- dovecot - dovecot.org

[Dovecot] Expire failing with error Remote Disconnected
by dovecot＠corwyn.net 14 Feb '09

14 Feb '09

I'm trying to follow the instructions from: http://wiki.dovecot.org/Plugins/Expire for the BDB backend. Everything is set up as indicated, but when I run: dovecot --exec-mail ext /usr/libexec/dovecot/expire-tool I get back: Error: read(/var/run/dovecot/dict-server) failed: Remote disconnected I'm sure it's something simple.... Thx rick dovecot -n: # 1.1.8: /etc/dovecot.conf # OS: Linux 2.6.18-92.el5 i686 Red Hat Enterprise Linux Server release 5.2 (Tikanga) ext3 ssl_cert_file: /etc/httpd/certs/_com.crt ssl_key_file: /etc/httpd/certs/.com.key.no.password login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_uid: 1015 mail_gid: 105 mail_location: maildir:/var/spool/mail/%d/%n/Maildir mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota expire trash mail_plugins(imap): quota imap_quota expire trash mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle imap_client_workarounds(imap): delay-newmail outlook-idle imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login passdb: driver: sql args: /etc/dovecot-sql.conf userdb: driver: passwd userdb: driver: sql args: /etc/dovecot-sql.conf userdb: driver: static socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vuser group: vuser plugin: quota: maildir quota_rule: *:storage=102400000 quota_rule2: Trash:storage=100M trash: /etc/dovecot-trash.conf expire: Trash 14 Trash/* 14 Spam 14 expire_dict: proxy::expire dict: expire: db:/var/lib/dovecot/expire.db Rick Steeves http://www.sinister.net "The journey is the destination"

4 9

[Dovecot] Smooth mailbox to maildir migration
by Luciano Mannucci 14 Feb '09

14 Feb '09

Hi all, I have a postfix+procmail+dovecot installation, now running basicaly on pop3 hence mailbox format, with few thousand users and less than twenty gigabytes mail. I need to move all of them to maildir, to take advantage of IMAP subfolders that do not work with mbox format (so I'm told :). Of course I cannot safely stop the service for more than a bunch of seconds... What I'm about to do: create a second dovecot instance to cope with imap client configured for maildir (and possibly pop3 on another port for those using both), which means a dovecot launched with -c /path/to/alternate.conf and a new /etc/init.d/dovecot2-theRevenge having the proper -i option given to startproc in order to make it ignore the other instance. for each user: convert the mailbox with some sort of mb2mb (which is the better one?) create a .procmailrc with a proper DEFAULT= bearing the magic trailing slash indicating maildir to procmail for each converted user. And I'm done... Have I forgotten something? Is there a better way? Any one else tryed such a thing? Cheers to all, luciano. -- /"\ /Via A. Salaino, 7 - 20144 Milano (Italy) \ / ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250 X AGAINST HTML MAIL / E-MAIL: posthamster(a)sublink.sublink.ORG / \ AND POSTINGS / WWW: http://www.mannucci.ORG/

4 6

[Dovecot] Weird Dovecot 1.1.6 + pop3s certificate issues
by Bernhard Schmidt 14 Feb '09

14 Feb '09

Hello everyone, I've been asked by a colleague to have a look at some extremely weird dovecot SSL issue they are seeing on one of the student mailservers. They are running dovecot 1.1.6 (yes, I know, a bit old ...) on SLES 10.2 x86_64 with imap(+starttls), imaps, pop3(+starttls) and pop3s enabled. Every couple of weeks the pop3s and pop3+starttls part bail out out. Clients can't connect, when you try openssl s_client you get this: 15960:error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01:rsa_pk1.c:100: 15960:error:04067072:rsa routines:RSA_EAY_PUBLIC_DECRYPT:padding check failed:rsa_eay.c:699: 15960:error:1408D07B:SSL routines:SSL3_GET_KEY_EXCHANGE:bad signature:s3_clnt.c:1414: server logs don't show much except for various SSL_accept() errors, including TLS handshaking: SSL_accept() failed: error:1408F455:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac TLS handshaking: SSL_accept() syscall failed: Connection reset by peer TLS handshaking: SSL_accept() failed: error:1409441B:SSL routines:SSL3_READ_BYTES:tlsv1 alert decrypt error imaps and imap+starttls work fine during the whole time (and always have), although they are much more used. Restarting dovecot fixes the issue for a couple of weeks. Does anyone have an idea where to start debugging? As far as I understand the whole SSL_accept() thing is a giant blackbox for Dovecot, but how comes it only affects POP3? dovecot -n (paths and addresses altered, not sure how much I can reveal without getting shot): # 1.1.6: /mnt//usr/local/etc/dovecot.conf # OS: Linux 2.6.16.60-0.25-smp x86_64 SUSE Linux Enterprise Server 10 # (x86_64) protocols: imap imaps pop3 pop3s listen(default): [ipv6]:143, ipv4:143 listen(imap): [ipv6]:143, ipv4:143 listen(pop3): [ipv6]:110, ipv4:110 ssl_listen(default): [ipv6]:993, ipv4:993 ssl_listen(imap): [ipv6]:993, ipv4:993 ssl_listen(pop3): [ipv6]:995, ipv4:995 disable_plaintext_auth: no login_dir: /usr/local/var/run/dovecot/login login_executable(default): /mnt//usr/local/libexec/dovecot/imap-login login_executable(imap): /mnt//usr/local/libexec/dovecot/imap-login login_executable(pop3): /mnt//usr/local/libexec/dovecot/pop3-login login_process_per_connection: no login_max_connections: 128 max_mail_processes: 2500 mail_uid: campus mail_gid: lmu mail_location: maildir:~/Maildir:INDEX=/home/something/indexes/%-1.1n/%n mmap_disable: yes mail_nfs_index: yes mail_executable(default): /mnt//usr/local/libexec/dovecot/imap mail_executable(imap): /mnt//usr/local/libexec/dovecot/imap mail_executable(pop3): /mnt//usr/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /mnt//usr/local/lib/dovecot/imap mail_plugin_dir(imap): /mnt//usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /mnt//usr/local/lib/dovecot/pop3 pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): %08Xv%08Xu namespace: type: private separator: . prefix: INBOX. inbox: yes list: yes subscriptions: yes auth default: worker_max_request_count: 500 passdb: driver: ldap args: /mnt//usr/local/etc/dovecot-ldap.conf userdb: driver: prefetch userdb: driver: ldap args: /mnt//usr/local/etc/dovecot-ldap.conf socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: campus group: lmu plugin: quota: maildir quota_rule: Trash:ignore quota_rule2: *:storage=512M Anyone having an idea? bernhard

1 0

Re: [Dovecot] Dovecot-antispam does not work
by Jehan Pagès 14 Feb '09

14 Feb '09

Hi all, just to say that finally the patch of Marcin worked great. Just my configuration is different from yours to get it work: antispam_signature = X-DSPAM-Signature antispam_trash = trash;Trash;Deleted Items antispam_spam = SPAM;Junk antispam_dspam_binary = /usr/bin/dspam antispam_dspam_args = --client;--source=error;--user;%u antispam_mail_tmpdir = /tmp The difference here is in the syntax. You write "--user=somemail" though in the manual, it is written "--user somemail". But also you were proposing 2 lines "antispam_dspam_args" though in all my tests, when I was doing such a thing, the second line seemed to override the first (in the launch logs, only the second line was displayed, so I guess...). Are you sure that it works exactly the way you intend to, Marcin? And that the "--source=error" (your first line) is indeed added as a parameter to the call of dspam? For the patch to the dovecot-antispam, probably it should not be integrated "as is", but I guess that the return code of call_dspam function must probably be checked and fixed if the call can succeed but still give a failure return code. I set Johannes as a main recipient, maybe you will see this email. Bye and thanks all. Jehan On Wed, Feb 4, 2009 at 12:45 PM, Jehan Pagès <jehan.marmottard(a)gmail.com>wrote: > Hi, > > On Wed, Feb 4, 2009 at 12:40 PM, Marcin Rzepecki <m.rzepecki(a)iem.pw.edu.pl > > wrote: > >> Wed, Feb 04, 2009 at 12:12:44PM +0100, Jehan Pag?s wrote: >> > I saw this piece of code and did the same as you in my change of course. >> > Unfortunately, it didn't work (no logged "marked as SPAM", nor change in >> my >> > stats. I have dovecot 1.1.7-r1 though, so it is probably the reason. >> >> Logging '...markes as SPAM..' lines to syslog is my idea, I can send some >> dspam patches, to make it work. It's usefull for me. > > > Ok. Anyway the stats don't change... > > >> >> Are you using mbox or maildir? If you are using mbox, try to upgrade to >> Dovecot >=1.1.8 - it contains several mbox bug fixes (e.g 'Next message >> unexpectedly lost') which are needed to make antispam plugin work. > > > No maildir... > I am doing some stuffs about another way to interact dspam/dovecot/postfix > and will go back to this issue soon. > > Jehan >

2 1

[Dovecot] "failed to map segment from shared object: Cannot allocate memory"
by Vegard Svanberg 13 Feb '09

13 Feb '09

>From /var/log/auth.log (Dovecot 1.1.4 on Ubuntu 8.10): Feb 10 08:29:06 home dovecot-auth: PAM unable to dlopen(/lib/security/pam_ck_connector.so): libdbus-1.so.3: failed to map segment from shared object: Cannot allocate memory Feb 10 08:29:06 home dovecot-auth: PAM adding faulty module: /lib/security/pam_ck_connector.so English, please? :) Strangely, it seemed to disappear after increasing login_processes_count, login_max_processes_count and/or auth_worker_max_count. -- Vegard Svanberg <vegard(a)svanberg.no> [*Takapa@IRC (EFnet)]

2 3

[Dovecot] Production server migration from mbox to maildir ( need advice )
by Frank Bonnet 13 Feb '09

13 Feb '09

Hello I'm going to change the raid array of my mailhub in fews days/weeks and I wonder if it would be a good idea to take the opportunity of this migration to also change the storage method from mailbox to maildir. I've never used maildir on my production server only on small satellites. So I really need advice of admins that use maildir format on prod servers. My server has approx 3500 users/mailboxes that is approx 450 Gb of data. The OS is Debian etch amd64 but could change also during the migration Opensuse X86_64, CAOS-NSA, FreeBSD 64 are some options. Any infos/experiences welcome, I'll summarize answers. Thanks a lot.

