- dovecot - dovecot.org

[Dovecot] Dovecot POP3 fails to chdir under FC6
by James A. McDonald 26 Jan '07

26 Jan '07

I started the Dovecot POP3 server under Fedora Core 6 (rpm dovecot-1.0-1.1.rc15.fc6), but some users couldn't connect, with /var/log/maillog show the message Jan 24 13:20:00 mmace dovecot: chdir(/branch/home/mmace) failed with uid 205: Permission denied Jan 24 13:20:00 mmace dovecot: child 18792 (pop3) returned error 89 (I had already edited first_valid_UID in /etc/dovecot.conf to allow UID's >= 200.) However, only users who had their home directory under /branch/home couldn't connect. Users with homedirs under /home connected via POP3 just fine. I found out POP3 connection failures also logged an error to /etc/messages: Jan 24 13:20:00 mmace kernel: audit(1169662800.479:160): avc: denied { search } for pid=18792 comm="dovecot" name="/" dev=sda3 ino=2 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir So, selinux was the culprit. My home directories had the right selinux security context, but the root of the disk holding those home directories (/branch is a separate disk drive) had a security context (system_u:object_r:mnt_t) that Fedora's selinux rules for dovecot did not allow. I changed the context of /branch to system_u:object_r:usr_t, and dovecot POP3 access worked for all users.

1 0

[Dovecot] 1.0.rc19 released
by Timo Sirainen 25 Jan '07

25 Jan '07

http://dovecot.org/releases/dovecot-1.0.rc19.tar.gz http://dovecot.org/releases/dovecot-1.0.rc19.tar.gz.sig Just did a few more fixes to index files. Do they help with anyone's problems? - ACL plugin didn't work unless control dir was separate from maildir - More index file handling fixes

2 1

[Dovecot] FS quota problem on Solaris10
by Kevin Richter 25 Jan '07

25 Jan '07

Hi, it seems, that I have a quota problem: kric0999@servername:~ $ quota -v Disk quotas for kric0999 (uid 1234): Filesystem usage quota limit timeleft files quota limit timeleft /home 1188850 0 1500000 0 0 0 You see: I have a quota: 1,2GB from 1,5GB The sent-mail, trash, drafts mboxes are in /home/kric0999/mail/ Why does Thunderbird say: "There are no storage quotas on this folder" f.ex when looking at the properties of sent-mail The log says: dovecot: Jan 25 17:29:31 Info: IMAP(kric0999): Loading modules from directory: /opt/dovecot-1.0.rc19/lib/dovecot/imap dovecot: Jan 25 17:29:31 Info: IMAP(kric0999): Module loaded: /opt/dovecot-1.0.rc19/lib/dovecot/imap/lib10_quota_plugin.so dovecot: Jan 25 17:29:31 Info: IMAP(kric0999): Module loaded: /opt/dovecot-1.0.rc19/lib/dovecot/imap/lib11_imap_quota_plugin.so dovecot: Jan 25 17:29:31 Info: IMAP(kric0999): mbox: data=/home/kric0999/mail/:INBOX=/var/mail/kric0999 dovecot: Jan 25 17:29:31 Info: IMAP(kric0999): mbox: root=/home/kric0999/mail, index=/home/kric0999/mail, inbox=/var/mail/kric0999 dovecot: Jan 25 17:29:31 Info: IMAP(kric0999): fs quota add storage dir = /home/kric0999/mail dovecot: Jan 25 17:29:31 Info: IMAP(kric0999): fs quota block device = auto_home dovecot: Jan 25 17:29:31 Info: IMAP(kric0999): fs quota mount point = /home Any ideas? Greets, Kevin Richter

