- dovecot - dovecot.org

[Dovecot] How can I force FTS reindexing?
by Dave Abrahams 06 Dec '12

06 Dec '12

I threw out my lucene-indexes folder because it seemed to be missing something, and I figured it would get regenerated. Unfortunately, dovecot is only FTS-indexing new mails that come in. Is there a way to get it to reindex everything? -- Dave Abrahams BoostPro Computing Software Development Training http://www.boostpro.com Clang/LLVM/EDG Compilers C++ Boost

1 1

Re: [Dovecot] dovecot Digest, Vol 116, Issue 11
by Erik A Johnson 06 Dec '12

06 Dec '12

On December 5, 2012 2:07:14 AM PST, Ben Morrow <ben(a)morrow.me.uk> wrote: > At 1AM -0800 on 5/12/12 Erik A Johnson wrote: >> FYI, the tcpdump I sent previously was with one of our >> previously-discussed patches in place: >> >> if (!proxy->client_proxy && net_geterror(proxy->fd_ssl) == EBADF) { >> >> I'm attaching that dump again (as >> tcpdump_output_witholdpatch_headeronly.txt), as well as a dump without >> any of the patches (tcpdump_output_withoutpatches_headeronly.txt) in >> case there is any difference. > > Well, they're certainly different. Are you sure the second trace > (withoutpatches) was of a session which went into an infinite loop? > The only thing peculiar about that trace is that the server closes the > connection after receiving the first packet from the client, but it does > so perfectly properly: it ACKs the client's data packet, and does the > FIN-FIN/ACK exchance properly. You will notice there are no [R] packets, > which indicate something odd is happening at the server end. I'm pretty sure, but I've run it again, confirmed that the imap-login process is using 100% of a CPU until I kill it, and have attached the tcpdump. Looks like one packet from SERVER to CLIENT shifted slightly in chronology, but otherwise the same. >>> #ifdef SO_ISDEFUNCT >>> + if (getsockopt(proxy->fd_ssl, SOL_SOCKET, SO_ISDEFUNCT, >>> + (void *)&err, sizeof(err)) == 0 && err) { >>> + errstr = t_strdup_printf( >>> + "%s: socket is defunct", func_name); >>> + break; >>> + } >>> +#endif >> >> Nope, SO_ISDEFUNCT isn't defined. > > Oh, sorry, that needs > > #include <sys/socket.h> > > at the top. If that doesn't work, then which version of the OS are you > building for? AFAICT the DEFUNCT socket flag has been present since at > least 10.5, but the SO_ISDEFUNCT option was only introduced in 10.7. > This is irritating, actually: it means that to properly fix this on all > versions of Mac OS Dovecot would need to include the previous ENOTCONN > code #ifndef SO_ISDEFUNCT. I've got both 10.7 and 10.8 SDKs in Xcode and neither have SO_ISDEFUNCT defined in sys/socket.h (or anywhere else in the usr/include directories) -- there's a SS_DEFUNCT mask defined in sys/socketvar.h -- is that what you're looking for?

2 2

[Dovecot] Update configuration for separate mail directory
by eehmke 06 Dec '12

06 Dec '12

I have a small mail server with virtual users. In my /etc/dovecot/conf.d/10- mail.conf I have this setting: mail_location = maildir:/var/mail/vhosts/%d/%u which is also the home location of each user. Now I learned that this is not the prefered configuration, and in fact some of my sieve subdirectories are mistaken as mail directories. While I understand that I have to create separate mail subdirectories in each user folder, I am not sure where I have to adapt the dovecot configuration files. I could not find a guide, only some scattered hints and of course http://wiki2.dovecot.org/VirtualUsers/Home I guess I have to shut down the server for the reconfiguration, or is there a way to do it on a life system? Eggert -- View this message in context: http://dovecot.2317879.n4.nabble.com/Update-configuration-for-separate-mail… Sent from the Dovecot mailing list archive at Nabble.com.

1 0

[Dovecot] When are search indexes updated?
by David Abrahams 06 Dec '12

06 Dec '12

I noticed that occasionally searching in my huge archive mailbox can be really slow, so I tried doveadm index on it and it seemed to do a lot of work, which seemed strange given, for example, that dovecot-lda says it keeps Dovecot index files up-to-date. Then I thought, "maybe these are different files than the search indices." If so, that's not entirely clear from the docs and Wiki. So, questions: * When are search indexes updated? * Are they updated incrementally? * If not, why not? * If so, why would a mailbox's index drift out-of-date, as mine had? BTW, I'm using the clucene search backend. -- Dave Abrahams BoostPro Computing Software Development Training http://www.boostpro.com Clang/LLVM/EDG Compilers C++ Boost

6 16

[Dovecot] "no longer mounted" warnings
by Dave Abrahams 06 Dec '12

06 Dec '12

Dovecot seems to be warning about every volume it's ever seen in the past. Is this normal? Can I make it stop? --8<---------------cut here---------------start------------->8--- 12/4/12 12:33:38.148 PM dovecot[2658]: master: Warning: /Volumes/fs is no longer mounted. See http://wiki2.dovecot.org/Mountpoints 12/4/12 12:33:38.148 PM dovecot[2658]: master: Warning: /Volumes/dave is no longer mounted. See http://wiki2.dovecot.org/Mountpoints 12/4/12 12:33:38.149 PM dovecot[2658]: master: Warning: /Volumes/Groups is no longer mounted. See http://wiki2.dovecot.org/Mountpoints 12/4/12 12:33:38.149 PM dovecot[2658]: master: Warning: /Volumes/Public is no longer mounted. See http://wiki2.dovecot.org/Mountpoints 12/4/12 12:33:38.149 PM dovecot[2658]: master: Warning: /Volumes/Users is no longer mounted. See http://wiki2.dovecot.org/Mountpoints 12/4/12 12:33:38.149 PM dovecot[2658]: master: Warning: /Volumes/GPGTools is no longer mounted. See http://wiki2.dovecot.org/Mountpoints 12/4/12 12:33:38.149 PM dovecot[2658]: master: Warning: /private/tmp/ccc_dmg_mount.weHZmz is no longer mounted. See http://wiki2.dovecot.org/Mountpoints --8<---------------cut here---------------end--------------->8--- -- Dave Abrahams BoostPro Computing Software Development Training http://www.boostpro.com Clang/LLVM/EDG Compilers C++ Boost

4 4

Re: [Dovecot] imap-login hanging when firewall blocks ssl handshaking
by Erik A Johnson 06 Dec '12

06 Dec '12

On December 4, 2012 at 4:43:53 AM PST, Ben Morrow <ben(a)morrow.me.uk> wrote: > So, it looks to me as though you have a firewall problem. You may be > able to get more information by setting the kern.ipc.sodefunctlog sysctl > to 1: this should make the kernel log to syslog (or wherever the OSX > kernel logs go) when sockets are made DEFUNCT and when reads fail for > that reason. sudo sysctl -w kern.ipc.sodefunctlog=1 gives the following in the log: 12/5/12 9:10:00.000 PM kernel[0]: sosetdefunct[60169]: (target pid 60169 level 0) so 0xffffff803159c738 [2,1] marked as defunct 12/5/12 9:10:00.000 PM kernel[0]: sodefunct[60169]: (target pid 60169 level 0) so 0xffffff803159c738 [2,1] is now defunct [rcv_si 0x0, snd_si 0x0, rcv_fl 0x9400, snd_fl 0x1400] 12/5/12 9:10:00.000 PM kernel[0]: soreceive[60169]: defunct so 0xffffff803159c738 [2,1] (57) The last line is repeated about once every 4 microseconds until I kill it.

1 0

[Dovecot] log_path - expansion possible?
by Robert Blayzor 06 Dec '12

06 Dec '12

Does (or can) the ability to use expansion variables in Dovecot's log_path exist? ie: log_path = /var/log/dovecot/dovecot-%Y%m%d -- Robert Blayzor INOC, LLC rblayzor(a)inoc.net http://www.inoc.net/~rblayzor/

3 5

[Dovecot] dotlock error
by Muhammad Yousuf Khan 05 Dec '12

05 Dec '12

i finally manage to control access on public folder by File system permission. i have 3 test users. 1. tom 2. fmaster 3 . testmail tom and fmaster are a group called "news-own" and testmail user is a readonly one. here is my folder structure ill share dovecot -n output at the end of this email. drwxrwxr-t 2 tom news-own 4.0K Dec 4 19:08 tmp drwxrwxr-t 2 tom news-own 4.0K Dec 4 19:08 new -rwxrwxrwx 1 tom news-own 68 Dec 4 19:08 dovecot-uidlist -rw-rw-r-T 1 fmaster news-own 16K Dec 4 19:10 dovecot.index.cache drwxrwxr-t 2 tom news-own 4.0K Dec 4 19:15 cur -rw-rw-r-T 1 tom news-own 1.1K Dec 4 19:16 dovecot.index.log everything works fine as far as user fmaster and tom is concern as they are member of "news-own" and this group own the mailbox now the problem i face with readonly users. i am getting this error in /var/log/mail.info (against user testmail) file_dotlock_create(/public/.News/dovecot-uidlist) failed: Permission denied (euid=1002(testmail) egid=1002(testmail) missing +w perm: /public/.News at first point i saw this error and i could not subscribe to the folder. and the said log has been generated. now on second stage i change the dovecot-uidlist file permission to "1666" so that testmail user can also write to the file. now problem starts from here, i see two folder one is News and second one is News-1 and i don't know from where the second folder showed up. and when i click on any of the folder my /var/log/mail.info start to show below massage continuously. until i restart the dovecot service. file_dotlock_create(/public/.News/dovecot-uidlist) failed: Permission denied (euid=1002(testmail) egid=1002(testmail) missing +w perm: /public/.News i search google and i saw that people suggested to set stickey bit on which i already did or suggested to stop "dot locking" so i am here to ask is there any way to solve my said problem with out disabling dot locking? or if i stop dot locking what are the consequences? here i my dovcecot -n root@mailsrv:/public/.News# dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.6 log_timestamp: %Y-%m-%d %H:%M:%S ssl_cert_file: /etc/ssl/certs/postfix.pem ssl_key_file: /etc/ssl/private/postfix.key login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mail_location: maildir:~/Maildir:INBOX=~/Maildir/:INDEX=~/Maildir/index mail_debug: yes mbox_write_locks: fcntl dotlock namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: public separator: / prefix: Shared folders/ location: maildir:/public list: yes auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix Thanks in advance, any help or suggestion would be highly appreciated.