4 8

[Dovecot] Corrupted index cache file
by Proskurin Kirill 13 Feb '09

13 Feb '09

Hello all. I run on a problems? dovecot: Feb 13 08:36:13 Error: IMAP(logistic(a)fxclub.org): Maildir filename has wrong W value: /var/spool/dovecot/domains/fxclub.org/logistic/.fxclub/1135926892.Re1a4ad89Q1436.newmail.fxclub.org,S=24630,W=2 4849:2, dovecot: Feb 13 08:36:13 Error: IMAP(logistic(a)fxclub.org): Corrupted index cache file /var/spool/dovecot/domains/fxclub.org/logistic/.fxclub/dovecot.index.cache: Broken virtual size for mail UID 332 dovecot: Feb 13 08:36:13 Info: IMAP(logistic(a)fxclub.org): Disconnected: Disconnected bytes=435/135596 dovecot: Feb 13 08:36:14 Info: imap-login: Login: user=<logistic(a)fxclub.org>, method=PLAIN, rip=194.87.53.162, lip=78.129.148.74, TLS dovecot: Feb 13 08:36:15 Info: IMAP(chief(a)omsk.fxclub.org): Disconnected: Logged out bytes=349/5517 dovecot: Feb 13 08:36:15 Info: IMAP(chief(a)omsk.fxclub.org): Disconnected: Logged out bytes=63/280 dovecot: Feb 13 08:36:15 Error: IMAP(logistic(a)fxclub.org): FETCH for mailbox fxclub UID 332 got too little data: 318 vs 319 dovecot: Feb 13 08:36:15 Error: IMAP(logistic(a)fxclub.org): Maildir filename has wrong W value: /var/spool/dovecot/domains/fxclub.org/logistic/.fxclub/1135926892.Re1a4ad89Q1436.newmail.fxclub.org,S=24630,W=2 4849:2, dovecot: Feb 13 08:36:15 Error: IMAP(logistic(a)fxclub.org): Corrupted index cache file /var/spool/dovecot/domains/fxclub.org/logistic/.fxclub/dovecot.index.cache: Broken virtual size for mail UID 332 dovecot: Feb 13 08:36:15 Info: IMAP(logistic(a)fxclub.org): Disconnected: Disconnected bytes=395/135319 It got then reconfigure MS Outlook 2007 SP1 to make a full download of email - not only headers. Then I reconfig it back to headers only - all work fine. How can I fix it? It is safe to delete index files? Self healing seems to not work here. #dovecot -n mail# dovecot -n # 1.1.8: /usr/local/etc/dovecot.conf # OS: FreeBSD 7.0-RELEASE-p9 i386 ufs base_dir: /var/run/dovecot/ log_path: /var/log/dovecot/dovecot.log info_log_path: /var/log/dovecot/dovecot.log protocols: imap imaps pop3 pop3s managesieve listen(default): * listen(imap): * listen(pop3): * listen(managesieve): *:2000 ssl_ca_file: /usr/local/etc/certs/GlobalSignCA.crt ssl_cert_file: /usr/local/etc/certs/fxclub_org.crt ssl_key_file: /usr/local/etc/certs/fxclub_org.key ssl_cipher_list: ALL:!LOW:!SSLv2 login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_executable(managesieve): /usr/local/libexec/dovecot/managesieve-login login_greeting_capability(default): yes login_greeting_capability(imap): yes login_greeting_capability(pop3): no login_greeting_capability(managesieve): no login_process_size: 128 login_processes_count: 20 login_max_processes_count: 512 mail_max_userip_connections(default): 256 mail_max_userip_connections(imap): 256 mail_max_userip_connections(pop3): 20 mail_max_userip_connections(managesieve): 10 verbose_proctitle: yes first_valid_gid: 0 mail_privileged_group: mail mail_uid: dmail mail_gid: dmail mail_location(default): maildir:/var/spool/dovecot/domains/%d/%n/ mail_location(imap): maildir:/var/spool/dovecot/domains/%d/%n/ mail_location(pop3): maildir:/var/spool/dovecot/domains/%d/%n/ mail_location(managesieve): mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_executable(managesieve): /usr/local/libexec/dovecot/managesieve mail_process_size: 512 mail_plugins(default): quota imap_quota autocreate mail_plugins(imap): quota imap_quota autocreate mail_plugins(pop3): quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 mail_plugin_dir(managesieve): /usr/local/lib/dovecot/managesieve imap_client_workarounds(default): delay-newmail tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail tb-extra-mailbox-sep imap_client_workarounds(pop3): imap_client_workarounds(managesieve): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh pop3_client_workarounds(managesieve): sieve_storage(default): sieve_storage(imap): sieve_storage(pop3): sieve_storage(managesieve): % sieve(default): sieve(imap): sieve(pop3): sieve(managesieve): ~/.dovecot.sieve auth default: mechanisms: plain login user: dovecot-auth username_format: %Lu verbose: yes worker_max_count: 100 passdb: driver: ldap args: /usr/local/etc/dovecot-ldap.conf userdb: driver: ldap args: /usr/local/etc/dovecot-ldap.conf socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 user: exim master: path: /var/run/dovecot/auth-master mode: 384 user: dmail plugin: quota: maildir quota_rule: *:storage=1024M quota_rule2: Trash:storage=1256M quota_rule3: SPAM:ignore quota_warning: storage=80%% /usr/local/bin/quota-warning.sh 80 quota_warning2: storage=95%% /usr/local/bin/quota-warning.sh 95 autocreate: Trash autocreate2: Sent autocreate3: Spam autosubscribe: Trash autosubscribe2: Sent autosubscribe3: Spam -- Best regards, Proskurin Kirill

3 3

[Dovecot] Bynari Insight connector
by Maarten Bezemer 13 Feb '09

13 Feb '09

Hi, Since IMAP support in Outlook is 'somewhat broken', and Bynari has some promising specifications on their website, I might want to try their product. Does anyone here have any experience with their software? Would you recommend it? Or maybe point me at alternatives? (If there are any.. aside from ditching Outlook of course :-P ) Regards, Maarten Bezemer

3 3

[Dovecot] Google Summer of Code
by Charles Marcus 13 Feb '09

13 Feb '09

On another list, someone wrote: > Google Summer of Code is on it's Way. Start collecting students to > throw at projects now! This sounds like a great idea for dovecot too... Timo, maybe there are a few dovecot enhancements that would be good candidates for this? Maybe the test suite? Replication? LMTP server? Anyway, its just a thought... -- Best regards, Charles

1 0

[Dovecot] Corrupted index cache file
by Frank Bonnet 13 Feb '09

13 Feb '09

Hello I got this error yesterday dovecot: Feb 11 16:07:27 Error: IMAP(dumontj): FETCH for mailbox Sent UID 7139 got too little data: 11112 vs 11160 dovecot: Feb 11 16:07:27 Error: IMAP(dumontj): Corrupted index cache file /user/dumontj/.imap/Sent/dovecot.index.cache: Broken virtual size for mail UID 7139 Does remove the cache will cure the problem ? Thanks

