- dovecot - dovecot.org

[Dovecot] [PATCH] Support GSS-SPNEGO natively
by Jason Gunthorpe 13 Aug '08

13 Aug '08

I cooked this up while trying to figure out why thunderbird on Windows w/ SSPI was not working, but it turned out thunderbird does not use it, so I haven't been able to test it yet. I'm presenting it for discussion only, unless someone else can try it :) Modern versions of MIT kerberos support GSS-SPNEGO natively, but are only willing to negotiate for kerberos tickets and not NTLM messages. This is how the SPNEGO works in libapache-mod-auth-kerb-5.3 which simply passes SPNEGO packets directly to gssapi if the library is new enough. There is even a configure feature test for the gssapi library in that packages configure script. Note that Debian etch's standard kerb libaries (1.4) are not good enough for this. Having this work means the other gssapi policy knobs in dovecot, like auth_gssapi_hostname, work properly. Instead of 'whatever it is that samba does'. I guess it fixes the concerns about winbind accesses blocking (although don't the gssapi calls block??) In light of this it is really only useful to use winbind if you want to support NTLM as kerberos will do the necessary exchanges with the kdc for an Active Directory domain. In truth a proper and complete design would somehow layer the built in NTLM module under the SPNEGO negotiation and only pass NTLM messages off to samba but I doubt anyone cares with NTLM being rather obsolete. --- dovecot-1.0.13/src/auth/mech-gssapi.c 2007-12-11 11:52:08.000000000 -0700 +++ dovecot-1.0.13-jgg/src/auth/mech-gssapi.c 2008-08-11 23:52:15.000000000 -0600 @@ -417,4 +424,21 @@ mech_gssapi_auth_free }; +/* MTI Kerberos > 1.5 supports SPNEGO for Kerberos tickets internally. + Nothing else needs to be done here. Note however that this does not + support SPNEGO when the only available credential is NTLM.. */ +const struct mech_module mech_gssapi_spnego = { + "GSS-SPNEGO", + + MEMBER(flags) 0, + + MEMBER(passdb_need_plain) FALSE, + MEMBER(passdb_need_credentials) FALSE, + + mech_gssapi_auth_new, + mech_gssapi_auth_initial, + mech_gssapi_auth_continue, + mech_gssapi_auth_free +}; + #endif --- dovecot-1.0.13/src/auth/mech.c 2007-12-11 11:52:08.000000000 -0700 +++ dovecot-1.0.13-jgg/src/auth/mech.c 2008-08-11 21:30:56.000000000 -0600 @@ -72,6 +72,7 @@ extern struct mech_module mech_anonymous; #ifdef HAVE_GSSAPI extern struct mech_module mech_gssapi; +extern struct mech_module mech_gssapi_spnego; #endif void mech_init(void) @@ -86,6 +87,7 @@ mech_register_module(&mech_anonymous); #ifdef HAVE_GSSAPI mech_register_module(&mech_gssapi); + mech_register_module(&mech_gssapi_spnego); #endif } @@ -101,5 +103,6 @@ mech_unregister_module(&mech_anonymous); #ifdef HAVE_GSSAPI mech_unregister_module(&mech_gssapi); + mech_unregister_module(&mech_gssapi_spnego); #endif }

3 9

[Dovecot] [PATCH] Allow GSSAPI to work with multihomed hosts
by Jason Gunthorpe 13 Aug '08

13 Aug '08

I saw some past chatter on this in the list archives, but here is another stab and another rational. This patch follows a similar patch to openssh in that it allows any key in the specified keytab to match the incoming host key. This is necessary for multihomed hosts. See: https://bugzilla.mindrot.org/show_bug.cgi?id=928 IMAP/POP seem to be a strong candidate to be multihomed because they are very likely to have an internal to a firewall and external to a firewall name. Due to the way MIT kerberos handles host name resolution via reverse IP lookup this can often result in multiple principle names and there is simply nothing to be done about it. This is my situation.. When you add windows into the mix, which uses a totally different set of rules to determine the principle all hope seems to be lost to have a single service principle name for an imap server :( I was able to make things work for my environment using only the auth_gssapi_hostname feature if only MIT kerberos was used, but as soon as windows SSPI was involved it choose a different hostname. Thus we want to have GSSAPI to match any service principle in the keytab. As far as security concerns go, the admin can configure the keytab for dovecot to be seperate from the system key tab and contain only valid imap SPNs, but in truth it probably doesn't matter. I choose to just use the magic configurable: auth_gssapi_hostname = $ALL rather than introduce more configurables FWIW, after applying this I now am happy to say I have an Active Directory KDC, with dovecot providing gssapi auth to thunderbird on both linux (mit kerb 1.6) and windows (sspi).. --- dovecot-1.0.13/src/auth/mech-gssapi.c 2007-12-11 11:52:08.000000000 -0700 +++ dovecot-1.0.13-jgg/src/auth/mech-gssapi.c 2008-08-11 23:52:15.000000000 -0600 @@ -101,6 +101,13 @@ gss_name_t gss_principal; const char *service_name; + if (strcmp(request->auth->gssapi_hostname,"$ALL") == 0) { + auth_request_log_info(request, "gssapi", + "Using all keytab entires"); + *ret = GSS_C_NO_CREDENTIAL; + return GSS_S_COMPLETE; + } + if (strcasecmp(request->service, "POP3") == 0) { /* The standard POP3 service name with GSSAPI is called just "pop". */

2 2

[Dovecot] dovecot sieve sends vacation messages with null envelope sender
by Josef Liška 13 Aug '08

13 Aug '08

I am using this simple sieve script to do "vacation": require ["fileinto", "vacation"]; if exists "X-Spam-Flag" { stop; } vacation :days 1 :subject "Out of office reply" :addresses ["<email address hidden>", "<email address hidden>" ] "I am on vacation until 2008-08-07. If you have something urgent, please contact: Jan Novak <email address hidden> "; I use sql lookups for users and passwords. For some reason the default location ~/.dovecot-sieve did not work for some reason. However I prefer to put sieve scripts to /var/lib/sieve and when I added additional field to lookup with this location it started to work. But it sends vacation messages with null envelope sender, which is in my opinion undesirable, because many vacation messages are caught in spam filters. I think there could be same sender on envelope. In dovecot-sieve/src/sieve-cmu.c around line 380 is a call to smtp_client_open(src->addr, NULL, &f); NULL could be replaced with src->fromaddr Maybe some more patching may be necesary. I found similar patch for cyrus-imapd at http://oss.digirati.com.br/mail/cyrus.html <http://oss.digirati.com.br/mail/cyrus.html> My current system: 1) Ubuntu 8.04.1 jl@mail:~$ dovecot --version 1.0.15 It is a backported package from ubuntu intrepid ibex. However the same applies for dovecot 1.0.10 which is in ubuntu 8.04. Summary: I expect messages sent by vacation recipe should have envelope from same as user's e-mail address. This is then writen to Return-Path: header by receiving MTA NULL envelope from is used, resulting (in my case) to Return-Path: <> rewriten by postfix to Return-Path: <MAILER-DAEMON> by receiving MTA

7 6

[Dovecot] RfE: use HOSTNAME environment variable in hostpid_init()
by Heiko Schlichting 13 Aug '08

13 Aug '08

Hi, All parts of dovecot except deliver uses the result of hostpid_init() in src/lib/hostpid.c as a hostname which only asks gethostname(). deliver honours environment variable HOSTNAME in src/deliver/deliver.c: getenv("HOSTNAME"); and uses the hostname of hostpid_init() as a fallback. Wouldn't it be consequent to evaluate the environment variable HOSTNAME in hostpid_init() with fallback to gethostname() and remove the special behavior from deliver? The dovecot master process should export $HOSTNAME to all childs in this case. Motivation: Dovecot uses the hostname as part of Maildir file names and gethostname() is not fully qualified on all operating systems (it is on IRIX but not on Linux). But unqualified hostnames are not unique and it is frequent that dovecot hosts are named "mail" oder "imap" as hostname. To distinguish between mail.domain1.com and mail.domain2.net would be easier if dovecot evaluate $HOSTNAME in all case not just deliver as program imap can create Maildir files as well. Heiko Heiko Schlichting Freie Universität Berlin heiko(a)FU-Berlin.DE Zentraleinrichtung für Datenverarbeitung (ZEDAT) Telefon +49 30 838-54327 Fabeckstraße 32 Telefax +49 30 838454327 14195 Berlin

2 1

[Dovecot] syslog with PID
by Heiko Schlichting 13 Aug '08

13 Aug '08

Hi, LOG_NDELAY is the only option for openlog() in dovecot 1.1.2. Wouldn't be LOG_NDELAY|LOG_PID as option parameter much more useful? Without logging the pid, it is impossible to match 'Disconnected' log entries and the corresponding session start/login. Therefore I suggest to use LOG_NDELAY|LOG_PID in the options of i_set_failure_syslog() at all 6 occurrences which passes it to openlog(). I know that it is possible to - use logging to file - patch it myself but I can't see good reasons in not using LOG_PID here. As far as I know, most other programs specify LOG_PID. Without LOG_PID: Jul 31 10:21:08 name dovecot: IMAP(hsg): Disconnected: Logged out bytes=28/242 With LOG_PID: Jul 31 10:21:08 name dovecot[17016]: IMAP(hsg): Disconnected: Logged out bytes=28/242 Heiko Heiko Schlichting Freie Universität Berlin heiko(a)FU-Berlin.DE Zentraleinrichtung für Datenverarbeitung (ZEDAT) Telefon +49 30 838-54327 Fabeckstraße 32 Telefax +49 30 838454327 14195 Berlin

3 5

[Dovecot] sieve - Sendmail process terminated abnormally, exit status 70
by Thomas Harold 13 Aug '08

13 Aug '08

How do we start troubleshooting this? deliver(user(a)example.com): Aug 12 18:27:19 Error: Sendmail process terminated abnormally, exit status 70 deliver(user(a)example.com): Aug 12 18:27:19 Info: sieve runtime error: Vacation: Error sending mail deliver(user(a)example.com): Aug 12 18:27:19 Info: msgid=<48A20E3C.7070307(a)example.com>: saved mail to INBOX deliver(user(a)example.com): Aug 12 18:27:19 Error: sieve_execute_bytecode(/var/vmail/example.com/user//Home/.dovecot.sievec) failed It seems to only choke on the vacation portion. It creates entries in the ".dovecot.lda-dupes" file. But then dies while sending the reply e-mail. The contents of the user's .dovecot.sieve file is: ------------------------------------- require ["fileinto", "include", "vacation"]; # Move spam to spam folder if exists "X-Spam-Flag" { fileinto "spam"; # Stop here so that we do not reply on spams stop; } include :personal "sieve-vacation"; ------------------------------------- And the "" file looks like: ------------------------------------- require ["vacation"]; vacation # Reply at most once a day to a same sender :days 1 :subject "Out of office reply" # List of recipient addresses which are included in the auto replying. # If a mail's recipient is not on this list, no vacation reply is sent for it. :addresses "user(a)example.com" "blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah, user(a)example.com"; ------------------------------------- If I comment out the "include :personal "sieve-vacation";" line, then it works, but obviously not the vacation portion. Deliver does at least not die horribly. I get the same error if I move the content of the vacation include file into the main ".dovecot.sieve" file. # ls -la /usr/local/libexec/dovecot/lda/ -rwsr-xr-x 1 root root 802824 Aug 12 18:12 deliver # ls -la /usr/libexec/dovecot/ total 5728 drwxr-xr-x 2 root root 4096 Jul 31 04:04 . drwxr-xr-x 11 root root 4096 Jul 25 04:39 .. -rwxr-xr-x 1 root root 58416 Jul 24 06:32 checkpassword-reply -rwxr-xr-x 1 root root 666128 Jul 24 06:32 convert-tool -rwxr-xr-x 1 root root 802824 Jul 24 06:32 deliver -rwxr-xr-x 1 root root 164176 Jul 24 06:32 dict -rwxr-xr-x 1 root root 350384 Jul 24 06:32 dovecot-auth -rwxr-xr-x 1 root root 674176 Jul 24 06:32 expire-tool -rwxr-xr-x 1 root root 59200 Jul 24 06:32 gdbhelper -rwxr-xr-x 1 root root 245872 Jul 24 06:32 idxview -rwxr-xr-x 1 root root 854488 Jul 24 06:32 imap -rwxr-xr-x 1 root root 157216 Jul 24 06:32 imap-login -rwxr-xr-x 1 root root 61248 Jul 24 06:32 listview -rwxr-xr-x 1 root root 61800 Jul 24 06:32 logview -rwxr-xr-x 1 root root 74200 Jul 24 06:32 maildirlock -rwxr-xr-x 1 root root 931 Jul 24 06:27 mkcert.sh -rwxr-xr-x 1 root root 787464 Jul 24 06:32 pop3 -rwxr-xr-x 1 root root 149152 Jul 24 06:32 pop3-login -rwxr-xr-x 1 root root 83968 Jul 24 06:32 rawlog -rwxr-xr-x 1 root root 165152 Jun 11 03:21 sievec -rwxr-xr-x 1 root root 157216 Jun 11 03:21 sieved -rwxr-xr-x 1 root root 62584 Jul 24 06:32 ssl-build-param (output of "yum list") dovecot.x86_64 :1.1.2-2_77.el5 installed dovecot-sieve.x86_64 1.1.5-8.el5 installed I'm not finding any AVC errors in the SELinux audit.log file. And I'm not sure what other switches I can turn on to get better error information as to what sendmail/deliver are choking on in this virtual (setuid) environment where we use Dovecot as the LDA.

