- dovecot - dovecot.org

How best to confirm that dovecot LDA logging is working correctly?
by Ben Johnson 06 Oct '14

06 Oct '14

Hello! I've posted to the list several times about a strange issue I'm having with dovecot LDA. When dovecot-lda is called in the context of a pipe script that is executed as the "vmail" user via the Dovecot Antispam plugin, dovecot-lda exits prematurely with status code 134. The dovecot deliver manual at http://wiki2.dovecot.org/LDA#logging states very clearly, "If dovecot-lda fails to write to log files it exits with temporary failure." That's a curious note, because I believe that a "temporary failure" exit code may be what I'm dealing with here. When I drag an email from Inbox to SPAM to trigger Antispam, I see only this (and no further output beyond the last line) in syslog, which is the configured logging destination for LDA: imap: antispam: mailbox_is_unsure(Junk): 0 imap: antispam: mailbox_is_trash(INBOX): 0 imap: antispam: mailbox_is_trash(Junk): 0 imap: antispam: mail copy: from trash: 0, to trash: 0 imap: antispam: mailbox_is_spam(INBOX): 0 imap: antispam: mailbox_is_spam(Junk): 1 imap: antispam: mailbox_is_unsure(INBOX): 0 imap: antispam: mail copy: src spam: 0, dst spam: 1, src unsure: 0 imap: antispam: running mailtrain backend program /bin/bash imap: antispam: running mailtrain backend program /bin/bash imap: antispam: running mailtrain backend program parameter 1 /usr/local/bin/sa-learn-pipe.sh imap: antispam: running mailtrain backend program parameter 2 --spam By contrast, if I "su" to the "vmail" user and call the LDA executable with the same arguments that my pipe script does, I see all of the expected output in syslog, AND the message is delivered successfully: /usr/lib/dovecot/deliver -d "sa-training(a)localhost.com" -m "Training.SPAM" -p "/tmp/sendmail-msg-25169.txt" lda: Debug: Loading modules from directory: /usr/lib/dovecot/modules lda: Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so lda: Debug: Module loaded: /usr/lib/dovecot/modules/lib90_sieve_plugin.so lda: Debug: auth input: sa-training(a)localhost.com home=/var/vmail/localhost.com/sa-training mail=maildir:/var/vmail/localhost.com/sa-training/Maildir uid=5000 gid=5000 quota_rule=*:storage=0B sieve=/var/vmail/localhost.com/sa-training/.sieve lda: Debug: Added userdb setting: mail=maildir:/var/vmail/localhost.com/sa-training/Maildir lda: Debug: Added userdb setting: plugin/quota_rule=*:storage=0B lda: Debug: Added userdb setting: plugin/sieve=/var/vmail/localhost.com/sa-training/.sieve lda(sa-training(a)localhost.com): Debug: Effective uid=5000, gid=5000, home=/var/vmail/localhost.com/sa-training lda(sa-training(a)localhost.com): Debug: Quota root: name=user backend=dict args=:file:/var/vmail/localhost.com/sa-training/.quotausage lda(sa-training(a)localhost.com): Debug: Quota rule: root=user mailbox=* bytes=0 messages=0 lda(sa-training(a)localhost.com): Debug: Quota rule: root=user mailbox=Trash bytes=+104857600 messages=0 lda(sa-training(a)localhost.com): Debug: Quota rule: root=user mailbox=Junk ignored lda(sa-training(a)localhost.com): Debug: Quota rule: root=user mailbox=INBOX bytes=+104857600 messages=0 lda(sa-training(a)localhost.com): Debug: Quota warning: bytes=0 (100%) messages=0 reverse=no command=quota-reached 100 sa-training(a)localhost.com localhost.com lda(sa-training(a)localhost.com): Debug: Quota warning: bytes=0 (95%) messages=0 reverse=no command=quota-warning 95 sa-training(a)localhost.com localhost.com lda(sa-training(a)localhost.com): Debug: Quota warning: bytes=0 (80%) messages=0 reverse=no command=quota-warning 80 sa-training(a)localhost.com localhost.com lda(sa-training(a)localhost.com): Debug: Quota warning: bytes=0 (100%) messages=0 reverse=yes command=quota-below below sa-training(a)localhost.com localhost.com lda(sa-training(a)localhost.com): Debug: Quota grace: root=user bytes=0 (10%) lda(sa-training(a)localhost.com): Debug: dict quota: user=sa-training(a)localhost.com, uri=file:/var/vmail/localhost.com/sa-training/.quotausage, noenforcing=0 lda(sa-training(a)localhost.com): Debug: maildir++: root=/var/vmail/localhost.com/sa-training/Maildir, index=, indexpvt=, control=, inbox=/var/vmail/localhost.com/sa-training/Maildir, alt= lda(sa-training(a)localhost.com): Debug: Quota root: name=user backend=dict args=:file:/var/vmail//raw mail user/.quotausage lda(sa-training(a)localhost.com): Debug: Quota warning: bytes=0 (100%) messages=0 reverse=no command=quota-reached 100 raw mail user lda(sa-training(a)localhost.com): Debug: Quota warning: bytes=0 (95%) messages=0 reverse=no command=quota-warning 95 raw mail user lda(sa-training(a)localhost.com): Debug: Quota warning: bytes=0 (80%) messages=0 reverse=no command=quota-warning 80 raw mail user lda(sa-training(a)localhost.com): Debug: Quota warning: bytes=0 (100%) messages=0 reverse=yes command=quota-below below raw mail user lda(sa-training(a)localhost.com): Debug: Quota grace: root=user bytes=0 (10%) lda(sa-training(a)localhost.com): Debug: dict quota: user=raw mail user, uri=file:/var/vmail//raw mail user/.quotausage, noenforcing=0 lda(sa-training(a)localhost.com): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= lda(sa-training(a)localhost.com): Debug: Destination address: sa-training(a)localhost.com (source: user@hostname) lda(sa-training(a)localhost.com): Debug: sieve: Pigeonhole version 0.4.2 initializing lda(sa-training(a)localhost.com): Debug: sieve: include: sieve_global_dir is not set; it is currently not possible to include `:global' scripts. lda(sa-training(a)localhost.com): Debug: sieve: using the following location for user's Sieve script: /var/vmail/localhost.com/sa-training/.sieve;name=main script lda(sa-training(a)localhost.com): Debug: sieve: loading script /var/vmail/localhost.com/sa-training/.sieve;name=main script lda(sa-training(a)localhost.com): Debug: sieve: script binary /var/vmail/localhost.com/sa-training/.sieve.svbin successfully loaded lda(sa-training(a)localhost.com): Debug: sieve: binary save: not saving binary /var/vmail/localhost.com/sa-training/.sieve.svbin, because it is already stored lda(sa-training(a)localhost.com): Debug: sieve: executing script from /var/vmail/localhost.com/sa-training/.sieve.svbin lda(sa-training(a)localhost.com): sieve: msgid=<20141003110532.045EE6060D(a)localhost.com>: stored mail into mailbox 'Training.SPAM' I'm trying to make sense of this behavior; the implication seems to be that dovecot-lda is crashes immediately, before it can log anything, when it's triggered via Antispam. Is there some way to determine what's happening? I've posted coredump and trace information previously, and nobody replied. Thanks for any help! -Ben

1 0

Default file names for sent, trash, etc.
by bor400 06 Oct '14

06 Oct '14

Hi, I use dovecot 2.1 with mbox (pop3 imap). For imap I want set dovecot compatibile with my webmail. My webmail use filename for mbox as "sent-mail" , "mail-trash", etc. How I can change from default "Sent" to check (create) "sent-mail" file ? -- View this message in context: http://dovecot.2317879.n4.nabble.com/Default-file-names-for-sent-trash-etc-… Sent from the Dovecot mailing list archive at Nabble.com.

2 1

Help with shared folder
by Gianluca Calloni 06 Oct '14

06 Oct '14

Hi dovecot guru.. I need some help configuring shared folder in my server.. This is the situation: DOVECOT 2.0.19 with POSTFIX - CLAMAV - AMAVISD - SPAMASSASSIN This is the production server and sharing folder between user work.. But i need some explanation.. 1) It's possible to share only a subfolder (E.G. => .INBOX.ESTERO) without share the main folder .INBOX? 2) Which is the best way (or best practice) to manage the dovecot-acl and dovecot-acl-list file?? Actually, i modifiy the dovecot-acl by hand (vi editor). but every time i modify it i need to restart the dovecot server to apply the configuration. And i need to reset the /var/run/dovecot/dict owner and group cause with dovecot restart the file go back in root:root owner - group Thank's in advance. Gianluca

1 0

v2.2.14.rc1 released
by Timo Sirainen 06 Oct '14

06 Oct '14

http://dovecot.org/releases/2.2/rc/dovecot-2.2.14.rc1.tar.gz http://dovecot.org/releases/2.2/rc/dovecot-2.2.14.rc1.tar.gz.sig I've wanted to do this release for months now, but I keep being too busy all the time. This release fixes several important bugs and a lot of smaller ones. Because there are such a large number of changes I thought I'd make this release candidate release first and the final v2.2.14 early next week. I usually read through the Dovecot mailing list mails before making a new release to see if there are some (important) bugs reported, but I've been way too busy recently to read through everything. I still have over 250 unread mails and I don't think I'll have time to read them anytime soon. On the positive side the Dovecot company is now hiring more people. Especially having more Dovecot coders would reduce my work load and maybe allow me to go back to reading the Dovecot mailing list daily.. See: http://www.dovecot.fi/dovecot-is-hiring-software-engineer-helsinki/ (you can do this work anywhere - no need to live in Finland) http://www.dovecot.fi/dovecot-is-hiring-operations-and-support-engineer-hel… (this probably requires living in Finland) http://www.dovecot.fi/dovecot-is-hiring-technical-pre-sales-engineer-helsin… (probably no need to live in Finland) Here are some of the larger changes since v2.2.13: * lmtp: Delivered-To: header no longer contains <> around the email address. Other MDAs don't have it either. * "Out of disk space" errors are now treated as temporary errors (not the same as "Out of disk quota"). * replication plugin: Use replication only for users who have a non-empty mail_replica setting. + lmtp proxy: Log a line about each mail delivery. + Added login_source_ips setting. This can be used to set the source IP address round-robin from a pool of IPs (in case you run out of TCP ports). + Rawlog settings can use tcp:<host>:<port> as the path. + virtual plugin: Don't keep more than virtual_max_open_mailboxes (default 64) number of backend mailboxes open. + SSL/TLS compression can be disabled with ssl_options=no_compression + acl: Global ACL file now supports "quotes" around patterns. + Added last-login plugin to set user's last-login timestamp on login. + LDAP auth: Allow passdb credentials lookup also with auth_bind=yes - IMAP: MODSEQ was sent in FETCH reply even if CONDSTORE/QRESYNC wasn't enabled. This broke at least old Outlooks. - passdb static treated missing password field the same as an empty password field. - mdbox: Fixed potential infinite looping when scanning a broken mdbox file. - imap-login, pop3-login: Fixed potential crashes when client disconnected unexpectedly. - imap proxy: The connection was hanging in some usage patterns. This mainly affected older Outlooks. - lmtp proxy: The proxy sometimes delivered empty mails in error situations or potentially delivered truncated mails. - fts-lucene: If whitespace_chars was set, we may have ended up indexing some garbage words, growing the index size unnecessarily. - -c and -i parameters for dovecot/doveadm commands were ignored if the config socket was readable. - quota: Quota recalculation didn't include INBOX in some setups. - Mail headers were sometimes added to dovecot.index.cache in wrong order. The main problem this caused was with dsync+imapc incremental syncing when the second sync thought the local mailbox had changed. - doveadm backup didn't notice if emails were missing from the middle of the destination mailbox. Now it deletes and resyncs the mailbox.