4 5

Re: [Dovecot] Mapping usernames [RESOLVED]
by Henry 13 Feb '09

13 Feb '09

Resolved. For others, this is the simple solution which works for me: /etc/dovecot.conf: auth default { userdb passwd-file { args = /etc/passwd } passdb passwd-file { args = scheme="MD5-CRYPT" /etc/dovecot.passwd } } /etc/dovecot.passwd: bob@vhost.com:$1$yAOjs09l$...::::::userdb_user=vabc_bob (the encrypted password "$1$yAOjs09l$..." comes from /etc/shadow) /etc/passwd: vabc_bob:x:20838:2362:bob:/home/mailusers/vabc_bob:/sbin/nologin "abc" could also be the domain ("vhost"), but this might be too large for really long domain names. So we rather use a short unique prefix for each domain. Cheers Henry -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.5 (GNU/Linux) mOIESXlwDRECAOycneJPOwSkETRkjJZdArag8V2rKOR2IUwlDOydIZXv/ITDlWDU dookzEdWh7Ektf1Jlh+YbPNEGoPpQunL8O8AoJbWmNkpoX7jP0Sw/5rDN2eKGHR7 Af9mxTqQ/j3C5LkrTRo9iCTt1TxoqPi6R/w0KkIAuTXBq6j+vIFJcOFgABlMQoXs V2crh1BUCmXVsV1puRJsLWKbAf4uL0V+N8WF4rvWHmJiYjgDn6exv3XHS0F6NhRz n1KVnV0XDWMDq/B/tmj4L2JYxEzWzeNulC5yQBOdx/dLU12XtCNIZW5yeSAoemVu LmNvLnphKSA8aGVucnlAemVuLmNvLnphPohgBBMRAgAgBQJJeXANAhsjBgsJCAcD AgQVAggDBBYCAwECHgECF4AACgkQCHhhdg2iQafVGACdEMtEuUGIW2XJyn9Fig7n sX4qzb4An0PGStBZvAP2qtzYP3SGlzsllzLjuI0ESXlwDRACAMsi4nl8/Yar2m9F ex4dFDgWylLgScQrEhhb2xN0Upcglm60nHQD7c1rP+63Iu+lU0eWvyr8o3JTCN4y PpoGMOMAAwUCAIUnLDMW/tz+qsYaOPyoh7HdAYqcrvVar7t+eKpihNBqfP4CT2Py aRVMN6cSJj9NKZDW6b0QQSCGgN7PpzrLqf6ISQQYEQIACQUCSXlwDQIbDAAKCRAI eGF2DaJBpxeiAJ9cNiuaftSoWke75RT1pn7qoibFfgCdHl6BgP9f450/oziDwaMM w49UeHQ= =qgmL -----END PGP PUBLIC KEY BLOCK-----

1 0

[Dovecot] file name missing component in error message
by Mike Abbott 13 Feb '09

13 Feb '09

Hi, we occasionally see this error message from maildir_mail_set_cache_corrupted(): "Maildir filename has wrong W value: %s/%s" but the path it prints is missing a component, specifically, the new/cur/tmp component. For example: /Volumes/Spool/user/maildir/12345.M123P123.example.com.... should be /Volumes/Spool/user/maildir/cur/12345.M123P123.example.com.... This is using dovecot-1.1.10. Now I just have to figure out why the file is corrupted in the first place.

2 3

[Dovecot] quota - implement via dovecot or postfix? which is easier ?
by Linux Advocate 13 Feb '09

13 Feb '09

Guys, i m new to dovecot. I m setting up a new mailserver and planning to run dovecot and postfix of a centos 5.2 box. I have been reading of quota management from various sources and understand that mail box quota can be implemented either thru postfix ( with vda patch ) or thru dovecot. i rather not patch postfix and m therefore leaning towards quota via dovecot. But after reading some posts ,etc, it seems that the information on the dovecot wiki is inaccurate. A.Any comments on this? B. Am i right in concluding that its easier and better in the long run to implement and enforce quotas thru dovecot instead of postfix? C. The right instructions for implementing quota thru dovecot? Regards, marco.

5 6

[Dovecot] CentOS 5 ... again
by Roderick A. Anderson 13 Feb '09

13 Feb '09

At this point I don't think I can do anymore damage to my mail server but I'd like to know if anyone else is using the pre-built RPM files from ATrpms before I install them? http://dl.atrpms.net/all/dovecot-1.1.11-0_90.el5.i386.rpm http://dl.atrpms.net/all/dovecot-sieve-1.1.6-9.el5.i386.rpm Or is there a dovecot-sieve for 1.0.7 from the rpmforge repo? I haven't found it yet but could have sworn I had it before. Thanks, Rod --

6 9

[Dovecot] Released Sieve v0.1.3 and ManageSieve v0.11.3 for Dovecot v1.2.beta1
by Stephan Bosch 13 Feb '09

13 Feb '09

Hello Dovecot users, It has been about two months since the last release of the new Sieve implementation and the ManageSieve service for Dovecot v1.2. Therefore, this release contains quite a few changes. It adds new sieve features like the enotify extension and multiscript support. Also, quite a few (user-reported) bugs were fixed since the last release. Changelog Sieve v0.1.3: * Adapted to changes in Dovecot, making this release dependent on Dovecot >= 1.2.beta1 * Made mail address comparison fully case-insensitive. This is particularly noticeable for the :addresses argument of the vacation command. + Finished enotify extension. Currently, only the mailto notification method is implemented. All still needs to be tested thoroughly. + Implemented multiscript support. It is now possible to execute multiple Sieve scripts sequentially. Administrator-controlled scripts can be executed before and after the user's script. Still needs to be tested thoroughly. + Implemented support for configuring the available Sieve extensions. + Made the subaddress extension (partially) configurable using the sieve_subaddress_sep setting, which allows specifying a (multi-charater) separator other than '+'. + Compiler now warns about invalid header field names used for the header and address tests. + Vacation extension now properly generates a References header for the response message. + Added testing of basic result execution to the test suite. Also added support for testing the outgoing messages produced by the Sieve interpreter. + Included execution of the actual result in the sieve-test command line tool. The undocumented sieve-exec tool that existed for this is now removed as planned. + Added support for the now obsolete 'imapflags' extension for backwards compatibility with CMUSieve. This also implements the mark/unmark commands. - Fixed bugs in the regex extension: 1) if an optional match value did not in fact match, subsequent match values would get unexpected indexes. 2) fixed segfault bug occuring when regex is freed. - Fixed bug in the use of the :from agrument for the vacation command. If this address included a phrase part, the response would not be a valid RFC822 message. - Plugged a theoretical security hole occuring when a directory is opened as a Sieve binary. - Cleaned up and fixed various log messages. - Fixed bug in the outgoing address verification. Addresses ending in ',' were erroneously accepted. Changelog ManageSieve v0.11.3: * Changed the SASL service name from "managesieve" into "sieve" as required in the protocol specification. Don't forget to adjust your configuration if your authentication mechanism depends on this service name. * Adapted to changes in Dovecot, making this release dependent on Dovecot >= v1.2.beta1. * Adapted to changes in the new Sieve implementation, making this release dependent on Dovecot Sieve >= v0.1.3 if used. The old cmusieve plugin is still supported. + Implemented making the SIEVE and NOTIFY capability fully dynamic, meaning that the sieve_extensions setting that was introduced for the new Sieve plugin properly affects the ManageSieve daemon as well. + Added support for the CHECKSCRIPT command. In terms of the supported commands, the ManageSieve daemon now complies with protocol VERSION 1.0 as listed in the CAPABILITY response. - Fixed maximum permissions for uploaded scripts; was 0777. This was shielded however by the default umask (not documented to be configurable), so the actual permissions would never have been 0777. - Fixed a segfault bug in the authentication time-out. Bug report and trace provided by Wolfgang Friebel. - Fixed handling of ~/ in use of mail-data for script location. - Fixed small problems in the login proxy support. The following files are released: Sieve: http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-sieve-0.1.3.tar.gz http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-sieve-0.1.3.tar.gz.sig ManageSieve package: http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-managesieve-0.11.3.tar.gz http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-managesieve-0.11.3.tar.gz.s… ManageSieve patch: http://www.rename-it.nl/dovecot/1.2/dovecot-1.2.beta1-managesieve-0.11.3.di… http://www.rename-it.nl/dovecot/1.2/dovecot-1.2.beta1-managesieve-0.11.3.di… Have fun testing the new releases and don't hesitate to notify me when there are problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

[Dovecot] delivering to folder based on recipient_delimiter?
by dovecot＠corwyn.net 13 Feb '09

13 Feb '09

I'm currently running postfix + dovecot, with virtual users In postfix I have set recipient_delimiter = + so that postfix accepts mail for user(a)example.com, user+foo(a)example.com, and user+spam(a)example.com all deliver to inbox. what I would like is to have email directed to user+foo(a)example.com delivered to the IMAP folder foo (and, in the context of amavisd, have amavis configured for recipient_delimited, and add addr_extension_spam_maps add +spam to each mail identified as spam, and thus the mail would go to the spam folder on delivery. The postfix guys say I should be able to do this. can someone point me to how to implement this with dovecot? (as I don't see how to even start). Thx Rick Rick Steeves http://www.sinister.net "The journey is the destination"

3 3

[Dovecot] Can't remove folder (no thunderbird issue)
by Jan Niggemann 12 Feb '09

12 Feb '09

Hi, first of all: yes, I already dug the internet but didn't find a solution - that's why I'm asking you. My provider uses dovecot, although I can't tell you more about the version - sorry. Mail is stored in mbox format. My trouble: I was unable to create subfolders and googled a bit. A proposed solution was to append a slash at the end of the folder name. I used Thunderbird to create a folder and called it "test/" (yes, with a slash). Now, in both, Thunderbird and Mulberry, I'm unable to delete that folder (that contains neither messages nor subfolders). Mulberry doesn't give an error message, and in Thunderbird I can't find an option to remove this folder (no matter if subscribed or not). My provider uses roundcube as a webmail interface. Trying to delete the folder there seems to work OK, but after refreshing the folder-view it re-appears. I have no (ssh|telnet|...) access to the server, so I can't remove the folder using the shell.. Do I have other options than calling support? Thank you already jan