2 5

[Dovecot] dovecot backend on director ?
by Thomas Hummel 05 Dec '12

05 Dec '12

Hello Timo, The last time I checked my understanding about director was that : 1. backend/"real" imap servers should not be on the same host (or the same dovecot instance) to avoid proxying loops. Is it still the case with the latest 2.1 stable release ? Is there a plan to be able to run director and real server on the same host, thus requiring only 2 hosts instead of 4 to have load balancing and a redundant director ? 2. director itself was not able or meant to check if one of the real server was down (some script was pointed long time ago in this list). Same questions. 3. you'll have to use dovecot lmtp instead of let's say procmail. Would deliver be still a choice or is lmtp the only deliver compatible choice ? In what case would lmtp be more useful than deliver ? To have some sort of "remote LDA" ? By the way, what gets indexed on deposit on the mailbox since, by definition, the user has not done any request yet ? Thanks. -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Groupe Exploitation et Infrastructure

2 2

Re: [Dovecot] imap-login hanging when firewall blocks ssl handshaking
by Erik A Johnson 05 Dec '12

05 Dec '12

FYI, the tcpdump I sent previously was with one of our previously-discussed patches in place: if (!proxy->client_proxy && net_geterror(proxy->fd_ssl) == EBADF) { I'm attaching that dump again (as tcpdump_output_witholdpatch_headeronly.txt), as well as a dump without any of the patches (tcpdump_output_withoutpatches_headeronly.txt) in case there is any difference. On December 4, 2012 6:18:23 AM PST, Ben Morrow <ben(a)morrow.me.uk> wrote: > At 12PM +0000 on 4/12/12 Ben Morrow wrote: >> Well, it looks to me as though xnu/bsd/kern/uipc_socket.c:soreceive will >> indeed return ENOTCONN for a socket which was once successfully >> connected but has now been disconnected. This happens when the socket is >> in the DEFUNCT state, which is a state that doesn't exist in FreeBSD; >> it's not completely clear but I suspect firewalls may be able to put >> arbitrary sockets into that state. > > Investigating a little further, it should be possible to test for this > situation directly. Assuming I'm correct about what's going on here, > this should be both cleaner and safer than mucking about looking for > ENOTCONN and guessing about what's happening. > > Erik, does this make the problem go away? I left out the > proxy->client_proxy test, since AFAICT this is just as likely to happen > on a client socket. > > Ben > > #ifdef SO_ISDEFUNCT > + if (getsockopt(proxy->fd_ssl, SOL_SOCKET, SO_ISDEFUNCT, > + (void *)&err, sizeof(err)) == 0 && err) { > + errstr = t_strdup_printf( > + "%s: socket is defunct", func_name); > + break; > + } > +#endif Nope, SO_ISDEFUNCT isn't defined.

2 1

[Dovecot] Quotas 2.1clarification
by Nick Edwards 05 Dec '12

05 Dec '12

Timo, I have much suspicion that our quota system is not working correctly since we migrate to 2.1 Currently using 2.1.10 Previously we had for issue of warnings quota_warning = storage=90%% /scripts/dqwarn-90.sh quota_warning2 = storage=75%% /scripts/dqwarn-75.sh worked great, these lines also migrated to new conf upon conversion. But quota conf example shows plugin { #quota_warning = storage=95%% quota-warning 95 %u #quota_warning2 = storage=80%% quota-warning 80 %u } # Example quota-warning service. The unix listener's permissions should be # set in a way that mail processes can connect to it. Below example assumes # that mail processes run as vmail user. If you use mode=0666, all system users # can generate quota warnings to anyone. #service quota-warning { # executable = script /usr/local/bin/quota-warning.sh # user = dovecot # unix_listener quota-warning { # user = vmail # } #} So this seems to indicate /scripts/dqwarn-75.sh should be a service name, which then calls the service quota-warning with that script in it etc etc etc surely this old 4 line method has not been replaced into a 20 line mess? Is this old way still functioning as I suspect it is not, and we need to write up two separate new quota warning services given our warnings are worded differently, or should the old methods still be working as they did in 1.2 and we have an error elsewhere? Niki

2 2

[Dovecot] [OT] MS Exchange Alternative?
by Marc Perkel 05 Dec '12

05 Dec '12

Just wondering if there's an open source Linux alternative to MS Exchange so that all the features of outlook work?

12 14

[Dovecot] doveadm fts optimize undocumented
by Dave Abrahams 04 Dec '12

04 Dec '12

Subject says all. Timo, would you write something up where the world will find it? Also, it would be great if doveadm fts was covered in the doveadm manpage. Thanks, -- Dave Abrahams BoostPro Computing Software Development Training http://www.boostpro.com Clang/LLVM/EDG Compilers C++ Boost

2 6

[Dovecot] Maidir layout : why and how ?
by Thomas Hummel 04 Dec '12

04 Dec '12

Hello Timo, I've been using dovecot from many years now using Maildir mailbox format with default layout (Maildir++, everthing in a single directory). What would be the reason(s) to convert to Layout=fs ? I can only think of one : to allow dots in mailbox names. And even in that case, I guess I still have the option to use the litescape plugin. Besides, how would one process to do the conversion ? Using dsync ? Thanks. -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Groupe Exploitation et Infrastructure

2 1

[Dovecot] CVE-2012-5620
by Timo Sirainen 04 Dec '12

04 Dec '12

This CVE isn't worthy of existence. A user can crash his/her own IMAP session by issuing a specific SEARCH command, which is just slightly worse than user issuing a LOGOUT command. It took years for people to notice this bug, because just about no IMAP client issues such a command.

1 0

[Dovecot] imap-login hanging when firewall blocks ssl handshaking
by Erik A Johnson 04 Dec '12

04 Dec '12

imap-login processes are hanging (using 100% of CPU) when connected from a client that is partially blocked by a firewall. It appears that imap-login is stuck in a loop trying to complete an ssl handshake. imap-login is working fine for other clients not blocked by the firewall (including localhost). This is dovecot 2.1.10 under Mac OS X 10.8.2 (compiled from sources); the firewall is Little Snitch 3.0.1 blocking port 993, which appears to let the connection initiate but then squashes and disconnects the socket during ssl handshaking. gdb backtrace and Activity Monitor's "Sample Process" show that imap-login is stuck calling ioloop-kqueue's io_loop_handler_run -> io_loop_call_io -> ssl_step repeatedly; dtruss shows that it is repeatedly making system calls to kevent and read, the latter returning -1 with errno 57=ENOTCONN="Socket is not connected". (I also tried ./configure --with-ioloop=poll and --with-iopoll=select instead of the default best = kqueue but the results were the same; --with-iopoll=epoll didn't work because epoll is not available on this machine.) The client, initiated by the command "openssl s_client -connect SERVER:993", first responds "CONNECTED(00000003)" but then immediately the error "60278:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:/SourceCache/OpenSSL098/OpenSSL098-44/src/ssl/s23_lib.c:182:". The infinite loop is in src/lib/ioloop.c in the function "io_loop_run" where the statement "while (ioloop->running) io_loop_handler_run(ioloop)" is executed. While I think the firewall is not doing the right thing (i.e., it lets a connection start but then kills it), it seems that imap-login should fail gracefully when the socket is no longer connected. Ideas? Thanks. ----------------------------------- /usr/local/sbin/dovecot -n # 2.1.10: /usr/local/etc/dovecot/dovecot.conf # OS: Darwin 12.2.0 x86_64 default_internal_user = _dovecot default_login_user = _dovenull namespace { hidden = no list = yes location = mbox:/Users/%u/Documents/Mailboxes prefix = mbox/ separator = / type = private } namespace { inbox = yes location = maildir:/Users/%u/Documents/Maildir mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { driver = pam } protocols = imap lmtp ssl = required ssl_cert = </usr/local/etc/dovecot/dovecot.pem ssl_key = </usr/local/etc/dovecot/dovecot.pem userdb { driver = passwd } protocol imap { mail_plugins = " zlib imap_zlib" } ----------------------------------- gdb's "bt full" gives various results depending on where in the loop, but they are they same from ssl23_accept on down. (gdb) bt full #0 0x00007fff92d19f63 in sha1_block_data_order () #1 0x00007fff92d1a4ae in SHA1_Final () #2 0x00007fff92d45430 in EVP_DigestFinal_ex () #3 0x00007fff92d17d7a in ssleay_rand_add () #4 0x00007fff974529be in ssl23_accept () #5 0x000000010cac0729 in ssl_handshake [inlined] () at /private/tmp/johnsone/dovecot-2.1.10/src/login-common/ssl-proxy-openssl.c:465 ret = -949939536 #6 0x000000010cac0729 in ssl_step (proxy=0x7fff53152b90) at ssl-proxy-openssl.c:528 ret = -949939536 #7 0x000000010cb11bd1 in io_loop_call_io (io=0x7f7fa0c1c240) at ioloop.c:379 ioloop = (struct ioloop *) 0x7f7fa0c03b00 t_id = 2 #8 0x000000010cb12c69 in io_loop_handler_run (ioloop=0x0) at ioloop-kqueue.c:148 tv = { tv_sec = 130, tv_usec = 124797 } ctx = (struct ioloop_handler_context *) 0x7f7fa0c1a890 ret = 1 ts = { tv_sec = 130, tv_nsec = 124797000 } events = (struct kevent *) 0x10cb4ee78 #9 0x000000010cb11b88 in io_loop_run (ioloop=0x7fff53152b90) at ioloop.c:398 No locals. #10 0x000000010cafde9b in master_service_run (service=0x7f7fa0c039f0, callback=0x7f7fa0c1c2d8) at master-service.c:543 No locals. #11 0x000000010cabdcd1 in main_deinit [inlined] () at /private/tmp/johnsone/dovecot-2.1.10/src/login-common/main.c:406 set_pool = (pool_t) 0x7f7fa100b420 login_socket = 0x10cb4f7f8 "?9??" #12 0x000000010cabdcd1 in login_binary_run (argc=1, argv=0x7f7fa0c037c0, binary=0x7fff53152b90) at main.c:407 set_pool = (pool_t) 0x7f7fa100b420 login_socket = 0x10cb4f7f8 "?9??" #13 0x00007fff8ac847e1 in start () (gdb) bt full #0 0x00007fff96e4c110 in malloc_zone_malloc () #1 0x00007fff96e4cba7 in malloc () #2 0x00007fff92d2c9e2 in CRYPTO_malloc () #3 0x00007fff92d4535f in EVP_DigestInit_ex () #4 0x00007fff92d17caa in ssleay_rand_add () #5 0x00007fff974529be in ssl23_accept () ... #0 0x00007fff94775ffa in read () #1 0x00007fff92cf41e6 in sock_read () #2 0x00007fff92d15598 in BIO_read () #3 0x00007fff9745294a in ssl23_read_bytes () #4 0x00007fff97452c3e in ssl23_get_client_hello () #5 0x00007fff97452b4d in ssl23_accept () ... -----------------------------------

4 14

[Dovecot] clucene (in)stability
by Dave Abrahams 04 Dec '12

04 Dec '12

Considering two crashing bugs, which have got no response (https://sourceforge.net/tracker/?func=detail&aid=3587525&group_id=80013&ati… and https://sourceforge.net/tracker/?func=detail&aid=3592291&group_id=80013&ati…) and the lack of activity in its Git repository, I am inclined to think that CLucene's current release series (e.g. 2.3.3.4) should be considered unsuitable for serious use (including with Dovecot). I'm going to try CLucene 0.9.21, which they claim has been "proven to be stable over time" (see http://clucene.sourceforge.net) and see how it works out. I wonder if there's a future envisioned for FTS with Dovecot that's suitable for small installations (i.e. doesn't require a Solr server) and has a good chance of correctness and stability? -- Dave Abrahams BoostPro Computing Software Development Training http://www.boostpro.com Clang/LLVM/EDG Compilers C++ Boost

2 2

[Dovecot] Store mailbox usage in mysql not just the limit
by tibby＠tibby.hu 03 Dec '12

03 Dec '12

Hello! I have dovecot working using mysql for auth and mailbox quota. in the mail database I have a user table with colums for: email, password, quota_kb, quota_messages I want to make a php script that would get the quota_kb and substract the usage to display the total free space left for mail usage. How can I do this? Is there a function in dovecot to store the current usage per mailbox ? Thanks!

