- dovecot - dovecot.org

[Dovecot] limit login concurencly from different ip
by Giovanni Mancuso 13 Dec '10

13 Dec '10

Hi, can i configure dovecot to limit the max number of login concurencly? I read in documentation that there is "mail_max_userip_connections", but in this way i limit the login that come from same ip. If the same user tries to connect from different ip, he succeeds. Can i do it? Thanks

2 3

[Dovecot] Quota warning generated when crossing on both sides
by Harm van Tilborg 13 Dec '10

13 Dec '10

Hello everyone, I'm experimenting with the quota warning plugin. I have the following setting in Dovecot's general config: plugin { quota_warning = storage=75%% /var/www/contrib/doquotawarning.py 75 quota_warning2 = storage=90%% /var/www/contrib/doquotawarning.py 90 } The doquotawarning.py script is working okay -- meaning that the user gets a warning. My SQL backend uses the following query: user_query = \ SELECT m.maildir AS home, 1001 AS uid, 1001 AS gid, \ CONCAT('*:bytes=', m.quota, 'M') AS quota_rule, \ 'Trash:ignore' AS quota_rule2 \ FROM mailbox m \ INNER JOIN domain d \ ON d.id = m.domainid \ WHERE d.domain = '%d' \ AND m.user = '%n' Where m.quota is the user's personal quota (in MB). As you can see, we ignore the 'Trash' box, when considering the usage data. We are using the dict quota backend. Now this is what happens. Assume we have 'user(a)example.org', that has a quota of 10MB and he currently has 5MB in use. Now someone sends a 3MB email towards 'user(a)example.org'. Dovecot does indeed generate the warning message (75%), that arrives correctly 'together' with the 3MB email. Now the user moves the 3MB email to trash. This goes well, however: Dovecot generates the 75% warning message again. Which is not necessary: the user was cleaning his mailbox, i.e. usage is 5MB again. I have the feeling Dovecot is generating the warning event twice. When getting from e.g. 50% to 79% and when the usage is lowered from 87% to 70%. I have the feeling this is either not the correct behavior, or I'm misinformed. When looking at the source, this shouldn't be happening: if ((bytes_before < (uint64_t)warnings[i].rule.bytes_limit && bytes_current >= (uint64_t)warnings[i].rule.bytes_limit) || (count_before < (uint64_t)warnings[i].rule.count_limit && count_current >= (uint64_t)warnings[i].rule.count_limit)) { quota_warning_execute(root, warnings[i].command); break; } We're using Dovecot 1.2.9 (Ubuntu's 10.04 LTS version). -- Kind regards, Harm van Tilborg

2 1

[Dovecot] Crash in 2.0.8 dovecot/imap - information capture
by Tom Talpey 13 Dec '10

13 Dec '10

My dovecot logs revealed a crash in the dovecot/imap process a few days ago. It appears to have dereferenced 0x00000004 in the storage shared lib. Unfortunately, I didn't get a core and I'm not sure how to reproduce it. Dovecot 2.0.8 on linux32. Two questions: 1) How can I be sure I get a core next time? I think it's because I run dovecot/imap under a mail uid and didn't have write permission to the cwd. Any way to verify that was it, and be sure it works? 2) What other settings would provide more info if it happens again? Thanks! dovecot.log excerpt: Dec 10 08:43:53 master: Error: service(imap): child 30862 killed with signal 11 (core dumps disabled) Dec 10 08:43:53 imap-login: Info: Login: user=<xx(a)yy.com>, method=PLAIN, rip=169.254.100.10, lip=169.254.100.100, mpid=2243 kernel dmesg: imap[30862]: segfault at 4 ip b772ecd2 sp bfc90f90 error 4 in libdovecot-storage.so.0.0.0[b76e9000+b8000] [~] # dovecot -n # 2.0.8: /etc/dovecot/dovecot.conf # OS: Linux 2.6.33.2 i686 ext4 (not sure of exact config at time of crash, will capture next)

2 1

[Dovecot] Right auth scheme for MS clients?
by Agim Cami 13 Dec '10

13 Dec '10

What will be the right authentication scheme for a mail system with Microsoft Outlook as client and shadow passwords for Linux system users?

2 1

[Dovecot] director errors
by Cor Bosman 13 Dec '10

13 Dec '10

Hi Timo, im getting some director errors. Dec 13 10:11:25 imapdirector1 dovecot: director: Error: User hash 3608614717 is being redirected to two hosts: 194.109.26.171 and 194.109.26.141 Dec 13 10:11:25 imapdirector1 dovecot: director: Error: User hash 755231546 is being redirected to two hosts: 194.109.26.132 and 194.109.26.154 Dec 13 10:11:25 imapdirector1 dovecot: director: Error: User hash 2468924024 is being redirected to two hosts: 194.109.26.135 and 194.109.26.159 Dec 13 10:11:25 imapdirector1 dovecot: director: Error: User hash 3275820100 is being redirected to two hosts: 194.109.26.134 and 194.109.26.160 Dec 13 10:11:25 imapdirector1 dovecot: director: Error: User hash 1674197395 is being redirected to two hosts: 194.109.26.137 and 194.109.26.159 Dec 13 10:11:25 imapdirector1 dovecot: director: Error: User hash 1753370669 is being redirected to two hosts: 194.109.26.134 and 194.109.26.171 Dec 13 10:11:25 imapdirector1 dovecot: director: Error: User hash 3760447994 is being redirected to two hosts: 194.109.26.131 and 194.109.26.141 Dec 13 10:11:25 imapdirector1 dovecot: director: Error: User hash 3687955574 is being redirected to two hosts: 194.109.26.171 and 194.109.26.158 Dec 13 10:11:26 imapdirector1 dovecot: director: Error: director(194.109.26.174:444/right): Handshaking timed out Dec 13 10:11:26 imapdirector1 dovecot: director: Error: Director 194.109.26.174:444/right disconnected Ive got 37 director_mail_servers and 2 director_servers. Cor

1 0

[Dovecot] Новое сообщение
by Vovan 13 Dec '10

13 Dec '10

http://samec.org.ua/

1 0

[Dovecot] director_user_expire
by Cor Bosman 11 Dec '10

11 Dec '10

Would it be ok to set director_user_expire to a very high value? Say 1 day? This would pretty much lock a user into a specific server right? What if I set it to 1 year? :) What happens when the server a user is locked into disappears (i remove it from the pool). Then a day later, I add the server again. Is the user now locked to the new server, or will he revert back to the old server? Cor

1 0

[Dovecot] imap_logout_format don't understand %r variable
by Nikita Koshikov 10 Dec '10

10 Dec '10

Hello list, Dovecot version 1.2.16. In protocol imap section I have imap_logout_format = ip=%r bytes=%i/%o But when user disconnecting, to log file dovecot write: IMAP(user@domain): Info: Disconnected: Logged out ip= bytes=954/8644 Is this suppose to work ?

2 2

[Dovecot] Delay email!
by Henrique Fernandes 10 Dec '10

10 Dec '10

I am using postfix + dovecot 2.0.6 + mailman And others 2 serves with only postfix and dovecot writing at same storage with OCFS2. We are having problens with IOwait, and still trying to figure out why that is happen! But, problem becomes much worse when some emails are used in mailman, when it happens all 3 serves became really slow. iowait goes to 80. Does anyone have an idea how to slow down the dovecot lda ? I want it to nit to iwrite so much email, at least take a small break between each mail!! Any ideias? Thanks! []'sf.rique

2 4

Re: [Dovecot] IMAP aggregation and MUPDATE protocolo
by Timo Sirainen 10 Dec '10

10 Dec '10

(Second time already within a few days when I accidentally hit reply rather than reply-to-all and then wonder why the message isn't showing up.) On 24.11.2010, at 14.16, Ernesto Revilla Derksen wrote: > We're trying to find a solutions for aggregating data from several > backends which are: > * normal mail IMAP > * repositories like Alfresco which offer an IMAP view for repository documents I'm planning on implementing "IMAP client" backend for lib-storage, which means you could create namespaces that are proxied to remote IMAP server. Or even make Dovecot act as a caching IMAP proxy for your real IMAP server. > * issue trackers (issue + attachmentes + timeline) I guess it could be possible to implement lib-storage backend for these too. :) Or maybe create some new simpler protocol that you can easily implement for them, and then create a lib-storage backend for that.