4 5

Re: [Dovecot] Mapping usernames
by Henry 12 Feb '09

12 Feb '09

On Thu 12/02/09 18:36 , Timo Sirainen tss(a)iki.fi sent: > abc(a)123.com:. > ...:user=realnamea_abc Thanks Timo, Unfortunately this is still not working. Any further comments would be appreciated. I've tried it two ways:- ATTEMPT 1 ---------------- /etc/dovecot.conf: auth default { userdb passwd-file { args = /etc/dovecot.passwd } passdb passwd-file { args = scheme=plain-md5 username_format=%u /etc/dovecot.passwd } } /etc/dovecot.passwd: bob@vh1.com:$1$Vh6a...::::::userdb_user=vh1_bob Error: auth(default): passwd-file(bob@vh1.com,::ffff:127.0.0.1): no passwd file: scheme=plain-md5 username_format=bob(a)vh1.com /etc/dovecot.passwd ATTEMPT 2 ---------------- /etc/dovecot.conf: auth default { userdb passwd-file { args = /etc/dovecot.passwd } passdb passwd-file { args = /etc/dovecot.passwd } } /etc/dovecot.passwd: bob@vh1.com:{PLAIN-MD5}$1$Vh6a...::::::userdb_user=vh1_bob Error: auth(default): passwd-file(bob@vh1.com,::ffff:127.0.0.1): unknown user I'm missing something obvious, I'm sure of it. Any pointers appreciated. Thanks -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.5 (GNU/Linux) mOIESXlwDRECAOycneJPOwSkETRkjJZdArag8V2rKOR2IUwlDOydIZXv/ITDlWDU dookzEdWh7Ektf1Jlh+YbPNEGoPpQunL8O8AoJbWmNkpoX7jP0Sw/5rDN2eKGHR7 Af9mxTqQ/j3C5LkrTRo9iCTt1TxoqPi6R/w0KkIAuTXBq6j+vIFJcOFgABlMQoXs V2crh1BUCmXVsV1puRJsLWKbAf4uL0V+N8WF4rvWHmJiYjgDn6exv3XHS0F6NhRz n1KVnV0XDWMDq/B/tmj4L2JYxEzWzeNulC5yQBOdx/dLU12XtCNIZW5yeSAoemVu LmNvLnphKSA8aGVucnlAemVuLmNvLnphPohgBBMRAgAgBQJJeXANAhsjBgsJCAcD AgQVAggDBBYCAwECHgECF4AACgkQCHhhdg2iQafVGACdEMtEuUGIW2XJyn9Fig7n sX4qzb4An0PGStBZvAP2qtzYP3SGlzsllzLjuI0ESXlwDRACAMsi4nl8/Yar2m9F ex4dFDgWylLgScQrEhhb2xN0Upcglm60nHQD7c1rP+63Iu+lU0eWvyr8o3JTCN4y PpoGMOMAAwUCAIUnLDMW/tz+qsYaOPyoh7HdAYqcrvVar7t+eKpihNBqfP4CT2Py aRVMN6cSJj9NKZDW6b0QQSCGgN7PpzrLqf6ISQQYEQIACQUCSXlwDQIbDAAKCRAI eGF2DaJBpxeiAJ9cNiuaftSoWke75RT1pn7qoibFfgCdHl6BgP9f450/oziDwaMM w49UeHQ= =qgmL -----END PGP PUBLIC KEY BLOCK-----

1 0

[Dovecot] sendmail smtp auth using client socket
by EQX 12 Feb '09

12 Feb '09

Hi list I searched the net, but could not find something related. Is it possible to export the client socket to sendmail for smtp auth? What would be the sendmail.mc configuration for this? #client { # The client socket is generally safe to export to everyone. Typical use # is to export it to your SMTP server so it can do SMTP AUTH lookups # using it. #path = /var/spool/postfix/private/auth #mode = 0660 #user = postfix #group = postfix #} It can also be the other way round: can Dovecot use Cyrus SASL for user authentication? I need to use sendmail, ip based solutions like pop-before-smtp or poprelay are not an option. Thanks, Mike

4 4

[Dovecot] Mapping usernames
by Henry 12 Feb '09

12 Feb '09

Greets, We're using Dovecot 1.0.7 (which comes with CentOS 5.x). I have successfully configured dovecot to change a username from abc(a)123.com to realname1_abc for a machine which only has a single domain (using auth_username_format=realname1_%Ln). However, I'm pulling my hair out trying to get dovecot to handle multiple domains (the machine has existing /etc/passwd /etc/shadow and /etc/mail/virtusertable users). On an older machine, I simply hacked the source code to perform a berkeley DB lookup in /etc/mail/virtusertable.db for the realname[a-z0-9]_xx. This time round, though, I'm trying to do this cleanly. I've been reading the docs/wiki/etc but I now can't see the forest for the trees. This is what I've got so far: In /etc/dovecot.conf: ... auth default { userdb passwd-file { args = /etc/dovecot.passwd } passdb passwd-file { args = /etc/shadow #args = /etc/dovecot.passwd } } /etc/dovecot.passwd contains: realnamea_abc:{PLAIN-MD5}$1$Vjkfhaa....::::::userdb_user=abc@123.com I've been fiddling around blindly with all kinds of settings in userdb {} above, but I always get the error: "passwd-file(abc@123.com,::ffff:127.0.0.1): unknown user", amongst others. In a nutshell, I want to allow a user to login with abc(a)123.com, this name must be mapped to a real system user (eg, using /etc/dovecot.passwd), then authenticated against /etc/shadow or the MD5 password in /etc/dovecot.passwd I would appreciate any kind of pointers or advise here. It would have been nice if vpopmail allowed me to call an external perl script where I could perform the username mapping, but alas, this is not possible. Thanks Henry -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.5 (GNU/Linux) mOIESXlwDRECAOycneJPOwSkETRkjJZdArag8V2rKOR2IUwlDOydIZXv/ITDlWDU dookzEdWh7Ektf1Jlh+YbPNEGoPpQunL8O8AoJbWmNkpoX7jP0Sw/5rDN2eKGHR7 Af9mxTqQ/j3C5LkrTRo9iCTt1TxoqPi6R/w0KkIAuTXBq6j+vIFJcOFgABlMQoXs V2crh1BUCmXVsV1puRJsLWKbAf4uL0V+N8WF4rvWHmJiYjgDn6exv3XHS0F6NhRz n1KVnV0XDWMDq/B/tmj4L2JYxEzWzeNulC5yQBOdx/dLU12XtCNIZW5yeSAoemVu LmNvLnphKSA8aGVucnlAemVuLmNvLnphPohgBBMRAgAgBQJJeXANAhsjBgsJCAcD AgQVAggDBBYCAwECHgECF4AACgkQCHhhdg2iQafVGACdEMtEuUGIW2XJyn9Fig7n sX4qzb4An0PGStBZvAP2qtzYP3SGlzsllzLjuI0ESXlwDRACAMsi4nl8/Yar2m9F ex4dFDgWylLgScQrEhhb2xN0Upcglm60nHQD7c1rP+63Iu+lU0eWvyr8o3JTCN4y PpoGMOMAAwUCAIUnLDMW/tz+qsYaOPyoh7HdAYqcrvVar7t+eKpihNBqfP4CT2Py aRVMN6cSJj9NKZDW6b0QQSCGgN7PpzrLqf6ISQQYEQIACQUCSXlwDQIbDAAKCRAI eGF2DaJBpxeiAJ9cNiuaftSoWke75RT1pn7qoibFfgCdHl6BgP9f450/oziDwaMM w49UeHQ= =qgmL -----END PGP PUBLIC KEY BLOCK-----

2 1

[Dovecot] v1.2: Can't subscribe to shared user folder
by Sascha Wilde 12 Feb '09

12 Feb '09

Hi *, I stumbled across a small bug (missing feature?) in the new shared name space stuff: a001 list "" "*" * LIST (\Noselect \HasChildren) "/" "user" * LIST (\Noselect \HasChildren) "/" "user/bob(a)example.com" * LIST (\HasChildren) "/" "INBOX" * LIST (\HasNoChildren) "/" "INBOX/bar" * LIST (\HasNoChildren) "/" "user/bob(a)example.com/brooklebookle" * LIST (\HasNoChildren) "/" "user/bob(a)example.com/foobar" a001 OK List completed. a002 lsub "" "*" a002 OK Lsub completed. a003 subscribe "user/bob(a)example.com/foobar" a003 NO Unknown subscription namespace. I'm quite sure this once worked in our original code (but of cause I could be mistaken). cheers sascha -- Sascha Wilde OpenPGP key: 4BB86568 http://www.intevation.de/~wilde/ http://www.intevation.de/ Intevation GmbH, Neuer Graben 17, 49074 Osnabrück; AG Osnabrück, HR B 18998 Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

2 2

[Dovecot] (Somewhat urgent) Problem with maildir++ quota
by Santiago Romero 12 Feb '09