2 1

[Dovecot] Gmail style conversations
by Romer Ventura 03 Dec '12

03 Dec '12

Hello, I am wondering if there is any way to support Gmail style conversation when using Dovecot? Someway of associating all inbound and sent emails..? I know that some clients let you display the emails in "conversation" which kinda does what Gmail does, however, it does not associate the Sent emails with it. Thanks for any information. <BR CLEAR="ALL"> <hr style="border: 1px solid #CCC;"> <p style="font-style:italic; font-size:8pt; font-family:verdana; color:gray;">This document and attachments may contain technical data controlled under the U.S. International Traffic in Arms Regulations (ITAR) or the Export Administration Regulations (EAR) and may not be exported to a Foreign Person, either in the U.S. or abroad, without the proper authorization by the U.S. Department of State or Department of Commerce, whichever is applicable. CONFIDENTIALITY NOTE: This electronic transmission, including all attachments, is directed in confidence solely to the person(s) to whom it is addressed, or an authorized recipient, and may not otherwise be distributed, copied or disclosed. The contents of the transmission may also be subject to intellectual property rights and such rights are expressly claimed and are not waived. If you have received this transmission in error, please notify the sender immediately by return electronic transmission and then immediately delete this transmission, including all attachments, without copying, distributing or disclosing same. The recipient should check this e-mail and any attachments for the presence of viruses. Houston Sigma Technologies L.P. accepts no liability for any damage caused by any virus transmitted by this e-mail.</p>

3 2

[Dovecot] pop3-login: Error: SSL: Stacked error:
by Frank Bonnet 03 Dec '12

03 Dec '12

Hello again I have few messages in dovecot.log like the following : Dec 03 15:52:07 pop3-login: Error: SSL: Stacked error: error:140943F2:SSL routines:SSL3_READ_BYTES:sslv3 alert unexpected message: SSL alert number 10 Anyone could tell what does this means ? Thank you

1 0

[Dovecot] conversion MBOX -->Maildir
by Frank Bonnet 03 Dec '12

03 Dec '12

Hello I would like to start MBOX to Maildir conversion at 2.1.12 what would be the safest method to perform this ? wiki2 says the following , is it up to date ? mbox -> maildir migration. Set mail_location=maildir:~/Maildir and run dsync -u username mirror mbox:~/mail:INBOX=/var/mail/username thank you

1 0

[Dovecot] sieve problem after upgrade to 2.1.12
by Daniel Funke 03 Dec '12

03 Dec '12

Hi, I have a sieve filter for a mailbox with amavisd-admin mails. if header :regex "Subject" "^INVALID HEADER" { fileinto "INVALID HEADER"; } After the upgrade to dovecot 2.1.12 this filter doesn't work for some (16) messages with this subject. For 424 messages it worked correct. Any ideas where to look? Bye Daniel

2 2

[Dovecot] Thunderbird SSL/TLS client authentication fails
by Roger Hunen 03 Dec '12

03 Dec '12

Hi, This is my first post to the list, so greetings to you all! I am seeking your help with SSL/TLS client authentication. I currently have the following setup: * Server: - Debian Squeeze (fully patched) - OpenSSL 0.9.8o - Dovecot v2.1.10 (Debian backport package from Wheezy) - SSL listener on port 993 with the Dovecot selfsigned certificate that was created during installation - Virtual users (user(a)domain.net) with password in passwd style file * Client: - Windows XP SP3 (fully patched) - Thunderbird 17.0 - IMAP account using "Normal password" authentication - Roundcube webmail (to be added soon) This works just fine :) ==> I now want to set Thunderbird to use "TLS certificate" authentication so that I can safely expose port 993 to the internet for mobile use. The idea is that clients with a trusted client certificate do not need a password so that I can change my password for Roundcube without having to change passwords on other IMAP clients (Roundcube will connect to localhost without SSL). To do so I did the following: - use XCA (v0.9.3, Windows version) to setup a private root CA with a CRL - export root CA certificate and CRL in PEM format and join them into a ca.pem file (order: certificate, CRL) - configure Dovecot to use the ca.pem file and require a client certificate - use XCA to generate a private key and certificate for commonName=user(a)mydomain.net - import certificate and private key into Thunderbird - change IMAP account setting in Thunderbird to use "TLS Certificate" authentication - When prompted, select the imported certificate to be used for authentication. Unfortunately the authentication fails :( Using "verbose_ssl=yes" I can see in the Dovecot logfile that Thunderbird connects and that the SSL handshake completes successfully. "Valid certificate" is logged for both client certificate and root CA certificate. This looks "so far so good" to me :) The Dovecot log has the following lines at the point of failure: imap-login: Warning: SSL alert: where=0x4004, ret=256: warning close notify [<IP>] imap-login: Warning: SSL alert: where=0x4008, ret=256: warning close notify [<IP>] imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=<IP>, lip=<IP>, TLS, session=<ID> (IP address and TLS session ID removed) The last log line ("user=<>") suggests that Dovecot does not try to use the commonName from the client certificate as the username even though (I think) I have configured Dovecot to do so. The relevant lines in the Dovecot configuration are: <config> auth_mechanisms = plain auth_ssl_require_client_cert = yes auth_ssl_username_from_cert = yes disable_plaintext_auth = yes protocols = imap ssl = yes ssl_ca = </etc/dovecot/ssl/ca.pem ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cert_username_field = commonName ssl_key = </etc/ssl/private/dovecot.pem ssl_parameters_regenerate = 0 ssl_require_crl = yes ssl_verify_client_cert = yes service imap-login { chroot = login process_min_avail = 1 service_count = 1 inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } </config> Observation: with "auth_ssl_require_client_cert = yes" Dovecot requires Thunderbird to send the client certificate even when Thunderbird uses "Normal password" authentication (authentication only fails if I delete the certificate from Thunderbird). So the SSL part looks OK to me. It seems that Dovecot is waiting for the client to logon over the established SSL/TLS connection instead of taking the username from the commonName in the certificate. ==> What could be going wrong here? I can post full config and logfile lines if you wnt to. Except for some possible oversight on my behalf there is nothing secret in there (I just didn't want to add too many lines to this already long post). Regards, -Roger

2 2

[Dovecot] Connection closed by foreign host.
by 张昊 03 Dec '12

03 Dec '12

hi, when i telnet 127.0.0.1 110,input the username and password,echo the error: Connection closed by foreign host. THE CONFIG: [root@www fuse-dfs]# dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.el6.i686 i686 CentOS Linux release 6.0 (Final) listen = * login_trusted_networks = 10.12.0.0/16 mail_location = mbox:~/mail:INBOX=/var/mail/%u mbox_write_locks = fcntl passdb { driver = pam } protocols = pop3 ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } THE LOG: Dec 3 14:29:13 www dovecot: pop3-login: Aborted login (auth failed, 1 attempts): user=<zhanghao(a)zhanghao.com>, method=PLAIN, rip=10.12.3.1, lip=10.12.3.101, secured Dec 3 14:29:17 www dovecot: auth: Error: userdb(zhanghao,10.12.3.1): user not found from userdb passwd Dec 3 14:29:17 www dovecot: pop3: Error: Authenticated user not found from userdb, auth lookup id=3926917121 (client-pid=8774 client-id=1) Dec 3 14:29:17 www dovecot: pop3-login: Internal login failure (pid=8774 id=1) (auth failed, 1 attempts): user=<zhanghao>, method=PLAIN, rip=10.12.3.1, lip=10.12.3.101, mpid=8775, secured thank you very much! Best Regards 北京信联云通科技有限责任公司 Beijing Octopus link Co. Ltd 北京市海淀区北四环中路257号科群大厦西区 607 技术服务部张昊手机：13810705782 Email: support(a)octlink.com

1 0

[Dovecot] IMAP+SSL
by jugree＠lavabit.com 03 Dec '12

03 Dec '12

Hi. I've already posted on the list (0), but I can't access that account. I don't want to hijack that thread that's why I decided to create this one. > Please don't trim the doveconf -n output... > It shows the version of dovecot (so no one has to ask)... I'm using 1.2.15. (0) http://dovecot.org/pipermail/dovecot/2012-November/069665.html

1 0

[Dovecot] 回复： 2.1.12 - Pigeonhole 0.3.3 build failed: /usr/bin/ld: cannot find -lssl -lcrypto
by Sam DWH 01 Dec '12

01 Dec '12

Did you installed openssh? Tobias Hachmer <lists(a)kokelnet.de>编写： >Hello list, > >Although timos bugfix release this morning I can't build pigeonhole 0.3.3 for >dovecot 2.1.12 successfully. I don't know if it is a new bug or if I do >something wrong but with dovecot 2.1.10 all worked fine, with the same configure >options. > >configure options (out of debian/rules for building debian package): > >./configure --with-dovecot=/usr/lib/dovecot \ > --host=$(DEB_HOST_GNU_TYPE) \ > --build=$(DEB_BUILD_GNU_TYPE) \ > --prefix=/usr \ > --sysconfdir=/etc \ > --libexecdir=\$${prefix}/lib \ > --localstatedir=/var \ > --mandir=\$${prefix}/share/man \ > --infodir=\$${prefix}/share/info \ > --with-moduledir=\$${prefix}/lib/dovecot/modules > > >buildlogextraction with error, the full log is available here: >https://launchpadlibrarian.net/124478979/buildlog_ubuntu-precise- >amd64.dovecot-2.1-pigeonhole_0.3.3-7~kokelnet~precise_FAILEDTOBUILD.txt.gz > >Thanks in advance for any help, >Tobias Hachmer > >Making all in lib-sieve-tool >make[4]: Entering directory `/build/buildd/dovecot-2.1- >pigeonhole-0.3.3/src/lib-sieve-tool' >/bin/bash ../../libtool --tag=CC --mode=compile x86_64-linux-gnu-gcc - >DHAVE_CONFIG_H -I. -I../.. -I../../src/lib-sieve -I/usr/include/dovecot - >D_FORTIFY_SOURCE=2 -std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer- >size=4 -Wformat -Wformat-security -Wall -W -Wmissing-prototypes -Wmissing- >declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast >-fno-builtin-strftime -Wstrict-aliasing=2 -MT sieve-tool.lo -MD -MP -MF >.deps/sieve-tool.Tpo -c -o sieve-tool.lo sieve-tool.c >libtool: compile: x86_64-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. - >I../../src/lib-sieve -I/usr/include/dovecot -D_FORTIFY_SOURCE=2 -std=gnu99 -g >-O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat-security - >Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar- >subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict- >aliasing=2 -MT sieve-tool.lo -MD -MP -MF .deps/sieve-tool.Tpo -c sieve-tool.c >-fPIC -DPIC -o .libs/sieve-tool.o >libtool: compile: x86_64-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. - >I../../src/lib-sieve -I/usr/include/dovecot -D_FORTIFY_SOURCE=2 -std=gnu99 -g >-O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat-security - >Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar- >subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict- >aliasing=2 -MT sieve-tool.lo -MD -MP -MF .deps/sieve-tool.Tpo -c sieve-tool.c >-o sieve-tool.o >/dev/null 2>&1 >mv -f .deps/sieve-tool.Tpo .deps/sieve-tool.Plo >/bin/bash ../../libtool --tag=CC --mode=compile x86_64-linux-gnu-gcc - >DHAVE_CONFIG_H -I. -I../.. -I../../src/lib-sieve -I/usr/include/dovecot - >D_FORTIFY_SOURCE=2 -std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer- >size=4 -Wformat -Wformat-security -Wall -W -Wmissing-prototypes -Wmissing- >declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast >-fno-builtin-strftime -Wstrict-aliasing=2 -MT mail-raw.lo -MD -MP -MF >.deps/mail-raw.Tpo -c -o mail-raw.lo mail-raw.c >libtool: compile: x86_64-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. - >I../../src/lib-sieve -I/usr/include/dovecot -D_FORTIFY_SOURCE=2 -std=gnu99 -g >-O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat-security - >Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar- >subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict- >aliasing=2 -MT mail-raw.lo -MD -MP -MF .deps/mail-raw.Tpo -c mail-raw.c -fPIC >-DPIC -o .libs/mail-raw.o >libtool: compile: x86_64-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. - >I../../src/lib-sieve -I/usr/include/dovecot -D_FORTIFY_SOURCE=2 -std=gnu99 -g >-O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat-security - >Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar- >subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict- >aliasing=2 -MT mail-raw.lo -MD -MP -MF .deps/mail-raw.Tpo -c mail-raw.c -o >mail-raw.o >/dev/null 2>&1 >mv -f .deps/mail-raw.Tpo .deps/mail-raw.Plo >/bin/bash ../../libtool --tag=CC --mode=link x86_64-linux-gnu-gcc - >std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat- >security -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith >-Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime - >Wstrict-aliasing=2 -Wl,-Bsymbolic-functions -Wl,-z,relro -o libsieve-tool.la >sieve-tool.lo mail-raw.lo -lrt >libtool: link: ar cru .libs/libsieve-tool.a .libs/sieve-tool.o .libs/mail- >raw.o >libtool: link: ranlib .libs/libsieve-tool.a >libtool: link: ( cd ".libs" && rm -f "libsieve-tool.la" && ln -s "../libsieve- >tool.la" "libsieve-tool.la" ) >make[4]: Leaving directory `/build/buildd/dovecot-2.1- >pigeonhole-0.3.3/src/lib-sieve-tool' >Making all in sieve-tools >make[4]: Entering directory `/build/buildd/dovecot-2.1- >pigeonhole-0.3.3/src/sieve-tools' >x86_64-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib-sieve - >I../../src/lib-sieve-tool -I./debug -I/usr/include/dovecot - >D_FORTIFY_SOURCE=2 -std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer- >size=4 -Wformat -Wformat-security -Wall -W -Wmissing-prototypes -Wmissing- >declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast >-fno-builtin-strftime -Wstrict-aliasing=2 -MT sievec.o -MD -MP -MF >.deps/sievec.Tpo -c -o sievec.o sievec.c >mv -f .deps/sievec.Tpo .deps/sievec.Po >/bin/bash ../../libtool --tag=CC --mode=link x86_64-linux-gnu-gcc - >std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat- >security -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith >-Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime - >Wstrict-aliasing=2 -export-dynamic -Wl,-Bsymbolic-functions -Wl,-z,relro -o >sievec sievec.o ../../src/lib-sieve/libdovecot-sieve.la ../../src/lib-sieve- >tool/libsieve-tool.la -ldovecot-storage -lssl -lcrypto -ldovecot-lda - >L/usr/lib/dovecot -ldovecot -lrt >libtool: link: x86_64-linux-gnu-gcc -std=gnu99 -g -O2 -fstack-protector -- >param=ssp-buffer-size=4 -Wformat -Wformat-security -Wall -W -Wmissing- >prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 >-Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -Wl,-Bsymbolic- >functions -Wl,-z -Wl,relro -o .libs/sievec sievec.o -Wl,--export-dynamic >../../src/lib-sieve/.libs/libdovecot-sieve.so ../../src/lib-sieve- >tool/.libs/libsieve-tool.a /usr/lib/dovecot/libdovecot-storage.so -lssl - >lcrypto /usr/lib/dovecot/libdovecot-lda.so -L/usr/lib/dovecot >/usr/lib/dovecot/libdovecot.so -lrt -Wl,-rpath -Wl,/usr/lib/dovecot >/usr/bin/ld: cannot find -lssl >/usr/bin/ld: cannot find -lcrypto >collect2: ld returned 1 exit status >make[4]: *** [sievec] Error 1 >make[4]: Leaving directory `/build/buildd/dovecot-2.1- >pigeonhole-0.3.3/src/sieve-tools' >make[3]: *** [all-recursive] Error 1 >make[3]: Leaving directory `/build/buildd/dovecot-2.1-pigeonhole-0.3.3/src' >make[2]: *** [all-recursive] Error 1 >make[2]: Leaving directory `/build/buildd/dovecot-2.1-pigeonhole-0.3.3' >make[1]: *** [all] Error 2 >make[1]: Leaving directory `/build/buildd/dovecot-2.1-pigeonhole-0.3.3' >make: *** [build-stamp] Error 2

