- dovecot - dovecot.org

Re: [Dovecot] sql dict: commit failed: MySQL server has gone away
by Mark Zealey 08 Dec '11

08 Dec '11

Thanks Timo, this patch applied clean against 2.0.16 just running it on live for the past few minutes & seems to have fixed the issues. Mark ________________________________________ From: Mark Zealey Sent: 08 December 2011 07:14 To: Timo Sirainen Cc: dovecot(a)dovecot.org Subject: RE: [Dovecot] sql dict: commit failed: MySQL server has gone away Correct we're not enforcing the quotas at present just want an easy way to monitor everyone's mailbox usage. Thanks for the patch; will it work ok against 2.0.16? if so I'll recompile and give it a test today. Mark

1 0

[Dovecot] 2.1.rc1 (1e118913348b): Panic: file mail-user.c: line 128 (mail_user_ref): assertion failed: (user->refcount > 0)
by Pascal Volk 08 Dec '11

08 Dec '11

Hi Timo, right after delivering the message to the INBOX the lmtp crashes. I wonder about the "Sent" in the attached backtrace. Regards, Pascal -- The trapper recommends today: c01dcofe.1134117(a)localdomain.org

2 2

[Dovecot] problems when using dsync between servers
by Yann Dupont 08 Dec '11

08 Dec '11

Hello, I'm trying to migrate from maildir++ to mdbox. The maildir++ is a leftover of our previous setup (was using courier) We have 3 virtuals servers for our +70000 accounts. Now, I'd like to use mdbox, so I'm trying using dsync for that. I setup a new virtual server, configured for mdbox. 1st, I tried a basic setup: I established a file with all my accounts (taken from LDAP) and then I use this script : FILENAME=$1 while read LINE do dsync -u $LINE backup $LINE@my_new_server done < $FILENAME But it's quite slow and dsync hangs. So I tried another approach using multi threaded python. Much faster (using all the cores), but dsync still hangs on some accounts. After a certain time dsync exit with an error like that : Panic: file dsync-worker-local.c: line 1688 (local_worker_save_msg_continue): assertion failed: (ret == -1) dsync-remote(E072184L): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x3fd8a) [0x7f34fc577d8a] -> /usr/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x32) [0x7f34fc577e72] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f34fc55119f] -> dsync() [0x40ff0b] -> dsync() [0x410142] -> dsync(dsync_worker_msg_save+0x99) [0x40f639] -> dsync() [0x40e24a] -> dsync() [0x40d8ef] -> dsync() [0x40dbfc] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x48) [0x7f34fc5830d8] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9f) [0x7f34fc58403f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f34fc583068] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f34fc5713a3] -> dsync(main+0x9e1) [0x4078b1] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7f34fbde9c4d] -> dsync() [0x406cf9] This is on a RUNNNING server. My aim was to make some pass on the running server, then stop it and make a last pass to finish the process. Is dsync supposed to run only on a stopped server ? Is my approach totally wrong ? -- Yann Dupont - Service IRTS, DSI Université de Nantes Tel : 02.53.48.49.20 - Mail/Jabber : Yann.Dupont(a)univ-nantes.fr

2 2

[Dovecot] sql dict: commit failed: MySQL server has gone away
by Mark Zealey 08 Dec '11

08 Dec '11

Following on from this thread: http://www.dovecot.org/list/dovecot/2010-September/052704.html <https://owa2010.webfusion.com/owa/redir.aspx?C=a447887e3d204944a8c766142df4…> in 2.0.16 I am seeing the same issues. I believe this would be related to some timeouts set on our mysql servers which are pretty low (30 or 60 seconds or so to drop idle connections). This is happening for imap, pop and lmtp processes when they try to update quotas stored in a mysql database; presumably it is the dict process that actually has these issues - the lmtp delivery isn't lasting longer than 1 second so shouldn't be seeing any timeouts there. This is always followed by the "Error: dict quota: Quota update failed, it's now desynced" line; presumably it is telling the truth but I'm not sure how I could tell. We are also seeing this "MySQL server has gone away" issue in login processes but it isn't causing an issue there as presumably dovecot transparently retries rather than just giving up as it seems to in the quota updates. Any thoughts or advice would be appreciated. Mark

3 2

[Dovecot] Assertion failure in 2.0.16 - SEARCH ()
by Daniel Colascione 08 Dec '11

08 Dec '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Nov 25 22:25:39 dancol dovecot: master: Error: service(imap): child 25115 killed with signal 6 (core dumps disabled) Nov 25 22:25:59 dancol dovecot: imap(dancol): Panic: file mail-search-build.c: line 59 (mail_search_build_key_int): assertion failed: (sarg->value.subargs != NULL) Nov 25 22:25:59 dancol dovecot: imap(dancol): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x3d291) [0xb7636291] -> /usr/lib/dovecot/libdovecot.so.0(+0x3d2ff) [0xb76362ff] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0xb760bb7a] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x24109) [0xb7692109] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x24177) [0xb7692177] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_search_build+0x82) [0xb7692242] - -> dovecot/imap [dancol 127.0.0.1 SEARCH](imap_search_args_build+0x4a) [0x805db5a] -> dovecot/imap [dancol 127.0.0.1 SEARCH](cmd_search+0xbf) [0x80537ef] -> dovecot/imap [dancol 127.0.0.1 SEARCH]() [0x80568cc] -> dovecot/imap [dancol 127.0.0.1 SEARCH]() [0x80569a2] -> dovecot/imap [dancol 127.0.0.1 SEARCH](client_handle_input+0x175) [0x8056c25] -> dovecot/imap [dancol 127.0.0.1 SEARCH](client_input+0x5f) [0x80574cf] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x51) [0xb76430d1] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xd3) [0xb7644193] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x40) [0xb7643050] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x2a) [0xb762ec1a] -> dovecot/imap [dancol 127.0.0.1 SEARCH](main+0x315) [0x805fef5] -> /lib/i686/cmov/libc.so.6(__libc_start_main+0xe6) [0xb74b6c76] -> dovecot/imap [dancol 127.0.0.1 SEARCH]() [0x804eb81] $ telnet localhost imap Trying 127.0.0.1... Connected to localhost.localdomain. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready. . LOGIN dancol XXXXXXXX . OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS] Logged in . SELECT rss * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 8 EXISTS * 0 RECENT * OK [UIDVALIDITY 1322264663] UIDs valid * OK [UIDNEXT 11] Predicted next UID * OK [HIGHESTMODSEQ 1] Highest . OK [READ-WRITE] Select completed. . SEARCH () Connection closed by foreign host. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (Darwin) Comment: GPGTools - http://gpgtools.org iEYEARECAAYFAk7QiNcACgkQ17c2LVA10VvhHACgihmbmTjVNl/PbKcreIDRTKpC 5wkAoJd9FHXM4GhPfnVUjwrpdsqnVQ6E =RlpQ -----END PGP SIGNATURE-----

2 1

[Dovecot] POP3/IMAP crash signal 10
by Patrick Wood 08 Dec '11

08 Dec '11

Hi, I'm building a Postfix/Dovecot mail server and while I am able to send/receive emails using telnet, after establishing a connection to Dovecot via a client (Mail Live, Thunderbird etc) the following appears in the logs: Nov 28 14:11:02 mailserver dovecot: [ID 583609 mail.info] pop3-login: Login: user=<user(a)domain.com>, method=PLAIN, rip=xxx.xxx.xxx.xxx, lip=xxx.xxx.xxx.xxx, mpid=282 78 Nov 28 14:11:02 mailserver dovecot: [ID 583609 mail.error] master: Error: service(pop3-login): child 28277 killed with signal 10 (core not dumped - set service pop3-log in { drop_priv_before_exec=yes }) Nov 28 14:11:02 mailserver dovecot: [ID 583609 mail.info] pop3(user(a)domain.com): Disconnected: Logged out top=0/0, retr=0/0, del=0/5, size=3250 I also experience very poor connectivity to the server, with Microsoft Mail and Thunderbird regularly failing to connect (connection errors in the client and no login attempt in the dovecot logs). I assume this is related to the issue above. I am running dovecot 2.0.16 on Solaris 10 SPARC using a ZFS filesystem for mailbox storage. Here is my configuration: # 2.0.16: /usr/local/etc/dovecot/dovecot.conf # OS: SunOS 5.10 sun4u zfs auth_mechanisms = plain login disable_plaintext_auth = no mail_location = maildir:/storage0/home/vmail/%d/%n/Maildir mail_plugins = quota passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = maildir:User quota quota_rule = *:storage=1G } postmaster_address = root(a)domain.com sendmail_path = /usr/lib/sendmail ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol imap { mail_plugins = quota quota imap_quota } protocol lda { mail_plugins = quota quota } protocol pop3 { mail_plugins = quota quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } I'm tearing my hair out! Hopefully someone can see something I'm missing

2 1

[Dovecot] Questions about Proxy/Director (was: Re: Indexes to MLC-SSD)
by Patrick Westenberg 08 Dec '11

08 Dec '11

Jan-Frode Myklebust schrieb: > Yes, and in ascii-art this becomes :-) > > MTA -(lmtp)--> dovecot-director ---(lmtp)---> backend-server1 > \---(lmtp)---> backend-server2 > > > IMAP-user -(imap)--> dovecot-director --(imap) --> backend-server1 > \--(imap) --> backend-server2 I failed creating a nice ascii view ;-) However, I have some more questions: - What happens if the MTA accepted a message but the backend-server fails and is unable to store it? - What about load-balancing and/or failover? Maybe all users on backend-server1 are fetching their mails causing high load while backend-server2 is idle. Is it possible to specify more than one backend-server IPs as I can do for the database hosts for userdb queries?

