- dovecot - dovecot.org

[Dovecot] lmtpd configuration
by paolo.brocchi12 27 Mar '14

27 Mar '14

Hi all, i have my home.conf : mydatabase XXXX myuser XXXX mypasswd XXXX myhosts be1XX be2XX [lmtpd] where mail conditions status = 0 user name passwd 'passwd' home home quota quota_limit_bytes uid 497 gid 497 table UTENTI on mysql database the home is home: /data/mail/BE01/........ i would like to have home:/data/mail/DRBE01 How can i change my home.conf? Thanks you Paolo -- View this message in context: http://dovecot.2317879.n4.nabble.com/lmtpd-configuration-tp47284.html Sent from the Dovecot mailing list archive at Nabble.com.

1 0

[Dovecot] %{orig_user} missing in checkpassword-Script
by dovecot.pkoch＠dfgh.net 27 Mar '14

27 Mar '14

Hi everybody, I'm using SSL client certificates or checkpassword scripts to authenticate our users. If a user sent a client certificate from his smartcard my checkpasswort will ignore the password, if he does not sent a client certificate but uses his OTP-token then my checkwassword script will check wether the password is a correct one time password. My problem is: the AUTH_USER variable will either contain the username that was configured in the mailclient (if auth_ssl_username_from_cert=false) or the username from the certificate (if auth_ssl_username_from_cert=true). I would like to compare both values, i.e. the %{user} Dovecot-variable and the %{orig_user} Dovecot-variable. But the environment of a checkpassword-script has only one of them. Any ideas? I tried to change the source and found the routine where all the AUTH_xxx environment variables are created. But the %{orig_user] variable was empty at that point, so no AUTH_ORIG_USER variable is created. I'm afraight that whenever the %{user}-Variable is replaced by the UID from the client certificate (due to auth_ssl_username_from_cert=true), the original value of %{user} is NOT copied into %{orig_user} Can someone more familiar with the dovecot source check this please or give me a hint where to look further Kind regards Peter Koch

1 0

Re: [Dovecot] Trying to get Centos5 set up with dovecot
by Joseph Tam 27 Mar '14

27 Mar '14

DCA <dovecotadmin(a)silverservers.com> writes: > I am trying to set up dovecot to replace an older POP3 server in an existing set up. > Currently the server uses sendmail to handle incoming mail. users are in /etc/mail and their incoming eMail lands in the /var/mail/username > in /var/mail the username file is owned by username:mail > > I have dovecot configured to create the imap folders in /home/username/mail/ > on existing accounts login attempts fail with errors such as: > chown /home/username/mail/.imap/INBOX failed: Operation not permitted egid=500(username), group based on /var/mail/username > mkdir /home/username/mail/imap/INBOX failed: Operation not permitted. > > Everything seems to work as expected but only if I add "username" into the "mail" group OR if I have all mailboxes chowned to username:username > Is there any way to tell dovecot to ignore the group ownership of /var/mail/username and focus instead on using username:username for everything in /home/username ? > > If I have to add every user to the mail group I can but this seems messy. Geez, I must have answered the same query 3 or 4 times. I need to write an entry in wiki somewhere: http://www.dovecot.org/list/dovecot/2013-August/092299.html Joseph Tam <jtam.home(a)gmail.com>

2 2

[Dovecot] Auth service panic
by Piotr Rotter 26 Mar '14

26 Mar '14

Hello, I have dovecot director on one server and today I notice 146 times the same problem. Log below. I try restart dovecot and mysql (auth-db backend) but with no effect. Please help. If any other information is needed I send it. My dovecot version is 2.1.15. 2014-03-26T16:15:28+01:00 r1 dovecot: auth: Fatal: master: service(auth): child 9883 killed with signal 6 (core dumps disabled) 2014-03-26T16:15:43+01:00 r1 dovecot: auth: Panic: file passdb-blocking.c: line 124 (passdb_blocking_lookup_credentials): assertion failed: (auth_stream_is_empty(request->extra_fields) || request->master_user != NULL) 2014-03-26T16:15:43+01:00 r1 dovecot: auth: Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x4469a) [0x7fdb06e1469a] -> /usr/lib64/dovecot/libdovecot.so.0(+0x446de) [0x7fdb06e146de] -> /usr/lib64/dovecot/libdovecot.so.0(+0x1c0ea) [0x7fdb06dec0ea] -> dovecot/auth [34 wait, 1 passdb, 0 userdb](passdb_blocking_verify_plain+0) [0x41f593] -> dovecot/auth [34 wait, 1 passdb, 0 userdb](auth_request_lookup_credentials+0x104) [0x413c41] -> dovecot/auth [34 wait, 1 passdb, 0 userdb]() [0x41c202] -> dovecot/auth [34 wait, 1 passdb, 0 userdb]() [0x4139e6] -> dovecot/auth [34 wait, 1 passdb, 0 userdb](auth_request_lookup_credentials_callback+0x6a) [0x413abb] -> dovecot/auth [34 wait, 1 passdb, 0 userdb](passdb_handle_credentials+0x50) [0x41f389] -> dovecot/auth [34 wait, 1 passdb, 0 userdb]() [0x41f82e] -> dovecot/auth [34 wait, 1 passdb, 0 userdb]() [0x41798f] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x27) [0x7fdb06e1f68c] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x9e) [0x7fdb06e204ee] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x27) [0x7fdb06e1f645] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fdb06e0d348] -> dovecot/auth [34 wait, 1 passdb, 0 userdb](main+0x380) [0x41a396] -> /lib64/libc.so.6(__libc_start_main+0xfd) [0x7fdb062ced2d] -> dovecot/auth [34 wait, 1 passdb, 0 userdb]() [0x40ced9] 2014-03-26T16:15:43+01:00 r1 dovecot: auth: Fatal: master: service(auth): child 18546 killed with signal 6 (core dumps disabled)

1 0

Re: [Dovecot] IMAP proxy with master user and CRAM-MD5 auth mechanism
by ML mail 26 Mar '14

26 Mar '14

Hi Trent, Thanks for your exhaustive explanation now it is clear. What was unclear to me was the fact that the IMAP proxy server has to take care of the authentication in this case of using a master user and therefore it needs access to the passwords (in my case stored in the mailbox table in PostgreSQL). I still have two open questions: 1) Do I really need the userdb on my IMAP proxy config as you mention in your mail? In my understanding the passdb should be enough (which in my case will use a SQL query joining the result of my proxy and mailbox tables). 2) Is this correct that the IMAP backend (the mailbox server) in this case scenario has to use PLAIN authentication and can NOT use CRAM-MD5? Regards,ML

1 0

[Dovecot] IMAP proxy with master user and CRAM-MD5 auth mechanism
by ML mail 26 Mar '14

26 Mar '14

Hello, I would like to know if it possible to have a dovecot IMAP proxy frontend where CRAM-MD5 can be used as auth mechanism (assuming I would be using a master user/password on the dovecot IMAP backend/mailbox)? I have read a few times the following http://wiki2.dovecot.org/PasswordDatabase/ExtraFields/Proxy page but somehow it is still unclear to me if the IMAP proxy then needs to have all the users and passwords in its proxy table in the database? Unfortunately there are no examples for that case. Also with this case scenario is it possible to store the users' passwords in CRAM-MD5 format? Any pointers or documentation to such a scenario would be great. Thanks and regards M.L.

1 0

[Dovecot] Trying to get Centos5 set up with dovecot
by DCA 26 Mar '14

26 Mar '14

Greetings, It seems I'm having some trouble getting this message into the list. I have used this dovecot list before. I am trying to set up dovecot to replace an older POP3 server in an existing set up. Currently the server uses sendmail to handle incoming mail. users are in /etc/mail and their incoming eMail lands in the /var/mail/username in /var/mail the username file is owned by username:mail I have dovecot configured to create the imap folders in /home/username/mail/ on existing accounts login attempts fail with errors such as: chown /home/username/mail/.imap/INBOX failed: Operation not permitted egid=500(username), group based on /var/mail/username mkdir /home/username/mail/imap/INBOX failed: Operation not permitted. Everything seems to work as expected but only if I add "username" into the "mail" group OR if I have all mailboxes chowned to username:username Is there any way to tell dovecot to ignore the group ownership of /var/mail/username and focus instead on using username:username for everything in /home/username ? If I have to add every user to the mail group I can but this seems messy. Thanks!