3 3

[Dovecot] Marking as Read causes Body.Peek on ALL messages - Reasonable?
by Daniel Watts 13 Aug '08

13 Aug '08

I've noticed when I select a folder of messages (Thunderbird) and mark them all as read (or unread) it produces the following IMAP transcript: Source Destination Info c.c.c.c s.s.s.s Request: DONE s.s.s.s c.c.c.c Response: 20 OK Idle completed. c.c.c.c s.s.s.s Request: 21 uid store 1:20 -Flags (\Seen) s.s.s.s c.c.c.c Response: * 1 FETCH (UID 1 FLAGS (\Recent NonJunk)) c.c.c.c s.s.s.s Request: 22 UID fetch 2 (UID RFC822.SIZE BODY.PEEK[]) s.s.s.s c.c.c.c Response: * 2 FETCH (UID 2 RFC822.SIZE 1339 BODY[] {1339} c.c.c.c s.s.s.s Request: 23 UID fetch 3 (UID RFC822.SIZE BODY.PEEK[]) s.s.s.s c.c.c.c Response: * 3 FETCH (UID 3 RFC822.SIZE 1342 BODY[] {1342} c.c.c.c s.s.s.s Request: 24 UID fetch 5 (UID RFC822.SIZE BODY.PEEK[]) s.s.s.s c.c.c.c Response: * 5 FETCH (UID 5 RFC822.SIZE 1344 BODY[] {1344} c.c.c.c s.s.s.s Request: 25 UID fetch 6 (UID RFC822.SIZE BODY.PEEK[]) s.s.s.s c.c.c.c Response: * 6 FETCH (UID 6 RFC822.SIZE 1350 BODY[] {1350} c.c.c.c s.s.s.s Request: 26 UID fetch 7 (UID RFC822.SIZE BODY.PEEK[]) s.s.s.s c.c.c.c Response: * 7 FETCH (UID 7 RFC822.SIZE 1344 BODY[] {1344} c.c.c.c s.s.s.s Request: 27 UID fetch 8 (UID RFC822.SIZE BODY.PEEK[]) s.s.s.s c.c.c.c Response: * 8 FETCH (UID 8 RFC822.SIZE 1325 BODY[] {1325} c.c.c.c s.s.s.s Request: 28 UID fetch 9 (UID RFC822.SIZE BODY.PEEK[]) s.s.s.s c.c.c.c Response: * 9 FETCH (UID 9 RFC822.SIZE 1323 BODY[] {1323} c.c.c.c s.s.s.s Request: 29 UID fetch 10 (UID RFC822.SIZE BODY.PEEK[]) s.s.s.s c.c.c.c Response: * 10 FETCH (UID 10 RFC822.SIZE 1338 BODY[] {1338} c.c.c.c s.s.s.s Request: 30 UID fetch 11 (UID RFC822.SIZE BODY.PEEK[]) s.s.s.s c.c.c.c Response: * 11 FETCH (UID 11 RFC822.SIZE 1333 BODY[] {1333} c.c.c.c s.s.s.s Request: 31 UID fetch 12 (UID RFC822.SIZE BODY.PEEK[]) s.s.s.s c.c.c.c Response: * 12 FETCH (UID 12 RFC822.SIZE 1344 BODY[] {1344} c.c.c.c s.s.s.s Request: 32 UID fetch 13 (UID RFC822.SIZE BODY.PEEK[]) s.s.s.s c.c.c.c Response: * 13 FETCH (UID 13 RFC822.SIZE 1335 BODY[] {1335} c.c.c.c s.s.s.s Request: 33 UID fetch 15 (UID RFC822.SIZE BODY.PEEK[]) s.s.s.s c.c.c.c Response: * 15 FETCH (UID 15 RFC822.SIZE 1323 BODY[] {1323} c.c.c.c s.s.s.s Request: 34 UID fetch 16 (UID RFC822.SIZE BODY.PEEK[]) s.s.s.s c.c.c.c Response: * 16 FETCH (UID 16 RFC822.SIZE 1325 BODY[] {1325} c.c.c.c s.s.s.s Request: 35 UID fetch 17 (UID RFC822.SIZE BODY.PEEK[]) s.s.s.s c.c.c.c Response: * 17 FETCH (UID 17 RFC822.SIZE 1333 BODY[] {1333} c.c.c.c s.s.s.s Request: 36 UID fetch 18 (UID RFC822.SIZE BODY.PEEK[]) s.s.s.s c.c.c.c Response: * 18 FETCH (UID 18 RFC822.SIZE 1327 BODY[] {1327} c.c.c.c s.s.s.s Request: 37 UID fetch 19 (UID RFC822.SIZE BODY.PEEK[]) s.s.s.s c.c.c.c Response: * 19 FETCH (UID 19 RFC822.SIZE 1343 BODY[] {1343} c.c.c.c s.s.s.s Request: 38 UID fetch 20 (UID RFC822.SIZE BODY.PEEK[]) s.s.s.s c.c.c.c Response: * 20 FETCH (UID 20 RFC822.SIZE 1337 BODY[] {1337} c.c.c.c s.s.s.s Request: 39 IDLE s.s.s.s c.c.c.c Response: + idling NOTE: c.c.c.c = client (thunderbird) s.s.s.s = server (dovecot 1.1.2) Is this reasonable? I thought it would be possible to just send a list of message UIDs and say mark these as /seen /unseen etc. Of course this could (is probably) just Thunderbird being braindead but confirmation would be appreciated. Thanks, Daniel

2 1

[Dovecot] IMAP inbox: cannot delete tagged messages or change their tag
by Epimedia 13 Aug '08

13 Aug '08

Hello, a bit of a problem with Dovecot. Version is 1.0.15 and is a default install (no changes to config) from FC8 repository... except that Dovecot is configured to use Maildir I have a user on the system who uses the tags in Thunderbird (Important, Personal etc). When she tags the messages they cannot be deleted and their tags cannot be changed. When deleting a message from the IMAP inbox it momentarily disappears and moves a copy to the Trash but when the IMAP inbox is reloaded the message reappears. The same happens when I try to change a tag: it comes back with the previous tag. Untagged messages can be freely deleted. Also, this problem does not happen if the messages are in a IMAP folder. They can be freely deleted. The problem seems specific to Dovecot, not Thunderbird, as I am able to tag and delete messages in another IMAP account. Also, accessing the same IMAP account using OS X Mail the messages come back after deleting them. Where should I start looking for a solution to this problem?

2 1

[Dovecot] Trying to Hide Namespace - new configuration options?
by Daniel Watts 13 Aug '08

13 Aug '08

Using 1.1.2 We have: # default namespace namespace private { separator = / prefix = inbox = yes #location = maildir:/home/virtual/%h #Maildir } # for backwards compatibility: namespace private { separator = / prefix = mail/ location = maildir:%h/Maildir/ #Maildir hidden = yes list = no } The 'hidden=yes' seemed to do nothing but saw earlier in this list a reply to add 'list=no'. This has worked to hide all folder but we still have /mail/Trash showing and it refuses to go away even after unsubscribing. mail/Trash appears when I set my email client to use folder prefix "mail/". If i set the prefix to blank I only see my Inbox and Deleted folders. Interestingly it shows 'Deleted' not 'Trash'. I guess Thunderbird renames 'Trash'. What other configs are there to try? Is there a list of config changes for 1.1.x anywhere? We were not aware of the list=no config. Thanks, Daniel

2 2

[Dovecot] How to do line breaks in sieve scripts?
by CJ Keist 13 Aug '08

13 Aug '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 In working with auto vacation replies I'd like to do a sieve script as follows: require ["vacation"]; vacation :days 30 :addresses "cj.keist(a)colostate.edu" :subject "Out of Office" "***************** Out of Office ****************** I'm away -- send mail to foo in my absence ***************************************************"; But the libsieve-php.sourceforge.net check site doesn't like the line breaks. Is there a way to do line breaks in sieve scripting? I've tried "\" at the end of the lines but that didn't work. - -- C. J. Keist Email: cj.keist(a)colostate.edu UNIX/Network Manager Phone: 970-491-0630 Engineering Network Services Fax: 970-491-5569 College of Engineering, CSU Ft. Collins, CO 80523-1301 All I want is a chance to prove 'Money can't buy happiness' -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFIm2UwA29OFr7C6jcRAn7mAKCokJxNCkTiwyXuSo1qDjZ+9xqVfgCdG3vC DC+/BIiQVqZN+U8CzwWdxgQ= =4+0r -----END PGP SIGNATURE-----

