- dovecot - dovecot.org

[Dovecot] anti-spam
by Spyros Tsiolis 19 Jan '13

19 Jan '13

Chaps, What's the story with anti-spam on dovecot ? Do we have something working out of the box, so to speak ? Any guidance / ideas ? s. ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

2 1

[Dovecot] [PATCH] LMTP: Permit user IDs containing recipient_delimiter
by Ulrich Zehl 18 Jan '13

18 Jan '13

The Dovecot 2.1 LMTP server currently always strips the address extension from a recipient address (if recipient_delimiter is set), meaning user IDs cannot contain the recipient delimiter character, e.g. "user+foo" is not supported. This was surprising for me, as Postfix behaves differently in this regard: It first looks up "user+foo", and only then "user". The attached patch works for me and brings Dovecot's behavior in line with Postfix. Please let me know what you think about it.

2 2

[Dovecot] users = virual + system (both with ldap backend) => Fatal: setgid(12(mail)) failed with euid=501(...
by lejeczek 18 Jan '13

18 Jan '13

dear all probably something trivial, just cannot get my way around it, my goal is to get sieve on local-system users too, so postfix hands lda over to dovecot errors with mail for system users: lda(me): Fatal: setgid(12(mail)) failed with euid=501(me), gid=513(Domain Users), egid=513( Domain Users): Operation not permitted (This binary should probably be called with process group set to 12(mail) instead of 513(Doma in Users)) mail storage is in users' homes and these are on nfs3 which bits am I missing, please advise? regards

1 0

[Dovecot] dovecot + antispam plugin - no retraining
by Michael Moerz 17 Jan '13

17 Jan '13

Hi, dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.8.0-0-generic x86_64 Ubuntu Raring Ringtail (development branch) listen = 10.10.200.39 login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_debug = yes mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = prefix = } passdb { driver = pam } plugin { antispam_backend = pipe antispam_mail_notspam = ham(a)example.org antispam_mail_sendmail = /usr/sbin/sendmail antispam_mail_sendmail_args = -f;%u(a)example.org antispam_mail_spam = spam(a)example.org antispam_mail_tmpdir = /tmp antispam_signature = X-DSPAM-Signature antispam_signature_missing = error antispam_spam_pattern_ignorecase = SPAM;Junk antispam_trash = trash;Trash;Deleted Items; Deleted Messages mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap sieve pop3" service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imaps { port = 993 ssl = yes } } ssl_cert = </etc/ssl/certs/mail.dmz.example.org.cert.pem ssl_key = </etc/ssl/private/mail.dmz.example.org.key.pem userdb { driver = passwd } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 15 mail_plugins = " antispam" } protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } filesystem is ext4 antispam util is dspam I'm trying to utilize the imap plugin antispam for retraining spam/ham when moving mail from/to spam folders. antispam plugin is loaded and imap service itself runs correctly logfile excerp for login: Jan 16 21:04:33 mailhost dovecot: imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules Jan 16 21:04:33 mailhost dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib90_antispam_plugin.so Jan 16 21:04:33 mailhost dovecot: imap(user): Debug: Effective uid=1001, gid=1001, home=/home/user Jan 16 21:04:33 mailhost dovecot: imap(user): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir Jan 16 21:04:33 mailhost dovecot: imap(user): Debug: maildir++: root=/home/user/Maildir, index=, control=, inbox=/home/user/Maildir, alt= Jan 16 21:04:34 mailhost dovecot: imap-login: Login: user=<user>, method=PLAIN, rip=10.10.99.205, lip=10.10.200.39, mpid=5936, TLS Jan 16 21:04:34 mailhost dovecot: imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules Jan 16 21:04:34 mailhost dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib90_antispam_plugin.so Jan 16 21:04:34 mailhost dovecot: imap(user): Debug: Effective uid=1001, gid=1001, home=/home/user Jan 16 21:04:34 mailhost dovecot: imap(user): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir Jan 16 21:04:34 mailhost dovecot: imap(user): Debug: maildir++: root=/home/user/Maildir, index=, control=, inbox=/home/user/Maildir, alt= When I move mail into or out of imap folders named Junk or SPAM I would expect, that the antispam plugin kicks in and pipes the mail to dspam. Apparently this does not happen, nothing gets piped, though the mail is still moved to the folder. I've already tried dspam-exec as a backend as well, but that fails even ealier right after imap login with: Jan 16 19:26:15 mailhost dovecot: master: Dovecot v2.1.7 starting up (core dumps disabled) Jan 16 19:26:45 mailhost dovecot: imap-login: Login: user=<user>, method=PLAIN, rip=10.10.99.205, lip=10.10.200.39, mpid=4701, TLS Jan 16 19:26:45 mailhost dovecot: imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules Jan 16 19:26:45 mailhost dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib90_antispam_plugin.so Jan 16 19:26:45 mailhost dovecot: imap(user): Debug: Effective uid=1001, gid=1001, home=/home/user Jan 16 19:26:45 mailhost dovecot: imap(user): Fatal: master: service(imap): child 4701 returned error 3 settings were: antispam_backend = dspam-exec antispam_dspam_binary = /usr/bin/dspam antispam_dspam_args = --client;--source=error;--user;%u;--signature=%%s I've also tried with: antispam_backend = dspam-exec antispam_dspam_binary = /usr/bin/dspam antispam_dspam_args = --source=error;--user;%u those settings actually do not produce the problem after the imap login, but they still do not react to moving mail into/from spam folders. I've also tried to utilize antispam_spam = Junk or antispam_spam_pattern = SPAM instead of antispam_spam_pattern_ignorecase = SPAM;Junk but neither makes a difference. Thx in advance for any advice. kind regards, Michael Moerz

2 2

[Dovecot] possible: two private namespaces with different quota?
by Steffen Kaiser 17 Jan '13

17 Jan '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, in thread "how to setup different quota for multiple namespaces" I tried to get an additional, private namespace "archive" with yet another quota. Every message, regardless if delivered to INBOX or archive, counts for both namespaces, the default one and the archive one. Furthermore the dict records the quota of the archive namespace as user "ns=archive". Because the quota_rules does not accept "*", I see no way to have two or more private quota roots. Could one improve quota_root_rule_find(struct quota_root_settings *root_set, const char *name) { struct quota_rule *rule; array_foreach_modifiable(&root_set->rules, rule) { char *p = strchr(rule->mailbox_name, '\0'); if(p && p > rule->mailbox_name + 1 && p[-1] == '*' ) { /* compare box* */ if(memcmp(rule->mailbox_name, name, p - rule->mailbox_name - 2) == 0) return rule; } else if (strcmp(rule->mailbox_name, name) == 0) return rule; } return NULL; } So one could add a relative rule for the default private namespace. Kind regards, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBUPgKuF3r2wJMiz2NAQJRbAf/Rb993MR/j6NeLqxqqaqkry6BU2Kw2Sti xVwU9P6hAK/tb4o647PO1015Pd5XbbUpY0itqNzHguqof8+PuT4bGeECT33Y9mKA l0+Soq0Pi9war+ZHKYoQZizNDSb+fQkyGPSi3AsuHDapSpxwc6zj9v/HjxpHkr7+ l1ln8NcFG9gKZ/dB+eIM14GNHOsVKVI/lKfR4b50CFabIX871KIyXP8GEGyl9mUC te6ROCzcNTbRpyksQEjCh/UQ8PVWz8GNKAzreLMqGfdxp9SRkhSKiJYSGL9i8Rn6 CTKBmLy0Gq5MoF+7roAMBLzJe1TC0mxCkeT6s0G/iJB5vCVnYyo9BQ== =K3ko -----END PGP SIGNATURE-----

1 0

[Dovecot] Benchmarking: Dovecot vs Courier. Courier wins as POP3 server
by Alexandr Sabitov 17 Jan '13

17 Jan '13

Hi All, I have compared Dovecot performance to Courier and it appears that as a POP3 server Dovecot is slower in 2 times but as an IMAP server it is faster in 1.5 times. The same node (16CPUs), testing time is 30 min, please see results and dovecot configs attached. Benchmark software is MStone used by Sendmail Inc so is is quite reliable. I do not see anything else to tweak in Dovecot to increase POP3 performance. Can we all have some tips to improve it please ? This is how my Dovecot set up: (LDAP user) -> Dovecot Director -> (Master user) -> Dovecot Dovecot Director: dovecot-shared-4:~# /usr/local/dovecot/bin/doveconf -n -c /usr/local/dovecot/etc/dovecot/dovecot-proxy.conf # 2.1.12: /usr/local/dovecot/etc/dovecot/dovecot-proxy.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.6 auth_debug = yes auth_mechanisms = plain login cram-md5 ntlm auth_verbose = yes base_dir = /var/run/dovecot-proxy default_internal_user = webmail director_mail_servers = 192.168.100.102 director_servers = 192.168.100.101 disable_plaintext_auth = no doveadm_password = blah doveadm_proxy_port = 9292 instance_name = dovecot-proxy listen = 192.168.100.101 log_path = /var/log/dovecot-proxy.log login_greeting = Dovecot Proxy ready. mail_location = maildir:~/ passdb { args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } service auth-worker { user = webmail } service auth { client_limit = 2400 } service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { port = 9191 } unix_listener director-userdb { mode = 0600 } unix_listener login/director { mode = 0666 } } service doveadm { inet_listener { port = 9292 } } service imap-login { executable = imap-login director inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service imap { service_count = 0 } service lmtp { inet_listener lmtp { port = 24 } } service pop3-login { executable = pop3-login director inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service pop3 { service_count = 0 } ssl_cert = </usr/local/dovecot/ssl/dovecot.pem ssl_key = </usr/local/dovecot/ssl/dovecot.pem userdb { args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol imap { mail_max_userip_connections = 100 } protocol doveadm { auth_socket_path = director-userdb } Dovecot (back-end): dovecot-shared-4:~# /usr/local/dovecot/bin/doveconf -n # 2.1.12: /usr/local/dovecot/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.6 auth_debug = yes auth_master_user_separator = * auth_mechanisms = plain login auth_verbose = yes base_dir = /var/run/dovecot/ default_internal_user = webmail disable_plaintext_auth = no doveadm_password = blah listen = 192.168.100.102 log_path = /var/log/dovecot.log mail_fsync = always mail_location = maildir:~/ mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = " quota fts fts_lucene" mmap_disable = yes namespace { inbox = yes location = prefix = INBOX. separator = . } passdb { args = /usr/local/dovecot/etc/dovecot/passwd.masterusers driver = passwd-file master = yes pass = yes } passdb { driver = static } plugin { fts = lucene fts_lucene = whitespace_chars=@. quota = maildir:User quota } service director { unix_listener director-admin { mode = 00 } } service doveadm { inet_listener { port = 9292 } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_limit = 20 process_min_avail = 8 } service imap-postlogin { executable = script-login /usr/local/dovecot/bin/imap-postlogin.sh user = webmail } service imap { executable = imap imap-postlogin } service lmtp { inet_listener lmtp { port = 24 } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } process_limit = 20 process_min_avail = 8 } service pop3-postlogin { executable = script-login /usr/local/dovecot/bin/pop3-postlogin.sh user = webmail } service pop3 { executable = pop3 pop3-postlogin } ssl_cert = </usr/local/dovecot/ssl/dovecot.pem ssl_key = </usr/local/dovecot/ssl/dovecot.pem userdb { args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol imap { mail_plugins = " quota fts fts_lucene imap_quota" } Best Regards, Alexandr Sabitov Netregistry

4 4

[Dovecot] failure trying to autocreate an Inbox that already exists
by Kurt Snyder 17 Jan '13

17 Jan '13

I have a new installation of Dovecot 2.1.12 and cannot select the Inbox without getting this error: c select inbox c NO [SERVERBUG] Internal error occurred. Refer to server log for more information. [2013-01-16 18:22:13] Here's the server log: dovecot[15643]: imap(u1): Error: Failed to autocreate mailbox INBOX: Mailbox already exists Auto create settings are currently set to 'no' -- when they were set to create, the problem was the same. Passwords are currently plaintext for testing purposes -- Imap authentication works. It's running on OS/X 10.7.3 Our config is below. Thanks for any suggestions... # 2.1.12: /usr/local/etc/dovecot/dovecot.conf # OS: Darwin 11.3.0 x86_64 auth_debug_passwords = yes auth_username_chars = disable_plaintext_auth = no mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_privileged_group = mail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox INBOX { auto = no } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = scheme=plain /etc/passwd-imap driver = passwd-file } protocols = imap ssl = no userdb { args = username_format=%n /etc/passwd-imap driver = passwd-file }