2 1

[Dovecot] Direct groups of users to pairs of backend servers
by Murray Trainer 25 Mar '14

25 Mar '14

Hi All, I am using dovecot in the Director setup with multiple proxy and backend mailstores and user information stored in LDAP. I am aware users can be directed to a single backend server. It would be useful to be able to direct groups of users to pairs of backend servers to give some fault tolerance against NFS issues and make the whole thing more scalable. Otherwise each backend mailstore will need all the NFS mounts and the whole cluster will be affected if one NFS mount has an issue. I am not sure if this possible with the current dovecot implementation? If not it would be a great enhancement. Thanks Murray

2 3

Re: [Dovecot] Disconnected (auth failed, 1 attempts)
by Joseph Tam 25 Mar '14

25 Mar '14

ldaamandy <amandy_lda(a)outlook.com> writes: > {"username":"q1(a)t.com","password":"{CRYPT}$1$d5ef98b7$brWKOJiUiqII3DysGzsfl\/", ... Dovecot uses the uses the native crypt() which ought to recognize $1$ hashes, but maybe try changing it to "{MD5-CRYPT}". http://wiki2.dovecot.org/Authentication/PasswordSchemes Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] pb with setting quota_rule=backend quota=fs for quota-warning
by marion 25 Mar '14

25 Mar '14

Hello my config is debian wheezy with dovecot v.2.1.17-2., plugin quota /imap_quota is ok : I can read the real filesystem user quota for each different user with - doveadmin quota get - thunderbird - SOGo my problem is to configure quota-warning message : 1) if no quota_rule is defined then my dovecot-debug.log looks like Mar 25 18:28:02 imap(testuser): Debug:Quota warning: bytes=0 (80%) messages=0 ... 2) As soon as I set quota_rule = *:storage=1G , quota root is correctly defined, and quota-warning messages are sent according to the ratio I defined (cf below 90-quota.conf) with THIS limit (1G) , the same for all users and that’s not what I expect when I set individual quota... 3)And If define something like: quota_rule = * : backend (or backend=%q or …) dovecot definitively hangs with a) doveadm quota get -u testuser doveadm(testuser): Error: user testuser: Initialization failed: Failed to initialize quota: Invalid quota root quota: Invalid rule *:backend: Unknown rule limit name: backend b) even my login in SOGo hangs /var/mail/mail.err Mar 25 21:56:22 biwa dovecot: imap(testuser): Error: user testuser: Initialization failed: Failed to initialize quota: Invalid quota root quota: Invalid rule *:backend: Unknown rule limit name: backend Is there a way ( a variable ?) to link the real filesystem quota limit with the quota_warning process ? … something like quota_rule = *:storage=%VAR ? 90-quota.conf ------------------- plugin { quota_warning = storage=80%% quota-warning 80 %u quota_warning2 = storage=90%% quota-warning 90 %u } plugin { quota =fs } service quota-warning { executable = script /etc/dovecot/myconfig/quota-warning.sh unix_listener quota-warning { mode =0666 } } Thank you in advance best regards, Philippe ______________ Philippe Marion

1 0

[Dovecot] Getting second quota limit out of database
by dev＠stean.ch 25 Mar '14

25 Mar '14

Hello there, I am working with dovecot v2.2.12, and have setup a user and domain quota by using a quota/quota_rule for user and quota2/quota2_rule for the domain. This works fine when the limit configuration for both is stored inside dovecot configuration files. However, I would like to have the limits configurable on a user and domain base, and that data is stored inside my SQL database. Getting the user quota out of a database with SQL works fine, as documented with "SELECT whatever AS quota_rule FROM mytable", I extended my query to return quota2_rule too, but dovecot did not really do something with that value in the end, the domain limit was set to 0, as visible through the logs and with doveadm quota get ... Any idea or hint how I could get dovecot to read the limit for the domains out of my SQL database ? Thanks, Stephan

2 2

[Dovecot] mail-filter cannot work with large email about 700k
by boyd yang 25 Mar '14

25 Mar '14

Hi All I configured dovecot 2.1.7 with mail-filter plugin. It works well for small emails like server k big.(7k) But it failed with larger emails about 700k. The scripts hang out, and the mail-filter-out process does not exist and always in ps. It does not work even I use "cat" in mail-filter-out.sh. Where to set the size limit for mail-filter? Do you know how to fix this? This bug also exists in 2.2.12. Thanks!

1 1

[Dovecot] [LMTP] sieve filter does not drop privilleges?
by kjonca＠o2.pl 25 Mar '14

25 Mar '14

I have (user) sieve filter in my home dir. This filter uses "vnd.dovecot.filter" extension to call some shell scripts. These scrips creates some temporary files. Strange thing: whent sieve is called via dovecot-lda - these files are created by user "kjonca" when sieve is called via lmtp - these files are created by root. Is there any way to drop privilleges where lmtp passing messages to sieve? KJ -- http://wolnelektury.pl/wesprzyj/teraz/

1 0

[Dovecot] Dovecot mail-filter cannot work with large email about 700k
by boyd yang 25 Mar '14

25 Mar '14

Hi All I configured dovecot 2.1.7 with mail-filter plugin. It works well for small emails like server k big.(7k) But it failed with larger emails about 700k. The scripts hang out, and the mail-filter-out process does not exist and always in ps. It does not work even I use "cat" in mail-filter-out.sh. Where to set the size limit for mail-filter? Do you know how to fix this? This bug also exists in 2.2.12. Thanks!

1 0

[Dovecot] Disconnected (auth failed, 1 attempts)
by ldaamandy 25 Mar '14

25 Mar '14

hi : i just install dovecot-2 and start ok but login failed for test-user . i turn on all debug options , the debug info follow: "Mar 25 14:40:10 cs2c dovecot: imap-login: Disconnected (auth failed, 1 attempts): user=<q1(a)t.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured" and the info of input->w_buffer is : cp01 CAPABILITY a001 LOGIN "q1(a)t.com" "q1q1q1q1" the auth of dovecot.conf: >>>>>>>>>>>>>>>>>>>>> passdb { args = /etc/dovecot.master driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot-memcached.conf driver = dict } userdb { args = /etc/dovecot-memcached.conf driver = dict } [root@cs2c log]# telnet 127.0.0.1 11211 Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. get q1(a)t.com_imap VALUE q1(a)t.com_imap 0 205 {"username":"q1(a)t.com","password":"{CRYPT}$1$d5ef98b7$brWKOJiUiqII3DysGzsfl\/","home":"\/test\/mail","mail":"maildir:\/t.com\/q1@t.com","quota_rule2":"*:messages=11111","quota_rule":"*:bytes=11650727936"} END >>>>>>>>>>>>>>>>>>>>>>>>>>>>>> The relevant code is: >>>>>>>>>>>>>login-common/client-common.c<<<<<<< bool client_read(struct client *client) { switch (i_stream_read(client->input)) { //w_buffer:cp01 CAPABILITY a001 LOGIN "q1(a)t.com" "q1q1q1q1" case -2: /* buffer full */ client_send_line(client, CLIENT_CMD_REPLY_BYE, "Input buffer full, aborting"); client_destroy(client, "Disconnected: Input buffer full"); return FALSE; case -1: /* disconnected */ client_destroy(client, "Disconnected"); //debug infomation return FALSE; case 0: /* nothing new read */ return TRUE; default: /* something was read */ return TRUE; } } >>>>>>>>>>imap-login/client.c<<<<<<<<<< static void imap_client_input(struct client *client) { struct imap_client *imap_client = (struct imap_client *)client; if (!client_read(client)) return; client_ref(client); o_stream_cork(imap_client->common.output); for (;;) { if (!auth_client_is_connected(auth_client)) { /* we're not currently connected to auth process - don't allow any commands */ client_send_line(client, CLIENT_CMD_REPLY_STATUS, AUTH_SERVER_WAITING_MSG); if (client->to_auth_waiting != NULL) timeout_remove(&client->to_auth_waiting); client->input_blocked = TRUE; break; } else { if (!client_handle_input(imap_client)) break; } } o_stream_uncork(imap_client->common.output); client_unref(&client); } >>>>>>>>>>>>>>other-dovecot.conf>>>>>>>>>>>>>>>>>>>>>>>>>>>> .......... protocols = pop3 imap service auth { unix_listener /var/spool/postfix/dovecot-auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { group = testmail mode = 0666 user = testmail } user = testmail } service imap-login { service_count = 1 } service imap { drop_priv_before_exec = no executable = /usr/libexec/dovecot/imap } service pop3-login { service_count = 1 } service pop3 { drop_priv_before_exec = yes executable = /usr/libexec/dovecot/pop3 } ssl_cert = </etc/pki/NSMail/SSL.cert ssl_key = </etc/pki/NSMail/SSL.key userdb { args = /etc/dovecot-memcached.conf driver = dict } protocol lda { auth_socket_path = /var/run/dovecot/auth-master log_path = /var/log/sieve.log mail_plugins = menc sieve quota acl expire postmaster_address = root } protocol imap { mail_plugins = quota imap_quota zlib mdec imap_acl acl autocreate expire } #protocol vipimap { # mail_plugins = quota imap_quota zlib mdec imap_acl acl autocreate expire #} protocol pop3 { mail_plugins = quota zlib mdec expire pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_no_flag_updates = yes pop3_uidl_format = %08Xu%08Xv }

1 0

[Dovecot] Weird Authentication behaviour
by Jürgen Ladstätter 24 Mar '14

24 Mar '14

Hi guys, we use dovecot 2.0.9 and authentication against a mysql database. Everything works fine, but we found some weird behavior when the password is e.g. testpass you also authenticate successfully with testpass123 or testpassNOT. Whatever comes after the correct password doesnt matter, the authentication is still successful. Here are the used configs: // auth-sql.conf.ext passdb { driver = sql args = /etc/dovecot/dovecot-sql.conf.ext } userdb { driver = static args = uid=vmail gid=vmail home=/data/mail/%d/%n } // dovecot-sql.conf.ext driver = mysql connect = host=[IP] dbname=[DB] user=[USER] password=[PASS] default_pass_scheme = CRYPT password_query = SELECT `password`, `login` AS `user` FROM `v_email_accounts` WHERE `login`='%u' // 10-auth.conf disable_plaintext_auth = no auth_mechanisms = plain !include auth-sql.conf.ext // 10-master.conf default_process_limit = 1000 default_client_limit = 3003 default_vsz_limit = 1024M service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } service_count = 0 vsz_limit = 1024M } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service lmtp { unix_listener lmtp { } } service imap { vsz_limit = 1024M process_limit = 2048 } service pop3 { process_limit = 2048 } service auth { unix_listener auth-userdb { user = vmail group = vmail } client_limit = 8096 } service auth-worker { } service dict { unix_listener dict { } } Thanks in advance for your help!