3 6

[Dovecot] v2.1.rc1 missing SnowballAnalyzer.h
by Eray Aslan 08 Dec '11

08 Dec '11

While trying to test v.2.1.rc1 with configure \ --with-lucene \ --without-stemmer \ [...] I get the following error: [...] /bin/sh ../../../libtool --tag=CXX --mode=compile i686-pc-linux-gnu-g++ -DHAVE_CONFIG_H -I. -I../../.. -I../../../src/lib -I../../../src/lib-mail -I../../../src/lib-index -I../../../src/lib-storage -I../../../src/plugins/fts -I../../../src/doveadm -O2 -march=i686 -pipe -c -o lucene-wrapper.lo lucene-wrapper.cc libtool: compile: i686-pc-linux-gnu-g++ -DHAVE_CONFIG_H -I. -I../../.. -I../../../src/lib -I../../../src/lib-mail -I../../../src/lib-index -I../../../src/lib-storage -I../../../src/plugins/fts -I../../../src/doveadm -O2 -march=i686 -pipe -c lucene-wrapper.cc -fPIC -DPIC -o .libs/lucene-wrapper.o lucene-wrapper.cc:26:30: fatal error: SnowballAnalyzer.h: No such file or directory compilation terminated. make[4]: *** [lucene-wrapper.lo] Error 1 The offending line in lucene-wrapper.cc is: #include "SnowballAnalyzer.h" Sure enough, there is no SnowballAnalyzer.h in the tarball. Looks like a missing a backslash in src/plugins/fts-lucene/Makefile.am: [...] noinst_HEADERS = \ fts-lucene-plugin.h \ lucene-wrapper.h SnowballAnalyzer.h \ SnowballFilter.h -- Eray Aslan

2 1

[Dovecot] lazy_expunge plugin and folder subscription trouble
by Jürgen Obermann 08 Dec '11

08 Dec '11

Hello, I wanted to test the lazy expunge plugin together with mdbox. It seems to me that the folder subscriptions file in the mdbox directory was overwritten with only a few folder names every time I added or removed something in the list of subscribed folders, or even if I turned the imap folder subscription feature off and on. Here is my setup: # 2.0.16: /opt/local/etc/dovecot/dovecot.conf # OS: SunOS 5.10 sun4v mail_location = mdbox:~/mdbox mail_plugins = mail_log notify quota lazy_expunge zlib mdbox_rotate_interval = 1 days mdbox_rotate_size = 16 M namespace { inbox = yes location = prefix = separator = / type = private } namespace { hidden = yes list = no location = prefix = Mail/ separator = / subscriptions = yes type = private } namespace { location = maildir:/var/mail/public:CONTROL=~/Maildir/public:INDEX=~/Maildir/public prefix = Public/ separator = / subscriptions = no type = public } namespace { location = mdbox:~/mdbox:MAILBOXDIR=expunged prefix = .EXPUNGED/ separator = / } plugin { autocreate = Trash autocreate2 = caughtspam autocreate3 = Sent autocreate4 = Drafts autosubscribe = Trash autosubscribe2 = caughtspam autosubscribe3 = Sent autosubscribe4 = Drafts fts = squat lazy_expunge = .EXPUNGED/ mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = fs:Home-Verzeichnis:noenforcing sieve = ~/.dovecot.sieve sieve_dir = ~/sieve zlib_save = gz zlib_save_level = 3 } protocols = imap pop3 lmtp sieve quota_full_tempfail = yes sendmail_path = /usr/lib/sendmail service auth { client_limit = 11120 } service imap-login { process_min_avail = 16 service_count = 0 vsz_limit = 640 M } service imap { process_limit = 4096 vsz_limit = 1 G } ssl_cert = </etc/ssl/horus.crt ssl_key = </etc/ssl/horus.key syslog_facility = local0 userdb { driver = passwd } version_ignore = yes protocol lda { info_log_path = log_path = mail_plugins = mail_log notify quota lazy_expunge zlib sieve } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags mail_max_userip_connections = 20 mail_plugins = mail_log notify quota lazy_expunge zlib autocreate fts fts_squat imap_quota imap_zlib } protocol lmtp { mail_plugins = mail_log notify quota lazy_expunge zlib sieve } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xv%08Xu } -- Hochschulrechenzentrum der | Mail: Juergen.Obermann(a)hrz.uni-giessen.de Justus-Liebig-Universitaet | WWW: http://www.uni-giessen.de/obermann/ Heinrich-Buff-Ring 44 | Tel: 0641-99-13054 (0641-99-13001) D-35392 Giessen, Germany | Fax: 0641-99-13009

2 1

[Dovecot] doveadm fetch vs search+fetch
by Joseph Tam 08 Dec '11

08 Dec '11

What's the pactical difference between using "doveadm fetch" rather than using "doveadm search" in conjunction with "doveadm fetch", as the man pages suggest? It seems "doveadm fetch" functionally supercedes "doveadm search" making the latter obsolete. It can even be closely simulated with "doveadm -f tab fetch ... 'mailbox-guid uid' search-query ...". Joseph Tam <jtam.home(a)gmail.com>

2 3

[Dovecot] dovecot 2.0 sieve if working, managesieve not.
by Sacha xxxx 07 Dec '11

07 Dec '11

Hi, this is my configuration # OS: Linux 2.6.32-131.0.15.el6.x86_64 x86_64 Red Hat Enterprise Linux Server release 6.1 (Santiago) ext4 auth_debug = yes auth_master_user_separator = * auth_username_format = %Lu auth_verbose = yes disable_plaintext_auth = no info_log_path = /var/log/dovecot-info.log log_path = /var/log/dovecot.log log_timestamp = "%Y-%m-%d %H:%M:%S " login_greeting = Dovecot ready mail_debug = yes mail_gid = 999 mail_home = /MAIL/%d/%n/ mail_location = maildir:/MAIL/%d/%n/ mail_log_prefix = "%Us(%u): " mail_plugins = " quota" mail_privileged_group = mail mail_uid = 999 passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } passdb { args = /etc/dovecot/passwd.masterusers driver = passwd-file master = yes pass = yes } plugin { quota = maildir:User quota quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/sieve/dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 sieve service auth { unix_listener auth-userdb { group = mail mode = 0660 user = postfix } } service managesieve-login { executable = /usr/libexec/dovecot/managesieve-login inet_listener sieve { port = 4190 } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { group = mail mode = 0666 user = mail } user = mail } ssl = no userdb { args = /etc/dovecot/dovecot-ldap.user driver = ldap } doveconf: Error: protocols: Unknown protocol: sieve doveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf: protocols: Unknown protocol: sieve I get the error Unknown protocol: sieve The installed rpm package is this: dovecot-2.0.9-2.el6.x86_64 The sieve filtering is working: 2011-12-07 12:12:29 LDA(utente01@***): Debug: sieve: opening script /MAIL/***/user//sieve/dovecot.sieve 2011-12-07 12:12:29 LDA(utente01@***): Debug: sieve: script /MAIL/***/user//sieve/dovecot.sieve successfully compiled 2011-12-07 12:12:29 LDA(utente01@***): Debug: sieve: executing script from /MAIL/***/utente01//sieve/dovecot.sieve 2011-12-07 12:12:29 LDA(utente01@***): Info: sieve: msgid=<4EDF4A1C.9010509@***>: stored mail into mailbox 'INBOX' But the manage sieve won't work. It seems that pigeonhole is installed because /usr/libexec/dovecot/managesieve-login exist and is not empty. Can you help me? Thank You Sushi.

1 1

[Dovecot] IMAP SPECIAL-USE extension
by Timo Sirainen 07 Dec '11

07 Dec '11

It's implemented now in dovecot-2.1 hg. It also deprecates autocreate plugin (but it still works the old way). The idea is that you can now do e.g.: mailbox Trash { auto = no special_use = \Trash } mailbox Drafts { auto = no special_use = \Drafts } mailbox Sent { auto = subscribe # autocreate, autosubscribe special_use = \Sent } mailbox Spam { auto = create # autocreate, but don't autosubscribe special_use = \Junk } mailbox virtual/All { # if you have a virtual "All messages" mailbox auto = no special_use = \All } The mailbox names require a namespace prefix, so if you use e.g. "INBOX." prefix you'll need to use: mailbox INBOX.Trash { ..etc..

11 21

[Dovecot] master user only for sieve
by Jan-Frode Myklebust 07 Dec '11

07 Dec '11

Changes in SOGo is forcing me to define a master user, so that SOGo can disable sieve out-of-office processing on a given date. I'm not too happy about having master users that are allowed to read the users messages, so is it possible to define a master user that can only log in trough manage-sieve? -jf

3 3

Re: [Dovecot] IMAP SPECIAL-USE extension
by Peter Mogensen 07 Dec '11

07 Dec '11

On 2011-12-02 22:22, dovecot-request(a)dovecot.org wrote: > It's implemented now in dovecot-2.1 hg. It also deprecates autocreate > plugin (but it still works the old way). The idea is that you can now > do e.g.: > > mailbox Trash { > auto = no > special_use = \Trash > } > ... This is great Timo. But for solving the localization problem for special-use folders, it's only half the way. Are there any plans to support RFC5464 SETMETADATA, so individual users can name their "\Trash" folder "Skraldspand" in danish or what ever they prefer? /Peter

6 12

[Dovecot] MUAs creating different "Sent" folders
by Ralf Hildebrandt 06 Dec '11

06 Dec '11

While our webmail installation creates "Sent" as a Sent-Items Folder, Apple Mail creates "Sent Messages". Is there a way of "mapping" foldernames e.g. map "Sent Messages" to "Sent" map "Deletes Messages" to "Trash" and so on? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

8 15

[Dovecot] Log/Process users pop3 plain password
by Selcuk Yazar 06 Dec '11

06 Dec '11

Hi, I have Postfix + OpenLdap + DoveCot configuration, and it's running succesfuly, i wantto convert users pop3 password NTPassword and LMPassword, so i ne plain passwor dof users, how can i do that. (Normaly using perl's ntlmgen function i convert password , but in plain) thanks in advance -- Selçuk YAZAR http://www.selcukyazar.blogspot.com

1 0

Re: [Dovecot] Outlook double attachments
by Aleš SEVŠEK 06 Dec '11

06 Dec '11

Hi! I wonder, have you managed to solve the problem. I have the same one (regarding double attachmets). Thanks for your help. BR Aleš SEVŠEK __________________ Izjava o omejitvi odgovornosti: To elektronsko sporočilo in vse njegove morebitne priloge lahko vsebujejo zaupne in/ali privilegirane informacijeter namenjene izključno naslovniku. Če ste sporočilo prejeli pomotoma, Vas prosimo, da o tem obvestite pošiljatelja, sporočilo pa takoj uničite. Kakršnokoli nepooblaščeno razkritje, distribucija ali kopiranje vsebine sporočila je izrecno prepovedano. Legal disclaimer statement: This e-mail and any attachments may contain confidential and/or privileged information and is intended solely for the addressee. If you are not the intended recipient (or have received this e-mail by mistake), please notify the sender immediately and delete this e-mail. Any unauthorized reproduction, disclosure or distribution of the material in this e-mail is strictly forbidden.