4 6

[Dovecot] Execute Script on LMTP Deliver?
by Edward Carraro 10 Dec '10

10 Dec '10

Is it possible to have dovecot 2.0.8 using LMTP run a shell script each time it delivers a message to a users mailbox? I see there's an "execute = script /path/to/script" but when i added it to lmtp service in 10-master.conf, it didnt do anything and stopped delivering mail altogether service lmtp { executable = script /usr/local/bin/test.sh u% unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix user = postfix } inet_listener lmtp { port = 24 } } $ ls -lh | grep test -rwxrwxrwx 1 root staff 270 2010-12-09 18:05 test.sh $ cat test.sh #!/bin/sh USER=$1 echo $USER > /tmp/newfile basically when a message arrives, it will execute a shellscript which will notify another service that mail has arrived in their inbox

2 2

[Dovecot] Phantom INBOX in 1.2. Is there a stable .deb of 2.0?
by ian+dovecot＠comtek.co.uk 10 Dec '10

10 Dec '10

Hi, We've been running 1.2 Dovecot for a while and are happy with it. In trying to migrate from symlinks to shared folders I see a similar problem to that shown at http://www.mail-archive.com/dovecot@dovecot.org/msg32083.html . For example: . lsub "" "*" * LSUB () "." "Users..INBOX" The advice given in the thread is to upgrade to 2.0. We currently use Debian's 1.2 package and I'm reluctant to move since I can't find a stable 2.0 .deb (http://wiki2.dovecot.org/PrebuiltBinaries only has repository heads of 2.0). Building from source is an option but I'd really prefer to be using a package. Can anybody advise on an appropriate way to go? Like the original poster I am seeing INBOX under the shared namespace when I try to share. I'm also getting an empty /var/mail/virtual/users/Maildir created (maildir:/var/mail/virtual/users/%n/Maildir/). We formerly had an INBOX prefix namespace from a Courier migration too, but it has been deleted (to no avail). Shared folders do work, though. It just requires 'anyone l' in /etc/dovecot/dovecot-acls/.DEFAULT (though I'd really rather not do this!). Thanks for any help, Ian ######## mail_location = maildir:/var/mail/virtual/users/%n/Maildir/ namespace private { separator = . prefix = inbox = yes } namespace shared { separator = . prefix = Users.%%n. location = maildir:/var/mail/virtual/users/%%n/Maildir/:INDEX=~/shared/%%u subscriptions = no list = children } namespace public { separator = . prefix = Shared. location = maildir:/var/mail/virtual/public:INDEX=~/public subscriptions = no } auth default { mechanisms = plain passdb ldap { args = /etc/dovecot/dovecot-ldap.conf } passdb ldap { args = /etc/dovecot/dovecot-ldap-master.conf master=yes } userdb passwd { } userdb ldap { args = /etc/dovecot/dovecot-ldap-userdb.conf } userdb ldap { args = /etc/dovecot/dovecot-shared-ldap.conf } } plugin { acl = vfile:/etc/dovecot/dovecot-acls:cache_secs=3 acl_shared_dict = file:/var/mail/virtual/shared-mailboxes.db }

1 0

[Dovecot] Released Pigeonhole v0.2.2 for Dovecot v2.0.8
by Stephan Bosch 10 Dec '10

10 Dec '10

Hello Dovecot users, The new Dovecot v2.0.8 release has a few changes that prompted changes in Pigeonhole as well. This means that a new release of Pigeonhole is also necessary, because otherwise things will not compile anymore. Apart from a few rather minor bugfixes, some of which originate in Dovecot, one TODO item has finally been resolved: the reject action uses the LDA mail reject API, meaning that the associated LDA settings now also work for Pigeonhole, as would be expected. Changelog v0.2.2: * LDA Sieve plugin: started using Dovecot LDA reject API for the reject extension. This means that the LDA reject_reason and reject_subject settings now also work for Pigeonhole's LDA Sieve plugin. * Did some work on the new sieve-filter tool. It is mostly functional, but it is not finished yet. * Dovecot change: services' default vsz_limits weren't being enforced correctly in earlier v2.0 releases. Now that they are enforced, you might notice that the default limits are too low and you need to increase them. This problem will show up in logs as "out of memory" errors. See default_vsz_limit and service { vsz_limit } settings. - Imap4flags: fixed segfault bug occurring in multiscript context. - Added version checking to the ManageSieve settings plugin. This plugin was forgotten when the LDA plugin was updated with this change in the previous release. - LDA Sieve plugin: fixed memory leak at deinitialization. The release is available as follows: http://www.rename-it.nl/dovecot/2.0/dovecot-2.0-pigeonhole-0.2.2.tar.gz http://www.rename-it.nl/dovecot/2.0/dovecot-2.0-pigeonhole-0.2.2.tar.gz.sig Refer to http://pigeonhole.dovecot.org and the Dovecot v2.0 wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

2 2

[Dovecot] Dovecot as IMAP proxy to Exchange
by Hugo Monteiro 09 Dec '10

09 Dec '10

Hello list, I'm looking into the possibility to setup dovecot to act as an IMAP proxy to an Exchange server. Things i know beforehand: - I will not be able to use the ldap (Active Directory) user DN for auth binds (but i discovered that i could could use the user userPrincipalName attribute as bind DN. I tested it using ldapsearch and it worked fine.) - I will not be able to perform any unbinded searches. - The Exchange server is unique, so i can setup a static proxy route to the server. Given the above, i'd like to post some questions: 1 - Will i be able to use auth_bind = yes given the restrictions? My first guess is that this might work if i use something like "auth_bind_userdn = %u(a)example.org" 2 - Will i be able to specify a static route to the exchange server, not having to rely on that information from the AD itself? Another thing i'd like to know is if NTLM auth can be used while dovecot acts only as proxy. Thanks in advance, Hugo Monteiro. -- fct.unl.pt:~# cat .signature Hugo Monteiro Email : hugo.monteiro(a)fct.unl.pt Telefone : +351 212948300 Ext.15307 Web : http://hmonteiro.net Divisão de Informática Faculdade de Ciências e Tecnologia da Universidade Nova de Lisboa Quinta da Torre 2829-516 Caparica Portugal Telefone: +351 212948596 Fax: +351 212948548 www.fct.unl.pt apoio(a)fct.unl.pt fct.unl.pt:~# _

2 1

[Dovecot] Dovecot 1.2/2.0 coexistence guide?
by Tom Talpey 09 Dec '10

09 Dec '10

I am running Dovecot 1.2.16 and considering moving up to 2.0.8. I have found <http://wiki2.dovecot.org/Upgrading/2.0> but there's not a lot about deploying a 2.0 server alongside an existing 1.2. Any hints on a seamless approach to this, especially one that might allow me to upgrade individual users in place, without moving their maildirs into a new tree and still avoid issues with 1.2/2.0 sharing access?

4 11

[Dovecot] sieve plugin does not autocreate folder
by JM 09 Dec '10

09 Dec '10

Sieve plugin does not autocreate folder, defined in sieve filter /etc/dovecot/sieve/default.sieve require ["fileinto"]; # rule:[off] if anyof (header :contains "To" "off(a)***.com", header :contains "Cc" "off(a)****.com") { fileinto "INBOX.off"; stop; } >sievec /etc/dovecot/sieve/default.sieve sievec(root): Debug: Loading modules from directory: /usr/lib64/dovecot sievec(root): Debug: Module loaded: /usr/lib64/dovecot/lib15_notify_plugin.so sievec(root): Debug: Module loaded: /usr/lib64/dovecot/lib20_expire_plugin.so sievec(root): Debug: Effective uid=1030, gid=1030, home=/root sievec(root): Debug: maildir++: root=/root, index=, control=, inbox=/root > mail -f test(a)test.org to off(a)****.com > cat /var/log/dovecot.log : script binary /etc/dovecot/sieve/default.svbin successfully loaded : binary save: not saving binary /etc/dovecot/sieve/default.svbin, because it is already stored : executing script from /etc/dovecot/sieve/default.svbin Namepace : Permission lookup failed from /var/spool/mail/virtual/****.com/****(a)*****.com/.INBOX.off Namepace : Using permissions from /var/spool/mail/virtual/****.com/*****@*****: mode=0700 gid=-1 Namepace : Permission lookup failed from /var/spool/mail/virtual/*****.com/*****(a)****.com/.INBOX.off Namepace : Using permissions from /var/spool/mail/virtual/****.com/****(a)****.com: mode=0700 gid=-1 : msgid=<56918ca75c35458412116ec36d8e7c46(a)*****.com>: failed to store into mailbox 'INBOX.off': Mailbox doesn't exist: INBOX.off Error: sieve: execution of script /etc/dovecot/sieve/default.sieve failed, but implicit keep was successful Info: sieve: msgid=<56918ca75c35458412116ec36d8e7c46(a)*****.com>: stored mail into mailbox 'INBOX' OS - Linux gentoo 2.6.36 x64 dovecot version 2.0.8 dovecot.conf base_dir = /var/run/dovecot/ default_vsz_limit = 1 G mail_debug = yes mail_gid = vmail mail_location = maildir:%h mail_privileged_group = vmail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation plugin { sieve = ~/.dovecot.sieve sieve_before = /etc/dovecot/sieve/default.sieve sieve_dir = ~/sieve } protocols = imap pop3 sieve service auth { unix_listener auth-master { mode = 0600 user = vmail } } service managesieve-login { vsz_limit = 1 M } protocol lda { auth_socket_path = /var/run/dovecot/auth-master log_path = /var/log/dovecot.log mail_plugins = sieve quota }