7 10

searching for the special result
by Mohsen Pahlevanzadeh 06 Oct '14

06 Oct '14

Dear all, Already i installed dovecot (lda) + postfix Now, when i search for dovecot+postfix+mysql+ldap , i don't find any content about LMTP with dovecot+postfix+mysql+ldap Unfortunately, When i find a article, paper or so on, it doesn't complete 100%, it means or doesn't have LMTP, or doesn't have sql, or it has sasl) Question: Is my way wrong?

2 3

X-sieve-redirected-from
by Bob Miller 05 Oct '14

05 Oct '14

Hi, I am chasing a problem with sieve vacation messages. the sieve file looks like this: ## Generated by Roundcube Webmail SieveRules Plugin ## require ["copy","vacation"]; # rule:[computerisms.ca] if anyof (address :contains "To" "bob.miller(a)ctfn.ca", address :contains "Cc" "bob.miller(a)ctfn.ca") { redirect :copy "bob(a)computerisms.ca"; vacation :days 66 :subject "autotest" "hello back"; } The mail is forwarded, but no vacation response is sent, and the mail is not forwarded. I find the lda error like this: _discarding_vacation_response_for_implicitly_delivered_message; _no_known_(envelope)_recipient_address_found_in_message_headers_ (recipient=<bob.miller(a)hostname.domain.tld>,_and_no_additional_ `:addresses'_are_specified) I am presuming this is the source of my problem. I am not sure why the domain is being modified to reflect the fqdn of the mail server host. When I look at the delivered mail, I find the following two headers: X-sieve-redirected-from: bob.miller(a)hostname.domain.tld Delivered-to: bob.miller(a)domain.tld I have been looking for a while now, and I can't figure out where it is picking up the hostname from. doveconf -a | grep hostname comes up empty. the hostname is not in any of the mta config files. Anyone got a hint? -- Computerisms Bob Miller 867-334-7117 / 867-633-3760 http://computerisms.ca

2 2

Dovecot does not update maildirsize after expunge
by Király Balázs 04 Oct '14

04 Oct '14

Hello, At the first, sorry for my englishJ I have a problem with dovecot quota since i migrated from courier. Dovecot does not update the Maildirsize after expunge, and the user running out of his quota very quickly. I checked, the file is deleted from the filesystem. If i delete the Maildirsize file, dovecot regenerate it with the correct datas when a new mail arrive. Also tried to set mail_debug=yes, but it doesnt show anything in the log, when delete mails. Im using NFS as homedirs, i tried to turn off the releated options in configuration, but didnt help. Has anyone any idea how to fix this issue? Thank you! Here is the output of dovecot -n: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.6 nfs auth_mechanisms = plain login default_client_limit = 10000 default_process_limit = 1000 dict { quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no mail_fsync = always mail_location = maildir:/home/vmail/%d/%n mail_nfs_index = yes mail_nfs_storage = yes mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = INBOX. separator = . type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql }plugin { quota = maildir:User quota sieve = /home/vmail/default.sieve sieve_default = /home/vmail/default.sieve sieve_dir = ~/sieve sieve_extensions = +editheader sieve_global_dir = /var/lib/dovecot/sieve } protocols = " imap pop3" service auth-worker { user = vmail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0600 user = vmail } user = $default_internal_user } service dict { unix_listener dict { group = vmail mode = 0600 user = vmail } } ssl_cert = </etc/postfix/domain.tld.crt ssl_key = </etc/postfix/domain.tld.key userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = " quota sieve" } protocol imap { mail_max_userip_connections = 20 } protocol pop3 { mail_max_userip_connections = 20 } cat dovecot-sql.conf.ext driver = mysql connect = host=xx user=mailadmin password=xx dbname=xx default_pass_scheme = SHA512-CRYPT password_query = \ SELECT email as user, password \ FROM email_accounts WHERE email = '%u' AND smtp > IF('%s'='smtp', 0, -1) user_query = \ SELECT CONCAT('/home/vmail/', '%d', '/', '%n') as home, 5000 as uid, 5000 as gid, CONCAT('*:bytes=', quota) as quota_rule \ FROM email_accounts WHERE email = '%u' # If you wish to avoid two SQL lookups (passdb + userdb), you can use # userdb prefetch instead of userdb sql in dovecot.conf. In that case you'll # also have to return userdb fields in password_query prefixed with "userdb_" # string. For example: #password_query = \ # SELECT userid AS user, password, \ # home AS userdb_home, uid AS userdb_uid, gid AS userdb_gid \ # FROM users WHERE userid = '%u' # Query to get a list of all usernames. #iterate_query = SELECT username AS user FROM users

1 0

Re: v2.2.14.rc1 released
by dovecot＠outputservices.com 04 Oct '14

04 Oct '14

I get similar results on Solaris 10 x86 using gcc. libtool: compile: gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-ssl-iostream -DMODULE_DIR=\"/tmp/bad/lib/dovecot\" -I/usr/local/openldap/include -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -MT fs-posix.lo -MD -MP -MF .deps/fs-posix.Tpo -c fs-posix.c -fPIC -DPIC -o .libs/fs-posix.o fs-posix.c: In function `fs_posix_lock': fs-posix.c:533: error: `file' undeclared (first use in this function) fs-posix.c:533: error: (Each undeclared identifier is reported only once fs-posix.c:533: error: for each function it appears in.) gmake[3]: *** [fs-posix.lo] Error 1 gmake[3]: Leaving directory `/tmp/dovecot-2.2.14.rc1/src/lib-fs' gmake[2]: *** [all-recursive] Error 1 gmake[2]: Leaving directory `/tmp/dovecot-2.2.14.rc1/src' gmake[1]: *** [all-recursive] Error 1 gmake[1]: Leaving directory `/tmp/dovecot-2.2.14.rc1' gmake: *** [all] Error 2 On 10/03/14 15:06, Jake Goerzen wrote: > On 10/03/14 08:34, Timo Sirainen wrote: >> http://dovecot.org/releases/2.2/rc/dovecot-2.2.14.rc1.tar.gz > > Hi Timo, > > While testing a build on Solaris 10, compiling stops at: > > libtool: compile: /opt/SUNWspro/bin/cc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-ssl-iostream -DMODULE_DIR=\"/opt/csw/lib/dovecot\" -I/opt/csw/include/mysql -I/opt/csw/include/postgresql -I/opt/csw/include -xO3 -m32 -xarch=pentium_pro -xchip=pentium_pro -I/opt/csw/include -c fs-posix.c -KPIC -DPIC -o .libs/fs-posix.o > "fs-posix.c", line 533: undefined symbol: file > "fs-posix.c", line 533: left operand of "->" must be pointer to struct/union > "fs-posix.c", line 556: left operand of "->" must be pointer to struct/union > "fs-posix.c", line 563: left operand of "->" must be pointer to struct/union > cc: acomp failed for fs-posix.c > > I'm using the same build environment to create previous OpenCSW packages of dovecot and they have compiled cleanly in the past. So, thought I would let you know about it so it can be fixed before the real relase of 2.2.14 > > Best regards, > -Jake (OpenCSW dovecot maintainer) >

1 0

Problem with dovecot-managesieved and sieve scripts in mysql
by ing. Petr Bitzan 04 Oct '14

04 Oct '14

Hello, I would like to ask for advice on the following things: I have sieve scripts stored in mysql, work for LDA and imapd correctly. When I try to connect using the client managesieve (Roungcube plugin managesieve with Thunderbird addon sieve), i receive the following error: Oct 3 19:04:50 mail dovecot: managesieve(11044167): Debug: sieve: include: sieve_global_dir is not set; it is currently not possible to include `:global' scripts. Oct 3 19:04:50 mail dovecot: managesieve(11044167): Error: sieve-storage: Cannot open non-file script location for active script `dict:proxy::sieve;name=active;bindir=/var/vmail/sieve-scripts/11044167' Oct 3 19:04:50 mail dovecot: managesieve(11044167): Fatal: Failed to open Sieve storage. If i change settings sieve to: sieve = ~/.dovecot.sieve sieve_dir = ~/sieve it works fine. can someone please advise configuring dovecot-managesieved with saving scripts in the database. Thank you very much Petr Bitzan ------------- # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.6 ext4 auth_debug = yes auth_mechanisms = plain login auth_verbose = yes dict { acl = mysql:/etc/dovecot/dovecot-acl-shared-dict.conf.ext sieve = mysql:/etc/dovecot/dict-sieve-sql.conf.ext } first_valid_gid = 1002 first_valid_uid = 1002 last_valid_gid = 1002 last_valid_uid = 1002 mail_debug = yes mail_location = maildir:/var/vmail/%n/Maildir mail_plugins = " mail_log notify acl" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { list = children location = maildir:%%h/Maildir:INDEX=~/shared/%%u/ prefix = shared/%%u/ separator = / subscriptions = yes type = shared } namespace inbox { hidden = no inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox HAM { auto = subscribe } mailbox Junk { special_use = \Junk } mailbox SPAM { auto = subscribe } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_shared_dict = proxy::acl quota = maildir:User quota quota_warning = storage=95%% quota-warning 95 %u sieve = dict:proxy::sieve;name=active;bindir=/var/vmail/sieve-scripts/%u sieve_dir = dict:proxy::sieve;name=active;bindir=~/.sieve-bin } protocols = " imap lmtp sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service dict { unix_listener dict { group = vmail mode = 0600 user = vmail } } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } user = vmail } service managesieve-login { inet_listener sieve { address = xxxxxxx port = 4190 } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } ssl_cert = </etc/ssl/certs/smtp.lf3.cuni.cz.pem ssl_key = </etc/ssl/private/serverkeynopass.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = " mail_log notify acl quota sieve" } protocol lda { mail_plugins = " mail_log notify acl quota sieve acl" } protocol imap { mail_plugins = " mail_log notify acl quota imap_quota acl imap_acl" } protocol pop3 { mail_plugins = " mail_log notify acl quota" } dict-sieve-sql.conf.ext: connect = host=xxxxxxxxxxxxx dbname=xxxxxxxx user=xxxxxxxx password=xxxxxxxxxxxxxx map { pattern = priv/sieve/name/$script_name table = user_sieve_scripts username_field = username value_field = id fields { script_name = $script_name } } map { pattern = priv/sieve/data/$id table = user_sieve_scripts username_field = username value_field = script_data fields { id = $id } } CREATE TABLE IF NOT EXISTS `user_sieve_scripts` ( `id` int(11) NOT NULL DEFAULT '0', `username` varchar(40) DEFAULT NULL, `script_name` varchar(255) DEFAULT NULL, `script_data` varchar(10240) DEFAULT NULL, PRIMARY KEY (`id`), UNIQUE KEY `username` (`username`,`script_name`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8;

2 2

Configure antispam plugin with private namespaces
by Bruno Galindro da Costa 03 Oct '14

03 Oct '14

When I use antispam plugin <http://wiki2.dovecot.org/Plugins/Antispam> with a folder that is outside a namespace, the plugin works great. But, if I configure it to watch a folder that is inside a namespace, the mailtrain backend does nothing. Does antispam plugin have support to namespaces? *This is my config:* namespace spam { type = private list = yes location = maildir:/var/mail.spam/%d/%n subscriptions = yes prefix = "SPAM." mailbox Filtrados { auto = subscribe } } plugin { antispam_backend = mailtrain antispam_verbose_debug = 1 antispam_debug_target = syslog # the above NOT works antispam_spam = SPAM.Filtrados # the above works #antispam_spam = Filtrados antispam_signature = X-VERTICAL-IP-Quarantine-ID antispam_mail_sendmail = /usr/local/bin/mail_spam.sh antispam_mail_spam = --spam antispam_mail_notspam = --notspam acl = vfile mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change save mailbox_create mail_log_fields = uid box msgid from subject size vsize quota = maildir:DefaultQuota quota_exceeded_message = O destinatario desta mensagem esta com a caixa postal cheia. A sua mensagem so pode ser entregue se o destinatario apagar algumas das mensagens. quota_warning = storage=95%% /usr/local/bin/quota-warning.sh 95 %u quota_warning2 = storage=90%% /usr/local/bin/quota-warning.sh 90 %u sieve = /var/mail/sieve_scripts/%d/%n/.dovecot.sieve sieve_dir = /var/mail/sieve_scripts/%d/%n/sieve sieve_global_path = /etc/dovecot/sieve/default.sieve sieve_after = /etc/dovecot/sieve/default.sieve sieve_global_dir = /etc/dovecot/sieve trash = /etc/dovecot/dovecot-trash.conf expire = SPAM.Filtrados expire_dict = proxy::expiredict } protocol imap { mail_fsync = never mail_max_userip_connections = 2048 mail_plugins = quota imap_quota trash zlib mail_log notify imap_acl acl antispam ssl_ca = </etc/dovecot/ca.crt ssl_cert = </etc/dovecot/ufsc.br.crt ssl_key = </etc/dovecot/ufsc.br.key } -- Att. Bruno Galindro da Costa