1 0

[Dovecot] dovecot-2.2.beta1: do not removes e-mail with enabled replication
by Евгений Басов 16 Jan '13

16 Jan '13

Hello. I'm created two installations of dovecot-2.2.beta1 with identical config. Without replication each server works good. With replication enabled every changes are replicated between these ones. When I probe remove or move some email in another folder it is disappears and reappears again and again in source folder and appears in destination folder. Thus increasing number of letters like with copy. Possible reasons cause of the problem: - bug - configuration settings of dovecot - users with wich dovecot works and users rights. Which version is true? If this not a bug, what should be corrected in the configuration? Configuration: auth_debug = yes auth_mechanisms = plain login auth_verbose = yes import_environment = TZ lock_method = flock mail_debug = yes mail_location = mdbox:/var/vmail/%d/%n:INDEX=/var/vmail_indexes/%d/%n/ mail_plugins = " quota notify replication" mail_temp_dir = /var/spool/lmtp-dovecot mdbox_preallocate_space = yes mdbox_rotate_interval = 1 days mdbox_rotate_size = 50 M namespace inbox { inbox = yes location = mailbox Шаблоны { auto = create } mailbox Archive { auto = create special_use = \Archive } mailbox Archives { auto = create special_use = \Archive } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { mail_replica = remote:vmail@mailsys.office.megagroup.ru quota = dict:Domain quota:%d:redis:host=127.0.0.1:prefix=domain/ quota2 = dict:User quota::redis:host=127.0.0.1:prefix=user/ quota2_rule = *:storage=0 quota2_rule2 = Trash:storage=+5%% quota_rule = *:storage=0 quota_rule2 = Trash:storage=+5%% } service aggregator { fifo_listener replication-notify-fifo { mode = 0600 user = vmail } unix_listener replication-notify { mode = 0600 user = vmail } } service auth-worker { user = $default_internal_user } service auth { unix_listener auth-userdb { group = $default_internal_user mode = 0666 user = $default_internal_user } } service config { unix_listener config { mode = 0600 user = vmail } } service dict { unix_listener dict { mode = 0600 user = $default_internal_user } } service doveadm { user = vmail } service imap-login { process_min_avail = 5 service_count = 1 } service imap-postlogin { executable = script-login /usr/local/bin/imaptrackLastLogin.sh user = $default_internal_user } service imap { executable = imap imap-postlogin process_limit = 1024 } service lmtp { inet_listener lmtp { address = *, :: port = 24 } process_min_avail = 5 } service pop3-login { process_min_avail = 5 service_count = 1 } service pop3-postlogin { executable = script-login /usr/local/bin/pop3trackLastLogin.sh user = $default_internal_user } service pop3 { executable = pop3 pop3-postlogin process_limit = 1024 } service replicator { process_limit = 1024 process_min_avail = 3 } ssl_cert = </etc/ssl/dovecot/server.pem ssl_key = </etc/ssl/dovecot/server.key userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol imap { mail_plugins = " quota notify replication imap_quota" } Filesystem permissions: # ls -l /var/ drwxr-xr-x 3 vmail vmail 24 Jan 16 16:14 vmail drwxr-xr-x 3 vmail vmail 24 Jan 16 16:14 vmail_indexes # ls -l /var/spool/ drwxrwx--- 2 dovecot dovecot 6 Jan 16 15:11 lmtp-dovecot Users: dovecot:x:97:97:added by portage for dovecot:/dev/null:/sbin/nologin uid=97(dovecot) gid=97(dovecot) groups=97(dovecot) dovenull:x:102:102:added by portage for dovecot:/dev/null:/sbin/nologin uid=102(dovenull) gid=102(dovenull) groups=102(dovenull) vmail:x:999:999:User for work with local mail storage:/home/vmail:/bin/bash uid=999(vmail) gid=999(vmail) groups=999(vmail),97(dovecot) Selects from user database are rights because isolated installations are works and not get errors.

2 1

[Dovecot] FTS what to use ?
by Erik Colson 16 Jan '13

16 Jan '13

Hi I'm currently using dovecot 2.0 with squat fts which does a nice job. However I'm thinking about upgrading to dovecot 2.1 and the wiki isn't clear about which fts can or should be used with it. Is squat support dead ? As the wiki mentions that the config syntax is obsolete, I'm not sure if squat is obsolete also ? If not, what is the new syntax ? But in the case squat is dead.. what is the recommended alternative nowadays ? I don't really need substring search, but it is a nice thing to have. PS : I will be using dovecot 2.1 with maildir thanks -- erik

3 4

[Dovecot] Dovecot subtree problem in ldap/ad search
by Marcus Jüttner 15 Jan '13

15 Jan '13

Hallo Im trying to set up an Postfix and Dovecot mailserver with ActiveDirectory interation. Postfix is doing well and even Dovecot does ... but I have one big problem! My AD Accounts ar stored in two Subfolders ou=Bischoff Benutzer LTT, dc=bischoff-ltt, dc=local ou=Bischoff Benutzer Nbg, dc=bischoff-ltt, dc=local If i use "base = ou=Bischoff Benutzer LTT, dc=bischoff-ltt, dc=local" everything is fine but users from "ou=Bischoff Benutzer Nbg" will not work. Thats ok so far. But when i use "base = dc=bischoff-ltt, dc=local" none user will be found even if i use "scope = subtree". Postfix has no problem with the base set to "dc=bischoff-ltt, dc=local". Ldapsearch has no problem too. I use Version 2.1.12 on Gentoo Linux with a 2003R2 AD Is scope=subtree broken in Dovecot? Must I set some special parameters for Windows AD? My Config: hosts = 192.168.1.98 dn = bischoff-ltt\ldapsearch dnpass = xxxxx auth_bind = yes ldap_version = 3 scope = subtree base = dc=bischoff-ltt, dc=local #base = ou=Bischoff Benutzer LTT, dc=bischoff-ltt, dc=local #base = ou=Bischoff Benutzer Nbg, dc=bischoff-ltt, dc=local user_attrs = =home=/var/dovecot/%Ln/,=mail=maildir:/var/dovecot/%Ln/ user_filter = (&(ObjectClass=person)(sAMAccountName=%u)) pass_filter = (&(ObjectClass=person)(sAMAccountName=%u)) Thanks for Help Marcus

1 0

[Dovecot] Help with virtual plugin
by Joy 15 Jan '13

15 Jan '13

Hi, Is there any way to show all messages with attachment using virtual plugin. I am successfully using the plugin but didn't find way to show the same. Thanks

2 1

[Dovecot] Define custom ldap libraries when building Dovecot
by Nikolaos Milas 15 Jan '13

15 Jan '13

Hello, I would like to compile Dovecot using custom ldap libraries, located at a particular custom system location. How should I alter the config process to specify that the include dir is "/usr/local/openldap/include" and the lib dir is "/usr/local/openldap/lib64" and not the standard ones (/usr/include/ and /usr/lib64/ respectively) on RHEL/CentOS 5 (x86_64). Note that all of the above files/folders exist on the file system at the same time. The idea is to build dovecot against current openldap v2.4.x libraries and not against the available (by the OS) ancient openldap v.2.3.x libs. Please, advise. Thanks, Nick

3 5

[Dovecot] Zlib maildir reindex bug?
by Richard Platel 14 Jan '13

14 Jan '13

Hi Running dovecot 2.1.7 (from debian repo). We have some old compressed maildir messages with the wrong S= size in the filename (our fault). If I delete index files, log in to the mailbox and try to FETCH the bad message, dovecot complains about the incorrect message size, attempts to fix the filename and disconnects the client. However, it changes the filesize to the size of the message on disk, not the message's uncompressed size. For subsequent clients, the FETCH works, but dovecot logs an error (and maybe re-indexes the mailbox?) and the message UID changes. Jan 14 18:40:56 imap01 dovecot: imap(bub(a)confidence.com): Error: Cached message size larger than expected (1612 > 1556) Jan 14 18:40:56 imap01 dovecot: imap(bub(a)confidence.com): Error: Maildir filename has wrong S value, renamed the file from /mail/mailstore01/505/236/bub(a)confidence.com/.Sent Items/cur/1168058702.93517743273399070372.fetchmail01,S=1612:2,Sab to /mail/mailstore01/505/236/bub(a)confidence.com/.Sent Items/cur/1168058702.93517743273399070372.fetchmail01,S=931:2,Sab Jan 14 18:40:56 imap01 dovecot: imap(bub(a)confidence.com): Error: Corrupted index cache file /mail/index01/505/236/bub(a)confidence.com/.Sent Items/dovecot.index.cache: Broken physical size for mail UID 1 Jan 14 18:40:56 imap01 dovecot: imap(bub(a)confidence.com): Error: read(/mail/mailstore01/505/236/bub(a)confidence.com/.Sent Items/cur/1168058702.93517743273399070372.fetchmail01,S=1612:2,Sab) failed: Input/output error (uid=1) Jan 14 18:41:25 imap01 dovecot: imap(bub(a)confidence.com): Error: Cached message size smaller than expected (931 < 1556) Jan 14 18:41:25 imap01 dovecot: imap(bub(a)confidence.com): Error: Maildir filename has wrong S value, renamed the file from /mail/mailstore01/505/236/bub(a)confidence.com/.Sent Items/cur/1168058702.93517743273399070372.fetchmail01,S=931:2,Sab to /mail/mailstore01/505/236/bub(a)confidence.com/.Sent Items/cur/1168058702.93517743273399070372.fetchmail01,S=931:2,Sab Jan 14 18:41:25 imap01 dovecot: imap(bub(a)confidence.com): Error: Corrupted index cache file /mail/index01/505/236/bub(a)confidence.com/.Sent Items/dovecot.index.cache: Broken physical size for mail UID 2 Jan 14 18:41:25 imap01 dovecot: imap(bub(a)confidence.com): Error: Cached message size smaller than expected (931 < 1556) Jan 14 18:41:25 imap01 dovecot: imap(bub(a)confidence.com): Error: Maildir filename has wrong S value, renamed the file from /mail/mailstore01/505/236/bub(a)confidence.com/.Sent Items/cur/1168058702.93517743273399070372.fetchmail01,S=931:2,Sab to /mail/mailstore01/505/236/bub(a)confidence.com/.Sent Items/cur/1168058702.93517743273399070372.fetchmail01,S=931:2,Sab Jan 14 18:41:25 imap01 dovecot: imap(bub(a)confidence.com): Error: Corrupted index cache file /mail/index01/505/236/bub(a)confidence.com/.Sent Items/dovecot.index.cache: Broken physical size for mail UID 2 Jan 14 18:41:53 imap01 dovecot: imap(bub(a)confidence.com): Error: Cached message size smaller than expected (931 < 1556) Jan 14 18:41:53 imap01 dovecot: imap(bub(a)confidence.com): Error: Maildir filename has wrong S value, renamed the file from /mail/mailstore01/505/236/bub(a)confidence.com/.Sent Items/cur/1168058702.93517743273399070372.fetchmail01,S=931:2,Sab to /mail/mailstore01/505/236/bub(a)confidence.com/.Sent Items/cur/1168058702.93517743273399070372.fetchmail01,S=931:2,Sab Jan 14 18:41:53 imap01 dovecot: imap(bub(a)confidence.com): Error: Corrupted index cache file /mail/index01/505/236/bub(a)confidence.com/.Sent Items/dovecot.index.cache: Broken physical size for mail UID 2 Jan 14 18:41:53 imap01 dovecot: imap(bub(a)confidence.com): Error: Cached message size smaller than expected (931 < 1556) Jan 14 18:41:53 imap01 dovecot: imap(bub(a)confidence.com): Error: Maildir filename has wrong S value, renamed the file from /mail/mailstore01/505/236/bub(a)confidence.com/.Sent Items/cur/1168058702.93517743273399070372.fetchmail01,S=931:2,Sab to /mail/mailstore01/505/236/bub(a)confidence.com/.Sent Items/cur/1168058702.93517743273399070372.fetchmail01,S=931:2,Sab Jan 14 18:41:53 imap01 dovecot: imap(bub(a)confidence.com): Error: Corrupted index cache file /mail/index01/505/236/bub(a)confidence.com/.Sent Items/dovecot.index.cache: Broken physical size for mail UID 2

2 1

Re: [Dovecot] deleting duplicate mail?
by Joseph Tam 14 Jan '13

14 Jan '13

On Mon, 14 Jan 2013, joakim(a)verona.se writes: > Due to a misstake I got many duplicate emails in my inbox folder. Ironic mispeling. > They are stored in maildir format, so my initial thought was do simply > md5sum the mail files and remove the duplicates. This doesnt work > because the mails has differinf uids. Any other hints? If the UIDs are just headers, why don't you simply checksum without them: sed -e '/^Whatever-header:/d' < $file | md5sum grep -Ev '^Whatever-header:' < $file | md5sum Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] sieve reject to wrong address?
by Felix Rubio Dalmau 14 Jan '13