3 4

[Dovecot] mutt freezes
by Manoel Prazeres 09 Dec '10

09 Dec '10

Hi Sometimes mutt freezes saying "Closing connection to imap.impa.br...". Any clue? Thanks Manoel === My configuration: User-Agent: Mutt/1.5.21 (2010-09-15) # dovecot -n # 2.0.8: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.26.1.el5xen x86_64 CentOS release 5.5 (Final) default_client_limit = 1027 default_process_limit = 512 first_valid_gid = 1000 first_valid_uid = 1001 log_path = /var/log/imapd/imapd.log log_timestamp = "%b %e %H:%M:%S markov " login_log_format_elements = user=<%u> method=%m pid=%p rip=%r lip=%l %c mail_location = mbox:%h/mail:INBOX=%h/mbox:INDEX=/var/local/imapd.indexes/%u mail_log_prefix = "%Us(%u): pid=%p, rip=%r, lip=%l, " mbox_write_locks = fcntl passdb { args = /etc/dovecot/deny-users deny = yes driver = passwd-file } passdb { driver = pam } protocols = imap service imap-login { process_min_avail = 32 } service imap { process_limit = 512 } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol imap { mail_max_userip_connections = 5 }

2 2

[Dovecot] dovecot-lda segfault
by Micha Krause 09 Dec '10

09 Dec '10

Hello, dovecot-lda crashes with a segfault, if I run it as a user who has no mailbox, and no permission to create one. stat("/var/mail/mailboxes/users", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0 getuid() = 21189 geteuid() = 21189 access("/var/mail/mailboxes/users", X_OK) = 0 getuid() = 21189 geteuid() = 21189 access("/var/mail/mailboxes/users", W_OK) = -1 EACCES (Permission denied) geteuid() = 21189 getegid() = 21189 --- SIGSEGV (Segmentation fault) @ 0 (0) --- +++ killed by SIGSEGV +++ dovecot --version 2.0.8 (f9d34d929c3f) Micha Krause

3 3

[Dovecot] mail.err
by Paul Cartwright 08 Dec '10

08 Dec '10

I keep getting this error, and I have no clue where it comes from. I have no localhost in my fetchmailrc file, all I have in main.cf is: mydestination = paulandcilla.homelinux.org, localhost here is some of the entries in /var/log/mail.err: Dec 7 16:00:38 paulandcilla fetchmail[16761]: connection to localhost:smtp [::1/25] failed: Connection refused. Dec 7 16:00:40 paulandcilla fetchmail[16761]: connection to localhost:smtp [::1/25] failed: Connection refused. Dec 7 16:00:43 paulandcilla fetchmail[16761]: connection to localhost:smtp [::1/25] failed: Connection refused. Dec 7 16:10:50 paulandcilla fetchmail[16761]: connection to localhost:smtp [::1/25] failed: Connection refused. Dec 7 16:10:56 paulandcilla fetchmail[16761]: connection to localhost:smtp [::1/25] failed: Connection refused. Dec 7 16:21:05 paulandcilla fetchmail[16761]: connection to localhost:smtp [::1/25] failed: Connection refused. Dec 7 16:21:07 paulandcilla fetchmail[16761]: connection to localhost:smtp [::1/25] failed: Connection refused. Dec 7 16:21:08 paulandcilla fetchmail[16761]: connection to localhost:smtp [::1/25] failed: Connection refused. Dec 7 16:31:18 paulandcilla fetchmail[16761]: connection to localhost:smtp [::1/25] failed: Connection refused. Dec 7 16:31:19 paulandcilla fetchmail[16761]: connection to localhost:smtp [::1/25] failed: Connection refused. Dec 7 16:41:25 paulandcilla fetchmail[16761]: connection to localhost:smtp [::1/25] failed: Connection refused. Dec 7 16:41:26 paulandcilla fetchmail[16761]: connection to localhost:smtp [::1/25] failed: Connection refused. Dec 7 16:41:27 paulandcilla fetchmail[16761]: connection to localhost:smtp [::1/25] failed: Connection refused. all of the mail SENDING on this box comes out of either kmail or thunderbird via my domain host, secure login. -- Paul Cartwright Registered Linux user # 367800

4 19

[Dovecot] passdb pam and userdb passwd "Authentication failure" errors
by Mark Alan 08 Dec '10

08 Dec '10

While using Ubuntu 10.10 + Dovecot 1.2.12 + Postfix 2.7.1-1: To enable virtual accounts, I am using the following /etc/dovecot/auth.d/virtualsomename.auth file: passdb passwd-file { args = /etc/dovecot/passwd } userdb static { args = uid=vmail gid=vmail home=/home/vmail/%u } EOT cat /etc/dovecot/passwd looks like this: test:{PLAIN}pass bill:{PLAIN}secret timo@example.com:{PLAIN}hello123 dave@example.com:{PLAIN}world234 Issuing a 'sudo dovecot -n' shows: .../... auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: pam passdb: driver: passwd-file args: /etc/dovecot/passwd userdb: driver: passwd userdb: driver: static args: uid=vmail gid=vmail home=/home/vmail/%u .../... and while trying to connect to Dovecot as dave(a)example.com the log shows: 2010-12-04 18:15:58 auth(default): Info: new auth connection: pid=15334 2010-12-04 18:15:58 auth(default): Info: client in: AUTH 1 PLAIN service=smtp nologin lip=127.0.1.1 rip=127.0.1.1 resp=AGRhdmVAZXhhbXBsZS5jb20Ad29ybGQyMzQ= 2010-12-04 18:15:58 auth-worker(default): Info: pam(dave(a)example.com,127.0.1.1): lookup service=dovecot 2010-12-04 18:15:58 auth-worker(default): Info: pam(dave(a)example.com,127.0.1.1): #1/1 style=1 msg=Password: 2010-12-04 18:16:00 auth-worker(default): Info: pam(dave(a)example.com,127.0.1.1): pam_authenticate() failed: Authentication failure (password mismatch?) (given password: world234) 2010-12-04 18:16:00 auth(default): Info: passwd-file(dave(a)example.com,127.0.1.1): lookup: user=dave(a)example.com file=/etc/dovecot/passwd 2010-12-04 18:16:00 auth(default): Info: client out: OK 1 user=dave(a)example.com I have 2 questions: QUESTION 1: To avoid those Authentication failure errors should I also comment out the passdb pam {...} and userdb passwd {...} blocks in the main /etc/dovecot/dovecot.conf? I was thinking in something like: sudo sed -i '/passdb pam {/,/}/s/^/#/' /etc/dovecot/dovecot.conf sudo sed -i '/userdb passwd {/,/}/s/^/#/' /etc/dovecot/dovecot.conf QUESTION 2: the final email arrives with an email header that includes: Received: from desk.example.com (unknown [127.0.1.1]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by mail.example.com (Postfix) with ESMTPSA id F24707FE6D for <example(a)example.com>; Sat, 4 Dec 2010 18:16:00 +0000 (WET) Does this mean that I have SSL/TLS properly configured? The "No client certificate requested" is supposed to be there? Thank you. M.

3 4

[Dovecot] How to handle "Waiting for authentication process..."
by A.L.E.C 08 Dec '10

08 Dec '10

Sometimes, when dovecot authentication processes are busy, dovecot write reply "Waiting for authentication process to respond.." to client. Roundcube webmail do not understand it and invalidate user session. My question is what is a good practise to handle this situation by client software? One Roundcube user proposes to detect such response then wait a moment and try again. Is there any standard for this? How long should we wait? More info here: http://trac.roundcube.net/ticket/1487450 -- Aleksander 'A.L.E.C' Machniak LAN Management System Developer [http://lms.org.pl] Roundcube Webmail Developer [http://roundcube.net] --------------------------------------------------- PGP: 19359DC1 @@ GG: 2275252 @@ WWW: http://alec.pl

2 2

[Dovecot] local seen flags with shared mailboxes
by Tim Mauerbach 08 Dec '10

08 Dec '10

Hello all, after recent upgrade from 2.0.5 to 2.0.8 it seems that local seen flags for mails reside in shared mailboxes doesn´t work anymore. Before the upgrade I had read mails with account #1. Account #2 (who has access via acl) saw the mails still as unread. Now, no matter who read the mails, the other account see the same flags, immediately. I read the related wiki pages again and tried to find any configuration error, unfortunately without much success. I´ve attached output from "doveconf -n" and a debug logfile. Thanks a lot! Tim

2 2

Re: [Dovecot] mail.err
by Karsten Bräckelmann 08 Dec '10

08 Dec '10

Please *do* keep the thread on the list, by replying to the list only. On Tue, 2010-12-07 at 18:07 -0500, Paul Cartwright wrote: > On 12/07/2010 05:25 PM, Karsten Bräckelmann wrote: > > Even though this *really* is not related to dovecot at all, while we're > > here, I might as well try to help nonetheless -- failing with an IPv6 > > address does look familiar. I don't recall the log messages, since I > > mostly debugged with fetchmail directly. > > I don't think I am using IPv6, actually I KNOW I'm not using it, I'm > pretty sure I turned off that functionality.. I don't think my router > supports it.. > I KNOW I didn't try to add that functionality to either fetchmail, > Postfix or Divecot! As I mentioned in another post, your log message clearly shows the IPv6 address is being used. And yes, your host obviously is capable of that. You don't need to specifically enable it with fetchmail. It will under certain circumstances default to IPv6, which in your case happened. As also mentioned, your postfix seems to not bind to the IPv6 address by default, though, or it has deliberately been disabled. Moreover, your router is not even in the picture here -- just like dovecot, FWIW. Fetchmail fetches the mail from a remote server, and tries to deliver it locally. That local delivery step is generating the log messages. A mail, sent from and to your box. Long after the data stream passed your router... [ long snip, including your fetchmailrc general settings ] > I will add what you have there, and see what happens, thanks! -- char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1: (c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}