3 3

[Dovecot] problems with sieve and lda
by Harondel J. Sibble 13 Aug '08

13 Aug '08

Okay, after reading the wiki and list archives, I am confused. I am attemping to get the deliver LDA working on a centos 5.1 system # rpm -qa | grep dovecot dovecot-1.0.7-2.el5 dovecot-sieve-1.0.2-6.el5 # rpm -qa | grep postfix postfix-2.3.3-2 so that I can use Sieve for mail filtering to imap folders, I am using the mbox format Following the wiki here for system users http://wiki.dovecot.org/LDA/Postfix I never get any info in the logs about cmusieve, the only way I see anything show up is if I add the transport settings to postfix/master.cf or see below >From reading the list archives, as best as I can tell, the only time I need to make the changes in postfix's master.cf is if I am using a virtual environment, otherwise for local delivery, all I need is the mailbox_command setting in postfix/main.cf However with that setting, I get nothing! If I then run deliver from the command line as per a couple of mailling postings, cat /etc/hosts | /usr/libexec/dovecot/deliver -d localaccount(a)mydomain.com -f mygmailaccount(a)gmail.com I get deliver(localaccount(a)mydomail.com): Aug 10 22:07:17 Info: Loading modules from directory: /usr/lib/dovecot/lda deliver(localaccount(a)mydomail.com): Aug 10 22:07:17 Info: Module loaded: /usr/lib/dovecot/lda/lib90_cmusieve_plugin.so deliver(localaccount(a)mydomail.com): Aug 10 22:07:17 Error: Can't connect to auth server at /var/run/dovecot/auth-master: No such file or directory Config stuff (dovecot -n) # 1.0.7: /etc/dovecot.conf log_path: /var/log/dovecot/dovecot.log info_log_path: /var/log/dovecot/dovecot.log protocols: imaps pop3s listen(default): *:143 listen(imap): *:143 listen(pop3): [::] ssl_listen(default): *:943 ssl_listen(imap): *:943 ssl_listen(pop3): ssl_cert_file: /etc/pki/dovecot/certs/dovecot.cert ssl_key_file: /etc/pki/tls/private/my.domain.tld.key verbose_ssl: yes login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_location: mbox:~/mail:INBOX=/var/spool/mail/%u:INDEX=~/mail/.imap/.imap/indexes/ mail_debug: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 auth default: passdb: driver: pam userdb: driver: passwd postfix/main.cf has mailbox_commmand = /usr/libexec/dovecot/deliver A .dovecot.sieve file with the following contents for testing purposes is located at ~/mail require "fileinto"; if header :comparator "i;ascii-casemap" :contains "Subject" "**SPAM**" { fileinto "Trash"; stop; } The LDA section from the dovecot.conf file protocol lda { # Address to use when sending rejection mails. # postmaster_address = # Hostname to use in various parts of sent mails, eg. in Message-Id. # Default is the system's real hostname. #hostname = # Support for dynamically loadable plugins. mail_plugins is a space separated # list of plugins to load. mail_plugin_dir = /usr/lib/dovecot/lda mail_plugins = cmusieve # Binary to use for sending mails. #sendmail_path = /usr/lib/sendmail # UNIX socket path to master authentication server to find users. #auth_socket_path = /var/run/dovecot/auth-master #sieve_global_path = script_path = ~/.dovecot.sieve log_path = /var/log/dovecot/deliverlog info_log_path = /var/log/dovecot/deliverlog debug = yes } What am I missing here to getting this working -- Harondel J. Sibble Sibble Computer Consulting Creating solutions for the small business and home computer user. help(a)pdscc.com (use pgp keyid 0x3AD5C11D) http://www.pdscc.com (604) 739-3709 (voice/fax) (604) 686-2253 (pager)

4 7

[Dovecot] Fwd: [MORG] IMAP5 List
by Timo Sirainen 13 Aug '08

13 Aug '08

If anyone's interested, especially client developers. It's been a bit quiet there after the initial rush. Begin forwarded message: > From: Randall Gellens <randy(a)qualcomm.com> > Date: August 1, 2008 5:08:39 AM EDT > To: ietf-imapext(a)imc.org, morg(a)ietf.org > Subject: [MORG] IMAP5 List > > At the MORG BOF, a discussion as to if the proposed IMAP extensions > would merely further add to the existing problem with IMAP being too > hard to get right, for both clients and servers, let to a revival of > the "IMAP5" discussion (previous held during the IMAP EAI > discussions). Here, "IMAP5" refers to a Big Switch (new port and > version) to distinguish this revision from current IMAP. The goal > is to delete as much as possible from IMAP. > > A new mailing list now exists for this discussion on drastically > slimming-down IMAP to make it easier to implement clients and servers. > > ================================================================== > To subscribe, click here: <mailto:imap5-request@ietf.org?body=subscribe > >. > ================================================================== > > It's been observed that "most IMAP clients suck" and that it's hard > for both clients and servers to implement. > > One reason IMAP is hard to implement is that it has a lot of > options. Often there are several alternative ways to accomplish > something. It also has considerable functionality. > > Is it possible and desirable to start with the current set of (IMAP > + all extensions) and consider subtracting as much as possible? The > resulting protocol would still be IMAP, but not backwards-compatible > with today's IMAP, since some currently-mandated items are likely to > be deleted. > > General information about the IMAP5 mailing list is at: <https://www.ietf.org/mailman/listinfo/imap5 > >. > > You can subscribe and manage your subscription at <https://www.ietf.org/mailman/listinfo/imap5 > >. > > -- > Randall Gellens > Opinions are personal; facts are suspect; I speak for myself > only > -------------- Randomly-selected tag: --------------- > If Murphy's Law can go wrong, it will. > _______________________________________________ > MORG mailing list > MORG(a)ietf.org > https://www.ietf.org/mailman/listinfo/morg > Note Well: http://www.ietf.org/maillist.html

4 5

[Dovecot] Auto Vacation replies again
by CJ Keist 13 Aug '08

13 Aug '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sorry to bring this up again. I have now configured my test server to pass all email messages off to our central campus email filter gateway. This gateway scans all email traffic for viruses/spam before being delivered to any local mail servers. Once I did this my auto vacation replies are getting canned due to the fact the from header line is empty in the reply message. You can see that it is empty from my mail logs (soon after the line where is executes my .dovecot.sievec file): Aug 11 13:24:51 mail2.engr.colostate.edu dovecot: [ID 107833 mail.info] auth(default): new auth connection: pid=15539 Aug 11 13:24:51 mail2.engr.colostate.edu postfix/smtpd[15539]: [ID 197553 mail.info] connect from akron.colostate.edu[129.82.103.160] Aug 11 13:24:52 mail2.engr.colostate.edu postfix/smtpd[15539]: [ID 197553 mail.info] setting up TLS connection from akron.colostate.edu[129.82.103.160] Aug 11 13:24:52 mail2.engr.colostate.edu postfix/smtpd[15539]: [ID 197553 mail.info] Anonymous TLS connection established from akron.colostate.edu[129.82.103.160]: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits) Aug 11 13:24:53 mail2.engr.colostate.edu postfix/smtpd[15539]: [ID 197553 mail.info] 44DEC599C3: client=akron.colostate.edu[129.82.103.160] Aug 11 13:24:53 mail2.engr.colostate.edu postfix/cleanup[15547]: [ID 197553 mail.info] 44DEC599C3: message-id=<f57f300811e59cd8ad787c582485f6b9.squirrel(a)webmail.engr.colostate.edu> Aug 11 13:24:53 mail2.engr.colostate.edu postfix/smtpd[15539]: [ID 197553 mail.info] disconnect from akron.colostate.edu[129.82.103.160] Aug 11 13:24:53 mail2.engr.colostate.edu postfix/qmgr[15988]: [ID 197553 mail.info] 44DEC599C3: from=<joeblow(a)engr.colostate.edu>, size=1875, nrcpt=1 (queue active) Aug 11 13:24:53 mail2.engr.colostate.edu deliver(cjay): [ID 315030 mail.info] Loading modules from directory: /userM/mail-services/dovecot/lib/dovecot/lda Aug 11 13:24:53 mail2.engr.colostate.edu deliver(cjay): [ID 619685 mail.info] Module loaded: /userM/mail-services/dovecot/lib/dovecot/lda/lib90_cmusieve_plugin.so Aug 11 13:24:53 mail2.engr.colostate.edu deliver(cjay): [ID 848615 mail.info] mbox: data=/top/admin/ENS/people/cjay/home/:INBOX=/userM/mail/cjay Aug 11 13:24:53 mail2.engr.colostate.edu deliver(cjay): [ID 885103 mail.info] fs: root=/top/admin/ENS/people/cjay/home, index=, control=, inbox=/userM/mail/cjay Aug 11 13:24:53 mail2.engr.colostate.edu deliver(cjay): [ID 223526 mail.info] cmusieve: Using sieve path: /top/admin/ENS/people/cjay/home/.dovecot.sieve Aug 11 13:24:54 mail2.engr.colostate.edu deliver(cjay): [ID 507699 mail.info] cmusieve: Executing script /top/admin/ENS/people/cjay/home/.dovecot.sievec Aug 11 13:24:54 mail2.engr.colostate.edu deliver(cjay): [ID 725890 mail.info] msgid=<f57f300811e59cd8ad787c582485f6b9.squirrel(a)webmail.engr.colostate.edu>: sent vacation response to <joeblow(a)engr.colostate.edu> Aug 11 13:24:54 mail2.engr.colostate.edu postfix/pickup[13201]: [ID 197553 mail.info] B9798599C5: uid=10946 from=<> Aug 11 13:24:54 mail2.engr.colostate.edu postfix/cleanup[15547]: [ID 197553 mail.info] B9798599C5: message-id=<dovecot-1218482693-706158-0(a)mail2.engr.colostate.edu> Aug 11 13:24:54 mail2.engr.colostate.edu postfix/qmgr[15988]: [ID 197553 mail.info] B9798599C5: from=<>, size=772, nrcpt=1 (queue active) Aug 11 13:24:55 mail2.engr.colostate.edu deliver(cjay): [ID 702911 mail.info] msgid=<f57f300811e59cd8ad787c582485f6b9.squirrel(a)webmail.engr.colostate.edu>: saved mail to INBOX Aug 11 13:24:55 mail2.engr.colostate.edu postfix/smtp[15555]: [ID 197553 mail.info] B9798599C5: to=<joeblow(a)engr.colostate.edu>, relay=parker.colostate.edu[129.82.103.125]:25, delay=0.89, delays=0.09/0.51/0.03/0.25, dsn=2.0.0, status=sent (250 2.0.0 m7BJOur1516324 Message accepted for delivery) Aug 11 13:24:55 mail2.engr.colostate.edu postfix/qmgr[15988]: [ID 197553 mail.info] B9798599C5: removed Aug 11 13:24:55 mail2.engr.colostate.edu postfix/local[15549]: [ID 197553 mail.info] 44DEC599C3: to=<cjay(a)engr2.colostate.edu>, relay=local, delay=2.7, delays=0.26/0.19/0/2.2, dsn=2.0.0, status=sent (delivered to command: /userM/mail-services/dovecot/libexec/dovecot/deliver) Aug 11 13:24:55 mail2.engr.colostate.edu postfix/qmgr[15988]: [ID 197553 mail.info] 44DEC599C3: removed Again, my info: OS: Solaris 10 sparc on T2000 postfix: 2.5.2 dovecot: 1.1.2 sieve plug: 1.1.5 dovecot -n: # 1.1.2: /userM/mail-services/dovecot/etc/dovecot.conf Warning: fd limit 256 is lower than what Dovecot can use under full load (more than 3072). Either grow the limit or change login_max_processes_count and max_mail_processes settings base_dir: /userM/mail-services/dovecot/var/run/dovecot/ protocols: imap imaps pop3 pop3s ssl_cert_file: /userM/mail-services/dovecot/etc/ssl/dovecot.pem ssl_key_file: /userM/mail-services/dovecot/etc/ssl/privkey.pem ssl_parameters_regenerate: 0 ssl_cipher_list: MEDIUM:!LOW disable_plaintext_auth: no login_dir: /userM/mail-services/dovecot/var/run/dovecot/login login_executable(default): /userM/mail-services/dovecot/libexec/dovecot/imap-login login_executable(imap): /userM/mail-services/dovecot/libexec/dovecot/imap-login login_executable(pop3): /userM/mail-services/dovecot/libexec/dovecot/pop3-login login_greeting: Cyrus ready. login_max_processes_count: 1024 max_mail_processes: 1024 mail_location: mbox:~/:INBOX=/userM/mail/%u mail_debug: yes mmap_disable: yes mail_nfs_index: yes mail_executable(default): /userM/mail-services/dovecot/libexec/dovecot/imap mail_executable(imap): /userM/mail-services/dovecot/libexec/dovecot/imap mail_executable(pop3): /userM/mail-services/dovecot/libexec/dovecot/pop3 mail_plugin_dir(default): /userM/mail-services/dovecot/lib/dovecot/imap mail_plugin_dir(imap): /userM/mail-services/dovecot/lib/dovecot/imap mail_plugin_dir(pop3): /userM/mail-services/dovecot/lib/dovecot/pop3 auth default: mechanisms: plain login verbose: yes debug: yes passdb: driver: pam passdb: driver: passwd args: blocking=yes userdb: driver: passwd args: blocking=yes socket: type: listen client: path: /userM/mail-services/postfix/var/private/auth mode: 432 user: postfix group: postfix master: path: /userM/mail-services/dovecot/var/run/dovecot/auth-master mode: 384 user: postfix group: postfix My sieve file: require ["fileinto", "vacation"]; # BEGIN VACATION vacation :days 30 :subject "Out of Office Reply" :from "cj.keist(a)colostate.edu" :addresses "cjay(a)engr2.colostate.edu" "********************** OUT OF THE OFFICE ******************* testing auto vacation i will reply to your message. *************************************************************"; Is there something in the config files I'm missing? Also, I'm willing to debug this if someone could point me in the right direction in the sieve plugin code where the from address should be set. Thanks... - -- C. J. Keist Email: cj.keist(a)colostate.edu UNIX/Network Manager Phone: 970-491-0630 Engineering Network Services Fax: 970-491-5569 College of Engineering, CSU Ft. Collins, CO 80523-1301 All I want is a chance to prove 'Money can't buy happiness' -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFIoJRMA29OFr7C6jcRApfUAKCgkd2Jg8e0MeBtjO/lszqfqUCG+wCcCjbX W22d0lwf0dFRrytxJpu/9HM= =zOzG -----END PGP SIGNATURE-----

