- dovecot - dovecot.org

[Dovecot] INBOX.INBOX.Sent causes problems in 2.0
by Christoph Bußenius 12 Oct '12

12 Oct '12

Hi, we have our namespace rooted at "INBOX.". Sometimes, users have folders like "INBOX.INBOX.Sent" or "INBOX.INBOX.INBOX.Sent". I do not know why these folders are created; I suspect it is due to buggy MUAs. If a mailbox like INBOX.INBOX.Sent exists, then in some cases Dovecot counts all messages in INBOX twice. This behavior can be demonstrated as follows: 1) Create a folder named "INBOX.INBOX.Sent" (using the IMAP CREATE command) 2) Save a message to "INBOX" (in my example the message is 7 MB) 3) dovecot-quota contains: priv/quota/storage 7129025 priv/quota/messages 1 4) doveadm quota recalc -u user1 5) Now dovecot-quota contains priv/quota/storage 14258050 priv/quota/messages 2 I.e. the user will experience that his quota fills up very fast. "doveadm -f flow fetch -u user1 'mailbox guid' ALL" prints: mailbox=INBOX guid=040ce73645177850497d000040c59ffc mailbox=INBOX guid=040ce73645177850497d000040c59ffc However, "doveadm -f flow fetch -u user1 'mailbox guid' mailbox INBOX" prints the message only once: mailbox=INBOX guid=040ce73645177850497d000040c59ffc How can we prevent this kind of confusion? What I'd like most is prevent the creation of these weird folders. Most MUAs have problems listing them properly, especially if both "INBOX.Sent" and "INBOX.INBOX.Sent" exist. Dovecot 2.1 does not seem to count anything twice. Cheers, Christoph Config: # 2.0.21: /usr/local/dovecot/etc/dovecot/dovecot.conf doveconf: Warning: service auth { client_limit=4096 } is lower than required under max. load (6224) # OS: Linux 2.6.32-42-server x86_64 Ubuntu 10.04.4 LTS disable_plaintext_auth = no mail_gid = vmail mail_location = mdbox:~/mail mail_plugins = quota mail_uid = vmail namespace default { inbox = yes location = prefix = INBOX. separator = . type = private } passdb { args = scheme=CRYPT username_format=%u /usr/local/dovecot/etc/dovecot/users driver = passwd-file } plugin { quota = dict:ROOT::file:%h/dovecot-quota quota_rule = *:storage=5G } protocols = imap pop3 service auth { unix_listener auth-userdb { group = vmail mode = 0660 } } service imap { process_limit = 5000 } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /usr/local/dovecot/etc/dovecot/users driver = passwd-file } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_max_userip_connections = 20 mail_plugins = quota imap_quota } And the contents of the "users" file: user1:{plain}secret:::user1:/mail/users/user1:: -- Christoph Bußenius Rechnerbetriebsgruppe der Fakultäten Informatik und Mathematik Technische Universität München +49 89-289-18519 <> Raum 00.05.040 <> Boltzmannstr. 3 <> Garching

1 0

[Dovecot] [PATCH] dovadm plugins underlinking
by Natanael Copa 12 Oct '12

12 Oct '12

Hi, Running doveadm on Alpine Linux will show various underlinking errors: /usr/bin/doveadm: symbol 'acl_user_module': can't resolve symbol in lib '/usr/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so'. /usr/bin/doveadm: symbol 'acl_identifier_parse': can't resolve symbol in lib '/usr/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so'. ... (complete list is found here: http://bugs.alpinelinux.org/issues/1274) I understand that those are "harmless" (at least as long as you dont use those plugins), and even if some dynamic linkers are forgiving, the doveadm plugin modules are technically underlinked. The lib10_doveadm_acl_plugin.so uses symbol acl_user_module: $ nm -D /usr/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so | grep acl_user_module U acl_user_module That symbol is defined in lib01_acl_plugin.so: $ nm -D /usr/lib/dovecot/lib01_acl_plugin.so | grep acl_user_module 000000000020fb80 D acl_user_module Which means that lib10_doveadm_acl_plugin.so should be directly linked to lib01_acl_plugin.so. But it is not: $ readelf -d /usr/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so | grep NEEDED 0x0000000000000001 (NEEDED) Shared library: [librt.so.0.9.32] 0x0000000000000001 (NEEDED) Shared library: [libc.so.0.9.32] Below is a patch that should solve it. --- diff -r 4d268e810c15 src/plugins/acl/Makefile.am --- a/src/plugins/acl/Makefile.am Mon Oct 08 08:53:54 2012 +0300 +++ b/src/plugins/acl/Makefile.am Wed Oct 10 11:03:49 2012 +0200 @@ -10,7 +10,8 @@ -I$(top_srcdir)/src/doveadm NOPLUGIN_LDFLAGS = -lib10_doveadm_acl_plugin_la_LDFLAGS = -module -avoid-version +lib10_doveadm_acl_plugin_la_LDFLAGS = -module -avoid-version -Wl,-rpath,$(moduledir) +lib10_doveadm_acl_plugin_la_LIBADD = $(module_LTLIBRARIES) lib01_acl_plugin_la_LDFLAGS = -module -avoid-version module_LTLIBRARIES = \ diff -r 4d268e810c15 src/plugins/expire/Makefile.am --- a/src/plugins/expire/Makefile.am Mon Oct 08 08:53:54 2012 +0300 +++ b/src/plugins/expire/Makefile.am Wed Oct 10 11:03:49 2012 +0200 @@ -14,7 +14,8 @@ -I$(top_srcdir)/src/doveadm NOPLUGIN_LDFLAGS = -lib10_doveadm_expire_plugin_la_LDFLAGS = -module -avoid-version +lib10_doveadm_expire_plugin_la_LDFLAGS = -module -avoid-version -Wl,-rpath,$(moduledir) +lib10_doveadm_expire_plugin_la_LIBADD = $(module_LTLIBRARIES) lib20_expire_plugin_la_LDFLAGS = -module -avoid-version module_LTLIBRARIES = \ diff -r 4d268e810c15 src/plugins/fts/Makefile.am --- a/src/plugins/fts/Makefile.am Mon Oct 08 08:53:54 2012 +0300 +++ b/src/plugins/fts/Makefile.am Wed Oct 10 11:03:49 2012 +0200 @@ -11,7 +11,8 @@ -I$(top_srcdir)/src/doveadm NOPLUGIN_LDFLAGS = -lib20_doveadm_fts_plugin_la_LDFLAGS = -module -avoid-version +lib20_doveadm_fts_plugin_la_LDFLAGS = -module -avoid-version -Wl,-rpath,$(moduledir) +lib20_doveadm_fts_plugin_la_LIBADD = $(module_LTLIBRARIES) lib20_fts_plugin_la_LDFLAGS = -module -avoid-version module_LTLIBRARIES = \ diff -r 4d268e810c15 src/plugins/quota/Makefile.am --- a/src/plugins/quota/Makefile.am Mon Oct 08 08:53:54 2012 +0300 +++ b/src/plugins/quota/Makefile.am Wed Oct 10 11:03:49 2012 +0200 @@ -11,7 +11,8 @@ -I$(top_srcdir)/src/doveadm NOPLUGIN_LDFLAGS = -lib10_doveadm_quota_plugin_la_LDFLAGS = -module -avoid-version +lib10_doveadm_quota_plugin_la_LDFLAGS = -module -avoid-version -Wl,-rpath,$(moduledir) +lib10_doveadm_quota_plugin_la_LIBADD = $(module_LTLIBRARIES) lib10_quota_plugin_la_LDFLAGS = -module -avoid-version module_LTLIBRARIES = \ diff -r 4d268e810c15 src/plugins/zlib/Makefile.am --- a/src/plugins/zlib/Makefile.am Mon Oct 08 08:53:54 2012 +0300 +++ b/src/plugins/zlib/Makefile.am Wed Oct 10 11:03:49 2012 +0200 @@ -11,7 +11,8 @@ -I$(top_srcdir)/src/doveadm NOPLUGIN_LDFLAGS = -lib10_doveadm_zlib_plugin_la_LDFLAGS = -module -avoid-version +lib10_doveadm_zlib_plugin_la_LDFLAGS = -module -avoid-version -Wl,-rpath,$(moduledir) +lib10_doveadm_zlib_plugin_la_LIBADD = $(module_LTLIBRARIES) lib20_zlib_plugin_la_LDFLAGS = -module -avoid-version module_LTLIBRARIES = \