2 1

[Dovecot] Redelivery of mdbox messages to pass through sieve
by Hugh Davenport 01 Dec '12

01 Dec '12

Hey, I've been slack and haven't updated my sieve script for yonks, and finally got round to it. What I was wondering is whether there was a way to basically take all the messages from a folder and pass it through sieve again. I've found earlier messages in this list, but they were for Maildir format, not mdbox which I use now. Does anyone know of a way to do this? Cheers, Hugh

2 2

[Dovecot] Maildir conversion
by Aristidis Fesarlis 30 Nov '12

30 Nov '12

Hi all, I am using Dovecot 1.2.7, and trying to do my first Mbox to Maildir conversion. So I created a small script: > #!/bin/bash > > ls > userlist.txt > > for i in `cat userlist.txt`; do > echo "---------------------"; > echo "Converting user $i..."; > echo "---------------------"; > > su - $i -s /bin/bash -c "/opt/scripts/mb2md.pl -s mail -R"; > su - $i -s /bin/bash -c "/opt/scripts/mb2md.pl -m -s > /var/mail/$i"; > su - $i -s /bin/bash -c "cp ~$i/mail/.subscriptions > ~$i/Maildir/subscriptions"; > done > > rm -f userlist.txt I would like some help with the following: 1. Trying it, I get multiple warnings for some mailboxes like this: > "WARNING: UID from X-UID: header too low. Ignoring it Is this a problem? Or I can ignore it? 2. I understand that I also have to instruct my MDA (procmail) to deliver mail to the new location. I found that I have to create an /etc/procmailrc with the following line: > DEFAULT=$HOME/Maildir/ My question is: Some users have their own .procmailrc file inside their home directory, to filter mail etc. Their file does not contain the above statement. Would the default procmailrc file be processed for them as well? Or their file takes precedence, causing the default file not to be processed at all? Thank you

2 1

[Dovecot] Newbie Basic ACL issue
by Muhammad Yousuf Khan 30 Nov '12

30 Nov '12

i can not impliment a basic acl to a /public/.News folder. however with out ACL it works great but after implementing acl "Public" folder can be seen while subscribing but i can not create folder inside it nor i can view already created ".News" folder. when i restart dovecot it shows me some thing like this root@mailsrv:/public/.News# /etc/init.d/dovecot restart Restarting IMAP/POP3 mail server: dovecotILoading modules from directory: /usr/lib/dovecot/modules/imap IModule loaded: /usr/lib/dovecot/modules/imap/lib01_acl_plugin.so IModule loaded: /usr/lib/dovecot/modules/imap/lib02_imap_acl_plugin.so IEffective uid=65534, gid=65534, home=/tmp Iacl: No acl_shared_dict setting - shared mailbox listing is disabled root@mailsrv:/public/.News# dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.6 log_timestamp: %Y-%m-%d %H:%M:%S ssl_cert_file: /etc/ssl/certs/postfix.pem ssl_key_file: /etc/ssl/private/postfix.key login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mail_location: maildir:~/Maildir:INBOX=~/Maildir/:INDEX=~/Maildir/index mail_debug: yes mbox_write_locks: fcntl dotlock mail_plugins: acl imap_acl namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: public separator: / prefix: Public/ location: maildir:/public:INDEX=/public/index list: yes subscriptions: yes lda: mail_plugins: acl auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix plugin: acl: vfile as i read in few howto's that "dovecot-acl" file should be placed in the mail publish folder like in my case "/public/.News/dovecot-acl" here is the output of my file root@mailsrv:/public/.News# cat dovecot-acl owner lrwstipekxa anyone= lr now after this implimentation i can see the folder "Public" in subscription now when i try to create a new folder inside ".News" folder via outlook 2007 it says "cannot move the item. the server responded: 'NOPERM] Permission denied" i think i am messed up permission actually i have 2 users "tom" and "fmaster" both doing the same thing. weather i write this "anyone lrwstpekxa" or "user=tom lrwstpekxa" it does the same for both user what i want is just a simple thing. i want tom to be the owner of .News and fmaster has read only. so he can only read the news but can not delete even can not change the flag to read or unread. Note: both are system users (not virtual users) Nov 30 20:50:42 mailsrv dovecot: IMAP(fmaster): open(/public/.News/dovecot-uidlist) failed: Permission denied Nov 30 20:50:42 mailsrv dovecot: IMAP(fmaster): open(/public/.News/dovecot-uidlist) failed: Permission denied Nov 30 20:54:45 mailsrv dovecot: IMAP(fmaster): open(/public/index/.News/dovecot.index.log) failed: Permission denied (euid=1001(fmaster) egid=1001(fmaster) missing +w perm: /public/index/.News/dovecot.index.log) Nov 30 20:54:50 mailsrv dovecot: IMAP(fmaster): open(/public/index/.News/dovecot.index.log) failed: Permission denied (euid=1001(fmaster) egid=1001(fmaster) missing +w perm: /public/index/.News/dovecot.index.log) i thought its a system level permission issue so i pass this command "chmod 777 /public -R" but still i receive the same outlook error but no errors in /var/log/mail.err. please hell me what kind of user right should be on the .News folder. for example, tom or root which one should have the "rwx" rights on the folder. and what kind of changes should i made in deovecot-acl any help, tip would be highly appreciated. Thanks,

1 0

[Dovecot] 2.1.12 - Pigeonhole 0.3.3 build failed: /usr/bin/ld: cannot find -lssl -lcrypto
by Tobias Hachmer 30 Nov '12