4 6

[Dovecot] Dovecot,nfs or memory indexing
by Sebastian Tymków 13 Aug '08

13 Aug '08

Hi, I wonder if it's normal behaviour that indexes created in memory have long creation time. Other problem is that indexes created on nfs sometimes get crushed and I need to delete indexes in case of fetching mails ( I see mails on hd but when telnet on host and make stat I don't see any). Does version 1.1.x correct this errors ? And what is better to use : nfs or memory indexing ? Can someone point me adventages and disadventages of using both solutions? Best regards, Sebastian

2 3

[Dovecot] Quota does not apply.
by Dario Ale 13 Aug '08

13 Aug '08

Hello list: I am try to run quota plugin but only works a part. The users are virtual and his homedir and mbox are in NFS server, INDEX files are in local disk. Quota only is applied to global home, if I configure a low global quota and sent an mail to my e-mail, quota works fine, mail is temporally deferred. But, if I configure a high global quota and a small quota for INBOX, sent a mail that is more big that quota for INBOX, then quota is not applied and the mail is delivered to INBOX. IMAP log and LDA log are equals, why I only pasted IMAP log: "... dovecot: Aug 04 15:47:03 Info: IMAP(dario.a): Loading modules from directory: /usr/lib/dovecot/imap dovecot: Aug 04 15:47:03 Info: IMAP(dario.a): Module loaded: /usr/lib/dovecot/imap/lib10_quota_plugin.so dovecot: Aug 04 15:47:03 Info: IMAP(dario.a): Module loaded: /usr/lib/dovecot/imap/lib11_imap_quota_plugin.so dovecot: Aug 04 15:47:03 Info: IMAP(dario.a): Effective uid=1002, gid=1002, home=/vmail/telpin.com.ar/d/dario.a/ dovecot: Aug 04 15:47:03 Info: IMAP(dario.a): Quota root: name= backend=dict args=:proxy::quotadict dovecot: Aug 04 15:47:03 Info: IMAP(dario.a): dict quota: user=dario.a, uri=proxy::quotadict, enforcing=0 dovecot: Aug 04 15:47:03 Info: IMAP(dario.a): Quota rule: root= mailbox=* bytes=209715200 (0%) messages=0 (0%) dovecot: Aug 04 15:47:03 Info: IMAP(dario.a): Quota rule: root= mailbox=.mbox bytes=10485760 (0%) messages=0 (0%) dovecot: Aug 04 15:47:03 Info: IMAP(dario.a): Quota warning: bytes=199229440 (95%) messages=0 (0%) command=/usr/local/bin/quota-warning.sh 95 dovecot: Aug 04 15:47:03 Info: IMAP(dario.a): Quota warning: bytes=167772160 (80%) messages=0 (0%) command=/usr/local/bin/quota-warning.sh 80 dovecot: Aug 04 15:47:03 Info: IMAP(dario.a): mbox: data=/vmail/telpin.com.ar/d/dario.a/:INDEX=/etc/dovecot/dovecot-indexes/vmail/telpin.com.ar/d/dario.a/:INBOX=/vmail/telpin.com.ar/d/dario.a/.mbox dovecot: Aug 04 15:47:03 Info: IMAP(dario.a): fs: root=/vmail/telpin.com.ar/d/dario.a, index=/etc/dovecot/dovecot-indexes/vmail/telpin.com.ar/d/dario.a, control=, inbox=/vmail/telpin.com.ar/d/dario.a/.mbox ..." But in my home I have 175M (included 13M of INBOX). In quota table, my relared rows are: | dario.a | quota/storage | 183393060 | | dario.a | quota/messages | 335 | My Dovecot configuration is: # 1.1.2: /etc/dovecot.conf protocols: pop3 pop3s imap imaps valid_chroot_dirs: %h mail_location: mbox:%h:INDEX=/etc/dovecot/dovecot-indexes%h:INBOX=%h.mbox mail_nfs_storage: yes mail_plugins(imap): quota imap_quota mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap auth default: passdb: driver: sql args: /etc/dovecot-mysql.conf userdb: driver: sql args: /etc/dovecot-mysql.conf socket: type: listen master: path: /var/run/dovecot/auth-master mode: 0600 user: vmail group: vmail plugin: quota: dict:::proxy::quotadict quota_rule: *:storage=200M quota_rule2: .mbox:storage=10M quota_warning: storage=95%% /usr/local/bin/quota-warning.sh 95 quota_warning2: storage=80%% /usr/local/bin/quota-warning.sh 80 dict: quotadict: mysql:/etc/dovecot-dict-quota.conf Others configurations are: /etc/dovecot-dict-quota.conf connect = host=HOST dbname=BD user=USER password=PASSWD table = quota select_field = current where_field = path username_field = email Thanks for the time and sorry for my bad english. -- Dario Ale (dario.a en telpin.com.ar)

2 1

[Dovecot] Server-side sieve for client-side copies
by Daniel L. Miller 13 Aug '08

13 Aug '08

I know I could test this - but I'd rather ask first. To my knowledge, we haven't come up with a good server-side implementation for savings copies of sent messages (by all means correct my ignorance in this regard). So the typical way is to enable it in clients like Thunderbird (this prompted a whole discussion of how to save these messages without sending them to the server multiple times). My understanding is that sending a message from a client (use Thunderbird for simplicity of this conversation) is performed via SMTP. Saving a copy into a sent folder is performed via IMAP (hence the multiple transfers to the server). Now that I've laid a background - let's make it Dovecot specific. I don't know how "behind-the-scenes" Dovecot performs the act of saving mail messages that it receives from IMAP, instead of SMTP. Specifically, if I'm using sieve filters via deliver - can I setup a filter that will place mail copies to specific recipients into specific subfolders? -- Daniel

9 16

[Dovecot] Integrate Patch
by aledr 13 Aug '08

13 Aug '08

Is It possible to integrate this patch into next dovecot's releases? It implements the "-w ( disable webmail [IMAP from localhost*] access )" option when using vpopmail. ** Patch created following dovecot mailing list information ** Thanks -- [ ]'s Aledr - Alexandre "OpenSource Solutions for SmallBusiness Problems"

2 1

[Dovecot] stopping dovecot
by Arkadiusz Miskiewicz 13 Aug '08

13 Aug '08

This may be a silly question but how to correctly stop dovecot and be sure that it's possible to start it again? kill -TERM `cat /var/run/dovecot/master.pid` doesn't work well. I have imap-login processes staying arround and occupying port which leads to Fatal: listen(0.0.0.0, 993) failed: Address already in use when trying to start again 2s after stopping. -- Arkadiusz Miśkiewicz PLD/Linux Team arekm / maven.pl http://ftp.pld-linux.org/

6 14

[Dovecot] restrict webmail access
by Jan 12 Aug '08

12 Aug '08

Hi I'm using dovecot imap with ldap accounts. User management interface is phamm. Internal clients connect directly using imap client. External clients must use webmail (squirrelmail). But not everyone is supposed to use webmail. Is there any way to control who is allowed to log in from a specific IP (webmail ip)? Thanx for suggestions Jan

3 3

[Dovecot] Mail quota usage errors
by Jeff Koch 12 Aug '08

12 Aug '08

Hi: We're using dovecot with qmail and vpopmail and are having problems with major inaccuracies in the mail quota usage maintained in the maildirsize file. Although the file starts off accurate after we delete it and force a rebuild it quickly becomes inaccurate. It doesn't seem to be catching new mail added to the directories. Does anyone have any suggestions or links to pages that will help us troubleshoot/correct this problem. Best Regards, Jeff Koch

2 1

[Dovecot] SSL Certifcates
by Stephen Feyrer 12 Aug '08

12 Aug '08

Hi anyone. Can dovecot be configured to authenticate user using only SSL Certificates only and not ask for a password. So far I've got it taking the username from the common name of the certificate but I like it to use the certificate in place of the password. Is this possible and how? -- Regards Stephen.

2 5

[Dovecot] Dovecot crashing
by Erinn Looney-Triggs 12 Aug '08

12 Aug '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sent an e-mail off as was detailed here: http://wiki.dovecot.org/MboxProblems for crashes but I also wanted to see if any of you folks had insight into the issue. Dovecot is crashing on a certain user inbox which is in mbox format as well as one of the users other mbox files. The crash doesn't exactly match what is listed in the aforementioned wiki page, so I thought their might be some other insight into this process or how to fix it. Here is the error in the log files: Aug 8 09:26:07 localhost dovecot: IMAP(user): UIDVALIDITY changed (1216167307 -> 1218134720) in mbox file /var/mail/user Aug 8 09:26:07 localhost dovecot: Panic: IMAP(user): file index-sync.c: line 39 (index_mailbox_set_recent_uid): assertion failed: (seq_range_exists(&ibox->recent_flags, uid)) Aug 8 09:26:07 localhost dovecot: IMAP(user): Raw backtrace: imap [0x80f5257] -> imap [0x80f5aa4] -> imap(i_fatal+0) [0x80f53b3] -> imap(index_mailbox_set_recent_uid+0x62) [0x80b1af9] -> imap(index_mailbox_set_recent_seq+0x33) [0x80b1b6f] -> imap [0x808ef93] - -> imap [0x808f502] -> imap [0x808fe73] -> imap(mbox_sync+0x2b) [0x8090120] -> imap(mbox_storage_sync_init+0x8b) [0x80901ee] -> imap(mailbox_sync_init+0x1b) [0x80b61df] -> imap(mailbox_sync+0x1c) [0x80b6256] -> imap(cmd_select_full+0x13b) [0x805fad7] -> imap(cmd_select+0x19) [0x805fc63] -> imap [0x8062444] -> imap [0x8062679] -> imap [0x8062777] -> imap [0x80627b3] -> imap(client_input+0xb7) [0x8062941] -> imap(io_loop_handler_run+0x17d) [0x80ff704] -> imap(io_loop_run+0x35) [0x80fea32] -> imap(main+0xb0) [0x806dd99] -> /lib/libc.so.6(__libc_start_main+0xdc) [0xc31dec] -> imap [0x805a151] Aug 8 09:26:07 localhost dovecot: child 4740 (imap) killed with signal 6 Any ideas or thoughts? Thanks, - -Erinn Here are the pertinents: ./dovecot --version 1.1.2 ./dovecot -n # 1.1.2: /usr/local/dovecot/etc/dovecot.conf protocols: pop3s imaps ssl_cert_file: /usr/local/adm/config/openssl/certs/imapd.pem ssl_key_file: /usr/local/adm/config/openssl/certs/imapd.pem login_dir: /usr/local/dovecot/var/run/dovecot/login login_executable(default): /usr/local/dovecot/libexec/dovecot/imap-login login_executable(imap): /usr/local/dovecot/libexec/dovecot/imap-login login_executable(pop3): /usr/local/dovecot/libexec/dovecot/pop3-login max_mail_processes: 128 mail_location: mbox:~/mail:INBOX=/var/mail/%u mail_executable(default): /usr/local/dovecot/libexec/dovecot/imap mail_executable(imap): /usr/local/dovecot/libexec/dovecot/imap mail_executable(pop3): /usr/local/dovecot/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/local/dovecot/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/dovecot/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/dovecot/lib/dovecot/pop3 pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): %08Xv%08Xu auth default: passdb: driver: pam userdb: driver: passwd -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFInHWxJqsQ+sq8O4ERAoklAJ4i1Ja3D8OcBjpyPZ6NJ/1A+l/rvQCgiu7B b/dk0dCGNd5zNBgHGXULHyc= =F0sY -----END PGP SIGNATURE-----

