- dovecot - dovecot.org

[Dovecot] Authentication woes - Couldn't drop privileges: Mail access not allowed for root
by Ralph Seichter 23 Aug '10

23 Aug '10

I'm currently trying to set up a Dovecot 2.0.0 server for backup purposes. There's an existing server which I successfully migrated to Dovecot 2.0.0, and it uses LDAP for authentication. For the backup server, which will not be exposed to users, I tried both PAM and PASSWD authentication, but all I are syslog entries like these: dovecot: imap-login: Login: user=<foo>, method=PLAIN, rip=[...], lip=[...], mpid=20059, TLS dovecot: imap(foo): Error: user foo: Couldn't drop privileges: Mail access not allowed for root dovecot: imap(foo): Error: Internal error occurred. Refer to server log for more information. Here is my current configuration: # doveconf -n # 2.0.0: /usr/local/dovecot-2.0/etc/dovecot/dovecot.conf # OS: Linux 2.6.35-gentoo-r1-v3 x86_64 Gentoo Base System release 2.0.1 auth_mechanisms = plain login base_dir = /var/run/dovecot/ listen = * mail_location = maildir:~/.maildir passdb { args = scheme=crypt /usr/local/dovecot-2.0/etc/dovecot/passwd driver = passwd-file } protocols = imap ssl_cert = </usr/local/dovecot-2.0/etc/dovecot/server.crt ssl_key = </usr/local/dovecot-2.0/etc/dovecot/server.key The password file contents: # cat /usr/local/dovecot-2.0/etc/dovecot/passwd foo:{CRYPT}xxx:1000:1000:Foo Backup:/home/foo:/bin/bash I searched the Dovecot Wiki and also tried MARC and Google, but I can't seem to find a solution for this problem. Could you please point me in the right direction? I have probably missed something. Thanks! -Ralph

2 5

[Dovecot] Dovecot 2.0 and BSDI 4.X
by The Doctor 23 Aug '10

23 Aug '10

All right, I am trying to migrating to 2.0 but running into problems. from my typescript: Script started on Wed Aug 18 23:24:58 2010 doctor.nl2k.ab.ca//usr/home/doctor$ tail -f /var/log/maillog | egrep dovecot Aug 18 23:25:31 doctor dovecot: master: Dovecot v2.0.0 starting up (core dumps disabled) Aug 18 23:25:31 doctor dovecot: log: Error: net_accept() failed: Invalid argument Aug 18 23:25:31 doctor dovecot: master: Warning: service(anvil): process_limit reached, client connections are being dropped quit ^C doctor.nl2k.ab.ca//usr/home/doctor$ /usr/doc veo cot/sbin/dovecot -n # 2.0.0: /usr/dovecot/etc/dovecot/dovecot.conf # OS: BSD/OS 4.3 i386 auth_cache_negative_ttl = 3600 s base_dir = /var/run/dovecot/ disable_plaintext_auth = no first_valid_uid = 100 listen = * login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c mail_debug = yes mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_log_prefix = %Us(%u): mdbox_rotate_size = 2048 passdb { args = /etc/master.passwd driver = passwd-file } protocols = pop3 imap service auth { executable = /usr/dovecot/libexec/dovecot/auth user = root vsz_limit = 256 } service imap-login { chroot = login client_limit = 256 executable = /usr/dovecot/libexec/dovecot/imap-login inet_listener imaps { address = 204.209.81.1 } process_limit = 128 process_min_avail = 3 service_count = 1 user = dovecot vsz_limit = 64 } service imap { executable = /usr/dovecot/libexec/dovecot/imap process_limit = 512 vsz_limit = 256 } service pop3-login { chroot = login client_limit = 256 executable = /usr/dovecot/libexec/dovecot/pop3-login inet_listener pop3s { address = 204.209.81.1 } process_limit = 128 process_min_avail = 3 service_count = 1 user = dovecot vsz_limit = 64 } service pop3 { executable = /usr/dovecot/libexec/dovecot/pop3 process_limit = 512 vsz_limit = 256 } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2 ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } userdb { args = /etc/passwd driver = passwd-file } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep imap_idle_notify_interval = 120 s imap_logout_format = bytes=%i/%o imap_max_line_length = 65536 mail_max_userip_connections = 10 mail_plugin_dir = /usr/dovecot/lib/dovecot/imap } protocol pop3 { mail_max_userip_connections = 3 mail_plugin_dir = /usr/dovecot/lib/dovecot/pop3 pop3_enable_last = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_format = %08Xu%08Xv } You have new mail in /var/mail/doctor doctor.nl2k.ab.ca//usr/home/doctor$ exit exit Script done on Wed Aug 18 23:26:07 2010 telneting into the ports work, but the clients seem to stuck in an infinite loop. -- Member - Liberal International This is doctor(a)nl2k.ab.ca Ici doctor(a)nl2k.ab.ca God, Queen and country! Never Satan President Republic! Beware AntiChrist rising! http://twitter.com/rootnl2k http://www.facebook.com/dyadallee Australia!! Vote to throw the REpublicans to the sharks!

5 10

[Dovecot] Over-quota bounces seeming to lack sender
by Dave Brenner 23 Aug '10

23 Aug '10

We're seeing an issue with 1.2.12 where over-quota rejection messages are appearing in the logs with <> as the sender. The sender of the original message sees the appropriate sender (postmaster@) on the rejection, but as the message makes its way through the postfix/amavis chain, I can see that the sender address is missing. Aug 20 10:55:56 inet1 amavis[21822]: [ID 702911 mail.info] (21822-05) Checking: rGDWxOHFPBdY <> -> <xxxx(a)toledotel.com> Aug 20 03:12:39 inet1 amavis[9724]: [ID 702911 mail.info] (09724-37) skip local delivery(3): <> -> <bad-header-quarantine> Aug 19 10:15:47 2010 (1570) xxxxxxxx-users: bounce message w/no discernable addresses: <dovecot-1282238146-79394-0@inet1> (that last one is from Mailman logs) Has anyone else run into this? -- Dave Brenner - david(a)toledotel.com The Toledo Telephone Company, Inc.

2 1

[Dovecot] imap, imaps, ports; config for secure-only service
by Ronald Leach 23 Aug '10

23 Aug '10

Hello, having difficulty setting up a 'secure-only' service on a non-standard port. Objective is to open a secure Dovecot service on an internet-visible port, while also using an insecure service for hosts on an internal network (so that one particular client which is not SSL/TLS-capable can continue to use the service). Checking wiki1 and wiki2, I think that port 143 can be used for a service in both encrypted and unencrypted operations. (Wiki2 describes how port 143 can be used with or without STARTTLS.) I've managed to run both TB/Vista, and KMail/Debian on 143 from local machines, and they seem to work fine. (Though they do only work if the clients are set to use 'unencrypted logins' such as KMail's 'clear text' setting, and TB's 'don't use secure authentication'.) Dovecot's SSL certificate on the server expires in 2028. But I cannot get my 'secure-only service' working at all. I've chosen port 10943 for that service, and have been testing from both KMail on the server, and TB/Vista on another local machine. Here's the config: protocol imap { # inet users, and also users presented from offsite via an SSH tunnel, # will use IMAP (any capability) on 143. listen = *:143 # 143 will not be reachable from outside the internal network (except # via an SSH tunnel) # # External users will be allowed only to use port 10943 (as forwarded # from the gateway), and will have to use SSL ssl_listen = *:10943 } Other settings include: #other settings protocols = imap imaps disable_plaintext_auth = no ssl_disable = no ssl_cert_file = /etc/ssl/certs/dovecot.pem ssl_key_file = /etc/ssl/private/dovecot.pem ssl_verify_client_cert = no ssl_cipher_list = ALL:!LOW ssl_require_client_cert = no ssl_username_from_cert = no mail_location = maildir:~/Maildir #log and debug settings mail_debug = yes auth_debug = yes Log from a successful session on port 143: Logs (using port 143, KMail on the server) 14:43:22 auth(default): client in: AUTH^I1^IPLAIN^Iservice=IMAP^Isecured^Ilip=127.0.0.1^Irip=127.0.0.1^Iresp=<hidden> 14:43:22 auth(default): client out: OK^I1^Iuser=ron 14:43:22 auth(default): master in: REQUEST^I1^I4057^I1 14:43:22 auth(default): master out: USER^I1^Iron^Isystem_user=ron^Iuid=1001^Igid=1001^Ihome=/home/ron 14:43:22 IMAP(ron): Effective uid=1001, gid=1001 14:43:22 IMAP(ron): maildir: data=/home/ron/Maildir 14:43:22 IMAP(ron): maildir: root=/home/ron/Maildir, index=/home/ron/Maildir, control=, inbox= 14:43:22 imap-login: Login: user=<ron>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, TLS Unsuccessful session Logs (using 10943, KMail on the server) - absolutely no sign of any authentication, and the client reports a timeout. 17:03:30 imap-login: Disconnected: Inactivity: rip=127.0.0.1, lip=127.0.0.1, TLS handshake 17:04:06 imap-login: Disconnected: rip=127.0.0.1, lip=127.0.0.1, TLS handshake 17:05:08 imap-login: Disconnected: Inactivity: rip=127.0.0.1, lip=127.0.0.1, TLS handshake 143 works fine, so Dovecot is (of course) perfectly good at managing the auth and service, so I must have something wrong in the config. I cannot see it. Could anyone share a config they've used for *secure-only* IMAP service on an internet-visible port? I'd like to compare the settings. regards, Ron