12 Feb '09

Hi. I have an strange problem with dovecot's maildir quota and postfix. I've tested quota and it works fine but sometimes there are users that having their Maildir/ empty, they trigger the "quota exceeded" message when someone sends email to them. Some config / version info: ### Versions: ii dovecot-common 1:1.0.10-1ubuntu5.1 ii dovecot-imapd 1:1.0.10-1ubuntu5.1 ii dovecot-pop3d 1:1.0.10-1ubuntu5.1 ### From dovecot.conf: (...) # SQL database <doc/wiki/AuthDatabase.SQL.txt> userdb sql { # Path for SQL configuration file args = /etc/dovecot/dovecot-mysql.conf } (...) dict { #quota = mysql:/etc/dovecot-dict-quota.conf } (...) plugin { quota = maildir:storage=51200 } ### dovecot-mysql.conf (splitted to be readable): user_query = SELECT maildir, 5000 AS uid, 5000 AS gid, concat('maildir:storage=', floor(quota/1024)) AS quota FROM mailbox WHERE username = '%u' AND active = '1' ### Database "mailbox" record example: | prueba(a)domain.com | Password | prueba | domain.com/prueba/ | 51200000 | domain.com | 2009-02-02 10:01:24 | 2009-02-02 10:07:46 | 1 | The symptons: users are working nicely, and quota works (If I create a new user and set it a quota of, say, 1MB, I can send him msgs until Maildir reachs 1MB, after that I get "quota exceeded" messages). But sometimes there are users with the Maildir empty that can't receive messages and trigger the "quota exceeded" warning. Users always download messages by POP. Removing "maildirsize" file in their folder fixes the problem. Also fixes it changing the quota to any value (maildirsize is then removed and recreated after a new message arrives for the user). Sometime that I don't know if it's strange is that I don't see "removing" messages in the maildirsize file after user downloads messages. I mean that I can't see "-1" lines in maildirsizes: # cat prueba/maildirsize 51200000S 0 0 615 1 1540 1 11446 1 46085 1 2623 1 21218 1 2815301 1 15110 1 21289 1 18330 1 (and so). Any idea of what's going on? Shouldn't appear "MSGSIZE -1" lines in maildirsize file to "restore" space in Maildir after POP RETRs? Currently I'm fixing the problem with a regular: # find /home/vmail/vhosts -name "maildirsize" -exec rm {} \; But there must exist a better solution (or maybe my config is wrong). Thanks a lot for any help. -- Santiago Romero

2 3

[Dovecot] dovecot 1.2.beta1: Fatal: io_loop_handle_add: epoll_ctl(1, 11): Bad file descriptor
by e-frog 11 Feb '09

11 Feb '09

I'm currently trying out 1.2.beta1 and get the following error in 'mail.err' log file as soon as I stop dovecot: Feb 11 20:28:30 server dovecot: Fatal: io_loop_handle_add: epoll_ctl(1, 11): Bad file descriptor Is that anything critical? Thanks, e-frog -------------------------------------------------------------------------------- >: dovecot -n # 1.2.beta1: /etc/dovecot/dovecot.conf # OS: Linux 2.6.27-11-server i686 Ubuntu 8.10 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap managesieve disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_privileged_group: mail mail_location: maildir:~/.mail mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): quota imap_quota expire fts fts_squat mail_plugins(imap): quota imap_quota expire fts fts_squat mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve auth default: passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 user: dovecot group: Debian-exim master: path: /var/run/dovecot/auth-master mode: 384 plugin: quota: maildir quota_rule: *:storage=1GB quota_rule2: Trash:storage=10%% expire: Trash 10 expire_dict: proxy::expiredict sieve: ~/.dovecot.sieve sieve_dir: ~/.sieve fts: squat fts_squat: partial=4 full=10 dict: expiredict: mysql:/etc/dovecot/dovecot-dict-sql.conf

1 0

[Dovecot] Panic in dovecot 1.2.beta1
by Mark Sapiro 11 Feb '09

11 Feb '09

I tried Dovecot 1.2.beta1 yesterday. I had been using 1.1.11. I started getting "Panic: POP3(xxx): Trying to allocate 0 bytes" There are two kinds of pop3 users. In the attached log.txt file, user u1 is using a pop3 MUA. For users u2, u3, u4 and u5 fetchmail is coming through an ssh tunnel and retrieving their mail. u1 is able to interact normally with dovecot, but the fetchmail users encountered the panics in the log. dovecot -n is attached as dovecot-n.txt. At first I thought it was a locking issue as .lock files were being left behind, so I changed pop3_lock_session to no, and restarted dovecot, but this didn't help so I reverted to 2.1.11. -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

2 2

[Dovecot] Dovecot 1.1.11 imap namespaces .... access rights
by Harry Lachanas 11 Feb '09

11 Feb '09

Hi all, Is there a way to prohibit users of creating subfolder(s) under a Public Namespace ??? Here is my conf #------------------------------------------------------------------------------------------ log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps ssl_ca_file: /etc/postfix/sasl/cacert.pem ssl_cert_file: /etc/postfix/sasl/cert.pem ssl_key_file: /etc/postfix/sasl/key.pem login_dir: /var/run/dovecot//login login_executable: /usr/local/dovecot-1.1.11/libexec/dovecot/imap-login valid_chroot_dirs: /var/mail mail_privileged_group: mail mail_location: maildir:~/Maildir mail_debug: yes imap_client_workarounds: outlook-idle namespace: type: private separator: / location: maildir:~/Maildir inbox: yes list: yes subscriptions: yes namespace: type: public separator: / prefix: Public/ location: maildir:/home/Public:INBOX=~/Maildir:INDEX=~/Maildir/p-idx:CONTROL=~/Maildir/p-ctrl list: yes auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix #---------------------------------------------------------------------------------------------------------------- Cheers Harry.

4 6

[Dovecot] Adding new storage
by Romer Ventura 11 Feb '09

11 Feb '09

Hello, I am about to add more storage to the mail server and would like to know if it is as simple as it sounds..? I have: dovecot.conf mail_location: maildir:~/Maildir/ and /etc/dovecot/dovecot-ldap.conf with: user_attrs = sAMAccountName=mail=maildir:/home/vmail/%Ud/%Ln/Maildir/ So all the mail gets stored at /home/vmail/%Ud/%Ln/Maildir/ so if i add a new volume to the VM lets say /dev/disk3 and mount it to /srv/ vmail and then change the user_attrs = sAMAccountName=mail=maildir:/ home/vmail/%Ud/%Ln/Maildir/ to user_attrs = sAMAccountName=mail=maildir:/srv/vmail/%Ud/%Ln/Maildir/ would it work with no problem..? I would also need to move all the mailboxes already in the old location... I just want to make sure before i do anything.. Thanks

2 1

[Dovecot] Understanding dovecot ACLs
by Achim Hut 11 Feb '09

11 Feb '09

Hello List I am running a Cyrus IMAP that needs to be replaced. Geting a Dovecot IMAP up and running was surprisingly simple. My configuration is close to Johnny Chaddas Howto at http://johnny.chadda.se/2007/04/15/mail-server-howto-postfix-and-dovecot-wi… Its a Dovecot 1.1.10 on FreeBSD 6.4 Anyway, while basic setup was easy, i stuck in a couple of details like quota, managesieve, etc. Actual major problem and showstoper is understanding the ACLs the confuses me. So i need a hint to be guided in the right direction. What i need is a scenario, where user1 can get (for example) full access to the folders of user2, read-only access to user3 etc. A real world example: Secretary has full access to the mailfolders of her boss, boss has read-only acces to the sales-department folder. My questions: 1) is the possible? 2) can it be done with dovecot-acl files? 3) Namespaces: is it enough to have the private namespace for the job or do i need another namespace? 4) if yes, how should this namespace look like? Thanks for the help Achim

2 1

Re: [Dovecot] [Dovecot-news] v1.2.beta1 released
by Timo Sirainen 11 Feb '09

11 Feb '09

On Feb 10, 2009, at 10:45 PM, Reuben Farrelly wrote: > Feb 11 14:34:41 tornado dovecot: pop3-login: Login: user=<htperham>, > auth-method=PLAIN, remote=203.29.67.56 > Feb 11 14:34:41 tornado dovecot: Panic: POP3(htperham): Trying to > allocate 0 bytes .. > I can replicate this buy just telnetting to port 110, entering the > user and pass commands - as soon as I hit enter it dies :-( Fixed: http://hg.dovecot.org/dovecot-1.2/rev/22d70947597c

1 0

[Dovecot] dovecot logs to audit.log not to maillog
by Ralf Heidenreich 11 Feb '09

11 Feb '09

Hello, I have a curious phenomenon. Dovecot logs normally to /var/log/maillog. If I restart my server, dovecot loggs to /var/log/audit/audit.log. If I restart dovecot, dovecot loggs to /var/log/maillog again. And I think, wenn logrotate is restarting, dovecot logs to audit.log. But I don't know why. Any Ideas? greetings Ralf

2 3

[Dovecot] mailing lists and Dovecot deliver (lda)
by Roderick A. Anderson 11 Feb '09

11 Feb '09

I'm trying to figure out a way, or if it is even possible, to use mailing list software (majordomo2) on a Postfix + Dovecot + virtual mailboxes system. And where I should be looking. The examples on the Postfix site don't seem to address a purely virtual mailboxes system and I haven't found anything about doing it with deliver. I think I'm at the wrong tree (Dovecot deliver) and should be pestering the Postfix list. FTR, I host some sites for not-for-profits and they have asked about setting up lists. So far I've dodged the question but would like to attempt it now. Thanks, Rod --

2 2

[Dovecot] I've moved to US
by Timo Sirainen 10 Feb '09

10 Feb '09

I thought about saying this in v1.2.beta1 release annoouncement, but looks like it'll take a few more days. So I've moved to Blacksburg, Virginia and I'm now working for Mailtrust the rest of this year. Here's some talk about it: http://mailtrust.com/blog (A bit stupid looking picture, but then again all my pictures seem to be that way so I didn't bother getting a new one taken.) And if it's not clear from that blog: Pretty much everything I do here will be Dovecot improvements that will be released as open source. Mailtrust has actually been paying for Dovecot features for about 3 years now.

