- dovecot - dovecot.org

Re: [Dovecot] Performance settings for 500-1000User/per day
by Denny Schierz 20 Jun '11

20 Jun '11

hi, Am 20.06.2011 um 17:51 schrieb Frank Bonnet: > Did you check the kernel maximum open files option ? > > I had such troubles with a too low limit I thought, it's only a Linux problem? On the other hand, if so, I would assume, that I see some log infos, but I saw nothing ... cu denny

1 0

[Dovecot] Error
by sunhux G 20 Jun '11

20 Jun '11

I tested POP3 access from my laptop's Outlook which is on the same subnet as the dovecot/postfix server (so there's no firewall in between them & was able to get the emails in Outlook with following statuses shown when "Test Connection" is clicked: > Tasks Status > ===================== ======== > Establish network connection Completed > Find outgoing mail server (SMTP) Completed > Find incoming mail server (POP3) Completed > Log onto incoming mail server (POP3) Completed > Send test e-mail message Completed # dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf doveconf: Warning: NOTE: You can get a new clean config file with: doveconf -n > dovecot-new.conf doveconf: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:24: ssl_disable has been renamed to ssl # OS: Linux 2.6.12.6-xen0 i686 Red Hat Enterprise Linux ES release 4 (Nahant Update 2) disable_plaintext_auth = no listen = * mail_location = mbox:~/mail:INBOX=/pop3/spool/mail/%u mbox_write_locks = fcntl passdb { driver = pam } protocols = pop3 imap ssl = no ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } However, maillog has the following errors (172.19.21.23 is my laptop). Are they critical or what I hv to do to fix them: Jun 20 15:06:35 SmtpostixSvr postfix/smtpd[24148]: warning: smtpd_sasl_auth_enable is true, but SASL support is not compiled in Jun 20 15:06:35 SmtpostixSvr postfix/smtpd[24148]: connect from unknown[172.19.21.23] Jun 20 15:06:35 SmtpostixSvr postfix/smtpd[24148]: EA32720006C: client=unknown[172.19.21.23] Jun 20 15:06:36 SmtpostixSvr postfix/cleanup[24151]: EA32720006C: message-id=<20110620070635.EA32720006C(a)SmtpostixSvr.myportal.com> Jun 20 15:06:36 SmtpostixSvr postfix/smtpd[24148]: disconnect from unknown[172.19.21.23] Jun 20 15:06:36 SmtpostixSvr postfix/qmgr[21020]: EA32720006C: from=<myUnixid(a)myportal.com>, size=705, nrcpt=1 (queue active) Jun 20 15:06:36 SmtpostixSvr dovecot: auth: Error: dlopen(/usr/lib/dovecot/auth/libdriver_pgsql.so) failed: /usr/lib/dovecot/auth/libdriver_pgsql.so: undefined symbol: PQescapeStringConn Jun 20 15:06:36 SmtpostixSvr dovecot: auth: Error: dlopen(/usr/lib/dovecot/auth/libdriver_pgsql.so) failed: /usr/lib/dovecot/auth/libdriver_pgsql.so: undefined symbol: PQescapeStringConn Jun 20 15:06:36 SmtpostixSvr postfix/local[24152]: EA32720006C: to=<myUnixid(a)SmtpostixSvr.myportal.com>, orig_to=<myUnixid(a)myportal.com>, relay=local, delay=0.81, delays=0.26/0.11/0/0.43, dsn=2.0.0, status=sent (delivered to command: /usr/bin/procmail) Jun 20 15:06:36 SmtpostixSvr postfix/qmgr[21020]: EA32720006C: removed Jun 20 15:06:36 SmtpostixSvr dovecot: pop3-login: Login: user=<myUnixid>, method=PLAIN, rip=172.19.21.23, lip=172.19.21.27, mpid=24157 Jun 20 15:06:36 SmtpostixSvr dovecot: pop3(myUnixid): Disconnected: Logged out top=0/0, retr=0/0, del=0/191, size=436234 ================================================ > " saslfinger -s " output: > # saslfinger -s > saslfinger - postfix Cyrus sasl configuration Thu Mar 17 18:10:18 SGT 2011 > version: 1.0.2 > mode: server-side SMTP AUTH > > -- basics -- > Postfix: 2.5.6 > System: Red Hat Enterprise Linux ES release 4 (Nahant Update 2) > > -- smtpd is linked to -- > libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0x47b72000) > > -- active SMTP AUTH and TLS parameters for smtpd -- > smtpd_sasl_auth_enable = yes > smtpd_sasl_security_options = noanonymous > > > -- listing of /usr/lib/sasl -- > total 560 > -rw-r--r-- 1 root root 4634 Dec 2 2004 libanonymous.a > -rwxr-xr-x 1 root root 871 Dec 2 2004 libanonymous.la > -rwxr-xr-x 1 root root 5748 Dec 2 2004 libanonymous.so > -rwxr-xr-x 1 root root 5748 Dec 2 2004 libanonymous.so.1 > -rwxr-xr-x 1 root root 5748 Dec 2 2004 libanonymous.so.1.0.17 > -rw-r--r-- 1 root root 9758 Dec 2 2004 libcrammd5.a > -rwxr-xr-x 1 root root 857 Dec 2 2004 libcrammd5.la > -rwxr-xr-x 1 root root 9884 Dec 2 2004 libcrammd5.so > -rwxr-xr-x 1 root root 9884 Dec 2 2004 libcrammd5.so.1 > -rwxr-xr-x 1 root root 9884 Dec 2 2004 libcrammd5.so.1.0.19 > -rw-r--r-- 1 root root 34264 Dec 2 2004 libdigestmd5.a > -rwxr-xr-x 1 root root 880 Dec 2 2004 libdigestmd5.la > -rwxr-xr-x 1 root root 30804 Dec 2 2004 libdigestmd5.so > -rwxr-xr-x 1 root root 30804 Dec 2 2004 libdigestmd5.so.0 > -rwxr-xr-x 1 root root 30804 Dec 2 2004 libdigestmd5.so.0.0.20 > -rw-r--r-- 1 root root 11322 Dec 2 2004 libgssapiv2.a > -rwxr-xr-x 1 root root 906 Dec 2 2004 libgssapiv2.la > -rwxr-xr-x 1 root root 11952 Dec 2 2004 libgssapiv2.so > -rwxr-xr-x 1 root root 11952 Dec 2 2004 libgssapiv2.so.1 > -rwxr-xr-x 1 root root 11952 Dec 2 2004 libgssapiv2.so.1.0.19 > -rw-r--r-- 1 root root 6598 Dec 2 2004 liblogin.a > -rwxr-xr-x 1 root root 847 Dec 2 2004 liblogin.la > -rwxr-xr-x 1 root root 7248 Dec 2 2004 liblogin.so > -rwxr-xr-x 1 root root 7248 Dec 2 2004 liblogin.so.0 > -rwxr-xr-x 1 root root 7248 Dec 2 2004 liblogin.so.0.0.7 > -rw-r--r-- 1 root root 6150 Dec 2 2004 libplain.a > -rwxr-xr-x 1 root root 849 Dec 2 2004 libplain.la > -rwxr-xr-x 1 root root 7000 Dec 2 2004 libplain.so > -rwxr-xr-x 1 root root 7000 Dec 2 2004 libplain.so.1 > -rwxr-xr-x 1 root root 7000 Dec 2 2004 libplain.so.1.0.16 > > -- listing of /usr/lib/sasl2 -- > total 3152 > -rwxr-xr-x 1 root root 875 Dec 2 2004 libanonymous.la > -rwxr-xr-x 1 root root 12820 Dec 2 2004 libanonymous.so > -rwxr-xr-x 1 root root 12820 Dec 2 2004 libanonymous.so.2 > -rwxr-xr-x 1 root root 12820 Dec 2 2004 libanonymous.so.2.0.19 > -rwxr-xr-x 1 root root 863 Dec 2 2004 libcrammd5.la > -rwxr-xr-x 1 root root 15216 Dec 2 2004 libcrammd5.so > -rwxr-xr-x 1 root root 15216 Dec 2 2004 libcrammd5.so.2 > -rwxr-xr-x 1 root root 15216 Dec 2 2004 libcrammd5.so.2.0.19 > -rwxr-xr-x 1 root root 884 Dec 2 2004 libdigestmd5.la > -rwxr-xr-x 1 root root 42964 Dec 2 2004 libdigestmd5.so > -rwxr-xr-x 1 root root 42964 Dec 2 2004 libdigestmd5.so.2 > -rwxr-xr-x 1 root root 42964 Dec 2 2004 libdigestmd5.so.2.0.19 > -rwxr-xr-x 1 root root 911 Dec 2 2004 libgssapiv2.la > -rwxr-xr-x 1 root root 22292 Dec 2 2004 libgssapiv2.so > -rwxr-xr-x 1 root root 22292 Dec 2 2004 libgssapiv2.so.2 > -rwxr-xr-x 1 root root 22292 Dec 2 2004 libgssapiv2.so.2.0.19 > -rwxr-xr-x 1 root root 851 Dec 2 2004 liblogin.la > -rwxr-xr-x 1 root root 13296 Dec 2 2004 liblogin.so > -rwxr-xr-x 1 root root 13296 Dec 2 2004 liblogin.so.2 > -rwxr-xr-x 1 root root 13296 Dec 2 2004 liblogin.so.2.0.19 > -rwxr-xr-x 1 root root 854 Dec 2 2004 libntlm.la > -rwxr-xr-x 1 root root 29104 Dec 2 2004 libntlm.so > -rwxr-xr-x 1 root root 29104 Dec 2 2004 libntlm.so.2 > -rwxr-xr-x 1 root root 29104 Dec 2 2004 libntlm.so.2.0.19 > -rwxr-xr-x 1 root root 851 Dec 2 2004 libplain.la > -rwxr-xr-x 1 root root 13360 Dec 2 2004 libplain.so > -rwxr-xr-x 1 root root 13360 Dec 2 2004 libplain.so.2 > -rwxr-xr-x 1 root root 13360 Dec 2 2004 libplain.so.2.0.19 > -rwxr-xr-x 1 root root 931 Dec 2 2004 libsasldb.la > -rwxr-xr-x 1 root root 784960 Dec 2 2004 libsasldb.so > -rwxr-xr-x 1 root root 784960 Dec 2 2004 libsasldb.so.2 > -rwxr-xr-x 1 root root 784960 Dec 2 2004 libsasldb.so.2.0.19 > -rwxr-xr-x 1 root root 875 Dec 2 2004 libsql.la > -rwxr-xr-x 1 root root 21348 Dec 2 2004 libsql.so > -rwxr-xr-x 1 root root 21348 Dec 2 2004 libsql.so.2 > -rwxr-xr-x 1 root root 21348 Dec 2 2004 libsql.so.2.0.19 >