2 1

[Dovecot] Possible bug in v1.1.1
by John Wood 12 Aug '08

12 Aug '08

Greetings, I recently upgraded our server from Dovecot 1.0.14 to 1.1.1. I am building using the FreeBSD ports system, so nothing is custom aside from the flags set there. dovecot fell down a few days after the update with: pid 1823 (imap), uid 1000: exited on signal 11 the mail log shows: Jul 4 14:36:07 hostname dovecot: IMAP(username): Corrupted index cache file /home/username/mail/.imap/INBOX/dovecot.index.cache: Broken MIME parts for mail UID 10462 Jul 4 14:36:07 hostname dovecot: child 1823 (imap) killed with signal 11 unfortunately I do not have a core. The closest thing I could find in the Changelog is: v1.1.rc13 2008-06-20 Timo Sirainen <tss(a)iki.fi> - Message parser: Fixed assert-crash if cached MIME structure was broken. but, it does not appear to be the same issue. The upgrade file mentions issues with cache/index files, but they are related to downgrades. The rest of the relative information: Dovecot version: v1.1.1 Operating system: FreeBSD 6.2 p11 CPU architecture: x86 Filesystem you used: FreeBSD UFS Message that caused the crash: attached Dovecot configuration: 1.1.1: /usr/local/etc/dovecot.conf Warning: mail_extra_groups setting was often used insecurely so it is now deprecated, use mail_access_groups or mail_privileged_group instead protocols: imap imaps pop3 pop3s listen(default): 127.0.0.1:143 listen(imap): 127.0.0.1:143 listen(pop3): 127.0.0.1:110 ssl_listen(default): *:993 ssl_listen(imap): *:993 ssl_listen(pop3): *:995 ssl_ca_file: /etc/ssl/godaddy_cert/gd_intermediate.crt ssl_cert_file: /etc/ssl/godaddy_cert/hostname.cert ssl_key_file: /etc/ssl/godaddy_cert/hostname.key ssl_parameters_regenerate: 400 login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_greeting: Hostname ready. login_process_per_connection: no login_process_size: 128 verbose_proctitle: yes first_valid_uid: 1000 first_valid_gid: 1000 mail_extra_groups: mail mail_access_groups: mail mail_location: mbox:~/mail:INBOX=/var/mail/%u mbox_read_locks: fcntl dotlock mbox_write_locks: fcntl dotlock mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix I have not been able to repeat this so far. Thanks, John

2 3

[Dovecot] Auth message
by Pavel Shirov 12 Aug '08

12 Aug '08

Recently my network was scanned. Various services was scanned, and checking the logs of mail server the following string draw my attention: mail dovecot: pop3-login: Disconnected: user=<ttejmgpfip>, method=PLAIN, rip=87.228.15.180, lip=x.x.x.x This looks weird to me, because pop3-login: Disconnected looks like succesful login attempt to me. I have no such user named ttejmgpfip exits ofc. I've check what dovecot writes to log if try PLAIN login method with random login/password, and it's "Aborted login". As I'm using SQL backend for user/pass database, I'm afraid that I might have something misconfigured and a possible sql-injection or something else allowed attacker to "login" with random password. Or my worries are groundless and I can get such message in some case of unsuccessful login? Running dovecot 1.0.rc15 (CentOS 5). Here is how my sql auth done: default_pass_scheme = MD5 password_query = SELECT password FROM mailbox WHERE active = '1' AND (LEFT(username, INSTR(username, '@')-1) = '%u' OR username = '%u') user_query = SELECT maildir as home, 6000 AS uid, 6000 AS gid, domain FROM mailbox WHERE LEFT(username, INSTR(username, '@')-1) = '%u' OR username = '%u' I have such query so it is possible for a user to login either as user@domain or just as user (I have single domain).

3 2

[Dovecot] About domains in antispam plugin
by Eduardo Morales Chavez 12 Aug '08

12 Aug '08

Hi there, I have the problem that the antispam filter is looking in a different subdirectory (I think is the domain subfolder) than the actuallly used i.e., The following error message is constant: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Aug 12 12:07:58 mail dspam[4540]: Unable to open file for reading: /var/spool/dspam/data/local/itadmin/itadmin.sig/48a1c36c24 9461173910573.sig: No such file or directory Aug 12 12:07:58 mail dspam[4541]: Unable to open file for reading: /var/spool/dspam/data/local/itadmin/itadmin.sig/48a1c36c24 9461173910573.sig: No such file or directory ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ The file in the error exists but in a different subdirectory than the one AntiSpam Plugin is looking: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ls -l /var/spool/dspam/data/local/itadmin/itadmin.sig/48a1c36c249461173910573.sig ls: cannot access /var/spool/dspam/data/local/itadmin/itadmin.sig/48a1c36c249461173910573.sig: No such file or directory ls -l /var/spool/dspam/data/mydomain.com/itadmin/itadmin.sig/48a1c36c249461173910573.sig -rw-rw---- 1 root dspam 968 Aug 12 12:07 /var/spool/dspam/data/mydomain.com/itadmin/itadmin.sig/48a1c36c249461173910573.sig ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ I looked at the /etc/dovecot/dovecot.conf for a line containing a local doman vs mydomain.com but there's nothing even in the comments. So If there's something I'm missing I'd be glad you to enlight me. Thanks a lot in advance for you help. Rgds, Eduardo

1 0

[Dovecot] NFS vs CIFS - and Dovecot
by Daniel L. Miller 12 Aug '08

12 Aug '08

I've seen a number of posts discussing NFS based storage and issues with Dovecot. When the term "NFS" is used - does this exclusively refer to the Linux NFS network file system, or is it a generic reference to any network file system? I don't recall seeing any posts referencing issues with CIFS or SMBFS - is this because no one is using it, or because it just works instead of fiddling with NFS? -- Daniel

2 1

[Dovecot] Install from source of dovecot 1.1.2
by Guy 12 Aug '08

12 Aug '08

Hi guys, I have what I'm sure is a stupid question. I'm trying to install Dovecot 1.1.2 from source and my command sequence is this: cd dovecot-1.1.2 ./configure --prefix=/usr --exec-prefix=/usr --with-mysql --with-storagesmaildir --sysconfdir=/etc/dovecot make make install cd ../dovecot-sieve-1.1.5 ./configure --with-dovecot=../dovecot-1.1.2 make make install I don't get any errors during either install I've done the odd config on dovecot to try and keep it as close to the install dirs used by the Dovecot package included with Ubuntu. Once it's done, dovecot -n still looks in /usr/local/etc and when I try and start dovecot it looks for the libexec dir in /usr/local instead of /usr. Is there something I'm missing on the configure? I've very, very little experience (rather obviously) installing directly from source so any advice would be greatly appreciated. Thanks Guy -- Don't just do something...sit there!

5 5

[Dovecot] Cyrus vs Dovecot
by Mathieu Kretchner 12 Aug '08

12 Aug '08

First of all : forgive me for my poor English Hello all, I've to compare cyrus with dovecot for my work. Because these are the only solutions that could fit our needs. Unfortunately I really don't know a lot about dovecot and I would like to have some of its assets. Here are the properties of the versus table I've done : dovecot cyrus Installation: Update: Migration from cyrus : Migration from dovecot : functionalities : Management : Local Delivery : availability : Security : Indexes management : NFS compatibility : Scalability : Configuration : interoperability : Sieve filter : Documentation : Quota capability : Performance : IMAP capability : So I know this can scared you, but If you have some asset for dovecot, It could be great and a lot more FAIR !! Thank you in advance for your advice.

7 14

[Dovecot] GlusterFS
by Jeroen Koekkoek 12 Aug '08

12 Aug '08

Hi everybody, We use a Dovecot setup with GlusterFS. Dovecot 1.1.2 and GlusterFS 1.3.9. I enabled the following options (I don't have posix-locks translators): lock_method = dotlock dotlock_use_excl = no mmap_disable = yes mail_nfs_index = yes mail_nfs_storage = yes I receive the following error message. Aug 7 09:38:51 mta2 dovecot: POP3(somebody(a)domain.tld): nfs_flush_fcntl: fcntl(/var/vmail/domain.tld/somebody/Maildir/dovecot.index, F_RDLCK) failed: Function not implemented I think that I can disable mail_nfs_index to fix these messages. Has anybody had the same problem, if so, how did you solve it? Kind regards, Jeroen Koekkoek

5 6

[Dovecot] proxy_maybe and IPv6
by Matthieu Herrb 12 Aug '08

12 Aug '08

Hi, Using dovecot 1.1.2 on a dual-stack server, with the 'proxy_maybe' attribute to forward some clients to another server, it seems that only clients connecting with the same protocol version as the one used by address in the 'host' attribute in the password db are recognized as local. If an IPv4 address is specified as 'host', a dovecot proxy is created for clients connecting using IPv6 to this server, and symmetrically if the proxy is specified as an IPv6 address, clients connecting through IPv4 will get forwarded to the v6 address. Is there a way to avoid that? -- Matthieu Herrb

2 3

[Dovecot] Good news for CPanel users
by Marshal Newrock 11 Aug '08

11 Aug '08

In response to a feature request for cpanel to have native support for dovecot: Rudimentary support was added in 11.23. Full support for Dovecot will be available in 11.24. -- Marshal Newrock 517-679-0699 x223 FreedomBI, LLC - http://www.freedombi.com

1 0

[Dovecot] nombre de compte imap/ rapide rapide
by Mathieu Kretchner 11 Aug '08

11 Aug '08

find . -type d -mindepth 2 -maxdepth 3 -print | sort | uniq | grep -vE "user$" | wc -l

1 0

[Dovecot] optionnal arguments to ntlm_auth helper
by François LEGAL 10 Aug '08

10 Aug '08

Hello, I'm setting up (at least I try) to set up network services with single sign on. I could build and configure dovecat to use samba's ntlm_auth helper to achieve ntlm authentication of imap users. The point is, I wanted to restrict which users could actually authenticate through ntlm. The ntlm_auth helper has this ability with the --require-membership-of=... command line parameter. I first tried (unsuccessfully) to add this parameter to the auth_winbind_helper_path token in dovecot.conf, and figured out by checking the source that this was not possible. I then decided to patch the source so that one can pass any argument to the ntlm_auth helper by specifying at new line in dovecot.conf with the token "auth_winbind_helper_args" (for instance, what I wanted to do is "auth_winbind_helper_args = --require-membership-of=... ") Well, here comes the patch. It is to be used with recent 1.1.2 release. Best regards François

3 2

[Dovecot] tcp-wrappers.patch
by Edgar Fuß 09 Aug '08

09 Aug '08

I'd like to see tcp-wrappers.patch getting integrated into dovecot. I ported the original 1.0 patch to 1.1, but would prefer not to have to maintain another local patch. As the name suggests, the patch adds libwrap support to dovecot. We use is to limit access from outside our network to secure (imaps/pop3s) protocols only and to exclude certain internal addresses from accessing dovecot in general. I fully understand Timo's concern of people not reading documentation and then whining that librwapping doesn't work whereas they simply forgot to put hosts.{allow,deny} into the login chroot. Would it be acceptable if either dovecot itself or the init script copies /etc/hosts.{allow,deny} into the chroot (unless it's already there)? Also, dovecot could probably complain/abort/turn off libwrap if these files are missing in the login chroot. The problem mainly occurs with the default (Linux) setting of login_dir = /var/run/dovecot/login; on NetBSD, I use /var/chroot/dovecot-login instead, which doesn't get wiped out at boot. Comments? Suggestions? Oh, yes, managesieve (which uses src/login-common) would need a slight update, too.