20 23

[Dovecot] redelivered mail results in mail-forwarding-loop
by Reto Glauser 10 Feb '09

10 Feb '09

I try to redeliver mail for the following reason: Once in a while a user receives a mail which isn't correctly recognised as SPAM/HAM. He'll move the mail into a specific folder (say: retrain-as-spam/retrain-as-ham) and a script will retrain the mail. What I'd like to do is to redeliver the mail in order for correct (re)delivery (e.g. sieve scripts). Using sendmail to redeliver the mail I'm able to re-run the spam tests which will add it's SPAM headers and dovecot/sieve will be able to correctly file the message. I tried to just resend the mail: # /usr/sbin/sendmail -f foo@bar -v -oi foo@bar < mail but this results in a Diagnostic-Code: X-Postfix; delivery via dovecot: mail forwarding loop for foo@bar The problem is that the mail already has a "Delivered-To: foo@bar" line. The above is working when the "Delivered-To" line is being removed, and my question is if this can't be done automatically?

2 3

[Dovecot] [Fwd: Re: dovecot logs to audit.log not to maillog]
by Ralf Heidenreich 10 Feb '09

10 Feb '09

Hello, now I have done this: under http://wiki.dovecot.org/Logging?highlight=(logging) Rotating Logs is the following string ----------------------- /bin/kill -USR1 `cat /var/run/dovecot/master.pid 2>/dev/null` 2> /dev/null || true ------------------------ This string I have insert in /etc/logrotate.d/syslog under the lines: postrotate /bin/kill -HUP `cat /var/run/syslogd.pid 2> /dev/null` 2> /dev/null || true /bin/kill -HUP `cat /var/run/rsyslogd.pid 2> /dev/null` 2> /dev/null || true So Dovecot will be restarted, after the log rotates. I hope, the phenomenon is now solved. greetings ralf -------- Original-Nachricht -------- Betreff: Re: [Dovecot] dovecot logs to audit.log not to maillog Datum: Tue, 10 Feb 2009 09:07:26 +0100 Von: Ralf Heidenreich <ralf(a)lx-work.de> An: Timo Sirainen <tss(a)iki.fi>, dovecot(a)dovecot.org Referenzen: <499035E7.8090506(a)lx-work.de> <1234228183.6132.134.camel@timo-desktop> Hello, here is my dovecot.conf ------snip---------- log_path = /var/log/maillog info_log_path = /var/log/maillog -------snip------------- Is it possible, than logrotate rotates the maillog, and dovecot wants to write to it, if the maillog is not available at the moment, dovecot writes to audit.log? I don't know. Have you any ideas? greetings ralf Timo Sirainen schrieb: > On Mon, 2009-02-09 at 14:55 +0100, Ralf Heidenreich wrote: >> Hello, >> >> I have a curious phenomenon. >> Dovecot logs normally to /var/log/maillog. >> If I restart my server, dovecot loggs to /var/log/audit/audit.log. >> If I restart dovecot, dovecot loggs to /var/log/maillog again. >> And I think, wenn logrotate is restarting, dovecot logs to audit.log. >> But I don't know why. >> Any Ideas? > > By default Dovecot logs to syslog. Maybe your syslog configuration > changes after boot? >

1 0

[Dovecot] Dovecot / Exim with Multiple Domiains
by Marc Perkel 10 Feb '09

10 Feb '09

I'm using a very old scheme for doing multiple domains using an old Linuxconf based setup. Each domain has it's own passwd/shadow file. It works but I need something new and modern and has a web interface and perhaps a mysql backend or something else good. So - what are people using out there for managing email users and domains? Thanks in advance.

2 1

[Dovecot] Imap unlink "failed, is a directory".
by Dovecot＠corwyn.net 10 Feb '09

10 Feb '09

Dovecot 1.1.8-0_85.el5 I'm seeing this set of messages repeat every 15 min. My best guess is the user tried to delete an imap folder and is failing? Feb 9 20:05:58 mailserver dovecot: imap-login: Login: user=<user(a)example.com>, method=PLAIN, rip=10.0.0.1, lip=192.168.250.80, TLS Feb 9 20:05:58 mailserver dovecot: IMAP(user(a)example.com): unlink(/var/spool/mail/example.com/user/Maildir/cur/cur:2,ST) failed: Is a directory Feb 9 20:05:58 mailserver dovecot: IMAP(user(a)example.com): unlink(/var/spool/mail/example.com/user/Maildir/cur/new:2,ST) failed: Is a directory Feb 9 20:05:58 mailserver dovecot: IMAP(user(a)example.com): Disconnected: Logged out bytes=66/623 From here: http://wiki.dovecot.org/VirtualUsers#homedirs I suspect it's a problem with access to the home directory. The users have a home directory: /var/spool/mail/domain/user (or at least that's where Maildir ends up). vuser has 700 access to that entire structure (everything under var/spool/mail/). Users log in with mysql accounts. /etc/passwd: ... dovecot:x:97:97:dovecot:/usr/libexec/dovecot:/sbin/nologin postfix:x:89:89::/var/spool/postfix:/sbin/nologin vacation:x:65501:65501::/var/spool/vacation:/sbin/nologin vuser:x:1015:105:,,,:/home/vuser:/bin/false ... dovecot-sql.conf driver = mysql connect = host=localhost dbname=postfix user=postfix password=xxxxxxx default_pass_scheme = MD5-CRYPT password_query = SELECT username, domain, password FROM mailbox WHERE username = '%u' AND domain = '%d' AND active = '1' user_query = SELECT 1015 as uid, 105 as gid, '/var/spool/mail/%d/%n' as home, 'maildir:/var/spool/mail/%d/%n/Maildir' as mail, concat('*:storage=', quota, 'B') as quota_rule FROM mailbox WHERE username = '%u' AND domain = '%d' and active = '1' dovecot -n # 1.1.8: /etc/dovecot.conf # OS: Linux 2.6.18-92.el5 i686 Red Hat Enterprise Linux Server release 5.2 (Tikanga) ext3 ssl_cert_file: /etc/httpd/certs/example_invtitle_com.crt ssl_key_file: /etc/httpd/certs/example.com.key.no.password login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_uid: 1015 mail_gid: 105 mail_location: maildir:/var/spool/mail/%d/%n/Maildir mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle imap_client_workarounds(imap): delay-newmail outlook-idle imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login passdb: driver: sql args: /etc/dovecot-sql.conf userdb: driver: passwd userdb: driver: sql args: /etc/dovecot-sql.conf userdb: driver: static socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vuser group: vuser plugin: quota: maildir quota_rule: *:storage=102400000 quota_rule2: Trash:storage=100M Rick Steeves http://www.sinister.net "The journey is the destination"

3 3

[Dovecot] Authentication woes.
by Roderick A. Anderson 10 Feb '09

10 Feb '09

I'm still searching but hoping someone can offer a clue-stick. Long story short! I had a server crash suddenly and all I can get at are the files. Built a new host and copied the data and config files over, correcting ownership and permissions (hopefully) as I went. But now I can't get logged in. Messages in /var/log/dovecot/dovecot-info.log, without saslauthd running, are like this. dovecot: Feb 03 08:55:46 Info: auth(default): passwd-file(raanders(a)aesoft-sbcs.com,66.193.34.88): no passwd file: username_format=raanders /var/mail/vhosts/aesoft-sbcs.com/passwd dovecot: Feb 03 08:55:48 Info: auth(default): client out: FAIL 1 user=raanders(a)aesoft-sbcs.com dovecot: Feb 03 08:55:48 Info: auth(default): client in: AUTH 2 PLAIN service=IMAP secured lip=216.64.180.226 rip=66.193.34.88 resp=AHJhYW5kZXJzQGFlc29mdC1zYmNzLmNvbQBrNnpiZTQy dovecot: Feb 03 08:55:48 Info: auth(default): passwd-file(raanders(a)aesoft-sbcs.com,66.193.34.88): no passwd file: username_format=raanders /var/mail/vhosts/aesoft-sbcs.com/passwd dovecot: Feb 03 08:55:50 Info: auth(default): client out: FAIL 2 user=raanders(a)aesoft-sbcs.com dovecot: Feb 03 08:55:54 Info: imap-login: Aborted login: user=<raanders(a)aesoft-sbcs.com>, method=PLAIN, rip=66.193.34.88, lip=216.64.180.226, TLS The passwd file exists and I'm using the correct password. dovecot -n as an attachment. More info this is a semi-good attempt at a mail server for virtual domains. _It was working._ Any ideas as to why dovecot says the file doesn't exist? TIA, Rod # 1.0.7: /etc/dovecot.conf log_path: /var/log/dovecot/dovecot.log info_log_path: /var/log/dovecot/dovecot-info.log protocols: imap imaps listen: *:143 ssl_listen: *:993 login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login login_greeting_capability: yes valid_chroot_dirs: /var/mail first_valid_uid: 5000 last_valid_uid: 5000 first_valid_gid: 5000 last_valid_gid: 5000 mail_access_groups: mail mail_location: maildir:~/Maildir mail_debug: yes maildir_copy_with_hardlinks: yes maildir_copy_preserve_filename: yes auth default: mechanisms: plain login CRAM-MD5 default_realm: aesoft-sbcs.com master_user_separator: * verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd-file args: /var/mail/vhosts/%d/passwd.masterusers pass: yes master: yes passdb: driver: passwd-file args: username_format=%n /var/mail/vhosts/%d/passwd userdb: driver: passwd-file args: username_format=%n /var/mail/vhosts/%d/passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: vmail plugin: sieve: /var/mail/vhosts/%d/%n/dovecot.sieve