2 1

[Dovecot] dovecot-metadata-8 released
by Dennis Schridde 20 Jun '11

20 Jun '11

Hello everyone! I just released dovecot-metadata-8, which is an implementation of RFC 5464 (IMAP METADATA), allowing to add comments/annotations/metadata to folders of an email account. The major feature is that it works with Akonadi, or more specifically the Kolab backend thereof, while being dovecot-2.0 compatible. The module consists of 3 plugins, two IMAP frontends and one backend: * "imap-annotatemore" is a partial implementation of draft-daboo-imap- annotatemore-08 (early predecessor to RFC 5464), based on work by Bernhard Herzog (Intevation GmbH). The sole intention is to support Kolab, not to strictly implement the draft. * "imap-metadata" is a complete implementation of RFC 5464. Kolab clients do not (yet) use these commands. * "metadata" is the common backend imap-metadata and metadata were entirely written from scratch, while imap- annotatemore is an adaption of the work by Bernhard Herzog to the new backend. You can download the code via Hg [1] or as exported tarball [2] from the Hg webinterface. Please note that the README is outdated, as are some other files. The build process is pretty much straightforward, just make sure you have the dovecot headers available on your system: ./autogen.sh ./configure --with-dovecot=/path/to/dovecot make make install Next you need to adjust your dovecot config. The following works for me: == dovecot.conf == dict { metadata = file:/var/lib/dovecot/shared-metadata } == 10-mail.conf == mail_plugins = ... metadata == 20-imap.conf == protocol imap { mail_plugins = $mail_plugins ... imap_metadata imap_annotatemore } == 90-plugin.conf == plugin { metadata_dict = proxy::metadata } To allow a Kolab client to find (e.g.) the addressbook folder, issue this IMAP command after login: SETMETADATA "path/to/folder" ("/shared/vendor/kolab/folder-type" "contact") If you find any bugs (crashes, incompatibilities with RFC 5464, etc), please write me a mail. Be advised that this code is still experimental and might crash your server! @Timo: Please have a look at the src/*-ext.[ch] files, they contain extensions to the dovecot libraries and might be useful for others, too. Kind regards, Dennis Schridde [1] http://hg.dovecot.org/dovecot-metadata-plugin [2] http://hg.dovecot.org/dovecot-metadata-plugin/archive/bdf2445e101f.tar.gz

2 1

[Dovecot] Gmail like virtual mailboxes
by Aleve Sicofante 19 Jun '11

19 Jun '11

I'm new to this list so let me introduce myself: I'm a computer literate user (I've done some C programming long ago and can run a Linux system and do some light admin), I've never installed a mail server before and I'm in the process of migrating my family and my small business from Gmail (Google Apps) to a virtual server mainly for privacy reasons. I'm in love with Gmail's label system and I just plain hate traditional folders. I use hierarchical labels (as if they were folders but with a message belonging to many at the same time) and that MUST be preserved in the migration. I've looked at Courier's IMAP keywords implementation and it looks good, but everyone on the internet is recommending Dovecot, so here I am. I've tried hard to find information about using unlimited hierarchical labels, virtual mailboxes or any other way of mimicing Gmail's functionality with Dovecot, but I'm lost. First of all: can it be done? If so, is there any introductory documentation? (I've only found very sparse information.) Is it available for any storage format (mbox, maildir, dbox)? Any help will be very appreciated. -- Aleve Sicofante

3 3

[Dovecot] Question about corrupted dbox file
by Maria Arrea 19 Jun '11

19 Jun '11

Hello We are using dovecot 2.0.13, without SIS, mdbox+zlib mailbozes. One of our users have this problem in the logs: /doveadm(amaliarubio): Error: mdbox rebuild: Failed to fix file /buzones//0b/1f/amaliarubio/storage/m.304 doveadm(amaliarubio): Error: Corrupted dbox file /buzones/0b/1f/amaliarubio/storage/m.304 (around offset=0): EOF while reading file header/ I have tried with doveadm force-resync without luck Regards Maria

1 0

[Dovecot] Vacation -- reply to another address than envelope from
by Vegard Svanberg 19 Jun '11

19 Jun '11

Vacation (Sieve) replies to the envelope address. However, I have a customer which receive e-mails from a service which sends e-mails on behalf of a user (submitted through a web form). So an e-mail would be like (envelope from and from-header is webformfromwhatever(a)foobar.com) From: webformfromwhatever(a)foobar.com To: mycustomer(a)hisdomain.com Reply-To: usersrealmailaddress(a)example.com I need the reply to go to the reply-to address. Can I handle this with Sieve? -- Vegard Svanberg <vegard(a)svanberg.no> [*Takapa@IRC (EFnet)]

2 1

[Dovecot] returned error 89
by Robert Schetterer 18 Jun '11

18 Jun '11

Hi Timo, i have very rare ( ultra rare....) failures like this with latest dovecot 2 log: Error: service(pop3-postlogin): child 16691 returned error 89 (Fatal failure) imap-postlogin: Error: script-login: Fatal: Internal error occurred. Refer to server log for more information. Jun 14 18:41:16 mail02 dovecot: log: Error: service(imap-postlogin): child 31645 returned error 89 (Fatal failure) any idea? the conf i allready posted with also rare lmtp error uid=error today first an only one seen Error: read(/var/run/dovecot/dict) failed: Timeout after 30 seconds lmtp(31698, ...@...): Error: Internal quota calculation error -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

1 2

[Dovecot] process already running
by Joy 18 Jun '11

18 Jun '11

Hi, I have running dovecot installation and i am quite happy with it but in one of my installation if system's power fail it doesn't remove master.pid which prevent system to start the service in next boot. I have to manually remove file and start the proess. We are running version 2.0.12. Thanks

1 0

[Dovecot] Default Global ACL
by Daniel L. Miller 17 Jun '11

17 Jun '11

Can I use the .DEFAULT files with global acls to access all mailboxes without explicitly sharing them first? Or must a share be created for every individual mailbox before they will appear in the shared namespace? -- Daniel

1 0

[Dovecot] ACL Groups
by Daniel L. Miller 17 Jun '11

17 Jun '11

From the wiki: ACL groups support works by returning a comma-separated acl_groups extra field <http://wiki2.dovecot.org/UserDatabase/ExtraFields> from userdb, which contains all the groups the user belongs to. User's UNIX groups have no effect on ACLs (you can "enable" them by using a special post-login script <http://wiki2.dovecot.org/PostLoginScripting>). I've read that over several times - I still don't understand that. Are "ACL Groups" defined and managed by Dovecot - and described somewhere else in the docs - or are they UNIX groups that previously had no affect on mail access but by being listed in the "acl_groups" field they now have relevance? -- Daniel

3 4

[Dovecot] pop3-login Error after dovecot 1.2.11 to dovecot 2.0.13
by Bradley Giesbrecht 17 Jun '11

17 Jun '11

I recently upgaded from dovecot 1.2.11 to 2.0.13. I used this command on my dovecont.conf after the upgrade and then moved the new file into place after removing some plugins. $ sudo doveconf -n -c dovecot-1.conf > dovecot-2.conf After 24+ hours with no issues I was getting pop3 login failures. ... /path/to/log/dovecot.log:master: Error: service(pop3): read(status) failed: Interrupted system call ... /path/to/log/dovecot.log:Jun 17 05:25:47 pop3-login: Error: master(pop3): Auth request timed out (received 0/12 bytes) /path/to/log/dovecot.log:Jun 17 05:25:47 pop3-login: Info: Internal login failure (pid=1796 id=1) (auth failed, 1 attempts): user=<rriveter(a)domainname.com>, method=APOP, rip=123.4.5.6, lip=123.7.8.9 /path/to/log/dovecot.log:Jun 17 05:25:47 pop3-login: Error: master(pop3): Auth request timed out (received 0/12 bytes) /path/to/log/dovecot.log:Jun 17 05:25:47 pop3-login: Info: Internal login failure (pid=1797 id=1) (auth failed, 1 attempts): user=<jdoe(a)domainname.com>, method=APOP, rip=123.4.5.6, lip=123.7.8.9 /path/to/log/dovecot.log:Jun 17 05:25:47 pop3-login: Error: master(pop3): Auth request timed out (received 0/12 bytes) /path/to/log/dovecot.log:Jun 17 05:25:47 pop3-login: Info: Internal login failure (pid=1798 id=1) (auth failed, 1 attempts): user=<gkhan(a)domainname.com>, method=APOP, rip=123.4.5.6, lip=123.7.8.9 /path/to/log/dovecot.log:Jun 17 05:25:47 pop3-login: Error: master(pop3): Auth request timed out (received 0/12 bytes) ... /path/to/log/dovecot.log:Jun 17 05:40:34 pop3-login: Error: net_connect_unix(pop3) failed: Operation timed out ... Bouncing dovecot has resolved the login issues for the present. Reading from the wiki I see my post-login scripts will need changing. http://wiki2.dovecot.org/Upgrading/2.0 Is there anything else obviously/dangerously wrong with the following doveconf output? I'm am still in the process of moving directives out of dovecot.conf into the new conf.d files. $ doveconf -n # 2.0.13: /path/to/etc/dovecot/dovecot.conf # OS: Darwin 9.8.0 Power Macintosh hfs auth_mechanisms = plain login cram-md5 ntlm apop default_internal_user = _dovecot default_login_user = _dovenull disable_plaintext_auth = no log_path = /path/to/log/dovecot.log mail_location = dbox:/path/to/mail/%d/%n/dbox mail_max_userip_connections = 30 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /path/to/etc/dovecot/dovecot_mysql.conf driver = sql } plugin { autocreate = Trash autocreate2 = Spam autosubscribe = Trash autosubscribe2 = Spam } protocols = imap pop3 service auth { unix_listener /path/to/var/spool/postfix/private/auth { group = _postfix mode = 0660 user = _postfix } unix_listener auth-master { mode = 0600 user = _vmail } unix_listener auth-userdb { group = _vmail user = _vmail } } service imap { executable = /path/to/dovecot/bin/log_imap_login.sh } service pop3 { executable = /path/to/dovecot/bin/log_pop3_login.sh } ssl_cert = </path/to/etc/ssl/certs/dovecot.pem ssl_key = </path/to/etc/ssl/private/dovecot.pem userdb { driver = prefetch } userdb { args = /path/to/etc/dovecot/dovecot_mysql.conf driver = sql } Thanks, Bradley Giesbrecht