4 3

[Dovecot] imap: Error: mmap() failed with file ... dovecot.index.cache: Cannot allocate memory
by Urban Loesch 24 Mar '14

24 Mar '14

Hi, since some days (about 10) I get the following error in mail error log many, many times: ... dovecot: imap(user(a)domain.com pid:32769 session:<dszL7lX1xADD/uGI>): Error: mmap() failed with file /home/dovecotindex/domain.com/user/mailboxes/Trash /dovecot.index.cache: Cannot allocate memory .... It's always the same "dovecot.index.cache" file and only for the same heavily used account. The account is currently used from about 10 different clients with imap at the sime time. I checked the size of the index cache file and it seems very big: total 2,7G -rw------- 1 mailstore mailstore 464 Mär 24 14:36 dovecot.index -rw------- 1 mailstore mailstore 464 Mär 24 14:36 dovecot.index.backup -rw------- 1 mailstore mailstore 2,7G Mär 24 14:19 dovecot.index.cache -rw------- 1 mailstore mailstore 140 Mär 24 14:45 dovecot.index.log -rw------- 1 mailstore mailstore 89K Mär 24 14:36 dovecot.index.log.2 About 2,7 GB? To solve the problem temporarily, I removed the index files from the index Trash folder and Dovecot initialized an index rebuild. Now the size of the index files are small: total 28K -rw------- 1 mailstore mailstore 512 Mär 24 14:47 dovecot.index -rw------- 1 mailstore mailstore 20K Mär 24 15:28 dovecot.index.cache -rw------- 1 mailstore mailstore 1,2K Mär 24 15:28 dovecot.index.log But why could the index cache file be so big? Many thanks Urban

1 0

[Dovecot] Dovecot/Django authentication
by Thomas Johnson 24 Mar '14

24 Mar '14

We've got an application in django that has passwords stored in both sha1 and pbkdf2_sha256 form. We need dovecot to be able to authenticate against the django database (we can't modify django to store passwords in dovecot's form, I'm afraid). Has anyone done a dovecot authentication plugin to support these password forms (and/or any other forms that django supports)? Thanks- Tom

2 1

[Dovecot] Case-sensitive INBOX or client issue?
by SB Code Ninja 24 Mar '14

24 Mar '14

I am using dovecot as an IMAP server for a Cisco product (Cisco Agent Desktop by Calabrio) and noticed some odd behavior when trying to access emails. The mail is delivered to the main INBOX, then a Cisco server moves it to a directory within the INBOX based on the queue it is meant for. Here is the directory structure of the Maildir: Maildir/INBOX Maildir/INBOX/tmp Maildir/INBOX/63 Maildir/INBOX/63/tmp Maildir/INBOX/63/dovecot.index.cache Maildir/INBOX/63/cur Maildir/INBOX/63/cur/1395445673.M548066P32100.uc-util,S=6403:2, Maildir/INBOX/63/dovecot.index.log Maildir/INBOX/63/dovecot-uidlist Maildir/INBOX/63/maildirfolder Maildir/INBOX/63/new Maildir/INBOX/dovecot.index.cache Maildir/INBOX/cur Maildir/INBOX/dovecot.index.log Maildir/INBOX/dovecot-uidlist Maildir/INBOX/62 Maildir/INBOX/62/tmp Maildir/INBOX/62/dovecot.index.cache Maildir/INBOX/62/cur Maildir/INBOX/62/cur/1395445491.M591207P32114.uc-util,S=6380:2, Maildir/INBOX/62/dovecot.index.log Maildir/INBOX/62/dovecot-uidlist Maildir/INBOX/62/maildirfolder Maildir/INBOX/62/new Maildir/INBOX/new Email is delivered to INBOX then gets moved to INBOX/62 or INBOX/63. The desktop software is then supposed to read the email and process it. I did a packet capture of the conversation and saw the following: IMAP Response: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE AUTH=PLAIN] Dovecot ready. IMAP Request: A0 AUTHENTICATE PLAIN IMAP Response: + IMAP Request: <redacted> IMAP Response: A0 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS] Logged in IMAP Request: A1 LIST "" Inbox/63 IMAP Response: A1 OK List completed. IMAP Request: A2 CREATE Inbox/63 IMAP Response: A2 NO [ALREADYEXISTS] Mailbox exists. If I login manually and do 'LIST "" INBOX/63' it works fine, but not with "Inbox/63". I was under the impression that INBOX was not case-sensitive. Is this a bug or is the client doing something silly? Thanks, Henry dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.7 disable_plaintext_auth = no mail_location = maildir:~/Maildir:LAYOUT=fs namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } protocols = " imap" ssl = no ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { driver = passwd } -- "The best way to predict the future is to invent it" - Alan Kay

3 2

[Dovecot] dsync in a cronjob to replace offlineimap
by Guilhem Moulin 24 Mar '14

24 Mar '14

Hi list, Replacing offlineimap with dsync for IMAP-to-IMAP synchronization (using dovecot 2.1.7) is working great, but now that I upgraded to 2.2.9 I'd like to take advantage of the incremental replication [1]. I don't think having a separate replicator process & notifications suits my configuration, as I want to sync my server with my laptop which is not always on or might be behind a firewall. After reading ‘replication/replicator/dsync-client.c’ I was thinking of writing a small wrapper around dsync performing a daily full replication and updating the state otherwise. The following works great in a cronjob doveadm sync -l30 imap.example.org but when I try to get the current state doveadm sync -l30 -fs '' imap.example.org >~/mail/dsync.state and later use incremental replication state=$(< ~/mail/dsync.state) doveadm sync -l30 -s "$state" imap.example.org >~/mail/dsync.state the state seems to somehow quickly become "stale" and messages stop being retrieved from the server. I understand that dsync's incremental replication is mostly intended to be used by the replicator process, but I'm wondering whether it's also possible to use it manually ;-) If so, how to keep a sane state? Thanks, cheers, -- Guilhem. [1] http://wiki2.dovecot.org/Replication

2 1

[Dovecot] Where can I find a stable PPA?
by Daniel Reynolds 22 Mar '14

22 Mar '14

Hello, As the subject says, where can I find a stable PPA of Dovecot v2.2 for Ubuntu 12.04? I found this <https://launchpad.net/~kokelnet/+archive/dovecot22>, but the description says, "...I declare them as unstable." For obvious reasons, I don't want to use this. What should I do? Thanks, Daniel

4 4

Re: [Dovecot] Dovecot/Django authentication
by Joseph Tam 22 Mar '14

22 Mar '14

Thomas Johnson <tj(a)terramar.net> writes: > We've got an application in django that has passwords stored in both > sha1 and pbkdf2_sha256 form. We need dovecot to be able to > authenticate against the django database (we can't modify django to > store passwords in dovecot's form, I'm afraid). > > Has anyone done a dovecot authentication plugin to support these > password forms (and/or any other forms that django supports)? You can always fall back on http://wiki2.dovecot.org/AuthDatabase/CheckPassword to implement any wild and woolly scheme you got going. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Debian Wheezy Dovecot Replication no updates on message deposit
by Milan Cvetkovic 21 Mar '14

21 Mar '14

Hi, I am trying to setup dovecot replication based on: http://wiki2.dovecot.org/Replication http://www.dovecot.org/list/dovecot/2013-January/087674.html I know that 2.1.7 is dated, but I would refrain from upgrading, if not necessary. The problem I have is pretty much same as the one described in http://www.dovecot.org/list/dovecot/2013-January/087674.html: I have vmail user on both systems, setup with ssh public key logins with empty passphrase. Apparently, dsync happens only on periodic updates. If a message is deposited on one server, it will only propagate to the other once a while. Thanks, Milan. Here is doveconf -n output: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.4 auth_mechanisms = plain login mail_location = maildir:~/Maildir mail_plugins = " notify replication" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { mail_replica = remote:vmail@192.168.108.138 sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap sieve pop3" replication_full_sync_interval = 1 hours service aggregator { fifo_listener replication-notify-fifo { user = vmail } unix_listener replication-notify { user = vmail } } service auth { unix_listener auth-client { mode = 0660 user = Debian-exim } } service config { unix_listener config { user = vmail } } service doveadm { user = vmail } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0600 } } ssl_cert = </etc/exim4/exim.crt ssl_key = </etc/exim4/exim.key userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = " sieve" }

2 3

[Dovecot] Dovecot + roundcube -- Password Change
by Vijay Rajah 21 Mar '14

21 Mar '14

Hello, I'm using Postfix + Dovecot (2.2.6) + roundcube 0.8.x + mysql. The roundcube webserver is hosted on a different server than the Dovecot. The dovecot itself is a replicated 2 node configuration. I would like to allow users to change the password from roundcube interface. All the examples I have seen, assume that roundcube runs in the same server as dovecot. Is there an example / documentation to enable this to work, applying reasonable security measures. -Thanks Vijay