3 5

[Dovecot] Dovecot 1.1.1 killed with SIGABRT
by Andreas M. Kirchwitz 08 Aug '08

08 Aug '08

Hi folks, with Dovecot 1.1.1, I've had two "crashes" (SIGABRT) recently. Dovecot 1.1.1 has been compiled from source and is running on Fedora 8 Linux 32 Bit (all patches) with custom OpenSSL 0.9.8h. [ output of "dovecot -n" ] # 1.1.1: /usr/local/dovecot/etc/dovecot.conf ssl_cert_file: /usr/local/dovecot/etc/dovecot.crt ssl_key_file: /usr/local/dovecot/etc/dovecot.key login_dir: /usr/local/dovecot/var/run/dovecot/login login_executable: /usr/local/dovecot/libexec/dovecot/imap-login mail_location: mbox:~/Mail:INBOX=/var/spool/mail/%u auth default: mechanisms: plain login digest-md5 cram-md5 passdb: driver: passwd-file args: /usr/local/dovecot/etc/dovecot.passwd userdb: driver: passwd-file args: /usr/local/dovecot/etc/dovecot.passwd First, the "small" problem with Pine 4.64: Jul 20 03:17:04 linux dovecot: imap-login: Login: user=<user1>, method=CRAM-MD5, rip=138.201.2.8, lip=138.201.2.2, TLS Jul 20 03:17:53 linux dovecot: IMAP(user1): UIDVALIDITY changed (1215137127 -> 1216072777) in mbox file /home/user1/Mail/Trash Jul 20 03:17:53 linux dovecot: Panic: IMAP(user1): file mail-index-transaction.c: line 548 (mail_index_transaction_get_next_uid): assertion failed: (recs[count-1].uid >= next_uid) Jul 20 03:17:53 linux dovecot: IMAP(user1): Raw backtrace: imap [0x80cf2f0] -> imap [0x80cf34a] -> imap [0x80cec5c] -> imap [0x80ad621] -> imap [0x80ae56b] -> imap(mail_cache_get_first_new_seq+0x12) [0x80a1d82] -> imap(mail_cache_field_want_add+0x8d) [0x80a555d] -> imap(index_mail_parse_header_init+0x1cc) [0x80964ac] -> imap(index_mail_cache_parse_init+0x4e) [0x809696e] -> imap(mbox_save_init+0x457) [0x807d4a7] -> imap(mailbox_save_init+0x51) [0x809fd71] -> imap(mail_storage_copy+0xc1) [0x809df31] -> imap(cmd_copy+0x1d2) [0x805b1f2] -> imap(cmd_uid+0x59) [0x805f489] -> imap [0x805fe2c] -> imap [0x805fed5] -> imap [0x8060695] -> imap(client_input+0x5e) [0x80608ae] -> imap(io_loop_handler_run+0x100) [0x80d6c30] -> imap(io_loop_run+0x28) [0x80d5dc8] -> imap(main+0x4a1) [0x80683d1] -> /lib/libc.so.6(__libc_start_main+0xe0) [0x149390] -> imap [0x805a211] Jul 20 03:17:53 linux dovecot: child 19853 (imap) killed with signal 6 The user didn't configure his Pine properly. He used IMAP to access his INBOX, but he forgot to configure this for all other folders as well. Now, Pine modified /home/user1/Mail/Trash directly, and when Dovecot stumbled upon this file it killed itself with signal 6. The problem is not reproducible. After this single failure, Dovecot doesn't seem to have any problems with the folder. However, instead of this panic operation, Dovecot maybe could issue a warning or error response to the client so that the user (hopefully) gets a clue about what's going wrong. Second, the "big" problem with Thunderbird 2.0.0.14: Jul 12 01:04:06 linux dovecot: imap-login: Login: user=<user2>, method=CRAM-MD5, rip=138.201.2.4, lip=138.201.2.2, TLS Jul 12 01:04:45 linux dovecot: Panic: IMAP(user2): file index-sync.c: line 39 (index_mailbox_set_recent_uid): assertion failed: (seq_range_exists(&ibox->recent_flags, uid)) Jul 12 01:04:45 linux dovecot: IMAP(user2): Raw backtrace: imap [0x80cf2f0] -> imap [0x80cf34a] -> imap [0x80cec5c] -> imap [0x809ccba] -> imap [0x8080d10] -> imap(mbox_sync+0x522) [0x80817d2] -> imap [0x807a334] -> imap(index_transaction_commit+0x4e) [0x809d99e] -> imap(cmd_copy+0x35f) [0x805b37f] -> imap(cmd_uid+0x59) [0x805f489] -> imap [0x805fe2c] -> imap [0x805fed5] -> imap [0x8060695] -> imap(client_input+0x5e) [0x80608ae] -> imap(io_loop_handler_run+0x100) [0x80d6c30] -> imap(io_loop_run+0x28) [0x80d5dc8] -> imap(main+0x4a1) [0x80683d1] -> /lib/libc.so.6(__libc_start_main+0xe0) [0x149390] -> imap [0x805a211] Jul 12 01:04:45 linux dovecot: child 25672 (imap) killed with signal 6 [happens over and over in an endless loop until Thunderbird is killed] This has been a nasty one. Different user, different mail client. INBOX with 350 messages in total, 3 of them new. Started Thunderbird, index page is displayed fine, then clicked on one of the 3 new messages to read it. For no apparent reason, Dovecot dies with signal 6. Thunderbird reconnected automatically, and then Dovecot dies again. Nice endless loop ... Stopping and restarting the complete Dovecot subsystem with the help of the init.d script didn't help. Finally the crashes stopped after removing the cache files in /home/fubar/Mail/.imap/INBOX. It's obvious that the cache files got corrupted somehow. There was plenty of disk space free. And the cache files have been freshly created from scratch with Dovecot 1.1.0. Other folders were not affected. Except Dovecot, nobody ever touches these cache files. Well, the good news is, it stopped crashing after removing the cache files. The bad news is, without the cache files (which I removed) the problem cannot be reproduced. So, there's nothing more to offer than these two backtraces. Both crashes are not related to each other and happened to different users with different clients. Maybe the backtraces and my descriptions help to find what's going wrong or how to make Dovecot behave more robustly. If there's any additional information needed, please let me know. Sorry that I didn't save the corrupted cache files. Greetings, Andreas

3 6

Re: [Dovecot] Auth message
by Pavel Shirov 08 Aug '08

08 Aug '08

Further testing show that such message could occur simply by providing random username/password and termination session afterwards (not sending QUIT).