1 0

[Dovecot] ACL enabled Public folder dovecot
by kumar shantanu 17 Jun '11

17 Jun '11

Hi All, I am trying to do ACL enabled Public folder on dovecot version 1.1.20, but the ACL thing is not working, the public folder is visible and accessible to everyone. My dovecot config for public folder is like ######## namespace public { separator = / prefix = Public/ location = maildir:/var/mail/public subscriptions = no } plugin { acl = vfile } ######### and I have my dovecot-acl file in /var/mail/public/.test which reads ** user=test(a)mydomain.com lrw ** but every user can see the public folders and subscribe to it, which I don't want :( Can someone please suggest. Thanks in Advance, Shantanu

2 3

[Dovecot] Converting CLIENT_MAIL_DATA_MAX_INMEMORY_SIZE to a configurable?
by Attila Nagy 17 Jun '11

17 Jun '11

Hi, Currently Dovecot's LMTPd writes incoming emails to mail_temp_dir if it's bigger than 128k. But I would like to spare those unnecessary operations (creating a file, deleting it, writing into it, reading from it, checking whether there is free space and if not, rejecting (temporarily) the message). Memory is cheap, disk IO is not. :) And BTW, on a lot of systems, /tmp is a memory file system already, so there is absolute no need for this. I only fired two greps so far before writing this mail, in the hope that I can spare writing, testing and sending a patch, which will be either rejected, or rewritten. :) So, am I right that the following constant would be needed to be converted into a configurable setting and the task is done? static int client_input_add(struct client *client, const unsigned char *data, size_t size) { if (client->state.mail_data->used + size <= CLIENT_MAIL_DATA_MAX_INMEMORY_SIZE && client->state.mail_data_output == NULL) { buffer_append(client->state.mail_data, data, size); return 0; } else { return client_input_add_file(client, data, size); } } It could be defaulted to 128k, but the user could set it "unlimited" (0 or -1, depending on the author's mood, 0 and/or -1 being unlimited, or 0 being 0, meaning don't even store a bit -doesn't really make sense to me). LMTP is mostly protected from the outside world, so I don't see too much DoS potential here (absolutely not more than in the tmpfs case). Thanks,

2 2

[Dovecot] I can't setup namespace per user (with settings keept in sql db)
by Marcin Mirosław 17 Jun '11

17 Jun '11

Hello! I'm trying to setup additional namespace. I'd like to have this setting per user and keep it in postgresql. Global namespace is defined in this way: namespace { inbox = yes location = prefix = separator = . } (mail_location is getting from db) I don't know how should looks like database field:( Now i have such configuration: user_query = select .... dovecot_location AS location, dovecot_namespace AS namespace FROM ... In db i have this: # select dovecot_location, dovecot_namespace from exim_users where dovecot_namespace is not null; dovecot_location | dovecot_namespace ---------------------------+------------------- location="mdbox:~/.mdbox" | prefix="testn" (1 row) but this isn't good configuration. I've got in log: debug: sql(marcin(a)mejor.pl,62.121.127.119): SELECT '/dane/domeny/mejor.pl/mail/marcin/' as home, dovecot_typ_skrzynki ||':'|| '/dane/domeny/mejor.pl/mail/marcin/' ||' .'|| dovecot_typ_skrzynki as mail_location, '*:bytes='||quota_mb||'M' as quota_rule , dovecot_location AS location, dovecot_namespace AS namespace FROM exim_users WHE RE login = lower('marcin') AND domena = lower('mejor.pl') Debug: master out: USER#0112138832897#011marcin@mejor.pl#011home=/dane/domeny/mejor.pl/mail/marcin/#011mail_location=maildir:/dane/domeny/mejor.pl/mail/marcin/.maildi r#011quota_rule=*:bytes=0M#011location=location="mdbox:~/.mdbox"#011namespace=prefix="testn" Login: user=<marcin(a)mejor.pl>, method=CRAM-MD5, rip=62.121.127.119, lip=193.238.12.139, mpid=17929, TLS Debug: Loading modules from directory: /usr/lib/dovecot Debug: Module loaded: /usr/lib/dovecot/lib10_quota_plugin.so Debug: Module loaded: /usr/lib/dovecot/lib11_imap_quota_plugin.so Debug: Module loaded: /usr/lib/dovecot/lib15_notify_plugin.so Debug: Module loaded: /usr/lib/dovecot/lib20_autocreate_plugin.so Debug: Module loaded: /usr/lib/dovecot/lib20_fts_plugin.so Debug: Module loaded: /usr/lib/dovecot/lib20_mail_log_plugin.so Debug: Module loaded: /usr/lib/dovecot/lib20_zlib_plugin.so Debug: Module loaded: /usr/lib/dovecot/lib21_fts_squat_plugin.so Debug: Module loaded: /usr/lib/dovecot/lib30_imap_zlib_plugin.so Debug: Added userdb setting: mail_location=maildir:/dane/domeny/mejor.pl/mail/marcin/.maildir Debug: Added userdb setting: plugin/quota_rule=*:bytes=0M Debug: Added userdb setting: plugin/location=location="mdbox:~/.mdbox" Debug: Added userdb setting: namespace=prefix="testn" Debug: Effective uid=8, gid=12, home=/dane/domeny/mejor.pl/mail/marcin/ Debug: Quota root: name=User quota backend=dict args=:proxy::quota Debug: Quota rule: root=User quota mailbox=* bytes=0 messages=0 Debug: dict quota: user=marcin(a)mejor.pl, uri=proxy::quota, noenforcing=0 Debug: Namespace : type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/dane/domeny/mejor.pl/mail/marcin/.maildir Debug: maildir++: root=/dane/domeny/mejor.pl/mail/marcin/.maildir, index=, control=, inbox=/dane/domeny/mejor.pl/mail/marcin/.maildir Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=no, list=yes, subscriptions=yes location=maildir:/dane/domeny/mejor.pl/mail/marcin/.maildir Debug: maildir++: root=/dane/domeny/mejor.pl/mail/marcin/.maildir, index=, control=, inbox= Error: user marcin(a)mejor.pl: Initialization failed: namespace configuration error: Duplicate namespace prefix: "" Error: Invalid user settings. Refer to server log for more information. I've got stuck, i don't have idea how configuration should looks:( Thanks for any help! dovceot-2.0.13

1 0

Re: [Dovecot] ZFS Filesystem Quota under Solaris 10 and Sparc
by Roger Fujii 17 Jun '11

17 Jun '11

*Jürgen Obermann wrote:* > Since we upgraded last year to Solaris 10 with zfs filesystems on our > Sparc server still using a similar setup with separate filesystems for > home directories and inboxes we have no working quota plugin anymore. > Currently we use dovecot 2.0.13. > > Are there any plans or whishes to get the filesystem quota code > working again under zfs and Solaris? > How are you setting up the zfs quotas? The original zfs implementation didn't have user quotas. You could only add quotas to individual file systems as a whole. They apparently added it into the source base in 2009: http://blogs.oracle.com/chrisg/entry/user_and_group_quotas_for but I'm not sure when/if it made it to production. My sol10u8 * (10/09) has it in the man page, but I know some things in the man page isn't in s10 (like sharesmb), so, as they say, ymmv. The current doc for user quotas are here: http://download.oracle.com/docs/cd/E19253-01/819-5461/gazud/index.html If you don't want to use the filesystem quotas, you have to change your rules/configuration to match what dovecot has. See doc/wiki/Quota.Configuration.txt. Hope this helps. -r

1 0

[Dovecot] quota_rule beeing ignored and set to system soft! quota
by Leon Meßner 16 Jun '11

16 Jun '11

Hi, originating from the same Problem Edgar Fuß described here [1] about "Zero-sized Maildir files and index corruption on over-quota" i setup quota = fs:user quotas with a quota_rule set to 1.5G to prevent getting those zero sized mail files. What happens now is that when the user is over system soft quota (1G) mails stop beeing delivered. Jun 16 19:05:45 mail dovecot: deliver(elont1): msgid=<20110616185545.05ab0f56@x201t>: save failed to INBOX: Quota exceeded (mailbox for user is full) This is bad as users get notified per mail by a script about beeing over quota (this mail is now beeing deferred). If i don't set a quota_rule i still get 0byte files (quota is ignored). If i set a higher than system quota quota_rule it still uses the system soft quota. I have a seconary mailserver which already uses dovecot 2.x but i can't test the feature there as it's running inside a jail and thus has no access to quota. I would like to keep this machine on 1.2.16 for now. dovecot -n output is below. thanks, Leon [1] http://www.dovecot.org/list/dovecot/2010-October/053554.html 19:20_root@mail:/usr/local/etc# dovecot -n # 1.2.16: /usr/local/etc/dovecot.conf # OS: FreeBSD 7.3-RELEASE-p2 amd64 log_path: /var/log/dovecot.log protocols: imaps pop3s managesieve listen: mail.physik-pool.tu-berlin.de ssl_cert_file: /etc/private/mail.physik.tu-berlin.de.pem ssl_key_file: /etc/private/physik.tu-berlin.de_privatekey.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_executable(managesieve): /usr/local/libexec/dovecot/managesieve-login login_processes_count: 6 login_max_processes_count: 512 verbose_proctitle: yes first_valid_uid: 200 mail_privileged_group: mail mail_location: maildir:~/maildir mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_executable(managesieve): /usr/local/libexec/dovecot/managesieve mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 mail_plugin_dir(managesieve): /usr/local/lib/dovecot/managesieve imap_client_workarounds(default): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): imap_client_workarounds(managesieve): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh pop3_client_workarounds(managesieve): namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: mail/ location: mbox:~/mail list: yes subscriptions: yes lda: postmaster_address: postmaster(a)physik.tu-berlin.de log_path: info_log_path: mail_plugins: sieve quota quota_full_tempfail: yes sendmail_path: /usr/sbin/sendmail auth default: mechanisms: gssapi plain login krb5_keytab: /etc/mail.krb5.keytab gssapi_hostname: mail.physik-pool.tu-berlin.de worker_max_count: 120 passdb: driver: pam args: session=yes failure_show_msg=yes max_requests=100 userdb: driver: passwd args: blocking=yes plugin: sieve: ~/.dovecot.sieve sieve_dir: ~/.sieve quota_rule: *:storage=15728640 quota: fs:user

1 0

[Dovecot] Global ACLs
by Daniel L. Miller 16 Jun '11

16 Jun '11

If I have: plugin { acl = vfile:/usr/local/etc/dovecot/global-acls:cache_secs=300 } And then a file /usr/local/etc/dovecot/global-acls/.DEFAULT with owner lrwstipekxa user=dmiller lrwstipekxa Does that give me unconditional access to all mailboxes? -- Daniel