4 3

[Dovecot] Build failure building dbox and gnutls
by Elisamuel Resto 23 Aug '10

23 Aug '10

Hello! I'm having two issues building dovecot, one is with dbox storage, and another building gnutls as the SSL backend (builds fine with openssl). Software versions are Dovecot v2.0.0, GnuTLS 2.8.6 and OpenSSL 1.0.0a Configure: ./configure --prefix=/usr --sysconfdir=/etc/dovecot --localstatedir=/var --libexecdir=/usr/lib --with-moduledir=/usr/lib/dovecot/modules --with-zlib --with-sqlite --with-ssl=openssl --with-ssldir=/etc/ssl --with-gssapi --with-pam --with-bzlib --with-docs --without-mysql --without-vpopmail --without-sia --without-bsdauth --with-libcap --with-ioloop=epoll --with-storages=maildir,mbox,dbox,mdbox For the dbox build error, the log states: libdovecot-storage.so: undefined reference to `dbox_storage' Configure: http://pastie.org/1106301 - Make: http://pastie.org/private/qtt76kxomhmwqwii20oroq Configure: ./configure --prefix=/usr --sysconfdir=/etc/dovecot --localstatedir=/var --libexecdir=/usr/lib --with-moduledir=/usr/lib/dovecot/modules --with-zlib --with-sqlite --with-ssl=gnutls --with-ssldir=/etc/ssl --with-gssapi --with-pam --with-bzlib --with-docs --without-mysql --without-vpopmail --without-sia --without-bsdauth --with-libcap --with-ioloop=epoll For the gnutls build error, the log states quite a few errors, so see the linked logs. Configure: http://pastie.org/1108356 - Make: http://pastie.org/private/dxmmmopnodptut77o6fx2g -- Elisamuel Resto <ryuji(a)codemages.net> http://www.simplysam.us/ - Simply Sam Blog

3 4

[Dovecot] Mobile phone client detects 'PUSH' server
by Ron Leach 22 Aug '10

22 Aug '10

Does Dovecot really provide a 'PUSH' email service? The mobile phone client (standard with SonyEricsson C510, in this case) reported that the server (our Dovecot installation) offered PUSH email service. I hadn't seen that in the documentation that I'd read and had understood the client-server protocol to be a client-PULL service, in that the clients decide which folders to retrieve, and check what messages there are and fetch any new messages. The clients we've used so far have settings for frequency of these checks. I didn't explore the option further, yet, being unsure whether there was a genuine PUSH service from our server or whether the phone was using a proxy somewhere (not ours) which would provide an intermediate fetch/aggregation/'pull then push' service of some sort - perhaps similar to the public offers from Yahoo etc. regards, Ron

2 2

[Dovecot] sieve rule help
by Piyush Joshi 21 Aug '10

21 Aug '10

Dear All, I am using dovecot-2.0.0 version and all my sieve filters are working perfectly except the following one. I am trying to flag message coming from jagdish(a)example.net mail id. require ["fileinto","envelope","reject","vacation","imap4flags","relational","comparator-i;ascii-numeric","regex","body","date"]; if address :contains "From" "jagdish(a)example.net" { keep :flags ["Flagged"] ; } Is it possible to make it work without using addflag to add a flag ?

2 1

[Dovecot] dsync and active-active fault tolerance mail servers
by Luigi Rosa 21 Aug '10

21 Aug '10

I would like to set up an active-active fault tolerance couple of mail servers. Is the following procedure correct? Let's suppose I want to set up two servers for acme.com, mail1.acme.com and mail2.acme.com I declare both servers as MX in DNS configuration. Mailbox are stored in maildir with a single UID/GID owner for all the maildir files Userbase is MySQL, user tables are replicated using MySQL tools; in this case, the replica is one way, that is mail1.acme.com holds the "master" copy of MySQL tables and mail2.acme.com hold the "copy". The replica is done via dsync with a procedure like this executed on mail1.acme.com server: foreach mailbox { dsync mirror mailbox } Where mailbox is the full mail address, used also as a login name for authentication. My goal is to allow users to connect the mail servers they like and have all their mail (a 10/15 minute of sync delay is acceptable). This is the theory, now some questions. 1) Use Linux user/group owner of the files and directories are the same on both hosts (they are both foobar), but have different numeric ID, in one host foobat has UID 1234 and on the other host foobar has UID 2345. Is this an issue? 2) Mail location path is the same on both hosts, but where does dsync get it? Does dsync get all the information from the userbase defined in dovecot.conf (and other included files)? 3) Have I to scan the entire userbase and execute dsync for each user, or is there a trick to do for every user with a single command? 4) How often is good to run the synchronization? 5 minutes? 10? 15? 5) What is the correct command line to invoke dsync in this scenario? 6) Does anyone else tried this? :) Thank you. Ciao, luigi -- / +--[Luigi Rosa]-- \ (1) Everything depends. (2) Nothing is always. (3) Everything is sometimes.

2 2

[Dovecot] sieve_after scripts with virtual domains
by Ciro Scognamiglio 21 Aug '10

21 Aug '10

Hi all, first of all I am new to the list, so hello everyone :) I recently encountered an annoying problem with sieve, I am using dovecot version 1.2.13 on centos 5.5, the packages installed are the following: dovecot-sieve-0.1.17-5.el5 dovecot-managesieve-0.11.11-0_4.el5 dovecot-1.2.13-1_111.el5 the mail server is configured with virtual hosts (mysql), also the sieve plugin and managesieve are active. Users can create their own filters through roundcube and everything works fine. I also put two script to be executed before all sieve scripts in sieve_before, they just move any SPAM or VIRUS tagged message to a Junk folder. The problem is that while this works for my domain (that is also the server domain) it doesn't for the others domains, it seems the sieve_before scripts get ignored. I made many tests with the domains I am hosting, if I send a spam message (I am using the spamassassin test messages) it gets marked as SPAM, but gets only moved to the junk folder if the recipient is @cslash.net (that is my domain). here is some config extracts: === dovecot.conf === plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_before = /srv/mail/sieve-before sieve_after = /srv/mail/sieve-after } ======= /srv/mail $ cat sieve-before/spam.sieve require "fileinto"; if header :contains "X-Spam-Flag" "YES" { fileinto "Junk"; } P.S. The sieve scripts are all compiled.

1 0

[Dovecot] pigeonhole sieve imapflags bug
by Tim Traver 21 Aug '10

21 Aug '10

Hi all, ok, I just instealled the dovecot 2.0.0 release, and the latest mercurial pigeonhole source. All is well, except for a particular sieve rule that may not be working right. It is a simple rule that looks like this : require ["fileinto","imap4flags"]; # rule:[Past Due Notices] if allof (header :contains "Subject" "Account Past Due Notice") { fileinto "Billing"; setflag "\\Seen"; stop; } Anyways, what happens is the message that matches that rule does indeed get moved to the "Billing" folder, but it does not get marked as read. BUT! if I change the order of the actions to mark it as read first, then move it to the "Billing" folder, it does both of those actions... Is that the way it is supposed to work? or is that a bug? Thanks, Tim.