2 1

[Dovecot] Dovecot 1.1.11 segfaults on auth configuration error
by Sebastian Kayser 10 Feb '09

10 Feb '09

Hi, i have compiled & packaged Dovecot 1.1.11 on Solaris 8 x86 with Sun Studio 11 and installed the result on Solaris 10 x86 zone. When i now configure auth mechanisms other than "login" or "plain" while only providing pam as the passdb, Dovecot segfaults on startup. I know that my configuration is wrong here, but i guess this still qualifies as a bug. Remedy would be appreciated. # /opt/csw/sbin/dovecot -F dovecot: Feb 06 22:56:24 Info: dovecot v1.1.11 starting up dovecot: Feb 06 22:56:25 Error: child 26870 (auth) returned error 89 (Fatal failure) Segmentation Fault (core dumped) # /opt/SUNWspro/bin/dbx -f /opt/csw/sbin/dovecot core (dbx) where =>[1] hash_lookup(table = (nil), key = 0x68f6), line 159 in "hash.c" [2] child_process_lookup(pid = 26870), line 31 in "child-process.c" [3] log_it(log_io = 0x80b8598, line = 0x80b7d4a "DIGEST-MD5 mechanism can't be supported with given passdbs", continues = 0), line 129 in "log.c" [4] log_write_pending(log_io = 0x80b8598), line 52 in "log.c" [5] log_read(log_io = 0x80b8598), line 191 in "log.c" [6] log_deinit(), line 331 in "log.c" [7] auth_process_destroy(p = 0x80b86f8), line 357 in "auth-process.c" [8] auth_process_input(process = 0x80b86f8), line 244 in "auth-process.c" [9] io_loop_handler_run(ioloop = 0x80b3518), line 204 in "ioloop-poll.c" [10] io_loop_run(ioloop = 0x80b3518), line 336 in "ioloop.c" [11] main(argc = 2, argv = 0x80478dc), line 599 in "main.c" # /opt/csw/sbin/dovecot -n # 1.1.11: /etc/opt/csw/dovecot/dovecot.conf # OS: SunOS 5.10 i86pc log_path: /dev/stderr login_dir: /var/opt/csw/run/dovecot/login login_executable: /opt/csw/libexec/dovecot/imap-login auth default: mechanisms: plain digest-md5 debug: yes passdb: driver: pam userdb: driver: passwd Please let me know in case there is any other information required to nail down the culprit. Thanks. Sebastian

2 2

[Dovecot] [patch] 'c' and 'd' in setacl
by Sascha Wilde 09 Feb '09

09 Feb '09

Hi Timo, Hi *, I just recognized that the new imap-acl plugin in dovecot 1.2 does not know the obsolete rights 'd' and 'c' when setting. According to RFC 4314 section 2.1.1.: If a client includes the "d" right in a rights list, then it MUST be treated as if the client had included every member of the "delete" right. and If a client includes the "c" right in a rights list, then it MUST be treated as if the client had included every member of the "create" right. Unfortunatly there are actually clients which depend on this behavior. I attached a rather rough[0] patch which implements this. cheers sascha [0] I don't like the use of static indexes witch imap_acl_letter_map but currently I wasn't able to decide on a more elegant solution. -- Sascha Wilde OpenPGP key: 4BB86568 http://www.intevation.de/~wilde/ http://www.intevation.de/ Intevation GmbH, Neuer Graben 17, 49074 Osnabrück; AG Osnabrück, HR B 18998 Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

4 5

[Dovecot] Rebuild folder listing?
by Roderick A. Anderson 09 Feb '09

09 Feb '09

I don't know what to call what I'm trying to do so I'll explain the situation. I had a total complete crash of the Linux-Vserver system that was hosting a Postfix+Dovecot guest with a three domains and 1-5 accounts per domain. Lots of mail though. Before it completely melted down I as able to get to the data (messages) and save them and the configuration files for both Dovecot and Postfix. I now have a replacement system up and running and have copied the directories onto it. I can log in to the accounts but I don't see the folders (I use Thunderbird as a MUA). Attempts to "subscribe" and "refresh" the list give me no results. No list of folders. What should I do? I'm thinking I could delete the dovecot files: dovecot.index, dovecot.index.cache, dovecot.index.log, dovecot-uidlist, subscriptions, and while I'm at it possibly dovecot-keywords. Then access the account(s) and Dovecot will rebuild them with the true/correct information. Am I heading anywhere near the right direction? TIA, Rod --

2 3

Re: [Dovecot] Disconnected Log messages I'd like to disable?
by dovecot＠corwyn.net 09 Feb '09

09 Feb '09

I understand what the log message means. I currently have dovecot logging flipped up about as high as I can have it set in about every way that I can. What I'd like to know is which logging setting can I lower to not see this message (or if there is one), and what OTHER things won't log if I decrease that logging setting. thx. rick At 08:43 AM 2/9/2009, Steffen Kaiser wrote: >-----BEGIN PGP SIGNED MESSAGE----- >Hash: SHA1 > >On Mon, 9 Feb 2009, dovecot(a)corwyn.net wrote: > >>Feb 9 08:06:52 mailserver dovecot: IMAP(user(a)example.com): >>Disconnected: Logged out bytes=479/51185 > >Search the archive for a mail from Timo few times ago, it just means >that the user logges out (LOGOUT command). > >Bye, > >- -- Steffen Kaiser >-----BEGIN PGP SIGNATURE----- >Version: GnuPG v1.4.6 (GNU/Linux) > >iQEVAwUBSZAzIHWSIuGy1ktrAQKQDQf/S0zCmCuQ+xtJI0o3goUdDo0++yGXRyCp >fGdDKQ7YnOL1VOM1FnBjGJkhfYs/K6WuVFqQzqVrBjCoItsFWIvZCoeGWeHYPQf1 >6qRYngFSJLfdFDg9Ift5UvCnIS9W5jYv6otkJlddoH0SHeypSb9RZbPR20Ywf2da >whV4bB41W8ys/upUkaBd7+gKKcYcbSp+l3ZBXCrLnDbj7pCISnv2sENkTz2df1eE >wQSgpnbazmr9ePCx1cWDdvN5Wy9RN5KoGc+H0axtI7Uav5tkP7nVJ8GSmqBBH54r >nkvOrtmAjTMwp4MbYh6x2wejZJAY8lp72wQOeg3sJak32f3la0ZLgw== >=mLed >-----END PGP SIGNATURE-----

3 2

[Dovecot] Disconnected Log messages I'd like to disable?
by dovecot＠corwyn.net 09 Feb '09

09 Feb '09

I regularly get this message in my logs: Feb 9 08:03:59 mailserver dovecot: imap-login: Login: user=<user(a)example.com>, method=PLAIN, rip=24.213.158.249, lip=192.168.250.80, TLS Feb 9 08:04:49 mailserver dovecot: IMAP(user(a)example.com): Disconnected: Logged out bytes=189/468 Feb 9 08:06:09 mailserver dovecot: imap-login: Login: user=<user(a)example.com>, method=PLAIN, rip=24.213.158.249, lip=192.168.250.80, TLS Feb 9 08:06:52 mailserver dovecot: IMAP(user(a)example.com): Disconnected: Logged out bytes=479/51185 Feb 9 08:06:52 mailserver dovecot: IMAP(user(a)example.com): Disconnected: Logged out bytes=479/51185 (which I think is from my blackberry users) I'd like to not log Feb 9 08:06:52 mailserver dovecot: IMAP(user(a)example.com): Disconnected: Logged out bytes=479/51185 Suggestions? rick Rick Steeves http://www.sinister.net "The journey is the destination"

2 1

[Dovecot] v1.1.11 released
by Timo Sirainen 09 Feb '09

09 Feb '09

http://dovecot.org/releases/1.1/dovecot-1.1.11.tar.gz http://dovecot.org/releases/1.1/dovecot-1.1.11.tar.gz.sig Hopefully this v1.1 release will last a few months. - IMAP: PERMANENTFLAGS list didn't contain \*, causing some clients not to save keywords. - dbox: INTERNALDATE and save date was returned wrong for converted maildir files. - auth: Using "username" or "domain" passdb fields caused problems with cache and blocking passdbs in v1.1.8 .. v1.1.10. - userdb prefetch + blocking passdbs was broken with non-plaintext auth in v1.1.8 .. v1.1.10. - If mail_chroot is set, don't fail at startup in dump-capability.