30 Nov '12

Hello list, Although timos bugfix release this morning I can't build pigeonhole 0.3.3 for dovecot 2.1.12 successfully. I don't know if it is a new bug or if I do something wrong but with dovecot 2.1.10 all worked fine, with the same configure options. configure options (out of debian/rules for building debian package): ./configure --with-dovecot=/usr/lib/dovecot \ --host=$(DEB_HOST_GNU_TYPE) \ --build=$(DEB_BUILD_GNU_TYPE) \ --prefix=/usr \ --sysconfdir=/etc \ --libexecdir=\$${prefix}/lib \ --localstatedir=/var \ --mandir=\$${prefix}/share/man \ --infodir=\$${prefix}/share/info \ --with-moduledir=\$${prefix}/lib/dovecot/modules buildlogextraction with error, the full log is available here: https://launchpadlibrarian.net/124478979/buildlog_ubuntu-precise- amd64.dovecot-2.1-pigeonhole_0.3.3-7~kokelnet~precise_FAILEDTOBUILD.txt.gz Thanks in advance for any help, Tobias Hachmer Making all in lib-sieve-tool make[4]: Entering directory `/build/buildd/dovecot-2.1- pigeonhole-0.3.3/src/lib-sieve-tool' /bin/bash ../../libtool --tag=CC --mode=compile x86_64-linux-gnu-gcc - DHAVE_CONFIG_H -I. -I../.. -I../../src/lib-sieve -I/usr/include/dovecot - D_FORTIFY_SOURCE=2 -std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer- size=4 -Wformat -Wformat-security -Wall -W -Wmissing-prototypes -Wmissing- declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -MT sieve-tool.lo -MD -MP -MF .deps/sieve-tool.Tpo -c -o sieve-tool.lo sieve-tool.c libtool: compile: x86_64-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. - I../../src/lib-sieve -I/usr/include/dovecot -D_FORTIFY_SOURCE=2 -std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat-security - Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar- subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict- aliasing=2 -MT sieve-tool.lo -MD -MP -MF .deps/sieve-tool.Tpo -c sieve-tool.c -fPIC -DPIC -o .libs/sieve-tool.o libtool: compile: x86_64-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. - I../../src/lib-sieve -I/usr/include/dovecot -D_FORTIFY_SOURCE=2 -std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat-security - Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar- subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict- aliasing=2 -MT sieve-tool.lo -MD -MP -MF .deps/sieve-tool.Tpo -c sieve-tool.c -o sieve-tool.o >/dev/null 2>&1 mv -f .deps/sieve-tool.Tpo .deps/sieve-tool.Plo /bin/bash ../../libtool --tag=CC --mode=compile x86_64-linux-gnu-gcc - DHAVE_CONFIG_H -I. -I../.. -I../../src/lib-sieve -I/usr/include/dovecot - D_FORTIFY_SOURCE=2 -std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer- size=4 -Wformat -Wformat-security -Wall -W -Wmissing-prototypes -Wmissing- declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -MT mail-raw.lo -MD -MP -MF .deps/mail-raw.Tpo -c -o mail-raw.lo mail-raw.c libtool: compile: x86_64-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. - I../../src/lib-sieve -I/usr/include/dovecot -D_FORTIFY_SOURCE=2 -std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat-security - Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar- subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict- aliasing=2 -MT mail-raw.lo -MD -MP -MF .deps/mail-raw.Tpo -c mail-raw.c -fPIC -DPIC -o .libs/mail-raw.o libtool: compile: x86_64-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. - I../../src/lib-sieve -I/usr/include/dovecot -D_FORTIFY_SOURCE=2 -std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat-security - Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar- subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict- aliasing=2 -MT mail-raw.lo -MD -MP -MF .deps/mail-raw.Tpo -c mail-raw.c -o mail-raw.o >/dev/null 2>&1 mv -f .deps/mail-raw.Tpo .deps/mail-raw.Plo /bin/bash ../../libtool --tag=CC --mode=link x86_64-linux-gnu-gcc - std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat- security -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime - Wstrict-aliasing=2 -Wl,-Bsymbolic-functions -Wl,-z,relro -o libsieve-tool.la sieve-tool.lo mail-raw.lo -lrt libtool: link: ar cru .libs/libsieve-tool.a .libs/sieve-tool.o .libs/mail- raw.o libtool: link: ranlib .libs/libsieve-tool.a libtool: link: ( cd ".libs" && rm -f "libsieve-tool.la" && ln -s "../libsieve- tool.la" "libsieve-tool.la" ) make[4]: Leaving directory `/build/buildd/dovecot-2.1- pigeonhole-0.3.3/src/lib-sieve-tool' Making all in sieve-tools make[4]: Entering directory `/build/buildd/dovecot-2.1- pigeonhole-0.3.3/src/sieve-tools' x86_64-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib-sieve - I../../src/lib-sieve-tool -I./debug -I/usr/include/dovecot - D_FORTIFY_SOURCE=2 -std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer- size=4 -Wformat -Wformat-security -Wall -W -Wmissing-prototypes -Wmissing- declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -MT sievec.o -MD -MP -MF .deps/sievec.Tpo -c -o sievec.o sievec.c mv -f .deps/sievec.Tpo .deps/sievec.Po /bin/bash ../../libtool --tag=CC --mode=link x86_64-linux-gnu-gcc - std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat- security -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime - Wstrict-aliasing=2 -export-dynamic -Wl,-Bsymbolic-functions -Wl,-z,relro -o sievec sievec.o ../../src/lib-sieve/libdovecot-sieve.la ../../src/lib-sieve- tool/libsieve-tool.la -ldovecot-storage -lssl -lcrypto -ldovecot-lda - L/usr/lib/dovecot -ldovecot -lrt libtool: link: x86_64-linux-gnu-gcc -std=gnu99 -g -O2 -fstack-protector -- param=ssp-buffer-size=4 -Wformat -Wformat-security -Wall -W -Wmissing- prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -Wl,-Bsymbolic- functions -Wl,-z -Wl,relro -o .libs/sievec sievec.o -Wl,--export-dynamic ../../src/lib-sieve/.libs/libdovecot-sieve.so ../../src/lib-sieve- tool/.libs/libsieve-tool.a /usr/lib/dovecot/libdovecot-storage.so -lssl - lcrypto /usr/lib/dovecot/libdovecot-lda.so -L/usr/lib/dovecot /usr/lib/dovecot/libdovecot.so -lrt -Wl,-rpath -Wl,/usr/lib/dovecot /usr/bin/ld: cannot find -lssl /usr/bin/ld: cannot find -lcrypto collect2: ld returned 1 exit status make[4]: *** [sievec] Error 1 make[4]: Leaving directory `/build/buildd/dovecot-2.1- pigeonhole-0.3.3/src/sieve-tools' make[3]: *** [all-recursive] Error 1 make[3]: Leaving directory `/build/buildd/dovecot-2.1-pigeonhole-0.3.3/src' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/build/buildd/dovecot-2.1-pigeonhole-0.3.3' make[1]: *** [all] Error 2 make[1]: Leaving directory `/build/buildd/dovecot-2.1-pigeonhole-0.3.3' make: *** [build-stamp] Error 2

2 2

[Dovecot] v2.1.12 released
by Timo Sirainen 30 Nov '12

30 Nov '12

http://dovecot.org/releases/2.1/dovecot-2.1.12.tar.gz http://dovecot.org/releases/2.1/dovecot-2.1.12.tar.gz.sig The dovecot-config file installed by v2.1.11 was missing quotes, which broke building Pigeonhole. This release fixes that.

2 1

[Dovecot] v2.1.11 released
by Timo Sirainen 30 Nov '12

30 Nov '12

http://dovecot.org/releases/2.1/dovecot-2.1.11.tar.gz http://dovecot.org/releases/2.1/dovecot-2.1.11.tar.gz.sig * lmtp/lda: dovecot.index.cache file is no longer fully mapped to memory, allowing mail deliveries to work even if the file is huge. * auth: userdb passwd lookups are now done by auth worker processes instead of auth master process (as it was documented, but accidentally didn't work that way). + lmtp: lmtp_rcpt_check_quota=yes setting checks quota on RCPT TO. - lmtp: After successful proxying RCPT TO, the next one to a nonexistent user gave tempfail error instead of "user not found". - lmtp proxy: Fixed hanging if remote server was down. - imap: Fixed crash when SEARCH contained multiple KEYWORD parameters. - doveadm: Various fixes to handling doveadm-server connections. - -i <instance name> parameter for Dovecot tools didn't work correctly. - director was somewhat broken in v2.1.10. This version also includes various reliability enhancements. - auth: passdb imap was broken in v2.1.10.

2 1

Re: [Dovecot] Tcpflow capture
by Daniel L. Miller 30 Nov '12

30 Nov '12

On 11/29/2012 9:32 PM, Daniel L. Miller wrote: > > I (hopefully) fixed my config - put 'zlib' into 10-mail.conf and > removed it from the others. Re-indexing is now good on some mailboxes > that were broken before - but I still have a fault on others. > Using the tcpflow dump, I found a couple bad messages that I didn't care about storing - so I deleted them. Then, after no change - I remembered to do a "compact" in my MUA. That cleared up one mailbox - then dovecot complained about various errors & corruption on another mailbox. So I'll start a new thread for that as it looks like the solr interface is now good! -- Daniel

2 2

[Dovecot] mdbox corruption
by Daniel L. Miller 30 Nov '12

30 Nov '12

Trying to clean up the last of the corruption caused by my own stupidity. I now have two mailboxes for one user that give errors such as: doveadm(fax(a)amfes.com): Error: zlib.read(/var/mail/amfes.com/fax/mdbox/storage/m.9): gz trailer has wrong CRC value at 20065618 doveadm(fax(a)amfes.com): Error: read(/var/mail/amfes.com/fax/mdbox/storage/m.9) failed: Invalid argument (uid=238) doveadm(fax(a)amfes.com): Error: zlib.read(/var/mail/amfes.com/fax/mdbox/storage/m.9): corrupted data at 20145217 [...] doveadm(fax(a)amfes.com): Error: read(/var/mail/amfes.com/fax/mdbox/storage/m.20) failed: Invalid argument (uid=5155) doveadm(fax(a)amfes.com): Error: zlib.read(/var/mail/amfes.com/fax/mdbox/storage/m.20): corrupted data at 24779604 doveadm(fax(a)amfes.com): Error: Cached message size smaller than expected (1259 < 1260) doveadm(fax(a)amfes.com): Error: Corrupted index cache file /var/mail/amfes.com/fax/mdbox/mailboxes/INBOX/2010/dbox-Mails/dovecot.index.cache: Broken physical size for mail UID 5158 'doveadm force-resync' does not appear to fix these. There appear to be only the two mdbox files affected and I see about 40 errors. I would prefer to salvage as much as possible of these. What options do I have? Do a dsync to another location and take whatever I get? -- Daniel

2 1

Re: [Dovecot] Tcpflow capture
by Daniel L. Miller 30 Nov '12

30 Nov '12

On 11/29/2012 12:49 PM, Timo Sirainen wrote: > On 29.11.2012, at 18.06, Daniel L. Miller wrote: > >> On 11/28/2012 10:37 PM, Timo Sirainen wrote: >>> On 29.11.2012, at 7.47, Daniel L. Miller wrote: >>> >>>>> doveadm fetch text -u amiller(a)amfes.com mailbox-guid a47e4e264aa1c94cc35100003bc41c5f uid 12891 >>>>> >>>> The result of that, when adding a "> test", generates a 11 byte file. >>>> >>>> Hexedit shows me that as: >>>> 74 65 78 74 3A 0A 1F 8B 08 0C 0A >>>> >>>> Otherwise a simple 'less' give me: >>>> text: >>>> ^_<8B>^H^L >>>> >>>> Does this tell you anything? >>> First of all it tells me that you either have some very corrupted messages in your mailbox, or you have some compressed messages but without zlib plugin enabled. >> 10-mail.conf - mail_plugins = fts fts_solr acl >> 15-lda.conf - mail_plugins = $mail_plugins sieve >> 20-imap.conf - mail_plugins = $mail_plugins zlib imap_acl >> 20-lmtp.conf - mail_plugins = $mail_plugins sieve > OK, so all of the compressed mails will be indexed as garbage. > >> My intent was to be able to read zlib mails, but not write new ones. I may change this to just have zlib in 10-mail and start writing compressed. Unless this is/will cause corruption. > Enabling zlib plugin doesn't enable compression on writing. plugin { zlib_save=yes } is required for that. > I (hopefully) fixed my config - put 'zlib' into 10-mail.conf and removed it from the others. Re-indexing is now good on some mailboxes that were broken before - but I still have a fault on others. -- Daniel

1 0

[Dovecot] cmd-vacation.c:4:17: fatal error: lib.h: No such file or directory && ./configure: line 11410: -lssl: command not found
by Tobias Hachmer 29 Nov '12