2 2

[Dovecot] X-UID gaps cause Dovecot/IMAP to hang
by Benjamin Howell 25 Jan '07

25 Jan '07

Hi, When the Dovecot 1.0.rc19 IMAP server encounters X-UID headers with gaps in them, it hangs indefinitely. I've attached a sample mailbox (in mbox format) which repeatably exhibits this behavior. The mbox contains only three messages with the following X-UIDs in order: 774, 785, 787. If I remove the X-UID headers from each message, Dovecot handles the mailbox without any problems. UW-IMAP is able to handle the sample mbox _with_ X-UID headers. A full backtrace is also included. When Dovecot hangs, it appears to continually lock and unlock the mailbox. I'm using dotlocking so a mailbox.lock file appears and disappears constantly. I have to kill the process to log back in. I'm not familiar enough with Dovecot to offer a patch, but if anybody feels they can fix this or needs more information, please let me know. Regards, Benjamin Howell bhowell(a)iglou.com

2 1

[Dovecot] logging pop3 fetch time
by Zbigniew Szalbot 25 Jan '07

25 Jan '07

Hello, Is it possible with dovcot (rc7) to log how long it takes to complete downloading mail? If so, what do I have to set in the conf file? Thank you! -- Zbigniew Szalbot

2 2

[Dovecot] Dovecot website
by Luigi Rosa 25 Jan '07

25 Jan '07

I think that the Dovecot website is down/unreachable, at lest from a couple of Italian IPs Ciao, luigi -- / +--[Luigi Rosa]-- \ Old programmers never die, they just hit account block limit.

2 1

[Dovecot] rc18->rc19: read/unread/reply flags broken
by Jeff A. Earickson 25 Jan '07

25 Jan '07

Timo, This might be a bit vague, but I have noticed that rc19 seems to have broken the read/unread/reply flags in imap. My officemate has had problems with messages that are read and marked as read then mysteriously get remarked as unread the next time email is checked. I've had problems where I reply to a message and it does not get marked as "answered". We didn't see this with rc18 and earlier. My setup: Solaris 10, sparc, T2000 system. rc19 (now back to rc18), using mbox format. system mailbox is NFS mounted from another Sun Solaris 10 system, homedirs and dovcot cache files are on local zfs filesystems. Jeff Earickson Colby College

3 3

Re: [Dovecot] X-UID: 4085788205 != 2147483647
by Timo Sirainen 25 Jan '07

25 Jan '07

On 24.1.2007, at 2.49, Stephen Gowing wrote: > It *is* possible to force a large X-UID, if the user has an empty > inbox > (tested on rc15). Yes, but only if it's the very first message for the user. Afterwards even if user expunges all the messages, there are two things that prevent this from being possible: index files and the UW-IMAP style "FOLDER INTERNAL DATA" message. You could also prevent this completely by stripping the X-UID header in your SMTP server or LDA. For example Dovecot LDA strips all the Dovecot's internal metadata headers. I guess the UID renumbering could be done some day, but for now I think it's just way too much trouble with not that much benefits.

3 4

[Dovecot] dovecot LDA 'deliver' and aliases
by Michael Pulk 24 Jan '07

24 Jan '07

Dovecot LDA (deliver) aliases question. I have a multiple virtual domain setup using sendmail, username/domain, password, home directory all stored in mysql,Set-UID/GID for dovecot 'deliver' setup as referenced in Dovecot LDA wiki. Delivery, and POP/IMAP work just fine, serving a mail store in /home/vmail/domain/username type of setup. My problem comes from what may be a misunderstanding on my part on how to setup aliases for some virtual users. I have the mailer specification for dovecot defined, and my mailertable and (access) tables setup for each domain, with an entry like this for each domain in mailertable: domain.com dovecot:dovecot and since I also function as SMTP relay for each customer, I also have an entry in in access domain.com RELAY and the tables are made with hash... this all appears to work just fine, except when I want to alias a certian email address. Lets say that I have one email in the domain that needs to be forwarded to another remote account (on another server), I would normally accomplish this with an entry in virtusertable something like this: sales(a)domain.com <mailto:sales@domain.com> user(a)otherdomain.com <mailto:user@otherdomain.com> but when using dovecots' deliver as the LDA specified for domain.com in mailertable, this appears to be ignored, with the email being returned undeliverable (if sales(a)domain.com <mailto:sales@domain.com> doesn't exist), or being delivered to sales(a)domain.com <mailto:sales@domain.com> (if the account exists in the mysql table). I have also tried creating the account, and placing a .forward file in the appropriate /home/vmail/domain/user directory, but this also appears to be ignored. Does anyone have some advice on how to implement such an ability? I am running dovecot-1.0.rc17, sendmail-8.13.1-3.RHEL4.5, mysql-4.1.20-1.RHEL4.1 on Centos 4.4 Sincerely Michael P.