1 0

[Dovecot] Dovecot auto vacation with sieve doesn't work
by CJ Keist 08 Aug '08

08 Aug '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sorry if this comes in twice, I sent this first from my test account. - --------- Guys, I'm running out of hair to pull out ;). Can anyone out there say that this does work?? To me this is looking like a bug and I'm not sure whether it's the sieve plugin or the dovecot deliver program. I have also had no luck the the "reject" sending any reply back to the sender. My setup: OS: Solaris 10 sparc platform postfix: 2.5.2 dovecot: 1.1.2 sieve plugin: 1.1.5 I'm going back forth between procmail and sieve and having no luck. procmail will send the reply to the sender but doesn't deliver the message to the recipient. Sieve will deliver the message to the recipient but doesn't send the reply to the sender. Now if I can just combine the two, I'll be in business. Postfix mail command: mailbox_command = /userM/mail-services/dovecot/libexec/dovecot/deliver - -d $USER* * Dovecot -n (I've made some changes from my previous posting namely with the master_auth settings) # 1.1.2: /userM/mail-services/dovecot/etc/dovecot.conf Warning: fd limit 256 is lower than what Dovecot can use under full load (more than 3072). Either grow the limit or change login_max_processes_count and max_mail_processes settings base_dir: /userM/mail-services/dovecot/var/run/dovecot/ protocols: imap imaps pop3 pop3s ssl_cert_file: /userM/mail-services/dovecot/etc/ssl/dovecot.pem ssl_key_file: /userM/mail-services/dovecot/etc/ssl/privkey.pem ssl_parameters_regenerate: 0 ssl_cipher_list: MEDIUM:!LOW disable_plaintext_auth: no login_dir: /userM/mail-services/dovecot/var/run/dovecot/login login_executable(default): /userM/mail-services/dovecot/libexec/dovecot/imap-login login_executable(imap): /userM/mail-services/dovecot/libexec/dovecot/imap-login login_executable(pop3): /userM/mail-services/dovecot/libexec/dovecot/pop3-login login_greeting: Cyrus ready. login_max_processes_count: 1024 max_mail_processes: 1024 mail_location: mbox:~/:INBOX=/userM/mail/%u mail_debug: yes mmap_disable: yes mail_nfs_index: yes mail_executable(default): /userM/mail-services/dovecot/libexec/dovecot/imap mail_executable(imap): /userM/mail-services/dovecot/libexec/dovecot/imap mail_executable(pop3): /userM/mail-services/dovecot/libexec/dovecot/pop3 mail_plugin_dir(default): /userM/mail-services/dovecot/lib/dovecot/imap mail_plugin_dir(imap): /userM/mail-services/dovecot/lib/dovecot/imap mail_plugin_dir(pop3): /userM/mail-services/dovecot/lib/dovecot/pop3 auth default: mechanisms: plain login verbose: yes debug: yes passdb: driver: pam passdb: driver: passwd args: blocking=yes userdb: driver: passwd args: blocking=yes socket: type: listen client: path: /userM/mail-services/postfix/var/private/auth mode: 432 user: postfix group: postfix master: path: /userM/mail-services/dovecot/var/run/dovecot/auth-master mode: 384 user: postfix group: postfix My .dovecot.sieve file: require ["vacation"]; if header :matches "subject" "*" { vacation :days 30 :addresses "cj.keist(a)colostate.edu" :subject "Automatic response to: ${1}" "I'm away -- send mail to foo in my absence"; } I made some modifications to the vacation reply base on the following URL: http://ietfreport.isoc.org/idref/draft-ietf-sieve-vacation/ In my testing I know the sieve plugin is reading my .dovecot.sieve script and creating the .dovecot.sievec, but that is as for as it goes. The .dovecot.lda-dupes file is not being created (or any .dovecot.sieve.err file) and no reply is even being attempted from the logs: Aug 6 11:30:51 mail2.engr.colostate.edu dovecot: [ID 107833 mail.info] auth(def ault): new auth connection: pid=27187 Aug 6 11:30:51 mail2.engr.colostate.edu postfix/smtpd[27187]: [ID 197553 mail.i nfo] connect from akron.colostate.edu[129.82.103.160] Aug 6 11:30:51 mail2.engr.colostate.edu postfix/smtpd[27187]: [ID 197553 mail.i nfo] setting up TLS connection from akron.colostate.edu[129.82.103.160] Aug 6 11:30:51 mail2.engr.colostate.edu postfix/smtpd[27187]: [ID 197553 mail.i nfo] Anonymous TLS connection established from akron.colostate.edu[129.82.103.16 0]: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits) Aug 6 11:30:52 mail2.engr.colostate.edu postfix/smtpd[27187]: [ID 197553 mail.i nfo] 16E2059984: client=akron.colostate.edu[129.82.103.160] Aug 6 11:30:52 mail2.engr.colostate.edu postfix/cleanup[27192]: [ID 197553 mail .info] 16E2059984: message-id=<3b676ae5f90fadad863930dcc61db3f8.squirrel@webmail .engr.colostate.edu> Aug 6 11:30:52 mail2.engr.colostate.edu postfix/smtpd[27187]: [ID 197553 mail.i nfo] disconnect from akron.colostate.edu[129.82.103.160] Aug 6 11:30:52 mail2.engr.colostate.edu postfix/qmgr[18021]: [ID 197553 mail.in fo] 16E2059984: from=<joeblow(a)engr.colostate.edu>, size=1877, nrcpt=1 (queue act ive) Aug 6 11:30:52 mail2.engr.colostate.edu deliver(cjay): [ID 315030 mail.info] Lo ading modules from directory: /userM/mail-services/dovecot/lib/dovecot/lda Aug 6 11:30:52 mail2.engr.colostate.edu deliver(cjay): [ID 619685 mail.info] Mo dule loaded: /userM/mail-services/dovecot/lib/dovecot/lda/lib90_cmusieve_plugin. so Aug 6 11:30:52 mail2.engr.colostate.edu dovecot: [ID 107833 mail.info] auth(def ault): master in: USER 1 cjay service=deliver Aug 6 11:30:52 mail2.engr.colostate.edu dovecot: [ID 107833 mail.info] auth-wor ker(default): passwd(cjay): lookup Aug 6 11:30:52 mail2.engr.colostate.edu dovecot: [ID 107833 mail.info] auth(def ault): master out: USER 1 cjay system_user=cjay uid=10946 gid=32 home=/top/admin/ENS/people/cjay/home Aug 6 11:30:52 mail2.engr.colostate.edu deliver(cjay): [ID 868608 mail.info] au th input: cjay Aug 6 11:30:52 mail2.engr.colostate.edu deliver(cjay): [ID 868608 mail.info] au th input: system_user=cjay Aug 6 11:30:52 mail2.engr.colostate.edu deliver(cjay): [ID 868608 mail.info] au th input: uid=10946 Aug 6 11:30:52 mail2.engr.colostate.edu deliver(cjay): [ID 868608 mail.info] au th input: gid=32 Aug 6 11:30:52 mail2.engr.colostate.edu deliver(cjay): [ID 868608 mail.info] au th input: home=/top/admin/ENS/people/cjay/home Aug 6 11:30:52 mail2.engr.colostate.edu deliver(cjay): [ID 848615 mail.info] mb ox: data=/top/admin/ENS/people/cjay/home/:INBOX=/userM/mail/cjay Aug 6 11:30:52 mail2.engr.colostate.edu deliver(cjay): [ID 885103 mail.info] fs : root=/top/admin/ENS/people/cjay/home, index=, control=, inbox=/userM/mail/cjay Aug 6 11:30:52 mail2.engr.colostate.edu deliver(cjay): [ID 223526 mail.info] cm usieve: Using sieve path: /top/admin/ENS/people/cjay/home/.dovecot.sieve Aug 6 11:30:52 mail2.engr.colostate.edu deliver(cjay): [ID 507699 mail.info] cm usieve: Executing script /top/admin/ENS/people/cjay/home/.dovecot.sievec Aug 6 11:30:53 mail2.engr.colostate.edu deliver(cjay): [ID 702911 mail.info] ms gid=<3b676ae5f90fadad863930dcc61db3f8.squirrel(a)webmail.engr.colostate.edu>: save d mail to INBOX Aug 6 11:30:53 mail2.engr.colostate.edu postfix/local[27193]: [ID 197553 mail.i nfo] 16E2059984: to=<cjay(a)engr2.colostate.edu>, relay=local, delay=1.2, delays=0 .32/0.08/0/0.82, dsn=2.0.0, status=sent (delivered to command: /userM/mail-servi ces/dovecot/libexec/dovecot/deliver -d $USER) Aug 6 11:30:53 mail2.engr.colostate.edu postfix/qmgr[18021]: [ID 197553 mail.in fo] 16E2059984: removed Aug 6 11:34:12 mail2.engr.colostate.edu postfix/anvil[27190]: [ID 197553 mail.i nfo] statistics: max connection rate 1/60s for (smtp:129.82.103.160) at Aug 6 1 1:30:51 Aug 6 11:34:12 mail2.engr.colostate.edu postfix/anvil[27190]: [ID 197553 mail.i nfo] statistics: max connection count 1 for (smtp:129.82.103.160) at Aug 6 11:3 0:51 Aug 6 11:34:12 mail2.engr.colostate.edu postfix/anvil[27190]: [ID 197553 mail.i nfo] statistics: max cache size 1 at Aug 6 11:30:51 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFImeYWA29OFr7C6jcRAkj+AJ0eKINCZmRDWh8gSjbW86Ga6DPWlgCeL/1M rVvbvn6al/3fLep60h2Lxg4= =veQm -----END PGP SIGNATURE-----

3 5

[Dovecot] Expire Plugin - LDA with Vpopmail errors
by Ron Culler 08 Aug '08

08 Aug '08

I am trying to setup Dovecot to use the expire plugin and wanted to use the LDA so I can ensure the messages are indexed as they are delivered to the mailboxes. This system is only accessed via a webmail interface Using dovecot-1.1.2 and Vpopmail with Qmail Dovecot.conf file base_dir = /usr/local/var/run/dovecot/ protocols = imap disable_plaintext_auth = no shutdown_clients = yes log_path = /var/log/dovecott info_log_path = /var/log/dovecott log_timestamp = "" ssl_disable = yes login_dir = /usr/local/var/run/dovecot/login login_user = dovecot login_process_per_connection = yes login_processes_count = 3 login_max_processes_count = 128 mail_location = maildir:~/Maildir namespace private { separator = . prefix = INBOX. inbox = yes } verbose_proctitle = yes first_valid_uid = 89 #last_valid_uid = 0 maildir_copy_with_hardlinks = yes maildir_copy_preserve_filename = no protocol imap { listen = 127.0.0.1:4143 imap_max_line_length = 65536 login_greeting_capability = yes mail_plugins = expire } protocol lda { mail_plugins = expire log_path = /var/log/dovecot-deliver.log info_log_path = /var/log/dovecot-deliver.log } plugin { # Trash and its children 7d, Spam 30d expire = Trash 7 expire_dict = proxy::expire } auth default { mechanisms = plain passdb vpopmail { args = } userdb vpopmail { } user = vpopmail count = 1 ssl_require_client_cert = no } I see errors in the /var/log/dovecot-deliver.log deliver (email@addrss) Error: Can't connect to auth server at /usr/local/var/run/dovecot//auth-master: no such file or directory. What do I need to do to create this? Ron Culler

2 1

[Dovecot] virtual domains and SSL certificates
by Kacper Wysocki 07 Aug '08

07 Aug '08

Hi all, I have dovecot 1.1.0 setup to access vpopmail accounts for several virtual domains. Dovecot IMAP is accessed through several virtual domains as well, ie mail.foo.com an d mail.bar.com The problem is that the configuration file specifies only one certificate file for dovecot, which means only one Common Name, which means one cannot provide one server cert that will match mail.foo.com AND mail.bar.com, and either mary(a)foo.com or bob(a)bar.com will get a "Security Error: Domain Name Mismatch" in their mail client when connecting through IMAPS. How can I avoid this domain name mismatch error? Regards, Kacper Wysocki

4 4

[Dovecot] RESOLVED: dovecot-imap displays empty domainalias mailboxen
by Kacper Wysocki 07 Aug '08

07 Aug '08

On Thu, Jul 31, 2008 at 5:21 PM, Kacper Wysocki <kacperw(a)online.no> wrote: > I'm using dovecot 1.0.13 as the IMAPS frontend for a vpopmail/qmail > virtual domain setup. Dovecot is set up as follows: > passdb vpopmail{ > } > userdb vpopmail{ > } > > I've added a domain alias for the main domain with vaddaliasdomain and > email to post@aliasdomain is delivered to post@maindomain and can be > checked with pop. > > However, when I try to check IMAP through the account post@aliasdomain > I am confronted with an empty mailbox. If I log in using > post@maindomain I get the expected contents. > > Why can't my users log in using user@aliasdomain to check their emails? Update: dovecot can't find the mail directory because of mail_location = maildir:/var/vpopmail/domains/%d/%n/Maildir and dovecot doesn't know anything about domain aliases. ln -s ~vpopmail/domains/maindomain ~vpopmail/domains/aliasdomain fixes the problem for dovecot. -K

1 0

Re: [Dovecot] Dovecot 1.1 Quota Plugin Configuration?
by David Reid 07 Aug '08

07 Aug '08

Charles Marcus wrote: > On 8/7/2008 8:39 AM, David Reid wrote: >> With 1.0 I had the quota plugin set to allow some accounts to have no >> quota by setting their size (in bytes) to 0 (via mysql). Following the >> upgrade to 1.1 this no longer seems to work and has resulted in a lot of >> annoyed people having messages bumped :-( >> >> The config I have is as follows... >> >> quota = maildir >> quota_rule = *:storage=15M >> quota_rule2 = Trash:ignore >> quota_rule3 = INBOX.Trash:ignore >> quota_rule4 = INBOX.SpamTrain:ignore >> quota_rule5 = SpamTrain:ignore >> >> In the sql.conf I get the quota for each mailbox using this line >> >> user_query = SELECT '/var/vmail/%d/%n' as home, >> 'maildir:/var/vmail/%d/%n' as mail, xxx AS uid, xxx AS gid, >> concat('maildir:storage=', mb_quota) AS quota FROM >> mailboxes WHERE mb_mbname = '%u' AND mb_active = '1' >> >> With this setup when I have a mb_quota set to 0 it simply bounces all >> messages for the mailboxes that should have no quota. >> >> Any ideas how I need to fix this? > > You could start by not posting the same question twice in a 24 hour > period, especially when your question has already been answered. Apologies, but as the problem affected the mailbox I posted from I missed the reply and hence the answer. > > You are trying to use the same mysql query from 1.0 for 1.1 and it won't > work. > > http://wiki.dovecot.org/Quota/1.1 > Knowing the sql needed to be adjusted I have made the changes. The wiki page says that the uid and guid can be set in the config file, but doesn't give any indication of the lines to use. Maybe the information could be added? Thanks for your (duplicate) reply. david

1 0

[Dovecot] Dovecot 1.1 Quota Plugin Configuration?
by David Reid 07 Aug '08

07 Aug '08

With 1.0 I had the quota plugin set to allow some accounts to have no quota by setting their size (in bytes) to 0 (via mysql). Following the upgrade to 1.1 this no longer seems to work and has resulted in a lot of annoyed people having messages bumped :-( The config I have is as follows... quota = maildir quota_rule = *:storage=15M quota_rule2 = Trash:ignore quota_rule3 = INBOX.Trash:ignore quota_rule4 = INBOX.SpamTrain:ignore quota_rule5 = SpamTrain:ignore In the sql.conf I get the quota for each mailbox using this line user_query = SELECT '/var/vmail/%d/%n' as home, 'maildir:/var/vmail/%d/%n' as mail, xxx AS uid, xxx AS gid, concat('maildir:storage=', mb_quota) AS quota FROM mailboxes WHERE mb_mbname = '%u' AND mb_active = '1' With this setup when I have a mb_quota set to 0 it simply bounces all messages for the mailboxes that should have no quota. Any ideas how I need to fix this? david

1 0

[Dovecot] Experience moving mailboxes from Dovecot 0.99.14 to Dovecot 1.07 => Improvement possible
by Benoît DESLOGES 07 Aug '08