1 0

[Dovecot] Removal of mailist duplicates?
by Peter Bell 16 Jun '11

16 Jun '11

I am using mpop to fetch mail from my service provider (who use dovecot). I use dovecot to hold all my mail on a local slackware server, with sieve filters, based on 'List-Id', directing mailist postings to their own folders. I use thunderbird to read my mail on an ubuntu desktop. When I receive a reply to a posting I make to a mailist (such as this one), replies I receive are usually sent to me with cc to the list. I would expect, then, to receive the message twice - once in my personal mailbox, and once to the mailist folder. However, this doesn't happen - I only see the posting in the mailist folder. Can anyone tell me at which stage in the process the other message is being supressed? -- ------------------------------------------------------------------- Peter Bell Mob: +63 (0) 9287 340 343 Tagum City, Philippines. Tel: +63 (0) 84 400 5085 email/msn: peter(a)bellfamily.org.uk Tel: +44 (0) 118 331 0000

4 6

[Dovecot] limiting number of login attempts from same ip
by Jürgen Obermann 16 Jun '11

16 Jun '11

Hello, is it possible to limit the number of pop3 (or imap) login attempts from one IP with dovecot to stop attackers? We recently had an attack from one IP-address lasting 50 minutes that tried 50000 pop3-logins with guessed users and passwords. I know about Fail2Ban but really would prefer an easy to configure solution inside of dovecot. Dovecot has this anvil daemon, can it be used for that purpose? We use dovcot version 2.0.12 under Solaris 10, the pop3-login part of the configuration looking like that: service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 110 ssl = no } inet_listener pop3s { address = port = 995 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 64 M } Thanks, Jürgen -- Hochschulrechenzentrum der | Mail: Juergen.Obermann(a)hrz.uni-giessen.de Justus-Liebig-Universitaet | WWW: http://www.uni-giessen.de/obermann/ Heinrich-Buff-Ring 44 | Tel: 0641-99-13054 (0641-99-13001) D-35392 Giessen, Germany | Fax: 0641-99-13009

10 14

[Dovecot] dovecot-managesieve
by Richard Gliebe 16 Jun '11

16 Jun '11

Hi all, I have to implement a Out of Office Tool on our dovecot IMAP Server. Recently I updated dovecot-1.0.7-7.el5 to dovecot-1.1.20-1_98.el5 on our CentOS release 5.6 (Final) box via "yum update" # cat /etc/yum.conf .... [atrpms] name=Fedora Core $releasever - $basearch - ATrpms baseurl=http://dl.atrpms.net/el$releasever-$basearch/atrpms/stable gpgkey=http://ATrpms.net/RPM-GPG-KEY.atrpms gpgcheck=1 # .... After it, I installed dovecot-managesieve-0.11.12-0_5.1.el5 via yum install. These are my sieve settings in /etc/dovecot.conf: ....... version_ignore=yes # Log file to use for error messages, instead of sending them to syslog. # /dev/stderr can be used to log into stderr. log_path = /var/log/dovecot.log # Protocols we want to be serving: imap imaps pop3 pop3s managesieve # If you only want to use dovecot-auth, you can set this to "none". #protocols = imap imaps pop3 pop3s protocols = imaps pop3s pop3 managesieve mail_debug=yes protocol managesieve { # Specify an alternative address:port the daemon must listen on # (default: *:2000) #listen = localhost:2000 managesieve_logout_format = bytes ( in=%i : out=%o ) # Duplicated from plugin section sieve=~/.dovecot.sieve sieve_storage=~/sieve } plugin { # Settings for the Sieve plugin sieve=~/.dovecot.sieve sieve_dir=~/sieve } ...... After restarting dovecot, I'm getting the following errors in dovecot.log: dovecot: Jun 10 08:50:14 Info: dovecot v1.1.20 starting up (core dumps disabled) dovecot: Jun 10 08:50:16 Error: login: Login request missing a file descriptor dovecot: Jun 10 08:50:16 Error: Temporary failure in creating login processes, slowing down for now dovecot: Jun 10 08:50:16 Warning: managesieve-login: managesieve-login: capability string is empty. dovecot: Jun 10 08:50:16 Error: login: Login request missing a file descriptor dovecot: Jun 10 08:50:16 Warning: managesieve-login: managesieve-login: capability string is empty. dovecot: Jun 10 08:50:16 Error: login: Login request missing a file descriptor dovecot: Jun 10 08:50:16 Warning: managesieve-login: managesieve-login: capability string is empty. dovecot: Jun 10 08:50:16 Info: Created login processes successfully, unstalling dovecot: Jun 10 08:50:17 Error: login: Login request missing a file descriptor dovecot: Jun 10 08:50:17 Error: Temporary failure in creating login processes, slowing down for now Don't know, whats going on ..... next problem. I can't login with our Thunderbird Clients to our IMAP/sieve Server (Port 2000) to edit Sieve Filters. Authentication is set to: use IMAP Username and password Port 2000 ist listening: # netstat -an | grep 2000 tcp 0 0 0.0.0.0:2000 0.0.0.0:* LISTEN tcp 0 0 192.168.1.6:2000 192.168.1.8:2882 ESTABLISHED tcp 0 0 :::2000 :::* LISTEN Out of Office: I found a plugin for our thunderbird clients: http://www.trustedbird.org/tb/Out_of_Office is this the right one? many many hints are welcome ;-) Richard

2 2

[Dovecot] URLAUTH-patch, BSD specific?
by Peter Mogensen 15 Jun '11

15 Jun '11

Hi, I notice that the Apple patched branch of Dovecot 2.0 with URLAUTH fails to compile on Linux. The file src/plugins/urlauth/urlauth-keys.c uses open(2) with O_EXLOCK, which to my knowledge is BSD specific. Is that a known problem? /Peter

2 1

[Dovecot] ZFS Filesystem Quota under Solaris 10 and Sparc
by Jürgen Obermann 15 Jun '11

15 Jun '11

Hallo. Filesystem quotas used to work well under Solaris 9 and ufs filesystems on the Sparc platform even with two rules for the folders in the users home directories /home/group/user and the separate filesystem /var/mail holding the inboxes: plugin { quota = fs:Home-Verzeichnis:noenforcing quota2 = fs:INBOX:noenforcing:mount=/var/mail } Since we upgraded last year to Solaris 10 with zfs filesystems on our Sparc server still using a similar setup with separate filesystems for home directories and inboxes we have no working quota plugin anymore. Currently we use dovecot 2.0.13. Are there any plans or whishes to get the filesystem quota code working again under zfs and Solaris? Best whishes, Jürgen -- Hochschulrechenzentrum der | Mail: Juergen.Obermann(a)hrz.uni-giessen.de Justus-Liebig-Universitaet | WWW: http://www.uni-giessen.de/obermann/ Heinrich-Buff-Ring 44 | Tel: 0641-99-13054 (0641-99-13001) D-35392 Giessen, Germany | Fax: 0641-99-13009

1 0

[Dovecot] Per-user "Seen" flags on public folder
by Torsten Harenberg 15 Jun '11

15 Jun '11

Dear all, sorry to bother the list again, I have a small configuration issue again with public (shared) folders. These folders should have per-user Seen flags, so I configured: namespace { type = public separator = . prefix = public. location = maildir:/var/mail/public:INDEX=%u/public subscriptions = no list = children } But this only seems to work with my account (presumably as I was the first one who touched the folder), all other users cannot change the "Seen" flags My home dir is set to /home/mail/harenber and there is a: mail# ls -l total 1162 -rwxrwxrwx 1 10001 wheel 4016 Jun 9 13:27 dovecot.index -rwxrwxrwx 1 10001 wheel 1125376 Jun 14 11:26 dovecot.index.cache -rwxrwxrwx 1 10001 wheel 2140 Jun 9 13:40 dovecot.index.log -rwxrwxrwx 1 10044 wheel 33792 Jun 9 13:28 dovecot.index.log.2 mail# pwd /home/mail/harenber/harenber/public/.fb8 (don't know why my username appears twice). which looks the same on some other account: mail# ls -l total 1380 -rw-rw-rw- 1 10002 wheel 4016 Jun 9 19:40 dovecot.index -rw-rw-rw- 1 10002 wheel 1364992 Jun 10 10:54 dovecot.index.cache -rwxrwxrwx 1 10114 wheel 16072 Jun 10 10:54 dovecot.index.log mail# pwd /home/mail/sandhoff/sandhoff/public/.fb8 The public folder looks like this: mail# pwd /var/mail/public/.fb8 mail# ls -l total 52 drwxrwxrwx 2 root wheel 512 Jun 9 13:05 cur -rwxrwxrwx 1 root wheel 54 Jun 9 13:11 dovecot-acl -rwxrwxrwx 1 root wheel 97 Jun 9 13:05 dovecot-keywords -rw-rw-rw- 1 10001 wheel 18513 Jun 9 13:27 dovecot-uidlist drwxrwxrwx 2 root wheel 23552 Jun 9 13:05 new -rwxrwxrwx 1 root wheel 0 Jun 9 13:05 subscriptions drwxrwxrwx 2 root wheel 512 Jun 9 13:05 tmp Does anybody see what I did (again) wrong? (doveconf -n at the end, as allways) Thanks Torsten -- <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> <> <> <> Dr. Torsten Harenberg harenberg(a)physik.uni-wuppertal.de <> <> Bergische Universitaet <> <> FB C - Physik Tel.: +49 (0)202 439-3521 <> <> Gaussstr. 20 Fax : +49 (0)202 439-2811 <> <> 42097 Wuppertal <> <> <> <><><><><><><>< Of course it runs NetBSD http://www.netbsd.org ><> mail# doveconf -n # 2.0.13: /usr/pkg/etc/dovecot/dovecot.conf # OS: NetBSD 5.1 amd64 ffs auth_debug = yes auth_verbose = yes base_dir = /var/run/dovecot/ mail_debug = yes mail_gid = 6 mail_location = maildir:/var/mail/user/%u/Maildir mail_plugins = acl managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = prefix = separator = . type = private } namespace { list = children location = maildir:/var/mail/public:INDEX=%u/public prefix = public. separator = . subscriptions = no type = public } passdb { args = /usr/pkg/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = dovecot user = dovecot } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl_ca = </etc/certificates/chain.pem ssl_cert = </etc/certificates/mail.physik.uni-wuppertal.de.crt ssl_key = </etc/certificates/mail.physik.uni-wuppertal.de.key userdb { args = /usr/pkg/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = sieve } protocol lda { mail_plugins = sieve } protocol imap { mail_plugins = acl imap_acl } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole }

1 1

[Dovecot] doveadm who: Please Headline to STDout, not to STDERR
by Denny Schierz 15 Jun '11

15 Jun '11

hi, I've created a small script to get a sum from the users and sessions (table username and table "#"), but it is annoying that the headline "username # proto (pids) (ips)" goes to STDERR, but the normal output to STDOUT. It would be nice, if both goes to the same STD :-) cu denny

2 1

[Dovecot] Timeout during APPEND
by martin f krafft 14 Jun '11

14 Jun '11

Dear list, I am running dovecot 1.2.15 on a Debian server. One user reports continuous problems synchronising her mailbox via IMAP (offlineimap, via SSH tunnel or SSL socket). It seems that she has a large, locally-created message, but the uplink bandwidth seems to be not enough to push it before dovecot times out the APPEND command. The error/exception happens inside offlineimap's Python imaplib2.py file: APPEND => no response after 30.0 secs I do not know the IMAP protocol all that well, but it seems to me like this is broken somewhere. Could you please help me figure out the problem? -- martin | http://madduck.net/ | http://two.sentenc.es/ "man sagt nicht 'nichts!', man sagt dafür 'jenseits' oder 'gott'." - friedrich nietzsche spamtraps: madduck.bogus(a)madduck.net

2 7

[Dovecot] SSL comunication problems with client side.
by Denis Iskandarov 14 Jun '11

14 Jun '11

I can get messages without SSL with no problems. but i need to setup server accept only SSL secured connections. I think my configuration is very proper, but cant find "obvious" problem. Postfix 2.3.3 + dovecot 2.0.13-1_129.el5 + PostfixAdmin 2.3.3 I made own CA. configured postfix and dovecot with same cert key ca. Same public cert i gave for client just converted it to PKCS#12. I cant undestand valid and invalid certs strings in long, they look same. You can check logs and config bellow. Also some other questions regarding SSL: 1. How to make client MUA (thunderbird) automatically retrieve certificate ? My thunderbird cant do it by itself so i'm importing mail cert by myself. 2. If i want to setup Roundcube/Squirrelmail webmail clients with TLS support (https) i have to provide them with same certificates as dovecot and postfix have. Or in this case i can use whatever certificate dedicated for with "virtualhost"? dovecot-deliver.log: Jun 13 13:26:42 imap-login: Info: Invalid certificate: unable to get certificate CRL: /C=GE/ST=Tbilisi/O=Caucasus Digital Network/OU=Mail Server/CN=mx.office.dev/emailAddress=hostmaster(a)office.dev Jun 13 13:26:42 imap-login: Info: Invalid certificate: unable to get certificate CRL: /C=GE/ST=Tbilisi/L=Tbilisi/O=Caucasus Digital Network/OU=Caucasus Digital Network/CN=Caucasus Digital Network/emailAddress=hostmaster(a)office.dev Jun 13 13:26:42 imap-login: Info: Valid certificate: /C=GE/ST=Tbilisi/L=Tbilisi/O=Caucasus Digital Network/OU=Caucasus Digital Network/CN=Caucasus Digital Network/emailAddress=hostmaster(a)office.dev Jun 13 13:26:42 imap-login: Info: Valid certificate: /C=GE/ST=Tbilisi/O=Caucasus Digital Network/OU=Mail Server/CN=mx.office.dev/emailAddress=hostmaster(a)office.dev Jun 13 13:26:42 auth: Info: PLAIN(?,192.168.0.11): Client didn't present valid SSL certificate Jun 13 13:26:42 auth: Info: LOGIN(?,192.168.0.11): Client didn't present valid SSL certificate Jun 13 13:26:42 auth: Info: PLAIN(?,192.168.0.11): Client didn't present valid SSL certificate Jun 13 13:26:42 imap-login: Info: Disconnected (client sent an invalid cert): method=PLAIN, rip=192.168.0.11, lip=192.168.0.31, TLS maillog. Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x10, ret=1: before/accept initialization [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: before/accept initialization [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read client hello A [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write server hello A [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write certificate A [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write certificate request A [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 flush data [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read client certificate A [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read client key exchange A [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read certificate verify A [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read finished A [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write change cipher spec A [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write finished A [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 flush data [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x20, ret=1: SSL negotiation finished successfully [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL alert: where=0x4004, ret=256: warning close notify [192.168.0.11] Jun 13 13:26:42 cent56dev dovecot: imap-login: Warning: SSL alert: where=0x4008, ret=256: warning close notify [192.168.0.11] # doveconf -n # 2.0.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-238.9.1.el5 i686 CentOS release 5.6 (Final) ext3 auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-userdb auth_ssl_require_client_cert = yes auth_verbose = yes base_dir = /var/run/dovecot/ debug_log_path = /var/log/dovecot-deliver.log dict { expire = sqlite:/etc/dovecot/dovecot-dict-sql.conf.ext quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } first_valid_gid = 12 first_valid_uid = 1001 hostname = mx.office.dev info_log_path = /var/log/dovecot-deliver.log last_valid_gid = 12 last_valid_uid = 1001 listen = * mail_debug = yes mail_gid = 12 mail_location = maildir:/home/vmail/%d/%u mail_plugins = quota mail_privileged_group = mail mail_uid = 1001 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl passdb { args = /etc/dovecot/conf.d/sql/sql.conf driver = sql } plugin { autocreate = Trash autocreate2 = Spam autosubscribe = Trash autosubscribe2 = Spam } postmaster_address = postmaster(a)office.dev service auth { unix_listener /var/spool/postfix/private/auth { group = mail mode = 0660 user = postfix } unix_listener auth-userdb { group = mail mode = 0660 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } ssl_ca = </etc/pki/CA/cacert.pem ssl_cert = </etc/pki/CA/mail/mx.office.dev.crt ssl_key = </etc/pki/CA/mail/mx.office.dev.key ssl_verify_client_cert = yes userdb { args = /etc/dovecot/conf.d/sql/sql.conf driver = sql } verbose_ssl = yes protocol lda { mail_plugins = quota autocreate } protocol imap { imap_client_workarounds = delay-newmail mail_plugins = quota imap_quota autocreate } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh }

2 4

[Dovecot] Sieve question
by Dhaval Patel 14 Jun '11

14 Jun '11

I have successfully setup Postfix -> Dovecot with virtual users and spam filtering with spamassassin. Now the last remaining part is for the user defined rules. Let me describe my environment and what I am trying to achieve. I have Postfix setup to call spamc and deliver to Dovecot according to the master.cf line below. -------------------------------------------------------------- dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/bin/spamc -u vmail -e /usr/lib/dovecot/deliver -d ${recipient} -------------------------------------------------------------- The emails get checked by Spamassassin and are delivered to the users's mailbox (/home/vmail/username). I use an actual username (dhav) and not email address (dhaval(a)example.com) Things are working fine with that. >From reading http://wiki.dovecot.org/LDA/Sieve I see that Sieve can do global and user specified filtering. So I am planning to put the following rule into the global script so spammy emails go to the user's INBOX.spam folder. -------------------------------------------------------------- require "fileinto"; if header :contains "X-Spam-Flag" "YES" { fileinto "spam"; } -------------------------------------------------------------- My first question is, where is this global script? Do I configure the "sieve_global_dir = /etc/dovecot/sieve/"? What about he filename? Most users will not need any additional rules. There are some users that do and I am having a difficult time figuring out how it would be setup. My second question is the following. Is there a way in the global script to check if there is a file called /etc/dovecot/sieve/username or /home/vmail/username/personal_sieve_script and include it? I was using maildrop before this and procmail before that so I apologies for sounding stupid if this is not how Sieve scripts work. I am by no means tied the methods I describe above. If anyone knows of a better way to achieve what I am trying to do, I would appreciate if you let me know of it. Thanks, Dhaval

2 1

[Dovecot] Version differences, trash, upgrade
by José Antonio Suarez Pinzón 14 Jun '11

14 Jun '11

Hello everybody, I have some basic questions: 1. how can I configure the auto-empty trash plugin for all users after 3 or 4 days (This is very important, regular users do not clean their trash, or are using blackberry and do not have an option to do it or simply, do not care about it) 2. difference between version 1.2.17 and latest 2 version of Dovecot, have the version 2 an automatic option for the trash thing? 3. me as a basic skilled user, how can I made the upgrade to version 2 without major risks, I mean I do not want to leave everybody on my server without mail. I am a novice in all of this stuff, so please excuse me if I am making dumb questions. Thanks in advance for your help. Information about my installation. # 1.2.17: /etc/dovecot.conf # OS: Linux 2.6.18-164.11.1.el5 x86_64 CentOS release 5.6 (Final) protocols: imap imaps pop3 pop3s plugin: quota: maildir quota_rule: Trash:ignore Kind Regards, José Antonio Suárez Pinzón Auge CS (+57 1) 812 7629 (+57) 300 618 0017

1 0

[Dovecot] Admin access to shared mailboxes
by Daniel Miller 13 Jun '11

13 Jun '11

Having enabled shared mailboxes - is there a way to provide access to all users' mailboxes by a given user? Instead of having to manually provide ACL rights to every mailbox of every user? -- Daniel

4 3

[Dovecot] Webmail project : to cache or not to cache emails
by Vincent Richomme 13 Jun '11

13 Jun '11

Hi, I plan to develop a new web service where one of its module is a webmail and I am thinking about some implementation details. From a interface point of view I wanted to adopt the same logic a outlook(desktop) or yahoo webmail and not split emails into pages. I mean I just want a single datatable view where user can scroll to see his old messages and data are updated only when user release the vertical scrollbar. When I look at current webmail (roundcube for instance) I can see that a cache is used to stored emails headers and I was wondering if it was really necessary ? Once a user has passed the login process I would like to retrieve only the emails that will be displayed (actually a bit more, I am thinking of 150) but I am wondering if it's a good idea to not use a cache for headers. For instance if I have thousands of users on the same machine, will it support it ? Will it be fast enough ? Of course I will try by myself the different options but would be curious to have some opinions. Thanks

3 2

[Dovecot] Explain about (mail_get_first_header(mail, "From", &header)
by Alex Baule 13 Jun '11