1 0

[Dovecot] MS Exchange IMAP Proxy
by Terry Carmen 06 Dec '11

06 Dec '11

I need to make the IMAP interface of an Exchange 2000 server available on the net, however I would like to give it a little protection, and believe Dovecot's IMAP proxy might be appropriate. Does anybody have a *really simple* config that would allow IMAP pass-through to a single Exchange server? The examples I've seen all assume some sort of load balancing, which isn't an issue here, so I'd like to eliminate the need for an unnecessary database server. Does Dovecot do any cleanup of the IMAP commands that would be useful in protecting Exchange (from this, http://www.cvedetails.com/cve/CVE-2007-0221/ for example), or am I barking up the wrong tree? If Dovecot isn't helpful for this, can anybody point me to a better resource? Thanks! Terry

7 25

[Dovecot] Strange quota problem
by Jan-Frode Myklebust 05 Dec '11

05 Dec '11

I have a strange problems with quota on v2.0.14. We have an ldap user directory, and all users should have a mailQuota defined there. My problem is that some users gets the quota enforced, while others don't, and "doveadm user" doesn't seem to agree with "doveadm quota ge gett" Ref: $ doveadm user janfrode(a)example.net userdb: janfrode(a)example.net home : /usr/local/atmail/users/j/a/janfrode(a)example.net mailQuota : quota_rule=*:storage=2100000 $ doveadm -f tab quota get -u janfrode(a)example.net Quota name Type Value Limit % UserQuota STORAGE 760 1000000 0 UserQuota MESSAGE 62 - 0 Why limit 1000000 instead of 2100000 ? $ doveadm user omar(a)example.net userdb: omar(a)example.net home : /usr/local/atmail/users/o/m/omar(a)example.net mailQuota : quota_rule=*:storage=1000000 $ sudo doveadm -f tab quota get -u omar(a)example.net Quota name Type Value Limit % UserQuota STORAGE 0 - 0 UserQuota MESSAGE 0 - 0 $ doveadm user testkunde(a)example.net userdb: testkunde(a)example.net home : /usr/local/atmail/users/t/e/testkunde(a)example.net mailQuota : quota_rule=*:storage=1000000 $ doveadm -f tab quota get -u testkunde(a)example.net Quota name Type Value Limit % UserQuota STORAGE 33918 - 0 UserQuota MESSAGE 137 - 0 Why no storage limit ? Config below: ------------------------------------------------------------------ $ grep -v ^# /etc/dovecot/dovecot-ldap.conf.ext |grep -v ^$ hosts = ldapm1.example.net:389 ldapm2.example.net:389 auth_bind = yes auth_bind_userdn = uid=%n,ou=people,o=%d,o=ISP,o=example,c=NET base = ou=people,o=%d,o=ISP,o=example,c=NET deref = never scope = onelevel user_attrs = mailMessageStore=home, mailLocation=mail, mailQuota=mailQuota=quota_rule=*:storage=%$ user_filter = (&(objectClass=examplePerson)(uid=%n)) $ doveconf -n # 2.0.14: /etc/dovecot/dovecot.conf doveconf: Warning: service auth { client_limit=4396 } is lower than required under max. load (4521) # OS: x86_64 Red Hat Enterprise Linux Server release 5.x (Tikanga) auth_verbose = yes auth_verbose_passwords = sha1 disable_plaintext_auth = no mail_gid = 3000 mail_location = maildir:~/:INDEX=/indexes/%1u/%1.1u/%u mail_plugins = quota mail_uid = 3000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mmap_disable = yes namespace { inbox = yes location = prefix = INBOX. type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { quota = maildir:UserQuota sieve = /sieve/%1u/%1.1u/%u/.dovecot.sieve sieve_dir = /sieve/%1u/%1.1u/%u sieve_max_script_size = 1M } protocols = imap pop3 lmtp sieve service auth-worker { user = $default_internal_user } service auth { client_limit = 4396 } service imap-login { inet_listener imap { address = * port = 143 } } service imap-postlogin { executable = script-login /usr/local/sbin/imap-postlogin.sh } service imap { executable = imap imap-postlogin process_limit = 2048 } service lmtp { client_limit = 1 inet_listener lmtp { address = * port = 24 } process_limit = 25 } service managesieve-login { inet_listener sieve { address = * port = 4190 } service_count = 1 } service pop3-login { inet_listener pop3 { address = * port = 110 } } service pop3-postlogin { executable = script-login /usr/local/sbin/pop3-postlogin.sh } service pop3 { executable = pop3 pop3-postlogin process_limit = 2048 } ssl = no userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = quota sieve } protocol imap { imap_client_workarounds = delay-newmail mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = UID%u-%v } protocol sieve { managesieve_logout_format = bytes=%i/%o } ------------------------------------------------------------------ -jf

2 2

[Dovecot] Single instance storage
by Guy Deleeuw 05 Dec '11

05 Dec '11

Hello, Could you confirm that the SIS is integrated and functional in the latest version of Dovecot? Regards Guy

1 0

[Dovecot] (no subject)
by Mark Zealey 05 Dec '11

05 Dec '11

1 0

[Dovecot] Dovecot crash non stop: "uid 0: exited on signal 11"
by Amaury Le Pivain 05 Dec '11

05 Dec '11

Hi all, I have an old physical freebsd 6.2 server running Dovecot 1.0.7. I wanted to virtualised it. So, I did a dd from the physical server and then I restored it on then now Virtual Machine. I booted the server, all services are running just fine excepted Dovecot. I tried to investigate the log as much as I can but i'm not getting any usefull pieces of information. The only entries I have in the log files are the following: /*log: /var/log/messages:*/ /Dec 5 09:53:35 hostname kernel: pid 33815 (imap), uid 0: exited on signal 11 Dec 5 09:53:39 hostname kernel: pid 33820 (imap), uid 0: exited on signal 11 Dec 5 09:54:22 hostname kernel: pid 33910 (pop3), uid 0: exited on signal 11 Dec 5 09:55:22 hostname kernel: pid 34071 (pop3), uid 0: exited on signal 11 Dec 5 09:55:47 hostname kernel: pid 34103 (imap), uid 0: exited on signal 11 Dec 5 09:56:13 hostname kernel: pid 34143 (pop3), uid 0: exited on signal 11 Dec 5 09:56:21 hostname kernel: pid 34164 (pop3), uid 0: exited on signal 11 Dec 5 09:56:26 hostname kernel: pid 34180 (imap), uid 0: exited on signal 11 Dec 5 09:56:40 hostname kernel: pid 34201 (imap), uid 0: exited on signal 11 Dec 5 09:56:49 hostname kernel: pid 34227 (imap), uid 0: exited on signal 11/ /*log: /mail/log/dovecot.log:* dovecot: Dec 05 10:13:46 Info: imap-login: Login: user=<test-amaury(a)mydomain.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Dec 05 10:13:46 Error: child 36621 (imap) killed with signal 11/ I'm also running a squirrelmail as a webmail and here when I refresh a folder content 3/5 times I'm getting an error: /Error: Connection dropped by IMAP server Query: SELECT "INBOX.Corbeille"/ I'm using Dovecot version 1.0.7 on a freebsd 6.2 and my dovecot.conf is: dovecot -n /# 1.0.7: /usr/local/etc/dovecot.conf base_dir: /mail/ log_path: /mail/log/dovecot.log protocols: imap pop3 ssl_disable: yes disable_plaintext_auth: no login_dir: /mail//login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_greeting: POP3/IMAP ready. verbose_proctitle: yes first_valid_gid: 0 mail_extra_groups: mail mail_location: maildir:~/Maildir fsync_disable: yes maildir_copy_with_hardlinks: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota trash mail_plugins(imap): quota imap_quota trash mail_plugins(pop3): quota mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): outlook-idle pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: default_realm: tropik.nc passdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: sql args: /usr/local/etc/dovecot-sql.conf socket: type: listen master: path: /mail/auth-master mode: 384 user: vmail group: vmail plugin: quota: maildir trash: /usr/local/etc/dovecot-trash.conf/ Thank you for your help! Sincerely, -- Amaury Le Pivain Offratel/Lagoon Tel: 28.88.99

2 1

[Dovecot] Plugin for munin
by Patrick Westenberg 04 Dec '11

04 Dec '11

Hi there, is anyone using munin to monitor connections to dovecot? If someone does, which plugin is used? Regards Patrick

3 2

[Dovecot] Core Dump upon IMAP Login with latest HG (2.1) c067025026ed
by Thomas Leuxner 04 Dec '11