14 Jan '13

Hi all, I have succeed in setting up postfix (to send/receive emails), dovecot to access the folders via IMAP, all using TLS and sieve under dovecot to manage filters. I have also set up a sieve rule to reject those mails whose size exceeds 2 MB... and I'm really proud of everything, because it is my first time!! However, when rejecting the mail, instead of sending a mail saying "I'm sorry blah, blah, blah" to the originary sender, it is sent to the final recipient (that is, me). Do you know how to solve it? Is it a problem from sieve or dovecot? I think is some misconfiguration of my dovecot installation, because the sieve rule is: ################ if size :over 2M { reject text: Ho sento, no accepto cap correu de mes de 2MB de tamany. Sisplau, puja els fitxers mes grans a un servidor i envia'm un link. Gracies. I'm sorry, I do not accept mail over 2 MB in size. Please upload larger files to a server and send me a link. Thanks. . ; } ################ dovecot log looks like: Jan 14 17:34:16 server dovecot: lda(felix@server): sieve: msgid=<201301141734.16203.felix@server>: rejected message from <felix@server> (reject) Jan 14 17:34:16 server postfix/cleanup[2011]: 2B59CB59: message- id=<dovecot-1358181256-51155-0@server> Jan 14 17:34:16 server postfix/pipe[2012]: 311AF4E0: to=<felix@server>, relay=dovecot, delay=1, delays=0.81/0.02/0/0.19, dsn=2.0.0, status=sent (delivered via dovecot service) Thank you! -- Felix Rubio Dalmau

2 1

[Dovecot] deleting duplicate mail?
by joakim＠verona.se 14 Jan '13

14 Jan '13

Hello, Due to a misstake I got many duplicate emails in my inbox folder. They are stored in maildir format, so my initial thought was do simply md5sum the mail files and remove the duplicates. This doesnt work because the mails has differinf uids. Any other hints? -- Joakim Verona

2 1

[Dovecot] Dovecot SASL Client support?
by Charles Marcus 14 Jan '13

14 Jan '13

Hi all, I seem to recall mention of SASL client support either being added, but can't remember for sure. The wiki says nothing about Client support (now, or in the future)... http://wiki2.dovecot.org/Sasl So - is there support for it now? If not, is it planned for anytime soon? Thanks, -- Best regards, Charles

10 19

[Dovecot] load sbub-mailbox
by mourik jan heupink 14 Jan '13

14 Jan '13

Hi, We're about to migrate to dovecot (2.1.7 on wheezy), and I have a question about mail migration. Our 'old' imap mailserver will remain available, and has the same usernames/passwords as our future dovecot mailserver. The question: Is there an easy way to make the old mailboxes available under a subfolder (for example 'oldmail') in the mailboxes on the new mailserver? A bit like mounting an old homedirectory under an 'oldfiles' directory on a new fileserver. This way our users could access/migrate whatever folders they choose themselves, and we would not have migrate all messages to dovecot using scripts like imapcopy, etc. Perhaps using the proxy functionality..? Hope I make myself clear...? Regards, Mourik Jan

2 7

[Dovecot] bug report: auth via dict
by ForestYang 14 Jan '13

14 Jan '13

hi all, I was testing dovecot server , auth via redis. first I follow http://master.wiki2.dovecot.org/AuthDatabase/Dict but auth always fail, last , I found value { "uid": 123, "gid": 123, "home": "/home/username" } was wrong, the uid and gid must as string , not number. { "uid": "123", "gid": "123", "home": "/home/username" } was worked. it's hard to find the problem :( pls notice that. -- View this message in context: http://dovecot.2317879.n4.nabble.com/bug-report-auth-via-dict-tp39685.html Sent from the Dovecot mailing list archive at Nabble.com.

2 1

[Dovecot] I can not receive any mail
by Felix Rubio Dalmau 14 Jan '13

14 Jan '13

Hi everybody I'm trying to set-up an IMAPS mail server using dovecot (version 2.1.7) with virtual email accounts for my family. I have already ran through the mysql phase of the virtual email configuration (and I'm quite confident it works well, because I can send mails from the server using postfix to gmail, e.g.). However, I am stucked configuring dovecot. I don't know why is it not running properly. The symptoms are: a) When I connect by using my mail client (kmail), I don't get any error. b) When I ask kmail to check what authentication services are supported by the server, I see that it is able to connect to te server by looking to the server log. c) However, Inbox folder does never show up :S d) When I send any mail from gmail to my server, It is always refused under the reason that there is not such user in the machine (I am sure it is), and nothing shows up in the server log. Here is my configuration, just in case somebody can give it a look to help me figure out what's going on :S Thank you very much in advance. # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.6.9-1 x86_64 Debian 6.0.6 ext4 auth_cache_size = 1 M auth_debug = yes auth_mechanisms = plain login auth_verbose = yes auth_worker_max_count = 2 base_dir = /var/run/dovecot/ listen = * log_timestamp = "%Y-%m-%d %H:%M:%S " login_greeting = Dovecot ready. mail_debug = yes mail_location = maildir:/home/vmail/%d/%n/Maildir mail_privileged_group = vmail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)mysite.org protocols = " imap" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imaps { port = 993 ssl = yes } process_min_avail = 0 service_count = 1 } service imap { process_limit = 5 } ssl = required ssl_cert = </etc/postfix/ssl/cert.pem ssl_key = </etc/postfix/ssl/cert.key userdb { args = uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes driver = static } verbose_ssl = yes protocol lda { mail_plugins = sieve } -- Felix Rubio Dalmau

2 1

[Dovecot] E-mail not being processed into Dovecot folders
by stalker 14 Jan '13

14 Jan '13

I have a new CentOS 6 server running Dovecot 2.0.9 It has current patches from CentOS. Pasted below are the version and output from dovecot -n When I run mail -s "test" username test <ctrl-D> mail is written to /var/spool/mail/username and not to /home/username/Maildir/ The user's client software, Thunderbird, logs in but since mail is not written to Maildir it thinks there is nothing (see paste below from /var/log/maillog) How do I get sendmail or what ever MTA processes mail to write to Maildir rather than /var/spool/sendmail? [root@info2 Maildir]# dovecot --version 2.0.9 [root@info2 Maildir]# dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.19.1.el6.i686 i686 CentOS release 6.3 (Final) disable_plaintext_auth = no mail_debug = yes mail_location = maildir:~/Maildir mbox_write_locks = fcntl passdb { driver = pam } protocols = pop3 ssl = no ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol pop3 { pop3_uidl_format = %v.%u } Jan 10 08:11:13 info2 dovecot: pop3-login: Login: user=<username>, method=PLAIN, rip=192.168.55.50, lip=192.168.55.8, mpid=30560 Jan 10 08:11:13 info2 dovecot: pop3(username): Debug: Effective uid=503, gid=503, home=/home/username Jan 10 08:11:13 info2 dovecot: pop3(username): Debug: maildir++: root=/home/username/Maildir, index=, control=, inbox=/home/username/Maildir Jan 10 08:11:13 info2 dovecot: pop3(username): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0

2 1

[Dovecot] Anyone using dovecot obox?
by list＠airstreamcomm.net 14 Jan '13

14 Jan '13

Just looking for some input from other users of the obox (object storage) backend from dovecot.fi. - What challenges/problem were you trying to overcome/solve by using obox? - What kind of architecture did you deploy using obox? (e.g. distributed object storage for performance, or distributed for availability, geographic distribution of email services, etc.) - What complexities, single points of failure, documentation omissions can you highlight having deployed the obox storage architecture? - Did the obox backend support your email services as well as you expected or more? - How was your interaction with Doveoct.fi? Thanks in advance.