13 Jun '11

Hi Timo... Inside my plugin, i use the (mail_get_first_header(mail, "From", &header) function, to get the email From to put in some Blacklist. Looking in the header under this mail, we have 2 "From" fields. Using the function above, i get the Second "From", but my MTA (exim) look in to The First From, in the First Line, in that way, my blacklist don't work, because the sender to be blocked is different from the From looked by dovecot. There is a way to get the "From" from First line ? ############################## HEADER ######################################################## >From dma_3783(a)envios.socomdescontos.com.br Tue Jun 07 15:43:04 2011 Return-path: <dma_3783(a)envios.socomdescontos.com.br> Envelope-to: sugestao(a)brc.com.br Delivery-date: Tue, 07 Jun 2011 15:43:04 -0300 Received: from [187.61.43.119] (helo=vt-0007-119.virtualtarget.com.br) by mail.brc.com.br with esmtp (Exim 4.76) (envelope-from <dma_3783(a)envios.socomdescontos.com.br>) id 1QU1Ex-0006II-5o for sugestao(a)brc.com.br; Tue, 07 Jun 2011 15:43:01 -0300 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=k1; d=dkim.vttrack.com.br; h=From:To:Subject:MIME-Version:Content-Type:Reply-To:List-Unsubscribe:Message-ID:Date; bh=Q5G3TQPrYgogLS7aDg1DLYJpLKI=; b=XC+MHH79L6VHTI2OayuFHZGeSRAvNstNz8sHEp+xE5i71GznnYfCVsw7fuq2dIST6bTYY7tto/Rd aIZjc2YfEyqgUi0KKKesnMLSI61Ij/FlmE5ftRgIy9Ra59O9R03S62wAt6WPjkx1f4xCZ9ZAIaox GU957biBsg3B6ryU5Ks= Received: by vt-0007-119.virtualtarget.com.br id htpoj60sh70i for <sugestao(a)brc.com.br>; Tue, 7 Jun 2011 15:42:59 -0300 (envelope-from <dma_3783(a)envios.socomdescontos.com.br>) From: "CompraFacil.com.br" <mkt(a)socomdescontos.com.br> To: "sugestao" <sugestao(a)brc.com.br> Subject: SUPER OFERTA: TV LCD 32” Full HD apenas 10x 129,99 reais com FRETE ZERO. Aproveite. MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="b928815d46126f887c344b7d725aceb1" Reply-To: "CompraFacil.com.br" <res(a)socomdescontos.com.br> List-Unsubscribe: <http://relacionamento.socomdescontos.com.br/index.dma/DmaOptOut?3783,3351,2…> X-DMA: 8448122 X-UID: 8448122-74473 X-CID: 3783 X-TYP: MAIL Message-ID: <0.0.1E.8DF.1CC2542B91E3284.8E34(a)vt-0007-119.virtualtarget.com.br> Date: Tue, 7 Jun 2011 15:42:59 -0300 ############################## HEADER ########################################################

2 2

[Dovecot] Dovecot + qmail-ldap
by Aydın Demirel 13 Jun '11

13 Jun '11

Hi; I installed latest dovecot version (2.0.13) and qmail pathed with qmail-ldap on our systems. We want to use auth_dovecot binary authentication for dovecot. My dovecot config is following: auth_debug = yes auth_debug_passwords = yes auth_verbose = yes base_dir = /var/run/dovecot disable_plaintext_auth = no first_valid_gid = 100 first_valid_uid = 100 last_valid_gid = 65000 last_valid_uid = 65000 listen = * mail_debug = yes mail_location = maildir:~/Maildir mmap_disable = yes protocols = imap pop3 service auth { executable = /opt/surmail/smtp/bin/auth_dovecot ./Maildir unix_listener auth-userdb { group = qmail user = root } } service imap-login { inet_listener imap { port = 143 } } service pop3-login { inet_listener pop3 { port = 110 } } ssl = no verbose_proctitle = yes But, unfortunately I can not connect port 110 via telnet and i'm getting following error: Jun 13 17:11:43 sms dovecot: master: Error: service(auth): child 31580 returned error 111 Jun 13 17:11:43 sms dovecot: master: Error: service(auth): command startup failed, throttling What can be the problem? Regards.. -------------------------------- *Aydin Demirel Endersys Ltd. Sistem Destek Muhendisi / System Support Engineer * Phone : +90 216-4709423 Fax : +90 216-4709508 | Web : http://www.endersys.com.tr <http://www.endersys.com.tr/> Blog : http://blog.endersys.com <http://blog.endersys.com/> Twitter : http://www.twitter.com/endersys LPI : The #1 Linux Certification for IT Professionals LPI (Linux Professional Institute) Turkey http://www.lpi-turkey.com <http://www.lpi-turkey.com/> Endersys is the first Advanced Business partner of Red Hat in Turkey ! http://www.europe.redhat.com/partners/endersys/

1 0

[Dovecot] Dovecot 2.0+LMTP: Legal MAIL FROM rejected?
by Bernhard Schmidt 13 Jun '11

13 Jun '11

Hi, I run Dovecot 2.0.13 fed by Postfix over LMTP. Today it rejected one mail Postfix and Amavis accepted, generating a bounce. It was just a spammail, but I think the sender address is legal according to RFC5321 and should be accepted. I don't like generating bounces, email should be either rejected by postfix/pre-queue-amavis or delivered. Jun 6 12:32:47 mail postfix/qmgr[840]: 991FC240DB: from=<admin <admin(a)kl38000.com>, size=8427, nrcpt=1 (queue active) Jun 6 12:32:47 mail amavis[27046]: (27046-06) FWD via SMTP: <"admin <admin"@kl38000.com> -> <user(a)domain.com>,BODY=7BIT 250 2.0.0 Ok, id=27046-06, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 991FC240DB Jun 6 12:32:47 mail postfix/lmtp[4710]: 991FC240DB: to=<user(a)vmail.domain.com>, orig_to=<user(a)domain.com>, relay=pop3.domain.com[::1]:24, delay=0.24, delays=0.09/0.11/0.03/0.01, dsn=5.5.4, status=bounced (host pop3.domain.com[::1] said: 501 5.5.4 Invalid parameters (in reply to MAIL FROM command)) It looks like dovecot/lmtp does not accept an address with quoted localpart that contains a space mail from:<"admin admin"@kl38000.com> 501 5.5.4 Invalid parameters mail from:<"adminadmin"@kl38000.com> 250 2.1.0 OK mail from:<"admin<admin"@kl38000.com> 250 2.1.0 OK Bernhard

2 1

Re: [Dovecot] Using Dovecot new version 2.0.13 facing issues.
by गौरव जोशी 13 Jun '11

13 Jun '11

> Hi, > > I have configured POP-IMAP server with dovecot 2.0.13 with mysql support. > When I am running load test on the same I face issue on IMAP connections. I > get "dovecot: imap-login: Error: fd_send(imap, 15) failed: Interrupted > system call" followed by "dovecot: imap-login: Internal login failure" in > log files. See if these patches help: http://hg.dovecot.org/dovecot-2.0/rev/86e4023d08e4 http://hg.dovecot.org/dovecot-2.0/rev/6fdee880c5dc Hi Timo, Thanks for the response. The first patch is not getting compiled, where the other one got complied cleanly. Please help on this. Have a nice time, Gourav Joshi Have a look at www.linuxquestions.in

2 1

[Dovecot] Regarding Digest-MD5 auth
by kenja heramba 13 Jun '11

13 Jun '11

Hi, I am writing a Pop3Client. I use dovecot server as POP3 server in linux and hMailServer in windows. I was just testing digest-md5 auth with dovecot server. I had an observation. After server side verification, server sends a verification code to client. If this fails, how can client send the negative response or does it not exist? When I see packet capture, dovecot server sends +OK Logged in for anything client sends. I may be wrong. Please let me know your thoughts Regards, Heramba

2 1

[Dovecot] sqlite quota dict
by Nikita Koshikov 13 Jun '11

13 Jun '11

Hello Timo, and list followers, Sqlite supports good feature like mysql 'ON DUPLICATE KEY UPDATE' - it calls REPLACE/INSERT OR REPLACE This clause can be added to INSERT query, like: INSERT OR REPLACE INTO table VALUES() REPLACE INTO table VALUES() // alias to previous one Also this can be done during CREATE TABLE syntax, like so: CREATE TABLE quota ( username text not null, bytes integer not null default 0, messages integer not null default 0, primary key (username) ON CONFLICT REPLACE ); So the examples will work: INSERT INTO quota (bytes,username) VALUES ('112497180','foo(a)spam.dom'); INSERT INTO quota (bytes,username) VALUES ('112497181','foo(a)spam.dom'); SELECT * FROM quota; foo(a)spam.dom|112497181|0 But 1 thing to note - if we updating not all fields and column has NOT NULL DEFAULT value, then DEFAULT value will alter current one: INSERT INTO quota (bytes,username) VALUES ('112497180','foo(a)spam.dom'); INSERT INTO quota (messages,username) VALUES ('1743','foo(a)spam.dom'); SELECT * FROM quota; foo(a)spam.dom|0|1743 This can be easily bypassed if INSERT will be: INSERT INTO quota (bytes,messages,username) VALUES ('112497180','1743','foo(a)spam.dom'); So if dovecot will INSERT values to sql dict in this manner, sqlite can be used for storing quota data.

2 1

[Dovecot] virtual users with postfix+dovecot plugin usage question
by Denis Iskandarov 13 Jun '11

13 Jun '11

I'm interested in if i should enable plugins only in LDA as i understood that with postfix dovecot works only like LDA. For example i wanna use autocreate plugin for imap user i have enabled in both IMAP and LDA sections. Is it right or i had to configure it only in LDA section ? Than how quota and imap_quota work in imap section ? For what is it there if lda controls user maildirs ? Dovecot 2.0.13 protocol lda { mail_plugins = quota autocreate } protocol imap { imap_client_workarounds = delay-newmail mail_plugins = quota imap_quota autocreate } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh }

1 0

[Dovecot] Question about Dovecot-ACLs
by Jan Phillip Greimann 13 Jun '11

13 Jun '11

Hi there, i try to create an php-script to control acl's for public folders without file-manipulation. For this i use imap_setacl() like this example: imap_setacl($mbox,"INBOX/test", "email(a)domain.tld", "lrwstipekxa"); The acl-file looks so: ~:> cat dovecot-acl user=email(a)domain.tld akxeilprwts But i have a problem with the follow function: imap_setacl($mbox,"INBOX/test", "email(a)domain.tld", ""); This command only delete the rights from the email, not the whole entry in my dovecot-acl file. Now my acl-file looks like this: ~:> cat dovecot-acl user=email(a)domain.tld Did this affect dovecot by any way? Thanks, Jan