3 2

[Dovecot] Logged out format in log
by Jerrale G 21 Aug '10

21 Aug '10

I was naive to not check the log more thoroughly for changes. I need "dovecot: imap(jerrale(a)sheltoncomputers.com): Disconnected: Logged out bytes=1921/2983" to say the rip (ip address) as 1.2.x did; how do I accompish such? Jerrale G SC Senior Admin SC Senior Admin

2 2

[Dovecot] Mobile phone client - first access
by Ron Leach 21 Aug '10

21 Aug '10

Ladies and gentlemen, good morning! With my first post to the list, may I begin by saying how impressed I have been by Dovecot's performance on our Debian server. We've configured it to run with Exim and Fetchmail, using Dovecot to manage professional and domestic emails for a small home office, serving a number of Windows and Linux clients both on the internal network and, when working overseas, via SSH tunnels back to the Debian server. Dovecot's performance has been, simply, rock-solid; a very impressive piece of work by Timo and all those supporting him. My ordinary mobile phone - a Sony Ericsson C510 - includes an email client with IMAP capability (and none, TLS, or SSL encryption). Configured to access our server across the mobile carrier's network, the results surprised me; they were not what I expected. The first surprise was, it worked. More seriously, the messages it retrieved were not what I expected; the phone received around 58 messages, but from the 'inbox', the 'junk' box, and a couple from a 'project' box. I had expected to only retrieve the messages that were in the 'inbox'. How does Dovecot 'decide' what messages to give the phone client? [I think I may have the wrong 'mental model' of what should have happened, and would appreciate being put right.] Is it possible to configure Dovecot to only serve specific boxes? The mobile phone client is extremely simple - it does not have the facility to 'browse' the folders, it only has an inbox, sentbox, etc; I have wondered whether there might be a 'jar' email client that is richer, and which might help - I will look for something anyway. But I was impressed that my mobile phone could check our home and office email while offsite; if I can get that working it will save having to fire up the laptop at each opportunity. Thanks very much for reading this far, and, also, thanks everyone who takes the time to contribute to the list, regards, Ron

3 5

[Dovecot] Director mailserver health monitoring script
by Brad Davidson 20 Aug '10

20 Aug '10

Timo et al; The last bit of functionality that the Dovecot director is missing compared to our existing load balancers is mailserver health monitoring. As I understand it, if a mailserver goes down, Dovecot does not take any action to route connections around the offline node, and will keep trying to proxy clients to it. Since we're hoping to cut over to Directors soon, but don't want to lose any functionality, I've hacked up a script that: * Polls the local director for a list of mailservers * Performs health checks against a list of ports on each mailserver * Disables or enables mailservers (by altering the vhost count) as necessary I've published the script on github in hopes that it might be useful to others: http://github.com/brandond/poolmon/ Maybe someday Dovecot will do something like this internally and I won't need the script any more, but for now I'm pretty happy with it. -Brad

2 2

[Dovecot] Weird Problem with subscriptions
by Harry Lachanas 20 Aug '10

20 Aug '10

Dovecot Version 1.2.11 Created Public Namespaces and folders idx and control are created in each users Maildir/ aka namespace public { prefix=Public/ separator = / location = maildir:/home/Public-Folders-Mail/Public-RO:INDEX=~/Maildir/p1-idx:CONTROL=~/Maildir/p1-ctrl hidden = no subscriptions = no inbox = no } The problem occurs after a user has subscribed to The Folder dovecot complaints about ... dovecot: IMAP(grharry): open(/home/grharry/Maildir/p1-idx/.production/dovecot.index.log) failed: Permission denied (euid=1004(grharry) egid=1000(vmail) missing +x perm: /home/grharry/Maildir/p1-idx/.production) After changing manually the perm in the above dir +x all works fine. I've tried unsubscribing and deleting the p1-ctl p1-idx dir structures The same problem occured ( This hapens in the users own Maildir ) Your help will be appreciated Regards Harry

2 3

[Dovecot] Disable APOP challenge in POP3 login greeting
by Brad Davidson 20 Aug '10

20 Aug '10

Timo, It looks like Dovecot 2.0 appends an APOP challenge to the POP3 greeting even if APOP is not an enabled auth mechanism. Is there any way to disable this? We don't support APOP, and the challenge includes the private hostname of the server, which we'd rather not have in the banner. It looks like get_apop_challenge in 1.2 returns NULL if APOP isn't supported, which causes auth_client_ready to omit the banner... but I see no such check (in fact, no way for get_apop_challenge to return NULL) in 2.0, even though pop3_client_send_greeting tests for it. Thanks, -Brad

2 2

[Dovecot] mailbox utilities
by Terry 19 Aug '10

19 Aug '10

Hello, Are there any utilities that will spit out statistics about some mailboxes I have on my server? For example, how many messages are in each mailbox? They appear to be in mbox format (default?). Thanks!

2 1

Re: [Dovecot] mailbox utilities
by Kádár Tamás 19 Aug '10

19 Aug '10

P.S. It's not *exactly* what you are looking for -- but it can still spit you out some useful and semi-related statistics. -----Original Message----- From: "Kádár Tamás" tamas.kadar(a)espell.com Date: Thu, 19 Aug 2010 19:37:01 To: <dovecot(a)dovecot.org> Reply-To: tamas.kadar(a)espell.com Subject: Re: [Dovecot] mailbox utilities If you happen to use Postfix, you can use pflogsumm which is crude, but works. ------Original Message------ From: Terry Sender: dovecot-bounces+tamas.kadar=espell.com(a)dovecot.org To: dovecot(a)dovecot.org Subject: [Dovecot] mailbox utilities Sent: Aug 19, 2010 21:25 Hello, Are there any utilities that will spit out statistics about some mailboxes I have on my server? For example, how many messages are in each mailbox? They appear to be in mbox format (default?). Thanks!

1 0

Re: [Dovecot] mailbox utilities
by Kádár Tamás 19 Aug '10

19 Aug '10

If you happen to use Postfix, you can use pflogsumm which is crude, but works. ------Original Message------ From: Terry Sender: dovecot-bounces+tamas.kadar=espell.com(a)dovecot.org To: dovecot(a)dovecot.org Subject: [Dovecot] mailbox utilities Sent: Aug 19, 2010 21:25 Hello, Are there any utilities that will spit out statistics about some mailboxes I have on my server? For example, how many messages are in each mailbox? They appear to be in mbox format (default?). Thanks!

1 0

[Dovecot] dovecot 1.2 and quota_rules from AD
by Christian Lyra 19 Aug '10

19 Aug '10

Hi I´m trying to figure how to proper configure postfix+dovecot to enforce quotas from a AD (ldap). I´m using the following configuration: dovecot.conf: ... protocol lda { mail_plugins = quota .. } auth default { passdb ldap { args = /etc/dovecot/dovecot-ldap-pass.conf } userdb ldap { args = /etc/dovecot/dovecot-ldap.conf } ... } plugin { quota = maildir:User quota #quota_rule = *:storage=2M // tried with and without this line } dovecot-ldap.conf: ... user_attrs = sAMAccountName=mail=maildir:/var/vmail/%$/Maildir, quotaMail=quota_rule=*:storage=%$ user_filter = (&(objectClass=person)(|(mail=%u)(sAMAccountName=%u))) pass_attrs = sAMAaccountName=user,userPassword=password pass_filter = (&(objectClass=person)(sAMAaccountName=%u)) Quotas are set by the quotaMail in AD. And here is the log: Aug 9 11:41:37 vm29 dovecot: auth(default): master in: USER#0111#011testeti(a)teste.mydomain#011service=deliver Aug 9 11:41:37 vm29 dovecot: auth(default): ldap(testeti(a)teste.mydomain): user search: base=dc=mydomain scope=subtree filter=(&(objectClass=person)(| (mail=testeti@teste.mydomain)(sAMAccountName=testeti@teste.mydomain))) fields=sAMAccountName,quotaMail Aug 9 11:41:37 vm29 dovecot: auth(default): ldap(testeti(a)teste.mydomain): result: sAMAccountName(mail=maildir:/var/vmail/%$/Maildir)=maildir:/var/vmail/testeti/Maildir Aug 9 11:41:37 vm29 dovecot: auth(default): master out: USER#0111#011testeti@teste.mydomain#011mail=maildir:/var/vmail/testeti/Maildir Aug 9 11:41:37 vm29 dovecot: deliver(testeti(a)teste.mydomain): auth input: mail=maildir:/var/vmail/testeti/Maildir Aug 9 11:41:37 vm29 dovecot: deliver(testeti(a)teste.mydomain): Quota root: name=User quota backend=maildir args= Aug 9 11:41:37 vm29 dovecot: deliver(testeti(a)teste.mydomain): maildir: data=/var/vmail/testeti/Maildir Aug 9 11:41:37 vm29 dovecot: deliver(testeti(a)teste.mydomain): maildir++: root=/var/vmail/testeti/Maildir, index=, control=, inbox=/var/vmail/testeti/Maildir Aug 9 11:41:37 vm29 dovecot: deliver(testeti(a)teste.mydomain): Namespace : Using permissions from /var/vmail/testeti/Maildir: mode=0700 gid=-1 Aug 9 11:41:37 vm29 dovecot: deliver(testeti(a)teste.mydomain): msgid=<201008091142.53089.lyra(a)pop-pr.rnp.br>: saved mail to INBOX There´s no quota_rule in logs... uncomenting the line quota_rule = *:storage=2M I got quota, bu only this static one, and not per-user. What I´m doing wrong? Btw... with static configuration the maildirsize file is created, but without static configuration it´s not (well.. no quota_rule...). thanks in advance, -- Christian Lyra POP-PR - RNP