1 0

Thunderbird ignores some folders
by dovecot.pkoch＠dfgh.net 03 Oct '14

03 Oct '14

Dear readers we are using Dovecot 2.2.7 and all of our users are using Thunderbird as their mail client. Some of them additionally use their iPad/iPhone and a very few an Android Mail-Client. Now one user noticed that two of his mail folders disappeared. He first believed that he accidentally deleted those folders but then he realized that they are still visible from his iPad. I checked this users maildir and everything looks normal. Deleting the index-files made no difference: New index-files were created but those two folders are still invisable from Thunderbird. My main concern is to find the reason for this behaviour. Maybe folders of other users have disappeared and they have not yet noticed. A fresh installation of Thunderbird will most likely fix this single users problem, but I cannot do this for all of our users. So here's my question: How would I debug such a situation? Kind regards Peter Koch And here's our config file: # Dovecot configuration file default_process_limit = 2048 protocols = imap listen = * base_dir = /var/dovecot/ mail_location = maildir:/mail/%u:LAYOUT=fs ssl_cert = </etc/ssl/certs/naev+chain.crt ssl_key = </etc/ssl/private/naev.key ssl_ca = </etc/ssl/certs/naev-ca.crt ssl_verify_client_cert = yes ssl_cert_username_field = x500UniqueIdentifier auth_ssl_username_from_cert = yes service imap-login { inet_listener imap { port = 0 } } service auth { client_limit = 4096 } service anvil { client_limit = 5000 } passdb { driver = checkpassword args = /usr/dovecot/bin/checkpassword } userdb { driver = passwd override_fields = home=/mail/%u } protocol imap { mail_max_userip_connections = 1000 }

3 2

LDA randomly failing to write email to disk
by Andy Dills 03 Oct '14

03 Oct '14

We're using 2.2.13 with pigeonhole 0.4.3, in a clustered environment (maildir on netapp, dual dovecot instances where each server is both a proxy and a backend). Every now and then (once a month per user, maybe?), users will see a blank email in their inbox. Investigating further, and we will see that the only information recorded in the maildir file for the message is the Return-Path, the Delivered-To, and the first Received line (the one generated by the local LDA via LMTP). For example, here is what I found in one such email today: Return-Path: <xxx(a)xecu.net> Delivered-To: <yyy(a)xecu.net> Received: from mail5.xecu.net ([10.0.1.85]) by mail2.xecu.net (Dovecot) with LMTP idX86eBjgaI1RdyQAA3SxDBg for <yyy(a)xecu.net>; Wed, 24 Sep 2014 15:24:20 -0400 Everything past that is lost, as if the either the LDA on mail2 exited early or was never sent the information from the dovecot instance on mail5. Here is a little more detail from the header of the same email, different recipient (all other recipients received the email properly, only one failed to receive properly): Return-Path: <xxx(a)xecu.net> Delivered-To: <yyz(a)xecu.net> Received: from mail5.xecu.net ([10.0.1.85]) by mail1.xecu.net (Dovecot) with LMTP id KPh8ItMXI1StBAAA/c3zFg for <yyz(a)xecu.net>; Wed, 24 Sep 2014 15:24:20 -0400 Received: from mail5.xecu.net by mail5.xecu.net (Dovecot) with LMTP id QsUBFoQZI1RjhgAAXyr1JQ ; Wed, 24 Sep 2014 15:24:20 -0400 Received: from mail5.xecu.net (localhost [127.0.0.1]) by mail5.xecu.net (Postfix) with ESMTP id 30AAE323BB18; Wed, 24 Sep 2014 15:24:20 -0400 (EDT) ... This is what I see in the logs of mail2, which is where the failure happened: Sep 24 15:24:20 mail2 dovecot: lmtp(51549, yyy(a)xecu.net) X86eBjgaI1RdyQAA3SxDBg: sieve: msgid=unspecified: stored mail into mailbox 'INBOX' When I look at the logs of mail1, which is where the successful delivery happened: Sep 24 15:24:20 mail1 dovecot: lmtp(1197, yyz(a)xecu.net) KPh8ItMXI1StBAAA/c3zFg: sieve: msgid=<20140924192412.1435.qmail(a)xxx.xecu.net>: stored mail into mailbox 'INBOX' Nothing of note seems to be logged on mail5 (only a message from postfix, nothing from the proxy side of the lmtp). I do notice, when I check for the PID of 51549 in the logs, all of its other transactions seem to register with proper msgids and were delivered fine. Also, I notice plenty of other messages that have the msgid=unspecified error, but which were delivered with no problems and not truncated, so I'm suspecting what may be happening is that somehow the backend instance is not receiving the actual data portion, and only getting the envelope from proxy instance. How do I approach debugging this? It's very infrequent, but yet quite annoying. Seems to have started since we upgraded to 2.2.13 (from an older 2.1 build) earlier this year. Thanks, Andy --- Andy Dills Xecunet, Inc. www.xecu.net 301-682-9972 ---

3 3

GETMETADATA UTF8 encoding of folder names instead of UTF7
by Bartłomiej Nogaś 03 Oct '14

03 Oct '14

Hello, I have dovecot 2.2.13 instance and I found that (at least for polish language) folder names in GETMETADATA command response are encoded in UTF8. Shouldn't it be converted to UTF7? Both SETMETADATA and GETMETADATA arguments have to be encoded in UTF7, the problem(?) is related only to server response example: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready. . login user pass . OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE METADATA QUOTA ACL RIGHTS=texk] Logged in . GETMETADATA "INBOX/&AVs-olaris" (/private/vendor/kolab/folder-type /shared/vendor/kolab/folder-type) * METADATA {14} INBOX/śolaris (/private/vendor/kolab/folder-type NIL /shared/vendor/kolab/folder-type {4} mail) . OK Getmetadata completed. "INBOX/śolaris" - UTF8 Best Regards,

2 1

home from SQL
by Ralf Hildebrandt 03 Oct '14

03 Oct '14

Currently I'm using user_query = SELECT 1000 AS uid, 1000 AS gid, '/srv/vmail/%2.256Hu/%Lu' AS home, ... so I'm hashing based on %u (basically). But in my SQL db I have a "unique_identifier" field, which never changes, even when the user is changing his/her email address (due to marriage or the like). What I'd really like to do is to use %u to find the value of the unique_identifier field, hash THAT value and use "AS home". But how? That way I can rename users without shuffling directories around the filesystem. -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

3 2

virtualfolders under mdbox storage backend
by Jesus Cea 03 Oct '14

03 Oct '14

Reading docs in http://wiki2.dovecot.org/Plugins/Virtual I wonder how is that used if I am using MDBOX as my storage backend. The only references there are about Maildir. -- Jesús Cea Avión _/_/ _/_/_/ _/_/_/ jcea(a)jcea.es - http://www.jcea.es/ _/_/ _/_/ _/_/ _/_/ _/_/ Twitter: @jcea _/_/ _/_/ _/_/_/_/_/ jabber / xmpp:jcea@jabber.org _/_/ _/_/ _/_/ _/_/ _/_/ "Things are not so easy" _/_/ _/_/ _/_/ _/_/ _/_/ _/_/ "My name is Dump, Core Dump" _/_/_/ _/_/_/ _/_/ _/_/ "El amor es poner tu felicidad en la felicidad de otro" - Leibniz

2 1

Re: [Dovecot] quota using wrong limits in user shared mailboxes
by Bartłomiej Nogaś 03 Oct '14

03 Oct '14

Hi, I confirm this bug with LDAP userdb. The temporary workaround is to set quota ignore rule for Shared namespace or specific shared folder. This is obviously not secure workaround. Example: for a shared namespace: namespace ( .... prefix = Shared Folders/%%u/ ... } you have to set quota_rule4 = Shared Folders/*:ignore or quota_rule4 = Shared Folders/username/*:ignore - Bartlomiej Nogas

2 1

Trouble getting listescape plugin to work with "$" separator (as demonstrated in Wiki) in Dovecot 2.2.9
by Ben Johnson 03 Oct '14

03 Oct '14

Hello, I'm attempting to install the listescape plugin so that IMAP users are able to include periods (.) and forward slashes (/) in IMAP directory names. I'm following the instructions at http://wiki2.dovecot.org/Plugins/Listescape , which imply that this can be accomplished by enabling the listescape plugin and using the dollar sign ($) as the separator. With regard to my dovecot configuration, first, I changed protocol imap { mail_plugins = quota imap_quota antispam } to protocol imap { mail_plugins = quota imap_quota antispam listescape namespace private { separator = $ inbox = yes } } When I start dovecot, I receive the following error: doveconf: Warning: NOTE: You can get a new clean config file with: doveconf -n > dovecot-new.conf doveconf: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:102: namespace private {} has been replaced by namespace { type=private } Pretty straightforward; I made the required change to yield protocol imap { mail_plugins = quota imap_quota antispam listescape namespace { type = private separator = $ inbox = yes } } But now, when I attempt to start dovecot, I receive the following error: doveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf line 104: Unknown variable: $ doveconf: Error: managesieve-login: dump-capability process returned 89 doveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf line 104: Unknown variable: $ Is it possible that the instructions at the Wiki 2 URL cited above are out-of-date? If I try to escape the $ with any other character (I'm just shooting in the dark regarding possible escape characters, as I cannot find definitive documentation that pertains to escaping $ in the dovecot configuration), I receive yet another error: doveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf: Namespace '': Hierarchy separator must be only one character long doveconf: Error: managesieve-login: dump-capability process returned 89 doveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf: Namespace '': Hierarchy separator must be only one character long Ultimately, I have two questions: 1.) Is the nesting structure that I've employed correct? The Wiki 2 page is not clear with regard to the nesting; is it correct to put the "namespace" block inside the "protocol imap" block, as I demonstrated above? 2.) Is it possible to escape the dollar sign so that it can be used as the separator? Full "doveconf -n" output is included below. Thanks for any assistance, -Ben # doveconf -n # 2.2.9: /etc/dovecot/dovecot.conf doveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf line 104: Unknown variable: $ doveconf: Error: managesieve-login: dump-capability process returned 89 # OS: Linux 3.13.0-34-generic x86_64 Ubuntu 14.04.1 LTS auth_mechanisms = plain login disable_plaintext_auth = no listen = *,[::] log_timestamp = "%Y-%m-%d %H:%M:%S " mail_debug = yes mail_privileged_group = vmail passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { antispam_backend = pipe antispam_debug_target = syslog antispam_pipe_program = /bin/bash antispam_pipe_program_args = /usr/local/bin/sa-learn-pipe.sh antispam_pipe_program_notspam_arg = --ham antispam_pipe_program_spam_arg = --spam antispam_pipe_tmpdir = /tmp antispam_spam_pattern_ignorecase = SPAM;JUNK antispam_trash_pattern_ignorecase = trash;Deleted * antispam_verbose_debug = 1 quota = dict:user::file:/var/vmail/%d/%n/.quotausage quota_rule2 = Trash:storage=+100M quota_rule3 = Junk:ignore quota_rule4 = INBOX:storage=+100M quota_warning = storage=100%% quota-reached 100 %u %d quota_warning2 = storage=95%% quota-warning 95 %u %d quota_warning3 = storage=80%% quota-warning 80 %u %d quota_warning4 = -storage=100%% quota-below below %u %d sieve = /var/vmail/%d/%n/.sieve } postmaster_address = postmaster(a)localhost.com protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } user = root } service config { unix_listener config { group = vmail mode = 0600 user = vmail } } service imap-login { client_limit = 1000 process_limit = 500 } service quota-below { executable = script /usr/local/bin/quota-below.sh unix_listener quota-below { group = vmail mode = 0666 user = vmail } user = vmail } service quota-reached { executable = script /usr/local/bin/quota-reached.sh unix_listener quota-reached { group = vmail mode = 0666 user = vmail } user = vmail } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { group = vmail mode = 0666 user = vmail } user = vmail } ssl_cert = </etc/postfix/smtpd.cert ssl_key = </etc/postfix/smtpd.key userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { mail_plugins = quota imap_quota antispam listescape namespace { inbox = yes location = prefix = separator = $ type = private } } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } protocol lda { info_log_path = log_path = mail_plugins = sieve quota }

2 3

auth with entire email addr instead of just username
by Cliff Hayes 03 Oct '14

03 Oct '14

I am trying to configure a new IMAP based mail server. I thought I had everything correct. I have dovecot logging turned up and see that dovecot is processing the entire email address as the username like this... Oct 2 14:52:20 servername dovecot: auth: Debug: pam(testuser(a)domain.com,1.2.3.4): lookup service=dovecot ... and of course pam is reporting that as an invalid user. Moments ago when all was mbox, authentication worked fine. I can see Thunderbird has the username correct (no domain). What is tacking on the domain and how do I fix? Thanks in advance.