10 16

[Dovecot] Maildir structure question
by Nicolas KOWALSKI 08 Feb '09

08 Feb '09

Hello, About the INBOX location when using maildir, in the wiki, http://wiki.dovecot.org/MailboxFormat/Maildir, I can read: " Directory Structure ~/Maildir/new, ~/Maildir/cur and ~/Maildir/tmp directories contain the messages for INBOX. The tmp directory is used during delivery, new messages arrive in new and read shall be moved to cur by the clients. " But in my Maildir, I see this: niko@petole:~$ ls -la Maildir/ total 144 drwxr-xr-x 35 niko niko 4096 2009-02-06 08:37 . drwxr-xr-x 25 niko niko 4096 2009-02-06 10:26 .. drwxr-xr-x 5 niko niko 4096 2009-02-06 09:16 .INBOX ... There are no 'cur', 'new' and 'tmp' directories in ~/Maildir, as written in the wiki, but instead this .INBOX directory which contains these 'cur', 'new' and 'tmp'. Is this expected ? Thanks. My configuration: petole:~# dovecot -n # 1.1.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.28.3 i686 Debian 4.0 ssl_cert_file: /etc/ssl/certs/petole.demisel.net.pem ssl_key_file: /etc/ssl/private/petole.demisel.net.pem login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_location: maildir:~/Maildir namespace: type: private separator: / list: yes subscriptions: yes auth default: passdb: driver: pam userdb: driver: passwd socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 -- Nicolas

3 8

[Dovecot] Best Imap Transfer Tool?
by Neil 08 Feb '09

08 Feb '09

So I'm looking to do a migration of my IMAP mailboxes, and I'm looking for the best tool to use. I used to use the uw-mailutil tool, a while ago, but that was a bit coarse of a tool. More recently I've used imapsync, but that was giving me some errors. I've sort of tracked those down; but I was wondering if anyone else had any other recommendations...? Thanks.

2 2

[Dovecot] Migrating mail between servers
by Knute Johnson 07 Feb '09

07 Feb '09

I've currently got dovecot running on a Fedora server and I want to move all my mail to my new server running ubuntu. Both use mbox and I have IMAP working in both. Can I just copy the ~user/mail directory and /var/mail/user file and replace them in the new server? Thanks, -- Knute Johnson "The urge to save humanity is almost always a false front for the urge to rule." H.L. Mencken

3 2

[Dovecot] FreeBSD pam auth problems
by Dmitry Samersoff 07 Feb '09

07 Feb '09

I'm impressed by dovecto and try to upgrade my home system from wu-imapd running there for last 5 years to dovecot. It's straghtforward FreeBSD setup with ssl-only auth, inboxes in /var/mail and user mail under %h/Mail But I get some strange error: Fatal: userdb didn't return a home directory, but mail location used it (%h): %h/Mail:INBOX=/var/mail/%u Thank you in advance! -Dmitry mircat:dovecot#./sbin/dovecot -n # 1.1.10: /usr/local/dovecot/etc/dovecot.conf # OS: FreeBSD 6.2-RELEASE i386 base_dir: /var/run/dovecot log_path: /var/log/dovecot_main.log info_log_path: /var/log/dovecot_info.log listen: *:143 ssl_listen: *:993 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/local/dovecot/libexec/dovecot/imap-login login_user: nobody login_chroot: no login_max_processes_count: 30 max_mail_processes: 30 first_valid_uid: 1 mail_uid: smmsp mail_gid: smmsp mail_location: mbox:%h/Mail:INBOX=/var/mail/%u mail_debug: yes mbox_lazy_writes: no auth default: failure_delay: 1 verbose: yes debug: yes worker_max_request_count: 1 passdb: driver: pam args: imap -- Dmitry Samersoff dms(a)samersoff.net, http://devnull.samersoff.net * There will come soft rains ...

2 4

[Dovecot] Info regarding conversion of mbox to maildir
by Scott Silva 06 Feb '09

06 Feb '09

When I finally decide to convert to maildir, will I have to set up namespaces during the conversion, or will dovecot figure out where everything is by itself? Should I set up deliver to go to maildir/ globally, or per user? I have considered using the convert plugin, if there are not a lot of negatives. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!!

2 3

[Dovecot] Public namespace permissions documentation/questions
by Thomas Hummel 06 Feb '09

06 Feb '09

Hello Timo, In my trials to setup a shared namespace with dovecot-1.1.8/LDAP passdb/userdb (prefetch)/Maildir, I found out that : 1) ACL are mandatory (at least if the acl plugin is triggered in dovecot.conf) Am I correct ? I'm still not sure if we can do without ACL at all (only with unix permissions and system_user userdb extra field). 2) the system_user userdb extra field is supposed to be ...the logname of the user the secondary groups of whom we want to check ! i.e. if user foobar belongs to secondary groups foogid, zgid, wgid and doveshared uid=xxx(foobar) gid=yyy(foogid) groups=zzz(zgid),www(wgid),vvv(doveshared) and we dovecot to take them into account, we have to make the usedb return the system_user extra field with the value foobar. Seems obvious now and said this way, but looking at the wiki : "system_user: If this is given, the user's groups are read from /etc/group (or wherever NSS is configured to taken them from)." I thought 'system_user' was a flag (a boolean) which, when triggered made dovecot look for the secondaries group of the user (user whose name is already known). a) am I correct ? b) why isn't system_user such a boolean ? Is there a case where we'd want system_user to be different than the user dovecot runs as at the moment the check takes place ? 3) same idea with acl_groups : since this extra_field holds a list of groups for the ACL plugin, why not rely on the native unix groups of the system the user belong to ? Thanks (and sorry for the 2 previous threads where I was blindly confused by the system_user thing). -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

2 1

[Dovecot] dovecot-shared file
by Thomas Hummel 06 Feb '09

06 Feb '09

Hello Timo, About the dovecot-shared file, the wiki says : "Unless you're using a single UID for all the users, you'll need to have a dovecot-shared file in each shared maildir. The group and the file permissions for new files inside the maildir are taken from the dovecot-shared file." but says the following too : "With Maildir dovecot-shared file controls if the \Seen flags are shared or private. If you don't have the file, they're shared." The question is "does it make sense (or is it even possible) not to have the file ?". Why would one not have the file and how would it work then ? By relying on the set-gid bit and umask ? Finally, the wiki says : "If you do have the file, the \Seen flag state is stored only in the user's index files. By making each user have their own private index files, you can make the \Seen flag private for the users." So, my undersanding is that : 1) you have the file 1.a) if INDEX points to the same place, flags are shared but are lost if indexes are lost 1.b) if INDEX points to some user dependant place, flags are private but are lost if indexes are lost 2) you don't have the file flags are shared, whatever INDEX points to and, since they're stored in filename, survive indexes lost. but does shared-mailboxes even work if we don't have that file ? maybe only if the set-gid bit and umask does what the file would have done ? So maybe, if you want to share flags, 2) is safer dans if you want them private, 1.b) is the only choice ? thanks -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

2 1

[Dovecot] Shared subscription, acl-list and uidvalidity(s)
by Thomas Hummel 06 Feb '09

06 Feb '09

Hello, I'm running dovecot-1.1.8/Maildir/ACL plugin. I sucessfully set up a Maildir shared between users of the unix group 'doveshared' via a public namespace, unix permissions and ACL files. The location of my public namespace is /path/to/public. I tried 2 sub-setups : First setup ---------- drwxrws--- 4 root doveshared 4096 Jan 30 13:39 public -rw-r----- 1 root doveshared 18 Jan 30 13:38 public/subscriptions I first connect (in Thunderbird) to dovecot with user 'hummel', then with user 'doveimap'. The following files are created in /path/to/public/ : -rw------- 1 doveimap doveshared 40 Jan 30 14:03 dovecot-acl-list -rw------- 1 hummel doveshared 8 Jan 30 14:03 dovecot-uidvalidity -rw------- 1 hummel doveshared 0 Jan 30 14:02 dovecot-uidvalidity.4982fa7a I've got my own idea about what they're used for, but can you explain what they are supposed to be ? I guess the uidvalidity files are UIDVALIDITY, not for the mailboxes the namespace holds (since my understanding is that the uidvalidities of mailboxes are stored in the first line of dovecot-uidlist files), but for the namespace itself (in case it is destroyed and then recreated for instance). Am I right ? Why 2 files ? Second setup ------------- I follow the 'Shared subscriptions' section of the wiki : drw-r-s--- 4 root doveshared 4096 Jan 30 14:19 public -rw-r----- 1 root doveshared 18 Jan 30 13:38 public/subscriptions As expected, dovecot (and it shows in the logs), has not sufficient permissions to create the files above (dovecot-acl-list, dovecot-uidvalidity, dovecot-uidvalidity.4982fa7a). What are the consequences ? Thanks. -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

2 3