2 3

[Dovecot] pigeonhole and utf-8 error
by Xavier Pons 19 Aug '10

19 Aug '10

Hi, now, I'm working with the last version of dovecot and pigeonhole sieve, and when apply a sieve filter on a new message, and it try to move this mail to a folder with special character like accent give me the error 'mailbox name not utf-8: ...' >Aug 17 09:22:40 imap1 dovecot: lmtp(19629,miel): Error: kea6K484akytTAAAJBW4rA: sieve: msgid= ><1099311971.505.1282029699154.JavaMail.open-xchange(a)o.uib.es>: failed to store into mailbox 'atenció': >mailbox name not utf-8: atenció dovecot it's working without problem on this folder. I suppose it's a misconfiguration, but I don't find where... Xavier

4 10

[Dovecot] Dovecot lda with qmail
by Piyush Joshi 19 Aug '10

19 Aug '10

Dear All, According to my setup i can not call |/var/qmail/bin/preline -f /usr/local/libexec/dovecot/dovecot-lda from my /var/qmail/control/defaultdelivery file, Instead making a perl file which will call the same for delivery of mails. If i put the following code in my mail.pl |/var/qmail/bin/preline -f /usr/local/libexec/dovecot/dovecot-lda then it throws error in running file from command line. Warning: Use of "-f" without parentheses is ambiguous at /var/qmail/bin/mail.pl line 2. syntax error at /var/qmail/bin/mail.pl line 2, near "|" Execution of /var/qmail/bin/mail.pl aborted due to compilation errors. content of mail.pl #!/usr/bin/perl |/var/qmail/bin/preline -f /usr/local/libexec/dovecot/dovecot-lda Any help will be useful for me. Thanks

2 1

[Dovecot] EVERYONE USING DOVECOT PLEASE SIGN: Thanks, Administrators of Dovecot!
by Jerrale G 19 Aug '10

19 Aug '10

With the release of dovecot 2.0, the community of the Dovecot mailling list, and us at Shelton Computers, would sincerely like to thank the developers of Dovecot. For, if it were not for you, we would be stuck with Courier and would not have the impressive features of Sieve, as opposed to the unmanageable scripts, by end users, of maildrop. *Our gratitude goes to, but not limited to:* *Timo Sirainen and Charles Marcus* *We apologize if we have missed anyone and ask that EVERYONE using dovecot would express their thanks and gratitude by signing this thread, to also include any people beyond the mentioned.* Please, Mr. Sirainen, make a donation link as we have tried to find one on dovecot.org! Sincerely, Jerrale Gayle, Senior Technical Admin of Shelton Computers

16 20

[Dovecot] dovecot-lda logging
by Nishant Limbachia 19 Aug '10

19 Aug '10

Hi everyone, I'm using Postfix and Dovecot with dovecot-lda used for local delivery. I've successfully migrated from 1.2.13 to 2.0.0 however I have a little problem with dovecot-lda logging. With version 1.2.13, I use to log dovecot-lda to /var/log/dovecot-lda.log with world-writable mode. With version 2.0.0, postfix complains: "Can't open log file /var/log/dovecot.log: permission denied". This is understandable because my dovecot.log file is 0600 mode. My question is how do I retain the 1.2.13 functionality of logging dovecot-lda to /var/log/dovecot-lda.log. I've read the LDA.txt in the wiki documentation and it states I can override log_path & info_log_path like this: protocol lda { log_path = /var/log/dovecot-lda.log info_log_path = /var/log/dovecot-lda.log } What I don't know is where to add that segment. Should I add it to 10-logging.conf or 15-lda.conf? Right now I've added that to both the files but I still see the postfix permission denied message. I will appreciate if someone can help out. Thanks! BTW, Great work Timo!!! Thank you very much for a great piece of software!

2 4

[Dovecot] Linux should be as easy as Windows
by Dennis Clarke 19 Aug '10

19 Aug '10

>From a "Standards" thread I saw this : "Linux should be as easy as Windows" I would like to point out that this is a thinking problem. A shift in thinking is required. That should say : "Open source and Free software should be as easy as Windows" In this way we allow someone running BSD, Solaris or some port of Debian to an old Dec AlphaServer will have the same level of functionality provided standards are adhered to. Once programmers begin to see everything in the light of Linux then we can also kiss goodbye the opportunity for portability to other OS types. Dennis

10 12

[Dovecot] Pigeonhole: error while loading shared libraries
by Sebastian Köhler 19 Aug '10

19 Aug '10

Hi, I built pigeonhole from the hg repo for Dovecot 2.0. Local sieve scripts work fine. But as soon as I try to connect via managesieve I get this errror: managesieve-login: Error: dovecot/managesieve-login: error while loading shared libraries: libdovecot-login.so.0: cannot open shared object file: No such file or directory My dovecot install is in /usr/lib/dovecot and I had to symlink the libs in the dovecot folder to /usr/lib to make managesieve work. My configure options were: "--prefix=/usr --with-dovecot=/usr/lib/dovecot" Sebastian -- The best thing about a boolean is even if you are wrong, you are only off by a bit.

2 4

[Dovecot] OT [Fwd: Fwd: Re: EVERYONE USING DOVECOT PLEASE SIGN: Thanks, Administrators of Dovecot!]
by Noel Butler 18 Aug '10

18 Aug '10

CharlesMarcus LOL, you kinda contradicted yourself here charlie boy and personal RBL? yup, but its not just used by me, its used by a few if you read the link, a few involving millions of emails a day, but shouldnt be a problem giving the geographical locations... and lied? list msgs caught in spam rules, I guess you dont know how to configure SA URI's... now, please stop trying to avoid bans or i shall notify your isp you have violated their T%C ------- Forwarded Message -------- From: Charles <libertytrek(a)gmail.com> To: noel.butler(a)ausics.net Subject: Fwd: Re: [Dovecot] EVERYONE USING DOVECOT PLEASE SIGN: Thanks, Administrators of Dovecot! Date: Wed, 18 Aug 2010 07:52:35 -0400 So, you're a liar as well. You lied when you said my messages were getting caught in your anti-spam filter. They weren't, they were getting blocked by your silly little personal rbl. If you weren't blocking list traffic, you would have seen that I already corrected the record on that myself. Don't bother replying - I won't be rejecting your messages on this account, I just give them the attention they deserve (straight to the shit-can).