04 Dec '11

Dec 4 07:27:41 spectre dovecot: imap-login: Login: user=<tlx(a)leuxner.net>, method=PLAIN, rip=84.58.184.122, lip=1.2.3.4, mpid=30987, TLS Dec 4 07:27:42 spectre dovecot: imap-login: Login: user=<tlx(a)leuxner.net>, method=PLAIN, rip=84.58.184.122, lip=1.2.3.4, mpid=30990, TLS Dec 4 07:27:42 spectre dovecot: master: Error: service(imap): child 30990 killed with signal 11 (core dumped) Dec 4 07:27:48 spectre dovecot: imap(tlx(a)leuxner.net): Connection closed in=142 out=410 Dec 4 07:27:48 spectre dovecot: imap-login: Login: user=<tlx(a)leuxner.net>, method=PLAIN, rip=84.58.184.122, lip=1.2.3.4, mpid=30992, TLS Dec 4 07:27:48 spectre dovecot: master: Warning: Killed with signal 15 (by pid=31013 uid=0 code=kill) [ GDB Backtrace] #0 0x00007fa68d36f978 in mailbox_settings_find (user=0x22162f0, vname=0x21ec318 "INBOX") at mail-storage.c:610 box_set__foreach_end = <value optimized out> box_set = <value optimized out> #1 0x00007fa68d371003 in mailbox_alloc (list=<value optimized out>, vname=0x21ec318 "INBOX", flags=MAILBOX_FLAG_DROP_RECENT) at mail-storage.c:643 _data_stack_cur_id = 4 new_list = 0x22149b0 storage = 0x221b760 box = 0x222a9f0 __FUNCTION__ = "mailbox_alloc" #2 0x000000000040d8de in select_open (cmd=0x22259c0, readonly=false) at cmd-select.c:285 client = 0x2224e30 status = {messages = 2808, recent = 0, unseen = 0, uidvalidity = 0, uidnext = 0, first_unseen_seq = 0, first_recent_uid = 0, last_cached_seq = 0, highest_modseq = 834, keywords = 0x0, permanent_flags = 0, nonpermanent_modseqs = 0, permanent_keywords = 0, allow_new_keywords = 0} flags = 8 ret = <value optimized out> #3 cmd_select_full (cmd=0x22259c0, readonly=false) at cmd-select.c:419 client = 0x2224e30 ctx = <value optimized out> args = 0x2228218 list_args = 0x7fffbe1e9a58 mailbox = 0x21ec318 "INBOX" ret = <value optimized out> __FUNCTION__ = "cmd_select_full" #4 0x000000000041134d in command_exec (cmd=0x22259c0) at imap-commands.c:147 hook = 0x21f5b40 ret = <value optimized out> #5 0x000000000041031e in client_command_input (cmd=0x22259c0) at imap-client.c:673 client = 0x2224e30 command = <value optimized out> __FUNCTION__ = "client_command_input" #6 0x00000000004103fd in client_command_input (cmd=0x22259c0) at imap-client.c:724 client = 0x2224e30 command = 0x0 __FUNCTION__ = "client_command_input" #7 0x0000000000410625 in client_handle_next_command (client=0x2224e30) at imap-client.c:765 size = 18 #8 client_handle_input (client=0x2224e30) at imap-client.c:777 _data_stack_cur_id = 3 ret = false remove_io = <value optimized out> handled_commands = false __FUNCTION__ = "client_handle_input" #9 0x0000000000410f4f in client_input (client=0x2224e30) at imap-client.c:816 cmd = <value optimized out> output = 0x2225828 bytes = <value optimized out> __FUNCTION__ = "client_input" #10 0x00007fa68d0fbf36 in io_loop_call_io (io=0x22258d0) at ioloop.c:377 ioloop = 0x21f4630 t_id = 2 #11 0x00007fa68d0fcf6f in io_loop_handler_run (ioloop=<value optimized out>) at ioloop-epoll.c:213 ctx = 0x21f4850 event = 0x21f48c0 list = 0x2225920 io = 0x22162f0 tv = {tv_sec = 29, tv_usec = 928551} msecs = <value optimized out> ret = <value optimized out> i = 0 call = false #12 0x00007fa68d0fbed8 in io_loop_run (ioloop=0x21f4630) at ioloop.c:396 No locals. #13 0x00007fa68d0e9433 in master_service_run (service=0x21f44f0, callback=0x21ec318) at master-service.c:499 No locals. #14 0x0000000000419141 in main (argc=1, argv=0x21f4370) at main.c:375 set_roots = {0x41c020, 0x0} service_flags = <value optimized out> storage_service_flags = MAIL_STORAGE_SERVICE_FLAG_DISALLOW_ROOT postlogin_socket_path = 0x0 username = 0x0 c = <value optimized out> [ doveconf -n ] # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.3 auth_cache_size = 16 k auth_verbose = yes mail_location = mdbox:~/mdbox mail_plugins = acl quota stats namespace { hidden = no inbox = yes location = prefix = separator = / type = private } namespace { list = yes location = mdbox:/var/vmail/public prefix = Public/ separator = / subscriptions = no type = public } passdb { args = username_format=%u /var/vmail/auth.d/%d/passwd driver = passwd-file } plugin { acl = vfile:/var/vmail/conf.d/%d/acls:cache_secs=300 mail_log_events = expunge mailbox_delete quota = dict:user::file:%h/mdbox/dovecot-quota quota_rule = *:storage=1GB quota_rule2 = Trash:storage=+10%% sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_dir = /var/vmail/conf.d/%d/sieve stats_refresh = 30s stats_track_cmds = yes } protocols = imap lmtp quota_full_tempfail = yes service auth-worker { user = doveauth } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = doveauth } service imap-login { inet_listener imap { address = 1.2.3.4 port = 143 } inet_listener imaps { port = 0 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service stats { fifo_listener stats-mail { mode = 0600 user = vmail } } ssl_ca = </etc/ssl/certs/SSL123_CA_Bundle.pem ssl_cert = </etc/ssl/certs/host_domain_tld.crt ssl_key = </etc/ssl/private/host_domain_tld.key syslog_facility = local1 userdb { args = username_format=%u /var/vmail/auth.d/%d/passwd driver = passwd-file } verbose_proctitle = yes protocol lmtp { mail_plugins = acl quota stats sieve } protocol imap { mail_plugins = acl quota stats imap_acl imap_quota mail_log notify imap_stats }

1 0

[Dovecot] Questions about single intance storage
by Maria Arrea 03 Dec '11

03 Dec '11

Hello We are using dovecot 2.0.16 with mdbox+zlib. We are now testing SiS (Single Instance Storage) and I have 5 questions: 1º Is possible to "dedup" existing mdboxes? 2º Are attachments compressed with zlib if mdboxes already use zlib? 3º I have plenty CPU to spare, should I use a low value of mail_attachment_min_size , like 16KB ? 4º Can I "undo" SiS if I have problems? 5º We use bacula to save indexes & mdboxes, and we recover mailboxes using doveadm import when a user "makes a fatal mistake" wiping all her Inbox. If we enable SiS I am not really sure how can we safely restore a user's INBOX if that user has SiS attachments. Thank you for your (great) support. Maria

2 1

[Dovecot] lda/sieve ignores quota from ldap
by Jens Meißner 03 Dec '11

03 Dec '11

Hello, I'm using Dovecot 2.0 with Sieve as MDA and Postfix as MTA. The Postfix delivery command is /usr/lib/dovecot/dovecot-lda -f "$SENDER" -a "$RECIPIENT". I have set a default quota with quota_rule = *:storage=1G. Some users should have a larger quota. This is defined in a ldap directory and I have set user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid,mailQuota=quota_rule=*:storage=%$. The imap_quota plugin shows the right quota for all users but the lda ignores the quota rule from ldap. If a user is over default quota but not over his ldap defined quota I get the following error message: From: Mail Delivery Subsystem <postmaster@[…]> Your message to <[…]> was automatically rejected: Quota exceeded (mailbox for user is full) The log file shows the following: Nov 30 18:21:17 […] dovecot: lda([…]): Error: sieve: msgid=<20111130172116.7F065A07D@[…]>: failed to store into mailbox 'INBOX': Quota exceeded (mailbox for user is full) Nov 30 18:21:17 […] dovecot: lda([…]): Error: sieve: script /var/mail/[…]/dovecot.sieve failed with unsuccessful implicit keep (user logfile /var/mail/[…]/dovecot.sieve.log may reveal additional details) Nov 30 18:21:17 […] dovecot: lda([…]): msgid=<20111130172116.7F065A07D@[…]>: rejected: Quota exceeded (mailbox for user is full) dovecot.sieve.log: error: msgid=<20111130172116.7F065A07D@[…]>: failed to store into mailbox 'INBOX': Quota exceeded (mailbox for user is full). What is wrong? What must I do to getting this to work? Thanks in advance. Regards Jens doveconf -n: # 2.0.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-xen-amd64 x86_64 Debian 6.0.3 nfs mail_location = maildir:/var/mail/%u mail_plugins = quota managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { quota = maildir quota_rule = *:storage=1G sieve = /var/mail/%u/dovecot.sieve sieve_dir = /var/mail/%u/sieve } protocols = " imap sieve pop3" ssl_cert = </etc/dovecot/ssl/mail.crt ssl_key = </etc/dovecot/ssl/mail.key userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol imap { mail_plugins = quota imap_quota ssl_cert = </etc/dovecot/ssl/imap.crt ssl_key = </etc/dovecot/ssl/imap.key } protocol pop3 { ssl_cert = </etc/dovecot/ssl/pop.crt ssl_key = </etc/dovecot/ssl/pop.key } protocol lda { mail_plugins = quota sieve } /etc/dovecot/dovecot-ldap.conf.ext: hosts = […] dn = uid[…] dnpass = […] auth_bind = yes base = […] user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid,mailQuota=quota_rule=*:storage=%$

2 2

[Dovecot] can not get t'bird to create folder
by sean darcy 02 Dec '11

02 Dec '11

dovecot-2.0.16 on Fedora 15. thunderbird-8.0 I can access dovecot from thunderbird, imap maildir. But when I try to create a new folder, nothing happens. I'm not using LAYOUT=fs, so I have added, tb-extra-mailbox-sep, which didn't seem relevant anyhow. Any help appreciated. sean

2 2

[Dovecot] Authentication listener configuration
by Rainer Frey 02 Dec '11

02 Dec '11

Hi, I'm wondering about the authentication listeners that dovecot uses. In many configurations I see: service auth { unix_listener auth-userdb { Does any component of dovecot use this listener internally (lmtp, lda ...) and does that read the config and search for the listener, or is the exact name "auth-userdb" expected? Is this maybe dependent on the userdb? Which ones need it? And if I want to use postfix SMTP auth, should I define a second listener, or just re-configure that default one to postfix's needs? Also, in which cases do I need to define an auth-worker service, and a unix_listener for it? I don't find this in the documentation, if that's caused by my lacking search skills, please just send apointer. Thanks Rainer

1 2

[Dovecot] dsync(root): Fatal: execvp() failed: No such file or directory
by Yaroslav Boychuk 02 Dec '11

02 Dec '11

Hi everybody, I try to convert mbox to maildir using local locations /root/mail is a dir with mboxes /root/INBOX is mbox file h=/root dsync -f -v mirror \ mbox:$h/mail:INBOX=$h/INBOX \ maildir:$h/Maildir:CONTROL=$h/dovecot:INDEX=$h/dovecot \ as result I have dsync(root): Fatal: execvp(mbox:/root/mail:INBOX=/root/INBOX) failed: No such file or directory dsync-local(root): Error: read() from worker server failed: EOF thank you for any help FreeBSD, dovecot 2.0.15

2 2

[Dovecot] LDAP Authentication - Home Directory Creation
by Stephen Bowman 02 Dec '11

02 Dec '11

How does everyone handle this case? Users are authenticated by LDAP, and do not have accounts on the IMAP/dovecot server. When a new user is added to LDAP, the home directory (/home/newuser) needs to be created on the IMAP/dovecot server so dovecot can create the mail directories inside it (/home/newuser/mail/). Obviously I can come up with a few custom solutions, utilizing cron, but I feel like there's a cleaner solution out there. Thanks!