2 4

two dovecot instances
by jjhoffart 02 Oct '14

02 Oct '14

Hello, I am currently trying to setup two invocations of dovecot to run on a debian based server. One for director and the other a stock debian instance. The issue I am having is when I go to start the director instance, I receive multiple errors telling me that the listening ports are already in use. I have change these ports in the 10-master.conf file but am still presented with the same errors when starting the second instance. Is this the only file in which the ports need to be changed (10-master.conf) or is there another file in which the ports need to be set?

2 1

Re: Simply mysql quota check
by Alfredo Saldanha 02 Oct '14

02 Oct '14

Steffen, My problem was exactly what you said, the quota field in my query. I fixed it and now is working very well. Thank you very much. Alfredo ----- Mensagem original ----- De: "Steffen Kaiser" <skdovecot(a)smail.inf.fh-brs.de> Para: "Alfredo Saldanha" <asaldanha(a)infolink.com.br> Cc: dovecot(a)dovecot.org Enviadas: Quinta-feira, 2 de outubro de 2014 3:33:13 Assunto: Re: Simply mysql quota check -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Wed, 1 Oct 2014, Alfredo Saldanha wrote: > #/etc/dovecot/dovecot-sql.conf.ext > password_query = \ > SELECT username AS user, value AS password \ > FROM mailboxes WHERE username = '%n@%d' > > user_query = \ > SELECT username, domain, \ > CONCAT('*:storage=', SUBSTRING_INDEX(quota, 'm', 1)*1048576) AS userdb_quota_rule \ > FROM mailboxes, domains WHERE mailboxes.username = '%n@%d' \ > AND domains.domain = '%d' > > My idea is when a message is delivered, the dovecot to check quota in the mysql according to the value received in the "user_query" but he does not. > It shows a value of 2GB that I don't know where it gets. > > I execute a manual query in mysql to know the quota my test user and checked that are 5GB, but when I see the dovecot, it shows 2G. > > SELECT username, domain, CONCAT('*:bytes=', SUBSTRING_INDEX(quota, 'm', 1)*1048576) AS userdb_quota_rule > FROM mailboxes, domains WHERE mailboxes.username = 'junix(a)domain.com' AND domains.domain = 'domain.com' 1) your manual query uses '*:bytes=', whereas your conf uses '*:storage='. 2) you return the value as userdb_quota_rule, but it must read quota_rule in the user_query. In the password_query fields are prefixed by userdb_ . See http://wiki2.dovecot.org/Quota/Configuration - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBVCzxqnz1H7kL/d9rAQIneAgAukcibxJoQdtwdmrxHbXmKgQsCG22itH5 9VSFGigiPjXg/F1hkj7jHC/xB5uh2M8ayMos+hPxaJkKC4AKYEZu1QEwXAX2qrvN DXt7uPZHLJSMtlWCVb5s6h+v6K3JnbWRrjI4CIfYqB8i8MHKBWei0K02QZcOUOfy KeD7lAIPRuZPnIEiWYREpalRMGeQzZ69SHEmhxDx7VFO5FanlHDxdCwmO7qHoJen ZuNpUWMf5i5czxcDhHjLdtGODv005LFDCXhj48SqI17WzD3mPjJegOCjym6RfKmU RT+PtKieBkzygT1YzvjJbHISFxJSryVg8c48tCb0FgjkNKWXq/KsPg== =wzY8 -----END PGP SIGNATURE-----

1 0

Simply mysql quota check
by Alfredo Saldanha 02 Oct '14

02 Oct '14

Hi there, I'm setting up a new email server with Dovecot(2.2.9) and MySQL. My Dovecot configuration: #/etc/dovecot/conf.d/90-quota.conf service quota-warning { executable = script /usr/local/bin/quota-warning.sh user = dovecot unix_listener quota-warning { user = vmail } } plugin { quota = maildir:User quota quota_warning = storage=95%% quota-warning 95 %u@%d quota_warning2 = storage=80%% quota-warning 80 %u@%d args = /etc/dovecot/dovecot-sql.conf.ext } #/etc/dovecot/dovecot-sql.conf.ext password_query = \ SELECT username AS user, value AS password \ FROM mailboxes WHERE username = '%n@%d' user_query = \ SELECT username, domain, \ CONCAT('*:storage=', SUBSTRING_INDEX(quota, 'm', 1)*1048576) AS userdb_quota_rule \ FROM mailboxes, domains WHERE mailboxes.username = '%n@%d' \ AND domains.domain = '%d' My idea is when a message is delivered, the dovecot to check quota in the mysql according to the value received in the "user_query" but he does not. It shows a value of 2GB that I don't know where it gets. I execute a manual query in mysql to know the quota my test user and checked that are 5GB, but when I see the dovecot, it shows 2G. SELECT username, domain, CONCAT('*:bytes=', SUBSTRING_INDEX(quota, 'm', 1)*1048576) AS userdb_quota_rule FROM mailboxes, domains WHERE mailboxes.username = 'junix(a)domain.com' AND domains.domain = 'domain.com' +-------------------+----------------+--------------------+ | username | domain | userdb_quota_rule | +-------------------+----------------+--------------------+ | junix(a)domain.com | domain.com | *:bytes=5242880000 | +-------------------+----------------+--------------------+ $ sudo doveadm quota get -u junix Quota name Type Value Limit % User quota STORAGE 10 2097152 0 User quota MESSAGE 1 - How would the setting to simply verify the quota of users as userdb_quota_rule this query? BR, Alfredo Jr.

2 1

Dovecot fails to start - Unknown setting: socket
by Max Shortte 02 Oct '14

02 Oct '14

I’m receiving the following error(s) messages when trying reloading dovecot (Debian wheezy). doveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf line 73: Unknown setting: socket doveconf: Error: managesieve-login: dump-capability process returned 89 Configuration file /etc/dovecot/dovecot.conf : # If you only want to use dovecot-auth, you can set this to "none". protocols = imap sieve log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/var/mail/%d/%n:INDEX=/var/mail/indexes/%d/%n mail_privileged_group = vmail mail_debug = no first_valid_uid = 5000 last_valid_uid = 5000 maildir_copy_with_hardlinks = yes mail_chroot = yes default_login_user = dovecot ssl_cert = /etc/ssl/certs/star_palibrary_org_combined.crt ssl_key = /etc/ssl/private/star_palibrary_org.key protocol imap { # imap_client_workarounds = outlook-idle delay-newmail } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } ## ## MANAGESIEVE specific settings ## protocol sieve { } plugin { sieve_storage = ~/sieve sieve_global_path = /var/vmail/globalsieverc sieve = ~/dovecot.sieve } protocol lda { #log_path = /var/vmail/dovecot-deliver.log auth_socket_path = /var/run/dovecot/auth-master postmaster_address = shortte(a)mvs.org mail_plugins = sieve } ################################### ## ## LDA specific settings ## auth_default_realm = mvs.org auth_debug = no auth_debug_passwords = no auth_mechanisms = auth_plain auth_login auth_digest-md5 auth_cram-md5 # dovecot-auth only needs to be able to connect to SQL # default_login_user = mail passdb { driver = sql args = /etc/dovecot/dovecot-sql.conf.ext } userdb { driver= sql args = /etc/dovecot/dovecot-sql.conf.ext } socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = vmail group = vmail } client { # The client socket is generally safe to export to everyone. Typical use # is to export it to your SMTP server so it can do SMTP AUTH lookups # using it. path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } } Packages: ii dovecot-common 1:2.1.7-7+deb7u1 ii dovecot-core 1:2.1.7-7+deb7u1 ii dovecot-gssapi 1:2.1.7-7+deb7u1 ii dovecot-imapd 1:2.1.7-7+deb7u1 ii dovecot-ldap 1:2.1.7-7+deb7u1 ii dovecot-lmtpd 1:2.1.7-7+deb7u1 ii dovecot-managesieved 1:2.1.7-7+deb7u1 ii dovecot-mysql 1:2.1.7-7+deb7u1 ii dovecot-pgsql 1:2.1.7-7+deb7u1 ii dovecot-pop3d 1:2.1.7-7+deb7u1 Any ideas?

3 3

Re: Dovecot fails to start - Unknown setting: socket
by Alan McGinlay 02 Oct '14

02 Oct '14

you almost certainly have a missing closing bracket or double quote somewhere.

2 1

[Dovecot] mdbox-files over 2 MB
by Hardy Flor 01 Oct '14

01 Oct '14

Hello, I received an e-mail, this includes 9 forwarding, each with a file. These files are not removed from the e-mail and stored in the attachments-directory, although they are larger than 16 KB. For all files the "Content-Transfer-Encoding: base64" is set. The email is stored in completely in "m.00000034" ------------------------------------- doveconf: # 2.2.12: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.4 ext4 mail_attachment_dir = /var/mail/attachments mail_attachment_hash = %{md5} mail_attachment_min_size = 16 k mail_location = mdbox:/var/mail/user/%n mdbox_rotate_interval = 1 weeks mdbox_rotate_size = 2 M ------------------------------------- directory: root@xxx:/var/mail/user/xxx/storage# ls -al ... -rw------- 1 vmail mail 14433784 Mär 16 13:51 m.00000034 ...