3 2

[Dovecot] Unexpectedly lost message
by Tom Goerger 18 Aug '10

18 Aug '10

Hi, We're having some issues with certain messages not being able to be read by Dovecot. Can anyone tell me under what conditions the error messages below could be caused? Aug 17 15:58:26 server.tc.umn.edu imap(user): : [ID 887855 local6.error] Next message unexpectedly lost from 1913995 Aug 17 15:58:26 server.tc.umn.edu last message repeated 2 times Aug 17 15:58:26 server.tc.umn.edu imap(user): : [ID 107833 local6.crit] Panic: file istream.c: line 76: assertion failed: (_stream->skip != _stream->pos) Aug 17 15:58:26 server.tc.umn.edu dovecot: [ID 684838 local6.error] child 13169 (imap) killed with signal 6 Thanks, -- Tom Goerger University of Minnesota - Internet Services

2 1

[Dovecot] rare index cache error with dovecot 1.2.10
by Wolfgang.Friebel＠desy.de 18 Aug '10

18 Aug '10

Hi, since some time for a single user updating the Maildir/dovecot.index.cache file produced errors whenever it needed to be updated: Aug 15 04:16:40 imapsrv dovecot: deliver(user): pwrite() failed: File too large Aug 15 04:16:40 imapsrv dovecot: deliver(user): file_set_size() failed with index cache file /var/spool/mail/mamuzic/Maildir/dovecot.index.cache: File too large The file itself was 55115776 bytes and a test program using pwrite with any reasonable size or offset does not produce the EFBIG error. Looking to the file contents the start of the file looks correct to me ( according to src/lib-index/mail-cache-private.h ) and despite of the error message the file gets updated and contains always the headers of the most recent incoming mail near the end of the file. After removing the file the cache was rebuilt properly (currently at 9MB). As this happened only for a single user out of approx 500 and after more than one year of using dovecot without any other problems I guess this is a very rare case. As pwrite tests do not show the error this seems not to be an issue with low file limits (as suggested in another mail on this topic) but maybe a lookup of corrupt addresses from the index.cache. I have saved the dovecot.index.cache, but as it is rather large (55MB) and does contain a lot of privacy information I would rather not make it accessible. Is there something I can further check to see whether dovecot is missing a sanity check? -- Wolfgang Friebel Deutsches Elektronen-Synchrotron DESY Phone/Fax: +49 33762 77372/216 Platanenallee 6 Mail: Wolfgang.Friebel AT desy.de D-15738 Zeuthen Germany

2 1

[Dovecot] REpeated e-mail
by The Doctor 18 Aug '10

18 Aug '10

Using 1.2.11 I am getting some people repeating that they are getting repeated POP3 e-mails. My configuration is # 1.2.11: /usr/dovecot/etc/dovecot.conf # OS: BSD/OS 4.3 i386 base_dir: /var/run/dovecot/ protocols: pop3 pop3s imap imaps ssl_listen: 204.209.81.1 ssl_cipher_list: ALL:!LOW:!SSLv2 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/dovecot/libexec/dovecot/imap-login login_executable(imap): /usr/dovecot/libexec/dovecot/imap-login login_executable(pop3): /usr/dovecot/libexec/dovecot/pop3-login mail_max_userip_connections(default): 10 mail_max_userip_connections(imap): 10 mail_max_userip_connections(pop3): 3 first_valid_uid: 100 mail_location: mbox:~/mail:INBOX=/var/mail/%u dbox_rotate_days: 0 mail_executable(default): /usr/dovecot/libexec/dovecot/imap mail_executable(imap): /usr/dovecot/libexec/dovecot/imap mail_executable(pop3): /usr/dovecot/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/dovecot/lib/dovecot/imap mail_plugin_dir(imap): /usr/dovecot/lib/dovecot/imap mail_plugin_dir(pop3): /usr/dovecot/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_no_flag_updates(default): no pop3_no_flag_updates(imap): no pop3_no_flag_updates(pop3): yes pop3_enable_last(default): no pop3_enable_last(imap): no pop3_enable_last(pop3): yes pop3_save_uidl(default): no pop3_save_uidl(imap): no pop3_save_uidl(pop3): yes pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: executable: /usr/contrib/libexec/dovecot/dovecot-auth passdb: driver: passwd-file args: /etc/master.passwd userdb: driver: passwd userdb: driver: passwd-file args: /etc/passwd -- Member - Liberal International This is doctor(a)nl2k.ab.ca Ici doctor(a)nl2k.ab.ca God, Queen and country! Never Satan President Republic! Beware AntiChrist rising! http://twitter.com/rootnl2k http://www.facebook.com/dyadallee Australia!! Vote to throw the REpublicans to the sharks!

3 2

[Dovecot] Error: Index file too large ? 904 bytes ?
by Dennis Clarke 18 Aug '10

18 Aug '10

My 1.2.13 build is giving me errors based on the same conf file that was working perfectly for 1.2.12 : Aug 18 03:28:27 IMAP(dclarke): Error: Index file too large: /var/mail/dclarke/dovecot.index Aug 18 03:28:27 IMAP(dclarke): Fatal: block_alloc(2147483648): Out of memory Aug 18 03:28:27 dovecot: Error: child 12560 (imap) returned error 83 (Out of memory - see mail_process_size setting) The file in question is 904 bytes in size : bash-4.1# ls -l /export/home/dclarke/mail/.Sent/dovecot.index -rw------- 1 dclarke csw 904 Aug 4 16:05 /export/home/dclarke/mail/.Sent/dovecot.index So this seems insane. SO I made sure the conf file had this in it : mail_process_size = 256 I then restart the daemon and see this : Aug 18 03:37:02 IMAP(dclarke): Fatal: block_alloc(1073741824): Out of memory Aug 18 03:37:02 dovecot: Error: child 12620 (imap) returned error 83 (Out of memory - see mail_process_size setting) Aug 18 03:37:07 IMAP(dclarke): Error: Index file too large: /export/home/dclarke/mail/.Sent/dovecot.index Aug 18 03:37:07 IMAP(dclarke): Warning: Created dotlock file's timestamp is different than current time (837089755 vs 1282102627): /export/home/dclarke/mail/.Sent/dovecot-uidlist Aug 18 03:37:07 IMAP(dclarke): Fatal: block_alloc(1073741824): Out of memory Aug 18 03:37:07 dovecot: Error: child 12622 (imap) returned error 83 (Out of memory - see mail_process_size setting) Aug 18 03:37:09 IMAP(dclarke): Error: Index file too large: /export/home/dclarke/mail/.Sent/dovecot.index Aug 18 03:37:09 IMAP(dclarke): Warning: Created dotlock file's timestamp is different than current time (527779909 vs 1282102629): /export/home/dclarke/mail/.Sent/dovecot-uidlist Aug 18 03:37:09 IMAP(dclarke): Fatal: block_alloc(1073741824): Out of memory Aug 18 03:37:09 dovecot: Error: child 12624 (imap) returned error 83 (Out of memory - see mail_process_size setting) Sure enough dovecot catches a timestamp issue : bash-4.1# date Wed Aug 18 03:39:24 GMT 2010 bash-4.1# ls -lapE /export/home/dclarke/mail/.Sent/dovecot-uidlist -rw------- 1 dclarke csw 1806 2010-08-16 13:52:16.442510077 +0000 /export/home/dclarke/mail/.Sent/dovecot-uidlist bash-4.1# touch /export/home/dclarke/mail/.Sent/dovecot-uidlist bash-4.1# ls -lapE /export/home/dclarke/mail/.Sent/dovecot-uidlist -rw------- 1 dclarke csw 1806 2010-08-18 03:39:53.263345256 +0000 /export/home/dclarke/mail/.Sent/dovecot-uidlist However the inability to deal with a 904 byte file is a bit of an issue here. Anyone know why mail_process_size = 256 is the wrong thing to look at ? Dennis

2 2

[Dovecot] Extension for sorting mails by Displayname
by Michael Kliewe 18 Aug '10

18 Aug '10

Hi everybody, first of all, thanks Timo for version 2.0. Currently I want to sort mails server-side by displayname of FROM and TO. There is an extension for it, but I think dovecot does not support it at the moment. It is defined in RFC 5957: https://www.tools.ietf.org/html/rfc5957 Is there an dovecot extension for it, how can I get that running? Michael

2 2

Re: [Dovecot] wake up getamail on imap request
by Timo Sirainen 18 Aug '10

18 Aug '10

On Wed, 2010-08-18 at 14:28 +0200, Peter Dungel wrote: > The only issue I'm still facing is, that I don't like to run getmail as a > cronjob that connects to my online mailboxes every minute or so, I'd rather > want it to do so every thirty minutes and whenever I request so by fetching > my mails at my mailclient (e.g. outlook), I've font the Fetchmail Wakeup > plugin, but according to the description this only works for version 1.1.x > and 1.2.x but I'm running 1.0.13. You could create a plugin that triggers getmail every time IMAP's STATUS command is sent. Or probably best to do it on mailbox_opened hook (in v2.0).