5 8

[Dovecot] dovecot-lda quota rule
by Micah Anderson 01 Dec '11

01 Dec '11

I really like the feature where you can define quota rules with percents which trigger off of the default values[0] (so you can set the Trash to allow for 10% more of the user's quota for example). What I would really love in dovecot would be for the ability to configure a quota rule for dovecot-lda. I would like to configure things so we don't bounce emails for users until they are well over quota, the IMAP quota plugin is a really great way to notify people that they are over quota because it fails to write to other folders.... that should be enough to get people's attention that they need to deal with things, but bouncing is harsh. Is there a way to do this now that I haven't seen? thanks! micah 0. http://wiki2.dovecot.org/Quota/Configuration --

3 6

[Dovecot] can't get sieve to sort virus into spam
by sean darcy 01 Dec '11

01 Dec '11

I can't get sieve to put virus files in the SPAM folder. dovecot -n # 2.0.16: /etc/dovecot/dovecot.conf # OS: Linux 2.6.38.8-32.fc15.i686.PAE i686 Fedora release 15 (Lovelock) auth_debug_passwords = yes info_log_path = /var/log/dovecot-info.log log_path = /var/log/dovecot.log mail_access_groups = mail mail_home = /home/vmail/%d/%n mail_location = maildir:~/mail mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl passdb { args = scheme=CRYPT username_format=%u /etc/dovecot/users driver = passwd-file } plugin { antispam_backend = dspam-exec antispam_dspam_args = --deliver;--user;%u antispam_dspam_binary = /usr/bin/dspam antispam_signature = X-DSPAM-Signature antispam_signature_missing = error antispam_spam = Spam antispam_trash = trash;Trash;Deleted Items; Deleted Messages sieve = /home/vmail/%d/%n/dovecot.sieve.script sieve_dir = /home/vmail/%d/%n/dovecot.sieve/ sieve_global_dir = /var/lib/dovecot/sieve/global/ sieve_global_path = /var/lib/dovecot/sieve/default.sieve } service auth { unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } user = vmail } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } protocol lmtp { mail_plugins = quota sieve } protocol imap { mail_plugins = " antispam" } cat /var/lib/dovecot/sieve/default.sieve require "fileinto"; if header :contains "X-DSPAM-Result" "Virus" { fileinto "SPAM"; } if header :contains "X-DSPAM-Result" "Spam" { fileinto "SPAM"; } and there is a folder SPAM: cat mail/subscriptions Sent Trash Drafts SPAM yet : Content-Type: multipart/alternative; boundary=14dae9399d3b9b67cc04b2d60790 X-DSPAM-Result: Virus X-DSPAM-Processed: Mon Nov 28 21:03:47 2011 X-DSPAM-Confidence: 1.0000 X-DSPAM-Probability: 1.0000 X-DSPAM-Signature: 4ed43d8341479178914901 --14dae9399d3b9b67cc04b2d60790 Content-Type: text/plain; charset=ISO-8859-1 X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H* does not end up into SPAM, or anyplace else, including inbox. How do I make this work? sean

3 4

[Dovecot] second active directory
by Айдар Камалов 30 Nov '11

30 Nov '11

Hello! There is dovecot authenticating through AD. All is working well, if authentication is just one of AD. But there is another AD, and working with 2 AD's dovecot don't recognizes last AD user's home directory. For example, if user name in the second AD - 1developer and Mail - it-2c(a)zakamye.ru then dovecot creates folder /var/mail/zakamye.ru/1cdeveloper but it should be /var/mail/zakamye.ru/it-2c. What I do wrong?( And, if I change the order of viewing AD, does not work precisely the second AD: passdb ldap-DUSLYK { driver = ldap args = /etc/dovecot/dovecot-DUSLYK.conf } userdb ldap-DUSLYK { driver = ldap args = /etc/dovecot/dovecot-DUSLYK-users.conf } passdb ldap-DUSL-OFFICE { driver = ldap args = /etc/dovecot/dovecot-DUSL-OFFICE.conf } userdb ldap-DUSL-BASE { driver = ldap args = /etc/dovecot/dovecot-DUSL-OFFICE-users.conf } Sorry for my bad english, but maybe you can understand logs and configs: http://pastebin.com/mtk4XsNE -- Айдар А. Камалов, Системный администратор ООО "ТД Дуслык" г. Наб. Челны, пос. Сидоровка Тел.: +7 (8552) 47-01-99 доб. 3025 Тел.: +7 (8552) 70-65-15 доб. 280 Сот.: +7 (919) 621-28-52 E-mail: akam(a)zakamye.ru

1 1

[Dovecot] Fault tolerant architecture
by Marcelo Salhab Brogliato 30 Nov '11

30 Nov '11

Hi, I'm new to this list and want your help. I'm the mail admin for some domains in Rio de Janeiro - Brazil. Today we have only one machine running dovecot (imap+pop3) with local mail. We are migrating to two virtual machines in kvm running in separate hosts. Then we have two main problems: - How to share mail files to both dovecots? We've been thinking about NFS using local indexes. Is this a good approach? - How do we have a fault tolerant mail servers? Our first solutions is using two IP addresses in our DNS records. About NFS using local indexes, I'm configuring a test server. But how to configure local indexes when my mail_location comes from sql (userdb_home actually). I'm using dovecot 1.2.9. I guess you already had some of these problems or maybe in another architecture these neither exists. Thanks for any help, Marcelo

4 3

[Dovecot] Best setup for performance and fault tolerance
by Donny Brooks 30 Nov '11

30 Nov '11

Hello all. I am in need of some guidance. First a little background. Currently our mail server is on physical hardware (Dell server with 2x 2.8GHz Xeon w/ 4GB ram, raid5 array, single gigabit nic) running on Fedora 11 and postfix-2.5.6-3.fc11.x86_64 with dovecot-1.2.11-3.fc11.x86_64. Mailstore is via Maildir format that was converted from mbox about a year ago. This same machine is also our PDC with samba, Master LDAP, slave MySQL replication, primary DNS, and home server for about 20 users. We have approximately 200 end users that have mailboxes on the server ranging from 1KB to 20GB in size. Total mail store is currently at 300GB. About 75 of the users are currently POP access and their mail will be moved to the server soon and setup as IMAP. This is calculated to add roughly another 150GB of mail for a total of 450GB mail store. Being a state agency we have to keep the mail indefinitely for public record reasons. We use a mixture of Thunderbird as an IMAP client and SOGo for web access. Now to the problem: Recently we have been having super slow access to the mail server. Turns out the load was insanely high partially due to the samba home server portion, which is being moved off as we speak, and the other part is due to people searching their mail. Just yesterday one of our users nearly brought the entire agency to its knees by performing a search on her 8GB of mail via IMAP. Since the server is old in both hardware and software I have been tasked with moving it to newer hardware and a newer OS. We currently have 3 virtual servers running Xen and a SAN. The new setup will be placed in the virtual environment. I will probably run Fedora 16 as the OS but am open to Centos, Fedora, or Ubuntu. Now to the question: What is the best way to setup Dovecot so that it is tuned for performance and high available? We have been running with this single point of failure for years so as long as we are moving the mail server we might as well build in some redundancy. To solve the searching problem I thought of maybe setting up some type of indexing. I do kind of want to break the various services out on to separate virtual machines for a little more fault tolerance, but that is not totally necessary. What do you think of things like iRedmail? I see it's usefulness but the not being able to separate services kind of defeats the purpose, plus I want to setup a high available MySQL cluster and possibly OpenLDAP or 389 cluster so iRedMail may not be the best solution. Sorry for the long email but I am trying to get all the information out there at once so it will help get more directed responses in the shortest amount of time. I look forward to any and all input on this matter -- Donny B MDAH

2 1

[Dovecot] Indexes to MLC-SSD
by Patrick Westenberg 29 Nov '11

29 Nov '11

Hi all, is anyone on this list who dares/dared to store his index files on a MLC-SSD? Regards, Patrick

9 26

[Dovecot] 2.0.16 - auth with vpopmail won´t work anymore
by Werner Schöller 29 Nov '11

29 Nov '11

Hi, after upgrading from 2.0.15 to 2.0.16 authentication with vpopmail won´t work anymore. 2.0.x and 1.2.x works (this output is from 2.0.15): Nov 28 18:29:21 mail dovecot: auth: Debug: auth client connected (pid=3855) Nov 28 18:29:21 mail dovecot: auth: Debug: client in: AUTH 1 PLAIN service=imap secured lip=10.114.57.11 rip=10.114.57.11 lport=143 rport=37693 resp=d3NjaG9lbGxlckBodGwtcGVyZy5hYy5hdAB3c2Nob2VsbGVyQGh0bC1wZXJnLmFjLmF0AGRpYWJsbw== Nov 28 18:29:21 mail dovecot: auth-worker: Debug: vpopmail(wschoeller(a)htl-perg.ac.at,10.114.57.11): lookup user=wschoeller domain=htl-perg.ac.at Nov 28 18:29:21 mail dovecot: auth: Debug: client out: OK 1 user=wschoeller(a)htl-perg.ac.at Nov 28 18:29:21 mail dovecot: auth: Debug: master in: REQUEST 4001103873 3855 1 7a21a4d39cc6b187b3b14dc4cfbf077a Nov 28 18:29:21 mail dovecot: auth-worker: Debug: vpopmail(wschoeller(a)htl-perg.ac.at,10.114.57.11): lookup user=wschoeller domain=htl-perg.ac.at Nov 28 18:29:21 mail dovecot: auth: Debug: master out: USER 4001103873 wschoeller(a)htl-perg.ac.at uid=89 gid=89 home=/var/vpopmail/domains/htl-perg.ac.at/wschoeller Nov 28 18:29:21 mail dovecot: imap-login: Login: user=<wschoeller(a)htl-perg.ac.at>, method=PLAIN, rip=10.114.57.11, lip=10.114.57.11, mpid=3856, secured Nov 28 18:29:21 mail dovecot: imap(wschoeller(a)htl-perg.ac.at): Disconnected: Logged out bytes=29/405 Nov 28 18:29:21 mail dovecot: auth: Debug: auth client connected (pid=3858) 2.0.16 doesn´t work: Nov 28 18:43:15 mail dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/auth Nov 28 18:43:15 mail dovecot: auth: Debug: auth client connected (pid=27392) Nov 28 18:43:15 mail dovecot: auth: Debug: client in: AUTH 1 PLAIN service=imap secured lip=10.114.57.11 rip=10.114.57.11 lport=143 rport=42768 resp=d3NjaG9lbGxlckBodGwtcGVyZy5hYy5hdAB3c2Nob2VsbGVyQGh0bC1wZXJnLmFjLmF0AGRpYWJsbw== Nov 28 18:43:15 mail dovecot: auth-worker: Debug: Loading modules from directory: /usr/lib/dovecot/auth Nov 28 18:43:15 mail dovecot: auth-worker: Debug: vpopmail(wschoeller(a)htl-perg.ac.at,10.114.57.11): lookup user=wschoeller domain=htl-perg.ac.at Nov 28 18:43:15 mail dovecot: auth-worker: vpopmail(wschoeller(a)htl-perg.ac.at,10.114.57.11): Password mismatch Nov 28 18:43:15 mail dovecot: auth-worker: Error: md5_verify(wschoeller(a)htl-perg.ac.at): Not a valid MD5-CRYPT or PLAIN-MD5 password Nov 28 18:43:15 mail dovecot: auth-worker: Error: smd5_verify(wschoeller(a)htl-perg.ac.at): SMD5 password too short Nov 28 18:43:15 mail dovecot: auth-worker: Error: ssha_verify(wschoeller(a)htl-perg.ac.at): SSHA password too short Nov 28 18:43:15 mail dovecot: auth-worker: Error: ssha256_verify(wschoeller(a)htl-perg.ac.at): SSHA256 password too short Nov 28 18:43:15 mail dovecot: auth-worker: Error: ssha512_verify(wschoeller(a)htl-perg.ac.at): SSHA512 password too short Nov 28 18:43:15 mail dovecot: auth-worker: Warning: Invalid OTP data in passdb Nov 28 18:43:15 mail dovecot: auth-worker: Debug: vpopmail(wschoeller(a)htl-perg.ac.at,10.114.57.11): CLEARTEXT(mypassword) != '', try OTP scheme instead Nov 28 18:43:17 mail dovecot: auth: Debug: client out: FAIL 1 user=wschoeller(a)htl-perg.ac.at Nov 28 18:43:17 mail dovecot: imap-login: Aborted login (auth failed, 1 attempts): user=<wschoeller(a)htl-perg.ac.at>, method=PLAIN, rip=10.114.57.11, lip=10.114.57.11, secured Dovecot -n: # 2.0.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.36-gentoo-r8 i686 Gentoo Base System release 1.12.14 auth_debug = yes auth_debug_passwords = yes disable_plaintext_auth = no first_valid_uid = 89 listen = * mail_location = maildir:~/.maildir namespace { hidden = no inbox = yes list = yes location = prefix = INBOX. separator = . type = private } passdb { args = webmail=127.0.0.1 driver = vpopmail } service auth { user = root } ssl_cert = </etc/ssl/dovecot/server.pem ssl_key = </etc/ssl/dovecot/server.key userdb { driver = vpopmail } Just a wild guess - but is it possible that the reason could be found here: http://hg.dovecot.org/dovecot-2.0/rev/b99da8b1ecef Thanks for any suggestions. Best regards, Werner