2 1

[Dovecot] Password hashing issue
by Daniel Reynolds 20 Mar '14

20 Mar '14

Hello, First off, thanks in advance for all of your help. Now to my issue: I am setting up my first email server. It will be for just me and a few other people. I am using an Amazon EC2 server running Ubuntu 12.04. My MTA is postfix. As I said, this is my first time setting up an email server, so I am following a guide that Arstechnia has published (link<http://arstechnica.com/information-technology/2014/03/taking-e-mail-back-pa…> ). My issue comes when I try to create a hashed of my passwords. I have tried entering the command, "doveadm pw -s SSHA512". When I do this, I get the error message, "doveconf: Fatal: Error in configuration file /etc/dovecot/conf.d/99-mail-stack-delivery.conf line 6: Unknown setting: ssl_client_ca_dir". I have tried running that command with sudo and as root, but I still get the exact same error message. I had configured /etc/dovecot/conf.d/99-mail-stack-delivery.conf earlier on, and line 6 of that document says, "ssl_client_ca_dir = /etc/ssl/certs" which is exactly what the ars guide told me it should say. What have I done wrong? Thanks again, Daniel

2 1

Re: [Dovecot] versioning of mailbox index files
by morrison 19 Mar '14

19 Mar '14

My current approach is to introduce a index version file .dovecot.index.version in each mailbox and hooks mailbox_allocated event via my own plugin. If the version file does not exist or exist but with version number which need to be upgraded, index files in that mailbox are removed. I also tried to hook mailbox_opened() event and found that event was too late (index was loaded already). The side effect of hooking mailbox_allocated is that the event fires not only by 'select' command. 'list' command can also trigger a lot of mailbox_allocated events. Are there any better hook points I can use for this purpose? Thanks,

1 0

[Dovecot] Using a Sieve script to handle delivery to public mailboxes
by Alessandro Menti 19 Mar '14

19 Mar '14

Hello everyone, I'm setting up a Postfix+Dovecot stack with virtual domains and public mailboxes. I set up a shared mailbox "office(a)mydomain.com" as described in the Dovecot Wiki [1], that is: - I created the directory "/var/mail/mydomain.com/public/" and inside it I created the ".office" mailbox; - I added an appropriate ACL to allow the account "president(a)mydomain.com" to read and edit that mailbox under a public namespace; - I added a Sieve script to handle delivery to the public mailbox (its location is /var/mail/mydomain.com/public/.office/.dovecot.sieve). Some other relevant details about my configuration: - The backend used by Postfix and Dovecot to handle virtual aliases/domains/maps is a MySQL database. Since the virtual user table is used by other applications as well, I decided to keep it "clean" and to make use of another "virtual mailboxes" table (see /etc/dovecot/dovecot-sql.conf.ext below). The password_query setting returns only results from the virtual user table (so that only real users can authenticate on the IMAP server), while the user_query setting returns results from both the virtual user and the virtual mailbox table (so that dovecot-lda can choose the correct mailbox). - The queries saved in password_query and user_query return the correct results when executed manually: the home directory for the "office(a)mydomain.com" virtual mailbox is set to /var/mail/mydomain.com /public/.office. - Delivery from and to the "president(a)mydomain.com" account is regular, and that account is able to access the "office(a)mydomain.com" virtual mailbox (I have tested this by speaking IMAP to the server and by performing a manual check using Thunderbird). I encountered a problem with this setup: when I send a message to the "office(a)mydomain.com" account, the Postfix logs say it is correctly delivered via Dovecot, but the Sieve script says it can not find the folder "Public/.office". As a consequence, Dovecot creates a new Maildir in /var/mail/mydomain.com/office and delivers the mail there instead of saving it in the correct directory (/var/mail/mydomain.com/public/.office). Is there something I set incorrectly in my configuration? What is causing Dovecot not to recognize the correct mailbox during delivery? Is there a way to list all mailboxes seen by dovecot-lda itself? Thanks, Alessandro Menti [1] http://wiki2.dovecot.org/SharedMailboxes/Public ----- Dovecot and OS version: 2.0.19, Ubuntu 12.04 LTS Output of "dovecot -n": > # 2.0.19: /etc/dovecot/dovecot.conf > # OS: Linux 3.5.0-46-generic i686 Ubuntu 12.04.4 LTS ext4 > auth_mechanisms = plain login > login_greeting = IMAP server ready. > mail_debug = yes > mail_gid = vmail > mail_location = maildir:/var/mail/%d/%n/Maildir > mail_plugins = acl > mail_uid = vmail > namespace { > inbox = yes > location = > prefix = > separator = / > type = private > } > namespace { > list = children > location = maildir:/var/mail/mydomain.com/public > prefix = Public/ > separator = / > subscriptions = no > type = public > } > passdb { > args = /etc/dovecot/dovecot-sql.conf.ext > driver = sql > } > plugin { > acl = vfile > sieve = ~/.dovecot.sieve > sieve_before = /var/mail/sieve/ > sieve_dir = ~/sieve > } > postmaster_address = postmaster(a)mydomain.com > protocols = " imap" > service auth { > unix_listener /var/spool/postfix/private/auth { > group = postfix > mode = 0660 > user = postfix > } > unix_listener auth-userdb { > group = vmail > mode = 0660 > user = dovecot > } > } > ssl_cert = </etc/ssl/srvcerts/mailcert-withintcas.cer > ssl_cipher_list = EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:AES256-SHA256:AES256-SHA:RC4-SHA:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS > ssl_key = </etc/ssl/private/mailcert.pvk > userdb { > args = /etc/dovecot/dovecot-sql.conf.ext > driver = sql > } > protocol lda { > info_log_path = /var/log/dovecot-lda.log > log_path = /var/log/dovecot-lda-errors.log > mail_plugins = acl sieve > } > protocol imap { > mail_plugins = acl imap_acl > } /etc/dovecot/dovecot-sql.conf.ext: > driver = mysql > connect = host=127.0.0.1 dbname=dbname user=username password=password > default_pass_scheme = SHA512-CRYPT > password_query = SELECT email as user, password FROM virtual_users WHERE email='%u'; > user_query = SELECT home FROM virtual_users WHERE email = '%u' UNION SELECT home FROM virtual_shared_mailboxes WHERE email = '%u' Extract from /var/log/mail.log: > Mar 15 11:43:07 phoenix postfix/pickup[1404]: 3BA221FFD1: uid=0 from=<sysadmin> > Mar 15 11:43:07 phoenix postfix/cleanup[4871]: 3BA221FFD1: message-id=<20140315104307.3BA221FFD1(a)mail.mydomain.com> > Mar 15 11:43:07 phoenix postfix/qmgr[7691]: 3BA221FFD1: from=<sysadmin(a)mydomain.com>, size=316, nrcpt=1 (queue active) > Mar 15 11:43:07 phoenix dovecot: auth-worker: mysql(127.0.0.1): Connected to database mailserver > Mar 15 11:43:07 phoenix postfix/pipe[4875]: 3BA221FFD1: to=<office(a)mydomain.com>, relay=dovecot, delay=0.15, delays=0.05/0.03/0/0.07, dsn=2.0.0, status=sent (delivered via dovecot service) > Mar 15 11:43:07 phoenix postfix/qmgr[7691]: 3BA221FFD1: removed Extract from /var/log/dovecot-lda.log: > Mar 15 11:43:07 lda: Debug: Loading modules from directory: /usr/lib/dovecot/modules > Mar 15 11:43:07 lda: Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so > Mar 15 11:43:07 lda: Debug: Module loaded: /usr/lib/dovecot/modules/lib90_sieve_plugin.so > Mar 15 11:43:07 lda: Debug: auth input: office(a)mydomain.com home=/var/mail/mydomain.com/public/.office > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: Effective uid=1002, gid=999, home=/var/mail/mydomain.com/public/.office > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: acl: No acl_shared_dict setting - shared mailbox listing is disabled > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/var/mail/mydomain.com/office/Maildir > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: maildir++: root=/var/mail/mydomain.com/office/Maildir, index=, control=, inbox=/var/mail/mydomain.com/office/Maildir, alt= > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: Namespace : /var/mail/mydomain.com/office/Maildir doesn't exist yet, using default permissions > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: Namespace : Using permissions from /var/mail/mydomain.com/office/Maildir: mode=0700 gid=-1 > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: acl: initializing backend with data: vfile > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: acl: acl username = office(a)mydomain.com > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: acl: owner = 1 > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: acl vfile: Global ACL directory: (none) > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: Namespace : type=public, prefix=Public/, sep=/, inbox=no, hidden=no, list=children, subscriptions=no location=maildir:/var/mail/mydomain.com/public > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: maildir++: root=/var/mail/mydomain.com/public, index=, control=, inbox=, alt= > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: acl: initializing backend with data: vfile > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: acl: acl username = office(a)mydomain.com > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: acl: owner = 0 > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: acl vfile: Global ACL directory: (none) > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: acl: No acl_shared_dict setting - shared mailbox listing is disabled > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: none: root=, index=, control=, inbox=, alt= > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: Destination address: office(a)mydomain.com (source: user@hostname) > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: sieve: include: sieve_global_dir is not set; it is currently not possible to include `:global' scripts. > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: sieve: using sieve path for user's script: /var/mail/mydomain.com/public/.office/.dovecot.sieve > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: sieve: opening script /var/mail/mydomain.com/public/.office/.dovecot.sieve > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: sieve: script binary /var/mail/mydomain.com/public/.office/.dovecot.svbin successfully loaded > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: sieve: binary save: not saving binary /var/mail/mydomain.com/public/.office/.dovecot.svbin, because it is already stored > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: sieve: executing script from /var/mail/mydomain.com/public/.office/.dovecot.svbin > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: acl vfile: reading file /var/mail/mydomain.com/public/.office/dovecot-acl > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: acl vfile: file /var/mail/mydomain.com/public/dovecot-acl not found > Mar 15 11:43:07 lda(office(a)mydomain.com): Debug: acl vfile: file /var/mail/mydomain.com/office/Maildir/dovecot-acl not found > Mar 15 11:43:07 lda(office(a)mydomain.com): Info: sieve: msgid=<20140315104307.3BA221FFD1(a)mail.mydomain.com>: stored mail into mailbox 'INBOX' Extract from /var/mail/mydomain.com/public/.office/.dovecot.sieve.log: > sieve: info: started log at Mar 15 11:43:07. > error: msgid=<20140315104307.3BA221FFD1(a)mail.mydomain.com>: failed to store into mailbox 'Public/office': Mailbox doesn't exist: office. Listing of /var/mail/mydomain.com/public/.office: > $ sudo ls /var/mail/mydomain.com/public/.office -lA > total 56 > drwxr-x--- 2 vmail vmail 4096 mar 14 17:14 cur > -rw-r--r-- 1 root root 98 mar 9 18:05 dovecot-acl > -rw-r----- 1 vmail vmail 18432 mar 15 10:36 dovecot.index.cache > -rw-r----- 1 vmail vmail 1088 mar 15 10:36 dovecot.index.log > -rw-r--r-- 1 vmail vmail 0 mar 14 21:50 dovecot-shared > -rw-r--r-- 1 root root 50 mar 15 11:42 .dovecot.sieve > -rw------- 1 vmail vmail 188 mar 15 11:43 .dovecot.sieve.log > -rw-r--r-- 1 vmail vmail 124 mar 15 11:42 .dovecot.svbin > -rw-r----- 1 vmail vmail 98 mar 14 17:13 dovecot-uidlist > drwxr-x--- 2 vmail vmail 4096 mar 14 16:25 new > drwxr-x--- 2 vmail vmail 4096 mar 15 08:48 tmp Contents of /var/mail/mydomain.com/public/.office/.dovecot.sieve: > require "fileinto"; > fileinto "Public/office"; ACL for the "office" shared mailbox: > $ sudo cat /var/mail/mydomain.com/public/.office/dovecot-acl > user=president(a)mydomain.com lrwstipe Transcript of an IMAP session listing all folders: > * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] IMAP server ready. > a01 LOGIN president(a)mydomain.com password > a01 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS ACL RIGHTS=texk] Logged in > a02 LIST "" "*" > * LIST (\HasNoChildren) "/" "Infected Items" > * LIST (\HasNoChildren) "/" "Recycle Bin" > * LIST (\HasNoChildren) "/" "Spam" > * LIST (\HasNoChildren) "/" "Trash" > * LIST (\HasNoChildren) "/" "Drafts" > * LIST (\HasNoChildren) "/" "Sent Mail" > * LIST (\HasNoChildren) "/" "INBOX" > * LIST (\HasNoChildren) "/" "Public/office" > a02 OK List completed. > a03 LOGOUT > * BYE Logging out > a03 OK Logout completed.