2 1

[Dovecot] Installing Dovecot on Gentoo
by Christian Rößner 14 Jan '13

14 Jan '13

Hi, I have an already working dovecot server on Ubuntu 10.04 with self-created packages version 2.1.13. This setup is working prefect. Now that I do not wish to continue using Ubuntu (to much work for Upgrading), I decided to switch to Gentoo, as I had made best experiences in the past… I have installed Dovecot on Gentoo and I copied over all my configs and certs and stuff. Also created a user vmail with identical uid/gid and also checked all permissions for the certificate stuff. Dovecot starts. I also can connect to it. But when trying to login, I get errors: ------------------------------------------------------- telnet localhost 143 Trying ::1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5 AUTH=DIGEST-MD5 AUTH=NTLM] Dovecot ready. . login croessner <hiddenpw> . NO [UNAVAILABLE] Temporary authentication failure. [mx0:2013-01-13 14:24:02] ------------------------------------------------------- In the logs it looks like this: ------------------------------------------------------- Jan 13 15:22:30 mx0 dovecot: master: Dovecot v2.1.13 starting up (core dumps disabled) Jan 13 15:23:11 mx0 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jan 13 15:23:11 mx0 dovecot: auth: Debug: passwd-file /etc/dovecot/master-users: Read 1 users in 0 secs Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_extended_operation_s Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_extended_operation Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_send_initial_request Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_new_connection 1 1 0 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_int_open_connection Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_connect_to_host: TCP db.roessner-net.de:389 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_new_socket: 17 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_prepare_socket: 17 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_connect_to_host: Trying 193.239.107.37:389 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_pvt_connect: fd: 17 tm: -1 async: 0 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_open_defconn: successful Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_send_server_request Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_result ld 0x35d6dd481c0 msgid 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: wait4msg ld 0x35d6dd481c0 msgid 1 (infinite timeout) Jan 13 15:23:11 mx0 dovecot: auth: Error: wait4msg continue ld 0x35d6dd481c0 msgid 1 all 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: ** ld 0x35d6dd481c0 Connections: Jan 13 15:23:11 mx0 dovecot: auth: Error: * host: db.roessner-net.de port: 389 (default) Jan 13 15:23:11 mx0 dovecot: auth: Error: refcnt: 2 status: Connected Jan 13 15:23:11 mx0 dovecot: auth: Error: last used: Sun Jan 13 15:23:11 2013 Jan 13 15:23:11 mx0 dovecot: auth: Error: Jan 13 15:23:11 mx0 dovecot: auth: Error: Jan 13 15:23:11 mx0 dovecot: auth: Error: ** ld 0x35d6dd481c0 Outstanding Requests: Jan 13 15:23:11 mx0 dovecot: auth: Error: * msgid 1, origid 1, status InProgress Jan 13 15:23:11 mx0 dovecot: auth: Error: outstanding referrals 0, parent count 0 Jan 13 15:23:11 mx0 dovecot: auth: Error: ld 0x35d6dd481c0 request count 1 (abandoned 0) Jan 13 15:23:11 mx0 dovecot: auth: Error: ** ld 0x35d6dd481c0 Response Queue: Jan 13 15:23:11 mx0 dovecot: auth: Error: Empty Jan 13 15:23:11 mx0 dovecot: auth: Error: ld 0x35d6dd481c0 response count 0 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_chkResponseList ld 0x35d6dd481c0 msgid 1 all 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_chkResponseList returns ld 0x35d6dd481c0 NULL Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_int_select Jan 13 15:23:11 mx0 dovecot: auth: Error: read1msg: ld 0x35d6dd481c0 msgid 1 all 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: read1msg: ld 0x35d6dd481c0 msgid 1 message type extended-result Jan 13 15:23:11 mx0 dovecot: auth: Error: read1msg: ld 0x35d6dd481c0 0 new referrals Jan 13 15:23:11 mx0 dovecot: auth: Error: read1msg: mark request completed, ld 0x35d6dd481c0 msgid 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: request done: ld 0x35d6dd481c0 msgid 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: res_errno: 0, res_error: <>, res_matched: <> Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_free_request (origid 1, msgid 1) Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_parse_extended_result Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_parse_result Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_msgfree Jan 13 15:23:11 mx0 dovecot: auth: Error: TLS: could not use key file `/etc/ssl/private/mx0.roessner-net.de.key.pem'. Jan 13 15:23:11 mx0 dovecot: auth: Error: TLS: error:0200100D:system library:fopen:Permission denied bss_file.c:398 Jan 13 15:23:11 mx0 dovecot: auth: Error: TLS: error:20074002:BIO routines:FILE_CTRL:system lib bss_file.c:400 Jan 13 15:23:11 mx0 dovecot: auth: Error: TLS: error:140B0002:SSL routines:SSL_CTX_use_PrivateKey_file:system lib ssl_rsa.c:648 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_err2string Jan 13 15:23:11 mx0 dovecot: auth: Error: LDAP: ldap_start_tls_s() failed: Connect error Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_extended_operation_s Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_extended_operation Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_send_initial_request Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_send_server_request Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_result ld 0x35d6dd481c0 msgid 2 Jan 13 15:23:11 mx0 dovecot: auth: Error: wait4msg ld 0x35d6dd481c0 msgid 2 (infinite timeout) Jan 13 15:23:11 mx0 dovecot: auth: Error: wait4msg continue ld 0x35d6dd481c0 msgid 2 all 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: ** ld 0x35d6dd481c0 Connections: Jan 13 15:23:11 mx0 dovecot: auth: Error: * host: db.roessner-net.de port: 389 (default) Jan 13 15:23:11 mx0 dovecot: auth: Error: refcnt: 2 status: Connected Jan 13 15:23:11 mx0 dovecot: auth: Error: last used: Sun Jan 13 15:23:11 2013 Jan 13 15:23:11 mx0 dovecot: auth: Error: Jan 13 15:23:11 mx0 dovecot: auth: Error: Jan 13 15:23:11 mx0 dovecot: auth: Error: ** ld 0x35d6dd481c0 Outstanding Requests: Jan 13 15:23:11 mx0 dovecot: auth: Error: * msgid 2, origid 2, status InProgress Jan 13 15:23:11 mx0 dovecot: auth: Error: outstanding referrals 0, parent count 0 Jan 13 15:23:11 mx0 dovecot: auth: Error: ld 0x35d6dd481c0 request count 1 (abandoned 0) Jan 13 15:23:11 mx0 dovecot: auth: Error: ** ld 0x35d6dd481c0 Response Queue: Jan 13 15:23:11 mx0 dovecot: auth: Error: Empty Jan 13 15:23:11 mx0 dovecot: auth: Error: ld 0x35d6dd481c0 response count 0 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_chkResponseList ld 0x35d6dd481c0 msgid 2 all 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_chkResponseList returns ld 0x35d6dd481c0 NULL Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_int_select Jan 13 15:23:11 mx0 dovecot: auth: Error: read1msg: ld 0x35d6dd481c0 msgid 2 all 1 Jan 13 15:23:11 mx0 dovecot: auth: Error: ldap_err2string Jan 13 15:23:11 mx0 dovecot: auth: Error: LDAP: ldap_start_tls_s() failed: Can't contact LDAP server Jan 13 15:23:11 mx0 dovecot: auth: Debug: auth client connected (pid=24045) Jan 13 15:24:00 mx0 dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured#011session=YAanRyzTOAAAAAAAAAAAAAAAAAAAAAAB#011lip=::1#011rip=::1#011lport=143#011rport=59960#011resp=<hidden> Jan 13 15:24:00 mx0 dovecot: auth: Error: ldap_extended_operation_s Jan 13 15:24:00 mx0 dovecot: auth: Error: ldap_extended_operation Jan 13 15:24:00 mx0 dovecot: auth: Error: ldap_send_initial_request Jan 13 15:24:00 mx0 dovecot: auth: Error: ldap_send_server_request Jan 13 15:24:00 mx0 dovecot: auth: Error: ldap_err2string Jan 13 15:24:00 mx0 dovecot: auth: Error: LDAP: ldap_start_tls_s() failed: Can't contact LDAP server Jan 13 15:24:02 mx0 dovecot: auth: Debug: client passdb out: FAIL#0111#011user=croessner#011temp Jan 13 15:26:11 mx0 dovecot: imap-login: Disconnected: Inactivity (auth failed, 1 attempts in 131 secs): user=<croessner>, method=PLAIN, rip=::1, lip=::1, secured, session=<YAanRyzTOAAAAAAAAAAAAAAAAAAAAAAB> Jan 13 15:27:11 mx0 dovecot: auth: Error: ldap_unbind Jan 13 15:27:11 mx0 dovecot: auth: Error: ldap_free_request (origid 2, msgid 2) Jan 13 15:27:11 mx0 dovecot: auth: Error: ldap_free_connection 1 1 Jan 13 15:27:11 mx0 dovecot: auth: Error: ldap_free_connection: actually freed ------------------------------------------------------- I checked if Dovecot would even try to access the key: ------------------------------------------------------- inotifywait -m -r --format '%:e %f' /etc/ssl Setting up watches. Beware: since -r was given, this may take a while! Watches established. OPEN mail.roessner-net.de.pem ACCESS mail.roessner-net.de.pem CLOSE_NOWRITE:CLOSE mail.roessner-net.de.pem OPEN mail.roessner-net.de.key.pem ACCESS mail.roessner-net.de.key.pem CLOSE_NOWRITE:CLOSE mail.roessner-net.de.key.pem OPEN SSL123_CA_Bundle.pem ACCESS SSL123_CA_Bundle.pem CLOSE_NOWRITE:CLOSE SSL123_CA_Bundle.pem OPEN mail.roessner-net.de.pem ACCESS mail.roessner-net.de.pem ACCESS mail.roessner-net.de.pem ACCESS mail.roessner-net.de.pem ACCESS mail.roessner-net.de.pem ACCESS mail.roessner-net.de.pem CLOSE_NOWRITE:CLOSE mail.roessner-net.de.pem OPEN mail.roessner-net.de.key.pem ACCESS mail.roessner-net.de.key.pem ACCESS mail.roessner-net.de.key.pem CLOSE_NOWRITE:CLOSE mail.roessner-net.de.key.pem OPEN SSL123_CA_Bundle.pem ACCESS SSL123_CA_Bundle.pem ACCESS SSL123_CA_Bundle.pem ACCESS SSL123_CA_Bundle.pem ACCESS SSL123_CA_Bundle.pem CLOSE_NOWRITE:CLOSE SSL123_CA_Bundle.pem OPEN ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt ACCESS ca-certificates.crt CLOSE_NOWRITE:CLOSE ca-certificates.crt OPEN mx0.roessner-net.de.pem ACCESS mx0.roessner-net.de.pem CLOSE_NOWRITE:CLOSE mx0.roessner-net.de.pem OPEN openssl.cnf ACCESS openssl.cnf ACCESS openssl.cnf ACCESS openssl.cnf CLOSE_NOWRITE:CLOSE openssl.cnf OPEN openssl.cnf ACCESS openssl.cnf ACCESS openssl.cnf ACCESS openssl.cnf CLOSE_NOWRITE:CLOSE openssl.cnf ------------------------------------------------------- I can not find any line talking about mx0.roessner-net.de.key.pem. The file exists and has proper permissions: ------------------------------------------------------- l /etc/ssl/private/ total 16 drwxr-s---+ 2 root ssl-cert 4096 Jan 12 19:29 ./ drwxr-xr-x 8 root root 4096 Jan 13 15:26 ../ -rw-r--r-- 1 root root 0 Dec 10 18:14 .keep_dev-libs_openssl-0 -r--r----- 1 root ssl-cert 1679 Jan 12 17:23 mail.roessner-net.de.key.pem -r--r-----+ 1 root ssl-cert 887 Jan 12 17:14 mx0.roessner-net.de.key.pem getfacl /etc/ssl/private/ /etc/ssl/private/mx0.roessner-net.de.key.pem getfacl: Removing leading '/' from absolute path names # file: etc/ssl/private/ # owner: root # group: ssl-cert # flags: -s- user::rwx user:amavis:r-x group::--- mask::r-x other::--- # file: etc/ssl/private/mx0.roessner-net.de.key.pem # owner: root # group: ssl-cert user::r-- user:amavis:r-x #effective:r-- group::r-- mask::r-- other::--- ------------------------------------------------------- Here is my doveconf -n: ------------------------------------------------------- # 2.1.13: /etc/dovecot/dovecot.conf # OS: Linux 3.7.0-hardened x86_64 Gentoo Base System release 2.1 auth_debug = yes auth_master_user_separator = * auth_mechanisms = plain login cram-md5 digest-md5 ntlm auth_verbose = yes hostname = mail.roessner-net.de lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_access_groups = vmail mail_attachment_dir = /var/mail/virtual/copymail/attachments mail_debug = yes mail_gid = vmail mail_location = mdbox:~/mdbox mail_plugins = autocreate quota acl fts fts_solr zlib mail_privileged_group = mail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mdbox_rotate_size = 128 M namespace { list = children location = mdbox:%%h/mdbox prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox "Deleted Messages" { special_use = \Trash } mailbox Drafts { special_use = \Drafts } mailbox Junk-E-Mail { special_use = \Junk } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } mailbox junkmail { special_use = \Junk } prefix = separator = / type = private } passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = file:/var/mail/virtual/shared-mailboxes.db autocreate = Trash autocreate2 = Sent autocreate3 = Drafts autocreate4 = junkmail autosubscribe = Trash autosubscribe2 = Sent autosubscribe3 = Drafts autosubscribe4 = junkmail fts = solr fts_solr = break-imap-search url=http://localhost:8080/solr/ quota = dict:User quota::file:%h/mdbox/dovecot-quota quota_rule = *:storage=300M:messages=20000 quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve zlib_save = gz zlib_save_level = 6 } protocols = imap pop3 lmtp sieve service auth-worker { extra_groups = ssl-cert unix_listener auth-worker { mode = 0600 user = vmail } user = vmail } service auth { extra_groups = ssl-cert unix_listener auth-userdb { mode = 0600 user = vmail } user = vmail } service dict { unix_listener dict { mode = 0600 user = vmail } } service lmtp { unix_listener /var/spool/postfix/private/lmtp-dovecot { group = postfix mode = 0666 user = postfix } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } ssl_ca = </etc/ssl/certs/SSL123_CA_Bundle.pem ssl_cert = </etc/ssl/certs/mail.roessner-net.de.pem ssl_key = </etc/ssl/private/mail.roessner-net.de.key.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes verbose_ssl = yes protocol lmtp { mail_plugins = autocreate quota acl fts fts_solr zlib sieve } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags mail_max_userip_connections = 50 mail_plugins = autocreate quota acl fts fts_solr zlib imap_quota imap_acl imap_zlib } ------------------------------------------------------- LDAP looks like this: ------------------------------------------------------- uris = ldap://db.roessner-net.de/ ldap://roessner1.roessner-net.de/ sasl_bind = yes sasl_mech = EXTERNAL tls = yes tls_ca_cert_file = /etc/ssl/certs/ca-certificates.crt tls_cert_file = /etc/ssl/certs/mx0.roessner-net.de.pem tls_key_file = /etc/ssl/private/mx0.roessner-net.de.key.pem tls_require_cert = hard debug_level = 7 base = ou=people,ou=it,dc=roessner-net,dc=de user_attrs = rnsMSQuota=quota_rule=*:storage=%$,rnsMSMailboxHome=home user_filter = (&(objectClass=rnsMSDovecotAccount)(|(rnsMSRecipientAddress=%u)(uniqueIdentifier=%u))) pass_attrs = rnsMSDeliverToAddress=user,userPassword=password pass_filter = (&(objectClass=rnsMSDovecotAccount)(|(rnsMSRecipientAddress=%u)(uniqueIdentifier=%u))(rnsMSEnableDovecot=TRUE)) iterate_attrs = rnsMSDovecotUser=user iterate_filter = (objectClass=rnsMSDovecotAccount) default_pass_scheme = PLAIN ------------------------------------------------------- Some portage information ------------------------------------------------------- [ebuild R ] net-nds/openldap-2.4.30 USE="berkdb crypt ipv6 minimal sasl ssl syslog tcpd -cxx -debug -experimental -gnutls -icu -iodbc -kerberos -odbc -overlays -perl -samba (-selinux) -slp -smbkrb5passwd" 0 kB [ebuild R ] dev-libs/cyrus-sasl-2.1.25-r3:2 USE="berkdb gdbm ldapdb openldap pam ssl urandom -authdaemond -java -kerberos -mysql -postgres -sample -sqlite -srp -static-libs" 0 kB [ebuild R ~] net-mail/dovecot-2.1.13::croessner USE="bzip2 caps imapc ipv6 ldap maildir managesieve mbox mdbox pam pop3c sdbox sieve solr sqlite ssl suid zlib -cydir -doc -kerberos -lucene -mysql -postgres (-selinux) -static-libs -vpopmail" 0 kB ------------------------------------------------------- As you can see, I have spent some time on this without luck and currently I have no idea, what the problem is. Any ideas on that? Thanks in advance -Christian Rößner -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Joerg Heidrich