1 0

[Dovecot] squat fts not working on 2.1rc1
by Metro Domain Admin 28 Nov '11

28 Nov '11

Hello, I tried to upgrade from 2.0.15 to 2.1.rc1 over the weekend but ran into some problems with squat. My two largest mailboxes were corrupted, producing this error: Nov 27 17:38:12 kerio1 dovecot[42860]: imap(bigmailbox): Error: Corrupted squat uidlist file /var/mail/metro-email.com/bigmailbox/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index.search.uids: wrong indexid There is a good chance that I had shot my own foot, by forgetting to update postfix's dovecot-lda reference to the new instance. I had also enabled an inet based LMTP listener, although it is not being used yet. Even using non-corrupted indexes, it seemed that FTS was not being used. A basic search such as this one took many minutes to complete: doveadm search -u jsample mailbox INBOX body eps I found messages like this in mail.log after performing the search: Nov 27 18:21:39 kerio1 dovecot[42860]: indexer-worker(jsample): Indexed 0 messages in Drafts Nov 27 18:21:39 kerio1 dovecot[42860]: indexer-worker(jsample): Indexed 0 messages in INBOX When I rolled back to 2.0.15, the same search returned almost immediately. The larger mailboxes went quickly again, but only after they had a chance to rebuild. A few other notes about our configuration: We are on PPC, with the stats service disabled (because of kqueue issue discussed earlier). I made some minor changes in my config since the previous installed version (diff below). mail_location override is in place for all users via password file, e.g.: userdb_mail=mdbox:/var/mail/metro-email.com/jsample/mdbox Thanks, Tony kerio1:~ metroadmin$ /opt/dovecot-2.1.rc1/bin/doveconf -n -c /opt/dovecot-2.1.rc1/etc/dovecot/dovecot.conf # 2.1.rc1: /opt/dovecot-2.1.rc1/etc/dovecot/dovecot.conf # OS: Darwin 9.8.0 Power Macintosh auth_cache_negative_ttl = 0 auth_cache_size = 1 M auth_mechanisms = plain login lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lmtp_proxy = yes mail_location = maildir:%h mail_plugins = fts fts_squat mail_log notify mail_privileged_group = mail maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave editheader mdbox_rotate_size = 10 M namespace { inbox = yes location = prefix = separator = / } passdb { args = scheme=CRYPT username_format=%u /opt/dovecot-2.1.rc1/etc/dovecot/users driver = passwd-file } plugin { fts = squat mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size from subject sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)metro-email.com protocols = imap lmtp service auth { unix_listener /var/spool/postfix/private/auth { group = _postfix mode = 0660 user = _postfix } unix_listener auth-userdb { group = mail mode = 0660 user = metroadmin } } service imap { executable = imap postlogin } service lmtp { inet_listener lmtp { address = 192.168.20.10 127.0.0.1 port = 24 } } service postlogin { executable = script-login rawlog -t } service stats { fifo_listener stats-mail { mode = 00 } } ssl_cert = </opt/local/apache2/conf/ssl_startcom/server.crt ssl_key = </opt/local/apache2/conf/ssl_startcom/server.key userdb { args = username_format=%u /opt/dovecot-2.1.rc1/etc/dovecot/users driver = passwd-file } verbose_proctitle = yes protocol imap { mail_max_userip_connections = 16 } Here is a diff between the current/working and attempted configs: kerio1:~ metroadmin$ diff k1.curr k1.new2 1c1 < # 2.0.15: /opt/dovecot-2.0.15/etc/dovecot/dovecot.conf --- > # 2.1.rc1: /opt/dovecot-2.1.rc1/etc/dovecot/dovecot.conf 9a10 > lmtp_proxy = yes 15c16 < managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave --- > managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave editheader 24c25 < args = scheme=CRYPT username_format=%u /opt/dovecot-2.0.15/etc/dovecot/users --- > args = scheme=CRYPT username_format=%u /opt/dovecot-2.1.rc1/etc/dovecot/users 50a52,57 > service lmtp { > inet_listener lmtp { > address = 192.168.20.10 127.0.0.1 > port = 24 > } > } 53a61,65 > service stats { > fifo_listener stats-mail { > mode = 00 > } > } 57c69 < args = username_format=%u /opt/dovecot-2.0.15/etc/dovecot/users --- > args = username_format=%u /opt/dovecot-2.1.rc1/etc/dovecot/users kerio1:~ metroadmin$

1 0

[Dovecot] Which FTS to use!
by Henrique Santos Fernandes 27 Nov '11

27 Nov '11

Hello, i am currently using squat dovecot, but some users that have lots os emails ( 1GB ) are complaining about speed. Iam using dovecot 2.0.13 on debian 6 my squat conf is plugin { fts = squat fts_squat = partial=4 full=5 } I am thinking in maybe start to use Solr, so any one can help me with an decision? I am probably gonna update dovecot to 2.1 next year. and them maybe change the FTS plugin. This year i will get 10k disk only to store the dovecot index, rigth now they are saved on the same storage that the mails are and also change the "full" parameter to something like 10 or 15 I know i will use more disk space for it, but it will make a lot of differences right? it will match the message without the need of opening it for any search smaller than 10 character i guess. But this will be enough? or Solr or Lucene still better? Anyway, i am not current updating the indexes automatic, but i am planing on it, just not sure what is better, the command doveadm index or doveadm search... with one is better to do the task? Thanks! []'sf.rique

2 2

[Dovecot] Dovecot 1.2 ACL problem.
by Rajeev Sharma 26 Nov '11

26 Nov '11

Sir, I have migrate from courier-imap to dovecot without any problem but on courier in have shared folder which access on the basis on rights. I have manage these folders in dovecot but i have one problem all the shared folder is accessible by all user whether they have rights or not i have place dovecot-acl in shared folder and assign user my dovecot-acl is user=rajeev(a)teamsg.in tr. But all other user which is not listing on dovecot-acl also able to access these folder. Here is the output of dovecot -n. # 1.2.17: /usr/local/etc/dovecot.conf # OS: Linux 2.6.18-194.3.1.el5 i686 CentOS release 5.5 (Final) base_dir: /var/run/dovecot/ log_path: /var/log/dovecot.log ssl_listen: 192.168.0.251:993 ssl_cert_file: /var/qmail/control/servercert.pem ssl_key_file: /var/qmail/control/servercert.pem login_dir: /var/run/dovecot//login login_executable: /usr/local/libexec/dovecot/imap-login first_valid_uid: 508 last_valid_uid: 508 mail_location: maildir:~/Maildir namespace: type: private separator: . prefix: INBOX. inbox: yes list: yes subscriptions: yes namespace: type: shared separator: . prefix: INBOX.Shared. location: maildir:/home/vpopmail/domains/sgcricket.com/Maildir/Out:INDEX=~/Maildir/Sh… list: children auth default: user: vpopmail passdb: driver: vpopmail userdb: driver: vpopmail plugin: acl: vfile Please help whats wrong i am doing. Rajeev Sharma.

1 0

[Dovecot] Seen flag getting lost
by Edgar Fuß 26 Nov '11

26 Nov '11

We have two dovecot 1.2 instances sharing Maildirs on NFS. Indexes are local to the individual servers. Occasionally (no idea how to trigger this), the Seen flag gets lost on some messages. I've verified that actually the ``S'' is missing from the filename. I suspect something like server A caching the flags, server B setting Seen, and then server A flushing its cache for another change so overwriting what B changed. Any ideas short of switching to 2.0?