3 4

[Dovecot] Sieve vacation attach original message
by azurIt 19 Mar '14

19 Mar '14

Hi, is it, somehow, possible to attach the original message to the vacation autoreply? Thank you. azur

2 4

Re: [Dovecot] Sieve vacation attach original message
by Joseph Tam 19 Mar '14

19 Mar '14

"azurIt" <azurit(a)pobox.sk> writes: > is it, somehow, possible to attach the original message to the vacation > autoreply? Hmm. Allowing a sender control over both the recipient (via spoofing), and the content seems like perfect recipe to turn your mail server into a spam relay cannon. If you do do this, you should hedge this by only allowing it from known trusted senders (e.g. local network). Joseph Tam <jtam.home(a)gmail.com>

2 1

[Dovecot] Dovecot crashes on large search result sets in virtual folders when using fts-solr
by Steffen Templin 19 Mar '14

19 Mar '14

Hi Devs, I experience reproducible crashes when searching in a virtual folder with fts-solr activated. The crashes occur only, if the folder contains a large number of mails and the result set of the search is also large. If the result set is small, no crash occurs. This happens on Debian Wheezy with versions 2.1.7 and 2.2.9. My goal was it to setup the possibility for cross-folder fulltext search. Therefore dovecot was setup with fts-solr, which seems to work fine in most cases. A virtual folder "test" in a namespace "virtual" was created and configured to return all mails from all mailboxes in the default namespace (with empty prefix). It was configured like this: /etc/dovecot/virtual/test/dovecot-virtual: * all It's also reproducible with: INBOX all The test user only has the standard mail folders (Sent, Drafts, Trash) beside the INBOX and of course the folder "virtual.test". INBOX contains about 10.000 mails, the other folders are empty. "virtual.test" correctly referrs to all mails of the INBOX. Searching within the INBOX returns the desired results without any problems. Performing the same search within "virtual.test" fails and dovecot crashes. However, if the result set is small, no crash occurs. My test mails are imported from the ubuntu mailing list. Therefore the term "ubuntu" produces a large result set. See attachments for further details, they all refer to the same crash, reproduced with version 2.2.9 (from the Debian Backports repository): - config.txt: dovecot -n - gdb_backtrace.txt: The gdb backtrace of the attached core dump - log.txt: A logfile extract from the crash - protocol_output.txt: The telnet session that caused the crash Don't hesitate to ask for further details. Thanks and best regards, Steffen

1 0

[Dovecot] Sieve escape user input
by azurIt 19 Mar '14

19 Mar '14

Hi, i'm having problems with escaping user input in sieve scripts. I'm using 'variables' extension and i can't find out how to escape character '$' - i tried '\$' and '$$' but nothing helps. Any ideas? Thanks. azur

2 1

[Dovecot] When does the replication run normally?
by Daniel Thielemann 18 Mar '14

18 Mar '14

Hi, I got my manual dsync finally working and can replicate mails by initiate it from comandline (doveadm sync -u mail(a)domain.dom -d), but it does not run by itself (per dovecot replication). When does dovecot invoke the replication normally? Thanks in advance Daniel

2 2

[Dovecot] dovecot for centos ?
by Spyros Tsiolis 18 Mar '14

18 Mar '14

Hello all, I was wondering which version is better for Centos v6.x. CentOS v6.5 comes with dovecot v2.0.9 as default. Should I go ahead with this or go for the latest ? (v2.2.10 / v2.211 / v2.2.12, btw what's the diferrence between the three ?) s.

1 0

[Dovecot] versioning of mailbox index files
by morrison 18 Mar '14

18 Mar '14

Hi, I am wondering if dovecot assigns version information in mailbox index files so that by which version of dovecot the index files are created can be determined. Our existing mail service used dovecot 2.2.4 with lots of active mail users. When upgraded to 2.2.10, imap processes aborted all the time due to the corrupted index files (the problem was fixed in dovecot 2.2.5). After investigation, I found that this annoying problem could be avoid by deleting index files before opening a mailbox. Now the problem is how I could know if the index files are created by a version newer than 2.2.4. Thanks, Morrison

2 1

[Dovecot] Any client out there taking advantage of Dovecot's virtual mailboxes?
by Aleve Sicofante 18 Mar '14

18 Mar '14

I wish to know if someone knows an IMAP client (desktop or webmail) using Dovecot's virtual mailboxes as server-side search folders. Thanks.

5 14

[Dovecot] dsync Error: Mailbox INBOX: Save commit failed: Mailbox was deleted under us
by Alan McGinlay - SICS 17 Mar '14

17 Mar '14

Hi, I am doing a mass migration of users from Cyrus imap on a solaris server to dovecot 1:2.2.9-1ubuntu1 and am getting this weird issue with dsync if I try to do a "full" sync. Debug output below: dsync(user(a)example.com): Error: Mailbox INBOX: Save commit failed: Mailbox was deleted under us dsync(user(a)example.com): Debug: brain M: out box 'INBOX' recv_state=recv_last_common send_state=done changed=1 dsync(user(a)example.com): Debug: brain M: out state=sync_mails changed=1 dsync(user(a)example.com): Debug: brain S: in state=sync_mails dsync(user(a)example.com): Debug: brain S: in box 'INBOX' recv_state=recv_last_common send_state=done dsync(user(a)example.com): Debug: brain S: out box 'INBOX' recv_state=recv_last_common send_state=done changed=0 dsync(user(a)example.com): Debug: brain S: out state=sync_mails changed=0 dsync(user(a)example.com): Debug: imapc(10.10.10.10:143): Disconnected [2]+ Killed /usr/bin/dsync -v -o mail_fsync=never backup -R -f -u user(a)example.com imapc: (I changed the domain / ip here of course) I notice that it does the IMAP sync for a while and then shows connecting info for pop3 (I have configuration for both imap and pop). The user in question has never connected with POP. imap migration config: imapc_host = 10.10.10.10 imapc_user = %u imapc_master_user = cyrusadmin imapc_password = blahblahblahpasswordhere imapc_features = rfc822.size imapc_features = $imapc_features #fetch-headers mail_prefetch_count = 20 pop configuration: pop3c_host = pop.example.com pop3c_user = %u pop3c_master_user = cyrusadmin pop3c_password = blahblahblahpasswordhere namespace { prefix = POP3-MIGRATION-NS/ location = pop3c: list = no hidden = yes } protocol doveadm { mail_plugins = $mail_plugins pop3_migration } plugin { pop3_migration_mailbox = POP3-MIGRATION-NS/INBOX } Thanks in advance for any pointers on this! /Alan

2 1

[Dovecot] purgewith doveadm without user (public mailbox)
by Hardy Flor 17 Mar '14

17 Mar '14

Hello, how I can in a public mailbox (mdbox), without user associated, the command 'doveadm purge ...' can run?