1 0

[Dovecot] NEWBIE: configuring all virtual users...
by AJ Weber 24 Jan '07

24 Jan '07

OK, I'm trying to filter-through all the different WiKi and docs about how to configure all virtual users. Now, there's only going to be a few, and it's a secure env, so I'm going to try and configure a custom passwd file (or whatever trimmed-down version I can do), basically to do usernames, passwords, and MBOX dirs. I'm only planning on serving POP3 mail to my clients. I have a location to create MBOX files -- it will be in a specific directory, with sub-dirs for each user; sort of a /home/VU/%u/mbox . I'm really confused as to what add'l info I need to include like "INDEX" and "INBOX" on the mail_location info. Does anyone have any info and/or examples on how to configure my .conf file and create a minimal passwd file for these virtual users? Thanks in advance, AJ

1 0

[Dovecot] [sfs@tc.umn.edu: Re: dovecot-auth file descriptor usage]
by Steven F Siirila 24 Jan '07

24 Jan '07

I hate to be a pest, but are there any revelations on file descriptor "overusage" by dovecot-auth? ----- Forwarded message from Steven F Siirila <sfs(a)tc.umn.edu> ----- Date: Sat, 20 Jan 2007 12:42:50 -0600 From: Steven F Siirila <sfs(a)tc.umn.edu> To: Dovecot Mailing List <dovecot(a)dovecot.org> User-Agent: Mutt/1.4.2.1i Subject: Re: [Dovecot] dovecot-auth file descriptor usage Okay, here is one which has closed fds 0 and 1, so I presume it is proxying SSL: 11988: imap-login Current rlimit: unlimited file descriptors 2: S_IFIFO mode:0000 dev:295,0 ino:2692866 uid:0 gid:1 size:0 O_RDWR 4: S_IFCHR mode:0644 dev:287,0 ino:99614726 uid:0 gid:3 rdev:190,1 O_RDONLY|O_LARGEFILE FD_CLOEXEC /devices/pseudo/random@0:urandom 5: S_IFIFO mode:0000 dev:295,0 ino:2692868 uid:65 gid:65 size:0 O_RDWR FD_CLOEXEC 6: S_IFIFO mode:0000 dev:295,0 ino:2692868 uid:65 gid:65 size:0 O_RDWR FD_CLOEXEC 7: S_IFSOCK mode:0666 dev:293,0 ino:33376 uid:0 gid:0 size:0 O_RDWR|O_NONBLOCK SOCK_STREAM SO_REUSEADDR,SO_KEEPALIVE,SO_SNDBUF(49152),SO_RCVBUF(49640),IP_NEXTHOP(0.0.193.232) sockname: AF_INET 134.84.119.102 port: 143 peername: AF_INET 160.94.23.17 port: 38847 8: S_IFSOCK mode:0666 dev:293,0 ino:63591 uid:0 gid:0 size:0 O_RDWR|O_NONBLOCK SOCK_STREAM SO_SNDBUF(16384),SO_RCVBUF(5120) sockname: AF_UNIX peername: AF_UNIX default 9: S_IFSOCK mode:0666 dev:293,0 ino:43728 uid:0 gid:0 size:0 O_RDWR|O_NONBLOCK SOCK_STREAM SO_SNDBUF(16384),SO_RCVBUF(5120) sockname: AF_UNIX On Fri, Jan 19, 2007 at 11:34:44PM +0200, Timo Sirainen wrote: > On Wed, 2007-01-17 at 12:57 -0600, Steven F Siirila wrote: > > Doh! Here's another one (took 3 more trials to nab one): > > > > 29058: imap-login > > Current rlimit: unlimited file descriptors > > 0: S_IFSOCK mode:0666 dev:293,0 ino:63436 uid:0 gid:0 size:0 > > O_RDWR|O_NONBLOCK > > SOCK_STREAM > > SO_REUSEADDR,SO_KEEPALIVE,SO_SNDBUF(49152),SO_RCVBUF(49152),IP_NEXTHOP(0.0.192.0) > > sockname: AF_INET 0.0.0.0 port: 143 > > 1: S_IFSOCK mode:0666 dev:293,0 ino:42189 uid:0 gid:0 size:0 > > O_RDWR|O_NONBLOCK > > SOCK_STREAM > > SO_REUSEADDR,SO_KEEPALIVE,SO_SNDBUF(49152),SO_RCVBUF(49152),IP_NEXTHOP(0.0.192.0) > > sockname: AF_INET 0.0.0.0 port: 993 > > Almost, but not quite :) File descriptors 0 and 1 are open only when the > process is listening for new connections (for ports 143 and 993). So > this process wasn't proxying SSL. > > > 2: S_IFIFO mode:0000 dev:295,0 ino:2456463 uid:0 gid:1 size:0 > > O_RDWR > > This is logging pipe. > > > 3: S_IFSOCK mode:0666 dev:293,0 ino:37418 uid:0 gid:0 size:0 > > O_RDWR > > SOCK_STREAM > > SO_SNDBUF(16384),SO_RCVBUF(5120) > > sockname: AF_UNIX > > Connection to master process. > > > 4: S_IFCHR mode:0644 dev:287,0 ino:99614726 uid:0 gid:3 rdev:190,1 > > O_RDONLY|O_LARGEFILE FD_CLOEXEC > > /devices/pseudo/random@0:urandom > > /dev/urandom. > > So it hasn't actually yet even connected to dovecot-auth. -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593 ----- End forwarded message ----- -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593