1 0

[Dovecot] IMAP Timeout Leak
by qmail＠top-consulting.net 08 Dec '10

08 Dec '10

My Dovecot config is as follows: # 1.2.14: /usr/local/etc/dovecot.conf # OS: FreeBSD 6.3-RELEASE i386 protocols: imap pop3 imaps pop3s listen(default): *:143 listen(imap): *:143 listen(pop3): *:110 ssl_listen(default): *:993 ssl_listen(imap): *:993 ssl_listen(pop3): *:995 ssl_ca_file: /usr/local/certs/gd_bundle.crt ssl_cert_file: /usr/local/certs/imap.crt ssl_key_file: /usr/local/certs/rsa.imap.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_greeting: MAIL ready. login_processes_count: 50 login_max_processes_count: 500 max_mail_processes: 798 mail_max_userip_connections(default): 100 mail_max_userip_connections(imap): 100 mail_max_userip_connections(pop3): 10 verbose_proctitle: yes first_valid_uid: 89 first_valid_gid: 89 mail_privileged_group: mail mail_uid: 89 mail_gid: 89 mail_location: maildir:~/Maildir mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes lock_method: dotlock mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota fts fts_solr antispam virtual acl imap_acl mail_plugins(imap): quota imap_quota fts fts_solr antispam virtual acl imap_acl mail_plugins(pop3): virtual mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: . inbox: yes list: yes subscriptions: yes namespace: type: private separator: . prefix: INBOX. hidden: yes list: no subscriptions: yes namespace: type: private separator: . prefix: Labels. location: virtual:~/Maildir/Labels:INDEX=MEMORY list: yes subscriptions: yes namespace: type: shared separator: . prefix: shared.%%n. location: maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u list: children lda: sendmail_path: /usr/sbin/sendmail auth default: mechanisms: plain login digest-md5 cram-md5 username_format: %Lu verbose: yes passdb: driver: vpopmail args: webmail=192.168.1.4 userdb: driver: vpopmail args: quota_template=quota_rule=*:backend=%q socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: vpopmail plugin: fts: solr fts_solr: break-imap-search url=http://192.168.1.4:8983/solr/ quota: maildir quota_rule: ?:storage=0 antispam_signature: X-DSPAM-Signature antispam_trash: trash;Trash;Deleted Items antispam_spam: Spam antispam_dspam_binary: /usr/local/bin/dspam antispam_dspam_args: --client;--user;vpopmail acl: vfile acl_shared_dict: proxy::acl dict: acl: mysql:/usr/local/etc/dovecot-dict-sql.conf and I see the following error in the logs: Timeout leak: 0x80ff950 Running it through gdb, I get this: (gdb) x 0x80ff950 0x80ff950 <client_dict_timeout>: 0x53e58955 Is it a problem with the ACL plugin ?

2 1

[Dovecot] imap/pop proxy and filter
by Mike Korizek 07 Dec '10

07 Dec '10

Hi I use dovecot as imap/pop proxy. Is it possible to filter the messages before they get delivered to the client? Thanks for any hint how to achieve this. Mike

2 3

[Dovecot] proxy and gpg processing
by Mike 07 Dec '10

07 Dec '10

Hi I have dovecot running as pure proxy for accessing imap and pop mailboxes on other servers. How can I do the following scenario: When a client user reads a gpg signed or gpg encrypted email through the proxy, can I verify/decrypt the email before it gets delivered to the client user? Ideally I would like to write a perl program which processes the email within the proxy before it gets delivered to the user. With Sieve I can not do this, is there another way to achieve this? Thanks for any hint. Mike

1 0

Re: [Dovecot] imap/pop proxy and filter
by Mike Korizek 07 Dec '10

07 Dec '10

On 12/07/2010 12:18 AM, Paul Cartwright wrote: > On 12/06/2010 06:04 PM, Mike Korizek wrote: >> I use dovecot as imap/pop proxy. >> Is it possible to filter the messages before they get delivered to the >> client? >> > > http://wiki.dovecot.org/LDA/Sieve My understanding was, that Sieve requires LDA but I do not have local mailboxes as I only use the imap/pop proxy functionality. Can I use Sieve for mail filtering despite I do not have local mailboxes? Thanks, Mike

1 0

[Dovecot] imap limits please ?
by Spyros Tsiolis 06 Dec '10

06 Dec '10

Hello, Finally managed to sync an outlook client to dovecot. Looks like it's working. Questions though ; : What are the limits? Number of Folders ? Number of mails per folder ? E.g. for a client of mine, I know that she uses about 5Gb of data at the moment (and counting). Now, this same outlook client consists of the following : 1. about thirty (30) folders ranging from 1000 messages per folder to 100 messages per folder 2. A "Sent Items" folder with about 4,000 messages (and counting) 3. A "Deleted Items" folder with about 5,500 messages (and counting) System, now, is a CentOS 5.5 32-bit on an hp/compaq dl360 (G3) with RAID1 76,3Gb Disks UW320 and four (4Gb) of RAM Output of "dovecot -n" : ------------------------------------------------------------ # 1.2.16: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.17.4.el5 i686 CentOS release 5.5 (Final) ext3 base_dir: /var/run/dovecot/ log_path: /var/log/dovecot/dovecot.log info_log_path: /var/log/dovecot/dovecot-info.log ssl_parameters_regenerate: 48 verbose_ssl: yes login_dir: /var/run/dovecot//login login_executable: /usr/local/dovecot/libexec/dovecot/imap-login login_greeting: * Dovecot ready * login_max_processes_count: 32 mail_location: maildir:/var/MailRoot/domains/%d/%n/Maildir mail_plugins: zlib auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd-file args: /etc/dovecot/passwd passdb: driver: pam userdb: driver: static args: uid=vmail gid=vmail home=/home/vmail/%u userdb: driver: passwd ------------------------------------------------------------ Any answer would be greatly appreciated since I am trying to know the systems' limits. Thank you kindly all, spyros ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

2 1

[Dovecot] CentOS 5 + selinux
by Marcelo Roccasalva 06 Dec '10

06 Dec '10

I've just installed CentOS 5.5 and dovecot 2.0.7. Out of the box, it worked ok with local user accounts. Then I enable selinux and I could no loger login to imap server. I can deal with that via a local policy. But I found dovecot tried to open /etc/shadow: type=AVC msg=audit(1291490764.101:670): avc: denied { read } for pid=16130 comm="auth" name="shadow" dev=md2 ino=96335 scontext=user_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file type=AVC msg=audit(1291500097.318:818): avc: denied { getattr } for pid=17350 comm="auth" path="/etc/shadow" dev=md2 ino=95396 scontext=user_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file even it is configured for pam passdb: # dovecot -n # 2.0.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.26.1.el5 x86_64 CentOS release 5.5 (Final) mbox_write_locks = fcntl passdb { driver = pam } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } I straced the process and it efectively tries to open /etc/shadow. I don't want to disable selinux but I'm not happy letting dovecot read my /etc/shadow. Is there a guide to selinux and dovecot? -- Marcelo "¿No será acaso que ésta vida moderna está teniendo más de moderna que de vida?" (Mafalda)

2 1

[Dovecot] 1.2.15 - segfault if host field attribute not present in ldap. (proxy)
by Mohit Chawla 06 Dec '10

06 Dec '10

In case this is relevant: kernel: [17549.714369] imap-login[11704]: segfault at 0 ip b75c3d23 sp bf888178 error 4 in libc-2.11.2.so[b7551000+140000] If no host field attribute is present in ldap (like mailHost for qmail-ldap), and we are trying to use proxy, then dovecot segfaults. If more information's needed, let me know. Also, somewhat unrelated, but maybe the wiki needs to be edited since using a template as =proxy_maybe=y works, while in wiki its kinda opposite. I don't know of specifics, but should I try using a recent release ?