4 6

[Dovecot] configuration still not working
by Averlon 12 Jan '13

12 Jan '13

Hi, I would very much appreciate some help since I get one step ahead and two backwardswith my installation. I am using usernames not (not) in the form of user(a)domain.tld. Simply a string. The error I get. +++ Jan 12 08:36:31 f42252se dovecot: pop3(avadmin(a)av.loc): Error: user avadmin(a)av.loc: Initialization failed: Initializing mail s?lo c ?torage from mail_location setting failed: Ambiguous mail location setting, don't know what to do with it: /home/vmail/avadmin/? Ja?Maildir/ (try prefixing it with mbox: or maildir:) ?id )=?Jan 12 08:36:31 f42252se dovecot: pop3(avadmin(a)av.loc): Error: Invalid user settings. Refer to server log for more information? Ja?. +++ I guess it must have to do something with permissions. Butwhere and which. My config: +++ # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-35-generic x86_64 Ubuntu 12.04.1 LTS auth_debug = yes auth_mechanisms = plain login cram-md5 auth_username_format = %Lu hostname = mail.av.loc mail_gid = vmail mail_location = maildir:~/Maildir mail_privileged_group = vmail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0600 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem syslog_facility = avdove userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lda { sendmail_path = /usr/sbin/sendmail } +++ Please give me ahint! -- Signatur Averlon info Mit freundlichen Grüßen / Kind Regards Karl-Heinz Fischbach

2 2

[Dovecot] dovecot and cacti (snmp ?)
by mancyborg＠gmail.com 10 Jan '13

10 Jan '13

Hi All, I've put online a postfix+dovecot+mysql+roundcube server that will grow till serving around 1500 accounts. I've installed the usual cacti graphs, plus the beautiful percona suite for mysql's cacti plus some graphs for iops and iostat. I was lurking around for the best solution to graph dovecot usage, the most detailed possible, in order to prevent and foresee problems. I'm finding sparse results, I'm not sure which one is the most current / complete. Do you have any suggestions ? Thank you very much for supporting, regards and have a nice day, Mike

2 1

[Dovecot] unknown users
by Averlon 10 Jan '13

10 Jan '13

Hi, can anyone tell me where these "unknown users" come from. As far as I see the fact, dovecot is asked by postfix to look for the password of the recipient-user (why ever). +++ Jan 7 19:43:09 f42252se postfix/smtpd[14625]: initializing the server-side TLS engine Jan 7 19:43:09 f42252se postfix/tlsmgr[14627]: open smtpd TLS cache btree:/var/lib/postfix/smtpd_scache Jan 7 19:43:09 f42252se postfix/tlsmgr[14627]: tlsmgr_cache_run_event: start TLS smtpd session cache cleanup Jan 7 19:43:09 f42252se postfix/smtpd[14625]: connect from f42252ud.averlon.loc[192.168.110.165] Jan 7 19:43:09 f42252se postfix/smtpd[14625]: setting up TLS connection from f42252ud.averlon.loc[192.168.110.165] Jan 7 19:43:09 f42252se postfix/smtpd[14625]: f42252ud.averlon.loc[192.168.110.165]: TLS cipher list "aNULL:-aNULL:ALL:+RC4:@STRENGTH" Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:before/accept initialization Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 read client hello A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write server hello A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write certificate A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write key exchange A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write server done A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 flush data Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 read client key exchange A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 read finished A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write session ticket A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write change cipher spec A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write finished A Jan 7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 flush data Jan 7 19:43:09 f42252se postfix/smtpd[14625]: Anonymous TLS connection established from f42252ud.averlon.loc[192.168.110.165]: TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits) Jan 7 19:43:09 f42252se dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Jan 7 19:43:09 f42252se dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libauthdb_ldap.so Jan 7 19:43:09 f42252se dovecot: auth: Debug: auth client connected (pid=14625) Jan 7 19:43:09 f42252se dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=smtp#011nologin#011lip=192.168.110.150#011rip=192.168.110.165#011secured#011resp=<hidden> Jan 7 19:43:09 f42252se dovecot: auth: Debug: ldap(avadmin,192.168.110.165): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=avadmin)) fields=uid,userPassword Jan 7 19:43:09 f42252se dovecot: auth: Debug: ldap(avadmin,192.168.110.165): result: uid(user)=avadmin userPassword(password)=<hidden> Jan 7 19:43:09 f42252se dovecot: auth: Debug: client out: OK#0111#011user=avadmin Jan 7 19:43:09 f42252se postfix/smtpd[14625]: 9A86C30007C: client=f42252ud.averlon.loc[192.168.110.165], sasl_method=PLAIN, sasl_username=avadmin Jan 7 19:43:09 f42252se postfix/cleanup[14631]: 9A86C30007C: message-id=<50EB173B.5090109(a)av.loc> Jan 7 19:43:09 f42252se postfix/qmgr[14561]: 9A86C30007C: from=<avadmin(a)av.loc>, size=1227, nrcpt=1 (queue active) Jan 7 19:43:09 f42252se postfix/smtpd[14625]: disconnect from f42252ud.averlon.loc[192.168.110.165] Jan 7 19:43:11 f42252se postfix/pickup[14560]: BE0AC30007F: uid=5002 from=<avadmin(a)av.loc> Jan 7 19:43:11 f42252se postfix/cleanup[14631]: BE0AC30007F: message-id=<50EB173B.5090109(a)av.loc> Jan 7 19:43:11 f42252se postfix/qmgr[14561]: BE0AC30007F: from=<avadmin(a)av.loc>, size=1534, nrcpt=1 (queue active) Jan 7 19:43:11 f42252se postfix/pipe[14632]: 9A86C30007C: to=<redmine(a)averlon.loc>, relay=spamassassin, delay=2.2, delays=0.05/0/0/2.1, dsn=2.0.0, status=sent (delivered via spamassassin service) Jan 7 19:43:11 f42252se postfix/qmgr[14561]: 9A86C30007C: removed Jan 7 19:43:11 f42252se dovecot: auth: Debug: master in: USER#0111#011redmine(a)averlon.loc#011service=lda Jan 7 19:43:11 f42252se dovecot: auth: Debug: ldap(redmine(a)averlon.loc): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=redmine(a)averlon.loc)) fields=uid,userPassword Jan 7 19:43:11 f42252se dovecot: auth: ldap(redmine(a)averlon.loc): *unknown user* Jan 7 19:43:11 f42252se dovecot: auth: Debug: master out: NOTFOUND#0111 Jan 7 19:43:11 f42252se postfix/pipe[14637]: BE0AC30007F: to=<redmine(a)averlon.loc>, relay=dovecot, delay=0.02, delays=0/0/0/0.01, dsn=5.1.1, status=bounced (user unknown) Jan 7 19:43:11 f42252se postfix/cleanup[14631]: C279030007E: message-id=<20130107184311.C279030007E(a)mail.av.loc> Jan 7 19:43:11 f42252se postfix/qmgr[14561]: C279030007E: from=<>, size=3182, nrcpt=1 (queue active) Jan 7 19:43:11 f42252se postfix/bounce[14639]: BE0AC30007F: sender non-delivery notification: C279030007E Jan 7 19:43:11 f42252se postfix/qmgr[14561]: BE0AC30007F: removed Jan 7 19:43:11 f42252se dovecot: auth: Debug: master in: USER#0111#011avadmin(a)av.loc#011service=lda Jan 7 19:43:11 f42252se dovecot: auth: Debug: ldap(avadmin(a)av.loc): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=avadmin(a)av.loc)) fields=uid,userPassword Jan 7 19:43:11 f42252se dovecot: auth: ldap(avadmin(a)av.loc): *unknown user* Jan 7 19:43:11 f42252se dovecot: auth: Debug: master out: NOTFOUND#0111 Jan 7 19:43:11 f42252se postfix/pipe[14637]: C279030007E: to=<avadmin(a)av.loc>, relay=dovecot, delay=0.01, delays=0/0/0/0.01, dsn=5.1.1, status=bounced (user unknown) Jan 7 19:43:11 f42252se postfix/qmgr[14561]: C279030007E: removed Jan 7 19:43:21 f42252se dovecot: auth: Debug: auth client connected (pid=14644) Jan 7 19:43:21 f42252se dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=pop3#011secured#011lip=192.168.110.150#011rip=192.168.110.165#011lport=995#011rport=43070 Jan 7 19:43:21 f42252se dovecot: auth: Debug: client out: CONT#0111#011 Jan 7 19:43:21 f42252se dovecot: auth: Debug: client in: CONT<hidden> Jan 7 19:43:21 f42252se dovecot: auth: Debug: ldap(qx42252006,192.168.110.165): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=qx42252006)) fields=uid,userPassword Jan 7 19:43:21 f42252se dovecot: auth: Debug: ldap(qx42252006,192.168.110.165): result: uid(user)=qx42252006 userPassword(password)=<hidden> Jan 7 19:43:21 f42252se dovecot: auth: Debug: client out: OK#0111#011user=qx42252006 Jan 7 19:43:21 f42252se dovecot: auth: Debug: master in: REQUEST#0113145334785#01114644#0111#0115f6241afb0ff05d6b901a9a1edd65840 Jan 7 19:43:21 f42252se dovecot: auth: Debug: master out: USER#0113145334785#011qx42252006#011uid=5000#011gid=5000#011home=/home/vmail/qx42252006 Jan 7 19:43:21 f42252se dovecot: pop3-login: Login: user=<qx42252006>, method=PLAIN, rip=192.168.110.165, lip=192.168.110.150, mpid=14646, TLS Jan 7 19:43:21 f42252se dovecot: pop3(qx42252006): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 7 19:43:27 f42252se dovecot: auth: Debug: auth client connected (pid=14649) Jan 7 19:43:28 f42252se dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=pop3#011secured#011lip=192.168.110.150#011rip=192.168.110.165#011lport=995#011rport=43071 Jan 7 19:43:28 f42252se dovecot: auth: Debug: client out: CONT#0111#011 Jan 7 19:43:28 f42252se dovecot: auth: Debug: client in: CONT<hidden> Jan 7 19:43:28 f42252se dovecot: auth: Debug: ldap(avadmin,192.168.110.165): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=avadmin)) fields=uid,userPassword Jan 7 19:43:28 f42252se dovecot: auth: Debug: ldap(avadmin,192.168.110.165): result: uid(user)=avadmin userPassword(password)=<hidden> Jan 7 19:43:28 f42252se dovecot: auth: Debug: client out: OK#0111#011user=avadmin Jan 7 19:43:28 f42252se dovecot: auth: Debug: master in: REQUEST#0113661234177#01114649#0111#011abd1ac9fcd3ced2d9b01e090f3703ac0 Jan 7 19:43:28 f42252se dovecot: auth: Debug: master out: USER#0113661234177#011avadmin#011uid=5000#011gid=5000#011home=/home/vmail/avadmin Jan 7 19:43:28 f42252se dovecot: pop3-login: Login: user=<avadmin>, method=PLAIN, rip=192.168.110.165, lip=192.168.110.150, mpid=14650, TLS Jan 7 19:43:28 f42252se dovecot: pop3(avadmin): Disconnected: Logged out top=0/0, retr=0/0, del=0/2, size=4872 Jan 7 19:44:31 f42252se dovecot: auth: Debug: auth client connected (pid=14694) Jan 7 19:44:31 f42252se dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=pop3#011secured#011lip=192.168.110.150#011rip=192.168.110.165#011lport=995#011rport=43073 Jan 7 19:44:31 f42252se dovecot: auth: Debug: client out: CONT#0111#011 Jan 7 19:44:31 f42252se dovecot: auth: Debug: client in: CONT<hidden> Jan 7 19:44:31 f42252se dovecot: auth: Debug: ldap(qx42252008,192.168.110.165): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=qx42252008)) fields=uid,userPassword Jan 7 19:44:31 f42252se dovecot: auth: Debug: ldap(qx42252008,192.168.110.165): result: uid(user)=qx42252008 userPassword(password)=<hidden> Jan 7 19:44:31 f42252se dovecot: auth: Debug: client out: OK#0111#011user=qx42252008 Jan 7 19:44:31 f42252se dovecot: auth: Debug: master in: REQUEST#011251920385#01114694#0111#011db7eed58edf0149fd176446b57c20a33 Jan 7 19:44:31 f42252se dovecot: auth: Debug: master out: USER#011251920385#011qx42252008#011uid=5000#011gid=5000#011home=/home/vmail/qx42252008 Jan 7 19:44:31 f42252se dovecot: pop3-login: Login: user=<qx42252008>, method=PLAIN, rip=192.168.110.165, lip=192.168.110.150, mpid=14698, TLS +++ Tell me what you need as additional info. Thanks for help -- Signatur Averlon info Mit freundlichen Grüßen / Kind Regards Karl-Heinz Fischbach Skype: khfischbach jabber: averlon(a)jabber.org Blog: averlon.posterous.com Signatur: Diese e-mail ist unter Umständen signiert. Die Signatur entspricht dem Deutschen Signaturgesetz und entsprechenden europäischen Regelungen. Important Note: This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information. If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of it is strictly prohibited. Please inform us immediately and destroy the original transmittal.