2 3

[Dovecot] imap proxy setup - "killed with signal 11"
by btb 12 Oct '12

12 Oct '12

hi- i'm setting up an imap proxy in front of a novell groupwise server. it seems to so far be partially working, but dovecot is having trouble in certain cases. i expect that it's ultimately due to what i believe is a very poor implementation of imap provided by groupwise [at least based on other experiences in the past] - but that's a big part of why i'd like to have dovecot in between it and clients. below is information collected during starting of dovecot, opening/initial connection from a client [os x mail.app], closing of the client, and stopping of dovecot. os is ubuntu 12.10 development/beta, dovecot is 2.1.7 courtesy of ubuntu's packages. log entries: Oct 11 13:24:33 halo dovecot: master: Dovecot v2.1.7 starting up Oct 11 13:24:49 halo dovecot: imap-login: Login: user=<jdoe>, method=PLAIN, rip=10.68.40.110, lip=10.59.1.53, mpid=14171, TLS, session=<iHgu2cvLlwAKRChu> Oct 11 13:24:50 halo dovecot: imap-login: Login: user=<jdoe>, method=PLAIN, rip=10.68.40.110, lip=10.59.1.53, mpid=14174, TLS, session=<t1E/2cvLoQAKRChu> Oct 11 13:24:51 halo dovecot: imap-login: Login: user=<jdoe>, method=PLAIN, rip=10.68.40.110, lip=10.59.1.53, mpid=14176, TLS, session=<OZlM2cvLqgAKRChu> Oct 11 13:24:51 halo dovecot: imap-login: Login: user=<jdoe>, method=PLAIN, rip=10.68.40.110, lip=10.59.1.53, mpid=14178, TLS, session=<d3NU2cvLsQAKRChu> Oct 11 13:24:51 halo dovecot: imap(jdoe): Connection closed in=16 out=350 Oct 11 13:24:52 halo dovecot: imap-login: Login: user=<jdoe>, method=PLAIN, rip=10.68.40.110, lip=10.59.1.53, mpid=14180, TLS, session=<oxNa2cvLtAAKRChu> Oct 11 13:24:52 halo dovecot: imap(jdoe): Error: imapc: Mailbox 'Trash' state corrupted: Expunged message reappeared in session (uid=6282 < next_uid=6283) Oct 11 13:24:52 halo dovecot: imap(jdoe): Fatal: master: service(imap): child 14176 killed with signal 11 (core dumped) Oct 11 13:24:57 halo dovecot: imap(jdoe): Error: imapc: Mailbox 'Trash' state corrupted: Expunged message reappeared in session (uid=6282 < next_uid=6283) Oct 11 13:24:57 halo dovecot: imap(jdoe): Fatal: master: service(imap): child 14178 killed with signal 11 (core dumped) Oct 11 13:24:57 halo dovecot: imap-login: Login: user=<jdoe>, method=PLAIN, rip=10.68.40.110, lip=10.59.1.53, mpid=14182, TLS, session=<FUCv2cvLuAAKRChu> Oct 11 13:24:58 halo dovecot: imap(jdoe): Error: imapc: Mailbox 'Trash' state corrupted: Expunged message reappeared in session (uid=6282 < next_uid=6283) Oct 11 13:24:58 halo dovecot: imap(jdoe): Fatal: master: service(imap): child 14180 killed with signal 11 (core dumped) Oct 11 13:25:03 halo dovecot: imap(jdoe): Error: imapc: Mailbox 'Trash' state corrupted: Expunged message reappeared in session (uid=6282 < next_uid=6283) Oct 11 13:25:03 halo dovecot: imap(jdoe): Fatal: master: service(imap): child 14182 killed with signal 11 (core dumped) Oct 11 13:25:03 halo dovecot: imap-login: Login: user=<jdoe>, method=PLAIN, rip=10.68.40.110, lip=10.59.1.53, mpid=14184, TLS, session=<DQkF2svLuwAKRChu> Oct 11 13:25:03 halo dovecot: imap(jdoe): Error: imapc: Mailbox 'Trash' state corrupted: Expunged message reappeared in session (uid=6282 < next_uid=6283) Oct 11 13:25:03 halo dovecot: imap(jdoe): Fatal: master: service(imap): child 14184 killed with signal 11 (core dumped) Oct 11 13:25:09 halo dovecot: imap(jdoe): Error: imapc: Mailbox 'Trash' state corrupted: Expunged message reappeared in session (uid=6282 < next_uid=6283) Oct 11 13:25:09 halo dovecot: imap(jdoe): Fatal: master: service(imap): child 14174 killed with signal 11 (core dumped) [repeats] Oct 11 13:25:27 halo dovecot: dns-client: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Oct 11 13:25:27 halo dovecot: dns-client: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Oct 11 13:25:27 halo dovecot: master: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Oct 11 13:25:27 halo dovecot: auth: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Oct 11 13:25:27 halo dovecot: config: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Oct 11 13:25:27 halo dovecot: ssl-params: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Oct 11 13:25:27 halo dovecot: anvil: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Oct 11 13:25:27 halo dovecot: log: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) gdb backtrace: ~ >gdb /usr/lib/dovecot/imap /var/cache/imapproxy/jdoe/core GNU gdb (GDB) 7.5-ubuntu Copyright (C) 2012 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/lib/dovecot/imap...Reading symbols from /usr/lib/debug/usr/lib/dovecot/imap...done. done. [New LWP 13939] warning: Can't read pathname for load map: Input/output error. [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `dovecot/imap'. Program terminated with signal 11, Segmentation fault. #0 0x0000000000000000 in ?? () (gdb) bt full #0 0x0000000000000000 in ?? () No symbol table info available. #1 0x00007fc7f6cb611e in imap_parser_reset (parser=0x7fc7f8a0f3a0) at imap-parser.c:93 No locals. #2 0x00007fc7f6f7ada7 in imapc_connection_input_reset (conn=conn@entry=0x7fc7f8a0d270) at imapc-connection.c:664 No locals. #3 0x00007fc7f6f7c6f4 in imapc_connection_input_untagged (conn=conn@entry=0x7fc7f8a0d270) at imapc-connection.c:908 imap_args = 0x7fc7f8a0f4f8 name = 0x7fc7f8a0f5d0 "" value = <optimized out> parser = 0x0 reply = {name = 0x7fc7f8a0f5d0 "", num = 11, args = 0x7fc7f8a0f4f8, file_args = 0x7fc7f8a0d5d0, file_args_count = 0, resp_text_key = 0x0, resp_text_value = 0x0, untagged_box_context = 0x7fc7f8a1ad70} ret = <optimized out> #4 0x00007fc7f6f7d25e in imapc_connection_input_one (conn=0x7fc7f8a0d270) at imapc-connection.c:1061 tag = 0x7fc7f8a0f5c0 "" ret = -1 #5 imapc_connection_input_pending (conn=0x7fc7f8a0d270) at imapc-connection.c:1407 _data_stack_cur_id = 6 ret = <optimized out> #6 0x00007fc7f6f7d2c2 in imapc_connection_input (conn=0x7fc7f6c8f798) at imapc-connection.c:1100 errstr = <optimized out> ret = <optimized out> #7 0x00007fc7f6cdf006 in io_loop_call_io (io=0x7fc7f8a23800) at ioloop.c:379 ioloop = 0x7fc7f8a23630 t_id = 5 #8 0x00007fc7f6cdfcb7 in io_loop_handler_run (ioloop=ioloop@entry=0x7fc7f8a23630) at ioloop-epoll.c:213 ctx = 0x7fc7f8a23850 events = 0x7fc7f8a245e0 event = 0x7fc7f8a238c0 list = 0x7fc7f8a24320 io = <optimized out> tv = {tv_sec = 299, tv_usec = 999402} events_count = <optimized out> msecs = <optimized out> ret = 1 i = <optimized out> call = <optimized out> #9 0x00007fc7f6cdea18 in io_loop_run (ioloop=0x7fc7f8a23630) at ioloop.c:398 No locals. #10 0x00007fc7f6f7a0f7 in imapc_client_run_pre (client=<optimized out>) at imapc-client.c:142 connp = 0x7fc7f8a0cfe0 prev_ioloop = 0x7fc7f89e3670 #11 imapc_client_run (client=0x7fc7f8a0ce80) at imapc-client.c:161 No locals. #12 0x00007fc7f6f79254 in imapc_storage_run (storage=0x7fc7f8a0be60) at imapc-storage.c:118 No locals. #13 0x00007fc7f6f78311 in imapc_sync_index (ctx=0x7fc7f8a1fc70) at imapc-sync.c:351 mbox = 0x7fc7f8a1ad70 sync_rec = {uid1 = 47, uid2 = 0, type = (unknown: 4171272512), add_flags = 199 '\307', remove_flags = 127 '\177', keyword_idx = 0, guid_128 = "\000\000\000\000)\235\312\366\307\177\000\000p\255\241", <incomplete sequence \370>} seq1 = 32767 seq2 = 0 #14 imapc_sync_begin (force=<optimized out>, ctx_r=<synthetic pointer>, mbox=0x7fc7f8a1ad70) at imapc-sync.c:422 ctx = 0x7fc7f8a1fc70 sync_flags = <optimized out> ret = <optimized out> #15 imapc_sync (mbox=0x7fc7f8a1ad70) at imapc-sync.c:464 sync_ctx = <optimized out> force = <optimized out> #16 imapc_mailbox_sync_init (box=0x7fc7f8a1ad70, flags=(MAILBOX_SYNC_FLAG_FULL_READ | MAILBOX_SYNC_FLAG_FIX_INCONSISTENT)) at imapc-sync.c:498 mbox = 0x7fc7f8a1ad70 capabilities = <optimized out> changes = false ret = <optimized out> #17 0x00007fc7f6f8bd43 in mailbox_sync_init (box=0x7fc7f8a1ad70, flags=(MAILBOX_SYNC_FLAG_FULL_READ | MAILBOX_SYNC_FLAG_FIX_INCONSISTENT)) at mail-storage.c:1320 _data_stack_cur_id = 4 ctx = <optimized out> #18 0x00007fc7f6f8be67 in mailbox_sync (box=<optimized out>, flags=<optimized out>, flags@entry=MAILBOX_SYNC_FLAG_FULL_READ) at mail-storage.c:1368 ctx = <optimized out> status = {sync_delayed_expunges = 0} #19 0x00007fc7f74475d2 in select_open (readonly=false, mailbox=<optimized out>, ctx=0x7fc7f8a0da98) at cmd-select.c:296 client = 0x7fc7f8a13d30 status = {messages = 4171084000, recent = 32711, unseen = 0, uidvalidity = 0, uidnext = 13, first_unseen_seq = 0, first_recent_uid = 4137782496, last_cached_seq = 32711, highest_modseq = 13, keywords = 0x7fc7f6cd06fb <t_malloc0+43>, permanent_flags = 4171118192, nonpermanent_modseqs = 1, permanent_keywords = 1, allow_new_keywords = 1} flags = MAILBOX_FLAG_DROP_RECENT ret = <optimized out> #20 cmd_select_full (cmd=<optimized out>, readonly=<optimized out>) at cmd-select.c:419 ---Type <return> to continue, or q <return> to quit--- client = <optimized out> ctx = <optimized out> args = 0x7fc7f8a18598 list_args = 0x7fc7f89db0e0 mailbox = 0x7fc7f89db310 "Trash" ret = 1 __FUNCTION__ = "cmd_select_full" #21 0x00007fc7f744b29c in command_exec (cmd=cmd@entry=0x7fc7f8a0d9a0) at imap-commands.c:148 hook = 0x7fc7f89e4cd0 ret = <optimized out> #22 0x00007fc7f744a2ee in client_command_input (cmd=0x7fc7f6c8f798) at imap-client.c:682 client = 0x7fc7f8a13d30 command = <optimized out> __FUNCTION__ = "client_command_input" #23 0x00007fc7f744a39a in client_command_input (cmd=0x7fc7f8a0d9a0) at imap-client.c:733 client = 0x7fc7f8a13d30 command = <optimized out> __FUNCTION__ = "client_command_input" #24 0x00007fc7f744a5fd in client_handle_next_command (remove_io_r=<synthetic pointer>, client=0x7fc7f8a13d30) at imap-client.c:774 size = 19 #25 client_handle_input (client=client@entry=0x7fc7f8a13d30) at imap-client.c:786 _data_stack_cur_id = 3 ret = 112 remove_io = false handled_commands = false __FUNCTION__ = "client_handle_input" #26 0x00007fc7f744aef5 in client_input (client=0x7fc7f8a13d30) at imap-client.c:825 cmd = <optimized out> output = 0x7fc7f8a0d868 bytes = 19 __FUNCTION__ = "client_input" #27 0x00007fc7f6cdf006 in io_loop_call_io (io=0x7fc7f8a11c90) at ioloop.c:379 ioloop = 0x7fc7f89e3670 t_id = 2 #28 0x00007fc7f6cdfcb7 in io_loop_handler_run (ioloop=ioloop@entry=0x7fc7f89e3670) at ioloop-epoll.c:213 ctx = 0x7fc7f89e39e0 events = 0x7fc7f8a245e0 event = 0x7fc7f89e3a50 list = 0x7fc7f8a0f380 io = <optimized out> tv = {tv_sec = 1739, tv_usec = 996790} events_count = <optimized out> msecs = <optimized out> ret = 1 i = <optimized out> call = <optimized out> #29 0x00007fc7f6cdea18 in io_loop_run (ioloop=0x7fc7f89e3670) at ioloop.c:398 No locals. #30 0x00007fc7f6ccb463 in master_service_run (service=0x7fc7f89e3520, callback=callback@entry=0x7fc7f7452f70 <client_connected>) at master-service.c:544 No locals. #31 0x00007fc7f74428c7 in main (argc=1, argv=0x7fc7f89e3370) at main.c:389 set_roots = {0x7fc7f7658d20 <imap_setting_parser_info>, 0x0} login_set = {auth_socket_path = 0x7fc7f89db070 "/run/dovecot/auth-master", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x7fc7f7452e10 <login_client_connected>, failure_callback = 0x7fc7f7452b60 <login_client_failed>} service_flags = <optimized out> storage_service_flags = <optimized out> username = 0x0 c = <optimized out> (gdb) config: >doveconf -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.5.0-17-generic x86_64 Ubuntu quantal (development branch) first_valid_gid = 999 first_valid_uid = 999 imapc_host = backend.example.com last_valid_gid = 999 last_valid_uid = 999 log_timestamp = "%d.%m.%Y %H.%M.%S " login_greeting = dovecot ready mail_gid = imapproxy mail_home = /var/cache/imapproxy/%u mail_location = imapc:%h/%n/Maildir mail_uid = imapproxy passdb { args = host=backend.example.com default_fields = userdb_imapc_user=%u userdb_imapc_password=%w driver = imap } protocols = " imap" service auth-worker { user = $default_internal_user } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } ssl = required ssl_cert = </etc/dovecot/pki/mra.example.com-cert.pem ssl_key = </etc/dovecot/pki/mra.example.com-key.pem userdb { driver = prefetch } verbose_proctitle = yes thanks -ben