2 1

[Dovecot] dovecot auth server problem PAM handshake imap-login
by emc 13 Jun '11

13 Jun '11

Hi, i have a big problem with dovecot... PAM auth problem i guess, but don't know how to sort it out... Down the log and the dovecot.conf. Please soemone can tell me what's broken there? Thanks a lot ************************* HERE log ************************* Jun 9 14:49:46 vps dovecot: pop3-login: Can't connect to auth server at default: Resource temporarily unavailable Jun 9 14:49:46 vps dovecot: imap-login: Timeout waiting for handshake from auth server. my pid=14681, input bytes=0 Jun 9 14:49:46 vps dovecot: imap-login: Can't connect to auth server at default: Resource temporarily unavailable Jun 9 14:49:46 vps dovecot: imap-login: Timeout waiting for handshake from auth server. my pid=14681, input bytes=0 Jun 9 14:49:46 vps dovecot: imap-login: Timeout waiting for handshake from auth server. my pid=14682, input bytes=0 ************************* HERE my doveconf -a ************************* # 1.0.15: /etc/dovecot/dovecot.conf base_dir: /var/run/dovecot log_path: info_log_path: log_timestamp: %Y-%m-%d %H:%M:%S syslog_facility: mail protocols: imap pop3 imaps pop3s listen: ssl_listen: ssl_disable: no ssl_ca_file: ssl_cert_file: /etc/ssl/certs/dovecot.pem ssl_key_file: /etc/ssl/private/dovecot.pem ssl_key_password: ssl_parameters_regenerate: 168 ssl_cipher_list: ssl_verify_client_cert: no disable_plaintext_auth: no verbose_ssl: no shutdown_clients: yes nfs_check: yes version_ignore: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_user: dovecot login_greeting: Dovecot ready. login_log_format_elements: user=<%u> method=%m rip=%r lip=%l %c login_log_format: %$: %s login_process_per_connection: yes login_chroot: yes login_greeting_capability: no login_process_size: 64 login_processes_count: 3 login_max_processes_count: 128 login_max_connections: 256 valid_chroot_dirs: mail_chroot: max_mail_processes: 1024 verbose_proctitle: no first_valid_uid: 500 last_valid_uid: 0 first_valid_gid: 1 last_valid_gid: 0 mail_extra_groups: mail_access_groups: mail_privileged_group: man default_mail_env: mail_location: mbox:~/mail/:INBOX=/var/mail/%u mail_cache_fields: flags mail_never_cache_fields: imap.envelope mail_cache_min_mail_count: 0 mailbox_idle_check_interval: 30 mail_debug: yes mail_full_filesystem_access: no mail_max_keyword_length: 50 mail_save_crlf: no mail_read_mmaped: no mmap_disable: no mmap_no_write: no dotlock_use_excl: no fsync_disable: no lock_method: fcntl maildir_stat_dirs: no maildir_copy_with_hardlinks: no maildir_copy_preserve_filename: no mbox_read_locks: fcntl mbox_write_locks: fcntl mbox_lock_timeout: 300 mbox_dotlock_change_timeout: 120 mbox_min_index_size: 0 mbox_dirty_syncs: yes mbox_very_dirty_syncs: no mbox_lazy_writes: yes dbox_rotate_size: 2048 dbox_rotate_min_size: 16 dbox_rotate_days: 1 umask: 63 mail_drop_priv_before_exec: no mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_process_size: 256 mail_plugins: mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_log_prefix: %Us(%u): mail_log_max_lines_per_sec: 10 imap_max_line_length: 65536 imap_capability: imap_client_workarounds: outlook-idle pop3_no_flag_updates: no pop3_enable_last: no pop3_reuse_xuidl: no pop3_lock_session: no pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv pop3_client_workarounds: pop3_logout_format: top=%t/%p, retr=%r/%b, del=%d/%m, size=%s managesieve_max_line_length: 65536 managesieve_implementation_string: dovecot sieve_storage: sieve: auth default: mechanisms: plain login realms: default_realm: cache_size: 0 cache_ttl: 3600 executable: /usr/lib/dovecot/dovecot-auth user: root chroot: username_chars: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ username_translation: username_format: master_user_separator: anonymous_username: anonymous krb5_keytab: gssapi_hostname: verbose: no debug: yes debug_passwords: no ssl_require_client_cert: no ssl_username_from_cert: no count: 1 worker_max_count: 30 process_size: 256 passdb: driver: pam args: session=yes dovecot deny: no pass: no master: no userdb: driver: passwd args: --------------------------

3 4

[Dovecot] auth_cache question
by Robert Schetterer 13 Jun '11

13 Jun '11

Hi , just to make clear short question does auth_cache... help with downing sql lookups http://wiki2.dovecot.org/Authentication/Caching isnt clear to me for sql to me if yes are there real world recommanded settings lets say for a 5000 users server and where password changes should be noticed asap -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

2 1

[Dovecot] Dovecot 1.2 + Sieve-0.1.19 not working please help
by Denis Iskandarov 13 Jun '11

13 Jun '11

Hello i have installed dovecot from rpm found on rpm.pbone.net 1.2.17-0_115.el5 Everuthing works as charm Postfix + Dovecot + TLS + MySQL/postfixadmin For Reference: Centos 5.6 postfix 2.3.3-2.2 dovecot 1.2.17-0_115.el5 spamassassin 3.2.5-1.el5 postfixadmin 2.3.3 amavisd-new 2.6.4-4.el5.rf Now i'm trying to install Sieve for Dovecot 1.2 to make it redirect spam in proper folders but getting next error: ./configure --with-dovecot=/usr/lib/dovecot/ #OMITED OUTPUT# dovecot-config not found from /usr/lib/dovecot, use --with-dovecot=PATH to give path to compiled Dovecot sources or to a directory with the installed dovecot-config file. configure: error: dovecot-config not found /usr/lib/dovecot/ - is dir where all plugins and other things are stored. /etc is dir where dovecot.conf is located /etc/dovecot is dir where i put dovecot sql config Please help. I have no idea how to fix this. Especially when everything seems to be working as charm. My thread on LQ.org http://www.linuxquestions.org/questions/showthread.php?p=4381803&posted=1#p… dovecot -n # 1.2.17: /etc/dovecot.conf # OS: Linux 2.6.18-238.9.1.el5 i686 CentOS release 5.6 (Final) ext3 base_dir: /var/run/dovecot/ listen(default): *:143 listen(imap): *:143 listen(pop3): *:110 ssl_listen(default): *:993 ssl_listen(imap): *:993 ssl_listen(pop3): *:995 ssl_ca_file: /etc/pki/tls/cacert.pem ssl_cert_file: /etc/pki/tls/dev.cdn/cent56.dev.cdn.crt ssl_key_file: /etc/pki/tls/dev.cdn/cent56.dev.cdn.key ssl_cipher_list: ALL:!LOW:!SSLv2 login_dir: /var/run/dovecot//login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login first_valid_uid: 1001 last_valid_uid: 1001 first_valid_gid: 12 last_valid_gid: 12 mail_location: maildir:/var/vmail/%d/%u mail_debug: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh lda: postmaster_address: postmaster(a)dev.cdn mail_plugins: quota autocreate mail_plugin_dir: /usr/lib/dovecot/lda log_path: /var/log/dovecot/dovecot-deliver.log info_log_path: /var/log/dovecot/dovecot-deliver.log auth default: mechanisms: plain login user: nobody passdb: driver: pam passdb: driver: sql args: /etc/dovecot/sql.conf userdb: driver: passwd userdb: driver: sql args: /etc/dovecot/sql.conf userdb: driver: prefetch socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: mail master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: mail

2 2

[Dovecot] Dovecot sieve redirect: failed to redirect message to user@domain.com
by Thiago Henrique 13 Jun '11

13 Jun '11

Hello, I'm running Dovecot 2.0.13 on my Ubuntu10.04. It's working very well but I faced a problem with Redirect and Vacation using Sieve. :-( In fact, after well configuring the system I dont't receive the redirect message, and in the log I found: ######################################################################################## Jun 9 18:49:37 box7 dovecot: lmtp(10734, user(a)server.com) Fatal: execv(/usr/sbin/sendmail) failed: Permission denied Jun 9 18:49:37 box7 dovecot: lmtp(10734, user(a)server.com) Error: Sendmail process terminated abnormally, exit status 84 Jun 9 18:49:37 box7 dovecot: lmtp(10734, user(a)server.com) Error: At35JIgC8U3uKQAAndgVeA: sieve: msgid=<20110609184850.0FAB8200A41C(a)domain.com>: failed to redirect message to <user-destination(a)server.com> (refer to server log for more information) ######################################################################################## In sieve.log I see: ######################################################################################## error: msgid=<2011060919.0200A375(a)domain.com>: failed to redirect message to <user(a)domain.com> (refer to server log for more information). ######################################################################################## Manually sendmail command works normally. Cron sends email normally. Any idea about the reason this happen and how to solve? Thanks in advance, Thiago Henrique

3 2

[Dovecot] Loading Message Delays
by Ken Mandelberg 13 Jun '11

13 Jun '11

I sometimes see "loading message" or "opening Inbox" delays against both 1.X and 2.X Dovecot servers from thunderbird. Is there some way to pin down whats causing them?

2 1

[Dovecot] mmap in GFS2 on rhel 6.1
by Aliet Santiesteban Sifontes 13 Jun '11

13 Jun '11

Hello list, we continue our tests using Dovecot on a RHEL 6.1 Cluster Backend with GFS2, also we are using dovecot as a Director for user node persistence, everything was ok until we started stress testing the solution with imaptest, we had many deadlocks, cluster filesystems corruptions and hangs, specially in index filesystem, we have configured the backend as if they were on a NFS like setup but this seems not to work at least on GFS2 on rhel 6.1. We have a two node cluster sharing two GFS2 filesystem - Index GFS2 filesystem to store users indexes - Mailbox data on a GFS2 filesystem The specific configs for NFS or cluster filesystem we used: mmap_disable = yes mail_fsync = always mail_nfs_storage = yes mail_nfs_index = yes fsync_disable=no lock_method = fcntl mail location : mail_location = mdbox:/var/vmail/%d/%3n/%n/mdbox:INDEX=/var/indexes/%d/%3n/%n But this seems not to work for GFS2 even doing user node persistence, maillog is plagged of errors and GFS2 hangs on stress testing with imaptest, many corrupted index for example, transaction logs etc, at this point we have many questions, first mmap... In Redhat GFS2 docs we read: Gold rules for performance: An inode is used in a read only fashion across all nodes An inode is written or modified from a single node only. We have succesfull archived this using dovecot director Now, for mmap rh says: ... If you mmap() a file on GFS2 with a read/write mapping, but only read from it, this only counts as a read. On GFS though, it counts as a write, so GFS2 is much more scalable with mmap() I/O... But in our config we are using mmap_disable=yes, do we have to use mmap_disable=no with GFS2??? Also, how dovecot manage the cache flush on GFS2 filesystem??? Why, if we are doing user node persistence, dovecot indexes gets corrupted??? What lock method do we have to use?? How fsync should be used?? We know we have many questions, but this is really a very complex stuff and we are going to appreciate any help you can give us. Thank you all for a great work, specially Timo... best regards