29 Nov '12

Hello Timo, Building 2.1.11 was ok, but rebuilding pigeonhole 0.3.3 for dovecot 2.1.11 show up the following errors: checking for dovecot-config in "/usr/lib/dovecot"... /usr/lib/dovecot/dovecot- config ./configure: line 11410: -lssl: command not found checking whether OS supports plugin dependencies... yes configure: creating ./config.status config.status: creating Makefile config.status: creating doc/Makefile config.status: creating doc/man/Makefile config.status: creating doc/example-config/Makefile config.status: creating doc/example-config/conf.d/Makefile config.status: creating doc/rfc/Makefile config.status: creating src/Makefile config.status: creating src/lib-sieve/Makefile config.status: creating src/lib-sieve/plugins/Makefile config.status: creating src/lib-sieve/plugins/vacation/Makefile config.status: creating src/lib-sieve/plugins/subaddress/Makefile config.status: creating src/lib-sieve/plugins/comparator-i-ascii- numeric/Makefile config.status: creating src/lib-sieve/plugins/relational/Makefile config.status: creating src/lib-sieve/plugins/regex/Makefile config.status: creating src/lib-sieve/plugins/imap4flags/Makefile config.status: creating src/lib-sieve/plugins/copy/Makefile config.status: creating src/lib-sieve/plugins/include/Makefile config.status: creating src/lib-sieve/plugins/body/Makefile config.status: creating src/lib-sieve/plugins/variables/Makefile config.status: creating src/lib-sieve/plugins/enotify/Makefile config.status: creating src/lib-sieve/plugins/enotify/mailto/Makefile config.status: creating src/lib-sieve/plugins/notify/Makefile config.status: creating src/lib-sieve/plugins/environment/Makefile config.status: creating src/lib-sieve/plugins/mailbox/Makefile config.status: creating src/lib-sieve/plugins/date/Makefile config.status: creating src/lib-sieve/plugins/spamvirustest/Makefile config.status: creating src/lib-sieve/plugins/ihave/Makefile config.status: creating src/lib-sieve/plugins/editheader/Makefile config.status: creating src/lib-sieve/plugins/vnd.dovecot/Makefile config.status: creating src/lib-sieve/plugins/vnd.dovecot/debug/Makefile config.status: creating src/lib-sieve/plugins/vnd.dovecot/duplicate/Makefile config.status: creating src/lib-sieve-tool/Makefile config.status: creating src/lib-sievestorage/Makefile config.status: creating src/lib-managesieve/Makefile config.status: creating src/plugins/Makefile config.status: creating src/plugins/lda-sieve/Makefile config.status: creating src/sieve-tools/Makefile config.status: creating src/managesieve/Makefile config.status: creating src/managesieve-login/Makefile config.status: creating src/testsuite/Makefile config.status: creating stamp.h config.status: creating dummy-config.h config.status: creating pigeonhole-config.h config.status: executing depfiles commands config.status: executing libtool commands dh_testdir # Add here commands to compile the package. /usr/bin/make make[1]: Entering directory `/home/tobias/pighole_test/dovecot-2.1- pigeonhole-0.3.3' /usr/bin/make all-recursive make[2]: Entering directory `/home/tobias/pighole_test/dovecot-2.1- pigeonhole-0.3.3' Making all in src make[3]: Entering directory `/home/tobias/pighole_test/dovecot-2.1- pigeonhole-0.3.3/src' Making all in lib-sieve make[4]: Entering directory `/home/tobias/pighole_test/dovecot-2.1- pigeonhole-0.3.3/src/lib-sieve' Making all in plugins make[5]: Entering directory `/home/tobias/pighole_test/dovecot-2.1- pigeonhole-0.3.3/src/lib-sieve/plugins' Making all in vacation make[6]: Entering directory `/home/tobias/pighole_test/dovecot-2.1- pigeonhole-0.3.3/src/lib-sieve/plugins/vacation' /bin/bash ../../../../libtool --tag=CC --mode=compile x86_64-linux-gnu-gcc - DHAVE_CONFIG_H -I. -I../../../.. -I./../../ -D_FORTIFY_SOURCE=2 -std=gnu99 -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat-security - Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar- subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict- aliasing=2 -MT cmd-vacation.lo -MD -MP -MF .deps/cmd-vacation.Tpo -c -o cmd- vacation.lo cmd-vacation.c libtool: compile: x86_64-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../../../.. - I./../../ -D_FORTIFY_SOURCE=2 -std=gnu99 -g -O2 -fstack-protector --param=ssp- buffer-size=4 -Wformat -Wformat-security -Wall -W -Wmissing-prototypes - Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad- function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -MT cmd-vacation.lo - MD -MP -MF .deps/cmd-vacation.Tpo -c cmd-vacation.c -fPIC -DPIC -o .libs/cmd- vacation.o cmd-vacation.c:4:17: fatal error: lib.h: No such file or directory compilation terminated. make[6]: *** [cmd-vacation.lo] Error 1 make[6]: Leaving directory `/home/tobias/pighole_test/dovecot-2.1- pigeonhole-0.3.3/src/lib-sieve/plugins/vacation' make[5]: *** [all-recursive] Error 1 make[5]: Leaving directory `/home/tobias/pighole_test/dovecot-2.1- pigeonhole-0.3.3/src/lib-sieve/plugins' make[4]: *** [all-recursive] Error 1 make[4]: Leaving directory `/home/tobias/pighole_test/dovecot-2.1- pigeonhole-0.3.3/src/lib-sieve' make[3]: *** [all-recursive] Error 1 make[3]: Leaving directory `/home/tobias/pighole_test/dovecot-2.1- pigeonhole-0.3.3/src' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/home/tobias/pighole_test/dovecot-2.1- pigeonhole-0.3.3' make[1]: *** [all] Error 2 make[1]: Leaving directory `/home/tobias/pighole_test/dovecot-2.1- pigeonhole-0.3.3' make: *** [build-stamp] Error 2 my configure options: ./configure --with-dovecot=/usr/lib/dovecot --prefix=/usr --sysconfdir=/etc -- libexecdir=/usr/lib --localstatedir=/var --mandir=/usr/share/man -- infodir=/usr/share/info --with-moduledir=/usr/lib/dovecot/modules Regards, Tobias Hachmer

2 4

[Dovecot] Missing Messages on IOS device
by David Morsberger 29 Nov '12

29 Nov '12

Resending because I didn't get any responses from my first post: I just converted my old server running UW/Panda to a Mac Mini Server running Mountain Lion (ML) Server. I'm using the postfix / dovecot setup provided by Apple. My IMAP clients are not showing all my emails. The Mail App on my iPhone and iPad is behaving the worse. I can see the emails that are not showing up in the cur directory. The ML Mail App is stating there are 3854 emails in my INBOX. There are 3948 files in the 'cur' directory ('ls cur | wc -l' returns 3948). Other mailboxes and directories have the same behavior. I'm not sure what to expect here. My method of conversion was to bulk copy (drag and drop) all the messages from one the UW server to the Dovecot server using the Apple Desktop Mail App in Mountain Lion. Any idea why these messages are not showing up on my devices and how I can get them to show up? bash-3.2# /Applications/Server.app/Contents/ServerRoot/usr/sbin/dovecotd --version 2.0.19apple1 bash-3.2# /Applications/Server.app/Contents/ServerRoot/usr/sbin/dovecotd -n # 2.0.19apple1: /Library/Server/Mail/Config/dovecot/dovecot.conf # OS: Darwin 12.2.1 x86_64 hfs aps_topic = com.apple.mail.XServer.fc3bb7c3-c8ef-4fe2-aff3-95ecd927fb11 auth_mechanisms = cram-md5 x-plain-submit plain login apop digest-md5 auth_socket_path = /var/run/dovecot/auth-userdb auth_username_format = %n default_internal_user = _dovecot default_login_user = _dovenull disable_plaintext_auth = no first_valid_gid = 6 first_valid_uid = 6 mail_access_groups = mail mail_location = maildir:/Library/Server/Mail/Data/mail/%u mail_log_prefix = "%s(pid %p user %u): " mail_plugins = quota zlib fts fts_sk managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mdbox_rotate_size = 200 M passdb { args = /Library/Server/Mail/Config/dovecot/submit.passdb driver = passwd-file pass = yes submit = yes } passdb { driver = od } plugin { fts = sk quota = maildir:User quota quota_warning = storage=100%% quota-exceeded %u sieve = /Library/Server/Mail/Data/rules/%u/dovecot.sieve sieve_dir = /Library/Server/Mail/Data/rules/%u } postmaster_address = postmaster(a)mini.mmpcrofton.com protocols = imap pop3 lmtp sieve quota_full_tempfail = yes service auth { extra_groups = _keytabusers idle_kill = 15 mins unix_listener auth-userdb { user = _dovecot } } service dns_client { unix_listener dns-client { mode = 0600 } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } service_count = 0 } service imap { client_limit = 5 process_limit = 200 service_count = 0 } service lmtp { unix_listener lmtp { mode = 0600 } } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service pop3 { client_limit = 5 process_limit = 200 service_count = 0 } service quota-exceeded { executable = script /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/quota-exceeded.sh unix_listener quota-exceeded { group = mail mode = 0660 user = _dovecot } user = _dovecot } service quota-warning { executable = script /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/quota-warning.sh unix_listener quota-warning { group = mail mode = 0660 user = _dovecot } user = _dovecot } ssl_ca = </etc/certificates/*.chain.pem ssl_cert = </etc/certificates/*.cert.pem ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL:!ADH:!eNULL ssl_key = </etc/certificates/*.key.pem ssl_key_path = /etc/certificates/*.key.pem syslog_facility = local6 userdb { args = partition=/Library/Server/Mail/Config/dovecot/partition_map.conf enforce_quotas=no driver = od } verbose_proctitle = yes protocol lmtp { mail_plugins = quota zlib fts fts_sk sieve push_notify } protocol lda { mail_plugins = quota zlib fts fts_sk sieve push_notify } protocol imap { imap_id_log = * imap_id_send = "name" * "version" * mail_max_userip_connections = 20 mail_plugins = quota zlib fts fts_sk imap_quota imap_zlib imap_fts urlauth } protocol pop3 { mail_max_userip_connections = 6 }

3 3

[Dovecot] Problem with mail_location and INDEX location
by Matt Jones 29 Nov '12

29 Nov '12

HI, I'm pulling my hair out a little trying to get dovecot to save it's index locally rather than in the NFS mount. No matter what I do it seems to save the indices in the Maildir on the NFS. I'm using dovecot 2.0.18 on CentOS 6.3. The relevant config I'm using: mmap_disable = no dotlock_use_excl = no # only needed with NFSv2, NFSv3+ supports O_EXCL and it's faster mail_fsync = always mail_nfs_storage = yes mail_nfs_index = no lock_method = dotlock # Mail location and mailbox format. mail_location = maildir:/%Lh/Maildir/:INDEX=/var/indexes/%Ld/%Lu/ Dovecot runs under the user:group vmail:vmail, and the user has write access to those directories. [root@tay var]# ls -al total 96 drwxr-xr-x. 24 root root 4096 Nov 29 09:36 . dr-xr-xr-x. 23 root root 4096 Nov 28 15:26 .. drwxr-x--- 5 amavis amavis 4096 Nov 29 09:21 amavis drwxr-xr-x. 10 root root 4096 Nov 28 15:14 cache drwxr-xr-x. 2 clamav clamav 4096 Nov 29 03:49 clamav drwxr-xr-x. 3 root root 4096 Nov 28 14:21 db drwxr-xr-x. 3 root root 4096 Nov 28 13:35 empty drwxr-xr-x. 2 root root 4096 Sep 23 2011 games drwx------ 2 vmail vmail 4096 Nov 29 10:42 indexes drwxr-xr-x. 25 root root 4096 Nov 28 15:15 lib drwxr-xr-x. 2 root root 4096 Sep 23 2011 local drwxrwxr-x. 5 root lock 4096 Nov 29 03:49 lock drwxr-xr-x. 5 root root 4096 Nov 29 04:10 log lrwxrwxrwx. 1 root root 10 Nov 28 13:34 mail -> spool/mail drwxr-xr-x. 2 root root 4096 Sep 23 2011 nis drwxr-xr-x. 2 root root 4096 Sep 23 2011 opt drwxr-xr-x. 2 root root 4096 Sep 23 2011 preserve drwxr-xr-x. 20 root root 4096 Nov 29 09:51 run drwxr-xr-x. 9 root root 4096 Nov 28 15:14 spool drwxrwxrwt. 3 root root 4096 Nov 29 09:22 tmp drwxr-x--- 2 amavis amavis 4096 Jun 8 15:39 virusmails drwx------. 5 vmail vmail 4096 Nov 29 09:35 vmail drwx------. 3 root bin 4096 Nov 29 09:22 webmin drwxr-xr-x. 12 root root 4096 Nov 28 15:17 www drwxr-xr-x. 2 root root 4096 Sep 23 2011 yp After restarting dovecot, and logging in via imap, I see the following under the Maildir: [root@tay Maildir]# ls -al /var/vmail/vmail1/orphans.co.uk/m/a/t/matt-2011.07.06.09.41.05/Maildir total 56 drwx------ 9 vmail vmail 4096 Nov 29 10:57 . drwx------ 3 vmail vmail 4096 Nov 29 10:17 .. drwx------ 2 vmail vmail 4096 Nov 29 10:41 cur -rw------- 1 vmail vmail 248 Nov 29 10:41 dovecot.index.log -rw------- 1 vmail vmail 120 Nov 29 10:41 dovecot.mailbox.log -rw------- 1 vmail vmail 51 Nov 29 10:41 dovecot-uidlist -rw------- 1 vmail vmail 8 Nov 29 10:41 dovecot-uidvalidity -r--r--r-- 1 vmail vmail 0 Nov 29 10:41 dovecot-uidvalidity.50b73be3 drwx------ 5 vmail vmail 4096 Nov 29 10:41 .Drafts drwx------ 5 vmail vmail 4096 Nov 29 10:41 .Junk drwx------ 2 vmail vmail 4096 Nov 29 10:41 new drwx------ 5 vmail vmail 4096 Nov 29 10:41 .Sent -rw------- 1 vmail vmail 29 Nov 29 10:41 subscriptions drwx------ 2 vmail vmail 4096 Nov 29 10:41 tmp drwx------ 5 vmail vmail 4096 Nov 29 10:41 .Trash [root@tay Maildir]# ls -al /var/indexes/ total 8 drwx------ 2 vmail vmail 4096 Nov 29 10:42 . drwxr-xr-x. 24 root root 4096 Nov 29 09:36 .. Any ideas? Matt