2 8

[Dovecot] Problem with ACLs
by Micha Krause 06 Dec '10

06 Dec '10

Hi, i want to use unix groups in my ACLs. http://wiki2.dovecot.org/ACL says, I can do that with a post-login script (http://wiki2.dovecot.org/PostLoginScripting) I have verified, that the script is running, and that ACL_GROUPS is correct. But I still can't access the Mailbox. Logfile says: Dec 3 11:19:35 mailint1 dovecot: imap(micha): Debug: acl vfile: reading file /var/mail/mailboxes/shared/mails/server-root/dovecot-acl Dec 3 11:19:35 mailint1 dovecot: imap(micha): Debug: acl vfile: reading file /var/mail/mailboxes/shared/mails/dovecot-acl Im using: dovecot 2.0.7 (5e82c5b1b4a9) Micha Krause

2 2

[Dovecot] Internal Error form delivery from LDAP lookup.
by Jorgen Lundman 06 Dec '10

06 Dec '10

Solaris-x86-10u8 Dovecot-1.2.7 Large mail setup, with quite a few MX servers working well. Generally everything is super. But every now and then, we get "bouts of bad weather" - which only lasts a short time, and curiously nearly always occur when mail is sent to customer mailing lists. I suspect mostly because of that 1 message has multiple recipients within the same domain. Perhaps. Delivery setup as: main.cf: virtual_transport = dovecot dovecot_destination_recipient_limit = 1 dovecot_destination_concurrency_limit=300 master.cf: dovecot unix - n n - 70 pipe flags=DRhu user=dovecot:dovecot argv=/usr/local/libexec/dovecot/deliver -f ${sender} -d ${recipient} Errors look something like: example.com Dec 06 08:46:25 deliver(rbc-005(a)example.com): Info: msgid=<A22A602A940A45A49EA2C4CC53D27655(a)UQC.local>: saved mail to INBOX Dec 06 08:46:25 deliver(rbc-002(a)example.com): Info: msgid=<A22A602A940A45A49EA2C4CC53D27655(a)UQC.local>: saved mail to INBOX Dec 06 08:46:28 deliver(rbc-004(a)example.com): Error: userdb lookup(rbc-004(a)example.com) failed: Internal failure Dec 06 08:46:28 deliver(rbc-011(a)example.com): Error: userdb lookup(rbc-011(a)example.com) failed: Internal failure Dec 06 08:46:28 deliver(rbc-013(a)example.com): Error: userdb lookup(rbc-013(a)example.com) failed: Internal failure Dec 06 08:46:28 deliver(rbc-006(a)example.com): Error: userdb lookup(rbc-006(a)example.com) failed: Internal failure Later on, when it retries, everything goes according to plan and delivery is achieved. Now this is actually due to slapd saying: Dec 6 08:46:25 vmx15.unix slapd[3958]: [ID 763815 local4.debug] connection_input: conn=72057 deferring operation: too many executing And since it happens most frequently with mailing-lists, or mails with many recipients, I would guess it is due to a large number of lookups happening in a very short time. Since dovecot_destination_recipient_limit=1, I believe 'deliver' is only ever called with just one recipient for "-d", and 'deliver' probably-does-not (?) query LDAP for any of the other "To:" addresses in the message body. Is that the case? Secondary, the dovecot-ldap.conf for dovecot-auth has: hosts = 127.0.0.1 172.20.12.33 172.20.12.23 172.20.12.113 So even though localhost's slapd was busy at the time, the other three hosts were definitely not. Is LDAP fail-over ... failing... in this case? How many concurrent queries does dovecot-auth perform? Any way to tweak this value? Admittedly, postfix/dovecot does handle this situation correctly, as 'temporary failure' and mail delivery is merely delayed. But at the same time, it *could* be something with an easy fix as well. Thoughts? Lund -- Jorgen Lundman | <lundman(a)lundman.net> Unix Administrator | +81 (0)3 -5456-2687 ext 1017 (work) Shibuya-ku, Tokyo | +81 (0)90-5578-8500 (cell) Japan | +81 (0)3 -3375-1767 (home)

2 6

Re: [Dovecot] Doveadm import emails
by Timo Sirainen 06 Dec '10

06 Dec '10

On 5.12.2010, at 14.47, Alex Baule wrote: > I have a maildir with 6800 emails and i try to import this to 1000 users. > The import begins well, but in the user 150 the script stop because doveadm > say the directory have wrong file permissions, but the script dont change > notthing and the permissions its ok. What exactly is the error message? Is it always the same specific user, or if you reorder users is it always the 150th?

1 0

[Dovecot] Dovecot v2.1 plans
by Timo Sirainen 06 Dec '10

06 Dec '10

Now that v2.0 seems to be getting stable, I finally started v2.1 branch: http://hg.dovecot.org/dovecot-2.1/ So far there are just some API changes to fix some annoyances and to make it simpler. They'll probably keep coming for a while more to make future work easier. As for larger upcoming features, I'm hoping for: - simplify index files and make it write only via lib-fs (but keep backwards compatibility & make v2.0 forwards compatible) - make lib-storage API support asynchronous and support parallel lookups - use async disk io as much as possible & get rid of all lock waits inside lib-storage -> it'll be ok to have lots of imap/pop3 connections per process, at least for some storage backends - write imap-client lib-storage backend (make it fast using above async stuff - using configurable number of IMAP connections) - this could maybe also be used to access other users' shared mailboxes when it can't be done directly - design a mailbox format (maybe based on dbox) for key-value databases, implement it via lib-fs and implement a lib-fs backend for one such database - merge Apple's CATENATE and URLAUTH patch But if some company desperately wants me to work on other stuff, that list can change. BTW. I'm moving back to Finland in two weeks. Maybe I'll also get some studying done towards my Master's degree. :)

1 0

[Dovecot] Centos 5.5 upgrade to dovecot 1.2
by Agim Cami 06 Dec '10

06 Dec '10

Hello, I am trying to upgrade dovecot from 1.0.7 (the dovecot verison in base repo) to 1.2. The installation of .rpm got from atrpms.net aborted with a dependency error : error: Failed dependencies: libpq.so.5()(64bit) is needed by dovecot-1.2.16-1_114.el5.x86_64 This is strange because the libraries are there : yum list libpq* Installed Packages libpqxx.x86_64 2.6.9-3.el5.rf installed libpqxx-devel.x86_64 2.6.9-3.el5.rf installed Any advice on this ? Thanks! Hello, I am trying to upgrade dovecot from 1.0.7 (the dovecot verison in base repo) to 1.2. The installation of .rpm got from atrpms.net aborted with a dependency error : error: Failed dependencies: libpq.so.5()(64bit) is needed by dovecot-1.2.16-1_114.el5.x86_64 This is strange because the libraries are there : yum list libpq* Installed Packages libpqxx.x86_64 2.6.9-3.el5.rf installed libpqxx-devel.x86_64 2.6.9-3.el5.rf installed Any advice on this ? Thanks! Hello, I am trying to upgrade dovecot from 1.0.7 (the dovecot verison in base repo) to 1.2. The installation of .rpm got from atrpms.net aborted with a dependency error : error: Failed dependencies: libpq.so.5()(64bit) is needed by dovecot-1.2.16-1_114.el5.x86_64 This is strange because the libraries are there : yum list libpq* Installed Packages libpqxx.x86_64 2.6.9-3.el5.rf installed libpqxx-devel.x86_64 2.6.9-3.el5.rf installed Any advice on this ? Thanks! Hello, I am trying to upgrade dovecot from 1.0.7 (the dovecot verison in base repo) to 1.2. The installation of .rpm got from atrpms.net aborted with a dependency error : error: Failed dependencies: libpq.so.5()(64bit) is needed by dovecot-1.2.16-1_114.el5.x86_64 This is strange because the libraries are there : yum list libpq* Installed Packages libpqxx.x86_64 2.6.9-3.el5.rf installed libpqxx-devel.x86_64 2.6.9-3.el5.rf installed Any advice on this ? Thanks! Hello, I am trying to upgrade dovecot from 1.0.7 (the dovecot verison in base repo) to 1.2. The installation of .rpm got from atrpms.net aborted with a dependency error : error: Failed dependencies: libpq.so.5()(64bit) is needed by dovecot-1.2.16-1_114.el5.x86_64 This is strange because the libraries are there : yum list libpq* Installed Packages libpqxx.x86_64 2.6.9-3.el5.rf installed libpqxx-devel.x86_64 2.6.9-3.el5.rf installed Any advice on this ? Thanks! Hello, I am trying to upgrade dovecot from 1.0.7 (the dovecot verison in base repo) to 1.2. The installation of .rpm got from atrpms.net aborted with a dependency error : error: Failed dependencies: libpq.so.5()(64bit) is needed by dovecot-1.2.16-1_114.el5.x86_64 This is strange because the libraries are there : yum list libpq* Installed Packages libpqxx.x86_64 2.6.9-3.el5.rf installed libpqxx-devel.x86_64 2.6.9-3.el5.rf installed Any advice on this ? Thanks! Hello, On a Centos 5.5 installation, I am trying to upgrade dovecot from 1.0.7 (the dovecot verison in base repo) to 1.2. The installation of .rpm got from atrpms.net aborted with a dependency error : error: Failed dependencies: libpq.so.5()(64bit) is needed by dovecot-1.2.16-1_114.el5.x86_64 This is strange because the libraries are there : yum list libpq* Installed Packages libpqxx.x86_64 2.6.9-3.el5.rf installed libpqxx-devel.x86_64 2.6.9-3.el5.rf installed Any advice on this ? Thanks!