2 1

Re: [Dovecot] dovecot cores
by dovecot＠freakout.de 12 Oct '12

12 Oct '12

According to Timo Sirainen: > On 11.10.2012, at 9.43, dovecot(a)freakout.de wrote: > > Dovecot code is calling str_to_time() from libmysqlclient, > instead of from Dovecot's internal code. > Not the first time mysql conflicted with Dovecot code. > This could be worked around, but .. why is your dovecot > binary linked with libmysqlclient? > Only auth and dict binaries should be. > but dovecot's configure script does not allow to specify the mysql libs and headers explictly - only by global CPPFLAGS and LDFLAGS extensions, which are used for all binaries - when i tried to specify: ./configure --prefix=/opt/dovecot --sysconfdir=/etc/dovecot --mandir=/opt/dovecot/man \ --docdir=/opt/dovecot/doc --libexecdir=/opt/dovecot/sbin --datadir=/opt/dovecot \ --with-rundir=/var/dovecot/run --with-statedir=/var/dovecot/state \ --with-mysql=/opt/mysql/bin/mysql_config checking for ... checking pkg-config is at least version 0.9.0... yes configure: error: --with-mysql=path not supported. You may want to use instead: CPPFLAGS=-I/opt/mysql/bin/mysql_config/include LDFLAGS=-L/opt/mysql/bin/mysql_config/lib ./configure --with-mysql i followed the hint from the configure script above and run into the core-dumps due to symbol clash str_to_time. How to work around with mysql in non-standard location? Thanks Axel

2 1

[Dovecot] per-user quotas
by David Mehler 12 Oct '12

12 Oct '12

Hello, I've got quotas set up on an all-user basis on my system, it's a Postfix, Dovecot, Mysql virtual users setup. Currently I have each user getting a 1GB quota with these settings in 90-quota.conf: plugin { quota_rule = *:storage=1G quota_rule2 = Trash:storage=+100M } plugin { quota = maildir:User quota } While this works it's not what I want for all users. Say I add a virtual user called user1 to the mysql database but he's a test user and I only want that user to have 25 megabytes of storage, reading the wiki on quotas per-user items such as for example in a database overrides the global items above, is this right? If so, I'm hoping I'm not going to have to redo my entire user database, some users will have per-user quotas while I'll let others have the global quota. Thanks. Dave.

3 3

[Dovecot] Feature Request
by Marc Perkel 12 Oct '12

12 Oct '12

It would be handy (for me) if there were a userdb where a directory structure defined the db. userdb stat { mail_location=maildir:/fakedir/%d/%n:INBOX=/email/%d/%n:LAYOUT=fs } userdb stat { mail_location=maildir:/email/%d/%n:INBOX=/email/%d/%n:LAYOUT=fs } The idea being that if the first directory doesn't exist then it will try the second one.

3 4

[Dovecot] Multiple Maildir?
by Marc Perkel 12 Oct '12

12 Oct '12

OK - Getting close to everything working in my weird configuration. Here's a problem I'm still having. I'm authenticating with this: userdb { driver = sql args = /etc/dovecot/master-combined-sql.conf } Default mail location: mail_location = maildir:/fakedir/%d/%n:INBOX=/email/%d/%n:LAYOUT=fs However - what I'd like to do is if the mail location doesn't exist then I want to try a second mail location: mail_location = maildir:/email/%d/%n:INBOX=/email/%d/%n:LAYOUT=fs How do I do that? Thanks in advance

3 5

[Dovecot] Shared Squat index for public mailboxes
by Frerich Raabe 11 Oct '12

11 Oct '12

Hi, I'm running Dovecot 1.2.17 for serving mail via IMAP as well as for providing access to a mailing list archive. The archive is implemented as a public read-only mailbox with per-user index files (i.e. the \Seen flags are per-user). I recently enbled the Squat plugin to accelerate searches in the message bodies and noticed that every user (I'm using a virtual user setup) gets his own dovecot.index.search and dovecot.index.search.uids copies. Is it possible to share those files among all users of the system? The squat plugin appears to store the search indices among the other index files (as explained on http://wiki.dovecot.org/Plugins/FTS/Squat) no matter what; I considered storing a central copy of the index files somewhere and then creating symlinks for all users. It should be ok as far as file-permissions go since all mail is owned by a single vmail system user, but I wonder whether the indices are really the same (I noticed their md5 checksums differ) and whether there may be file locking issues in case two users search message bodies simultaneously. Can anybody shed some light? -- Frerich Raabe - raabe(a)froglogic.com www.froglogic.com - Multi-Platform GUI Testing

3 7

[Dovecot] dovecot cores
by dovecot＠freakout.de 11 Oct '12

11 Oct '12

Hi dovecot-community, i have set up a new dovecot server - everything is self-compiled and with newest versions. dovecot daemon dies every night: Bugreport Mail - dovecot cores with sig11 my dovecot daemon cores every night - no message in log file. Please help. It runs in an OpenVZ container - therefore reiserfs is reported as filesystem. root@glen ~]# cat /etc/dovecot/dovecot.conf # 2.1.10: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-308.8.2.el5.028stab101.1PAE i686 CentOS release 5.8 (Final) reiserfs auth_mechanisms = plain login cram-md5 apop default_login_user = nobody disable_plaintext_auth = no first_valid_uid = 300 listen = * mail_gid = 332 mail_home = /var/dovecot mail_location = maildir:/var/spool/mail/virtual/%d/%n mail_plugins = quota mail_uid = 332 passdb { driver = sql args = /etc/dovecot/sql.conf } plugin { quota = maildir:User quota } protocols = imap pop3 ssl_cert = </etc/exim/glen.ypack.de.pem ssl_key = </etc/exim/glen.ypack.de.key userdb { driver = prefetch } userdb { driver = sql args = /etc/dovecot/sql.conf } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_enable_last = yes pop3_uidl_format = %08Xu%08Xv } protocol imap { imap_client_workarounds = delay-newmail mail_plugins = quota imap_quota } root@glen ~]# cat /etc/dovecot/sql.conf driver = mysql connect = host=much dbname=toarx user=exim password=xxxxxxxx default_pass_scheme = PLAIN password_query = select login as username, password, dbuser_uid, dbuser_gid, dbuser_home, dbuser_mail, userdb_quota_rule from vusers where email = '%u' user_query = select login as username, password, dbuser_uid, dbuser_gid, dbuser_home, dbuser_mail, userdb_quota_rule from vusers where email = '%u' iterate_query = select email as user from vusers where user != 'odmr' root@glen run]# gdb /opt/dovecot/sbin/dovecot /var/dovecot/run/core.20049 GNU gdb (GDB) CentOS (7.0.1-42.el5.centos.1) Copyright (C) 2009 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i386-redhat-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /opt/dovecot-2.1.10-3/sbin/dovecot...(no debugging symbols found)...done. [New Thread 20049] Reading symbols from /opt/mysql/lib/libmysqlclient.so.18...done. Loaded symbols for /opt/mysql/lib/libmysqlclient.so.18 Reading symbols from /opt/dovecot/lib/libdovecot.so.0...done. Loaded symbols for /opt/dovecot/lib/libdovecot.so.0 Reading symbols from /lib/libgcc_s.so.1...(no debugging symbols found)...done. Loaded symbols for /lib/libgcc_s.so.1 Reading symbols from /lib/libc.so.6...(no debugging symbols found)...done. Loaded symbols for /lib/libc.so.6 Reading symbols from /opt/mysql/lib/libstrings.so...done. Loaded symbols for /opt/mysql/lib/libstrings.so Reading symbols from /opt/zlib/lib/libz.so.1...(no debugging symbols found)...done. Loaded symbols for /opt/zlib/lib/libz.so.1 Reading symbols from /lib/libdl.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/libdl.so.2 Reading symbols from /lib/libpthread.so.0...(no debugging symbols found)...done. [Thread debugging using libthread_db enabled] Loaded symbols for /lib/libpthread.so.0 Reading symbols from /lib/libm.so.6...(no debugging symbols found)...done. Loaded symbols for /lib/libm.so.6 Reading symbols from /opt/ssp/lib/libssp.so.0...done. Loaded symbols for /opt/ssp/lib/libssp.so.0 Reading symbols from /lib/ld-linux.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from /lib/libnss_files.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/libnss_files.so.2 Core was generated by `/opt/dovecot/sbin/dovecot'. Program terminated with signal 11, Segmentation fault. #0 0xb7f95fe4 in str_to_time () from /opt/mysql/lib/libmysqlclient.so.18 (gdb) bt #0 0xb7f95fe4 in str_to_time () from /opt/mysql/lib/libmysqlclient.so.18 #1 0xb7f131c0 in master_instance_list_add_line (list=0x9d48880, line=0x9d540c8 "1349762052\tdovecot\t/var/dovecot/run\t") at master-instance.c:85 #2 0xb7f1331f in master_instance_list_refresh (list=0x9d48880) at master-instance.c:115 #3 0xb7f13620 in master_instance_write_init (list=0x9d48880, dotlock_r=0xbff6fb60) at master-instance.c:173 #4 0xb7f1390d in master_instance_list_set_name (list=0x9d48880, base_dir=0x8055300 "/var/dovecot/run", name=0x8055323 "dovecot") at master-instance.c:252 #5 0x0804c347 in net_accept () at network.c:502 #6 0xb7f3255b in io_loop_handle_timeouts_real (ioloop=0x9d465b0) at ioloop.c:354 #7 0xb7f325de in io_loop_handle_timeouts (ioloop=0x9d465b0) at ioloop.c:367 #8 0xb7f338b6 in io_loop_handler_run (ioloop=0x9d465b0) at ioloop-poll.c:171 #9 0xb7f326d3 in io_loop_run (ioloop=0x9d465b0) at ioloop.c:398 #10 0xb7f17304 in master_service_run (service=0x9d464e0, callback=0) at master-service.c:543 #11 0x0804d375 in net_accept () at network.c:502 #12 0xb7d84e9c in __libc_start_main () from /lib/libc.so.6 #13 0x0804b501 in net_accept () at network.c:502 (gdb) q Regards Axel

2 1

[Dovecot] memory allocation in new thread
by . . 11 Oct '12

11 Oct '12

Hi! I have some problems with memory allocation. I create new thread in cidir storage and call malloc(), and it fails to allocate even 1 byte. What can cause this problem? Dovecot vesrion is: 2.1.10 (130563b592c9+) Sample code looks like this (I also link to pthread with: -pthread): #define TEST_MALLOC() \ { \ void *p; \ p = malloc(1); \ if (!p) { \ i_info("%s: malloc() failed", __FUNCTION__); \ } else { \ i_info("%s: malloc() succeeded", __FUNCTION__); \ free(p); \ } \ } #include <pthread.h> static void *test_pthread_malloc_func(void *data_) { TEST_MALLOC(); return NULL; } static void test_pthread_malloc() { int ret; pthread_t tid; TEST_MALLOC(); ret = pthread_create(&tid, NULL, test_pthread_malloc_func, NULL); if (ret) { i_info("failed to start thread"); } else { pthread_join(tid, NULL); } } I call test_pthread_malloc() function. It produces following output: Oct 11 12:56:15 imap(guest): Info: test_pthread_malloc: malloc() succeeded Oct 11 12:56:15 imap(guest): Info: test_pthread_malloc_func: malloc() failed

2 1

[Dovecot] Irrelevant information filling logs
by 3.listas＠adminlinux.com.br 11 Oct '12

11 Oct '12

Hi, I have a "Ubuntu10.04 + dovecot-2.0.13" configuration in my server. My mailbox server is shared by ~ 10k domains. It works fine with ~50k accounts. There is a lot of logs of "quota exceeded" like this: Oct 10 13:00:56 mailboxserver5 dovecot: lmtp(29105, user@mailboxserver5): Error: ifcIN1NxdVCxcQAAMBx7mQ: sieve: msgid=unspecified: failed to store into mailbox 'INBOX': Quota exceeded (mailbox for user is full) These messages are not important to me. But these messages fill the log files, damaging the display of messages that could be important. Is there a way to send specific Dovecot errors on specific files or just discard them? Thanks -- Thiago Henrique adminlinux.com.br