1 0

Re: [Dovecot] wake up getamail on imap request
by William Blunn 18 Aug '10

18 Aug '10

On 18/08/2010 13:28, Peter Dungel wrote: > i've set up a little mailserver for my homeoffice, and after some > problems everything works fine for me, I've some virtual users which > get their mail delivered via getmail, and I can access my mails from > my windows mailclient. > > The only issue I'm still facing is, that I don't like to run getmail > as a cronjob that connects to my online mailboxes every minute or so, > I'd rather want it to do so every thirty minutes and whenever I > request so by fetching my mails at my mailclient (e.g. outlook), I've > font the Fetchmail Wakeup plugin, but according to the description > this only works for version 1.1.x and 1.2.x but I'm running 1.0.13. > > Anyone has any idea how to solve this or has a workaround? Upgrade to 1.1.x or 1.2.x? I believe that many people consider 1.0.x to be hideously ancient. I believe that many people on this list will be significantly reluctant to help you with anything before 1.2.x. Version 2.0.0 was declared the current release version last Monday (16 Aug 2010), with the previous current release version before that being 1.2.13. I believe that many people on this will not consider "But My Distro Provides Version X!" to be a valid excuse. Find a more up-to-date binary package, upgrade your distro, install from source; there is always a way. Bill

1 0

[Dovecot] wake up getamail on imap request
by Peter Dungel 18 Aug '10

18 Aug '10

Hi, i've set up a little mailserver for my homeoffice, and after some problems everything works fine for me, I've some virtual users which get their mail delivered via getmail, and I can access my mails from my windows mailclient. The only issue I'm still facing is, that I don't like to run getmail as a cronjob that connects to my online mailboxes every minute or so, I'd rather want it to do so every thirty minutes and whenever I request so by fetching my mails at my mailclient (e.g. outlook), I've font the Fetchmail Wakeup plugin, but according to the description this only works for version 1.1.x and 1.2.x but I'm running 1.0.13. Anyone has any idea how to solve this or has a workaround? Thanks Petr

1 0

[Dovecot] Upgrade to 2.0 - Not so smooth
by Marc Perkel 18 Aug '10

18 Aug '10

Starting Dovecot Imap: Fatal: service(pop3-login) User doesn't exist: dovenull Just some real time feedback. I don't know what dovenull user is or why it is necessary.

14 25

[Dovecot] Problem with compile
by Mišel Mešnjak 18 Aug '10

18 Aug '10

Hi! I have a problem compiling v2.0 of dovecot mail server on one old server running RHEL 3. This is error messaage I get (googled for it and have not found anything useful): passdb-vpopmail.o(.text+0x39a): In function `vpopmail_preinit': /root/dovecot-2.0.0/src/auth/passdb-vpopmail.c:185: undefined reference to `vauth_load_module' collect2: ld returned 1 exit status make[3]: *** [auth] Error 1 make[3]: Leaving directory `/root/dovecot-2.0.0/src/auth' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/root/dovecot-2.0.0/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/root/dovecot-2.0.0' make: *** [all] Error 2 Can someone point me in the right direction? Thanks and bye!

3 2

[Dovecot] Delete user data from Dovecot server
by Thiago Henrique 18 Aug '10

18 Aug '10

Hello, I'm testing Dovecot 2.0. I plan to use Dovecot 2.0 with thousands of domains per server. My user base is under virtual MySQL. when I add a user in the database, it is automatically created in the structure of Dovecot at first login. Is there a easy way to delete a user ? Thank you. -- Atenciosamente, Thiago Henrique (21)2233-5950 ramal 27 Infra Estrutura Linux Hostnet Internet - www.hostnet.com.br Digirati Telecomunicações - www.digirati.com.br

3 2

[Dovecot] reverting back to 1.2.12
by Dennis Clarke 18 Aug '10

18 Aug '10

ver 1.2.13 is also tossing these : Aug 18 03:37:49 dovecot: Warning: I/O leak: 805c600 (27) Aug 18 03:37:49 dovecot: Warning: I/O leak: 805c600 (25) Aug 18 03:37:49 dovecot: Warning: I/O leak: 805c600 (23) I have reverted back to 1.2.12 which "just works". I will go back and recompile 1.2.13 and 2.0.0 again. Maybe the addition of postgressql libs linked in or the use of GCC is the issue on Solaris. Not sure but 1.2.12 to 1.2.13 did not go smoothly at all. Dennis

1 0

[Dovecot] pigeonhole
by Xavier Pons 18 Aug '10

18 Aug '10

Hi, I'm trying to compile the last mercurial release of dovecot-pigeonhole 2.0 and get this error: gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -Wstrict-aliasing=2 -I/usr/kerberos/include -o .libs/sievec sievec.o -Wl,--export-dynamic ../../src/lib-sieve/.libs/libdovecot-sieve.so ../../src/lib-sieve-tool/.libs/libsieve-tool.a ./debug/.libs/libsieve_ext_debug.a /root/dovecot/dovecot-hg/dovecot-2.0/src/lib-storage/.libs/libdovecot-storage.so /root/dovecot/dovecot-hg/dovecot-2.0/src/lib-lda/.libs/libdovecot-lda.so /root/dovecot/dovecot-hg/dovecot-2.0/src/lib-dovecot/.libs/libdovecot.so -ldl -lrt -Wl,--rpath -Wl,/usr/lib/dovecot ../../src/lib-sieve/.libs/libdovecot-sieve.so: undefined reference to `sieve_stringlist_get_length' ../../src/lib-sieve/.libs/libdovecot-sieve.so: undefined reference to `sieve_stringlist_read_all' ../../src/lib-sieve/.libs/libdovecot-sieve.so: undefined reference to `sieve_single_stringlist_create_cstr' collect2: ld returned 1 exit status make[4]: *** [sievec] Error 1 any idea? thanks Xavier

4 6

[Dovecot] 2.0 and vpopmail
by Jason 'XenoPhage' Frisvold 18 Aug '10

18 Aug '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, Does 2.0 require a specific version of vpopmail? I'm getting this on my build attempt : /usr/src/redhat/BUILD/dovecot-2.0.0/src/auth/passdb-vpopmail.c:185: undefined reference to `vauth_load_module' Yes, it's an RPM, that's how I roll. I'm not finding vauth_load_module anywhere on my system.. I'm running vpopmail 5.4.30 which is, I believe the latest stable release.. Thanks, - --------------------------- Jason 'XenoPhage' Frisvold xenophage(a)godshell.com - --------------------------- "Any sufficiently advanced magic is indistinguishable from technology." - - Niven's Inverse of Clarke's Third Law -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.14 (Darwin) iEYEARECAAYFAkxp/6YACgkQ8CjzPZyTUTT0tACgi5WLR2IcGvhmvmIGlmZpeg1P tUQAn2zx6HuIR3QHIGt/aYCP7nRNBvJ7 =yYrj -----END PGP SIGNATURE-----

2 2

[Dovecot] Using dovecot with vpopmail and mysql auth?
by Aaron Greengrass 18 Aug '10

18 Aug '10

Hi, Does anyone happen to know the right strings to do authentication against mysql storing vpopmail data, vs using the vpopmail auth module? I'm trying to get up to both vpopmail 5.5, and dovecot 2.0, and dovecot-auth seems to reliably segfault on the 5.5 vpopmail module. I've tried downgrading vpopmail as well, with less than stellar results. I saw an old article about doing exactly that -- switching from the vpop module, while still using it's DB, but it is both a) old, and b) confusing. Any help you can offer -- or urls in a pinch -- would be appreciated.