3 2

Re: [Dovecot] Dovecot 1.2.16 compiling error
by Timo Sirainen 05 Dec '10

05 Dec '10

On 3.12.2010, at 8.36, Mart Pirita wrote: > RedHat 9 based distro, 2.6.24.2 kernel, OpenSSL 1.0.0a 1 Jun 2010 Hmm. v1.0.0a, really?.. > /usr/src/redhat/BUILD/dovecot-1.2.16/src/login-common/ssl-proxy-openssl.c:950: undefined reference to `OpenSSL_add_all_algorithms' I just hate OpenSSL. You can comment out that line from the code until I figure out what to do about this. That function was supposed to have existed since forever in OpenSSL. Or did the compiling log any warnings?

4 25

[Dovecot] 2.0.8 & enable-header-install
by Tamsy 05 Dec '10

05 Dec '10

Dear List, up to Dovecot 2.07 I used "--enable-header-install" for the Sieve Plugin when configuring Dovecot before compiling. With 2.0.8 I get the following message when running the configure script: "configure: WARNING: unrecognized options: --enable-header-install" Is this intentionally? Is there a substitute directive for Sieve when compiling Dovecot 2.08? Rgds Tamsy

2 2

[Dovecot] Strange config behaviour while using /etc/dovecot/auth.d/somename.auth
by Mark Alan 04 Dec '10

04 Dec '10

While using Ubuntu 10.10 + Dovecot 1.2.12 + Postfix 2.7.1-1: To export the authentication interface to Postfix, besides the usual smtpd_sasl_* lines at postfix, I am using: the following /etc/dovecot/auth.d/somename.auth file: socket listen { client { path = /var/spool/postfix/private/auth-client mode = 0660 user = postfix group = postfix } } But after restarting dovecot and doing a 'sudo dovecot -n' I get: ... socket: type: listen client: path: /var/spool/postfix/private/auth-client mode: 432 user: postfix group: postfix As 660<>432, is this Dovecot 1.2.12's expected behaviour? Thank you. M.

2 2

[Dovecot] Passwords not returned without auth_bind ?
by Mohit Chawla 04 Dec '10

04 Dec '10

Hi, Maybe I am missing something simple, but I can't get users authenticated using password lookups, as opposed to auth_bind. This is how the log looks like when using password lookup: dovecot: auth(default): new auth connection: pid=2449 dovecot: auth(default): client in: AUTH#0111#011PLAIN#011service=imap#011secured#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=43458#011resp=<hidden> dovecot: auth(default): ldap(foo,127.0.0.1): pass search: base=uid=foo,ou=people,dc=djb,dc=hell,dc=qua scope=base filter=(accountStatus=noaccess) fields=(none) slapd[1834]: conn=1083 op=1 SRCH base="uid=foo,ou=people,dc=djb,dc=hell,dc=qua" scope=0 deref=0 filter="(accountStatus=noaccess)" slapd[1834]: conn=1083 op=1 SRCH attr=(none) slapd[1834]: conn=1083 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text= dovecot: auth(default): ldap(foo,127.0.0.1): unknown user dovecot: auth(default): ldap(foo,127.0.0.1): pass search: base=ou=people,dc=djb,dc=hell,dc=qua scope=subtree filter=(accountStatus=active) fields=uid,userPassword,homeDirectory,uidNumber,gidNumber,mailQuotaSize slapd[1834]: conn=1084 op=1 SRCH base="ou=people,dc=djb,dc=hell,dc=qua" scope=2 deref=0 filter="(accountStatus=active)" slapd[1834]: conn=1084 op=1 SRCH attr=uid userPassword homeDirectory uidNumber gidNumber mailQuotaSize dovecot: auth(default): ldap(foo,127.0.0.1): result: uid(user)=foo uidNumber(userdb_uid)=1008 gidNumber(userdb_gid)=1008 homeDirectory(userdb_home)=/home/foo mailQuotaSize(userdb_quota_rule=*:bytes=%$)=*:bytes=10000000 dovecot: auth(default): ldap(foo,127.0.0.1): No password returned (and no nopassword) slapd[1834]: conn=1084 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= dovecot: auth(default): client out: FAIL#0111#011user=foo *dovecot-ldap.pass* uris = ldap://10.5.3.101 dn = uid=dove,ou=people,dc=djb,dc=hell,dc=qua dnpass = debian auth_bind = no ldap_version = 3 base = ou=people,dc=djb,dc=hell,dc=qua scope = subtree pass_filter = (accountStatus=active) pass_attrs = uid=user,userPassword=password,\ homeDirectory=userdb_home,uidNumber=userdb_uid,gidNumber=userdb_gid,mailQuotaSize=userdb_quota_rule=*:bytes=%$ *dovecot-ldap.deny* uris = ldap://10.5.3.101 ldap_version = 3 base = uid=%u,ou=people,dc=djb,dc=hell,dc=qua scope = base auth_bind = no pass_filter = (accountStatus=noaccess) pass_attrs = (none) *dovecot.conf* # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-3-686 i686 Debian squeeze/sid log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap managesieve listen(default): * listen(imap): * listen(managesieve): *:2000 ssl: no disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_privileged_group: mail mail_location: maildir:~/Maildir mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): quota mail_plugins(imap): quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve managesieve_logout_format(default): bytes=%i/%o managesieve_logout_format(imap): bytes=%i/%o managesieve_logout_format(managesieve): bytes=%i%o lda: postmaster_address: bar(a)djb.hell.qua mail_plugins: quota sieve deliver_log_format: msgid=%m: %$ sendmail_path: /usr/lib/sendmail log_path: /var/log/ldaone info_log_path: /var/log/ldatwo debug: yes auth default: debug: yes passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.deny deny: yes passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.pass userdb: driver: prefetch userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.user socket: type: listen master: path: /var/run/dovecot/auth-master mode: 438 plugin: quota: maildir sieve: ~/.dovecot.sieve sieve_dir: ~/sieve

2 5

[Dovecot] SIS errors - was Error from mobile client (Palm Pre)
by Daniel L. Miller 04 Dec '10

04 Dec '10

Continuing to see errors on this with some new messages. Is it possible this has anything to do with zlib plugin, or possibly having a mix of zlib compressed & uncompressed messages with mdbox? I recently added zlib to deliver plugin list. -- Daniel L. Miller, VP - Engineering, SET AM Fire & Electronic Services, Inc. [AMFES] dmiller(a)amfes.com 702-312-5276

2 15

[Dovecot] typo
by Mike Abbott 04 Dec '10

04 Dec '10

Typo on line 292 of src/lib-master/master-login-auth.c in 2.0.8: tuah.

2 1

[Dovecot] thunderbird crashed-mail_max_userip
by Paul Cartwright 04 Dec '10

04 Dec '10

thunderbird just crashed, and I've never seen this before. Any idea what happened? this was in the dovecot log: 2010-12-02 13:06:40 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:40 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:40 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:40 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:41 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:41 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:41 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:41 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:42 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 2010-12-02 13:06:42 imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<pbc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured -- Paul Cartwright Registered Linux user # 367800

4 5

[Dovecot] v2.0.8 released
by Timo Sirainen 03 Dec '10

03 Dec '10

http://dovecot.org/releases/2.0/dovecot-2.0.8.tar.gz http://dovecot.org/releases/2.0/dovecot-2.0.8.tar.gz.sig There are many small fixes all around, plus some more noticeable changes: * Services' default vsz_limits weren't being enforced correctly in earlier v2.0 releases. Now that they are enforced, you might notice that the default limits are too low and you need to increase them. This problem will show up in logs as "out of memory" errors. See default_vsz_limit and service { vsz_limit } settings. * LMTP: In earlier versions if mail was delivered to user+detail@domain address, LMTP server always attempted to deliver the mail to mailbox named "detail". This was rather unintentional and shouldn't have been the default. lmtp_save_to_detail_mailbox=yes setting now preserves this behavior (default is no). + Added systemd support (configure --with-systemdsystemunitdir). Based on patch by Christophe Fergeau. + Replaced broken mbox-snarf plugin with a new more generic snarf plugin. - dbox: Fixes to handling external mail attachments - verbose_proctitle=yes didn't work for all processes in v2.0.7 - imap, pop3: When service { client_count } was larger than 1, the log messages didn't use the correct prefix. Last logged in user's prefix was always used, regardless of what user's session actually logged it. Now the proper log prefix is always used. - MySQL: Only the first specified host was ever used