6 5

[Dovecot] some questions on AOX or rather a mail system setup
by Christoph Anton Mitterer 11 Oct '12

11 Oct '12

Hi folks. Perhaps you find some time to look into this,... I'm trying to plan my mail system and would have some questions. The overall idea is about the following: - There is a (internet) server, which is the MTA (which will be postfix) and imap and/or pop3 server (which shall be, guess, dovecot ... AOX comes in later). - Any spam filtering, virus-scanning, mail filtering happens on that server. - I have not yet decided on whether to use maildrop for this or Sieve. Maildrop is nice, but has one major deficiency which I don't know how to work around. - A few clients (that means I won't serve 100 of users) connect to that server via imap and should see all mails, etc. already in some fancy sorted hierarchy (that means filtered into different directories). So far nothing complicated. But now... - Apart from spam, I never delete mail; and because I'm subscribed to many lists, I get a lot of mail. - Storage on my server is limited and it's located somewhere at my ISP, so I generally do not trust it with respect to safety... For both reasons, I want the canonical archive of all mail to be at home at some local server. - The local server should also be an imap server, so that I can access the archive from may computers at home. - The local server won't be available from the internet. - The local archive should have the same folder hierarchy as the internet server (I'd prefer not to filter twice). - The local archive might be AOX... Mail Flow: - I generally want to have _all_ mail (which is not sorted out because of being spam) to be archived at the local server. - But(!) I want to selectively keep (in addition) mail at the internet server. For example I may want to select the folder that contains all mail form some friend to be kept online completely. But I may want to decide that mailinglists keep only the last 10 days and/or 1000 messages of mail. - The idea is, that the local server regularly (when it is online/running) catches new mail from the internet server... and stores it in the archive. - So apart from new mail that has not yet been read, that local archive contains always all mails that are also on the internet server... the later may contain (for specific directories) the same, or just parts of. - The MUAs will then have two imap accounts, one to the internet server and one to the local archive,... each one being usable, depending on where I am. 1) This is where my first problem arises: How can I implement that mail flow, especially: - How do I secure that all mail is read from the internet server (i.e. that nothing is "forgotten"? - How do I make sure that no mails are retrieved twice (or more)? A problem which I often had with pop, when the mail client crashed during sync? - Further it must be secured, that when I delete something on the internet server, it is NOT deleted on the local server (on the next mail-fetching).... this is why I don't use the word "sync". a) One stupid solution would be, that I duplicate all mail on the online server,... one part is for staying online, one part is for being fetched to the local archive. As soon as it was fetched... that copy gets removed (always). That solution would give a clean and secured separation of both? b) I don't think offlineimap or any other caching-like solution is the right thing... especially as one must always fear that such a cache may be accidentally wiped. Are there better solutions than (a)? 2) Problem would be already a refinement of a working solution for (1) (but obviously not when using (1).(a) ). When e.g. reply to or forward a mail using the online server,... and that mail had already been fetched,... can I make the flag synced? 3) Is AOX suitable for the local server? - I couldn't use maildir locally, because I loose just to much space to the block fragmentation. But I guess I won't have this problem with the DB backend. a) Is AOX able to manage a really big folder hierarchy that basically ever keeps growing... with easily several 100k mails per folder... and that is in total already over 100GB? I read that e.g. dovecot would have more performance problems with that. b) I would prefer to have fast full text search. Does AOX provide this? I read that IMAP has limitations which make full text search not really usable via it? Further, I remember some dovecot wiki page that showed a comparison which said that both do not perfectly implement imap. Thanks a lot, Chris.

3 5

[Dovecot] iterate_query does not use userdb - mail_location not found
by dovecot＠freakout.de 11 Oct '12

11 Oct '12

Hi dovecot-comminity, can't get iterate_query working. doveadm cannot find mail_location which comes from userdb query. dovecot itself works fine with sql. Whats wrong? please help: [root@glen exim]# /opt/dovecot/bin/doveadm search -A mailbox Trash savedbefore 90d doveadm(uwe(a)mitmachnet.de): Error: user uwe(a)mitmachnet.de: Initialization failed: mail_location not set and autodetection failed: Mail storage autodetection failed with home=(not set) doveadm(uwe(a)mitmachnet.de): Error: User init failed dovecot.conf: passdb { driver = sql args = /etc/dovecot/sql.conf } userdb { driver = sql args = /etc/dovecot/sql.conf } sql.conf: driver = mysql connect = host=much dbname=toarx user=exim password=xxxxxxxx default_pass_scheme = PLAIN password_query = select user as username, password, userdb_home, userdb_mail, userdb_quota_rule from vusers where email = '%u' user_query = select user as username, userdb_home, userdb_mail, userdb_quota_rule from vusers where email = '%u' iterate_query = select email as user from vusers Cheers Axel

2 1

[Dovecot] Fwd: Re: Dovecot doesnot disconnect at end of pop3 session
by Robert JR 10 Oct '12

10 Oct '12

On 2012-10-10 17:47, Jack Bates wrote: > On 10/10/2012 9:40 AM, Robert JR wrote: > >> telnet mymail.com 110 user username pass password list quit all >> commands work except the quit command, Dovecot hang at this point >> !!! >> Why Dovecot hang on receiving the Quit command !!! and doesnot >> disconnect !! > Please include your dovecot version. Also, does the list command end > with a line that contains a period? You might want to include dovecot > -n > as well, which will show everyone what your mail storage type is and > other relevant information. Jack # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.9.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) auth_mechanisms = plain login auth_username_format = %Lu disable_plaintext_auth = no mail_debug = yes mail_location = mbox:~/mal:INBOX=/var/mail/%u mbox_write_locks = fcntl passdb { driver = pam } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol pop3 { mail_max_userip_connections = 4 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } Please find the output of dovecot -n list command return msg number and size only. Thanks

2 1

[Dovecot] Dovecot doesnot disconnect at end of pop3 session
by Robert JR 10 Oct '12

10 Oct '12

Hello, I have 3 users checking same email account using pop3 (outlook express) suddenly after some hours , users are unable to disconnect from pop3 after checking mail So i telnet to the pop3 and found that the issue is true but i do not know the reason telnet mymail.com 110 user username pass password list quit all commands work except the quit command, Dovecot hang at this point !!! Why Dovecot hang on receiving the Quit command !!! and doesnot disconnect !! Any help is greatly appreciated. Thanks.

2 1

Re: [Dovecot] I need a quota expert
by Tibby 10 Oct '12

10 Oct '12

I'm having problems with dovecot quota configuration. If I Include the driver mysql in dovecot-sql.conf I'm getting this error: dovecot: dict: Error in configuration file /etc/dovecot/dovecot-sql.conf line 1: Unknown setting: driver dovecot: dict: Failed to initialize dictionary 'quotadict' If I Don't include it: dovecot: auth(default): Fatal: sql: driver not set in configuration file /etc/dovecot/dovecot-sql.conf dovecot: auth(default): Fatal: sql: driver not set in configuration file /etc/dovecot/dovecot-sql.conf Now What??? How Should I configure quota ? My SQL has a mail db with a user table. The table has email, password, quota_kb fields. my dovecot.conf: ---------------- protocols = imap imaps pop3 pop3s log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/home/vmail/%d/%n/Maildir disable_plaintext_auth = no ssl_cert_file = /etc/ssl/certs/dovecot.pem ssl_key_file = /etc/ssl/private/dovecot.pem namespace private { separator = . prefix = INBOX. inbox = yes } protocol imap { mail_plugins = quota imap_quota } protocol lda { log_path = /home/vmail/dovecot-deliver.log auth_socket_path = /var/run/dovecot/auth-master postmaster_address = postmaster(a)domain.tld mail_plugins = sieve quota global_script_path = /home/vmail/globalsieverc mail_plugin_dir = /usr/lib/dovecot/modules/lda } protocol pop3 { pop3_uidl_format = %08Xu%08Xv mail_plugins = quota } dict { quotadict = mysql:/etc/dovecot/dovecot-sql.conf } plugin { quota = dict:user::proxy::quotadict quota_rule = *:storage=10M:messages=1000 } auth default { user = root passdb sql { args = /etc/dovecot/dovecot-sql.conf } userdb sql { args = /etc/dovecot/dovecot-sql.conf } socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = vmail } client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } } mail_uid = 5000 mail_gid = 5000 my dovecot-sql.conf: ---------------- driver = mysql connect = host=127.0.0.1 dbname=mail user=****** password=****** default_pass_scheme = CRYPT password_query = SELECT email as user, password, concat('*:storage=', quota_kb) AS quota_rule FROM users WHERE email='%u'; user_query = SELECT CONCAT('/home/vmail/',CONCAT(SUBSTRING_INDEX(email,'@',-1),'/',SUBSTRING_INDEX(email,'@',1))) AS home, 5000 AS uid, 5000 AS gid, concat('*:storage=', quota_kb) AS quota_rule FROM users WHERE email='%u' map { pattern = priv/quota/storage table = user username_field = user value_field = quota_kb } SOMEBODY PLEASE HELP ME!!! :)

2 1

[Dovecot] About ManageSieve and TLS
by 3.listas＠adminlinux.com.br 10 Oct '12

10 Oct '12

Hi, I have a "ubuntu10.04 + dovecot-2.0.13" configuration in my server. It works fine with ~50k accounts. Recently I enabled TLS: $ cat /etc/dovecot/dovecot.conf ... # Use SSL ? ssl = yes ... The goal was to provide only IMAPS and POP3S. But Managesieve says "STARTTLS": $ telnet _MY_IP_ 2000 Trying _MY_IP_... Connected to _MY_IP_. Escape character is '^]'. "IMPLEMENTATION" "K8 ManageSieve" "SIEVE" "comparator-i;ascii-numeric copy envelope fileinto imapflags include notify regex reject relational subaddress vacation" "SASL" "PLAIN LOGIN" "STARTTLS" "VERSION" "1.0" OK "K8 IMAP/POP3 server" doveconf -a shows: service managesieve-login { ... inet_listener sieve { address = _MY_IP_ port = 4190 ssl = no } inet_listener sieve_deprecated { address = _MY_IP_ port = 2000 ssl = no } ... } I think there is something wrong there but I don't know. I think Managesieve should not say "STARTTLS". Can someone help me? Thanks. -- Thiago Henrique adminlinux.com.br

2 2

Re: [Dovecot] LDAP encryption
by James Devine 09 Oct '12

09 Oct '12

I don't think I understand. Right now the problem is the password retrieved from LDAP cannot be hashed to compare against what the user sent because it is encrypted. I have to perform my AES decryption before it can be hashed and compared. On Tue, Oct 9, 2012 at 1:03 PM, btb <btb(a)bitrate.net> wrote: > On 2012.10.09 14.41, James Devine wrote: > >> We have an LDAP server that contains AES encrypted passwords. So far I've >> been able to use this by adding a passdb module that encrypts the user's >> password prior to ldap comparison. Now I am looking at supporting >> client-side encrypted passwords. To do this I need to decrypt the >> password >> returned by LDAP. Is there a way to insert a module to do this decryption >> between ldap returning and the auth mechanism? >> >> that would be unwise, generally speaking. as a rule of thumb, in terms > of security fundamentals, only the rootdn [or equiv] should be able to read > the values in an ldap entry's password attribute. certainly the service > account used by dovecot should not. > > in the context of ldap, authentication should be accomplished by binding > as the user, not by retrieving attribute values and performing string > comparisons. among other things, this decouples the two components and > allows applications [e.g. dovecot] to be unconcerned with whatever password > hashing scheme the directory server might be using. > > -ben >

2 2

[Dovecot] LDAP encryption
by James Devine 09 Oct '12

09 Oct '12

We have an LDAP server that contains AES encrypted passwords. So far I've been able to use this by adding a passdb module that encrypts the user's password prior to ldap comparison. Now I am looking at supporting client-side encrypted passwords. To do this I need to decrypt the password returned by LDAP. Is there a way to insert a module to do this decryption between ldap returning and the auth mechanism?