5 9

[Dovecot] problems with sieve
by Carsten Laun-De Lellis 10 Jan '13

10 Jan '13

Hi all I am running a simple mail server on ubuntu 12.04LTS with postfix 2.9.3 and dovecot 2.1.10. Since this morning sieve doesn't work anymore. I changed the sieve script forth and back but sieve is not working. I also replaced the sieve file with the backup, but no success. But I can't any error messages in the log files indicating any problem with sieve. The only thing I found is: Jan 10 00:03:26 vmd187 dovecot: lda(carsten.delellis(a)delellis.net): sieve: msgid=<12155505.mmailer335539222(a)fritz.box>: stored mail into mailbox 'Fritz!Box' -- with working sieve Jan 10 13:52:29 vmd187 dovecot: lda(carsten.delellis(a)delellis.net): msgid=<1898328495.2554803.1357821905269.JavaMail.app(a)ela4-app2316.prod>: saved mail to INBOX -- with sieve not working As you can see that after dovecot: lda(carsten.delellis(a)delellis.net): the sieve tag is missing. I have also attached my settings from 90-sieve.conf from dovecot configuration. ## ## Settings for the Sieve interpreter ## # Do not forget to enable the Sieve plugin in 15-lda.conf and 20-lmtp.conf # by adding it to the respective mail_plugins= settings. plugin { # The path to the user's main active script. # sieve = ~/.dovecot.sieve sieve = /vmail/%d/%n/dovecot.sieve # A path to a global sieve script file, which gets executed ONLY # if user's private Sieve script doesn't exist. Be sure to # pre-compile this script manually using the sievec command line # tool. sieve_global_path = /var/lib/dovecot/sieve/default.sieve # Directory for :personal include scripts for the include extension. # sieve_dir = ~/sieve sieve_dir = /vmail/%d/%n # Directory for :global include scripts for the include extension. sieve_global_dir = /var/lib/dovecot/sieve # Which Sieve language extensions are available to users. By default, # all supported extensions are available, except for deprecated # extensions or those that are still under development. Some system # administrators may want to disable certain Sieve extensions or # enable those that are not available by default. This setting can # use '+' and '-' to specify differences relative to the default. # For example `sieve_extensions = +imapflags' will enable the # deprecated imapflags extension in addition to all extensions # enabled by default. #sieve_extensions = +notify +imapflags # The separator that is expected between the :user and :detail # address parts introduced by the subaddress extension. This may # also be a sequence of characters (e.g. '--'). The current # implementation looks for the separator from the left of the # localpart and uses the first one encountered. The :user part is # left of the separator and the :detail part is right. This setting # is also used by Dovecot's LMTP service. recipient_delimiter = + # The maximum size of a Sieve script. The compiler will refuse to # compile any script larger than this limit. #sieve_max_script_size = 1M # The maximum number of actions that can be performed during a single # script execution. #sieve_max_actions = 32 # The maximum number of redirect actions that can be performed during # a single script execution. #sieve_max_redirects = 4 # The maximum number of personal Sieve scripts a single user can have. # (Currently only relevant for ManageSieve) #sieve_quota_max_scripts = 0 # The maximum amount of disk storage a single user's scripts may occupy. # (Currently only relevant for ManageSieve) #sieve_quota_max_storage = 0 } And also you can see that sieve is listening on port 4190 and managesieve on 2000 > lsof -i :4190 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME dovecot 2503 root 15u IPv4 14101 0t0 TCP *:sieve (LISTEN) dovecot 2503 root 16u IPv6 14102 0t0 TCP *:sieve (LISTEN) lsof -i :2000 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME dovecot 2503 root 17u IPv4 14103 0t0 TCP *:cisco-sccp (LISTEN) dovecot 2503 root 18u IPv6 14104 0t0 TCP *:cisco-sccp (LISTEN) I would appreciate any hints. Regards, Carsten Laun-De Lellis Hauptstrasse 13 D-67705 Trippstadt Phone: +49 6306 992140 Fax: +49 6306 992142 Mobile: +49 151 27530865 email: carsten.delellis(a)delellis.net http://www.linkedin.com/in/carstenlaundelellis

2 1

[Dovecot] Confused about "Authentication Mechanism" and "Password Schemes"
by Thomas Pries 10 Jan '13

10 Jan '13

Hi, I am currently setting up a Mailserver and decided to use Dovecot as IMAP/POP3-Server. I read the wiki an thought about how to transmit and store the passwords (I want to use a MySQL-database). I want to use encrypted transmission and encrypted storage. The wiki says: "If you want to use only one non-plaintext mechanism, you can store the passwords using the mechanism's own password scheme. " Ok, one secure mechanism is acceptable in my scenario and the wiki gives a list of supported authentication mechanisms and a list of supported password schemes. But I am missing the relation between the two lists, which mechanism expects which storage scheme? Did I overlooked any easy answer (other then "read the RFCs"). Best Regards Thomas

2 1

[Dovecot] v2.2.beta1 released
by Timo Sirainen 10 Jan '13

10 Jan '13

http://dovecot.org/releases/2.2/beta/dovecot-2.2.beta1.tar.gz http://dovecot.org/releases/2.2/beta/dovecot-2.2.beta1.tar.gz.sig Lots of fixes since 2.2.alpha1, especially related to dsync. Also dsync now supports syncing private message flags when INDEXPVT is used. Here's again the list of all the major changes in v2.2: * When creating home directories, the permissions are copied from the parent directory if it has setgid-bit set. For full details, see http://wiki2.dovecot.org/SharedMailboxes/Permissions * "doveadm auth" command was renamed to "doveadm auth test" * IMAP: ID command now advertises server name as Dovecot by default. It was already trivial to guess this from command replies. * dovecot.index.cache files can be safely accessed only by v2.1.11+. Older versions may think they're corrupted and delete them. + Implemented IMAP MOVE and BINARY extensions + Implemented IMAP CATENATE, URLAUTH and URLAUTH=BINARY extensions (by Stephan Bosch). + Implemented IMAP NOTIFY extension. Requires mailbox_list_index=yes to be enabled. + Redesigned and rewritten dsync. The new design makes the syncing faster, more reliable and more featureful. The new dsync protocol isn't backwards compatible with old dsync versions (but is designed to be forwards compatible with future versions). + All mailbox formats now support per-user message flags for shared mailboxes by using a private index. It can be enabled by adding :INDEXPVT=<path> to mail location. This should be used instead of :INDEX also for Maildir/mbox to improve performance. + Improved mailbox list indexes. They should be usable now, although still disabled by default. + Added LAYOUT=index. The mailbox directories are created using their GUIDs in the filesystem, while the actual GUID <-> name mapping exists only in the index. + LMTP proxy: Implemented XCLIENT extension for passing remote IP address through proxy.

2 4

[Dovecot] Mark Crispin - RIP
by Robert Moskowitz 09 Jan '13

09 Jan '13

'Father' of the IMAP protocol. Died Dec 28. http://en.wikipedia.org/wiki/Mark_Crispin Had a TOPS-20 in his basement that did a great job of keeping the house warm in the cool months (I remember one BAR bof where he extoled the benefits of this form of home heating).

3 2

[Dovecot] Squat FTS plugin not kicking in
by Frerich Raabe 09 Jan '13

09 Jan '13

Hi, I'm running Dovecot 2.1.12 on FreeBSD. I configured Dovecot to use the Squat plugin to provide faster full-text searches. The output of 'dovecot -n' is attached to this mail. However, I just noticed that this plugin doesn't seem to kick in. A raw telnet session seems to confirm this: [..] . SEARCH BODY abcdefg * OK Searched 57% of the mailbox, ETA 0:06 * SEARCH 3425 6254 14710 . OK Search completed (17.262 secs). . SEARCH BODY abcdefg * OK Searched 63% of the mailbox, ETA 0:05 * SEARCH 3425 6254 14710 . OK Search completed (18.651 secs). [..] A SEARCH BODY command doesn't create the dovecot.index.search or dovecot.index.search.uids files mentioned on http://wiki2.dovecot.org/Plugins/FTS/Squat . Also, two subsequent SEARCH BODY invocations don't seem to be any different as far as search time goes. I checked the logs but couldn't see anything which is related, except: Jan 8 21:36:10 imap2 dovecot: indexer-worker(frerich): Indexed 0 messages in INBOX Does anybody have some idea how to get more logging out of index-worker, or whether there's a flaw in my configuration? -- Frerich Raabe - raabe(a)froglogic.com www.froglogic.com - Multi-Platform GUI Testing

1 1

Re: [Dovecot] Migrating mailboxes - SOLVED
by Odhiambo Washington 09 Jan '13

09 Jan '13

On Wed, Jan 9, 2013 at 5:36 PM, Eduardo M KALINOWSKI < eduardo(a)kalinowski.com.br> wrote: > On Qua, 09 Jan 2013, Odhiambo Washington wrote: > >> See the output below >> >> [root@mail home]# cd johndoe/ >> [root@mail johndoe]# du -h mail/ >> 32K mail/.imap/Sent >> 40K mail/.imap/Trash >> 32K mail/.imap/Drafts >> 176K mail/.imap/INBOX >> 284K mail/.imap >> 88M mail/ >> > > Clearly most of the data (probably the emails) is not under the .imap > subdir, which is exactly what you didn't show us. It's probably mbox files. > > Sure! Looking further, I have found the mboxes and I am now able to migrate! Thanks for being my "third eye". That version of Dovecot had shocked my senses senseless!! -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ I can't hear you -- I'm using the scrambler.

1 0

[Dovecot] Migrating mailboxes
by Odhiambo Washington 09 Jan '13

09 Jan '13

Hello everyone and Happy 2013! I have a situation -- the first ever I have come across -- which I don't understand. A friend was/is running Postfix and Dovecot - with default configs - nothing was ever changed :-) [root@mail home]# dovecot --version 0.99.11 Anyway, he had a problem with a user mailbox which I wasn't able to diagnose and fix easily. maillog showed: Jan 9 16:11:29 mail imap-login: Login: userx [::ffff:127.0.0.1] Jan 9 16:11:29 mail imap(userx): file lib.c: line 37 (nearest_power): assertion failed: (num <= ((size_t)1 << (BITS_IN_SIZE_T-1))) Jan 9 16:11:29 mail dovecot: child 25217 (imap) killed with signal 6 Jan 9 16:12:03 mail imap-login: Login: userx [::ffff:127.0.0.1] Jan 9 16:12:03 mail imap(userx): file lib.c: line 37 (nearest_power): assertion failed: (num <= ((size_t)1 << (BITS_IN_SIZE_T-1))) Jan 9 16:12:03 mail dovecot: child 25229 (imap) killed with signal 6 Jan 9 16:13:15 mail pop3-login: Login: userx [::ffff:192.168.0.55] Jan 9 16:13:15 mail pop3(userx): file lib.c: line 37 (nearest_power): assertion failed: (num <= ((size_t)1 << (BITS_IN_SIZE_T-1))) My aim is not to fix the above. I have reconfigured both Postfix and Dovecot to use Maildir now and things are fine (not securitywise, but I don't care about that) for now. However, I'd like to migrate old mail for some users, but I don't know how to go about this, given the mailbox format, which I don't understand: Here is what a typical one looks like: [root@mail home]# ls -al johndoe/mail/.imap/ total 24 drwx------ 6 johndoe users 4096 May 27 2010 . drwx------ 3 johndoe users 4096 May 27 2010 .. drwx------ 2 johndoe users 4096 May 27 2010 Drafts drwx------ 2 johndoe users 4096 Jan 9 15:46 INBOX drwx------ 2 johndoe users 4096 May 27 2010 Sent drwx------ 2 johndoe users 4096 May 27 2010 Trash [root@mail home]# ls -al johndoe/mail/.imap/INBOX/ total 180 drwx------ 2 johndoe users 4096 Jan 9 15:46 . drwx------ 6 johndoe users 4096 May 27 2010 .. -rw------- 1 johndoe users 5 Dec 18 2007 .customflags -rw------- 1 johndoe users 10272 Jan 9 15:46 .imap.index -rw------- 1 johndoe users 132774 Jan 9 11:27 .imap.index.data -rw------- 1 johndoe users 5136 Sep 26 2011 .imap.index.log -rw------- 1 johndoe users 9404 Jan 8 18:44 .imap.index.tree [root@mail home]# ls -al johndoe/mail/.imap/Sent/ total 36 drwx------ 2 johndoe users 4096 May 27 2010 . drwx------ 6 johndoe users 4096 May 27 2010 .. -rw------- 1 johndoe users 5 May 27 2010 .customflags -rw------- 1 johndoe users 1608 May 27 2010 .imap.index -rw------- 1 johndoe users 10264 May 27 2010 .imap.index.data -rw------- 1 johndoe users 2576 May 27 2010 .imap.index.log -rw------- 1 johndoe users 1556 May 27 2010 .imap.index.tree [root@mail home]# ls -al johndoe/mail/.imap/Drafts/ total 36 drwx------ 2 johndoe users 4096 May 27 2010 . drwx------ 6 johndoe users 4096 May 27 2010 .. -rw------- 1 johndoe users 5 May 27 2010 .customflags -rw------- 1 johndoe users 1608 May 27 2010 .imap.index -rw------- 1 johndoe users 10264 May 27 2010 .imap.index.data -rw------- 1 johndoe users 2576 May 27 2010 .imap.index.log -rw------- 1 johndoe users 1556 May 27 2010 .imap.index.tree [root@mail home]# ls -al johndoe/mail/.imap/Trash/ total 44 drwx------ 2 johndoe users 4096 May 27 2010 . drwx------ 6 johndoe users 4096 May 27 2010 .. -rw------- 1 johndoe users 5 May 27 2010 .customflags -rw------- 1 johndoe users 1608 May 27 2010 .imap.index -rw------- 1 johndoe users 17950 May 27 2010 .imap.index.data -rw------- 1 johndoe users 2576 May 27 2010 .imap.index.log -rw------- 1 johndoe users 1556 May 27 2010 .imap.index.tree How can I migrate these mails into /home/johndoe/Maildir/ ?? They don't seem like mbox to me so mb2md.pl doesn't seem to apply here.. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ I can't hear you -- I'm using the scrambler.