6 8

[Dovecot] v2.1.rc1 released
by Timo Sirainen 25 Nov '11

25 Nov '11

http://dovecot.org/releases/2.1/rc/dovecot-2.1.rc1.tar.gz http://dovecot.org/releases/2.1/rc/dovecot-2.1.rc1.tar.gz.sig I'll probably release v2.1.0 pretty soon, unless people report some new bugs. I know v2.1 is already being used to serve mails to tens (or hundreds?) of thousands of users, so it should be pretty stable. Most of the changes since v2.1.beta1 have been for rather small issues. Many of the fixed bugs exist also in v2.0, but since they are so minor I didn't bother backporting the fixes. As new features since v2.1.beta1 there are the things I did also for v2.0.16, and: * ssl_client_cert/key: Proxying can now send SSL certificate to backend server * ssl_crypto_device for enabling hardware encryption * SCRAM-SHA-1 authentication mechanism support by Florian Zeitz * passdb/userdb checkpassword: Export all auth %variables to AUTH_* environment. * maildir_broken_filename_sizes setting for people upgrading from other maildir servers that wrote tons of broken S=<size> values And as a reminder, here are the biggest new things since v2.0: * Plugins now use UTF-8 mailbox names rather than mUTF-7: acl, autocreate, expire, trash, virtual * auth_username_format default changed to %Lu. If you really want case sensitive usernames, set it back to empty. * Solr full text search backend changed to use mailbox GUIDs instead of mailbox names, requiring reindexing everything. solr_old backend can be used with old indexes to avoid reindexing, but it doesn't support some newer features. + imapc (= IMAP client) storage allows using a remote IMAP server to be used as storage. This allows using Dovecot as a smart (caching) proxy or using dsync to do migration from remote IMAP server. + Mailbox indexing via queuing indexer service (required for Lucene) + Lucene full text search (FTS) backend rewritten with support for different languages + FTS finally supports "OR" search operation + FTS supports indexing attachments via external programs + IMAP FUZZY extension, supported by Lucene and Solr FTS backends + Mailbox list indexes + Statistics tracking via stats service. Exported via doveadm stats. + Autocreate plugin creates/subscribes mailboxes physically only when the mailbox is opened for the first time. Mailbox listing shows the autocreated mailboxes even if they don't physically exist. + Password and user databases now support default_fields and override_fields settings to specify template defaults/overrides. - listescape plugin works perfectly now

6 8

[Dovecot] How to create home directories for virtual users?
by Olli Räisänen 25 Nov '11

25 Nov '11

Hello, I,m using Dovecot 1.2.9, now finishing a migration from Courier IMAP. Documentation (http://wiki.dovecot.org/VirtualUsers/Home) says that home directory should not be the same as mail directory. When I create new user accounts with PostfixAdmin the mail directory is not a problem but is there some smart way to create the home directory as well (locating it for instance in '/srv/vmail/%d/%n/home')? Regards, Olli

5 8

[Dovecot] Problem with lmtp proxy
by Miguel Tormo 24 Nov '11

24 Nov '11

Hello everyone, I have set up postfix to deliver mails to dovecot (2.0.16) using LMTP. On the other hand, I've successfully configured the IMAP proxy setting in dovecot in order to be able to distribute mailboxes among different servers. I wanted to do the same proxy at LMTP level, but it's not working. If I put lmtp_proxy = no, then everything works ok (assuming the mailbox is local), but when I set lmtp_proxy = yes then the user is not found when deliverying the message via LMTP, so the mail remains in the postfix queue. Users are validated through active directory. However, this AD hasn't the SFU installed, thus its LDAP schema doesn't provide me with the required uid, gid, etc. To solve this, I have winbind configured in the system, so I'm doing this: - To validate users *and* be able to set the proxy extra fields, I use ldap as "passdb" (I believe it's not possible to use proxies with PAM). I'm using some LDAP field to store the host that has the user's mailbox. - In order to get the user account data that is not available in the AD, I use passwd as "userdb". I know that when using LMTP with proxy, a passdb needs to be configured. I assume this is needed for the service to lookup for the appropriate host to send the message. So, initially I set ldap as the passdb for LMTP, but just because it didn't work I put both ldap and passwd, and even a userdb (passwd), but the problems remain the same. Anyway the ldap should be the right one as it is there where I have the host information for each user. I think I'm missing something but I can't find what it is. To summarize: with lmtp_proxy = no it does work, with lmtp_proxy = yes it doesn't. Thank you for your help! This is my current config: ************* dovecot -n ************** # 2.0.16: /etc/dovecot/dovecot.conf # OS: Linux 2.6.37-gentoo-edicom-1104 x86_64 Gentoo Base System release 1.12.14 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_username_format = %n auth_verbose = yes base_dir = /var/run/dovecot/ listen = * lmtp_proxy = yes login_trusted_networks = 127.0.0.1 mail_debug = yes mail_location = maildir:~/maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)domain.com protocols = imap pop3 sieve lmtp quota_full_tempfail = yes service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = root mode = 0600 user = root } } service imap { vsz_limit = 512 M } service lmtp { inet_listener lmtp { address = 192.168.0.90 port = 24 } unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0666 user = postfix } } ssl_cert = </etc/ssl/dovecot/server.pem ssl_key = </etc/ssl/dovecot/server.key submission_host = 192.168.0.22 userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { passdb { args = driver = passwd } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } userdb { args = driver = passwd } } protocol lda { mail_plugins = sieve } protocol imap { imap_client_workarounds = delay-newmail } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } **************************************************** ************** cat dovecot-ldap.conf.ext ************** hosts = dcserver:389 dn = cn=binduser,cn=Users,dc=edicom,dc=es dnpass = bindpassword tls = no debug_level = -1 auth_bind = yes ldap_version = 3 base = CN=Users,DC=domain,DC=com deref = never scope = subtree user_filter = (&(memberOf=CN=correo,OU=Alfresco,DC=edicom,DC=es)(sAMAccountName=%u)) pass_attrs = userPassword=password,=proxy_maybe=Y,physicalDeliveryOfficeName=host pass_filter = (&(memberOf=CN=correo,OU=Alfresco,DC=edicom,DC=es)(sAMAccountName=%u)) **************************************************** The results I get in the log: **************************************************** dovecot [2011-11-24 15:53:39] [warning] master: Warning: Killed with signal 15 (by pid=10437 uid=0 code=kill) dovecot [2011-11-24 15:53:40] [info] master: Dovecot v2.0.16 starting up (core dumps disabled) dovecot [2011-11-24 15:53:50] [debug] lmtp(10506): Debug: none: root=, index=, control=, inbox=, alt= dovecot [2011-11-24 15:53:50] [info] lmtp(10506): Connect from local dovecot [2011-11-24 15:53:50] [debug] auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_bind dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_simple_bind dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_sasl_bind dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_send_initial_request dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_new_connection 1 1 0 dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_int_open_connection dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_connect_to_host: TCP dcserver:389 dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_new_socket: 17 dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_prepare_socket: 17 dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_connect_to_host: Trying 192.168.0.67:389 dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_pvt_connect: fd: 17 tm: -1 async: 0 dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_open_defconn: successful dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_send_server_request dovecot [2011-11-24 15:53:50] [debug] auth: Debug: master in: PASS 1 myuser(a)domain.com service=lmtp dovecot [2011-11-24 15:53:50] [debug] auth: Debug: password(myuser): passdb doesn't support credential lookups dovecot [2011-11-24 15:53:50] [debug] auth: Debug: password(myuser): passdb doesn't support credential lookups dovecot [2011-11-24 15:53:50] [debug] auth: Debug: password(myuser): passdb doesn't support credential lookups dovecot [2011-11-24 15:53:50] [debug] auth: Debug: master out: FAIL 1 dovecot [2011-11-24 15:53:50] [err] lmtp(10506): Error: user myuser(a)domain.com: Auth PASS lookup failed dovecot [2011-11-24 15:53:50] [debug] lmtp(10506): Debug: auth input: dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_result ld 0x16518d0 msgid -1 dovecot [2011-11-24 15:53:50] [err] auth: Error: wait4msg ld 0x16518d0 msgid -1 (timeout 0 usec) dovecot [2011-11-24 15:53:50] [err] auth: Error: wait4msg continue ld 0x16518d0 msgid -1 all 0 dovecot [2011-11-24 15:53:50] [err] auth: Error: ** ld 0x16518d0 Connections: dovecot [2011-11-24 15:53:50] [err] auth: Error: * host: domain.com port: 389 (default) dovecot [2011-11-24 15:53:50] [err] auth: Error: refcnt: 2 status: Connected dovecot [2011-11-24 15:53:50] [err] auth: Error: last used: Thu Nov 24 15:53:50 2011 dovecot [2011-11-24 15:53:50] [err] auth: Error: dovecot [2011-11-24 15:53:50] [err] auth: Error: dovecot [2011-11-24 15:53:50] [err] auth: Error: ** ld 0x16518d0 Outstanding Requests: dovecot [2011-11-24 15:53:50] [err] auth: Error: * msgid 1, origid 1, status InProgress dovecot [2011-11-24 15:53:50] [err] auth: Error: outstanding referrals 0, parent count 0 dovecot [2011-11-24 15:53:50] [err] auth: Error: ld 0x16518d0 request count 1 (abandoned 0) dovecot [2011-11-24 15:53:50] [err] auth: Error: ** ld 0x16518d0 Response Queue: dovecot [2011-11-24 15:53:50] [err] auth: Error: Empty dovecot [2011-11-24 15:53:50] [err] auth: Error: ld 0x16518d0 response count 0 dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_chkResponseList ld 0x16518d0 msgid -1 all 0 dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_chkResponseList returns ld 0x16518d0 NULL dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_int_select dovecot [2011-11-24 15:53:50] [err] auth: Error: read1msg: ld 0x16518d0 msgid -1 all 0 dovecot [2011-11-24 15:53:50] [err] auth: Error: read1msg: ld 0x16518d0 msgid 1 message type bind dovecot [2011-11-24 15:53:50] [err] auth: Error: read1msg: ld 0x16518d0 0 new referrals dovecot [2011-11-24 15:53:50] [err] auth: Error: read1msg: mark request completed, ld 0x16518d0 msgid 1 dovecot [2011-11-24 15:53:50] [err] auth: Error: request done: ld 0x16518d0 msgid 1 dovecot [2011-11-24 15:53:50] [err] auth: Error: res_errno: 0, res_error: <>, res_matched: <> dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_free_request (origid 1, msgid 1) dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_parse_result dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_msgfree dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_result ld 0x16518d0 msgid -1 dovecot [2011-11-24 15:53:50] [err] auth: Error: wait4msg ld 0x16518d0 msgid -1 (timeout 0 usec) dovecot [2011-11-24 15:53:50] [err] auth: Error: wait4msg continue ld 0x16518d0 msgid -1 all 0 dovecot [2011-11-24 15:53:50] [err] auth: Error: ** ld 0x16518d0 Connections: dovecot [2011-11-24 15:53:50] [err] auth: Error: * host: domain.com port: 389 (default) dovecot [2011-11-24 15:53:50] [err] auth: Error: refcnt: 1 status: Connected dovecot [2011-11-24 15:53:50] [err] auth: Error: last used: Thu Nov 24 15:53:50 2011 dovecot [2011-11-24 15:53:50] [err] auth: Error: dovecot [2011-11-24 15:53:50] [err] auth: Error: dovecot [2011-11-24 15:53:50] [err] auth: Error: ** ld 0x16518d0 Outstanding Requests: dovecot [2011-11-24 15:53:50] [err] auth: Error: Empty dovecot [2011-11-24 15:53:50] [err] auth: Error: ld 0x16518d0 request count 0 (abandoned 0) dovecot [2011-11-24 15:53:50] [err] auth: Error: ** ld 0x16518d0 Response Queue: dovecot [2011-11-24 15:53:50] [err] auth: Error: Empty dovecot [2011-11-24 15:53:50] [err] auth: Error: ld 0x16518d0 response count 0 dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_chkResponseList ld 0x16518d0 msgid -1 all 0 dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_chkResponseList returns ld 0x16518d0 NULL dovecot [2011-11-24 15:53:50] [err] auth: Error: ldap_int_select dovecot [2011-11-24 15:53:50] [info] lmtp(10506): Disconnect from local: Client quit (in reset) ****************************************************