2 1

[Dovecot] pop/imap login logging only username part of full email address
by Justin McAleer 24 Jan '07

24 Jan '07

I have my login log format set like so: login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c When I log in using a full email address, though, I only get the username part of the address: Jan 24 13:28:29 node7 dovecot: pop3-login: Login: user=<justin>, method=PLAIN, rip=137.118.2.60, lip=137.118.7.247 Jan 24 13:28:30 node7 dovecot: POP3(justin): Disconnected: Logged out top=0/0, retr=0/0, del=0/717, size=15797460 Is that behavior intentional? If so, can it log the full username as given by the client instead? Anyone with multiple domains probably wants to see the domain part. Changing %u to %n yields the same log entry, and %d seems to be empty so nothing gets logged if I try to log that.

2 2

[Dovecot] More AFS maildir debugging
by Aaron Solochek 24 Jan '07

24 Jan '07

There appears to be some sort of a race condition when accessing a maildir directory for the first time with dovecot. I was getting a non-specific error trying to select INBOX, but when I stepped through it with a debugger it worked. Deleting the dovecot files and running the select again it failed. I started playing with it again just now, and when attempting to access Sent, I actually got some errors: a04 select Sent imap(aarons): Error: Corrupted transaction log file /XX/Maildir/.Sent/dovecot.index.log: unexpected end of file while reading header imap(aarons): Error: Corrupted transaction log file /XX/Maildir/.Sent/dovecot.index.log: unexpected end of file while reading header imap(aarons): Error: Corrupted transaction log file /XX/Maildir/.Sent/dovecot.index.log: unexpected end of file while reading header a04 NO Internal error occurred. Refer to server log for more information. [2007-01-13 16:17:51] I then deleted dovecot.index.log and dovecot.index.log.2 (the only two dovecot files that were present) and retried the select: a04 select Sent a04 NO Internal error occurred. Refer to server log for more information. [2007-01-13 16:23:40] Does anyone more familiar with the code than myself have any pointers of where to concentrate my debugging efforts? Thanks. -Aaron