07 Aug '08

Hi, This small mail to share my observation about a recent move of mailboxes between two servers and ask about explanation and/or improvement about UIDL in dovecot. SV1 : Dovecot 0.99.14 / Red Hat Fedore Core 4 SV2 : Dovecot 1.07 / CentOS 5.2 Mailboxes in /var/spool/mail on the twoo servers. Test will be done with outlook express with option "leave message on server" checked. Goal is simply to move users mailboxes from SV1 to SV2 without re-downloading all messages. Try 1: - Stop dovecot on SV2 - Clear all dovecot indexes on SV2 - Rsync of my mailbox - Start dovecot on SV2 - Update pop setting in outlook and send/receive Result : => starting to download 3000 mails... After some debug, I discovered that UIDL where not of the same format => put pop3_uidl_format = %v.%u in dovecot.conf of SV2. Try 2: Same operations as Try1 Result : => starting to download 3000 mails... UIDL's where of the same format but values where not corresponding... Teleting on SV1 and asking UIDL, last value is xxxxxxxxxx.85878. On SV2, xxxxxxxxxx.85879 was the FIRST value of the list. Conclusion for the moment, Dovecot has a problem with the detection of existing UID of the moved mailbox. Comparaison of first header found from the two mailboxes show ... differences ! SV1 give the following : (...) X-UID: 70570 Content-Length: 1561 X-IMAPbase: xxxxxxxxxx 85845 $MDNSent X-Keywords: (...) SV2 give the following (after first POP attempt) : (...) Content-Length: 1561 X-IMAPbase: xxxxxxxxxx 0000089204 $MDNSent X-Keywords: X-UID: 85846 (...) Observation : X-UID: 85846 is not at the same place in the header. Try 3: - Stop dovecot on SV2 - Clear all dovecot indexes on SV2 - Rsync of my mailbox - Edit mailbox and move X-UID header after the X-Keywords header - Start dovecot on SV2 - Update pop setting in outlook and send/receive Result : => OK. Is that normal that dovecot is impacted by the position of the headers ? Maybe some improvement possible ? Maybe theyre is another method to make my migration ? Any observation or comment is welcome... -- Benoît Desloges Network Engineer

7 8

[Dovecot] Fwd: Re: sasl parameters missing (in postfix)
by Daniel Black 07 Aug '08

07 Aug '08

In response to my request for postfix to support dovecot auth arguments I got the forwarded reply. If someone gets around to this before me I won't be offended. ------------ Story is I deployed a webmail with certificate based authentication that substitutes a global master password (http://wiki.dovecot.org/Authentication/MasterUsers) when the certificate matches. The webmail accesses the inbox by imap and reuses the password for smtp through postfix. I configured dovecot sasl authentication to allow a particular global password to be allowed from one IP address of the webmail server. Unfortuanately it seems as though postfix doesn't pass rip= (remote ip) or the other AUTH parameters of the protocol (http://dovecot.org/doc/auth-protocol.txt) Is adding these parameters to postfix's sasl authentication a useful feature request? ---------- Forwarded Message ---------- Subject: Re: sasl parameters missing Date: Thu, 7 Aug 2008 From: Wietse Venema <wietse(a)porcupine.org> To: Daniel Black <daniel.subs(a)internode.on.net> Daniel Black: > Thanks Wietse, > > On Tue, 5 Aug 2008 09:30:44 am Wietse Venema wrote: > > Postfix passes the information in the SMTP client's AUTH command. > > This is how I got the Dovecot extension from Timo. If someone is > > willing to monitor his docs for changes, > > it seems fairly stable. Going off the doc/auth-protocol.txt changelog > Nov 12 2006 lport/rport was added. > Aug 07 2005 changed valid-client-cert to ssl-valid-cert > Oct 22 2004 original documentation > > Current implementation of the authentication server in dovecot seems to ignore > parameters it doesn't understand. > > > then they are welcome to do so. I won't. > > On the basis of this apparent stability and compatibility would you consider > accepting a patch? Yes. No promise, though, that it will be adopted. One consideration is that Postfix does not talk directly to Dovecot, but instead talks to an abstraction layer that is used for both Cyrus SASL and for Dovecot. Obviously, that XSASL abstraction layer must not be made specific to the underlying Cyrus SASL or Dovecot implementation. The solution therefore is not to extend XSASL functions with one extra argument for each Dovecot feature. Apart from being Dovecot-specific, functions with many parameters are difficult to update correctly; compilers can't always tell that two arguments should be swapped. I solved the problem of many-parameter functions by using macros such as TLS_SERVER_START(). This gives more assurance that data is passed correctly, and it less likely to break due to human maintainer error. Wietse ------------------------------------------------------- -- Daniel Black -- Proudly a Gentoo Linux User. Gnu-PG/PGP signed and encrypted email preferred http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x76677097 GPG Signature D934 5397 A84A 6366 9687 9EB2 861A 4ABA 7667 7097

1 0

[Dovecot] Purpose of files under .imap
by Kenneth Porter 07 Aug '08

07 Aug '08

I've got a user with an unusable account. Tbird just sits in a loop endlessly logging in over and over when a particular folder is selected. What files under .imap associated with that folder can be safely deleted? What's stored in all of them? I see all of these: .customflags dovecot.index dovecot.index.cache dovecot.index.log .imap.index .imap.index.data .imap.index.log .imap.index.tree

2 2

[Dovecot] Next message unexpectedly lost
by Kenneth Porter 07 Aug '08

07 Aug '08

Using 1.1.2. I'm getting the above message over and over in the error log. Dovecot drops the connection and the client (Tbird) just keeps retrying in an endless loop. Using Wireshark to sniff the exchange, it looks like the command that fails looks like this: 5 UID fetch 1:9749,9751:9763,9765:9930,9932,9934:9942 (UID RFC822.SIZE FLAGS BODY.PEEK[HEADER.FIELDS (From To Cc Subject Date Message-ID Priority X-Priority References Newsgroups In-Reply-To Content-Type)]) Dovecot seems to be shutting down after receiving this. Mulberry doesn't seem to have the problem, presumably because it's sending a different command sequence that doesn't stroke this. Here's the failing code, in i_stream_raw_mbox_read : if (stream->istream.v_offset - rstream->hdr_offset + new_pos > rstream->mail_size) { /* istream_raw_mbox_set_next_offset() used invalid cached next_offset? */ i_error("Next message unexpectedly lost from %"PRIuUOFF_T, rstream->hdr_offset + rstream->mail_size); rstream->eof = TRUE; rstream->corrupted = TRUE; return -1; } I've tried deleting the associated .imap/folder contents but it must regenerate the same bad data as it happens again.

1 0

[Dovecot] Unlimited quota in 1.1?
by David Reid 07 Aug '08

07 Aug '08

How do I set an unlimited quota for a user in 1.1? Setting it to 0 bytes worked in 1.0, but doesn't seem to work in 1.1 :-( david

2 1

Re: [Dovecot] Dovecot PAM sessions with Maildir
by Sean Smitz 06 Aug '08

06 Aug '08

I able to connect to the mail server with a MUA (Thunderbird) via SSL prior to attempting to set up the session and Maildir options /var/log/audit/audit.log type=USER_AUTH msg=audit(1217992493.198:389): user pid=8022 uid=0 auid=10243 subj=user_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct="[me]" : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:[client], addr=::ffff:[client], terminal=dovecot res=success)' type=USER_ACCT msg=audit(1217992493.199:390): user pid=8022 uid=0 auid=10243 subj=user_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct="[me]" : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:[client], addr=::ffff:[client], terminal=dovecot res=success)' type=USER_START msg=audit(1217992493.199:391): user pid=8022 uid=0 auid=10243 subj=user_u:system_r:dovecot_auth_t:s0 msg='PAM: session open acct="[me]" : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:[client], addr=::ffff:[client], terminal=dovecot res=failed)' /var/log/maillog Aug 5 23:14:37 mailserv1 dovecot: Dovecot v1.0.7 starting up Aug 5 23:14:38 mailserv1 dovecot: auth(default): new auth connection: pid=8014 Aug 5 23:14:38 mailserv1 dovecot: auth(default): new auth connection: pid=8013 Aug 5 23:14:38 mailserv1 dovecot: auth(default): new auth connection: pid=8015 Aug 5 23:14:46 mailserv1 dovecot: auth(default): new auth connection: pid=8016 Aug 5 23:14:52 mailserv1 dovecot: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=::ffff:[server] rip=::ffff:[client] Aug 5 23:14:52 mailserv1 dovecot: auth(default): client out: CONT 1 Aug 5 23:14:52 mailserv1 dovecot: auth(default): client in: CONT<hidden> Aug 5 23:14:52 mailserv1 dovecot: auth(default): pam([me],::ffff:[client]): lookup service=dovecot Aug 5 23:14:52 mailserv1 dovecot: auth(default): pam([me],::ffff:[client]): pam_open_session() failed: Cannot make/remove an entry for the specified session Aug 5 23:14:53 mailserv1 dovecot: auth(default): client out: FAIL 1 user=[me] Aug 5 23:14:53 mailserv1 dovecot: auth(default): client in: AUTH 2 PLAIN service=IMAP secured lip=::ffff:[server] rip=::ffff:[client] resp=<hidden> Aug 5 23:14:53 mailserv1 dovecot: auth(default): pam([me],::ffff:[client]): lookup service=dovecot Aug 5 23:14:53 mailserv1 dovecot: auth(default): pam([me],::ffff:[client]): pam_open_session() failed: Cannot make/remove an entry for the specified session Aug 5 23:14:55 mailserv1 dovecot: auth(default): client out: FAIL 2 user=[me] Aug 5 23:14:58 mailserv1 dovecot: imap-login: Aborted login: user=<[me]>, method=PLAIN, rip=::ffff:[client], lip=::ffff:[server], TLS

2 1

[Dovecot] Maildir Index Question
by Ron Culler 06 Aug '08

06 Aug '08

We have several hundred mailboxes that have thousands of files in them (spam boxes) We currently run a find command and remove the files that are over 7 days old but still have boxes with upto 60k messages in them. I know that dovecot will update the index files for each mailbox when the boxes is accessed by an IMAP client(Webmail using Squirrel)but that can take quite a while to index. What I would like to do is via a cron job after the old file remove is to force dovecot to reindex these boxes. That way when the users login to the webmail interface it is quicker. Does anyone know if a script is available to do this? Thanks Ron Culler

2 1

[Dovecot] Dovecot PAM sessions with Maildir
by Sean Smitz 06 Aug '08

06 Aug '08

I am configuring a new mail server on RHEL 5 x64. I have configured dovecot as follows: ... protocols = imaps ... ssl_cert_file = /etc/pki/dovecot/certs/mailserver.cer ssl_key_file = /etc/pki/dovecot/private/mailserver.pem ... login_process_size = 64 ... mail_location = maildir:~/Maildir ... passdb pam { args = "session=yes cache_key=%u%s dovecot" } ... I'm getting the following error messages in /var/log/maillog: Aug 5 20:57:45 [hostname] dovecot: imap-login: Aborted login: rip=::ffff:128.8.244.15, lip=::ffff:[server], TLS Aug 5 21:01:34 [hostname] dovecot: imap-login: Aborted login: user=<[me]>, method=PLAIN, rip=::ffff:[server], lip=::ffff:[server], TLS I'm getting the following messages in /var/log/audit/audit.log: type=USER_AUTH msg=audit(1217984152.016:347): user pid=7669 uid=0 auid=10243 subj=user_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct="[me]" : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:[client], addr=::ffff:[client], terminal=dovecot res=success)' type=USER_ACCT msg=audit(1217984152.017:348): user pid=7669 uid=0 auid=10243 subj=user_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct="[me]" : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:[client], addr=::ffff:[client], terminal=dovecot res=success)' type=USER_START msg=audit(1217984152.017:349): user pid=7669 uid=0 auid=10243 subj=user_u:system_r:dovecot_auth_t:s0 msg='PAM: session open acct="[me]" : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:[client], addr=::ffff:[client], terminal=dovecot res=failed)' I find the message in the audit.log interesting because I configured the connection with SSL not TLS, but if I use TLS the result is the same.

2 1