1 0

[Dovecot] Quota - usage counting.
by wamp＠promax.media.pl 09 Oct '12

09 Oct '12

Hello, I use dovecot 1.2 version with postfix virtual users and mysql. All information about quota for every user is in mysql table. How dovecot compare if quota in database is over quota in /var/vmail/exampleuser directory ? It uses something like du command ? regards, Wamp

2 2

[Dovecot] some questions on dovecot or rather a mail system setup
by Christoph Anton Mitterer 09 Oct '12

09 Oct '12

Hi folks. Perhaps you find some time to look into this,... if you think I should better direct this do some dovecot mailing list,.. just tell :) I'm trying to plan my mail system and would have some questions. The overall idea is about the following: - There is a (internet) server, which is the MTA (which will be postfix) and imap and/or pop3 server (which shall be, guess, dovecot!). - Any spam filtering, virus-scanning, mail filtering happens on that server. - I have not yet decided on whether to use maildrop for this or Sieve. Maildrop is nice, but has one major deficiency which I don't know how to work around. - A few clients (that means I won't serve 100 of users) connect to that server via imap and should see all mails, etc. already in some fancy sorted hierarchy (that means filtered into different directories). So far nothing complicated. But now... - Apart from spam, I never delete mail; and because I'm subscribed to many lists, I get a lot of mail. - Storage on my server is limited and it's located somewhere at my ISP, so I generally do not trust it with respect to safety... For both reasons, I want the canonical archive of all mail to be at home at some local server. - The local server should also be an imap server, so that I can access the archive from may computers at home. - The local server won't be available from the internet. - The local archive should have the same folder hierarchy as the internet server (I'd prefer not to filter twice). Mail Flow: - I generally want to have _all_ mail (which is not sorted out because of being spam) to be archived at the local server. - But(!) I want to selectively keep (in addition) mail at the internet server. For example I may want to select the folder that contains all mail form some friend to be kept online completely. But I may want to decide that mailinglists keep only the last 10 days and/or 1000 messages of mail. - The idea is, that the local server regularly (when it is online/running) catches new mail from the internet server... and stores it in the archive. - So apart from new mail that has not yet been read, that local archive contains always all mails that are also on the internet server... the later may contain (for specific directories) the same, or just parts of. - The MUAs will then have two imap accounts, one to the internet server and one to the local archive,... each one being usable, depending on where I am. 1) This is where my first problem arises: How can I implement that mail flow, especially: - How do I secure that all mail is read from the internet server (i.e. that nothing is "forgotten"? - How do I make sure that no mails are retrieved twice (or more)? A problem which I often had with pop, when the mail client crashed during sync? - Further it must be secured, that when I delete something on the internet server, it is NOT deleted on the local server (on the next mail-fetching).... this is why I don't use the word "sync". a) One stupid solution would be, that I duplicate all mail on the online server,... one part is for staying online, one part is for being fetched to the local archive. As soon as it was fetched... that copy gets removed (always). That solution would give a clean and secured separation of both? b) I don't think offlineimap or any other caching-like solution is the right thing... especially as one must always fear that such a cache may be accidentally wiped. Are there better solutions than (a)? 2) Problem would be already a refinement of a working solution for (1) (but obviously not when using (1).(a) ). When e.g. reply to or forward a mail using the online server,... and that mail had already been fetched,... can I make the flag synced? 3) Is dovecot suitable for the local server? - Ideally of course, I would use dovecot there, too... because that would mean one piece of software less to understand. - I couldn't sue maildir locally, because I loose just to much space to the block fragmentation. - I'd prefer not to use dbox (the thing that the indices are crucial scares me a bit off). a) When using mbox... is dovecot able to manage a really big folder hierarchy that basically ever keeps growing... with easily several 100k mails per folder... and that is in total already over 100GB? - I would prefer to have fast full text search. Does dovecot provide this? I was looking into database backed mail systems (again,... just for the local archive)... namely dbmail and archiveopteryx (are there other open source solutions?)... Not sure which of the two... or whether it's a good idea at all. I remember some dovecot wiki page that showed a comparison which said that both do not perfectly implement imap. Any suggestions with respect to that? Or is there even some SQL backend planned for dovecot? Thanks a lot, Chris.

3 3

[Dovecot] Master User Question
by Marc Perkel 08 Oct '12

08 Oct '12

OK - I'm trying to do weird stuff so rather not answer why I'm doing this. Trying to log in using a master user: user@example.com*master@master.com When debugging the master authenticates - but then it tries to authenticate user(a)example.com and it's not found. And - it is true that the user doesn't actually exist. What I want to do is allow it to log in without checking if the user exists, just on the credentials of the master. I'm not quite understanding what the login attempt for user(a)example.com is trying to do. Is it looking for more necessary information? Hope I asked this clearly enough. Thanks in advance.

2 5

[Dovecot] Namespace Prefix Tutorial?
by Marc Perkel 08 Oct '12

08 Oct '12

I'm trying to grasp the namespace and prefix stuff and looking for a good tutorial page that explains what it is and how to use it. Thanks in advance

3 6

[Dovecot] another mysql quota problem
by Tibby 08 Oct '12

08 Oct '12

Hello! I am using dovecot 1.2.15 on Debian 6 I have Postfix configured with mysql, and also dovecot is auth-ing form mysql users table. The users table has username password quota stored. When I set qouta to whatever number, it doesnt even show in dovecot. telnet localhost 143 a login username(a)domain.tld password a getquotaroot inbox * QUOTAROOT "INBOX" a OK Getquotaroot completed. Basicly it doesn't show any kind of quota. in the /etc/dovecot/dovecot-sql.conf: driver = mysql connect = host=127.0.0.1 dbname=mail user=USERNAME password=PASSWORD default_pass_scheme = CRYPT password_query = SELECT email as user, password FROM users WHERE email='%u'; user_query = SELECT CONCAT(('/home/vmail/'), SUBSTRING_INDEX(email,'@',-1),'/',SUBSTRING_INDEX(email,'@',1),'/') AS home, 5000 AS uid, 5000 AS gid, CONCAT('maildir:storage=', floor(quota/1024)) AS quota FROM users WHERE email='%u'; Why it doesn't get the quota out from the mail DB's users table?

1 0

[Dovecot] Large subjects increase memory-usage and enlarge index-files
by Peer Heinlein 08 Oct '12

08 Oct '12

Several times we already had the problems, that accounts with more the 1.3 or 1.7 billion e-mails in one folder run out-of-memory, even if vsize_limit of 750 MB is set. In this case, the lmtpd-process haven't been able to allocate more memory to read/write/update the index-files and crashed (and the index-files become corrupted at the end.) [Please -- don't discuss about the need of INBOXes with 1.7 million (unread) e-mails (don't discuss that with ME. Personally, I agree, that there's NO need for that...).] But: We also noticed accounts with ~ 300.000 e-Mails running out of memory in the same situations. This happends, if the subject is very large (subject or some other header attributes). And: We've been able to reproduce out-of-memory-Problems with just 13.000 e-mails with VERY long subjects (e.g.: network monitoring status informations), even with a vsize_limit of 750 MB (which is already very much). 13.000 e-mails isn't very much. And it's easy to inject several thousands of prepared e-mails. Having many mails for accounts with huge (and broken) index-files slows down the delivery rate VERY much and increases the need for memory and cpu resources and I/O very much. So: This could be used for a very easy to do denial-of-service attac against Dovecot-based mailservers. I don't have a clear solution for that, Dovecot needs the subject information in its index files. But it looks like, it isn't a good idea to put the whole subject into the index. Maybe it's better/necessary to use just the first 50-70 characters for that and to keep the rest away from the index? I think I would prefer that even if that means, that accessing those folders with "special" e-mails will become slower because Dovecot has to get those informations directly from the e-mail. This performance issue is just a problem for the user. But crashing lmtpd-processes and lowering the delivery rate is a *real* problem for the whole IMAP-cluster. Peer -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-42 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

4 4

[Dovecot] [OT] How do I convert maildir to bsmtp format?
by Marc Perkel 08 Oct '12

08 Oct '12

Here's what I'm trying to do. I have a spam filtering operation as a front end for other servers. I've created a virtual server for spam storage where the user will be able to log in using squirrelmail/dovecot to review and release their spam. The email is stored in maildir format. Piecing it together I can use squirrelmail to pipe the email into something so that if a use finds a false positive they can hit the "release" button and the message is sent on to the recipient. Squirrelmail sends the message as you would receive it as stored in maildir format. I need to take this format and translate it to send it on to the user. Wondering what is the best way to do that. Something that translated it into bsmtp format would be great. I'm sure thare must be something out there. I just haven't found it yet. Thanks in advance.

3 2

[Dovecot] Dovecot configuration and question about IP trusted
by Mik J 07 Oct '12

07 Oct '12

Hello list, I've just finished to install Dovecot and things seems to work so far. After some little efforts though. My version is 2.0.20 Question 1: I'm trying to tighten the security a little bit and added in dovecot.conf login_trusted_networks = 192.168.1.0/30 Then restarted Dovecot My client has the IP 192.168.1.20 and it's still able to retrieve emails. I expected it to be forbidden. Am I missing something ? # dovecot -n | grep trust login_trusted_networks = 192.168.1.0/30 Question 2: I feel that Dovecot is slow. I'm doing my test with my iphone as an imap client. Test 1: I retrieve a mail on a remote server provided by a hosting company, it takes 2 seconds Test 2: I retrieve a mail on my server which is on my LAN, the mail includes a few letters in the subject and a few letters in the body. The action takes about 8 seconds. It's quite subtule to measure so first I would like to know if Dovecot tries to do a dns reverse lookup or something like that. And it would explain the overhead. Thank you

2 4

[Dovecot] Getting rid of the subscription file
by Marc Perkel 06 Oct '12

06 Oct '12

I'd like to eliminate the subscription file and have it just list the folders that are there. How do I do that? Thanks in advance.