4 13

[Dovecot] dovecot-acl file location in rc18
by Radek Zavicak 24 Jan '07

24 Jan '07

Hi, I'm trying to use ACL with dovecot rc18 but I don't understand where to store per-mailbox dovecot-acl file. In dovecot.conf I have mail_location = maildir:/var/vmail/%u/ and I do not use namespaces. I have some "testuser" maildir with subdir ".test". When I put dovecot-acl file to the .test directory I get this error in my log file: Error: IMAP(testuser): /var/vmail/testuser/.test/dovecot-acl is no longer kept in control directory, move it to the actual maildir (/var/vmail/testuser/.test) Error: child 28143 (imap) returned error 89 This error tells me to move dovecot-acl file from control dir to mail directory but these are the same for me (and I think it's Dovecot default for maildir). Where I should store per-mailbox dovecot-acl file in this case? Regards, Radek Zavicak

3 3

[Dovecot] too many open files error when using quota plugin
by Justin McAleer 24 Jan '07

24 Jan '07

With the quota plugin loaded (even with a quota value of 0), I get errors like the following: open(/var/mailstore/01/1a/301620/Maildir/cur/1169654988.P22440Q0M696852.<hostname stripped>,S=4437552:2,Sbc) failed: Too many open files To do this, I have a folder with about 700 messages and I tell Thunderbird to run junkmail controls on it (fetches all messages). Watching an strace on the imap process I'm connected to, the problem seems to be when the plugin goes to close the maildirsize file, it's not closing the correct file descriptor: open("/var/mailstore/01/1a/301620/Maildir/./maildirsize", O_RDWR|O_APPEND) = 1016 read(1016, "1024S\n395 1\n397 1\n", 5120) = 18 read(1016, "", 5102) = 0 close(4294967295) = -1 EBADF (Bad file descriptor) It closes that same descriptor every time. On a side note, I'm just curious why it needs to read the maildirsize file for a fetch request anyway?

2 2

[Dovecot] building with SSL support in non-std directories
by AJ Weber 24 Jan '07

24 Jan '07

I'm trying to get configure to find the right libs/includes to build with SSL support (openssl), but it just seems to refuse! I tried passing " --with-ssl=openssl --with-ssldir=/usr/local/ssl ", but this didn't seem to help. In /usr/local/ssl is: drwxr-xr-x 2 root root 4096 2006-12-11 13:25 bin drwxr-xr-x 2 root root 4096 2006-12-11 12:15 certs drwxr-xr-x 3 root root 4096 2006-12-11 12:15 include drwxr-xr-x 4 root root 4096 2006-12-11 13:25 lib drwxr-xr-x 6 root root 4096 2006-12-11 12:15 man drwxr-xr-x 2 root root 4096 2006-12-11 13:25 misc -rw-r--r-- 1 root root 9374 2006-12-11 13:25 openssl.cnf drwxr-xr-x 2 root root 4096 2006-12-11 12:15 private Can someone tell me what it's looking for and how to properly tell it to compile in the SSL support??? Thanks, AJ

2 1

[Dovecot] rc18 dies with Query: LSUB "" "*" failed on Squirrelmail
by Gavin Henry 24 Jan '07

24 Jan '07

Just upgraded, and then had to downgrade straight away. Couldn't get our Squirrelmail page up. Logged in fine etc. but got: Query: LSUB "" "*" failed, refer to server logs etc. Nothing in logs that shows error with mail_debug=yes What should I be looking for? Gavin. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/