1 0

[Dovecot] Debian Dovecot Repo and Lenny
by Stephan Jauernick 03 Dec '10

03 Dec '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I am running a Debian Lenny and i want to install/update Dovecot but i am getting these Dependency Problems: dovecot-common: Depends: libc6 (>= 2.10) but 2.7-18lenny6 is to be installed Depends: libgssapi-krb5-2 (>= 1.6.dfsg.2) but it is not installable Depends: libk5crypto3 (>= 1.6.dfsg.2) but it is not installable Depends: libkrb5-3 (>= 1.6.dfsg.2) but it is not installable Depends: libmysqlclient16 (>= 5.1.21-1) but it is not going to be installed Depends: libpq5 (>= 8.4~0cvs20090328) but 8.3.12-0lenny1 is to be installed Depends: libsqlite3-0 (>= 3.6.22) but 3.5.9-6 is to be installed Depends: libssl0.9.8 (>= 0.9.8m-1) but 0.9.8g-15+lenny9 is to be installed dovecot-imapd: Depends: libssl0.9.8 (>= 0.9.8m-1) but 0.9.8g-15+lenny9 is to be installed dovecot-pop3d: Depends: libssl0.9.8 (>= 0.9.8m-1) but 0.9.8g-15+lenny9 is to be installed This are my sources.list entries for dovecot: deb http://xi.rename-it.nl/debian/ stable-auto/dovecot-2.0 main deb-src http://xi.rename-it.nl/debian/ stable-auto/dovecot-2.0 main Also when could i expect a release/deb package which includes this Commit(or how can in package it myself)? * src/lib/askpass.c: askpass: Allow reading password from stdin even if it's not a tty. [719ce27f9955] I need it because postfixadmin fails otherwise while using the doveadm tool. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (MingW32) Comment: Protect messages and files using GnuPG and OpenSSL! Comment: GnuPG-Pack: http://home.arcor.de/rose-indorf Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEVAwUBTPjoyOlWJjWCxiMpAQLpWQf6Axy22rqAEKGGyWK7eR/eBViFrtIgVP7R SNXnNe/b9QfbsSKsvBaZFtueiOm2GtfLC/8kQefzEfNoGHPqGPlSbJ5PQNZjgI9C wAkfFRD4dxH8YeACKk36HTPUJZOCHnxXXxBhdA39/ba8s+CNp0n6ct9ShG7tnmQe 382jYcxQMw1SOeXkf4sq4TPxqwR60Ij4ocUkzI2fHHoRXfIrlBsl/dsmyjhaJKt8 qElk2NK8IRSb7qMZSeV6a2y56QD9kgoBE7UDjGnwZ6SlMWXZ1L7rC3SvtJ8serkO vno3pzsG7dNwSVIyD4QkNneqH6OR+xZ8j6jHhOfg62W/xPdMxOZwRA== =1BUd -----END PGP SIGNATURE-----

3 4

Re: [Dovecot] how do I fix this
by donovan jeffrey j 03 Dec '10

03 Dec '10

On Dec 3, 2010, at 11:20 AM, Timo Sirainen wrote: > On 3.12.2010, at 13.31, donovan jeffrey j wrote: > >> so i can just take the files from /cur and copy them into the other directory ? >> >> like >> >> cd /Volumes/x/var/spool/imap/dovecot/9EE12CA8-CC7B-4889-ABBA-525E5D522831/cur >> >> cp -Rf * /Volumes/x/var/spool/imap/dovecot/330CE746-6F8D-4708-8877-A97FAFB9AAD/cur > > Yes. > >> what a bout syncing or index do I have to do anything like a restart or will dovecot pickup on the fly? > > Dovecot picks them up automatically. > thanks there was a little change perms that i needed to do, the cp made the owner of *.files root :) a mv should have been my choice but I did not want to risk loosing to some index land. thanks for your help. -j

1 0

[Dovecot] Indexes.
by Henrique Fernandes 03 Dec '10

03 Dec '10

Hello people! I have huge problems with IO wait becase dovecot configured to use maildir is under OCFS2 1.4. Now i have an question to OCFS2 each disk action is really heavy becaue it has no index. Now i am thinking in what can be done to heltp my system to use less disk. Looking for index and etc in dovecot i found this, this disables the index file on disk and leave it on ram or it disable the index files ? If you really want to, you can also disable the index files completely by appending :INDEX=MEMORY I am only trying to get dovecot to work faster. Right now we have to waing some seconds to dovecot list all emails or read an email. I am also thinking in right index to an NFS but i don't know if this makes any diferences in performance. Thanks to all! I use 3 servres wrinting on OCFS2 one is mailman, and other two are to email, I have ipvs to load balance the conections. []'sf.rique

3 5

[Dovecot] Dovecot lmtp
by Benedetto Vassallo 03 Dec '10

03 Dec '10

Hello to all, I am setting up a mail server using sendmail and dovecot 2.0.7 with maildir storage. I want to use dovecot lmtp as local mail delivery agent becouse when I send a message to multiple recipients it deliver the message to all recipients with hard links instead of store n copies of the message. The only think I can't set up is make dovecot-lmtp reading the .forward file in the user's home directory. I think I am missing something, becouse dovecot-lda read that file but don't do hard links when deliver the mail. What I am missing? Thank you -- Benedetto Vassallo Sistema Informativo di Ateneo Settore Gestione Reti Hardware e Software U.O. Sviluppo e manutenzione dei sistemi Università degli studi di Palermo Red Hat Certified Engineer Certificate Number: 804007793324656 Phone: +3909123860056 Fax: +390916529124 ------------------------------------------------------------------------- This message was sent using the University of Palermo web mail interface.

2 2

[Dovecot] SSL issues on separate IPs
by Tim Traver 03 Dec '10

03 Dec '10

Hi Timo, I have set up 2.07 to answer on several different IP's with different SSL certs, like the following : local 209.132.xx.4 { ssl_cert = </shared/templates/res/1040/certs/*.xxxxx.com.crt-pem-298 ssl_key = </shared/templates/res/1040/certs/*.xxxxx.com.key-298 } I have several of these, and there appears to be a problem with one in particular that is dropping connections, and I'm not sure why. In this case it is a wildcard cert issued from godaddy, and I have the cert file in pem format with the chain on it. I have another completely separate local IP setup with a different cert on it that works without any problems. This particular one drops the connection when I try to connect to IMAP using TLS on port 143, or using the IMAP SSL port of 993. When I try it using Thunderbird, I am using the default settings for both tests. The Thunderbird error I get is "The server has disconnected. The server may have gone down or there may be a network problem." I don't see any errors in the dovecot error log or the system error log, and when using doveadm who to view the current connections, it does not show a connection. I tried enabling the logs for SSL errors, but nothing appears for my IP when attempting to connect. FreeBSD 8.1 with openssl 0.9.8n. The IP's are on the box and are on the loopback interface if that makes any difference for a direct server return load balancing system. But, I don't know how that would make a difference since one of the separated IP's works with its cert, and the other one disconnects. Thanks, Tim. Here is my dovecot -n output : # 2.0.7: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.1-STABLE i386 auth_username_format = %Lu auth_username_translation = %@ auth_verbose = yes disable_plaintext_auth = no dotlock_use_excl = yes first_valid_uid = 100 listen = * lock_method = dotlock log_path = /local/logs/dovecot.errors mail_fsync = always mail_gid = 100 mail_location = maildir:%h/Maildir mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = " quota" mail_uid = 100 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date imapflags notify mmap_disable = yes passdb { args = /bin/checkpassword_dovecot_auth driver = checkpassword } plugin { quota = maildir:User quota quota_rule = Trash:storage=+100M sieve = ~/.dovecot.sieve sieve_after = /home/mailboxes/sieve/to_spam_folder.sieve sieve_dir = ~/Maildir/sieve sieve_extensions = +notify +imapflags } protocols = imap pop3 sieve service auth { unix_listener auth-userdb { group = sn mode = 0600 user = sn } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = prefetch } userdb { args = /bin/checkpassword_dovecot_deliver driver = checkpassword } verbose_proctitle = yes verbose_ssl = yes protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { info_log_path = /local/logs/dovecot-deliver.log log_path = /local/logs/dovecot-deliver-errors.log mail_plugins = " quota sieve" } protocol imap { mail_plugins = " quota imap_quota" } protocol sieve { managesieve_sieve_capability = comparator-i;ascii-numeric fileinto reject vacation imap4flags notify include envelope body relational regex subaddress copy } local 209.132.77.4 { ssl_cert = </shared/templates/res/1040/certs/*.xxxxx.com.crt-pem-298 ssl_key = </shared/templates/res/1040/certs/*.xxxxx.com.key-298 } local 209.132.79.1 { ssl_cert = </shared/templates/res/1000/certs/*.ssl.xxxxx.com.crt-278 ssl_key = </shared/templates/res/1000/certs/*.ssl.xxxxx.com.key-278 }

3 7

[Dovecot] Static userdb with LDAP passdb but without "allow_all_users=yes"?
by Andreas Ntaflos 03 Dec '10