3 4

[Dovecot] Questions about Proxy/Director (was: Re: Indexes to MLC-SSD)
by Patrick Westenberg 24 Nov '11

24 Nov '11

Jan-Frode Myklebust schrieb: > MTA -(lmtp)--> dovecot-director ---(lmtp)---> backend-server1 > \---(lmtp)---> backend-server2 > > > IMAP-user -(imap)--> dovecot-director --(imap) --> backend-server1 > \--(imap) --> backend-server2 In this scenario it should be possible to use a non cluster filesystem to store my mails, isn't it? Patrick

2 1

[Dovecot] modules directory
by Johannes Berg 24 Nov '11

24 Nov '11

Hi! I'm a little confused with how plugin loading works in dovecot 2, I can't seem to make it load from $(moduledir)/imap/. Is that intended to work? Just a configuration issue? Reason I ask is that I ported my antispam plugin (I know there's a fork, but I still like mine better) to dovecot 2 and the default "make install" no longer loads properly with just "mail_plugins = antispam". So is $(moduledir)/imap/ no longer used? I also notice acl/imap_acl now, but I still see subdirectories for at least auth. Should I install into just $(moduledir)/ now? johannes

2 4

Re: [Dovecot] Solaris hardware crypto engines
by Martin Preen 24 Nov '11

24 Nov '11

Hello, after serveral tests (and reading a lot of howto's) I'm now fairly convinced that the Solaris HW-crypto engine is not automatically used. Even when dovecot ist compiled with the OpenSSL version provided by Solaris. Currently I have only a T1-CPU available for testing (Sun Fire T2000) and after patching src/login-common/ssl-proxy-openssl.c (Dovecot 1.2.17) with ENGINE *e; ENGINE_load_builtin_engines(); ENGINE_init((e=ENGINE_by_id("pkcs11"))); ENGINE_set_default_RSA(e); ENGINE_set_default_DSA(e); ENGINE_set_default_ciphers(e); in ssl_proxy_init() and inserting ENGINE_cleanup(); in ssl_proxy_deinit() the crypto device gets used. I'm sure that this is not the whole story since this only seems to affect the IMAP login. One has to use the specific SSL-engine and the ENGINE/EVP calls (as stated in the various articles). Is there any chance that Dovecot gets updated/patched for this ? E.g. Like the SSLCryptoDevice setting in Apache's mod_ssl. Regards. Martin Chris Hoogendyk wrote: > > On 4/18/11 6:30 AM, Martin Preen wrote: >> Hello, >> I tried to find out how about to use the hardware crypto engines under >> Solaris (Sun Fire T2000). It seems, that its not just a compilation >> issue: >> >>> For operations that are to be offloaded, it is necessary to restrict >>> use to subset >> > of OpenSSL functions (the EVP_ functions) and explicitly indicate >> the use of the PKCS11 >> > engine; something like the following works for bulk ciphers (the >> process for RSA is similar): >>> >>> ENGINE *e; >>> ENGINE_load_builtin_engines(); >>> e = ENGINE_by_id("pkcs11"); >>> ENGINE_set_default_ciphers(e); >>> EVP_CIPHER_CTX_init (&ctx); >>> EVP_EncryptInit (&ctx, EVP_des_cbc (), key, iv); >>> EVP_EncryptUpdate (.....); >> >> Since I'm not familiar with SSL programming, I wonder if it's possible to >> modify the dovecot 1.2.x source code. Maybe someone has already tried >> this >> or can give me hint. > > You don't want to do that. > > The objective is for the ssl engine to be low level and basically > invisible to layers of application above that use it. So, build openssl > properly and it just works for everything else. > > I'm not at work today, so I don't have reference to my notes. Ah, just > found an email I sent to my colleagues -- copied it below. --------------------------------------------------------------- Martin Preen, Universität Freiburg, Institut für Informatik Georges-Koehler-Allee 52, Raum EG-006, 79110 Freiburg, Germany phone: ++49 761 203-8250 preen(a)informatik.uni-freiburg.de fax: ++49 761 203-8242 swt.informatik.uni-freiburg.de/~preen

3 6

[Dovecot] seting acl for master user?
by oni-neko＠gmx.net 24 Nov '11

24 Nov '11

Hello! I'm sorry, but i don't really understand it the way it is written in the wiki, so i'm trying my luck here =) i followed the wiki for creating a master user (the non-sql-version) and i can login as another user via this master user. my dovecot version is 1.2.9 on an ubuntu server 10.4.3 lts. what i don't get is the acl-setting, so that the master-user can access all the other users mails and folders. i made the changes in the dovecot.conf as written in the wiki: protocol imap { mail_plugins = acl imap_acl } protocol lda { mail_plugins = sieve acl } plugin { acl = vfile:/etc/dovecot/acls } in my case I only want the master user (called cyrus) to be able to do everything with/in all mailboxes, so I made a file /etc/dovecot/acls/default that reads "user=cyrus lrwstipekxa". i'm pretty sure i'm missing something rather obvious here, but somehow i'm just stuck. any help would be greatly appreciated. thanks in advance =) silvana -- NEU: FreePhone - 0ct/min Handyspartarif mit Geld-zurück-Garantie! Jetzt informieren: http://www.gmx.net/de/go/freephone

3 3

[Dovecot] Problem with Outlook 2010
by pch0317 24 Nov '11

24 Nov '11

Hi, Maybe this time somebody help. Thanks -------- Original Message -------- Subject: Problem with Outlook 2010 Date: Tue, 07 Jun 2011 20:20:56 +0100 From: pch0317 <pch0317(a)gmail.com> To: Dovecot Mailing List <dovecot(a)dovecot.org> Hi, I use dovecot 2.0. I have problem with Outlook 2010. This application freezes for about 2 minutes when I move or delete messages. Other applications such as Outlook Express and Thunderbird work correctly. Has anyone had similar problem? Thanks

3 3

[Dovecot] "%d" does not expand to domain on wildcard search
by Ramiro Blanco 24 Nov '11

24 Nov '11

Hi, I found that doing a wildcard search with doveadm doesn't expand the %d global variable when doing a wildcard search like: doveadm search *@domain ALL LARGER 10000k doveadm(root): Error: User listing returned failure doveadm: Error: Failed to iterate through some users In /var/log/dovecot.log: Nov 22 20:48:07 auth-worker: Debug: ldap: iterate: base=vd=%d,dc=domain scope=subtree filter=(&(objectClass=VirtualMailAccount)(accountActive=TRUE)) fields=mail Nov 22 20:48:07 auth-worker: Error: ldap(?): ldap_search((&(objectClass=VirtualMailAccount)(accountActive=TRUE))) failed: No such object Is this a bug? Configs: #file /usr/local/etc/dovecot/dovecot-ldap.conf.ext: hosts = x.x.x.x dn = cn=dovecot,dc=domain dnpass = mypass auth_bind = yes auth_bind_userdn = mail=%u,vd=%d,dc=domain ldap_version = 3 base = vd=%d,dc=domain deref = never scope = subtree user_attrs = mailbox=mail=maildir:/home/vmail/domains/%$,quota=quota_rule=*:storage=%$,vdHome=home=%$/%d/%1u/%1.1u/%n,=uid=504,=gid=12 user_filter = (&(&(objectClass=VirtualMailAccount)(mail=%u))(accountActive=TRUE)) pass_attrs = userPassword=password,mail=user pass_filter = (&(&(objectClass=VirtualMailAccount)(mail=%u))(accountActive=TRUE)) iterate_attrs = mail=user iterate_filter = (&(objectClass=VirtualMailAccount)(accountActive=TRUE)) default_pass_scheme = CRYPT # 2.0.16: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.3.1.el5 x86_64 CentOS release 5.5 (Final) ext3 auth_mechanisms = plain login dict { expire = pgsql:/usr/local/etc/dovecot/dovecot-dict-sql.conf.ext } hostname = localhost lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes log_path = /var/log/dovecot.log mail_gid = 12 mail_location = maildir:/home/vmail/domains/%d/%1u/%1.1u/%n mail_plugins = quota autocreate expire mail_privileged_group = mail mail_uid = 504 managesieve_notify_capability = mailto managesieve_sieve_capability = comparator-i;octet comparator-i;ascii-casemap fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date spamtest spamtestplus virustest passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { autocreate = Enviados autocreate2 = Papelera autocreate3 = Borrador autocreate4 = Spam autosubscribe = Enviados autosubscribe2 = Papelera autosubscribe3 = Borrador autosubscribe4 = Spam expire = Papelera expire2 = Papelera/* expire3 = Spam expire4 = Spam/* expire_dict = proxy::expire quota = maildir:User quota quota_rule = *:storage=100M quota_rule2 = Papelera:storage=+100M sieve = ~/sieve/dovecot.sieve sieve_before = /usr/local/etc/sieve/spam.sieve sieve_dir = ~/sieve sieve_global_dir = /usr/local/etc/sieve/ } postmaster_address = postmaster@d <postmaster(a)uvq.edu.ar>omain protocols = imap sieve pop3 service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-userdb { mode = 0600 user = vmail } } service dict { unix_listener dict { mode = 0600 user = vmail } } service managesieve-login { inet_listener sieve { port = 4190 } vsz_limit = 64 M } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lda { mail_plugins = quota autocreate expire } protocol imap { mail_plugins = quota autocreate expire imap_quota } protocol sieve { mail_plugins = managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o } -- Ramiro Blanco

2 9