1 1

[Dovecot] Very complex Master User Examples using MySQL
by Marc Perkel 17 Aug '10

17 Aug '10

For those who are interested I have posted in the Wiki examples of using master users in very interesting ways. In these example we will create 3 kinds of master users. The first will be users who can read all email for all domains. The next example will be users who can read all email for their domain only. The third example will be users who can read email of domains listed in a separate ownership table. http://wiki2.dovecot.org/Authentication/MasterUsers Go to Advanced SQL Examples at bottom Let me know what you think. In order to actually make this work you'll have to apply this patch Timo just posted: http://hg.dovecot.org/dovecot-2.0/rev/3ba227176cde

1 0

[Dovecot] dovecot 2.0 convert script
by Marc Perkel 17 Aug '10

17 Aug '10

Since my old config had this: protocols = imap imaps pop3 pop3s ssl_cert_file = /usr/share/ssl/certs/imapd.pem ssl_key_file = /usr/share/ssl/certs/imapd.pem then the convert script should have added ssl = yes Just trying to document all the little issues as I find them.

4 5

[Dovecot] Tricky Master User Query - need MySQL help
by Marc Perkel 17 Aug '10

17 Aug '10

OK - I want to do something very tricky with master users and if I get it to work I'm adding it to the wiki for everyone to use. So far I have a MySQL database that servers multiple domains. I can set a flag making someone a domain owner that allows that person to become master of that domain. Here's the query for that. password_query = SELECT user_name, domain_name, password FROM users WHERE user_name = '%n' AND domain_name = '%d' AND owns_domain='1' AND '%d'='%{login_domain}' So - here's where we get tricky. I have another table called "ownership" where I have 2 fields which is a pairing of email addresses (login_id) and domains owned (owned_object). Data might look like this: joe(a)blow.com domain1.com joe(a)blow.com domain2.com Since joe(a)blow.com owns both domain1.com and domain2.com I want him to be able to log in as anyone in those 2 domains as a master user. Examples: tom@domain1.com*joe@blow.com harry@domain2.com*joe@blow.com So the idea is to create a MySQL query so that if the master user matches the domain part of the login user then it returns true and allows the login. What MySQL query will do that?

1 0

[Dovecot] Master Login using MySQL problem - %{login_domain}
by Marc Perkel 17 Aug '10

17 Aug '10

Hi Timo, Been trying to track this problem down further. The problem seems to be related to verifying the master user failing. My passdb looks like this: passdb { driver = sql args = /etc/dovecot/dovecot-domain-owner-sql.conf master = yes pass = yes } dovecot-domain-owner-sql.conf contains: user_query = SELECT user_name, domain_name FROM users WHERE user_name = '%n' AND domain_name = '%d' AND owns_domain='1' password_query = SELECT user_name, domain_name, password FROM users WHERE user_name = '%n' AND domain_name = '%d' AND owns_domain='1' AND '%d'='%{login_domain}' In this example - bill(a)plf.net is an ordinary user. tom(a)plf.net is a domain owner. Tom wants to read bills email. The login is: bill@plf.net*tom@plf.net This results in tom(a)plf.net being classified as an unknown user. Aug 17 08:38:30 auth: Debug: sql(tom(a)plf.net,127.0.0.1): query: SELECT user_name, domain_name, password FROM users WHERE user_name = 'tom' AND domain_name = 'plf.net' AND owns_domain='1' AND 'plf.net'='' Aug 17 08:38:30 auth: Info: sql(tom(a)plf.net,127.0.0.1): unknown user Aug 17 08:38:32 auth: Debug: client out: FAIL 15 user=tom(a)plf.net Aug 17 08:38:32 imap-login: Info: Aborted login (auth failed, 1 attempts): user=<tom(a)plf.net>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=0, secured Note that the query used to determine that tom(a)plf.net is valid is the password_query and not the user_query resulting in unknown user. I think that's where the problem is.

3 7

[Dovecot] Managesieve and Dovecot 2.0: clients incompatible?
by Jerrale G 17 Aug '10

17 Aug '10

I successfully converted my 1.2.x config and am trying to use managesieve. This configuration is really for 1.2.x even though it says for 2.0: http://wiki2.dovecot.org/ManageSieve/Configuration Trying to assign the port number is not by using "listen". Anyway, I just reverted, on the client, to using the default port 2000. The managesieve client now hangs trying to login and eventually times out. Is the new pigeonhole managesieve incompatible with clients that worked with managesieve 0.11.11? There is no output in the log concerning managesieve from pigeonhole. I guess I could put log=/path/to/a/file in the managesieve part and see what happens. In the old dovecot 1.2, we would get a "managesieve-login" in the log when a client even TRIED to login; now, nothing! -- Jerrale G. SC Senior Admin

2 1

Re: [Dovecot] v2.0.0 released
by Dennis Clarke 17 Aug '10

17 Aug '10

Well , configure looked good and the summary seemed fine : Install prefix . : /opt/csw File offsets ... : 64bit I/O polling .... : poll I/O notifys .... : none SSL ............ : yes (OpenSSL) GSSAPI ......... : yes passdbs ........ : static passwd passwd-file shadow pam checkpassword ldap sql : -bsdauth -sia -vpopmail userdbs ........ : static prefetch passwd passwd-file checkpassword ldap sql : -vpopmail -nss SQL drivers .... : pgsql mysql sqlite Everything was going swimmingly and then poof : libtool: compile: /opt/studio/SOS11/SUNWspro/bin/cc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-test -I../../src/lib-charset -I../../src/lib-mail -I/opt/csw/include:/opt/csw/mysql51/include/mysql:/opt/csw/postgresql83/include -I/opt/csw/include -xstrconst -xildoff -xarch=v8 -xnolibmil -Xa -xcode=pic32 -xregs=no%appl -xlibmieee -g -xs -I/opt/csw/include -I/opt/csw/mysql51/include/mysql -I/opt/csw/postgresql83/include -D_TS_ERRNO -DSOLARIS2=8 -D_LARGEFILE64_SOURCE -I/opt/csw/include -c imap-id.c -KPIC -DPIC -o .libs/imap-id.o libtool: compile: /opt/studio/SOS11/SUNWspro/bin/cc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-test -I../../src/lib-charset -I../../src/lib-mail -I/opt/csw/include:/opt/csw/mysql51/include/mysql:/opt/csw/postgresql83/include -I/opt/csw/include -xstrconst -xildoff -xarch=v8 -xnolibmil -Xa -xcode=pic32 -xregs=no%appl -xlibmieee -g -xs -I/opt/csw/include -I/opt/csw/mysql51/include/mysql -I/opt/csw/postgresql83/include -D_TS_ERRNO -DSOLARIS2=8 -D_LARGEFILE64_SOURCE -I/opt/csw/include -c imap-id.c -o imap-id.o >/dev/null 2>&1 source='imap-match.c' object='imap-match.lo' libtool=yes \ DEPDIR=.deps depmode=none /opt/csw/bin/bash ../../depcomp \ /opt/csw/bin/bash ../../libtool --tag=CC --mode=compile /opt/studio/SOS11/SUNWspro/bin/cc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-test -I../../src/lib-charset -I../../src/lib-mail -I/opt/csw/include:/opt/csw/mysql51/include/mysql:/opt/csw/postgresql83/include -I/opt/csw/include -xstrconst -xildoff -xarch=v8 -xnolibmil -Xa -xcode=pic32 -xregs=no%appl -xlibmieee -g -xs -I/opt/csw/include -I/opt/csw/mysql51/include/mysql -I/opt/csw/postgresql83/include -D_TS_ERRNO -DSOLARIS2=8 -D_LARGEFILE64_SOURCE -I/opt/csw/include -c -o imap-match.lo imap-match.c libtool: compile: /opt/studio/SOS11/SUNWspro/bin/cc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-test -I../../src/lib-charset -I../../src/lib-mail -I/opt/csw/include:/opt/csw/mysql51/include/mysql:/opt/csw/postgresql83/include -I/opt/csw/include -xstrconst -xildoff -xarch=v8 -xnolibmil -Xa -xcode=pic32 -xregs=no%appl -xlibmieee -g -xs -I/opt/csw/include -I/opt/csw/mysql51/include/mysql -I/opt/csw/postgresql83/include -D_TS_ERRNO -DSOLARIS2=8 -D_LARGEFILE64_SOURCE -I/opt/csw/include -c imap-match.c -KPIC -DPIC -o .libs/imap-match.o "imap-match.c", line 199: identifier redeclared: imap_match_dup current : function(pointer to struct pool {pointer to const struct pool_vfuncs {..} v, unsigned int alloconly_pool :1, unsigned int datastack_pool :1}, pointer to const struct imap_match_glob {pointer to struct pool {..} pool, pointer to struct imap_match_pattern {..} patterns, char sep, array[-1] of char patterns_data}) returning pointer to struct imap_match_glob {pointer to struct pool {..} pool, pointer to struct imap_match_pattern {..} patterns, char sep, array[-1] of char patterns_data} previous: function(pointer to struct pool {pointer to const struct pool_vfuncs {..} v, unsigned int alloconly_pool :1, unsigned int datastack_pool :1}, pointer to const struct imap_match_glob {pointer to struct pool {..} pool, pointer to struct imap_match_pattern {..} patterns, char sep, array[-1] of char patterns_data}) returning pointer to struct imap_match_glob {pointer to struct pool {..} pool, pointer to struct imap_match_pattern {..} patterns, char sep, array[-1] of char patterns_data} : "imap-match.h", line 33 "imap-match.c", line 214: identifier redeclared: imap_match_globs_equal current : function(pointer to const struct imap_match_glob {pointer to struct pool {..} pool, pointer to struct imap_match_pattern {..} patterns, char sep, array[-1] of char patterns_data}, pointer to const struct imap_match_glob {pointer to struct pool {..} pool, pointer to struct imap_match_pattern {..} patterns, char sep, array[-1] of char patterns_data}) returning _Bool previous: function(pointer to const struct imap_match_glob {pointer to struct pool {..} pool, pointer to struct imap_match_pattern {..} patterns, char sep, array[-1] of char patterns_data}, pointer to const struct imap_match_glob {pointer to struct pool {..} pool, pointer to struct imap_match_pattern {..} patterns, char sep, array[-1] of char patterns_data}) returning _Bool : "imap-match.h", line 36 cc: acomp failed for imap-match.c gmake[3]: *** [imap-match.lo] Error 1 gmake[3]: Leaving directory `/export/medusa/dclarke/build/dovecot/sparc/dovecot-2.0.0-sparcv8-001/src/lib-imap' gmake[2]: *** [all-recursive] Error 1 gmake[2]: Leaving directory `/export/medusa/dclarke/build/dovecot/sparc/dovecot-2.0.0-sparcv8-001/src' gmake[1]: *** [all-recursive] Error 1 gmake[1]: Leaving directory `/export/medusa/dclarke/build/dovecot/sparc/dovecot-2.0.0-sparcv8-001' gmake: *** [all] Error 2 [mimas] So that stops me while I figure out what the issue is with imap-match.h and/or imap-match.c in the Solaris world while using Sun Studio 11. -- Dennis Clarke dclarke(a)opensolaris.ca <- Email related to the open source Solaris dclarke(a)blastwave.org <- Email related to open source for Solaris