3 10

[Dovecot] default_pass_scheme = PLAIN-MD5 dont work :(
by mancausoft 24 Jan '07

24 Jan '07

I config postfix+mysql+dovecot for SASL SMTP autentication. It works if set: default_pass_scheme = PLAIN and store plain-text password in mysql I'm change default_pass_scheme = PLAIN with default_pass_scheme = PLAIN-MD5 an store password in mysql with md5('passwd') and dovecotpw -s PLAIN-MD5 -p test {PLAIN-MD5} and md5("test") = 098f6bcd4621d373cade4e832627b4f6 but don't work: Jan 24 13:02:31 domain postfix/smtpd[18461]: connect from [x.x.x.x] Jan 24 13:02:37 domine dovecot: auth-worker(default): mysql: Connected to localhost (mail_info) Jan 24 13:02:39 domain postfix/smtpd[18461]: warning: [x.x.x.x]: SASL CRAM-MD5 authentication failed: PDI3Nac3ODA2NjQ0Njg4MzMuMTE2OTY0Mzc1N0BrbHVnY3QtY3Jldz4= Jan 24 13:02:40 domain postfix/smtpd[18461]: lost connection after AUTH from [x.x.x.x] Why?? where are the errors?? -- Email.it, the professional e-mail, gratis per te: http://www.email.it/f Sponsor: Questo inverno scaldale il cuore, con il prezioso calore di un Diamante. * Non lasciarti sfuggire lo sconto del 20% riservato a te! Clicca qui: http://adv.email.it/cgi-bin/foclick.cgi?mid=5630&d=24-1

2 2

[Dovecot] dovecotpw/sql crypt scheme core dump with rc17-19
by Andre Dalle 24 Jan '07

24 Jan '07

Platform is Solaris 8 on a 280R. I'm setting up a new installation of Dovecot, and I ran into some troubles that I've partly tracked down. I setup auth/user dbs with LDAP initially, and things worked well. Passwords are stored as "{crypt}zxcv..." in LDAP. I setup SQL, and began getting this: dovecot: Jan 23 16:37:47 Error: child 8718 (auth-worker) killed with signal 11 Passwords are stored as "zxcv..." in SQL. I changed default_pass_scheme from CRYPT to PLAIN, and no troubles. I then tried dovecotpw: dovecotpw -p 123 -s PLAIN-MD5 {PLAIN-MD5}202cb962ac59075b964b07152d234b70 dovecotpw -p 123 -s CRYPT Segmentation Fault (core dumped) So I then tried this: truss dovecotpw -p 123 -s crypt open64("/dev/urandom", O_RDONLY) = 3 read(3, "F80E82 c", 4) = 4 fcntl(3, F_GETFD, 0x00000000) = 0 fcntl(3, F_SETFD, 0x00000001) = 0 open64("/usr/local/lib/dovecot/auth/password", O_RDONLY|O_NDELAY) Err#2 ENOENT read(3, "8382", 2) = 2 Incurred fault #6, FLTBOUNDS %pc = 0xFF0E3304 siginfo: SIGSEGV SEGV_MAPERR addr=0x00000005 Received signal #11, SIGSEGV [default] siginfo: SIGSEGV SEGV_MAPERR addr=0x00000005 *** process killed *** Suffice to say, there is no "/usr/local/lib/dovecot/auth/password". I'm guessing that the dovecot auth-worker process is failing for the same reason but I don't know how to debug that one. I have core files for the dovecotpw process. -- André Dalle Systems Administrator NCF Internet