6 8

Master user and invalid credentials dovecot-2.2.13
by Götz Reinicke - IT Koordinator 30 Sep '14

30 Sep '14

Hi, I followed the docs from the dovecot wiki (http://wiki2.dovecot.org/Authentication/MasterUsers) and still have some problem: 1. uncommented "!include auth-ldap.conf.ext" in 10-auth.conf 2. htpasswd -b -c -s .... to create user/password for a masteruseruser 3. checked auth-master.conf.ext When I try to test the login, I always get an "invalid credentials" in the logs with auth_debug=yes set. dovecot can read /etc/dovecot/master-users The users are in ldap. The example wiki shows the passwords {SHA1}...., in my password file they are {SHA}.... The "master user" posting in september gave some clues what might be wrong, but did not help to solve my problem. Any suggestions are welcome! Thanks and regards. Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 82 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Jürgen Walter MdL Staatssekretär im Ministerium für Wissenschaft, Forschung und Kunst Baden-Württemberg Geschäftsführer: Prof. Thomas Schadt

4 4

No AUTH PLAIN with dovecot 2.0.19
by Michael Wechner 30 Sep '14

30 Sep '14

Hi I have installed the package dovecot-postfix on Ubuntu 12.04 LTS: dovecot --version: 2.0.19 postconf -d | grep version: 2.9.6 and receiving email works very fine, but relaying email does not work. I think the problem is that after STARTTLS the authentication is not being executed 250-AUTH PLAIN 250-AUTH=PLAIN which means using telnet returns telnet mx2.wyona.com 587 Trying 50.116.54.197... Connected to node3.wyona.com. Escape character is '^]'. 220 node3.members.linode.com ESMTP Postfix (Ubuntu) EHLO letscallitevil.com 250-node3.members.linode.com 250-PIPELINING 250-SIZE 10240000 250-VRFY 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 DSN So far I have used dovecot version 1.2.9, which works very fine, but the configuration /etc/dovecot/dovecot.conf seems to be very different in the case of dovecot version 2.0.19. I have checked all kind of tutorials for several days now, like for example https://help.ubuntu.com/10.04/serverguide/postfix.html but nothing helped. Any pointers or help is very much appreciated. Thanks Michael

4 13

"doveadm sync/backup" should show some kind of progress meter
by Jesus Cea 30 Sep '14

30 Sep '14

Using "-v" with those commands doesn't nothing, aparently. Using "-D" shows complex debug info only useful for debugging. But this comands take a lot of time and should show some kind of progress meter/feedback like network speed, percent, ETA, etc. -- Jesús Cea Avión _/_/ _/_/_/ _/_/_/ jcea(a)jcea.es - http://www.jcea.es/ _/_/ _/_/ _/_/ _/_/ _/_/ Twitter: @jcea _/_/ _/_/ _/_/_/_/_/ jabber / xmpp:jcea@jabber.org _/_/ _/_/ _/_/ _/_/ _/_/ "Things are not so easy" _/_/ _/_/ _/_/ _/_/ _/_/ _/_/ "My name is Dump, Core Dump" _/_/_/ _/_/_/ _/_/ _/_/ "El amor es poner tu felicidad en la felicidad de otro" - Leibniz

1 0

"doveadm sync/backup" and SSH should use "ssh-agent" if available
by Jesus Cea 30 Sep '14

30 Sep '14

I use SSH-AGENT in my system, to cache SSH credentials and avoid typing my key every time I connect to a remoto host. But "doveadm sync/backup", when one of the ends is SSH accessed, doesn't use the available SSH-AGENT and forces me to type my password. -- Jesús Cea Avión _/_/ _/_/_/ _/_/_/ jcea(a)jcea.es - http://www.jcea.es/ _/_/ _/_/ _/_/ _/_/ _/_/ Twitter: @jcea _/_/ _/_/ _/_/_/_/_/ jabber / xmpp:jcea@jabber.org _/_/ _/_/ _/_/ _/_/ _/_/ "Things are not so easy" _/_/ _/_/ _/_/ _/_/ _/_/ _/_/ "My name is Dump, Core Dump" _/_/_/ _/_/_/ _/_/ _/_/ "El amor es poner tu felicidad en la felicidad de otro" - Leibniz

1 0

"doveadm backup/sync" are badly documented
by Jesus Cea 29 Sep '14

29 Sep '14

Most documents around there talk abour "dsync", but the modern way is "doveadm backup". This command is not documented in the wiki and there are a few details missing, like how to use it thru SSH. I am currently doing some tests about how to backup my mdbox. I can do tests in local using: $ doveadm backup -u jcea -m proveedores/dovecot mdbox:/tmp/aa/ This will "backup" this mailing list mailbox to "/tmp/aa". Good. Lets try thru SSH: $ doveadm backup -u jcea -m proveedores/dovecot ssh 127.0.0.1 dsync -u jcea mdbox:/tmp/aa/ jcea(a)127.0.0.1's password: Fatal: Invalid parameter: mdbox:/tmp/aa/ dsync-local(jcea): Error: read(remote) failed: EOF (version not received) How shoudl I do it?. $ doveadm backup -h backup: invalid option -- 'h' doveadm backup [-u <user>|-A] [-S <socket_path>] [-dfR] [-l <secs>] [-r <rawlog path>] [-m <mailbox>] [-n <namespace> | -N] [-x <exclude>] [-s <state>] <dest> I can't find any explanation at all about the different parameters of "doveadm backup". Same thing with "doveadm sync". -- Jesús Cea Avión _/_/ _/_/_/ _/_/_/ jcea(a)jcea.es - http://www.jcea.es/ _/_/ _/_/ _/_/ _/_/ _/_/ Twitter: @jcea _/_/ _/_/ _/_/_/_/_/ jabber / xmpp:jcea@jabber.org _/_/ _/_/ _/_/ _/_/ _/_/ "Things are not so easy" _/_/ _/_/ _/_/ _/_/ _/_/ _/_/ "My name is Dump, Core Dump" _/_/_/ _/_/_/ _/_/ _/_/ "El amor es poner tu felicidad en la felicidad de otro" - Leibniz

2 2

Imap: Panic: UID 13737 lost unexpectedly from INBOX
by Urban Loesch 29 Sep '14

29 Sep '14

Hi, today I got an panic in imap proccess. Details are: Dovecot Version: ii dovecot-core 2:2.2.13-1~auto+74 amd64 secure POP3/IMAP server - core files ii dovecot-dbg 2:2.2.13-1~auto+74 amd64 secure POP3/IMAP server - debug symbols ii dovecot-imapd 2:2.2.13-1~auto+74 amd64 secure POP3/IMAP server - IMAP daemon ii dovecot-lmtpd 2:2.2.13-1~auto+74 amd64 secure POP3/IMAP server - LMTP server ii dovecot-managesieved 2:2.2.13-1~auto+74 amd64 secure POP3/IMAP server - ManageSieve server ii dovecot-mysql 2:2.2.13-1~auto+74 amd64 secure POP3/IMAP server - MySQL support ii dovecot-pop3d 2:2.2.13-1~auto+74 amd64 secure POP3/IMAP server - POP3 daemon ii dovecot-sieve 2:2.2.13-1~auto+74 amd64 secure POP3/IMAP server - Sieve filters support Logs: Sep 29 08:41:16 mailstoreul. dovecot: imap(sys@domain pid:15160 session:<4ccaeS4EYgDD/uGI>): Panic: UID 13737 lost unexpectedly from INBOX Sep 29 08:41:16 mailstoreul. dovecot: imap(sys@domain pid:15160 session:<4ccaeS4EYgDD/uGI>): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x6cc1f) [0x7f14d02aac1f] -> /usr/lib/dovecot/libdovecot.so.0(+0x6cc7e) [0x7f14d02aac7e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f14d026389e] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(+0xa12e) [0x7f14cea4c12e] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(virtual_storage_sync_init+0x8db) [0x7f14cea4d07b] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x33) [0x7f14d05982a3] -> dovecot/imap(imap_sync_init+0x7a) [0x41f92a] -> dovecot/imap() [0x41032e] -> dovecot/imap() [0x410531] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xa577e) [0x7f14d05bb77e] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handle_timeouts+0xc6) [0x7f14d02bbfa6] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x93) [0x7f14d02bcd63] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9) [0x7f14d02bbe09] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f14d02bbe88] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f14d0268d03] -> dovecot/imap(main+0x298) [0x40c238] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f14cfed1eed] -> dovecot/imap() [0x40c39d] Sep 29 08:41:16 mailstoreul. dovecot: imap(sys@domain pid:15160 session:<4ccaeS4EYgDD/uGI>): Fatal: master: service(imap): child 15160 killed with signal 6 (core dumped) The core dump: (gdb) bt full #0 0x00007f14cfee51a5 in raise () from /lib/x86_64-linux-gnu/libc.so.6 No symbol table info available. #1 0x00007f14cfee8420 in abort () from /lib/x86_64-linux-gnu/libc.so.6 No symbol table info available. #2 0x00007f14d02aac15 in default_fatal_finish (type=<optimized out>, status=status@entry=0) at failures.c:193 backtrace = 0x253b380 "/usr/lib/dovecot/libdovecot.so.0(+0x6cc1f) [0x7f14d02aac1f] -> /usr/lib/dovecot/libdovecot.so.0(+0x6cc7e) [0x7f14d02aac7e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f14d026389e] -> /usr/lib/d"... #3 0x00007f14d02aac7e in i_internal_fatal_handler (ctx=0x7fff0f69d7f0, format=<optimized out>, args=<optimized out>) at failures.c:657 status = 0 #4 0x00007f14d026389e in i_panic (format=format@entry=0x7f14cea4f528 "UID %u lost unexpectedly from %s") at failures.c:267 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0} args = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7fff0f69d8e0, reg_save_area = 0x7fff0f69d820}} #5 0x00007f14cea4c12e in virtual_sync_external_flags (vseq=1250, real_uid=13737, bbox=<error reading variable: Unhandled dwarf expression opcode 0xfa>, bbox=<error reading variable: Unhandled dwarf expression opcode 0xfa>, ctx=<error reading variable: Unhandled dwarf expression opcode 0xfa>, ctx=<error reading variable: Unhandled dwarf expression opcode 0xfa>) at virtual-sync.c:67 flags = <optimized out> kw_names = <optimized out> keywords = <optimized out> #6 0x00007f14cea4d07b in virtual_sync_backend_box_sync (sync_flags=<optimized out>, bbox=0x26071f0, ctx=0x261f200) at virtual-sync.c:975 sync_rec = {seq1 = 5, seq2 = 7, type = MAILBOX_SYNC_TYPE_FLAGS} idx1 = 5 vuid = <optimized out> sync_ctx = 0x268a640 sync_status = {sync_delayed_expunges = 1} idx2 = 11 vseq = 1250 #7 virtual_sync_backend_box (bbox=0x26071f0, ctx=0x261f200) at virtual-sync.c:1106 status = {messages = 0, recent = 0, unseen = 3491983296, uidvalidity = 32532, uidnext = 0, first_unseen_seq = 0, first_recent_uid = 3456139202, last_cached_seq = 32532, highest_modseq = 80, highest_pvt_modseq = 140733451983700, keywords = 0x7, permanent_flags = 3495924087, permanent_keywords = 0, allow_new_keywords = 0, nonpermanent_modseqs = 1, no_modseq_tracking = 0, have_guids = 1, have_save_guids = 0, have_only_guid128 = 0} ret = <optimized out> sync_flags = <optimized out> bbox_index_opened = <optimized out> #8 virtual_sync_backend_boxes (ctx=0x261f200) at virtual-sync.c:1444 bboxes = 0x6 i = <optimized out> count = <optimized out> #9 virtual_sync (flags=0, mbox=0x2611de0) at virtual-sync.c:1542 ctx = <optimized out> index_sync_flags = <optimized out> ret = <optimized out> #10 virtual_storage_sync_init (box=0x2611de0, flags=0) at virtual-sync.c:1562 mbox = 0x2611de0 sync_ctx = <optimized out> ret = 0 #11 0x00007f14d05982a3 in mailbox_sync_init (box=box@entry=0x2611de0, flags=flags@entry=0) at mail-storage.c:1678 _data_stack_cur_id = 4 ctx = <optimized out> #12 0x000000000041f92a in imap_sync_init (client=0x2567f40, box=<optimized out>, imap_flags=imap_flags@entry=0, flags=flags@entry=0) at imap-sync.c:230 ctx = 0x25ff630 __FUNCTION__ = "imap_sync_init" #13 0x000000000041032e in idle_sync_now (box=<optimized out>, ctx=0x2568b40) at cmd-idle.c:146 No locals. #14 0x0000000000410531 in idle_callback (box=<optimized out>, ctx=<optimized out>) at cmd-idle.c:158 client = 0x2567f40 #15 0x00007f14d05bb77e in check_timeout (box=0x267d320) at index-mailbox-check.c:51 ibox = <optimized out> file = 0x0 st = {st_dev = 37633, st_ino = 21496482, st_nlink = 1, st_mode = 33152, st_uid = 1001, st_gid = 1001, __pad0 = 0, st_rdev = 0, st_size = 2500, st_blksize = 4096, st_blocks = 8, st_atim = {tv_sec = 1411943094, tv_nsec = 172171250}, st_mtim = {tv_sec = 1411972876, tv_nsec = 150792601}, st_ctim = {tv_sec = 1411972876, tv_nsec = 150792601}, __unused = {0, 0, 0}} notify = true #16 0x00007f14d02bbfa6 in io_loop_handle_timeouts_real (ioloop=0x2543740) at ioloop.c:410 timeout = 0x261bdd0 item = 0x261bdd0 tv = {tv_sec = 0, tv_usec = 0} tv_call = {tv_sec = 1411972876, tv_usec = 171667} t_id = 3 #17 io_loop_handle_timeouts (ioloop=ioloop@entry=0x2543740) at ioloop.c:423 ---Type <return> to continue, or q <return> to quit--- _data_stack_cur_id = 2 #18 0x00007f14d02bcd63 in io_loop_handler_run_internal (ioloop=ioloop@entry=0x2543740) at ioloop-epoll.c:193 ctx = 0x25443d0 events = 0x0 event = 0x11a list = <optimized out> io = <optimized out> tv = {tv_sec = 0, tv_usec = 281628} events_count = 5 msecs = 282 ret = 0 i = <optimized out> call = <optimized out> __FUNCTION__ = "io_loop_handler_run_internal" #19 0x00007f14d02bbe09 in io_loop_handler_run (ioloop=ioloop@entry=0x2543740) at ioloop.c:488 No locals. #20 0x00007f14d02bbe88 in io_loop_run (ioloop=0x2543740) at ioloop.c:465 __FUNCTION__ = "io_loop_run" #21 0x00007f14d0268d03 in master_service_run (service=0x25435d0, callback=callback@entry=0x420cd0 <client_connected>) at master-service.c:566 No locals. #22 0x000000000040c238 in main (argc=1, argv=0x2543390) at main.c:410 set_roots = {0x428900, 0x0} login_set = {auth_socket_path = 0x253b048 "\001", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x420b60 <login_client_connected>, failure_callback = 0x420870 <login_client_failed>, request_auth_token = 1} service_flags = <optimized out> storage_service_flags = <optimized out> username = 0x0 c = <optimized out> When did the error happened? I was connected with two clients to the same account. - Thunderbird - Horde 5 Webmail I deleted the mail with the UID 13737 within Horde Webmail. Logs for this operation: The email was deleted by the Horde Webmail: Sep 29 08:40:30 mailstoreul. dovecot: imap(sys@domain pid:32487 session:<Xvn5ii4EQwDD/uH4>): flag_change: box=INBOX, uid=13737, msgid=<20140928233719.96BAAE842@bkp-eloma>, size=3613, from=sys@domain (Cron Daemon) Sep 29 08:40:43 mailstoreul. dovecot: imap(sys@domain pid:33205 session:</JzHiy4EdgDD/uH4>): expunge: box=INBOX, uid=13737, msgid=<20140928233719.96BAAE842@bkp-eloma>, size=3613, from=sys@domain (Cron Daemon) The still opened session from Thunderbird gots the error and panics (detailed logs see above): Sep 29 08:41:16 mailstoreul. dovecot: imap(sys@domain pid:15160 session:<4ccaeS4EYgDD/uGI>): Panic: UID 13737 lost unexpectedly from INBOX Thanks and regards Urban Loesch