1 0

Re: [Dovecot] dovecot2-antispam segfault
by Nikolay Amiantov 16 Mar '14

16 Mar '14

I'm sorry for messing up postfix and dovecot in the title, I have a good lack of sleep today. ^_^ 16 марта 2014 г. 6:09 пользователь "Nikolay Amiantov" <nikoamia(a)gmail.com> написал: > Hello, > I've got a segfault with postfix2-antispam. > Versions: > Linux: Arch Linux x86_64 > Dovecot: 2.2.11 > Antispam: latest hg (revision 51) > > Antispam configuration: > antispam_backend = dspam > antispam_allow_append_to_spam = YES > antispam_spam = Spam;Junk > antispam_trash = trash;Trash > antispam_signature = X-DSPAM-Signature > antispam_signature_missing = error > antispam_dspam_binary = /usr/bin/dspamc > antispam_dspam_args = > --user;%Ln;--deliver=spam,innocent;--source=error;--signature=%%s > antispam_dspam_spam = --class=spam > antispam_dspam_notspam = --class=innocent > antispam_dspam_result_header = X-DSPAM-Result > mail_plugins = antispam fts fts_lucene > > GDB log with lmtp commands: http://bpaste.net/show/s2Ol7YyQH0a72QpyK9YN/ > > Bug is easily reproducible, ask my if you need additional information. > Thanks for your hard work on the dovecot, > Nikolay. >

2 2

[Dovecot] panic with 2.2.10 and GETMETADATA
by Michael Cramer 16 Mar '14

16 Mar '14

i have in my configs the following lines: 10-mail.conf:mail_attribute_dict = file:/srv/vmail/dovecot/metadata/%d/%n/attributes 20-imap.conf:imap_metadata = yes when i test GETMETADATA with telnet i got a pannic in my error.log file and no attributes file in the given location is created root@i920:/etc/dovecot/conf.d# telnet localhost imap Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready. 01 LOGIN tester(a)domain.com ********* 01 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIA L CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE SEARCH=FUZZY NOTIFY METADATA COMPRESS=DEFLATE QUOTA ACL RIGHTS=texk] Logged in 02 GETMETADATA "*" (/shared/test) Connection closed by foreign host. in error.log i have these lines: Dec 23 17:20:00 imap(tester(a)domain.com): Panic: file imap-client.c: line 634 (client_command_free): assertion failed: (client->output_cmd_lock == NULL) Dec 23 17:20:00 imap(tester(a)domain.com): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x5e900) [0x7fb053bea900] -> /usr/lib/dovecot/libdovecot.so.0(+0x5e9de) [0x7fb053bea9de] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fb053ba5bfe] -> dovecot/imap() [0x415c17] -> dovecot/imap() [0x415d8a] -> dovecot/imap() [0x415e15] -> dovecot/imap(client_handle_input+0x115) [0x416115] -> dovecot/imap(client_input+0x72) [0x4164a2] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x27) [0x7fb053bfa8f7] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xd7) [0x7fb053bfb687] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7fb053bfa498] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fb053baadf3] -> dovecot/imap(main+0x2af) [0x40b06f] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7fb0537e5de5] -> dovecot/imap() [0x40b1cc] gdb with bt full gives: #0 0x00007f174b6bdf77 in raise () from /lib/x86_64-linux-gnu/libc.so.6 No symbol table info available. #1 0x00007f174b6c15e8 in abort () from /lib/x86_64-linux-gnu/libc.so.6 No symbol table info available. #2 0x00007f174baad8f6 in default_fatal_finish (type=<optimized out>, status=status@entry=0) at failures.c:193 backtrace = 0x1801040 "/usr/lib/dovecot/libdovecot.so.0(+0x5e900) [0x7f174baad900] -> /usr/lib/dovecot/libdovecot.so.0(+0x5e9de) [0x7f174baad9de] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f174ba68bfe] -> dovecot/im"... #3 0x00007f174baad9de in i_internal_fatal_handler (ctx=0x7fffe2002eb0, format=<optimized out>, args=<optimized out>) at failures.c:657 status = 0 #4 0x00007f174ba68bfe in i_panic (format=format@entry=0x423040 "file %s: line %d (%s): assertion failed: (%s)") at failures.c:267 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0} args = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7fffe2002fa0, reg_save_area = 0x7fffe2002ee0}} #5 0x0000000000415c17 in client_command_free (_cmd=_cmd@entry=0x7fffe2002fc8) at imap-client.c:634 cmd = 0x183a2d0 client = 0x18396f0 state = CLIENT_COMMAND_STATE_WAIT_INPUT __FUNCTION__ = "client_command_free" #6 0x0000000000415d8a in client_command_input (cmd=0x0) at imap-client.c:783 client = 0x18396f0 command = <optimized out> __FUNCTION__ = "client_command_input" #7 0x0000000000415e15 in client_command_input (cmd=0x183a2d0) at imap-client.c:841 client = 0x18396f0 command = <optimized out> __FUNCTION__ = "client_command_input" #8 0x0000000000416115 in client_handle_next_command (remove_io_r=<synthetischer Zeiger>, client=0x18396f0) at imap-client.c:879 No locals. #9 client_handle_input (client=client@entry=0x18396f0) at imap-client.c:891 _data_stack_cur_id = 3 remove_io = false handled_commands = false __FUNCTION__ = "client_handle_input" #10 0x00000000004164a2 in client_input (client=0x18396f0) at imap-client.c:933 cmd = 0x181db70 output = 0x183a120 bytes = 35 __FUNCTION__ = "client_input" #11 0x00007f174babd8f7 in io_loop_call_io (io=0x183a1f0) at ioloop.c:388 ioloop = 0x1808730 t_id = 2 #12 0x00007f174babe687 in io_loop_handler_run (ioloop=ioloop@entry=0x1808730) at ioloop-epoll.c:220 ctx = 0x18093c0 list = 0x180adf0 io = <optimized out> tv = {tv_sec = 1799, tv_usec = 999100} events_count = <optimized out> msecs = <optimized out> ret = 1 i = 0 call = <optimized out> __FUNCTION__ = "io_loop_handler_run" #13 0x00007f174babd498 in io_loop_run (ioloop=0x1808730) at ioloop.c:412 __FUNCTION__ = "io_loop_run" #14 0x00007f174ba6ddf3 in master_service_run (service=0x18085c0, callback=callback@entry=0x41eea0 <client_connected>) at master-service.c:566 No locals. #15 0x000000000040b06f in main (argc=1, argv=0x1808390) at main.c:400 set_roots = {0x426d00 <imap_setting_parser_info>, 0x0} login_set = {auth_socket_path = 0x1800048 "\001", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x41f250 <login_client_connected>, failure_callback = 0x41ef80 <login_client_failed>, request_auth_token = 1} service_flags = <optimized out> storage_service_flags = <optimized out> username = 0x0 c = <optimized out>

2 2

[Dovecot] postfix2-antispam segfault
by Nikolay Amiantov 16 Mar '14

16 Mar '14

Hello, I've got a segfault with postfix2-antispam. Versions: Linux: Arch Linux x86_64 Dovecot: 2.2.11 Antispam: latest hg (revision 51) Antispam configuration: antispam_backend = dspam antispam_allow_append_to_spam = YES antispam_spam = Spam;Junk antispam_trash = trash;Trash antispam_signature = X-DSPAM-Signature antispam_signature_missing = error antispam_dspam_binary = /usr/bin/dspamc antispam_dspam_args = --user;%Ln;--deliver=spam,innocent;--source=error;--signature=%%s antispam_dspam_spam = --class=spam antispam_dspam_notspam = --class=innocent antispam_dspam_result_header = X-DSPAM-Result mail_plugins = antispam fts fts_lucene GDB log with lmtp commands: http://bpaste.net/show/s2Ol7YyQH0a72QpyK9YN/ Bug is easily reproducible, ask my if you need additional information. Thanks for your hard work on the dovecot, Nikolay.