03 Dec '10

Hi, Is it possible to have a static user database along with an LDAP password database and *not* be forced to set "allow_all_users=yes" for the userdb? The wiki page on static user database says "Normally static userdb handles this by doing a passdb lookup instead." How should the passdb behave in order for this to work? In my tests (on a test server) I am using Dovecot 2.0.7 and Postfix 2.7.0 on Ubuntu 10.04.1. I use (or am trying to use) LMTP with Dovecot and Postfix according to the HOWTO in the wiki [1] as well as dynamic address verification with LMTP [2]. Users are virtual, using a static userdb and passwords from LDAP. I also serve local system users which is why I also have userdb and passdb pam, but this isn't the issue here. Delivering mail to an existing virtual user works fine as far as I can see but when a non-existent user is the recipient Dovecot complains that the passdb doesn't support lookups: postfix/smtpd[26469]: connect from remote-smtp.example.net[10.0.0.10] postfix/cleanup[26474]: 772A760B25: message- id=<20101125172409.772A760B25(a)mailtest.example.com> postfix/qmgr[27672]: 772A760B25: from=<double- bounce(a)mailtest.example.com>, size=276, nrcpt=1 (queue active) dovecot: lmtp(22109): Connect from local dovecot: auth: Error: static(not-a-user(a)test01.example.com): passdb doesn't support lookups, can't verify user's existence dovecot: lmtp(22109): Error: user not-a-user(a)test01.example.com: Auth USER lookup failed dovecot: lmtp(22109): Disconnect from local: Client quit postfix/lmtp[26475]: 772A760B25: to=<not-a-user(a)test01.example.com>, relay=mailtest.example.com[private/dovecot-lmtp], delay=0.18, delays=0.17/0.01/0/0, dsn=4.3.0, status=undeliverable (host mailtest.example.com[private/dovecot-lmtp] said: 451 4.3.0 <not-a- user(a)test01.example.com> Internal error occurred. Refer to server log for more information. (in reply to RCPT TO command)) postfix/qmgr[27672]: 772A760B25: removed postfix/smtpd[26469]: NOQUEUE: reject: RCPT from remote- smtp.example.net[10.0.0.10]: 450 4.1.1 <not-a-user(a)test01.example.com>: Recipient address rejected: unverified address: ho st mailtest.example.com[private/dovecot-lmtp] said: 451 4.3.0 <not-a- user(a)test01.example.com> Internal error occurred. Refer to server log for more information. (in reply to RCPT TO command); from=<andreas.ntaflos(a)example.net> to=<not-a-user(a)test01.example.com> proto=ESMTP helo=<remote-smtp.example.net> postfix/smtpd[26469]: disconnect from remote-smtp.example.net[10.0.0.10] I've uploaded this log file excerpt for your viewing convenience to https://daff.pseudoterminal.org/misc/dovecot/failed_delivery.log More relevant information (doveconf -n, dovecot-ldap.conf) is found below. I can also provide a log excerpt from a successful delivery to an existing virtual user, if needed. To summarise: I want to use LMTP, dynamic address verification, a static user database and an LDAP password database. Can it be done without having to rely on the MTA (Postfix) to verify existing users? Thanks in advance! Andreas [1] http://wiki2.dovecot.org/HowTo/PostfixDovecotLMTP [2] http://wiki2.dovecot.org/LDA/Postfix dovecot-ldap.conf: uris = ldap://ldap.example.com:389 tls = yes tls_ca_cert_file = /etc/ssl/certs/ca-certificates.crt base = ou=virtualDomains,dc=example,dc=com dn = uid=dovecot,ou=services,dc=example,dc=com dnpass = xxx pass_attrs=uid=user, userPassword=password pass_filter=(&(objectClass=hostedAccount)(uid=%u)(accountEnabled=TRUE)) iterate_attrs = uid=user iterate_filter = (objectClass=hostedAccount) doveconf -n: https://daff.pseudoterminal.org/misc/dovecot/doveconf-n.txt -- Andreas Ntaflos Vienna, Austria GPG Fingerprint: 6234 2E8E 5C81 C6CB E5EC 7E65 397C E2A8 090C A9B4

2 4

Re: [Dovecot] Indexes.
by Robert Schetterer 03 Dec '10

03 Dec '10

Am 02.12.2010 14:53, schrieb Henrique Fernandes: > I have abou 9000 clients. many clients > > 500 GB of storage used small store anyway you shouldnt run into problems with that > > About the mail option at ocfs2 store creating, i guess the other guy > that format the storage system did not use. what a pitty , mail option help with small files performance like indexes and mail etc as far i remember > > We are looking into ocfs2 1.6 that was out few months ago. But we are > not able to get it running on or Centos5.5 yet. hm centos is more redhat style i speculate Red Hat GFS would have been the better choice is there a list at centos/redhat/ocfs you might can asked about bugs with your ocfs2/distro combination ? > > Are you talking abvout this optimizations? > > Dovecot supports reading a few fields from the <base filename>: > > * > > ,S=<size>: <size> contains the file size. Getting the size > from the filename avoids doing a stat(), which may improve the > performance. This is especially useful with Maildir++ quota > <http://wiki.dovecot.org/Quota/Maildir>. > > * > > ,W=<vsize>: <vsize> contains the file's RFC822.SIZE, ie. the > file size with linefeeds being CR+LF characters. If the > message was stored with CR+LF linefeeds, <size> and <vsize> > are the same. Setting this may give a small speedup because > now Dovecot doesn't need to calculate the size itself. > > A maildir filename with those fields would look something like: > 1035478339.27041_118.foo.org > <http://1035478339.27041_118.foo.org>,S=1000,W=1030:2,S as far i remember keep close to nfs recommands http://wiki2.dovecot.org/NFS FS caching problems NFS caching is a big problem when multiple computers are accessing the same mailbox simultaneously. The best fix for this is to prevent it from happening. Configure your setup so that a user always gets redirected to the same server (unless it's down). This also means that mail deliveries must be done by the same server, or alternatively it shouldn't update index files. Dovecot flushes NFS caches when needed if you set mail_nfs_storage=yes, but unfortunately this doesn't work 100%, so you can get random errors. Disabling NFS attribute cache helps a lot in getting rid of caching related errors, but this makes the performance MUCH worse and increases the load on NFS server. This can usually be done by giving actimeo=0 or noac mount option. Index files As described above, it's better to redirect users to the same server whenever possible. If you do this, it might also be a good idea to keep index files stored locally in that server. If user gets occasionally redirected to another server, the indexes will then be created locally there. This isn't a problem. However you might want to create a cronjob to delete old index directories. If you choose to keep the index files stored in NFS, you'll need to set mmap_disable=yes. Both the mmap_disable and indexing to NFS will result in a notable performance hit. If you're not running lockd you'll have to set lock_method=dotlock, but this degrades performance. Note that many NFS installations have problems with lockd. If you're beginning to get all kinds of locking related errors, try if the problems go away with dotlocking. ------------- but i agree, there should be more info with cluster file systems in the wiki perhaps Timo has time to send recommands by mail, i am not sure that mine are optimal ( whatever i have no problems yet ) > > > I will try send an image on the load of machine. > > > []'sf.rique > > > On Thu, Dec 2, 2010 at 11:25 AM, Robert Schetterer > <robert(a)schetterer.org <mailto:robert@schetterer.org>> wrote: > > Am 02.12.2010 14:10, schrieb Henrique Fernandes: > > With recomendation settings do you have ? > > http://wiki2.dovecot.org/MailLocation/SharedDisk > > and a few more optimizes about maildir > > > > how many clients ? > > i started the server not long ago so they are less yet ( about 100 > maildirs ) > but i have my own account in it which has massive mails ( 10 GB store > with over 1000 mails daily in out , and perhaps 10000 mails in store) > > > > > sorry, i did not say i use dovecot 2.0.6 > > looks fine, update to 2.0.8 if ready > > > did you use the mail option at ocfs2 store creation ? > > what os/distro do you use , i remember bugs with ocfs with some distro > versions > > > > > []'sf.rique > > > > > > On Thu, Dec 2, 2010 at 10:40 AM, Robert Schetterer > > <robert(a)schetterer.org <mailto:robert@schetterer.org> > <mailto:robert@schetterer.org <mailto:robert@schetterer.org>>> wrote: > > > > Am 02.12.2010 13:13, schrieb Henrique Fernandes: > > > Hello people! > > > > > > I have huge problems with IO wait becase dovecot configured > to use > > maildir > > > is under OCFS2 1.4. Now i have an question to OCFS2 each disk > > action is > > > really heavy becaue it has no index. > > > > > > Now i am thinking in what can be done to heltp my system to use > > less disk. > > > > > > Looking for index and etc in dovecot i found this, this > disables > > the index > > > file on disk and leave it on ram or it disable the index files ? > > > > > > If you really want to, you can also disable the index files > > completely by > > > appending :INDEX=MEMORY > > > > > > > > > I am only trying to get dovecot to work faster. Right now we > have > > to waing > > > some seconds to dovecot list all emails or read an email. > > > > > > I am also thinking in right index to an NFS but i don't know if > > this makes > > > any diferences in performance. > > > > > > Thanks to all! > > > > > > I use 3 servres wrinting on OCFS2 one is mailman, and other two > > are to > > > email, I have ipvs to load balance the conections. > > > > > > > > > []'sf.rique > > > > > > > hm , i have no problems with ocfs2 (1.4.3-1: amd64 ) on drbd > ubuntu > > lucid > > using dovecot vers 2 recommended settings for cluster file systems > > i have my index files in the maildir dir > > > > -- > > Best Regards > > > > MfG Robert Schetterer > > > > Germany/Munich/Bavaria > > > > > > > -- > Best Regards > > MfG Robert Schetterer > > Germany/Munich/Bavaria > > -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

3 2