1 0

"doveadm backup/sync" don't follow message moving even with MDBOX
by Jesus Cea 29 Sep '14

29 Sep '14

Using mdbox as the storage backend, moving a message from a mailbox to another just update a reference. The message is not fisically moved on the disk. I would expect "dsync" to use this fact when source and destination are mdbox. But it doesn't. Anybody else can confirm?. Any plan to implement it?. Thanks!. -- Jesús Cea Avión _/_/ _/_/_/ _/_/_/ jcea(a)jcea.es - http://www.jcea.es/ _/_/ _/_/ _/_/ _/_/ _/_/ Twitter: @jcea _/_/ _/_/ _/_/_/_/_/ jabber / xmpp:jcea@jabber.org _/_/ _/_/ _/_/ _/_/ _/_/ "Things are not so easy" _/_/ _/_/ _/_/ _/_/ _/_/ _/_/ "My name is Dump, Core Dump" _/_/_/ _/_/_/ _/_/ _/_/ "El amor es poner tu felicidad en la felicidad de otro" - Leibniz

1 0

dsync full sync
by Atıf CEYLAN 29 Sep '14

29 Sep '14

Hi all, I have 2 question. First: I use dovecot (version 2.2.9) with mdbox mail format. When I run dsync tool with "mirror" or "backup" parameters my source and destination directory synchronize correctly but if I delete some messages in user mailbox, deleted messages does not synced to destination. For example : atif(a)domain.com path is /mail/domain.com/atif/ and its size is 1GB. after first running the "dsync -u atif(a)domain.com backup mdbox:/backup/domain.com/atif/" command, size of "/backup/domain.com/atif/" is 1GB I deleted 300mb messages in atif mailbox then /mail/domain.com/atif/ is decreased to 700MB and I launched dsync command again. But /backup/domain.com/atif/ is not decreased to 700Mb. My backup directory still 1GB . I tried dsync with "-f , backup, mirror" parameters. Second problem, the first time the backup atif's quota size is increasing to x2. before backup : atif(a)domain.com quota size 1GB after backup: atif(a)domain.com quota size 2GB so I must run "doveadm quota recalc" command. Why? What is correct usage of mdbox mail format and dsync tool? -- M.Atıf CEYLAN

2 1

dsync mirror does not maintain changes between mailboxes
by Alan McGinlay 28 Sep '14

28 Sep '14

Hi, running: dsync -D -v -o mail_fsync=never mirror -R -f -u user@domain imapc: Where "domain" is a cyrus imap server does not do what the documentation says it does, not even close. After the first run to an empty mailbox on the dovecot 2.2.13 server all the mails (1.1GB) seem to be correctly synced. I send a test email to the dovecot server and it shows up correctly. Second run of the above dsync command, first thing that happens is all mails are deleted from the dovecot mailbox (yet the storage used by output of "du -m" doesn't change) and the sync appears to happen again from scratch however the disk space increases again! Now up to about 2GB and another run will take it up a few hundred mb more! I have tried with multiple different mail storage formats, maildir++, mdbox sdbox, all show the same (except maildir which just complains that INBOX can't be deleted on the second dsync run). This is frustrating beyond belief, please please anyone who has any insight let me know, the dsync debug output is a little huge to sanitize and post to the list but i can send it individually if anyone has any ideas! I am ready to give up totally on dovecot but at the same time I just wish it would work! doveconf -n # 2.2.13 (6bb26098a45c): /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-67-virtual x86_64 Ubuntu 14.04.1 LTS auth_debug = yes auth_master_user_separator = * default_vsz_limit = 512 M disable_plaintext_auth = yes imapc_features = rfc822.size imapc_host = oldmailhost.domain.com imapc_master_user = cyradmin imapc_password = xxxxxxxx imapc_user = %u mail_gid = vmail mail_home = /var/vmail/domains/%d/%1n/%n mail_location = sdbox:~/sdbox mail_plugins = zlib notify quota fts fts_solr mail_prefetch_count = 30 mail_uid = vmail mailbox_list_index = yes managesieve_sieve_capability = fileinto imapflags namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/passwd.masterusers driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { fts = solr fts_solr = url=http://localhost:8080/solr/ quota = dirsize:User quota quota_grace = 10%% quota_rule = *:storage=20G sieve = ~/.dovecot.sieve sieve_dir = /var/vmail/sieve/domain/%1d/%d/%1n/%n/ sieve_extensions = imapflags fileinto zlib_save = bz2 zlib_save_level = 5 } protocols = imap pop3 lmtp sieve service auth-worker { user = $default_internal_user } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } vsz_limit = 512 M } service imap { process_limit = 1024 vsz_limit = 512 M } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_ssl = yes protocol lmtp { mail_plugins = zlib notify quota fts fts_solr quota sieve } protocol imap { mail_plugins = zlib notify quota fts fts_solr imap_quota } protocol sieve { managesieve_implementation_string = Cyrus timsievd v2.2.13 }

1 0

Re: Dovecot Sieve and Postfix header_checks Issue
by Joseph Tam 27 Sep '14

27 Sep '14

"Klaipedaville on Google" <klaipedaville(a)gmail.com> writes: > However, my header_checks file has just 5 lines of regexp as follows: > ... > /^From:.*\@.*\.tw/ REJECT Sorry, Taiwanese mail is not allowed. Can't speak about the other issues you are having, but is this regexp pattern what you want? Unless Postfix PCRE automatically right-anchors these regexps, aren't you rejecting mail from someone(a)mail.twinpeaks.org, or even twitter notifications (from *(a)bounce.twitter.com) Joseph Tam <jtam.home(a)gmail.com>

4 7

Dovecot Sieve and Postfix header_checks Issue
by Klaipedaville on Google 27 Sep '14

27 Sep '14

Hello List, I tried to subscribe but it's taking forever for the confirmation email to arrive so I thought I would ask away by emailing directly. My apologies in advance should this question appear twice. It may seem real simple to experts but I cannot really figure it out. I'll try to be concise: Dovecot version is 2.1.7. Its dovecot –n is real short one and follows right after my question. I have my Postfix 2.9.6 properties set like this: header_checks = /etc/path/to/myfile. Then I have Dovecot Sieve also configured and working fine. Now the trouble is that these two cannot be combined together can they? Dovecot Sieve and Postfix's header_checks? If I turn off header_checks in Postfix then Dovecot Sieve is working fine. If I vise versa turn off Dovecot Sieve then Postfix's header-checks are also working fine. However, when I keep them both turned on it also works but only partially and in this case Dovecot Sieve never bounces back any rejected massages remotely, the bounce happens only locally. That is I can see it in my logs that it was rejected locally but the message is never sent back to the sender saying something like, "Spam is rejected here". Thus the reject turns into a silent discard without telling the sender anything at all. Any ideas, help, advices how do I fix that? Would be really grateful for any suggestions / assistance at all. Many thanks in advance! P.S. I would like to use both because Dovecot Sieve is a very powerful and great plugin that uses Spamassassin's added tags and headers based on which I create my rules. Postfix in its turn has a very neat feature of checking the headers via regexp but Postfix does not see / detect Spamassassin's added headers at all because I passed delivery and authentication (which is a way better than Postfix's) to dovecot deliver. # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.6 ext4 auth_mechanisms = plain login cram-md5 scram-sha-1 auth_verbose = yes hostname = WindTalker info_log_path = /var/log/dovecot-sieve.log log_path = /var/log/dovecot-sieve-errors.log mail_location = maildir:/home/mvail/%d/%n managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/passwd driver = passwd-file } plugin { sieve = ~/.dovecot.sieve sieve_default = /etc/dovecot/default.sieve sieve_dir = ~/sieve } pop3_uidl_format = %g postmaster_address = postmaster(a)example.com protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } ssl_ca = </etc/ssl/ca.crt ssl_cert = </etc/ssl//new.crt ssl_key = </etc/ssl/new.key userdb { args = uid=vmail gid=vmail home=/home/vmail/%u driver = static } protocol lda { mail_debug = yes mail_plugins = sieve } Regards, Dennis.