2 1

[Dovecot] Missing quotes in dovecot-config causes pigeonhole to failed.
by nanashi 29 Nov '12

29 Nov '12

I had to manually quote in dovecot-config LIBDOVECOT_LOGIN='-ldovecot-login -lssl -lcrypto ' by default was LIBDOVECOT_LOGIN=-ldovecot-login -lssl -lcrypto That cause pigeonhole to failed. Regards nanashi

2 1

[Dovecot] Shutting down my Dovecot server?
by Bjørn T Johansen 29 Nov '12

29 Nov '12

I am planning to shut down my own Dovecot server and start using the other Dovecot server I am administering together with a friend.. And I was thinking that I don't want to copy the emails I have on my server so I want to start from scratch on the other server.. But I would like to be able to look at the old emails if I need to, so was wondering if there is a way to do this without using an imap server? Can I convert my mails stored in the maildir format to mbox or is there a better way to solve my problem? Regards, BTJ -- ----------------------------------------------------------------------------------------------- Bjørn T Johansen btj(a)havleik.no ----------------------------------------------------------------------------------------------- Someone wrote: "I understand that if you play a Windows CD backwards you hear strange Satanic messages" To which someone replied: "It's even worse than that; play it forwards and it installs Windows" ----------------------------------------------------------------------------------------------- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

5 10

Re: [Dovecot] Umask of Homedir
by sobotka karel 29 Nov '12

29 Nov '12

Hi, I know it's a while since you've had this issue, but still do you remember by any chance how you solved this? I'm having the same problems, when all the directories are created with 700 and I need a group permissions to be at least 750. Thanks! regards,

1 0

Re: [Dovecot] panic fts_solr for bad attachment
by Daniel L. Miller 28 Nov '12

28 Nov '12

On 11/28/2012 8:49 AM, Daniel L. Miller wrote: > On 11/28/2012 12:55 AM, Timo Sirainen wrote: >> On 28.11.2012, at 10.50, Daniel L. Miller wrote: >> >>> On 11/27/2012 6:45 PM, Timo Sirainen wrote: >>>> On 28.11.2012, at 4.43, Daniel L. Miller wrote: >>>> >>>>>> I did go through the code looking for that a few times already >>>>>> but didn't notice anything. I went through it once more, and >>>>>> finally found the problem. :) >>>>>> http://hg.dovecot.org/dovecot-2.1/rev/6a97faf3e500 >>>>>> >>>>> :( Mine still breaks. Both UTF-8 and Control-Char errors. >>>> Can you grab the network traffic between Dovecot and Solr and find >>>> the problematic stream? >>>> >>> Tell me how and I'll be happy to! >> Maybe the easiest would be to use tcpflow. It outputs different TCP >> streams to different files. From them you can then grep for the error >> and look closer into it. I guess something like wireshark would work >> too, but I've never been able to use its GUI in a useful way. >> > Would I just do "tcpflow -i lo port 8983"? Or something else? > Stream capture sent to you. -- Daniel

1 0

Re: [Dovecot] panic fts_solr for bad attachment
by Daniel L. Miller 28 Nov '12

28 Nov '12

On 11/27/2012 7:28 AM, Daniel L. Miller wrote: > On 11/26/2012 10:08 PM, Timo Sirainen wrote: >> On 27.11.2012, at 7.50, Timo Sirainen wrote: >> >>>> Nov 26, 2012 8:49:29 PM org.apache.solr.common.SolrException log >>>> SEVERE: org.apache.solr.common.SolrException: Illegal character >>>> ((CTRL-CHAR, code 8)) >>>> at [row,col {unknown-source}]: [1011144,197790] >>> Something's wrong. The Solr code was already supposed to catch all >>> of these. >> I was taking a brief scan of the code - and as usual I'm probably wrong - but I believe the protection comes from the xml_encode functions. Could it be that there are some solr writes that don't go through that function - because it is assumed that the data in question doesn't need that processing? Like mailbox names, field names, or uids - that SHOULDN'T have any garbage but maybe something is creeping in? -- Daniel

2 6

[Dovecot] shared mailboxes and indexes
by Angel L. Mateo 28 Nov '12

28 Nov '12

Hello, We are deploying shared mailboxes in our mail system. We are running 2.1.9 and mail backend is maildir. As described at http://wiki.dovecot.org/SharedMailboxes/Shared when shared namespace is configured as namespace shared { separator = / prefix = shared/%%u/ location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u subscriptions = no list = children } each user accessing this folder has its own index, stored in ~/Maildir/shared/%%u/<shared mailbox>, hasn't it? Our mail is store in NFS disks so we are very concerned about indexes optimizations (we had performance problems until we got all of our indexes and nfs tunned). So, is there any way so those indexes could be shared for all users (and they always would be updated). Regarding this... if we'd use dbox instead of maildir, indexes are a really important part of the mailbox and they can't be re-constructed when they are outdated. So, how do shared mailboxes work with dbox backend? Do I have to configure indexes in any particular way? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

4 10

[Dovecot] problems with quota and clients
by Marco Sacchetto 28 Nov '12

28 Nov '12

Hi, I had configured dovecot in a pretty standard way and had it working nicely enough with maildir quotas (no tests done apart for reaching the quota and looking at mails coming back). Still I wanted to have the quota and the actual quota usage displayed in postfixadmin (3.5) but I think I messed with something. Now I can connect to the mailbox, send mail, receive mail, see the quota usage in postfixadmin but: * thunderbird: can create a subfolder if i do so by hand from the client. But if I try sending a mail i get a [TRYCREATE] mailbox error as it seems that thunderbird can't create the Sent box anymore by its own; * thunderbird: when i delete mail, it goes in the trash folder. I try then to delete it from there. In thunderbird indeed I see no mail anymore but the quota level remain the same. Then I try to browser the mail directory and... yep, all the messages are still there! How come? This is the output of dovecot -n and the relevant sql configuration : # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-33-generic i686 Ubuntu 12.04.1 LTS ext4 auth_mechanisms = plain login auth_realms = yyyyyyyyy.it aaaaaaa.com xxxxx.it auth_verbose_passwords = plain debug_log_path = syslog dict { quotadict = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext sqlquota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } first_valid_uid = 150 info_log_path = /var/log/syslog last_valid_uid = 150 listen = * mail_debug = yes mail_gid = mail mail_location = maildir:/var/vmail/%d/%u mail_plugins = " quota" mail_uid = vmail passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = dict:User quota::proxy::sqlquota quota_rule = *:storage=50M quota_rule2 = Trash:storage=+10M } postmaster_address = xxxxxxxx(a)yyyyyyyyy.it protocols = " imap pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = mail mode = 0600 user = vmail } } service dict { unix_listener dict { group = mail mode = 0660 user = vmail } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = quota } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota } >>grep -v '^ *$#.*$\?$' dovecot-dict-sql.conf.ext connect = host=127.0.0.1 dbname=mail user=mail password=xxxxxxx map { pattern = priv/quota/storage table = quota2 username_field = username value_field = bytes } map { pattern = priv/quota/messages table = quota2 username_field = username value_field = messages } >>grep -v '^ *$#.*$\?$' dovecot-sql.conf.ext driver = mysql connect = host=localhost dbname=mail user=mail password=xxxxxxx default_pass_scheme = MD5-CRYPT password_query = \ SELECT username as user, password, '/var/vmail/%d/%u' as userdb_home, \ 'maildir:/var/vmail/%d/%u' as userdb_mail, 150 as userdb_uid, 8 as userdb_gid \ FROM mailbox WHERE username = '%u' AND active = '1' user_query = \ SELECT '/var/vmail/%d/%u' as home, 'maildir:/var/vmail/%d/%u' as mail, \ 150 AS uid, 8 AS gid, CONCAT('*:storage=',ROUND(mailbox.quota / 1024)) AS quota_rule \ FROM mailbox WHERE username = '%u' AND active = '1' iterate_query = SELECT username AS user FROM mailbox -- -- Questo messaggio è di carattere riservato ed è indirizzato esclusivamente al destinatario specificato. L'accesso, la divulgazione, la copia o la diffusione sono vietate a chiunque altro ai sensi delle normative vigenti, e possono costituire una violazione penale. Nel caso abbiate ricevuto questo messaggio per errore siete tenuti a cancellarlo immediatamente confermando al mittente, a mezzo e-mail, l'avvenuta cancellazione. (Legge Italiana 196/2003).