3 3

[Dovecot] Unable to compile --with-mysql on Solaris
by Jesse Reynolds 13 Jun '11

13 Jun '11

Hello I'm hoping someone can give me a pointer as to how to compile Dovecot with MySQL support on Solaris. I am trying to compile dovecot 2.0.13 (also tried 2.0.9) on Solaris (OpenSolaris 2009-06, snv_111b) with the OpenSolaris provided MySQL 5.1.30 under /usr/mysql. The server is a Sun X2100 M2, which has a dual core AMD Opteron processor (amd64). Running "./configure --with-mysql" stops here: ... checking for mysql_config... mysql_config checking for mysql_init in -lmysqlclient... no configure: error: Can't build with MySQL support: libmysqlclient not found the libmysqlclient.so is to be found here: /usr/mysql/5.1/lib/mysql/ or for the amd64 version: /usr/mysql/5.1/lib/amd64/mysql/ And include is at: /usr/mysql/5.1/include/ I have tried various combinations of things in CFLAGS, CPPFLAGS and LDFLAGS, but it doesn't change the configure error above at all. Eg: export CPPFLAGS="-I/usr/mysql/5.1/include/mysql" export CFLAGS="-I/usr/mysql/5.1/include/mysql" export LDFLAGS="-R/usr/mysql/5.1/lib/amd64/mysql -L/usr/mysql/5.1/lib/amd64/mysql" ./configure --prefix=/opt/dovecot --with-ldap --with-mysql Looking at config.log this section seems relevant: configure:22993: checking for mysql_config configure:23009: found /usr/mysql/bin/mysql_config configure:23021: result: mysql_config configure:23055: checking for mysql_init in -lmysqlclient configure:23080: gcc -o conftest -std=gnu99 -I/usr/mysql/5.1/include/mysql -Wall -W -Wmissing-prototypes -Wmissin g-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -I/usr/mysql/5.1/include/mysql -R /usr/mysql/5.1/lib/amd64/mysql -L/usr/mysql/5.1/lib/amd64/mysql conftest.c -lmysqlclient -lnsl -lsocket -lrt -l sendfile -L/opt/SUNWspro/lib -lCrun -lrt -L/usr/mysql/5.1/lib/mysql -R/usr/mysql/5.1/lib/mysql -lmysqlclient -lz -lgen -lsocket -lnsl -lm -lz -lm >&5 ld: fatal: library -lCrun: not found ld: fatal: file processing errors. No output written to conftest collect2: ld returned 1 exit status configure:23080: $? = 1 configure: failed program was: | /* confdefs.h */ ...snip... configure:23089: result: no configure:23198: error: Can't build with MySQL support: libmysqlclient not found Note, I have not installed the Sun C compiler, so am compiling with gcc (/usr/bin/gcc 3.4.3). gmake is at /usr/bin/gmake and sun make is at /usr/bin/make. Perhaps I would more more luck with Sun's C compiler? Thank you Jesse -- Jesse Reynolds Carbon Planet Limited - http://www.carbonplanet.com/ Virtual Artists Pty Ltd - http://www.va.com.au/

1 1

[Dovecot] thunderbird not receiving new incoming mail: Timeout while waiting for lock for transaction log file
by Noah Garrett Wallach 12 Jun '11

12 Jun '11

Hi there, I am running dovecot 1.0.10 and thunderbird 3.1.10 for OSX 10.6.7 and I am finding that new imap mail is not coming into my INBOX folder on thunderbird. there is an error message "Timeout while waiting for lock for transaction log file" in the syslog here is my INBOX .imap dir ~/mail/.imap/INBOX$ ls -l total 75100K -rw------- 1 blah blah 1462024 Jun 11 20:17 dovecot.index -rw------- 1 blah blah 75153408 Jun 11 20:17 dovecot.index.cache -rw------- 1 blah blah 1464 Jun 11 20:17 dovecot.index.log -rw------- 1 blah blah 195812 Jun 11 17:23 dovecot.index.log.2 what is the best way to troubleshoot this problem? what else can I look at? Cheers, Noah

3 2

Re: [Dovecot] postfix dovecot spamassassin question
by Dhaval Patel 12 Jun '11

12 Jun '11

So I setup amavis-new and configured postfix/spamassassin/amavis. Mail is still delivered properly but I do not see the spamassassin info in the headers of the email. I configured amavis-new and set "sa_tag_level_deflt" to -999 so that it would always show up but no luck. I updated the spamassassin config and enabled it. I also tested spamassassin manually running "spamassassin -t < someemail" and that returns the email with the X-Spam in the headers. If this is not the correct place to ask, I apologize. Please direct me where I can find the answer. Thanks, Dhaval Simone Caruso <info(a)simonecaruso.com> wrote: >On 11/06/2011 18:53, Dhaval Patel wrote: >> I have an old server with postfix -> maildrop -> spamassassin -> courier setup. >> I am installing a new server and would like to use dovecot instead of courier. >> Currently I have postfix -> dovecot lda -> dovecot setup and emails are >> delivered as expected. The problem is that I do not know how to get spamassassin >> integrated into the mix since I am using the dovecot lda rather than maildrop. > >The simplest, and maybe fastest, is to use amavis-new as postfix contentfilter. > > >-- >Simone Caruso >IT Consultant >+39 349 65 90 805 >p.iva: 03045250838

2 1

[Dovecot] postfix dovecot spamassassin question
by Dhaval Patel 11 Jun '11

11 Jun '11

I have an old server with postfix -> maildrop -> spamassassin -> courier setup. I am installing a new server and would like to use dovecot instead of courier. Currently I have postfix -> dovecot lda -> dovecot setup and emails are delivered as expected. The problem is that I do not know how to get spamassassin integrated into the mix since I am using the dovecot lda rather than maildrop. I would rather keep things as simple as possible and not use maildrop + sendmail just to use spamassasin but will if I have to. So my question to the list is, how do you recommend me doing this? Are there any documentation, howtos or tutorials which can help me configure this? Below is the output of dovecot -n Thanks, Dhaval ------------dovecot -n--------------- # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686-bigmem i686 Debian 6.0.1 xfs log_timestamp: %Y-%m-%d %H:%M:%S ssl_cert_file: /etc/ssl/certs/secure.consoe.com.pem ssl_key_file: /etc/ssl/certs/secure.consoe.com.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mail_location: maildir:/home/vmail/%u mbox_write_locks: fcntl dotlock namespace: type: private separator: . prefix: INBOX. inbox: yes list: yes subscriptions: yes lda: postmaster_address: postmaster(a)patel.sh auth_socket_path: /var/run/dovecot/auth-master log_path: /home/vmail/dovecot-deliver.log mail_plugins: sieve global_script_path: /home/vmail/globalsieverc auth default: mechanisms: plain login passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail

2 1

[Dovecot] migration scenario
by Alexandre Chapellon 10 Jun '11

10 Jun '11

Hello, I'd like to know if anybody have an experience with migrating mailboxes from mirapoint mail system to dovecot? If so how was it done and what were the difficulties? regards.

2 1

[Dovecot] Sub-Subfolder from public folders
by Torsten Harenberg 10 Jun '11

10 Jun '11

Dear all, I just moved from an old cyrus instance to a brand new dovecot installation. Everything worked pretty well so far. The only small problem I have is: we have public folders, so I defined namespace { type = public separator = . prefix = public. location = maildir:/var/mail/public:INDEX=%u/public subscriptions = no list = children } And I define ACLs for the folders inside. This works, but the some of these folders have sub-folders and these cannot be seen by (what I have tested is Apple Mail, Thunderbird, Outlook and squirrelmail). File system looks like this: mail# cd /var/mail/public/.icecube-c mail# ls -l .ice* .icecube-hard: total 232 drwxrwxrwx 2 root wheel 512 Jun 9 13:07 cur -rwxrwxrwx 1 root wheel 167 Jun 9 13:07 dovecot-keywords -rwxrwxrwx 1 root wheel 105179 Jun 9 13:07 dovecot-uidlist drwxrwxrwx 2 root wheel 123904 Jun 9 13:07 new drwxrwxrwx 2 root wheel 512 Jun 9 13:07 tmp .icecube-soft: total 2214 drwxrwxrwx 2 root wheel 512 Jun 9 13:06 cur -rwxrwxrwx 1 root wheel 167 Jun 9 13:07 dovecot-keywords -rwxrwxrwx 1 root wheel 1019250 Jun 9 13:07 dovecot-uidlist -rwxrwxrwx 1 root wheel 0 Jun 9 13:06 maildirfolder drwxrwxrwx 2 root wheel 1195008 Jun 9 13:07 new drwxrwxrwx 2 root wheel 512 Jun 9 13:07 tmp mail# ls .icecube-hard .icecube-soft cur dovecot-acl dovecot-keywords dovecot-uidlist new subscriptions tmp Maybe anybody can help with this? Full dovecot -n attached. Thanks again and best regards, Torsten -- <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> <> <> <> Dr. Torsten Harenberg harenberg(a)physik.uni-wuppertal.de <> <> Bergische Universitaet <> <> FB C - Physik Tel.: +49 (0)202 439-3521 <> <> Gaussstr. 20 Fax : +49 (0)202 439-2811 <> <> 42097 Wuppertal <> <> <> <><><><><><><>< Of course it runs NetBSD http://www.netbsd.org ><> mail# dovecot -n # 2.0.13: /usr/pkg/etc/dovecot/dovecot.conf # OS: NetBSD 5.1 amd64 ffs auth_debug = yes auth_verbose = yes base_dir = /var/run/dovecot/ mail_debug = yes mail_gid = 6 mail_location = maildir:/var/mail/user/%u/Maildir mail_plugins = acl managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = prefix = separator = . type = private } namespace { list = children location = maildir:/var/mail/public:INDEX=%u/public prefix = public. separator = . subscriptions = no type = public } passdb { args = /usr/pkg/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = dovecot user = dovecot } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl_cert = </etc/certificates/mail.physik.uni-wuppertal.de.crt ssl_key = </etc/certificates/mail.physik.uni-wuppertal.de.key userdb { args = /usr/pkg/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = sieve } protocol lda { mail_plugins = sieve } protocol imap { mail_plugins = acl imap_acl } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole }

2 2