1 0

[Dovecot] FTS solr : body search gives mysql error
by Alexandre Ellert 15 Mar '14

15 Mar '14

Hello, I've recently setup FTS solr plugin, following http://wiki2.dovecot.org/Plugins/FTS/Solr, and I have this error in logs when I do a body search : Mar 13 01:46:40 mut-mx-1 dovecot: auth-worker(5808): Warning: mysql: Query failed, retrying: Unknown column 'disableindexer' in 'where clause' Mar 13 01:46:40 mut-mx-1 dovecot: auth-worker(5808): Error: sql(user(a)domain.com): User query failed: Unknown column 'disableindexer' in 'where clause' Mar 13 01:46:40 mut-mx-1 dovecot: indexer-worker: Error: user user(a)domain.com: Auth USER lookup failed Mar 13 01:46:40 mut-mx-1 dovecot: indexer-worker: Error: User user(a)domain.com lookup failed: Internal error occurred. Refer to server log for more information. Mar 13 01:46:40 mut-mx-1 dovecot: imap(user(a)domain.com): Error: indexer failed to index mailbox INBOX Anyway, the search result seems good. Should I worry about this error or is there other thing I should do (i.e modify mysql schema) ? I'm using mysql as a backend to store users and password. According to the documentation, I just added this block of configuration (please tell me if need full doveconf -n) : mail_plugins = fts fts_solr [ my other plugins ] plugin { fts = solr fts_solr = url=http://127.0.0.1:8080/solr/ } Versions : OS : Debian 7 dovecot : 2.2.12 (from dovecot-ee repo) solr : 3.6.0 (from distrib repo) Other recommendations and feedback about using solr FTS in production would be greatly appreciated. Many thanks. Alexandre

3 7

[Dovecot] Compile Metadata for 2.2.9
by Denny Fuchs 15 Mar '14

15 Mar '14

hi, I use Debian Wheezy backports for Dovecot and I want to compile the latest metadata plugin, but it fails: the metadata plugin was downloaded via: http://hg.dovecot.org/dovecot-metadata-plugin/archive/tip.tar.gz root@build:~/dovecot-metadata-plugin-b6df1381bb79# ./configure --with-dovecot=/usr/lib/dovecot/ && make [...] /bin/bash ../libtool --tag=CC --mode=compile gcc -std=gnu99 -DHAVE_CONFIG_H -I. -I.. -I/usr/include/dovecot -g -O2 -MT imap-metadata-plugin.lo -MD -MP -MF .deps/imap-metadata-plugin.Tpo -c -o imap-metadata-plugin.lo imap-metadata-plugin.c libtool: compile: gcc -std=gnu99 -DHAVE_CONFIG_H -I. -I.. -I/usr/include/dovecot -g -O2 -MT imap-metadata-plugin.lo -MD -MP -MF .deps/imap-metadata-plugin.Tpo -c imap-metadata-plugin.c -fPIC -DPIC -o .libs/imap-metadata-plugin.o imap-metadata-plugin.c:452:1: error: static declaration of 'cmd_getmetadata' follows non-static declaration In file included from /usr/include/dovecot/imap-client.h:4:0, from /usr/include/dovecot/imap-common.h:17, from imap-metadata-plugin.c:21: /usr/include/dovecot/imap-commands.h:110:6: note: previous declaration of 'cmd_getmetadata' was here imap-metadata-plugin.c:743:1: error: static declaration of 'cmd_setmetadata' follows non-static declaration In file included from /usr/include/dovecot/imap-client.h:4:0, from /usr/include/dovecot/imap-common.h:17, from imap-metadata-plugin.c:21: /usr/include/dovecot/imap-commands.h:111:6: note: previous declaration of 'cmd_setmetadata' was here make[2]: *** [imap-metadata-plugin.lo] Error 1 make[2]: Leaving directory `/root/dovecot-metadata-plugin-b6df1381bb79/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/root/dovecot-metadata-plugin-b6df1381bb79' make: *** [all] Error 2 I tried also hg clone ..., but got the same ... Do I need Dovecot 2.2.10 to compile successful ? cu denny

2 3

[Dovecot] Strange difference between mails delivered with dovecot-lda and lmtp
by kjonca＠o2.pl 15 Mar '14

15 Mar '14

For a long time I have had configuration where mails were fetched by fetchmail then passed to exim and then passed to dovecot via lmtp. Recently I remove dovecot module and mails are passed from exim to dovecot via dovecot-lda Yesterday I have some kind of accident and lost my .fetchids file so a lot of mails were fetched again. During duplicate hunting I found something strange: messages fetched yesterday (passed to dovecot with lda have additional line) have additional line at the end: for example --8<---------------cut here---------------start------------->8--- diff cur/1392241092.M478532P15313.alfa,S=13668,W=13925:2,a cur/1394814438.M978438P14745.alfa,S=13567,W=13823:2,a 1,6c1,4 < Return-Path: <system(a)przelewy24.pl> < Delivered-To: <kjonca@localhost> < Received: from alfa.kjonca < by alfa.kjonca (Dovecot) with LMTP id p94PDcTp+1LROwAApvcrCQ < for <kjonca@localhost>; Wed, 12 Feb 2014 22:38:12 +0100 < Received: from [127.0.0.1] (port=60632 helo=alfa.kjonca) --- > Return-path: <system(a)przelewy24.pl> > Envelope-to: kjonca@localhost > Delivery-date: Fri, 14 Mar 2014 17:27:18 +0100 > Received: from [127.0.0.1] (port=45527 helo=alfa.kjonca) 9,10c7,8 < id 1WDhVU-0003ys-75 < for kjonca@localhost; Wed, 12 Feb 2014 22:38:12 +0100 --- > id 1WOUgz-00015z-L0 > for kjonca@localhost; Fri, 14 Mar 2014 17:10:41 +0100 13c11 < for <kjonca@localhost> (single-drop); Wed, 12 Feb 2014 22:38:12 +0100 (CET) --- > for <kjonca@localhost> (single-drop); Fri, 14 Mar 2014 17:10:41 +0100 (CET) 30c28 < Message-Id: <E1WDhVU-0003ys-75(a)alfa.kjonca> --- > Message-Id: <E1WOUgz-00015z-L0(a)alfa.kjonca> 256a255 > --8<---------------cut here---------------end--------------->8--- I'm somewhat confused with this. Is this normal? -- http://wolnelektury.pl/wesprzyj/teraz/

1 0

[Dovecot] Problem with trying to use dsync with ldap userdb
by Frédéric Goudal 14 Mar '14

14 Mar '14

Hello, I'm trying to use dsync on a dovecot 2.2.12 I'm using an ldap database as a user database with the following configuration : auth_bind = yes ldap_version = 3 auth_bind_userdn = uid=%u,ou=People,dc=ipb,dc=fr user_attrs = uidNumber=uid,gidNumber=gid But I keet having the following errors : 2014-03-14 17:53:37 doveadm(XXX): Debug: user XXX: Auth PASS lookup returned temporary failure: reason=Configured passdbs don't support crentials lookups 2014-03-14 17:53:37 doveadm(XXX): Debug: auth input: reason=Configured passdbs don't support crentials lookups 2014-03-14 17:53:37 doveadm(XXX): Error: sync: /usr/local/var/run/dovecot/auth-userdb: Configured passdbs don't support crentials lookups (to see if user is proxied, because doveadm_port is set) I have been hunting through the doc for the last hours and I don't find what to change. I found something about adding set INSECURE_SETUID=1 export INSECUURE_SETUID before checkpassword-reply launch, but it does not change anything... Btw my two server have use the users uid from the ldap, but don't allow user login on the servers where only admin can log in. Does somebody has an idea where to dig ? f.g.

1 0

Re: [Dovecot] Public Namespace and INBOX
by Dieter Knopf 14 Mar '14

14 Mar '14

2014-03-06 16:32 GMT+01:00 Steffen Kaiser <skdovecot(a)smail.inf.fh-brs.de>: > > If you don't get it to work, fake an INBOX by symlinking cur/new/tmp into > ".INBOX". It's not the nice, but should work. > > Thanks, because of that i tried it with a custom INBOX in mail_location and it worked, but i still only see FOO/INBOX as folder and not FOO itself.

2 2

[Dovecot] NFS not responding generates authantication crash
by bart 14 Mar '14

14 Mar '14

I am facing dovecot authentication problems caused by unresponding NFS server. If there is even short break in communication with NFS server keeping maildirs, the dovecot generates the avalanche of processes (dovecot/imap and dovecot/pop3). The real number of connections was about 50 and after the problems occurs it rises to 1000. After about 3 hours the limit of connections is filled up: dovecot: master: Warning: service(auth): client_limit (1000) reached, client connections are being dropped and next: imap-login: Warning: Auth process not responding, delayed sending greeting pop3-login: Warning: Error sending handshake to auth server: Broken pipe imap-login: Warning: Error sending handshake to auth server: Broken pipe When the mail storage was local there was no such problem. After moving to NFS storage the problem arised when trying to make backup with dump (we switched to rsync then) or now if NFS is not responding for a while. My dovecot conf for NFS is in accordane with: http://wiki2.dovecot.org/NFS mmap_disable = yes dotlock_use_excl = no # only needed with NFSv2, NFSv3+ supports O_EXCL and it's faster mail_fsync = always mail_nfs_storage = no mail_nfs_index = no NFS shares are connected with no special parameters. Can something be done on dovecot configuration to prevent from generating those dovecot connections processes? Or is it the problem with NFS configuration? -- View this message in context: http://dovecot.2317879.n4.nabble.com/NFS-not-responding-generates-authantic… Sent from the Dovecot mailing list archive at Nabble.com.