5 9

[Dovecot] Dsync didn't updates automatically
by Breno Moreira 08 Jan '13

08 Jan '13

Hi, I'm trying to use the Dsync cluster feature in a simple setup, without director, but I'm having some troubles. First of all, I want to know if this functionality syncs the mailbox when the user receive a mail or only when the dovecot starts? Reading the Dovecot mailing list and the design description for a dsync-replicated Dovecot cluster, I understood that it should sync every time a new mail arrives, but it isn't happening in my system. So, can I do this update automatically? If yes, why is it not working properly? Maybe is my configuration files or maybe I'm confusing the capability of this feature. I'm using Dovecot 2.1.7 included in the Debian Wheezy, with virtual users in a MySQL database, Moreover, I have the following configuration: mail_plugins = $mail_plugins notify replication service aggregator { # give enough permissions for mail processes fifo_listener replication-notify-fifo { user = vmail #mode = 0666 } unix_listener replication-notify { user = vmail #mode = 0666 } } service replicator { # start replication at startup process_min_avail = 1 } plugin { # host1 replicates to host2 #mail_replica = remote:vmail at 10.127.0.2 # host2 replicates to host1 mail_replica = remote:vmail@10.127.0.5 } dsync_remote_cmd = ssh -l vmail %{host} doveadm dsync-server -u%u -l%{lock_timeout} -n%{namespace} service doveadm { # if you're using a single virtual user, set this to # start ssh as vmail (not root) user = vmail } service config { unix_listener config { user = vmail } } The vmail user has rsa id's in both servers, so it can do ssh connections without asking for password. I appreciate your help. Best Regards, -- --------------------------------------------------------------------- Breno Moreira "I have no idols. I admire work, dedication and competence." Ayrton Senna

2 6

[Dovecot] dovecot-antispam-plugin compile error
by Bradley Giesbrecht 08 Jan '13

08 Jan '13

$ hg --cwd ./work/dovecot-antispam-plugin-50 glog -l3 --style compact @ 50[tip] 0319240072d8 2012-12-20 03:56 +0200 Eugene Paskevich <eugene(a)raptor.kiev.ua> | Made use of new DOVECOT_ABI_VERSION macro. ... $ configure; make Compiling signature-log.c (plugin)... signature-log.c:122: error: too many arguments to function ‘dict_init’ ... Reverting src/signature-log.c from r49 to r30 allows make to succeed again. Regards, Bradley Giesbrecht (pixilla)

1 0

[Dovecot] Question about supporting EAI in Devecot
by Abdulrahman I. ALGhadir 08 Jan '13

08 Jan '13

Dear all, I would like to ask the staff of Devecot if they are planning (working) or supporting EAI (http://tools.ietf.org/wg/eai/) in the future versions? If there is a working progress on it can anybody guide me to it? Thank you, AbdulRahman, ----------------------------------------------------------------------------------- Disclaimer: This message and its attachment, if any, are confidential and may contain legally privileged information. If you are not the intended recipient, please contact the sender immediately and delete this message and its attachment, if any, from your system. You should not copy this message or disclose its contents to any other person or use it for any purpose. Statements and opinions expressed in this e-mail are those of the sender, and do not necessarily reflect those of the Communications and Information Technology Commission (CITC). CITC accepts no liability for damage caused by this email.

2 3

[Dovecot] imap: Error: net_connect_unix(/.../auth-master) failed: Invalid argument
by Joan Picanyol i Puig 08 Jan '13

08 Jan '13

Hi, I'm unable to get past the subject error trying to setup dovecot 2.1.10 on FreeBSD 6.4: right after login the server closes the connection (testing with telnet) I've tried manualy chown()ing auth-master to 666, so permission issues should be ruled out. I'm attaching logs, config and excerpt of ktrace -id. I've built a version with debug symbols, but I don't seem to hit a breakpoint in net_connect_unix on lib/network.c What can I look at? tks -- pica

2 3

[Dovecot] Access to deleted mails in mdbox storage
by Wolfgang.Friebel＠desy.de 08 Jan '13

08 Jan '13

Hi Timo, we are currently running dovecot 2.1.10 using mdbox storage. Sometimes we get requests from users to restore accidentally deleted mails. If the mails got deleted before a backup was made, such mails could of course not be restored from backup. One option to help users in this respect would be to use the lazy expunge plugin. On the other hand I have seen, that the deleted mails stay intact in the mdbox storage until a doveadm purge has been performed. Therefore without using the plugin it is in principle possible to get access to any deleted mails. As in our case the expunge runs once a week while the backup is done daily we can basically recover all mails ever received. My question: doveadm has currently no command similar to doveadm search or fetch to get to deleted mails. Would it be useful to have such a command? As a proof of concept I wrote a little script to mimic the doveadm fetch as closely as possible given the limited amount of information in the mdbox/storage/m.* files and could indeed get access to deleted mails. Do you regard such a procedure (within doveadm) useful or would you recommend nevertheless using the lazy expunge plugin? I am aware of the fact that this is a solution for mdbox storage only. -- Wolfgang Friebel Deutsches Elektronen-Synchrotron DESY Phone/Fax: +49 33762 77372/216 Platanenallee 6 Mail: Wolfgang.Friebel AT desy.de D-15738 Zeuthen Germany

2 1

[Dovecot] 2 node dovecot
by Lazy 08 Jan '13

08 Jan '13

Hi, We run dovecot 2.1 on 2 nodes with shared nfs storage. Index files are kept on local disk. Second node is usually used only for email snapshots access. If primary node fails it is configured to take place of the primary imap server. Snapshots are additional namespaces with mail from various points in time. We need a way to easly copy multiple messages from snapshots to current mailboxes. It would be best to make current mailbox available as another namespace so one would simply copy messages from one folder to another. Is it safe ? There will be times when given user is writing to the same nfs based Maildir mailbox from 2 nodes both of them having separate index files. What will happen if already present message gets copied back from the snapshot ? Regards, Michał Grzędzicki

2 2

[Dovecot] lda crash?
by kjonca＠o2.pl 08 Jan '13

08 Jan '13

When I try to refilter some messages lda crash: Dec 29 16:07:34 LDA(kjonca): Info: sieve: msgid=<003a01bf6d8f$c9d69f20$9c2dcdc3(a)tiger.com.pl>: stored mail into mailbox 'scott/Sent' Dec 29 16:08:02 lda: Debug: Loading modules from directory: /usr/lib/dovecot/modules Dec 29 16:08:02 lda: Debug: Module loaded: /usr/lib/dovecot/modules/lib90_sieve_plugin.so Dec 29 16:08:02 LDA(kjonca): Debug: Effective uid=1000, gid=1000, home=/home/kjonca Dec 29 16:08:02 LDA(kjonca): Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Mail/0:LAYOUT=fs:INBOX=~/Mail/0/INBOX Dec 29 16:08:02 LDA(kjonca): Debug: fs: root=/home/kjonca/Mail/0, index=, control=, inbox=/home/kjonca/Mail/0/INBOX, alt= Dec 29 16:08:02 LDA(kjonca): Debug: userdb lookup skipped, username taken from USER environment Dec 29 16:08:02 LDA(kjonca): Debug: none: root=, index=, control=, inbox=, alt= Dec 29 16:08:02 LDA(kjonca): Debug: Destination address: kjonca(a)alfa.kjonca (source: user@hostname) Dec 29 16:08:02 LDA(kjonca): Debug: sieve: include: sieve_global_dir is not set; it is currently not possible to include `:global' scripts. Dec 29 16:08:02 LDA(kjonca): Debug: sieve: Pigeonhole Sieve Extprograms plugin version 0.1.0 loaded Dec 29 16:08:02 LDA(kjonca): Debug: sieve: using the following location for user's Sieve script: /home/kjonca/.dovecot.sieve Dec 29 16:08:02 LDA(kjonca): Debug: sieve: opening script /home/kjonca/.dovecot.sieve Dec 29 16:08:02 LDA(kjonca): Debug: sieve: script binary /home/kjonca/.dovecot.svbin successfully loaded Dec 29 16:08:02 LDA(kjonca): Debug: sieve: binary save: not saving binary /home/kjonca/.dovecot.svbin, because it is already stored Dec 29 16:08:02 LDA(kjonca): Debug: sieve: executing script from /home/kjonca/.dovecot.svbin Dec 29 16:08:02 LDA(kjonca): Info: sieve: msgid=<001b01bf7227$18649840$9c2dcdc3(a)tiger.com.pl>: stored mail into mailbox 'scott/Sent' doveconf -n output KJ -- http://sporothrix.wordpress.com/2011/01/16/usa-sie-krztusza-kto-nastepny/ Little known fact about Middle Earth: The Hobbits had a very sophisticated computer network! It was a Tolkien Ring...

3 6

[Dovecot] Director and forwarding LDAP user as Master user
by Alexandr Sabitov 08 Jan '13

08 Jan '13

Hello guys, Would you be able to help me with this little issue. I bet someone has the same config so if you can copy-paste it I will very appreciate it. So main idea is to enable Dovecot director to authenticate a LDAP user with plain or encrypted password and send the user to back-end Dovecot server after the authentication. According to Wiki it is only possible if we use the master user to communicate to the back-end server. On the back-end Dovecot server it is working fine, I can log in as normal user/user_password or as user*masteruser/master_password. The back-end config is: auth_master_user_separator = * passdb { driver = passwd-file args = /usr/local/dovecot/etc/dovecot/passwd.masterusers master = yes pass = yes } passdb { driver = ldap args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext } userdb { driver = ldap args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext } Now front-end: how to get director forward the user to the back-end after authentication on the director? With my director config the user stays on the director all the time: passdb { driver = static args = proxy=y master=masteruser pass=master_password destuser=%u*masteruser } passdb { driver = ldap args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext } userdb { driver = ldap args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext } The only way to forward the user is to setup nopassword=y in args of static passdb but in that case the user will be authenticated on the backend but not on the director... What do I missing ? Please help me Best Regards, Alexandr Sabitov

2 2

Re: [Dovecot] Problem setting up dovecot on Debian: "telnet: Unable to connect to remote host: Connection refused"
by Joseph Tam 08 Jan '13

08 Jan '13

Noel Butler writes: > I build from sources all key daemon software anyway, package maintainers > can only account for so many configurations. Its not so critical with > dovecot now since v2, because, regrettably, Timo removed a lot of fine > tune config options that allowed us to only build in what we wanted, > now, tuff, most the auth methods and stuff must be built even if we dont > want them. That hasn't been my experience, but maybe because the non-optional stuff are what I need. For example, my configure for v2.1.x summarizes Install prefix . : /opt/dovecot File offsets ... : 64bit I/O polling .... : poll I/O notifys .... : none SSL ............ : yes (OpenSSL) GSSAPI ......... : no passdbs ........ : static passwd passwd-file checkpassword : -shadow -pam -bsdauth -sia -ldap -sql -vpopmail userdbs ........ : static prefetch passwd passwd-file checkpassword : -ldap -sql -vpopmail -nss SQL drivers .... : : -pgsql -mysql -sqlite Full text search : squat : -lucene -solr A few auth methods, which even if you don't use, is a nice fallback for exceptions or niche caches, no dbs, one mandatory text search method. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] BLF-CRYPT
by Kristof Bajnok 07 Jan '13