1 0

[Dovecot] Vacation messages come from POSTMASTER, not user
by cfowler 28 Nov '12

28 Nov '12

Problem : All vacation autoreplies come from the postmaster address. Expected behavior : vacation notice comes from the user who set the vacation. Platform : Dovecot 2.1.7 on Debian Squeeze ( See below for example reply, sieve script and dovecot -n output) Any help appreciated! ---------------------------------------------------------------------------------------- Sieve script used: if true { vacation :days 2 :subject "Out of Office" "I am currently out of the office"; stop; } ---------------------------------------------------------------------------------------- Return-Path: <> X-Original-To: teststff(a)mydomain.com Delivered-To: teststff(a)mydomain.com Received: from localhost (localhost [127.0.0.1]) by quicksilver.mydomain.com (Postfix) with ESMTP id 12591BE16 for <teststff(a)mydomain.com>; Mon, 26 Nov 2012 16:54:16 +0000 (GMT) X-Virus-Scanned: Debian amavisd-new at mydomain.com X-Spam-Flag: NO X-Spam-Score: -0.501 X-Spam-Level: X-Spam-Status: No, score=-0.501 required=5 tests=[BAYES_05=-0.5, NO_RELAYS=-0.001] autolearn=no Received: from quicksilver.mydomain.com ([127.0.0.1]) by localhost (quicksilver.mydomain.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DNM8HKzR4d0t for <teststff(a)mydomain.com>; Mon, 26 Nov 2012 16:54:06 +0000 (GMT) Received: by quicksilver.mydomain.com (Postfix, from userid 15099) id DA3DABE1B; Mon, 26 Nov 2012 16:54:06 +0000 (GMT) X-Sieve: Pigeonhole Sieve 0.3.0 Message-ID: <dovecot-sieve-1353948846-837692-0(a)quicksilver.mydomain.com> Date: Mon, 26 Nov 2012 16:54:06 +0000 From: Postmaster <root(a)mydomain.com> To: <teststff(a)mydomain.com> Subject: Out of Office In-Reply-To: <ac0fe0e6de81129e7499aba9aa67697a@localhost> References: <ac0fe0e6de81129e7499aba9aa67697a@localhost> Auto-Submitted: auto-replied (vacation) Precedence: bulk MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit I am currently out of the office ---------------------------------------------------------------------------------------- # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.6 ext3 auth_debug = yes auth_debug_passwords = yes auth_verbose = yes listen = *, [::] log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/var/maildirs/%n/Maildir mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { home = /var/maildirs/%u mail_debug = yes sieve = /var/maildirs/%u/deliver.sieve sieve_dir = /var/maildirs/%n/sieve sieve_global_dir = /etc/sieve/ sieve_global_path = /etc/sieve/deliver.sieve sieve_vacation_dont_check_recipient = yes } protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { mode = 0600 } user = root } service imap-login { client_limit = 256 process_min_avail = 16 service_count = 0 vsz_limit = 256 M } service managesieve-login { client_limit = 256 process_min_avail = 16 service_count = 0 vsz_limit = 256 M } service pop3-login { client_limit = 256 process_min_avail = 16 service_count = 0 vsz_limit = 256 M } ssl_cert = </var/certs/wildcard.mydomain.ie-including-chain.pem ssl_key = </var/certs/wildcard.mydomain.ie.key userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 20 } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } protocol lda { auth_socket_path = /var/run/dovecot/auth-master mail_debug = yes mail_plugins = sieve postmaster_address = root(a)mydomain.ie }

5 7

[Dovecot] Any chance to access read-only mdboxes?
by Jost Krieger 28 Nov '12

28 Nov '12

We would like to provide a self-service restore function to our users using their IMAP client of choice.. Our idea was to use a snapshot (under ZFS, btrfs, whatever) and have it available to the user in a namespace. Unfortunately, but understandably, dovecot doesn't like the mdbox structure to be read-only. Is there any chance to change that? In the meantime, we could use a read-write snapshot, but we wouldn't like the users to really do changes to that snapshot. Our next attempt is to use ACLs, but it's a bit hard to gt the ACLs to the correct place in the snapshots, at least for thousands of users. Our currents solution (in test) is a quick and dirty patch to introduce inheritance to the ACLs by walking up the directory tree, so we need only one ACL. A cleaner solution would be very much appreciated. Yours Jost Krieger -- | Helft Spam ausrotten! HTML in Mail ist unhöflich. | | Postmaster, JAPH, manchmal Wahrsager am RZ der RUB | | Wahre Worte sind nicht gefällig, gefällige Worte sind nicht wahr.| | Lao Tse, Tao Te King 81 |

4 4

[Dovecot] Dovecot sieve with postfix.
by /#!/JoePea 28 Nov '12

28 Nov '12

Hi all, I can't get dovecot working with postfix. If I leave virtual_transport set to "virtual", I can send and receive messages just fine in roundcube. If I set virtual_transport to "dovecot", I can only send messages in roundcube, but incoming messages never arrive. Seems I can't get dovecot-lda to work. I need dovecot-lda in order for sieve filters to work. Any idea what I'm doing wrong? Here's `doveconf -n`: http://pastie.org/5401133 `postconf -n`: http://pastie.org/5401157 and `postconf -M`: http://pastie.org/5401177 Note: All I have to do is change virtual_transport = dovecot to virtual_transport = virtual and all will be fine, except for that I won't have sieve filtering which is what I really want. */#!/*JoePea

4 10

[Dovecot] panic fts_solr for bad attachment
by Robert Strötgen 27 Nov '12

27 Nov '12

Hi! I use dovecot 2.1.7 on Ubuntu 12.10 with fts_solr und decode2text.sh for indexing attachments. This works great in general. Just for one user there is a problem with an unknown bad attachment. I run "doveadm index -A '*'". After a while I receive: doveadm(xyz): Error: fts_solr: Invalid XML input at line 1: mismatched tag doveadm(xyz): Panic: file solr-connection.c: line 545 (solr_connection_post_more): assertion failed: (maxfd >= 0) doveadm(xyz): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x3c14a) [0x7f7ce2c1714a] -> /usr/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x2a) [0x7f7ce2c1720a] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f7ce2bee81a] -> /usr/lib/dovecot/modules/lib21_fts_solr_plugin.so(solr_connection_post_more+0x249) [0x7f7ce11913a9] -> /usr/lib/dovecot/modules/lib21_fts_solr_plugin.so(+0x4597) [0x7f7ce118e597] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0x6f57) [0x7f7ce159df57] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(fts_build_mail+0xf5) [0x7f7ce159e085] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0xba70) [0x7f7ce15a2a70] -> doveadm(+0x15309) [0x7f7ce35cc309] -> doveadm(+0x11f36) [0x7f7ce35c8f36] -> doveadm(+0x12bf1) [0x7f7ce35c9bf1] -> doveadm(doveadm_mail_try_run+0x161) [0x7f7ce35c9ed1] -> doveadm(main+0x3d1) [0x7f7ce35c8ae1] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xed) [0x7f7ce283d76d] -> doveadm(+0x11d15) [0x7f7ce35c8d15] In catalina out I find: Nov 18, 2012 2:59:09 PM org.apache.solr.common.SolrException log SEVERE: org.apache.solr.common.SolrException: Invalid UTF-8 start byte 0xfc (at char #25214836, byte #26687495) at org.apache.solr.handler.XMLLoader.load(XMLLoader.java:81) at org.apache.solr.handler.ContentStreamHandlerBase.handleRequestBody(ContentStreamHandlerBase.java:58) at org.apache.solr.handler.RequestHandlerBase.handleRequest(RequestHandlerBase.java:129) at org.apache.solr.core.SolrCore.execute(SolrCore.java:1376) at org.apache.solr.servlet.SolrDispatchFilter.execute(SolrDispatchFilter.java:365) at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:260) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191) at org.apache.catalina.valves.RequestFilterValve.process(RequestFilterValve.java:316) at org.apache.catalina.valves.RemoteAddrValve.invoke(RemoteAddrValve.java:81) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293) at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:859) at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:602) at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489) at java.lang.Thread.run(Thread.java:722) Caused by: com.ctc.wstx.exc.WstxIOException: Invalid UTF-8 start byte 0xfc (at char #25214836, byte #26687495) at com.ctc.wstx.sr.StreamScanner.constructFromIOE(StreamScanner.java:625) at com.ctc.wstx.sr.StreamScanner.loadMore(StreamScanner.java:994) at com.ctc.wstx.sr.StreamScanner.getNext(StreamScanner.java:754) at com.ctc.wstx.sr.BasicStreamReader.nextFromTree(BasicStreamReader.java:2691) at com.ctc.wstx.sr.BasicStreamReader.next(BasicStreamReader.java:1065) at org.apache.solr.handler.XMLLoader.readDoc(XMLLoader.java:309) at org.apache.solr.handler.XMLLoader.processUpdate(XMLLoader.java:156) at org.apache.solr.handler.XMLLoader.load(XMLLoader.java:79) ... 19 more Caused by: java.io.CharConversionException: Invalid UTF-8 start byte 0xfc (at char #25214836, byte #26687495) at com.ctc.wstx.io.UTF8Reader.reportInvalidInitial(UTF8Reader.java:303) at com.ctc.wstx.io.UTF8Reader.read(UTF8Reader.java:189) at com.ctc.wstx.io.ReaderSource.readInto(ReaderSource.java:87) at com.ctc.wstx.io.BranchingReaderSource.readInto(BranchingReaderSource.java:57) at com.ctc.wstx.sr.StreamScanner.loadMore(StreamScanner.java:988) ... 25 more doveadm index stops after this error. How can I make doveadm just to skip the error and to continue indexing? Thanks Robert -- Robert Strötgen Abteilungsleiter Informationsmanagement und Publikationen Georg-Eckert-Institut für internationale Schulbuchforschung Celler Str. 3 38114 Braunschweig Tel. +49 (0)531 59099-47 & +49 (0)531 123103-205 Fax +49 (0)531 59099-99 http://www.gei.de/

3 6

[Dovecot] IMAP over SSL
by petsy12＠lavabit.com 27 Nov '12

27 Nov '12

Hello. I've never tried Dovecot. Here is my attempt to enable IMAP over SSL on port 993. (BTW, I don't want to use port 143 at all.) # dovecot -n log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps listen: *:143,[::]:143 ssl_listen: *:993,[::]:993 ssl: required ssl_cert_file: /etc/dovecot/keycert.pem ssl_key_file: /etc/dovecot/keycert.pem ssl_cipher_list: TLSv1+HIGH:!SSLv2:!aNULL:!eNULL:!NULL:@STRENGTH login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mail_location: maildir:~/Maildir mbox_write_locks: fcntl dotlock auth default: passdb: driver: pam userdb: driver: passwd 1. Here is a snippet from dovecot.conf. Is it correct? Should I change something? (Note that I don't want to enable IMAP on port 143.) protocols = imaps protocol imap { listen = *:143,[::]:143 ssl_listen = *:993,[::]:993 } disable_plaintext_auth = yes ssl_listen = *:993,[::]:933 ssl = required ssl_cert_file = /etc/dovecot/keycert.pem ssl_key_file = /etc/dovecot/keycert.pem ssl_cipher_list = TLSv1+HIGH:!SSLv2:!aNULL:!eNULL:!NULL:@STRENGTH 2. I don't understand the syntax connected with auth. What auth options are enabled by default? dovecot.conf: No sections (e.g. namespace {}) or plugin settings are added by default, they're listed only as examples. Does it mean that passdb pam will use defaults (e.g. session=yes, setrcred=yes)? passdb pam { # [session=yes] [setcred=yes] [failure_show_msg=yes] [max_requests=<n>] # [cache_key=<key>] [<service name>] # # session=yes makes Dovecot open and immediately close PAM session. Some # PAM plugins need this to work, such as pam_mkhomedir. # # setcred=yes makes Dovecot establish PAM credentials if some PAM plugins # need that. They aren't ever deleted though, so this isn't enabled by # default. # # max_requests specifies how many PAM lookups to do in one process before # recreating the process. The default is 100, because many PAM plugins # leak memory. # # cache_key can be used to enable authentication caching for PAM # (auth_cache_size also needs to be set). It isn't enabled by default # because PAM modules can do all kinds of checks besides checking password, # such as checking IP address. Dovecot can't know about these checks # without some help. cache_key is simply a list of variables (see # /usr/share/doc/dovecot-common/wiki/Variables.txt) which must match # for the cached data to be used. # Here are some examples: # %u - Username must match. Probably sufficient for most uses. # %u%r - Username and remote IP address must match. # %u%s - Username and service (ie. IMAP, POP3) must match. # # The service name can contain variables, for example %Ls expands to # pop3 or imap. # # Some examples: # args = session=yes %Ls # args = cache_key=%u dovecot #args = dovecot } 3. Here is the output of `openssl s_client -tls1 -connect mail.example.com:993`. Is it OK? [snip] New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA Server public key is 2048 bit Secure Renegotiation IS supported Compression: zlib compression Expansion: zlib compression [snip] Verify return code: 18 (self signed certificate) --- * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE AUTH=PLAIN] Dovecot ready. Also, where can I read about these options? Any comments are appreciated.

2 1