3 12

[Dovecot] authentication failure with known good credentials???
by Dave Stevens 17 Aug '10

17 Aug '10

Hi, I have a problem on my server. To illustrate, I created a new user, unclewiggly, and set up a password. I then used sent an email from my usual account. Logging in with my browser I am able to see the inbox, the mail and contents correctly. I then set up a new instance of Eudora 7.1 on my windows 7 box with the appropriate login id and check the account using the correct password. The fetch fails with the client reporting an authentication failure. Ideas? Places to look? Logfiles I can search? Maillog doesn't seem very informative, should I send a snippet? Thanks, Dave -- "It is no measure of health to be well adjusted to a profoundly sick society." Krishnamurti

3 3

[Dovecot] Using a BSDI 4.X system for Dovecot
by The Doctor 17 Aug '10

17 Aug '10

It might be old but still worked. I am using Dovecot 1.2.11 hoping to replace QualComm Eudora and Cyrus IMAP. dovecot -n yields base_dir: /var/run/dovecot/ protocols: imap imaps pop3 pop3s ssl_listen: 204.209.81.1 ssl_cipher_list: ALL:!LOW:!SSLv2 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/dovecot/libexec/dovecot/imap-login login_executable(imap): /usr/dovecot/libexec/dovecot/imap-login login_executable(pop3): /usr/dovecot/libexec/dovecot/pop3-login mail_max_userip_connections(default): 10 mail_max_userip_connections(imap): 10 mail_max_userip_connections(pop3): 3 first_valid_uid: 100 last_valid_uid: 65535 last_valid_gid: 65535 mail_privileged_group: mail mail_location: mbox:~/mail:INBOX=/var/mail/%u dbox_rotate_days: 0 mail_executable(default): /usr/dovecot/libexec/dovecot/imap mail_executable(imap): /usr/dovecot/libexec/dovecot/imap mail_executable(pop3): /usr/dovecot/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/dovecot/lib/dovecot/imap mail_plugin_dir(imap): /usr/dovecot/lib/dovecot/imap mail_plugin_dir(pop3): /usr/dovecot/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): auth default: executable: /usr/contrib/libexec/dovecot/dovecot-auth passdb: driver: passwd-file args: /etc/master.passwd userdb: driver: passwd userdb: driver: passwd-file args: /etc/passwd And running SSL here In my logs I see Aug 17 00:35:10 doctor dovecot: POP3(user1): Fatal: setregid(100(user),14(mail)) failed with euid=0(root): Operation not permitted Aug 17 00:35:15 doctor dovecot: IMAP(user2): Fatal: setregid(100(user),14(mail)) failed with euid=0(root): Operation not permitted Question: What are am I not doing right? -- Member - Liberal International This is doctor(a)nl2k.ab.ca Ici doctor(a)nl2k.ab.ca God, Queen and country! Never Satan President Republic! Beware AntiChrist rising! http://twitter.com/rootnl2k http://www.facebook.com/dyadallee Australia!! Vote to throw the REpublicans to the sharks!

2 1

[Dovecot] 2.0 not starting
by Luciano Mannucci 17 Aug '10

17 Aug '10

Hi everybody, I tried to upgrade my 1.2.13 dovecot to 2.0. The configure/make/install process seemed to work flawlessly. I created the dovenull user, converted my config with #src/config/doveconf -n -c /etc/dovecot.conf > /tmp/dovecot.conf and moved the result manually to /etc/dovecot. By typing "dovecot" (after having stopped the previous instance :), I get: Error: service(pop3-login): listen(::, 110) failed: Address already in use Error: service(imap-login): listen(::, 143) failed: Address already in use Fatal: Failed to start listeners tough nor "netstat -ta" nor "lsof -i" do show anything using port 110 or 143. What did I wrong? Here is my doveconf -n: baobab:/usr/src/local/mail/dovecot/current/dovecot-2.0.0 # doveconf -n # 2.0.0: /etc/dovecot/dovecot.conf # OS: Linux 2.6.27.45-0.1-pae i686 openSUSE 11.1 (i586) ext3 doveconf: Warning: Dovecot was last started using /etc/dovecot.conf, but this config is /etc/dovecot/dovecot.conf auth_cache_size = 3072 auth_debug = yes auth_mechanisms = plain login auth_username_format = %Lu auth_verbose = yes disable_plaintext_auth = no first_valid_gid = 0 first_valid_uid = 100 info_log_path = /var/log/dovecot/logfile.info log_path = /var/log/dovecot/logfile login_greeting = Dovecot at Baobab ready. mail_location = mbox:/var/spool/mailboxes/%u:INBOX=/var/spool/mail/%u:DIRNAME=mbox:INDEX=/var/dovecot_indexes/%u maildir_copy_with_hardlinks = no namespace { inbox = yes location = prefix = separator = . type = private } passdb { driver = pam } plugin { quota = maildir quota_rule = *:storage=300M } protocols = pop3 imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service imap-login { inet_listener imaps { address = 212.45.144.44, 212.45.144.70, 192.168.134.44 } process_limit = 512 } service pop3-login { inet_listener pop3s { address = 212.45.144.44, 212.45.144.70, 192.168.134.44 } process_limit = 512 } ssl_ca = </etc/ssl/ca.crt ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } version_ignore = yes protocol imap { imap_client_workarounds = delay-newmail mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_enable_last = yes } protocol lda { postmaster_address = postmaster(a)mcs.it } luciano. -- /"\ /Via A. Salaino, 7 - 20144 Milano (Italy) \ / ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250 X AGAINST HTML MAIL / E-MAIL: posthamster(a)sublink.sublink.ORG / \ AND POSTINGS / WWW: http://www.mannucci.ORG/

4 5