07 Jan '13

Hi, I get "Unknown scheme: BLF-CRYPT" messages if I try to use Blowfish-encrypted passwords, even though it is supposed to be supported. I'm on 2.1.7, Debian Squeeze backports. Do you have any information whether Blowfish is supported with Debian Squeeze crypt(), or is there any other knobs I can turn on to make this algorithm available? Thanks, Kristof

2 1

[Dovecot] Problem setting up dovecot on Debian: "telnet: Unable to connect to remote host: Connection refused"
by Chris Evans 07 Jan '13

07 Jan '13

I would like to get dovecot running on my laptop so I can transfer a lot of old Email from Thunderbird mailbox files to a hosted zimbra service. However I'm falling at the first hurdle. I'm running Debian squeeze i386 (kernel 2.6.32-5-686) and have installed dovecot-imapd and dovecot-common with synaptic and edited /etc/dovecot/dovecot.conf to make sure it has the right protocols and listen instructions. Here's dovecot -n root@delldeb:/etc/dovecot# dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 6.0.6 log_timestamp: %Y-%m-%d %H:%M:%S listen: 143 993 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mbox_write_locks: fcntl dotlock auth default: passdb: driver: pam userdb: driver: passwd Here's ps: root@delldeb:/etc/dovecot# ps aux | grep dove root 10353 0.0 0.0 3944 792 ? Ss 15:32 0:00 /usr/sbin/dovecot -c /etc/dovecot/dovecot.conf root 10356 0.0 0.0 10008 2420 ? S 15:32 0:00 dovecot-auth root 10360 0.0 0.0 10008 2372 ? S 15:32 0:00 dovecot-auth -w dovecot 10361 0.0 0.0 5412 2024 ? S 15:32 0:00 imap-login dovecot 10362 0.0 0.0 5412 2024 ? S 15:32 0:00 imap-login dovecot 10363 0.0 0.0 5412 2028 ? S 15:32 0:00 imap-login root 10393 0.0 0.0 3304 772 pts/2 S+ 15:33 0:00 grep dove Here's netstat: root@delldeb:/etc/dovecot# netstat -tap | grep 143 tcp 0 0 0.0.0.143:imap2 *:* LISTEN 9178/dovecot tcp 0 0 0.0.0.143:imaps *:* LISTEN 9178/dovecot I can telnet into SMTP OK with telnet localhost 25 but telnet localhost 143 gets me the "Connection refused" message. I've changed auth_debug to "yes" and now /var/log/mail.info says: Jan 5 15:32:13 delldeb dovecot: Dovecot v1.2.15 starting up (core dumps disabled) Jan 5 15:32:14 delldeb dovecot: auth(default): new auth connection: pid=10361 Jan 5 15:32:14 delldeb dovecot: auth(default): new auth connection: pid=10362 Jan 5 15:32:14 delldeb dovecot: auth(default): new auth connection: pid=10363 That doesn't change after I try the telnet login again so I think that's just telling me that the dovecot daemon started and launched it's listeners (but I know I don't know how to read this so correction welcome). My reading of all of this is that the dovecot daemon is up and running, that it's listening correctly on 143 and 993 and that I have to do something else to get authorisation even to start the IMAP dialogue with the server. I would like to get it working and locked to SSL only but thought I should start with both unencrypted and encrypted. Can someone help me or point me to the bits of documentation or good web howto or the like that I've missed? TIA, Chris (long term Debian user but it's some years since I last ran my own mail server and I'm a total newby to imap and dovecot)

4 9

[Dovecot] v2.1.13 released
by Timo Sirainen 07 Jan '13

07 Jan '13

http://dovecot.org/releases/2.1/dovecot-2.1.13.tar.gz http://dovecot.org/releases/2.1/dovecot-2.1.13.tar.gz.sig - Some fixes to cache file changes in v2.1.11. - fts-solr: Overlong UTF8 sequences in mails were rejected by Solr and caused the mails to not be indexed. - virtual storage: Sorting mailbox by from/to/cc/bcc didn't work.

1 0

[Dovecot] wrong authentication for local delivery
by Averlon 06 Jan '13

06 Jan '13

Hi all there, I have a postfix/dovecot environment running with ldap authentication. I am able to deliver e-Mails to the internet and also receive them via fetchmail. I have a pure local domain (av.loc). Just for internal purpuse. For all mails where destination is a local mailbox, as for all of the local domain, delivery does not work. Here I can show some logs of such a process: +++ Here the process starts (I have sent an e-Mail to myself). Jan 6 17:31:06 f42252se dovecot: auth: Debug: auth client connected (pid=13250) Jan 6 17:31:06 f42252se dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=smtp#011nologin#011lip=192.168.110.150#011rip=192.168.110.165#011secured#011resp=<hidden> Jan 6 17:31:06 f42252se dovecot: auth: Debug: ldap(avadmin,192.168.110.165): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=avadmin)) fields=mail,userPassword *Jan 6 17:31:06 f42252se dovecot: auth: Debug: auth(avadmin,192.168.110.165): username changed avadmin -> avadmin(a)av.loc* Jan 6 17:31:06 f42252se dovecot: auth: Debug: ldap(avadmin(a)av.loc,192.168.110.165): result: userPassword(password)=<hidden> mail(user)=avadmin(a)av.loc Jan 6 17:31:06 f42252se dovecot: auth: Debug: client out: OK#0111#011user=avadmin(a)av.loc#011mail=/home/vmail/avadmin/Maildir/ Jan 6 17:31:06 f42252se postfix/smtpd[13250]: 69FDB30007C: client=f42252ud.averlon.loc[192.168.110.165], sasl_method=PLAIN, sasl_username=avadmin(a)av.loc Jan 6 17:31:06 f42252se postfix/cleanup[13251]: 69FDB30007C: message-id=<50E9A6C8.1090805(a)av.loc> Jan 6 17:31:06 f42252se postfix/qmgr[11960]: 69FDB30007C: from=<avadmin(a)av.loc>, size=1224, nrcpt=1 (queue active) Jan 6 17:31:06 f42252se postfix/smtpd[13250]: disconnect from f42252ud.averlon.loc[192.168.110.165] Jan 6 17:31:09 f42252se postfix/pickup[11959]: 19A2E30007F: uid=5002 from=<avadmin(a)av.loc> Jan 6 17:31:09 f42252se postfix/cleanup[13251]: 19A2E30007F: message-id=<50E9A6C8.1090805(a)av.loc> Jan 6 17:31:09 f42252se postfix/qmgr[11960]: 19A2E30007F: from=<avadmin(a)av.loc>, size=1531, nrcpt=1 (queue active) Jan 6 17:31:09 f42252se postfix/pipe[13252]: 69FDB30007C: to=<avadmin(a)av.loc>, relay=spamassassin, delay=2.7, delays=0.01/0/0/2.7, dsn=2.0.0, status=sent (delivered via spamassassin service) Jan 6 17:31:09 f42252se postfix/qmgr[11960]: 69FDB30007C: removed Jan 6 17:31:09 f42252se dovecot: auth: Debug: master in: USER#0111#011avadmin(a)av.loc#011service=lda *Jan 6 17:31:09 f42252se dovecot: auth: Debug: ldap(avadmin(a)av.loc): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=avadmin(a)av.loc)) fields=mail,userPassword* Jan 6 17:31:09 f42252se dovecot: auth: ldap(avadmin(a)av.loc): unknown user Jan 6 17:31:09 f42252se dovecot: auth: Debug: master out: NOTFOUND#0111 +++ I have configured my thunderbird to have a username to authenticate against ldap. In the first steps above the authentication of the sender works. But then, when delivering to the receiver, dovecot uses the e-Mail address of the receiver to check the password. I do not know why dovecot chechs the password of the receiver before delivery. I do neither know where to switch that off or set some changes in the configuration to avoid that process. Probably it is correct? But anyhow, the setup ldap-procedure just checks the username and no e-Mail address. Dovecot konfig: +++ # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-35-generic x86_64 Ubuntu 12.04.1 LTS auth_debug = yes auth_mechanisms = plain login cram-md5 auth_username_format = %Lu auth_verbose = yes hostname = mail.av.loc mail_gid = vmail mail_location = maildir:~/Maildir mail_privileged_group = vmail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem syslog_facility = avdove userdb { args = uid=vmail gid=vmail home=/home/vmail/%n driver = static } protocol lda { sendmail_path = /usr/sbin/sendmail } +++ As always, I would appreciate some hints. Thanks in advance. -- Signatur Averlon info Mit freundlichen Grüßen / Kind Regards Karl-Heinz Fischbach Skype: khfischbach jabber: averlon(a)jabber.org Blog: averlon.posterous.com Signatur: Diese e-mail ist unter Umständen signiert. Die Signatur entspricht dem Deutschen Signaturgesetz und entsprechenden europäischen Regelungen. Important Note: This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information. If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of it is strictly prohibited. Please inform us immediately and destroy the original transmittal.

1 0

[Dovecot] dovecot as layer between postfix and thunderbird
by martin svensson 05 Jan '13

05 Jan '13

Hello, im all new to this but feel i want to have a dedicated server to handle my mails from Gmail and Hotmail Basically, i installed SMS, superb Mini Server (based on slackware), and with that default install i got: dovecot, postfix, fetchmail and sendmail. The postfix part seems to work according to a "telnet localhost 25", now i want to procede with dovecot, as i understand it, its the middle layer between (in my case) postfix and thunderbird. What i expect in the very end is a dedicated server who regulary checks and fetches mails, and lets me have all contacts info in the (already up and running) LDAP server. When i start thunderbird, i want it to go grab those mails from my local machine I am, ofcourse all over manpages, HOWTOs, guides and google, but would certainly appriciate further help and points in the right direction My apologises for any weird beginner mistakes in this post

5 4

[Dovecot] Disable auth-worker log message?
by Martin Rabl 05 Jan '13

05 Jan '13

Hi, is it possible to disable the line auth-worker(17128): mysql(127.0.0.1): Connected to database mailserver in dovecot 2.1.12? Logging is in "standard" mode. Thank you, Martin

2 1

[Dovecot] permission denied message
by Averlon 05 Jan '13

05 Jan '13

Hi all, I have run successfully a postfix/dovecot installation some time ago. Now, setting up a new server, I am lost with some error messages. I would appreciate some help. +++ f42252se dovecot: pop3-login: Error: auth: connect(login) in directory / failed: Permission denied (euid=113(<getpwu id() error>) egid=65534(<getgrgid() error>) missing +x perm: /, dir owned by 5000:5000 mode=0750) +++ This is the error message I get. "directory /" is a little bit courious to me. Here my dovecot config: +++ # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-35-generic x86_64 Ubuntu 12.04.1 LTS auth_debug = yes auth_mechanisms = plain login digest-md5 cram-md5 auth_verbose = yes hostname = mail.av.loc mail_debug = yes mail_gid = vmail mail_location = maildir:~/Maildir mail_privileged_group = vmail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0600 user = postfix } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem syslog_facility = dovecot userdb { args = uid=vmail gid=vmail home=/home/vmail/%d/%n driver = static } +++ You probably see it immediatly what I fail to see. Thanks in advance -- Signatur Averlon info Mit freundlichen Grüßen / Kind Regards Karl-Heinz Fischbach Guiding Principle Tel.: +49 (8121) 7922532 Skype: khfischbach jabber: averlon(a)jabber.org Blog: averlon.posterous.com Signatur: Diese e-mail ist unter Umständen signiert. Die Signatur entspricht dem Deutschen Signaturgesetz und entsprechenden europäischen Regelungen. Important Note: This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information. If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of it is strictly prohibited. Please inform us immediately and destroy the original transmittal.

2 1

[Dovecot] About the Dovecot Missing mail.
by Vilson Lai 05 Jan '13

05 Jan '13

Dear Sir and/or Madam, I'm the newbie for using Linux, and now our company find the freelancer to change the mbox to maildir. we found that we have mail loss with error massage(ERROR: Connection dropped by IMAP server. Query: EXPUNGE), after that our freelancer do something to let this massage disappear. But now will still found we have mail loss. What can I do? I found a similar case in this page, but I can't found the solution, anyone can help me? URL: http://www.dovecot.org/list/dovecot/2011-December/062632.html Best Regards, Vilson Lai

3 4