1 0

[Dovecot] Patch & feature request: hide passwords in doveconf -n by default
by Steffen Kaiser 13 Mar '14

13 Mar '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, attached patch tries to hide any setting that ends in _password (singular) in the output of doveconf by default. doveconf -n - -> passwords replaced by "<hidden>" to prevent information leak when submitting bug reports doveconf -n -P - -> passwords visible when used by admins locally doveconf -n -P -P - -> setting itself is not shown to even hide that a password is set in the config Warning: doveconf is used by internal programs as well, maybe they won't after the patch. Timo should check out the idea. The passwords are left alone currently, if one queries one setting and if the values are saved to environment. Kind regards, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBUyHQ0nD1/YhP6VMHAQIYkwf/aeiT4MMERJr1abZIHPv5zjvgHlyixwfM huFD2CzbhWUoUlE4auAxUVDP+l/s7jlQzZ04y4vt2BdMauMUDSg8ZcFWxSkj+Veg ZDjTVSP/v386ihH0TlGWXsVp1hCvzJUgylpQYbFwCJ3b58xs7p+8wb2l2Ngj/TTp kmtl8mJ2Z5+MBJqz4IBxye7RXkTndHMC18EjVHxNkIIJ8kEUn7tbs0eljudZXSPD q2gsG0PzvGTOUkuWWvWLVP4nTXBKMIffxX2SDNHmb1gHNV05zL8b5uth3PxUA7d6 NpXsnGHxCfOGf3FPbaTlGPfVpIX5IdTxZTRXHe++tDdlonZInM7V/g== =73ZJ -----END PGP SIGNATURE-----

1 0

[Dovecot] quota is exceeded during send mail
by pgala 13 Mar '14

13 Mar '14

Hi, i try configure qouta plugin in dovecot. If i want sent mail to user with full mailbox all is ok, messege is reject. But if i want sent mail from user with full mailbox then messege is delivery and save to sent folder so quota is unlimited in this case. my dovecot.conf -------------------------------------------------------------------------------- # 2.2.9: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.el6.x86_64 x86_64 CentOS release 6.4 (Final) ext4 auth_mechanisms = plain login dict { quotadict = mysql:/usr/local/etc/dovecot/dovecot-dict-quota.conf } disable_plaintext_auth = no first_valid_gid = 12 first_valid_uid = 101 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lmtp_save_to_detail_mailbox = yes mail_location = maildir:/home/vmail/%d/%n mail_plugins = quota managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /usr/local/etc/dovecot/dovecot-mysql.conf driver = sql } plugin { acl = vfile:/usr/local/etc/dovecot/acls quota = dict:user::proxy::quotadict quota_exceeded_message = Quota exceeded. quota_grace = 10MB trash = /usr/local/etc/dovecot/trash.conf } protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = mail mode = 0666 user = vmail } } service dict { unix_listener dict { group = mail mode = 0666 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service imap { vsz_limit = 256 M } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 0 service_count = 1 vsz_limit = 64 M } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } ssl_cert = </etc/pki/tls/certs/localhost.crt ssl_key = </etc/pki/tls/private/localhost.key userdb { driver = prefetch } userdb { args = /usr/local/etc/dovecot/dovecot-mysql.conf driver = sql } protocol lda { mail_plugins = quota sieve postmaster_address = root@hostname } protocol imap { imap_client_workarounds = delay-newmail mail_plugins = quota imap_quota trash } protocol lmtp { mail_plugins = quota sieve } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 } -- View this message in context: http://dovecot.2317879.n4.nabble.com/quota-is-exceeded-during-send-mail-tp4… Sent from the Dovecot mailing list archive at Nabble.com.

1 0

[Dovecot] Mail server input error: UPDATE-SESSION
by Stéphane Cottin 13 Mar '14

13 Mar '14

Hello, After upgrading to 2.2.12 and adding stats plugin, got a lot of errors like this : stats: Error: Mail server input error: UPDATE-SESSION xyz(a)xyz.xyz imap: stats shrank: mcache 900988905 < 1039472051 Stéphane

1 1

[Dovecot] quota using wrong limits in user shared mailboxes
by Steffen Kaiser 13 Mar '14

13 Mar '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I have setup a shared namespace to expose user's mailboxes to other users. That works well. Via ACLs users can access other users mailboxes. I have setup a quota for each user, that works well, too. The quota is tracked and new messages are denied, if the quota is exceeded. I do not find hints, if you need to setup something special for shared namespaces. http://wiki2.dovecot.org/Quota/Configuration shows how to track the quota and http://wiki2.dovecot.org/SharedMailboxes/Shared shows how to setup the namespace and ACL. If user1 shares "mailbox" to user2 and user2 copies a message there, the quota is tracked in the quota of user1 correctly. But to calculate if * LOGIN user2 ... * COPY 1 users.user1.mailbox fails with overquota or succeed, the quota limit of user2 is used instead of the quota of user1, whom "mailbox" belongs to. I have tested it with a. limit(user2) < limit(user1) b. quota(user1) + sizeof(message) < limit(user1) if quota(user1) + sizeof(message) > limit(user2), COPY fails with overquota. If I raise the quota of user2, the COPY succeeds. That means, although the target user's quota is not exceeded and won't after the copy, COPY fails. That seems to be wrong for me. The same will apply to the other way round, I guess: If the target user is over quota, but copying user's quota limit is greater than that, the COPY succeeds. [I have not tested it.] Hence, if you enable sharing, you undermine quota, because the other user can copy messages into a mailbox of an user overquota. Does other people see the same issue? My config: # 2.2.10 (5432b55a2b87): /usr/local/dovecot-2.2.10/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.9 auth_cache_size = 30 M auth_mechanisms = plain login auth_verbose = yes auth_worker_max_count = 100 base_dir = /var/run/dovecot2.2/ default_vsz_limit = 512 M deliver_log_format = msgid=%m: %$ %p/%w "%f" "%s" dict { acl = pgsql:/usr/local/dovecot-2.2.10/etc/dovecot/dovecot-dict-sql.conf.ext quota = pgsql:/usr/local/dovecot-2.2.10/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no instance_name = dovecot2.2 lda_mailbox_autocreate = yes lmtp_save_to_detail_mailbox = yes log_path = /var/log/dovecot/dovecot2.2.log log_timestamp = "%F %H:%M:%S " mail_gid = vmail mail_log_prefix = "%Us(%u) [%p]: " mail_max_userip_connections = 0 mail_plugins = " quota notify mail_log zlib acl stats" mail_shared_explicit_inbox = yes mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = users.%%u. separator = . type = shared } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /usr/local/dovecot-2.2.10/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = proxy::acl antispam_allow_append_to_spam = yes antispam_backend = spool2dir antispam_spam = SPAM+ReportAsSPAM antispam_spool2dir_notspam = /tmp/spamspool/%%020lu-%%05lu-%u-H antispam_spool2dir_spam = /tmp/spamspool/%%020lu-%%05lu-%u-S antispam_trash = trash;TRASH;Trash;spam;SPAM;Spam;junk;JUNK;Junk;Deleted Items;Deleted Messages;Gel&APY-schte Elemente;Gel&APY-schte Objekte;Junk E-mail;Junk-E-Mail;INBOX.Trash;INBOX.TRASH;INBOX.trash mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size vsize from subject quota = dict:User quota::proxy::quota quota_rule = *:storage=300MB quota_rule2 = Trash:storage=+30M recipient_delimiter = + sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +imapflags sieve_max_actions = 0 sieve_quota_max_storage = 3M stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 128 M stats_refresh = 30 secs stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours } postmaster_address = postmaster(a)inf.h-brs.de protocols = imap pop3 lmtp sieve quota_full_tempfail = yes service auth { unix_listener auth-client { mode = 0766 } unix_listener auth-userdb { mode = 0766 user = vmail } } service dict { unix_listener dict { group = vmail mode = 0660 user = vmail } } service doveadm { unix_listener doveadm-server { mode = 0666 } } service imap-login { process_min_avail = 4 service_count = 0 vsz_limit = 768 M } service imap { process_limit = 1000 vsz_limit = 768 M } service lmtp { vsz_limit = 768 M } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service pop3-login { process_min_avail = 5 service_count = 0 vsz_limit = 512 M } service stats { fifo_listener stats-mail { mode = 0600 user = vmail } } ssl_ca = </etc/ssl/certs/ca.crt ssl_cert = </etc/ssl/certs/imap.pem ssl_key = </etc/ssl/private/imap.key userdb { driver = prefetch } userdb { args = /usr/local/dovecot-2.2.10/etc/dovecot/dovecot-ldap.conf.ext default_fields = home=/home/%u uid=vmail gid=vmail driver = ldap } verbose_proctitle = yes protocol lmtp { mail_plugins = " quota notify mail_log zlib acl stats quota sieve" } protocol lda { mail_plugins = " quota notify mail_log zlib acl quota sieve" } protocol imap { mail_plugins = " quota notify mail_log zlib acl stats imap_quota imap_zlib imap_acl antispam imap_stats" } - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBUyGBe3D1/YhP6VMHAQJXzggAl5WaaTkOS3cVWqv/MQWaKBMQef8EEX2y VIT9Gx/W+QMcozTF1l5BQwis1fLDD8tNd86fuk82s/4yAVH+LUFFJsbnC6FaMGr+ 9sDKG4I22mKLMFpI2H19tbUoFTcMCebv93qcdBwH2aLEUVUPpRTxPTDoVkDotDk+ omu547sFWMkeNb/7fkaZM9quHne6EyJQa94URcVt8TtSEGa+y/xbmE16gShH9QPG LSz8dWtfk+hw2po9dKtHG6tPLNQC/zuJSsSdJoEh1PtyZUwmhxwMnE6n6u54GPLk LesSLfD3MH8Tz/TBD6lYgHhrj5WCdXRYibnaDd4fV22QnEK+IsST8Q== =vDet -----END PGP SIGNATURE-----

1 0