2 2

[Dovecot] All index file bugs fixed(?)
by Timo Sirainen 23 Jan '07

23 Jan '07

I fixed the nightly snapshot building. Now it's again being built every night (if there have been any changes). Please test it before I'll make rc18 release. http://dovecot.org/nightly/dovecot-latest.tar.gz I've also been stress testing a lot with http://dovecot.org/tools/imaptest.c. Last night I ran it for 9 hours with mmap_disable=yes and it picked up only one race condition, which is also now fixed. I'll run the next night with mmap_disable=no and see if anything shows up with it. I'm hopeful that there aren't any important index file related bugs left anymore. This is actually the first time in Dovecot's existence that I'm really not aware of *any* bugs in index file handling. v1.0 release should be really near now, unless you figure out new problems :) Here's a list of bugs that should have been fixed since rc17: "Corrupted index file dovecot.index: Record field keywords points outside record size (12 < 12+2)" "Corrupted Index file dovecot.index: Record [1].uid=0" Crashes - http://dovecot.org/list/dovecot-cvs/2007-January/007395.html "open() failed with file dovecot.index.log: No such file or directory" - http://dovecot.org/list/dovecot-cvs/2007-January/007405.html "Fixed index file dovecot.index: seen_messages_count 8 -> 9" "View synchronization from transaction log failed: Deleted counter wrong" etc. - http://dovecot.org/list/dovecot-cvs/2007-January/007403.html Corrupted transaction log errors: - http://dovecot.org/list/dovecot-cvs/2007-January/007389.html - http://dovecot.org/list/dovecot-cvs/2007-January/007393.html Corrupted view errors: - http://dovecot.org/list/dovecot-cvs/2007-January/007366.html - http://dovecot.org/list/dovecot-cvs/2007-January/007368.html Corrupted cache file errors: - http://dovecot.org/list/dovecot-cvs/2007-January/007364.html Fixed a lot of crashes whenever something went wrong (I deleted index files every 3 seconds until it crashed, last run went for several minutes before I stopped trying): - http://dovecot.org/list/dovecot-cvs/2007-January/007397.html

5 15

[Dovecot] 1.0.rc18 released
by Timo Sirainen 23 Jan '07

23 Jan '07

http://dovecot.org/releases/dovecot-1.0.rc18.tar.gz http://dovecot.org/releases/dovecot-1.0.rc18.tar.gz.sig I think we're quite near v1.0 now. * ACL plugin + Maildir: Moved dovecot-acl file from control directory to maildir. To prevent accidents caused by this change, Dovecot kills itself if it finds dovecot-acl file from the control directory. * When opening a maildir, check if tmp/'s atime is over 8h old. If it is, delete files in it with ctime older than 36h. However if atime - ctime > 36h, it means that there's nothing to be deleted and the scanning isn't done. We update atime ourself if filesystem is mounted with noatime. * base_dir doesn't need to be group-readable, don't force it. * mail_read_mmaped setting is deprecated and possibly broken. It's now removed from dovecot-example.conf, but it still works for now. * Removed also umask setting from dovecot-example.conf since currently it doesn't do what it's supposed to. + Authentication cache caches now also userdb data. + Added mail_log plugin to log various mail operations. Currently it logs mail copies, deletions, expunges and mailbox deletions. - dict quota: messages=n parameter actually changed storage limit. - A lot of fixes to handling index files. This should fix almost all of the problems ever reported. - LDAP: auth_bind=yes was more or less broken. - Saved mails and dovecot-keywords file didn't set the group from dovecot-shared file. - Fixed potential assert-crash while searching messages - Fixed some crashes with invalid X-UID headers in mboxes - If you didn't have a namespace with empty prefix, giving STATUS command for a non-existing namespace caused the connection to give "NO Unknown namespace" errors for all the future commands.

4 6

[Dovecot] Dovecot-1.0.rc17 on Solaris10 = assert_error
by Kevin Richter 23 Jan '07

23 Jan '07

Hi, i have a problem with dovecot rc17 on Solaris10. I have compiled Dovecot and openSSL in 32bit: CFLAGS="-I/opt/openssl-0.9.7l/include" LDFLAGS="-L/opt/openssl-0.9.7l/lib -R/opt/openssl-0.9.7l/lib" ./configure --prefix=/opt/dovecot-1.0.rc17 --with-ssl=openssl --with-ssldir=/opt/openssl-0.9.7l --enable-shared --disable-ipv6 --with-file-offset-size=32 make and make install ran without errors or warnings. The /opt/dovecot-1.0.rc17/var/log says: dovecot: Jan 16 11:20:05 Error: IMAP(kric0999): file lib.c: line 13 (nearest_power): assertion failed: (num <= ((size_t)1 << (BITS_IN_SIZE _T-1))) The error occures whenever i start my mail client and the authorization is successful. Cam anyone help me? Regards, Kevin Richter

