6f b1df4a08f9c1f3f31e93e61781c4c1d2395e04dd96a583aa-01bd5236b932c3554f04000004972998[base64:19 b/l]) failed: Stream is smaller than expected (0 < 4080128) (uid=0, box=INBOX) Aug 6 16:11:12 mailsrv dovecot: lmtp(yyyy): AL1SNrkyw1VPBAAABJcpmA: msgid=<2015080614471325760993(a)chinacoalchem.com> (from zsy(a)chinacoalchem.com) save failed to INBOX: Internal error occurred. Refer to server log for more information. [2015-08-06 16:11:12] Why LMTP, when try to deliver mail to local user yyyy tries to look up into a home directory of local user xxxxx? All these and similar home directories has a 'mail' subdir, which keeps mail and rights on this subdir is 0700. To avoid this completely misunderstood occassion, I have temporary set mail_attachment_min_size to 2048kb - but now I cannot receive advantage from SiS. -- С Уважением. Ачилов Рашид Нурмухамедович (AchilovRN(a)granch.ru) Главный специалист по защите информации ООО НПФ "Гранч", тел: +7 (383) 233-35-12, доб. 107

2 2

userdb / user map with director
by Will Yardley 10 Aug '15

10 Aug '15

This is with dovecot-ee 2.2.18.2 on RHEL6.... To handle backend and frontend on same machine, I'm using the following hack, as previously outlined here: [in director instance config] passdb { # See thread ending in: # http://dovecot.org/pipermail/dovecot/2012-June/083817.html # for why this has to be sql instead of 'static' driver = sql args = /etc/dovecot/dovecot-sql.conf } [in /etc/dovecot/dovecot-sql.conf] driver = sqlite connect = /etc/dovecot/empty.db password_query = select 'y' as proxy, \ NULL as password, \ 'y' as nopassword, \ case '%a' \ when '110' then '10110' \ when '995' then '10110' \ when '143' then '10143' \ when '993' then '10143' end \ as port; This works, but I was getting a failure on usernames, since director instance didn't have a userdb. So I tried the following: [in config] passdb { driver = sql args = /etc/dovecot/dovecot-sql.conf } userdb { driver = prefetch } and appended the following to the SQL query: password_query = select '%u' AS user, \ Then I see the following error in the log when I try to run the map "Trying to iterate users, but userdbs don't support it" and doveadm -i director director map returns: Error: User listing returned failure Error: user listing failed [...] I'm sure I'm missing something obvious, so is there an easy fix to make this mapping work? w

1 0

Dovecot sends "OK Logged in" with empty tag
by Simon Thelen 10 Aug '15

10 Aug '15

Hello, I'm currently writing my own IMAP client and testing it against Dovecot, and when doing PLAIN AUTH Dovecot sends the "OK Logged in" with an empty tag at the start. I tried reproducing the conversation with netcat, but Dovecot sends a correctly tagged OK at the end of the AUTH so I assume it's timing related. I've attached pcap dumps of the TCP conversation in both situations as well as the output of dovecot -n. Side Note: Why does Dovecot send the updated capabilities before OK'ing the authentication? Seems strange to me as the client can't assume that the authentication proceeded successfully until it actually receives the OK so it has to assume that those capabilities are pre login. -- Simon Thelen

1 1

Using a separate passdb per service
by Gerry 10 Aug '15

10 Aug '15

Situation: one front-facing server running Dovecot as IMAP/POP3/ ManageSieve proxy, a mixture of IMAP servers (Dovecot, Exchange, ...) in the back-end. Dovecot's passdb does lookups against MySQL which contains a simple user/host mapping, the actual authentication happens on the back-end IMAP servers. The configuration is more or less as described here: http://wiki2.dovecot.org/PasswordDatabase/ExtraFields/Proxy Now I would like to add a Postfix instance on the front-facing server which listens on the submission port and authenticates users via SASL using the local Dovecot's UNIX socket. The idea being that a user only needs to remember one single hostname, one username and one password for all mail-related services. The problem is that Dovecot is operating in proxy mode, which means that the password_query returns NULL as the password and explicitly returns a field "nopasswd" containing "Y". Thus, users can not authenticate against the UNIX socket. What I think I want to do is convince Dovecot to use one passdb for the imap/pop3/managesieve services and different one for the "auth" service. The configuration snippet below doesn't work, but it should illustrate what I want to achieve: > protocols = imap pop3 sieve > > service auth { > passdb sql { > driver = sql > args = /etc/dovecot/mysql-auth-sasl.conf.ext > } > > unix_listener /var/spool/postfix/private/auth { > user = postfix > group = postfix > mode = 0666 > } > } > > # IMAP/POP3/ManageSieve auth against MySQL > passdb sql { > driver = sql > args = /etc/dovecot/mysql-auth-default.conf.ext > } Example mysql-auth-sasl.conf.ext > driver = mysql > connect = host=127.0.0.1 dbname=mail user=mail password=somethingrandom > password_query = SELECT password AS password FROM users WHERE login = '%u' Example mysql-auth-default.conf.ext: > driver = mysql > connect = host=127.0.0.1 dbname=mail user=mail password=somethingrandom > password_query = SELECT NULL AS password, 'Y' as nopassword, host, 'Y' AS proxy FROM users WHERE login = '%u' Any pointers? Gerry

3 4

How to import an mbox to an existing user as a new mailbox
by Paul Hoffman 09 Aug '15

09 Aug '15

Greetings. I have a bunch of mbox files that I want to import to an existing user, each into a new mailbox. That is, I want to import the file project1.mbox to user Foo, into a newly-created mailbox called "Project 1". Is there a dovecot tool to do this on the server? --Paul Hoffman

4 10

Trying to back
by Kevin Laurie 09 Aug '15

09 Aug '15

Hi, I am trying to backup multiple mail accounts by using imapsync and Dovecot on my local machine. I am using maildir as a mail storage format and currently have the following setting on my local machine :- mail_location = maildir:~/Maildir I am afraid that if I imapsync multiple accounts they will all get stored in the same location. Is there a way to seperate the accounts based on the email address? Appreciate if someone could advise. Thanks! Kevin

3 3