4 5

[Dovecot] doveadm purge -A via doveadm-proxy director fails after some users
by Daniel Parthey 06 Oct '12

06 Oct '12

Hi, we have configured userdb and passdb in the director and try to iterate all users and pass the "purge" command via doveadm proxy to port 19000 on the correct director backend host. A single purge -u username(a)example.org via doveadm-proxy works correctly, but iterating over some users with -A fails. Note: users/domains have been anonymized in output: ------------------------------------------------------------------------ mail04:~# /usr/bin/doveadm -c /etc/dovecot-director/dovecot-director.conf -D purge -A 2>&1 doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm doveadm(root): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_lookup (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_zlib_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_zlib_plugin.so: undefined symbol: i_stream_create_deflate (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_list_backend (this is usually intentional, so just ignore this message) doveadm(user01(a)domain1.example.org): Debug: auth input: user=user01(a)domain1.example.org proxy host=10.129.3.193 proxy_refresh=86400 doveadm(user02(a)domain1.example.org): Debug: auth input: user=user02(a)domain1.example.org proxy host=10.129.3.193 proxy_refresh=86400 doveadm(user03(a)domain1.example.org): Debug: auth input: user=user03(a)domain1.example.org proxy host=10.129.3.192 proxy_refresh=86400 doveadm(user04(a)domain1.example.org): Debug: auth input: user=user04(a)domain1.example.org proxy host=10.129.3.192 proxy_refresh=86400 doveadm(user05(a)domain1.example.org): Debug: auth input: user=user05(a)domain1.example.org proxy host=10.129.3.190 proxy_refresh=86400 doveadm(user06(a)domain1.example.org): Debug: auth input: user=user06(a)domain1.example.org proxy host=10.129.3.193 proxy_refresh=86400 doveadm(user07(a)domain1.example.org): Debug: auth input: user=user07(a)domain1.example.org proxy host=10.129.3.190 proxy_refresh=86400 doveadm(user08(a)domain1.example.org): Debug: auth input: user=user08(a)domain1.example.org proxy host=10.129.3.193 proxy_refresh=86400 doveadm(user01(a)domain2.example.org): Debug: auth input: user=user01(a)domain2.example.org proxy host=10.129.3.193 proxy_refresh=86400 doveadm(user09(a)domain1.example.org): Debug: auth input: user=user09(a)domain1.example.org proxy host=10.129.3.190 proxy_refresh=86400 10 / 94doveadm(user10(a)domain1.example.org): Debug: auth input: user=user10(a)domain1.example.org proxy host=10.129.3.190 proxy_refresh=86400 doveadm(user11(a)domain1.example.org): Debug: auth input: user=user11(a)domain1.example.org proxy host=10.129.3.191 proxy_refresh=86400 doveadm(user12(a)domain1.example.org): Debug: auth input: user=user12(a)domain1.example.org proxy host=10.129.3.193 proxy_refresh=86400 doveadm(user13(a)domain1.example.org): Debug: auth input: user=user13(a)domain1.example.org proxy host=10.129.3.190 proxy_refresh=86400 doveadm(user14(a)domain1.example.org): Debug: auth input: user=user14(a)domain1.example.org proxy host=10.129.3.193 proxy_refresh=86400 doveadm(user15(a)domain1.example.org): Debug: auth input: user=user15(a)domain1.example.org proxy host=10.129.3.191 proxy_refresh=86400 doveadm(user16(a)domain1.example.org): Debug: auth input: user=user16(a)domain1.example.org proxy host=10.129.3.191 proxy_refresh=86400 doveadm(user17(a)domain1.example.org): Debug: auth input: user=user17(a)domain1.example.org proxy host=10.129.3.193 proxy_refresh=86400 doveadm(user18(a)domain1.example.org): Debug: auth input: user=user18(a)domain1.example.org proxy host=10.129.3.193 proxy_refresh=86400 doveadm(user19(a)domain1.example.org): Debug: auth input: user=user19(a)domain1.example.org proxy host=10.129.3.192 proxy_refresh=86400 20 / 94doveadm(user20(a)domain1.example.org): Debug: auth input: user=user20(a)domain1.example.org proxy host=10.129.3.193 proxy_refresh=86400 doveadm(user21(a)domain1.example.org): Debug: auth input: user=user21(a)domain1.example.org proxy host=10.129.3.193 proxy_refresh=86400 doveadm(user22(a)domain1.example.org): Debug: auth input: user=user22(a)domain1.example.org proxy host=10.129.3.193 proxy_refresh=86400 doveadm(user02(a)domain2.example.org): Debug: auth input: user=user02(a)domain2.example.org proxy host=10.129.3.190 proxy_refresh=86400 doveadm(user23(a)domain1.example.org): Debug: auth input: user=user23(a)domain1.example.org proxy host=10.129.3.193 proxy_refresh=86400 doveadm(user24(a)domain1.example.org): Debug: auth input: user=user24(a)domain1.example.org proxy host=10.129.3.193 proxy_refresh=86400 doveadm(user01(a)domain3.example.org): Debug: auth input: user=user01(a)domain3.example.org proxy host=10.129.3.193 proxy_refresh=86400 doveadm(user25(a)domain1.example.org): Debug: auth input: user=user25(a)domain1.example.org proxy host=10.129.3.192 proxy_refresh=86400 doveadm(user26(a)domain1.example.org): Debug: auth input: user=user26(a)domain1.example.org proxy host=10.129.3.191 proxy_refresh=86400 doveadm(user27(a)domain1.example.org): Debug: auth input: user=user27(a)domain1.example.org proxy host=10.129.3.190 proxy_refresh=86400 30 / 94doveadm(user28(a)domain1.example.org): Debug: auth input: user=user28(a)domain1.example.org proxy host=10.129.3.193 proxy_refresh=86400 doveadm(user29(a)domain1.example.org): Debug: auth input: user=user29(a)domain1.example.org proxy host=10.129.3.191 proxy_refresh=86400 doveadm(user30(a)domain1.example.org): Debug: auth input: user=user30(a)domain1.example.org proxy host=10.129.3.193 proxy_refresh=86400 doveadm(user31(a)domain1.example.org): Debug: auth input: user=user31(a)domain1.example.org proxy host=10.129.3.193 proxy_refresh=86400 doveadm(user31(a)domain1.example.org): Error: doveadm server failure doveadm: Error: Failed to iterate through some users ------------------------------------------------------------------------ The user "user31(a)domain1.example.org" is proxied to the correct backend host according to director status, but the dovecot.log on the doveadm service backend host shows the following error: Jun 29 15:40:31 10.129.3.249 dovecot: doveadm(user31(a)domain1.example.org): Error: user user31(a)domain1.example.org: Error reading configuration: net_connect_unix(/var/run/dovecot/config) failed: Permission denied Jun 29 15:40:31 10.129.3.249 dovecot: doveadm(user31(a)domain1.example.org): Error: purge: User lookup failed: Internal error occurred. Refer to server log for more information. The wiki http://wiki2.dovecot.org/Services#doveadm states that the privileges are (temporarily) dropped to the mail user's privileges after userdb lookup. It seems that from the second purge on which is passed over a single doveadm connection, the user lookup fails. It also seems a bit strange, that the "-A" parameter can be observed in the doveadm tcp stream to the backend, since iteration should be already done in the director and the backend should purge only a single user: D username(a)example.org purge -A Is there a bug or have I misconfigured/overlooked something? Configs of mailbox backend and director are attached. Kind regards Daniel

2 8

[Dovecot] IPv6 & SSL
by Luigi Rosa 06 Oct '12

06 Oct '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I have a dual stack server with Dovecot 2.1.10 listening on v4 and v6 Dovecot has a Comodo SSL certificate issued via NameCheap that works as expected with IPv4 in 10-ssl.conf I have enabled these configuraction directives: ssl = yes ssl_cert = < /path/to/file.crt ssl_key = < /path/to/file.key ssl_parameters_regenerate = 202 hours If I connect to Dovecot using the IPv6 address of the server with Thunderbird 15.0.1 uising CRAM-MD5 averything is ok. If I enable SSL _and_ IPv6 on Thunderbird I get this error: Oct 5 20:05:04 mail dovecot: imap-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=2001:470:1f09:203:fdbf:508e:4a29:56c5, lip=2001:470:1f09:203::badd:ecaf, TLS: SSL_read() failed: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca: SSL alert number 48, session=<ZcMRtlPLqgAgAQRwHwkCA/2/UI5KKVbF> Ciao, luigi - -- / +--[Luigi Rosa]-- \ I will tell you a great secret, Captain. Perhaps the greatest of all time. The molecules of your body are the same molecules that make up this station and the nebula outside, that burn inside the stars themselves. We are star stuff, we are the universe made manifest, trying to figure itself out. As we have both learned, sometimes the universe requires a change of perspective." --Delenn, "Distant Star", Babylon 5 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ iEYEARECAAYFAlBvI50ACgkQ3kWu7Tfl6ZRBSACfRkp4FYpWaEZUQhIh0t6Vfs/I JbcAoKGZ769yogYS7faCXKvPTuhQiHA8 =jxCB -----END PGP SIGNATURE-----

5 8

[Dovecot] horde sync status ?
by Spyros Tsiolis 05 Oct '12

05 Oct '12

Hello all, I had a quick look at the horde site and noticed that horde is being advertised as, let's say, "smartphone friendly". Does anyone know if the newest horde version can "talk" to smart phones in regards to e-mails ? In other words, can a user owning a smartphone get his/her e-mails on it apart from the webpage ? Thank you, spyros ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

5 5

[Dovecot] bug formatting results when using doveadm-server
by Angel L. Mateo 04 Oct '12

04 Oct '12

Hello, I have a infrastructure using director in front of backend servers. So I normally run doveadm commands in director servers, not the backends. The problem I have is when I try to concatenate commands like this: doveadm search -S /var/run/dovecot/auth-userdb -u ${user} SAVEDSINCE 5w | while read guid uid; do doveadm fetch -S /var/run/dovecot/auth-userdb -u ${user} size.physical mailbox-guid $guid uid $uid; done The problem is that although when I run doveadm search command in the backend server I correctly get the list of mails, each line with the mailbox-guid and the uid of the message, when I run the same command in the director server, format of the list is corrupted and there are lines that contains just the mailbox-guid and the next the uid (of the previous) and the mailbox-guid of next, and so on. Like: e62e0d3834ed094e5c7900007efb8a67 66 e62e0d3834ed094e5c7900007efb8a67 71 e62e0d3834ed094e5c7900007efb8a67 74 e62e0d3834ed094e5c7900007efb8a67 75 e62e0d3834ed094e5c7900007efb8a67 77 e62e0d3834ed094e5c7900007efb8a67 78 e62e0d3834ed094e5c7900007efb8a67 so I can't postprocess correctly the output. I think it could be a bug in the communication between the doveadm client and server. PS: As the time of writing this email, I have realized that I could use fetch command directly. But, anyway, I want to report the problem/bug so it can be fixed.

2 6

[Dovecot] possible nfs issue
by Cor Bosman 04 Oct '12

04 Oct '12

Hi all, we've started receiving complaints from users that seemingly use more quota than they actually have. We noticed that these users have (in some cases many) .nfs files in their mailspool. Some of our admins checked their own dirs, and noticed them there as well. This could of course be unrelated to dovecot (kernel issue, netapp issue) but maybe somehow has an idea about if dovecot could cause this. This has been going on for at least a year, not really enough to notice before now. root@userimap1# find . -type f|grep -i .nfs ./cur/.nfs00000000003967ad003c0603 ./cur/.nfs000000000757b44b003be609 ./cur/.nfs00000000035e89bd003be60b ./cur/.nfs000000000796251c003be60c ./cur/.nfs000000000796251f003be60e ./cur/.nfs000000000262f9a1003be33a ./cur/.nfs00000000096513f3003be524 ./cur/.nfs0000000007962525003be60f ./cur/.nfs0000000003e7d8ab003be62b ./cur/.nfs00000000026f4fad003be50d ./cur/.nfs0000000000bdaeab003c0611 ./cur/.nfs0000000005da42c7003be525 ./cur/.nfs0000000003d74729003be526 ./cur/.nfs000000000229769e003be535 ./cur/.nfs000000000440969e003be516 With NFS these files are created when a file gets unlinked, but another process still has it open. It disappears as soon as the other process closes it. For some reason they dont disappear. As far as I can tell we've had no server crashes that could explain this. One possible theory is that a rename happens after an unlink. In that case the file remains. This could possibly be a dovecot issue. Anyone else with NFS mailspools seeing this? Cor

5 7

[Dovecot] LDA vs LMTP index files
by list＠airstreamcomm.net 03 Oct '12

03 Oct '12

In the docs it states that LDA " ...takes mail from anMTAand delivers it to a user's mailbox, while keeping Dovecot index files up to date." I am wondering if LMTP also interacts with the Dovecot index files and keeps them up to date?