4 22

ALT storage question
by Ralf Hildebrandt 27 Sep '14

27 Sep '14

I want to migrate from a non-hashed storage to a hashed storage. So I set this up: mail_location = mdbox:/srv/vmail/%2.256Hu/%Lu/mdbox:ALT=/srv/vmail/%Ld/%Ln/mdbox I rsynced the "old" mdbox-style mailbox from another machine to to /srv/vmail/%Ld/%Ln/mdbox (/srv/vmail/charite.de/ralf.hildebrandt/mdbox in my case) The mail_location /srv/vmail/c5/ralf.hildebrandt(a)charite.de was non-existing. Then I connected using IMAP and tried to have a look at the INBOX: Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Debug: Effective uid=10000, gid=10000, home=/srv/vmail/c5/ralf.hildebrandt(a)charite.de Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Debug: Home dir not found: /srv/vmail/c5/ralf.hildebrandt(a)charite.de Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Debug: Namespace inbox: type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=mdbox:/srv/vmail/c5/ralf.hildebrandt@charite.de/mdbox:ALT=/srv/vmail/charite.de/ralf.hildebrandt/mdbox Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Debug: fs: root=/srv/vmail/c5/ralf.hildebrandt(a)charite.de/mdbox, index=, indexpvt=, control=, inbox=, alt=/srv/vmail/charite.de/ralf.hildebrandt/mdbox Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Debug: Namespace : /srv/vmail/c5/ralf.hildebrandt(a)charite.de/mdbox doesn't exist yet, using default permissions Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Debug: Namespace : Using permissions from /srv/vmail/c5/ralf.hildebrandt(a)charite.de/mdbox: mode=0700 gid=default Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Debug: Namespace : /srv/vmail/c5/ralf.hildebrandt(a)charite.de/mdbox/mailboxes/INBOX doesn't exist yet, using default permissions Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Debug: Namespace : Using permissions from /srv/vmail/c5/ralf.hildebrandt(a)charite.de/mdbox: mode=0700 gid=default Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Error: Mailbox INBOX has existing files in alt path, rebuilding storage to avoid losing messages Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Error: Failed to autocreate mailbox INBOX: Internal error occurred. Refer to server log for more information. [2014-09-27 11:15:15] Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Warning: fscking index file /srv/vmail/c5/ralf.hildebrandt(a)charite.de/mdbox/storage/dovecot.map.index Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Info: Disconnected: Logged out in=58 out=623 What is "Mailbox INBOX has existing files in alt path, rebuilding storage to avoid losing messages" referring to? And why is this an error? After all that I reconnect, just to find an empty inbox. WTF? Why is the ALT storage being ignored? The ALT storage contains: total 8 drwxr-xr-x 6 vmail vmail 4096 Aug 18 15:25 mailboxes drwxr-xr-x 2 vmail vmail 4096 Sep 24 00:37 storage and those two directories contain: mailboxes: total 16 drwxr-xr-x 3 vmail vmail 4096 Aug 18 15:25 Drafts drwxr-xr-x 3 vmail vmail 4096 Aug 18 15:25 INBOX drwxr-xr-x 3 vmail vmail 4096 Aug 18 15:25 Sent drwxr-xr-x 3 vmail vmail 4096 Aug 18 15:25 Trash storage: -rw-r--r-- 1 vmail vmail 3552 Sep 25 14:47 dovecot.map.index.log -rw-r--r-- 1 vmail vmail 20015 Sep 25 13:51 m.1 On the other hand, just moving /srv/vmail/charite.de/ralf.hildebrandt/mdbox to /srv/vmail/c5/ralf.hildebrandt(a)charite.de worked like a charm! -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

1 0

Re: Is dovecot vulnerable to the shellshock/CVE-2014-6271 exploit?
by Joseph Tam 27 Sep '14

27 Sep '14

Timo Sirainen writes: >> Although I don't use it, it's plausible the checkpassword hook is also vulnerable >> via the MASTER_USER environment variable: >> >> http://wiki2.dovecot.org/AuthDatabase/CheckPassword > > This is one possibility, and it's the worst one because it could happen > before login. But it requires two things: > > 1. auth_username_chars setting must include the characters required in > the exploit, so "(){;" at least I guess. None of these characters are > enabled by default. But I think some people may have set this setting > to empty to allow all characters. > > 2. checkpassword must call bash, which also isn't done by default. > > Another possibility is is that in some setups the password (%w) may be > added to userdb fields, which ends up being exported to environment if > post-login scripts are used. Again Dovecot doesn't execute shell > automatically, but it may end up being executed by the configuration. > So this requires a valid username + password, and ability to change the > password to the bash exploit. Thanks for confirming what I suspected, Timo. The latter, if it is at all feasible, appears to be an "inside job" type of exploit, where the exploiter already has an account but can arbitrarily change their password. It's not as serious as the pre-login one, but worth addressing if the narrow circumstances of using post-login bash scripts apply. Joseph Tam <jtam.home(a)gmail.com>

1 0

doveadm penalty: who is 0.0.0.0?
by Peer Heinlein 27 Sep '14

27 Sep '14

Using doveadm penalty I just noticed a penalty for 0.0.0.0. Is this Postfix querying the auth-socket for his SASL-requests? I tried adding 0.0.0.0 to login_trusted_networks, but that doesn't help. Peer -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-42 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

3 2

Re: director
by Chris Lasater 26 Sep '14

26 Sep '14

The configuration and run/base_dir directories can be where ever you like. The locations Eduardo stated are the most appropriate for dovecot installed with an RPM. Mine were compiled and set in the home directory, so they are in a slightly different location. As long as you use the -c to point to the correct configuration file you should be good. For mine I kept my dovecot config file in the default location and put the director one elsewhere and created an alias, so that I can start the director by just typing director. This might make things easier for you to manage, then you can just stop it by running "doveadm -i <instance_name> stop" alias director="sudo -E PATH=${PATH} LD_LIBRARY_PATH=${LD_LIBRARY_PATH} /home/user/dovecot/sbin/dovecot -c /home/user/dovecot/etc/dovecot/director.conf" On 09/23/2014 05:00 PM, jjhoffart wrote: >> Thanks for the replies, >> I am still fairly new to dovecot and still learning. This is a quick run down of my setup: 3 servers running iRedMail (this is a package that installs dovecot 2.1.7, postfix, and LDAP). All three servers share an NFS backend. The same 3 servers are also sitting behind a load balancer. What I want to do is use these three servers as directors and mail servers. So from the replies I have gotten I understand that I need to create 2 config files 1 for director and 1 for dovecot. Now my next question is do these config files need to be stored in /etc/dovecot or /var/run/dovecot? Also is creating the second config file as simple as copying and renaming the dovecot.conf file? >> >> On Sep 23, 2014, at 2:26 PM, Eduardo Ramos <eduardo(a)freedominterface.org> wrote: >> >>> Hi, >>> >>> In fact you don't NEED a director. You can use two dovecot servers sharing a NFS storage with a normal (backend) implementation. It's good to see that page: http://wiki2.dovecot.org/NFS for some good recomendations. >>> >>> You must have a base_dir for each instance of dovecot you want to run, and a dovecot.conf as well. One could be director and other backend. I suggest you have two separated configuration directories, /etc/dovecot-director and /etc/dovecot-backend. Each with the respective configuration. Start dovecot with "dovecot -c /etc/dovecot-director/dovecot.conf". Backend is the same. >>> >>> In order to help more, provide us more details about your environment and doulbts. >>> >>> On 09/23/2014 03:57 PM, jjhoffart wrote: >>>> Hello, >>>> I am currently trying to setup a cluster of mail servers. I currently have two servers I am trying to cluster together. These servers will also have a shared NFS backend. I have read on the site that I will need to configure director since I am using NFS. I have read through all of the documentation on director but still need a little guidance to get things up and running. One of the questions I have is about the base_dir on the Multiple Invocations section of the wiki. It states that I will need to change the bas_dir to the new run directory, not sure what needs to happen here, can anyone help me out?

3 3

Namespace configuration over SQL
by Ain 26 Sep '14

26 Sep '14

Hello! I had working setup, where namespace settings (including prefix) was queried over SQL. Now, after installing new Dovecot to new server (using same configuration), this is not working anymore. Log shows following error: """ Initialization failed: namespace configuration error: list=yes requires prefix=yes to end with separator """ relevant part from dovecot-sql.conf.ext: """ user_query = \ SELECT \ 1002 AS uid \ , 1003 AS gid \ , CONCAT('/www/home/vmail/domains/', SUBSTRING(d.name, 1, 1), '/', d.name, '/', u.username) AS home \ , namespace_prefix AS 'namespace/default/prefix' \ , 'yes' AS 'namespace/default/inbox' \ , '%s' AS 'mail_service' \ FROM vm_domain d \ INNER JOIN vm_user u ON u.vm_domain_id = d.id \ WHERE d.name = '%d' AND u.username = '%n' AND u.active = 1 AND d.active = 1 """ namespace_prefix can be empty or INBOX. doveconf -n output: """ # 2.2.13: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 9.3-RELEASE amd64 auth_debug = yes auth_verbose = yes disable_plaintext_auth = no listen = * mail_debug = yes mail_location = maildir:~/Maildir mmap_disable = yes namespace default { inbox = yes list = yes location = prefix = separator = . type = private } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid size mail_log_group_events = no } service imap { process_limit = 1480 } ssl_cert = </usr/local/etc/ssl/server.crt ssl_key = </usr/local/etc/ssl/server.key.unsecure userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol imap { imap_capability = IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE mail_max_userip_connections = 900 } protocol pop3 { mail_max_userip_connections = 300 } """ Seems like "prefix = " is interpreted as "prefix = yes". How I can solve this?

2 5

Is dovecot vulnerable to the shellshock/CVE-2014-6271 exploit?
by Joseph Tam 26 Sep '14

26 Sep '14

I'm right now handling this beach-ball sized grenade, and trying to figure out which of our services need to be locked down right away. Since dovecot passes values via environment variables based on user input (e.g. username, password, mailbox?) to auxilliary executables (including possibly bash shell scripts), is dovecot vulnerable to this exploit? (This is not a fault of dovecot, but rather bash's inadequate handling of environment variables.) For example, injection of this sort 1 LOGIN (){x;}exploit-code whatever I guess auth_username_chars would mitigate this particular attempt (assuming it can work), but other values such as mailbox names could also be injected post authentication. Can someone with working knowlegde of dovecot's internals confirm/deny whether this is a something that needs to be addressed? Joseph Tam <jtam.home(a)gmail.com>

4 4

How to configure dovecot imap to listen on multiple ports?
by Rick Thomas 26 Sep '14

26 Sep '14

I need my dovecot imap server to listen on ports 143, 993, and also 30143 and 30993. What syntax do I use in (I presume) the /etc/dovecot/conf.d/10-master.conf file to do this? Thanks! Rick

4 10

Does dovecot work OK on *BSD?
by Steve Litt 26 Sep '14

26 Sep '14

Hi all, I have a dovecot server on my Debian Wheezy desktop computer. My days with Debian are limited, and I'm investigating several 'BSD's: OpenBSD FreeBSD PCBSD NetBSD DragonflyBSD etc Is there any reason Dovecot wouldn't work on any of those? Does anyone know if those OS's have packages for Dovecot, or do I need to compile it myself? Thanks, SteveT Steve Litt * http://www.troubleshooters.com/ Troubleshooting Training * Human Performance