3 3

[Dovecot] [PATCH] Add SCRAM-SHA-1 password scheme
by Florian Zeitz 03 Oct '12

03 Oct '12

Hello, attached is an hg export on top of the current dovecot-2.2 branch, which adds support for a SCRAM-SHA-1 password scheme. Ideally I'd want doveadm pw's rounds flag to apply to this, but that's currently specific to the crypt password scheme, so I left it out for now. Regards, Florian Zeitz

2 9

[Dovecot] Syntax for doveadm auth cache
by Angel L. Mateo 03 Oct '12

03 Oct '12

Hello, What is the correct syntax of doveadm auth cache command? According to command line help: usage: doveadm [-Dv] [-f <formatter>] <command> [<args>] altmove [-u <user>|-A] [-S <socket_path>] [-r] <search query> auth [-a <auth socket path>] [-x <auth info>] <user> [<password>] auth cache but when I try to run doveadm auth cache, then I'm asked for a password, so I think the command is trying to authenticate cache user. Moreover... according to previous mails (thread http://www.dovecot.org/list/dovecot/2012-June/066691.html) there is a patch to remove a specific user entry from cache. This patch I think is included in dovecot 2.1.9 (which I'm running) and the syntax is (I think): doveadm auth cache flush <user> 4 cache entries flushed So I'm running this command. Whenever I run it, I get the message that 3 (sometimes, is 4) entries are removed, but user information isn't really reloaded and I doubt it is really removed from cache (I have the user in a passwd-file and information used by imap processes is still the old one, no the new one, changed before the flush) -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868887590 Fax: 868888337

2 9

Re: [Dovecot] Logging IP address for failed login
by Joseph Tam 03 Oct '12

03 Oct '12

Scott Neville <dovecot-in(a)keystealth.org> writes: > I am trying to use the logs to show the IP that brute force activity > comes from, but Im not succeeding. I have read the archives and seen > the advice others have had. I can see logs for repeated bad logins, > but I need the IP address from the attempts. > > ... > but only for successful logins. The brute force attempts dont log like that: > > Sep 16 00:02:58 olive dovecot: auth: pam(backup): unknown user This was similar to another complaint several months ago. I conjectured that these attempts are SMTP AUTH, not IMAP, brute forcing. Are you using the dovecot's SASL feature to authenticate outgoing Email (i.e. via Postfix?). Maybe you verify this hypothesis by checking the Postfix logs. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] segfault in Debian Squeeze + Dovecot 2.1.10
by Joe Auty 03 Oct '12

03 Oct '12

Hello, I'm seeing a lot of these in my /var/log/messages in Debian Squeeze, I suspect this might be causing performance issues. Any suggestions what I can try to fix this? > [7236671.301179] imap-login[9306]: segfault at 28 ip 00007f9ff83c7e14 > sp 00007fff49d385c0 error 4 in libdovecot.so.0.0.0[7f9ff837c000+8b000] I'm using the 2.1.10 packages obtained with the following in my sources.list: deb http://xi.rename-it.nl/debian/ stable-auto/dovecot-2.1 main I need to use Dovecot 2.1.x because I need to support handling multiple SSL certs.

7 25

[Dovecot] Spurious " Renaming not supported across conflicting directory permissions"
by tlhackque 02 Oct '12

02 Oct '12

Dovecot 2.1.10 Client = Thunderbird. Local disks. mbox format. Attempted to rename a folder, failed with: CANNOT Renaming not supported across conflicting directory permissions I don't understand why this should happen. o I was renaming within a directory - the attempt was to rename "Domain Names &- SSL Certificates" to "Domain Names". No directory was specified o The reason the directory has g=s is for dovecot - so that the 'mail' group (12) will stick to any files created. I was getting more understandable permission failures before I added it. Since 's' doesn't apply to files, I don't see why this should be viewed as a conflict. o If I chmod g-s the directory, the command succeeds. But then I'm back to file ownership problems... drwxrws--- 4 4503 12 4096 Sep 22 06:17 F/N/ -rw-rw---- 1 4503 12 81530 Sep 22 06:17 F/N/Domain Names &- SSL Certificates Sequence from TB's trace (crlfs for clarity): 1140[11ebcf00]: 121e8c00:imap.example.com:A:SendData: 66 rename "F/N/Domain Names &- SSL Certificates" "F/N/Domain Names" 1140[11ebcf00]: ReadNextLine [stream=12135a28 nb=80 needmore=0] 1140[11ebcf00]: 121e8c00:imap.example.com:A:CreateNewLineFromSocket: 66 NO [CANNOT] Renaming not supported across conflicting directory permissions 9592[c7d6840]: ReadNextLine [stream=ab687e8 nb=22 needmore=0] Config: # 2.1.10: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.22.14-72.fc6 i686 Fedora Core release 6 (Zod) first_valid_gid = 4000 first_valid_uid = 4000 hostname = smtp.example.com login_greeting = Dovecot ready. Unauthorized access is prohibited. mail_location = mbox:~/mail:INBOX=/var/mail/%n mail_privileged_group = mail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / } passdb { driver = pam } service imap-login { inet_listener imap { address = imap.v4.example.com imap.v6.example.com port = 143 } inet_listener imaps { address = imap.v4.example.com imap.v6.example.com port = 993 ssl = yes } } service pop3-login { inet_listener pop3 { address = pop.v4.example.com pop.v6.example.com port = 110 } inet_listener pop3s { address = pop.v4.example.com pop.v6.example.com port = 995 ssl = yes } } ssl_ca = </etc/pki/tls/certs/example_com_ca-cert-crl.pem ssl_cert = </etc/pki/tls/certs/servers-example-com.pem ssl_key = </etc/pki/tls/private/servers-example-com.pmk userdb { driver = passwd } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } -- --------------------------------------------------------- This communication may not represent my employer's views, if any, on the matters discussed.

2 1

[Dovecot] noisy auth-worker messages in logs (dovecot 2.1.8 FreeBSD)
by Philippe Chevalier 02 Oct '12

02 Oct '12

Hello, I don't know if it's been addressed before, but anyway : In my dovecot setup, I have local and virtual users. So, I need multiple passdb backends. Namely, passwd for the local users and ldap for the virtual users. passdb { driver = passwd } passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf driver = ldap } Everything work correctly : when a user logs in (imap/pop3) there's a lookup in passwd and if it fails there's a lookup in ldap (if I understand the process correctly), which eventually succeeds. Except that every time a virtual user logs in, dovecot logs an error, like : dovecot: auth-worker(99126): Error: passwd(xxx(a)domain.org,12.34.254.255): getpwnam() failed: Invalid argument I guess it's because the login is a full email that getpwnam fails. Anyway, the user logs in just fine. But I would like to know if/how I can get rid of the messages filling my logs ? I tried : auth_debug_passwords = no auth_verbose = no But no dice. I used dovecot 1.x before and there was no such messages. Thanks for any advice. K. -- Kyoko Otonashi's shrine / Le temple de Kyoko Otonashi My tribute to Maison Ikkoku / Mon hommage a Maison Ikkoku Visit http://www.kyoko.org/

2 4

[Dovecot] LTMP Proxy fails when backend server connection refused
by Jack Bates 02 Oct '12

02 Oct '12

Version: 2.1.9 Connecting directly to the proxy server on the LMTP port, issue lhlo, mail from, rcpt to, data. After the . closing of data, it just hangs there. The logs on the proxy server show: Sep 27 19:55:12 proxy1 dovecot: lmtp(9398): Connect from 69.8.2.71 Sep 27 19:55:24 proxy1 dovecot: lmtp(9398): Error: lmtp client: connect(lmtp, 7025) failed: Connection refused root 9398 1102 0 19:53 ? 00:00:00 dovecot/lmtp The proxy server is hard coded (not director in this case). I purposefully shut it down to see how the system would handle failures. Unfortunately, it appears that the process just hangs there. For fun, I tried a separate protocol lmtp option in the config to try proxy_timeout. It made no difference. Missing some error handling? protocol lmtp { passdb { driver = static args = proxy=y host=%s nopassword=y proxy_timeout=120 } } Jack

2 5

[Dovecot] Antispam plugin problem (CRM114)
by Davide 02 Oct '12

02 Oct '12

Hi to all, sorry in advance for my poor english, this is the first time that i wrote to a list if i make mistake .... excuseme. My problem is this: i have dovecot 2.1.8 installed and functioning from 2 years one week ago i have installed crm114 for my last spam detection filter "version 20100106-BlameMichelson (TRE 0.8.0 (BSD))" My mail system is qmail that through .qmail default correctly tag with X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-27CA1CFB X-CRM114-CacheID: sfid-20120927_105129_798028_B0035817 X-CRM114-Status: GOOD ( 28.64 ) headers dovecot.conf is as follow: plugin { . . . antispam_signature = X-CRM114-CacheID antispam_verbose_debug = 1 antispam_debug_target = stderr antispam_backend = crm114 antispam_signature_missing = error antispam_trash = Trash antispam_spam = SPAM antispam_unsure = UNSURE antispam_crm_binary = /opt/crm114/mailreaver.crm antispam_crm_args = --fileprefix=/opt/crm114/ . . . } protocol imap { . . . mail_plugin_dir = /usr/local/lib/dovecot mail_plugins = $mail_plugins quota imap_quota mail_log antispam . . . } I have a sieve default compiled script that automatically put mails in SPAM folder or UNSURE folder if respectively in message hedere there is the evaluation of crm114 (UNSURE or SPAM). When i move mails incorrectly tagged by crm (for example from SPAM to my inbox or from UNSURE to SPAM) thunderbird (company official mail client ver 15.01) go in error with the following message: "Operation failed over folder 'UNSURE'. Server for account davide.marchi(a)mail.cgilfe.it said: [CANNOT] Failed to call crm114 binary.." I dont'know where is my mistake if someone can help me is much appreciated Thank you -- */Davide Marchi /Teorema Ferrara Srl /(Tel: /**/+39 0532 783161)/**/ (Fax: +/**/39 0532 783368/**/)/**//**/ /**//**/Davide.Marchi(a)mail.cgilfe.it <mailto:davide.marchi@mail.cgilfe.it?subject=Info> /CONFIDENZIALITA’ *** Questo messaggio, inclusi gli eventuali allegati, è indirizzato solo ai destinatari e può contenere informazioni riservate e confidenziali. Se avete ricevuto il messaggio senza esserne un destinatario, siete pregati di non utilizzare, copiare o distribuire questo messaggio o i suoi allegati. Se avete ricevuto il messaggio per errore, siete pregati di cancellarlo dal vostro sistema, assieme a tutti gli allegati, e di informare immediatamente il mittente,sia ai sensi dell'art. 616 c.p., sia ai sensi del DL n. 196/03. *CONFIDENTIALITY*** This message and any attachments are intended only for the use of the addressee(s) and may contain information that is privileged and/or confidential. If the reader of the message is not the intended recipient(s) or an authorized representative of the intended recipient(s), please do not use, copy, distribute this email or its attachments or take action based on them. If you have received this communication in error, please notify us immediately by email and delete the message and any attachments from your system. *Teorema FerraraSrl - Via Spronello, 7 - 44121 Ferrara Italia - P. IVA 01244490387** P**S**tampa questo messaggio solo se veramente necessario, pensa alla natura! - Please consider whether it is necessary to print this e-mail*

2 17

[Dovecot] BUG to compile dovecot 2.1.10 on Debian 4.0, using gcc 4.1.2
by Fabio Depin 02 Oct '12

02 Oct '12

Hello, Today I needed to compile dovecot 2.1.10 on Debian 4.0, using gcc 4.1.2. When running 'make' getting the following error: -------------------------------------------------- -------- db-checkpassword.c: In function 'sigchld_handler': db-checkpassword.c: 426: error: assignment of read-only member '__in' db-checkpassword.c: 429: error: assignment of read-only member '__in' db-checkpassword.c: 431: error: assignment of read-only member '__in' db-checkpassword.c: 432: error: assignment of read-only member '__in' make [3]: ** [db-checkpassword.o] Error 1 make [3]: ** Waiting for other processes to finish. mv-f .deps / auth-worker-server.Tpo .deps / auth-worker-server.Po make [3]: Leaving directory `/ usr/src/dovecot/dovecot-2.1.7/src/auth ' make [2]: ** [all-recursive] Error 1 make [2]: Leaving directory `/ usr/src/dovecot/dovecot-2.1.7/src ' make [1]: ** [all-recursive] Error 1 make [1]: Leaving directory `/ usr/src/dovecot/dovecot-2.1.7 ' make: ** [all] Error 2 -------------------------------------------------- -------- -To work did the following: -------------------------------------------------- -------- 417a418 + Int stat = status-> status; 426c427 - If (WIFSIGNALED (status-> status)) { --- + If (WIFSIGNALED (stat)) { 429c430 - Dec2str (status-> pid), WTERMSIG (status-> status)); --- + Dec2str (status-> pid), WTERMSIG (stat)); 431.432 c432, 433 -} Else if (WIFEXITED (status-> status)) { - Request-> exit_status WEXITSTATUS = (status-> status); --- +} Else if (WIFEXITED (stat)) { + Request-> exit_status WEXITSTATUS = (stat); -------------------------------------------------- -------- With this change worked perfectly ntanto in debian 4 with gcc 4.1.2, as in debian 6 with gcc 4.4.5. -I wonder if I made the change may affect any function of dovecot, or if it is correct. Thank you for your attention. Fabio Depin

2 1

[Dovecot] Logging IP address for failed login
by Scott Neville 02 Oct '12

02 Oct '12

Hi, I am trying to use the logs to show the IP that brute force activity comes from, but Im not succeeding. I have read the archives and seen the advice others have had. I can see logs for repeated bad logins, but I need the IP address from the attempts. dovecot 2.0.12 / CentOS 5.4 / imaps only (993) I have tried a bunch of different combinations of 10-logging.conf settings. This is what I have currently (that does not work the way I want): auth_verbose = yes #auth_verbose_passwords = no #auth_debug = yes #auth_debug_passwords = no #mail_debug = no I *dont* want to see the passwords, either failed or successful. I just want to see failed logins for whatever reason and the IP they came from. In /var/log/maillog I get lines like this: Oct 1 04:19:12 olive dovecot: auth: pam(marketing): unknown user Oct 1 04:19:17 olive dovecot: auth: pam(marketing): unknown user When i had debugging turned on, I would get lines like this: Sep 9 01:14:59 olive dovecot: auth: Debug: passwd(dbelan,62.128.300.94): lookup but only for successful logins. The brute force attempts dont log like that: Sep 16 00:02:57 olive dovecot: auth: Debug: pam(backup): lookup service=dovecot Sep 16 00:02:57 olive dovecot: auth: Debug: pam(backup): lookup service=dovecot Sep 16 00:02:57 olive dovecot: auth: Debug: pam(backup): #1/1 style=1 msg=Password: Sep 16 00:02:57 olive dovecot: auth: Debug: pam(backup): #1/1 style=1 msg=Password: Sep 16 00:02:57 olive dovecot: auth: Debug: pam(backup): lookup service=dovecot Sep 16 00:02:57 olive dovecot: auth: Debug: pam(backup): #1/1 style=1 msg=Password: Sep 16 00:02:58 olive dovecot: auth: pam(backup): unknown user No IP anywhere in that. fail2ban seems to rely on the pop-login or imap-login lines to pull the IP from. I get an imap-login for my real logins: Oct 1 12:38:56 olive dovecot: imap-login: Login: user=<dbelan>, method=PLAIN, rip=62.128.300.94, lip=204.152.189.165, mpid=20360, TLS but no similar line for the failed logins. So is this a dovecot logging configuration combination I need to find? Is it getting lost in pam? Is it specific to CentOS? Any help appreciated - happy to read up on it myself, but would need a pointer, since the docs so far either assume I get an imap-login line for failed logins which I dont, or they assume I just want to see the repeated attempts/passwords. Scott.

2 1

[Dovecot] BUG to compile Plugin - deleted-to-trash on dovecot 2.1+
by Fabio Depin 01 Oct '12

01 Oct '12

Hello, Today I needed to compile the plugin deleted-to-trash for dovecot 1.2.10 (> 2.1) and had problems compiling. To solve the problem efetuei changes below: -------------------------------------------------- -------------------- deleted-to-trash-plugin.c 79.80 C79 - Mailbox_alloc box = (list, name, MAILBOX_FLAG_KEEP_RECENT | - MAILBOX_FLAG_NO_INDEX_FILES); --- + Box = mailbox_alloc (list, name, MAILBOX_FLAG_NO_INDEX_FILES); 136c135 - If (keywords! = NULL) mailbox_keywords_unref (trash_box, & keywords); --- + If (keywords! = NULL) mailbox_keywords_unref (& keywords); -------------------------------------------------- -------------------- I would like to verify that this is correct, or can generate a problem. Thank you for your attention. Fabio Depin

1 0

[Dovecot] Log NAT IP address?
by Charles Marcus 01 Oct '12

01 Oct '12

Hi Timo/everyone, Currently we are logging the remote IP, but is there a way to show the IP address that the NAT connection is coming from? The reason I ask is, we are changing ISPs, and I would like to see in the logs when an external connection is coming from our OLD ISP connection, and when it is coming through our new one. We have a Watchguard firewall, and I have both External connections setup and working, and have just pointed our DNS records to the new public IP, and would like to be able to see which WAN connection/IP they are coming from. Thanks, -- Best regards, Charles

5 6

[Dovecot] Problem: dovecot-lda doesn't auto-create folders
by Karim 'Kasi Mir' Senoucci 01 Oct '12

01 Oct '12

Hello everyone, I recently updated to dovecot 2.0.19 (in fact, I updated the whole system to Ubuntu 12.04 LTS, I am using the dovecot from the Ubuntu packages) and just today found out that the dovecot-lda for some reason doesn't auto-create missing folders anymore as it did with my old installation (1.0.10). I have a "system users" layout and send my mails through a user-specific procmail filter. Every delivery in those filters is done via dovecot-lda using a line list this: > |$DELIVER -d archive -m lists.hylafax-`date "+%Y%m"` where $DELIVER is set to > DELIVER="/usr/bin/sudo /usr/lib/dovecot/dovecot-lda" (I use the sudo because some of the procmail lines deliver the mail to folders in a different user's mailbox.) This works fine for all users, unless the mail folder to be delivered to doesn't exist yet. Here's an example of such a delivery attempt: > Oct 01 10:57:09 lda: Debug: auth input: archive > system_groups_user=archive uid=1002 gid=1002 home=/home/archive > Oct 01 10:57:09 lda(archive): Debug: Effective uid=1002, gid=1002, > home=/home/archive > Oct 01 10:57:09 lda(archive): Debug: Namespace : type=private, > prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes > location=maildir:/home/archive/Maildir > Oct 01 10:57:09 lda(archive): Debug: maildir++: > root=/home/archive/Maildir, index=, control=, > inbox=/home/archive/Maildir, alt= > Oct 01 10:57:09 lda(archive): Debug: none: root=, index=, control=, > inbox=, alt= > Oct 01 10:57:09 lda(archive): Debug: Destination address: xxx(a)xxxx.de > (source: user@hostname) > Oct 01 10:57:09 lda(archive): Debug: Namespace : > /home/archive/Maildir/.lists.hylafax-201210 doesn't exist yet, using > default permissions > Oct 01 10:57:09 lda(archive): Debug: Namespace : Using permissions > from /home/archive/Maildir: mode=0755 gid=-1 > Oct 01 10:57:09 lda(archive): Debug: Namespace : > /home/archive/Maildir/.lists.hylafax-201210 doesn't exist yet, using > default permissions > Oct 01 10:57:09 lda(archive): Debug: Namespace : Using permissions > from /home/archive/Maildir: mode=0755 gid=-1 > Oct 01 10:57:09 lda(archive): Info: > msgid=<201210010954.02813.hylafax_resp(a)earthshod.co.uk>: save failed > to open mailbox lists.hylafax-201210: Mailbox doesn't exist: > lists.hylafax-201210 > Oct 01 10:57:09 lda(archive): Info: > msgid=<201210010954.02813.hylafax_resp(a)earthshod.co.uk>: saved mail to > INBOX Can anyone tell me what goes wrong here and how to fix it? From what I could find out dovecot-lda should auto-create those mailbox folders, but somehow it doesn't. Any help is appreciated. Thanks in advance Kasi Mir

2 2

[Dovecot] Dovecot Authentication through different IMAP server?
by Marc Perkel 28 Sep '12

28 Sep '12

Just wondering - is there any way for a dovecot server to authenticate against a different IMAP server? Here's what I'm thinking. I run a spam filtering service and thinking about a way to give users access to their stored spam on my servers. However real email is forwarded to their server, So I'm wondering if I can configure dovecot somehow to do a back end authentication to their email account to gain access to their spam. Open to suggestions

3 2

[Dovecot] Dovecot Clustering with dsync over ssh
by weber＠zackbummfertig.de 28 Sep '12

28 Sep '12

Hello List, i only found an old post of tiemo where he announced that he will do an wiki article how to setup dovecot cluster with dsync over ssh. anyone knows if this artcile exists and where? i would like to setup a dovecot cluster with 2 machines. thanks for help marko

2 1

[Dovecot] Hanging IMAP sessions on Mac OS X with dovecot 2.1.10 - worked fine with 2.0.15
by Clemens Schrimpe 28 Sep '12

28 Sep '12

Ok, here's a toughie: Out of a whim (and because of the bad weather) I today decided to upgrade my completely functioning 2.0.15 installation on my Mac OS X 10.6.7 system. NB: It's not a Mac OS X "Server", as sold by Apple - I have compiled my dovecots myself for quite a while. Anyhow: At first everything appeared to work fine after the upgrade. Up until I created a new user and -while testing- SELECTed his INBOX. The SELECT was "stuck". Though the process seemed to be alive I could only get rid of it with a "kill -9 <pid>". The same happened when selecting a newly created mailbox on any of the other (otherwise functioning) accounts, so the problem had nothing to do with the new account, but rather with the fact, that it's INBOX was empty. Using dtruss and gdb I found out, that the dovecot process was trying to obtain a GUID and in the course of doing so invoked gethostbyname(), which intern caused a lot of "mach message" handling and somewhere, deep down there, the process was stuck. Well, that led my to believe, that there was something wrong with the -so called- "mach bootstrap context". I usually start dovecot from with a (home-brewn) startup-script, which invokes it (practically) like so: sudo /usr/libexec/StartupItemContext dovecot (again: all this was working fine under 2.0.15) Now with 2.1.10, when I manually invoke dovecot with just sudo dovecot Everything appears to work fine - at least the sessions don't get stuck any more. But as soon as I logout (with dovecot still running in the background) it loses it's "mach bootstrap context" and finds itself unable to perform even the simplest tasks, like mapping a username to a uid, etc. pp. -- so starting it without the "/usr/libexec/StartupItemContext" in the background is out of the question. Now -with all that said- here's my question: What has changed with regards to "processual context" between 2.0.15 and 2.1.10 when the "imap" process is spawned/exec'd? Any environmental cleanups, closing of unknown fds, deletion/modification of environment variables, process-group-handlers, etc.? It appears, that the imap process no longer "inherits" the StartupItemContext from the main process, so some change between 2.0.15 and 2.1.10 must have broken it ... Any help is highly appreciated - Clemens PS: I google'd around a lot and searched the mailing-lists, of course. I only found a post of someone who ran into the same/similar problem dating back to Feb 21st 2012 under the subject "dovecot freezes when trying to get mail from maildir with mail", but it was quickly dismissed without ever getting resolved and that was that. PS2: I intentionally didn't include any configs with this mail as they seem to be irrelevant, but of course I can generate the necessary output if needed.

2 1