10 9

Indexing of mailf fts clucene aborts
by Rainer M Krug 25 Sep '14

25 Sep '14

Hi I am trying lucene to index my email. To create the index, I run the following command and the indexing aborts: ,---- | 09:42:20 ~$ doveadm -Dv index -u rainerkrug 'RMKrugGMAIL.*' | doveadm(rainerkrug): Debug: Loading modules from directory: /usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot | doveadm(rainerkrug): Debug: Module loaded: /usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/lib20_fts_plugin.so | doveadm(rainerkrug): Debug: Module loaded: /usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/lib21_fts_lucene_plugin.so | doveadm(rainerkrug): Debug: Loading modules from directory: /usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/doveadm | doveadm(rainerkrug): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: dlopen(/usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so, 10): Symbol not found: _acl_user_module | Referenced from: /usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so | Expected in: flat namespace | in /usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so (this is usually intentional, so just ignore this message) | doveadm(rainerkrug): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: dlopen(/usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so, 10): Symbol not found: _expire_set_deinit | Referenced from: /usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so | Expected in: flat namespace | in /usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so (this is usually intentional, so just ignore this message) | doveadm(rainerkrug): Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: dlopen(/usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so, 10): Symbol not found: _quota_user_module | Referenced from: /usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so | Expected in: flat namespace | in /usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so (this is usually intentional, so just ignore this message) | doveadm(rainerkrug): Debug: Module loaded: /usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/doveadm/lib20_doveadm_fts_lucene_plugin.so | doveadm(rainerkrug): Debug: Module loaded: /usr/local/Cellar/dovecot/2.2.13_1/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.so | doveadm(rainerkrug): Debug: Effective uid=501, gid=20, home=/Users/rainerkrug | doveadm(rainerkrug): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir | doveadm(rainerkrug): Debug: maildir++: root=/Users/rainerkrug/Maildir, index=, indexpvt=, control=, inbox=/Users/rainerkrug/Maildir, alt= | doveadm(rainerkrug): Debug: Ignoring unknown cache field: pop3.order | doveadm(rainerkrug): Debug: Ignoring unknown cache field: binary.parts | doveadm(rainerkrug): Info: RMKrugGMAIL.[Gmail].All Mail: Caching mails seq=2..49011 | 48700/49010Assertion failed: (numDocsInStore*8 == directory->fileLength( (docStoreSegment + "." + IndexFileNames::FIELDS_INDEX_EXTENSION).c_str() )), function closeDocStore, file /tmp/clucene-M0PS6G/src/core/CLucene/index/DocumentsWriter.cpp, line 210. | Abort trap: 6 `---- Any suggestions? I am using dovecot on a Mac, Maverich=ks, installed via homebrew. If you need any further info, please let me know. Thanks, Rainer -- Rainer M. Krug email: Rainer<at>krugs<dot>de PGP: 0x0F52F982

1 0

Quota Woes
by Art Stephens 25 Sep '14

25 Sep '14

Trying to get quota to show up in IMP - Horde 5.x Seems it is not working with dovecot Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready. root@mail:~# dovecot --version 2.0.19 root@mail:~# dovecot -n # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.11.0-26-generic x86_64 Ubuntu 12.04.4 LTS auth_mechanisms = plain login disable_plaintext_auth = no mail_location = mbox:~/mail/:INBOX=/var/mail/%u mail_plugins = " quota" passdb { driver = pam } plugin { quota = fs:User quota quota_rule = *:storage=300M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u } protocols = " imap pop3" service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } protocol imap { mail_plugins = " quota imap_quota" } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } root@mail:~# quotaon -pa group quota on / (/dev/mapper/mail--vg-root) is on user quota on / (/dev/mapper/mail--vg-root) is on What am I missing? -- Arthur Stephens Senior Networking Technician Ptera Inc. PO Box 135 24001 E Mission Suite 50 Liberty Lake, WA 99019 509-927-7837 ptera.com facebook.com/PteraInc | twitter.com/Ptera ----------------------------------------------------------------------------- "This message may contain confidential and/or propriety information, and is intended for the person/entity to whom it was originally addressed. Any use by others is strictly prohibited. Please note that any views or opinions presented in this email are solely those of the author and are not intended to represent those of the company."

2 1

SSL issues when proxying
by Ralf Hildebrandt 25 Sep '14

25 Sep '14

I'm getting this in the log when proxying IMAP (three "valid certificate" messages, two "Invalid certificate" messages) Why is dovecot (acting as a proxy to another dovecot instance here) not recognizing the StartCom Extended Validation Server CA? . LOGIN ralf.hildebrandt(a)charite.de mypassword Sep 25 14:13:04 auth-worker(30859): Info: mysql(sql.charite.de): Connected to database mailservice Sep 25 14:13:04 imap-login: Debug: SSL: where=0x10, ret=1: before/connect initialization [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1001, ret=1: before/connect initialization [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1001, ret=1: unknown state [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1002, ret=-1: unknown state [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1001, ret=1: SSLv3 read server hello A [127.0.0.1] Sep 25 14:13:04 imap-login: Info: Invalid certificate: unable to get local issuer certificate: /C=IL/O=StartCom Ltd./OU=StartCom Certification Authority/CN=StartCom Extended Validation Server CA Sep 25 14:13:04 imap-login: Info: Invalid certificate: certificate not trusted: /C=IL/O=StartCom Ltd./OU=StartCom Certification Authority/CN=StartCom Extended Validation Server CA Sep 25 14:13:04 imap-login: Info: Valid certificate: /C=DE/ST=Berlin/L=Berlin/postalCode=12205/street=Charitestrasse 1/O=Charite Universitaetsmedizin/CN=imap.charite.de/emailAddress=postmaster(a)charite.de/serialNumber=HRAxxxx/businessCategory=Private Organization/1.3.6.1.4.1.311.60.2.1.1=Mitte/1.3.6.1.4.1.311.60.2.1.2=Berlin/1.3.6.1.4.1.311.60.2.1.3=DE Sep 25 14:13:04 imap-login: Info: Valid certificate: /C=IL/O=StartCom Ltd./OU=StartCom Certification Authority/CN=StartCom Extended Validation Server CA Sep 25 14:13:04 imap-login: Info: Valid certificate: /C=DE/ST=Berlin/L=Berlin/postalCode=12205/street=Charitestrasse 1/O=Charite Universitaetsmedizin/CN=imap.charite.de/emailAddress=postmaster(a)charite.de/serialNumber=HRAxxxx/businessCategory=Private Organization/1.3.6.1.4.1.311.60.2.1.1=Mitte/1.3.6.1.4.1.311.60.2.1.2=Berlin/1.3.6.1.4.1.311.60.2.1.3=DE Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1001, ret=1: SSLv3 read server certificate A [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1001, ret=1: SSLv3 read server key exchange A [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1001, ret=1: SSLv3 read server done A [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1001, ret=1: SSLv3 write client key exchange A [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1001, ret=1: SSLv3 write change cipher spec A [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1001, ret=1: SSLv3 write finished A [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1001, ret=1: SSLv3 flush data [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1002, ret=-1: SSLv3 read server session ticket A [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1002, ret=-1: SSLv3 read server session ticket A [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1001, ret=1: SSLv3 read server session ticket A [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1001, ret=1: SSLv3 read finished A [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully [127.0.0.1] Sep 25 14:13:04 imap-login: Debug: SSL: where=0x1002, ret=1: SSL negotiation finished successfully [127.0.0.1] . OK [CAPABILITY ... -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

3 3

vsz_limit is 18,447 PB
by Dan Langille 25 Sep '14

25 Sep '14

I encountered this error on FreeBSD 9.3 with dovecot2-2.2.13_3 Short version; vsz_limit is 18,447 PB and it ran out of RAM. Suggestions for change? Sep 6 03:39:32 mailjail dovecot: imap(dan): Panic: file imap-fetch.c: line 556 (imap_fetch_more): assertion failed: (ctx->client->output_cmd_lock == NULL || ctx->client->output_cmd_lock == cmd) Sep 6 03:39:32 mailjail dovecot: imap(dan): Fatal: master: service(imap): child 71153 killed with signal 6 (core not dumped - set service imap { drop_priv_before_exec=yes }) Sep 6 03:59:41 mailjail dovecot: imap(dan): Fatal: pool_system_realloc(2097152): Out of memory Sep 6 03:59:41 mailjail dovecot: imap(dan): Fatal: master: service(imap): child 67732 returned error 83 (Out of memory (service imap { vsz_limit=256 MB }, you may need to increase it) - set CORE_OUTOFMEM=1 environment to get core dump) Background: I’m in the only user on this system, but this server is accessed by my phone, my laptop, my tablet, and perhaps a web interface. Here are the non-default values: $ doveconf -n # 2.2.13: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 9.3-RELEASE amd64 auth_mechanisms = plain login first_valid_gid = 1001 first_valid_uid = 1001 mail_location = maildir:~/Maildir mail_max_userip_connections = 80 mail_privileged_group = mail passdb { args = scheme=SHA512-CRYPT /var/db/dovecot.users driver = passwd-file } protocols = imap service imap-login { inet_listener imap { address = 10.0.0.1 } inet_listener imaps { port = 0 } } ssl = required ssl_ca = </usr/local/etc/ssl/ca.pem ssl_cert = </usr/local/etc/ssl/server.pem ssl_key = </usr/local/etc/ssl/mailjail.example.org.nopassword.key userdb { args = /var/db/dovecot.users driver = passwd-file } verbose_proctitle = yes verbose_ssl = yes But there are some interesting values when I look at the output of doveconf. Specifically, vsz_limit is 18,447 PB… yeah, that’s pretty big. service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = 10.0.0.1 port = 143 reuse_port = no ssl = no } inet_listener imaps { address = port = 0 reuse_port = no ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B }

4 7

Confusing wording on the wiki
by Alan McGinlay 24 Sep '14

24 Sep '14

Hi, I am confused by the wording of this Wiki entry: sieve = ~/.dovecot.sieve The path to the user's main active Sieve script. When ManageSieve is used, this is a symbolic link pointing to the active script in the sieve_dir directory. Avoid placing the active Sieve script inside the sieve_dir directory. So this should be a link *to* the active script in the sieve_dir directory however the active script shouldn't actually be in that directory???? http://wiki2.dovecot.org/Pigeonhole/Sieve/Configuration Confused :S /A

2 1

LMTP proxying
by Ralf Hildebrandt 24 Sep '14

24 Sep '14

How exactly is LMTP proxying supposed to work? According to the example on http://wiki2.dovecot.org/PasswordDatabase/ExtraFields/Proxy I'm only seeing "proxy" in the password_query statements. But LMTP never sends a password. IMAP Proxying is working OK: Sep 24 12:51:09 imap-login: Info: proxy(ralf.hildebrandt(a)charite.de): started proxying to dovecot.charite.de:993: user=<ralf.hildebrandt(a)charite.de>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Sep 24 12:51:13 imap-login: Info: proxy(ralf.hildebrandt(a)charite.de): disconnecting 127.0.0.1 (Disconnected by server): user=<ralf.hildebrandt(a)charite.de>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured But LMTP is logging this: Sep 24 13:13:25 lmtp(17727): Info: Connect from 127.0.0.1 Sep 24 13:13:51 auth-worker(19603): Info: mysql(sql.posteo.local): Connected to database mailservice Sep 24 13:14:11 lmtp(17727, ralf.hildebrandt(a)charite.de) Info: save: box=INBOX, uid=1, msgid=, size=304 Sep 24 13:14:11 lmtp(17727, ralf.hildebrandt(a)charite.de) Info: pH2yN1WnIlQ/RQAAoQzodQ: msgid=unspecified: saved mail to INBOX Sep 24 13:14:11 dict: Info: mysql(sql.charite.de): Connected to database mailservice Sep 24 13:14:13 lmtp(17727): Info: Disconnect from 127.0.0.1: Client quit (in reset) Sep 24 13:15:29 master: Warning: Killed with signal 15 (by pid=25892 uid=0 code=kill) I read that there's no "default port for LMTP", but how can I adapt the query in such a way that the default port 24 is being used ONLY FOR LMTP? I'm using (snippet): ... NULL AS password, \ 'Y' AS nopassword, \ 'Y' AS proxy, 'dovecot.charite.de' AS host, 'any-cert' AS 'ssl', \ ... -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

3 3

Empty mailboxes
by Daniel Miller 24 Sep '14

24 Sep '14

This is driving me nuts. I need to rebuild a server - got a notification the main drive is failing, and it's been a year or two, so it's time. Got a new drive, fresh install of Ubuntu Tantric, started installing everything needed. Data stored on a RAID array - nicely available separate from the boot/operation drive. Did a fresh compile of Dovecot, copied over the configs from the old drive, mounted the RAID...and... Dovecot starts, authenticates users - and shows empty mailboxes. Nothing shown. Full panic - reboot on old drive. All mails present. Change back - no mail. Executing "doveadm user -u username" seems to give valid results. Mailbox location appears correct (using mdbox). I setup uid/gid the same - I thought it was a rights issue but everything looks correct. What can I do to try to find the stupid mistake I'm making? -- Daniel

3 4