2 6

[Dovecot] Current state of mulit-server NFS setups
by Justin McAleer 23 Jan '07

23 Jan '07

Hi list, I've been perusing the list archives, but I couldn't find a recent, definitive answer to what I'd like to know. I'm looking to set up a new batch of servers to migrate ~160,000 accounts, spread across several domains, onto (from CommuniGate). Last year I worked with the earlier beta/RC versions of Dovecot, so I'm generally familiar with the setup required. However, a lot of development has been done since I was last dealing with it. So, what I'd like to end up with is a load balanced group of servers providing pop and imap access with quota support using an NFS filesystem. We have a new Netapp device (forget the actual model) that can do SAN/iSCSI/NFS. We tried using various clustered filesystems previously, but the performance/stability issues were a nightmare, so I've fallen back to NFS (or perhaps SAN if users can't hit any server in the group). So, what does my dovecot setup need to be? I've seen some people say they disable indexing in the LDA, but allow pop/imap to index. Some say the attribute cache needs to be disabled, which I'd think would be worse than just disabling indexes. Some say indexes should be kept on local disk (dedicated server for users), and others seem to report problems even when doing so. Is there a general consensus? I was also wondering if dovecot's sanity checking on the indexes would allow each server in a balanced group to keep indexes on local disk (so if the maildir has changed on another server, dovecot rebuilds it). If so, does that take away all performance gains from having indexes at all? Thanks for any info you all can provide.

2 1

[Dovecot] Maildir Quota backend
by Ioannis Zachariadis 23 Jan '07

23 Jan '07

Hi, I've noticed that in the maildir backend for the quota plugin the quota limit is being read in kilobytes. In the quota-maildir.c at maildir_quota_init() , line 550 (rc18) if (strncmp(*args, "storage=", 8) == 0) { size = strtoull(*args + 8, NULL, 10) * 1024; if (size != 0) root->message_bytes_limit = size; root->master_message_limits = TRUE; } The value that's being read from storage is supposed to be in kB, at least that's what I understand from the wiki, and then the value of size is stored in bytes. thanks -- giannis.

2 1

[Dovecot] LDAP authentication stops working...
by Adrian Close 23 Jan '07

23 Jan '07

Hi all, I'm running dovecot-1.0.rc17 on OpenBSD 3.9, using userdb and passdb methods of "ldap" (SSL on 636/tcp) in addition to "passwd". Occasionally (generally after a few hours of operation, but not always), LDAP-based logins stop working (e.g. hang/timeout after POP3 PASS command). Accounts with local passwords (as opposed to accounts with a password field of "x") still work fine at this point. 'tcpdump' shows the persisient 636/tcp connection still with bidirectional traffic (PUSH/ACKs and ACKs like normal). After restarting Dovecot, things are fine until next time. I guess I could try and get login_ldap working with bsdauth, but if there's an issue in the Dovecot LDAP support I'd like to see it fixed. Any ideas? Thanks, Adrian Close P.S. I note the LDAP timeout logging patch but it won't apply easily to rc17 and I'm hoping the issue has progressed since then anyway...

7 14

[Dovecot] X-UID: 4085788205 != 2147483647
by Stephen Gowing 23 Jan '07

23 Jan '07

Hi, Dovecot (at least versions 0.99.10.4, 0.99.11, 1.0rc15, rc17 and rc18) allows message Unique Identifiers to be an unsigned 32 bit value, so something like "X-UID: 4085788205" is allowed. Some IMAP clients I've tested (Thunderbird 1.5.0.9, SquirrelMail 1.4.9a/PHP 4.3.2) appear to use signed 32 bit identifiers and request the above message as UID 2147483647 (max signed 32 bit integer). Evolution 2.0.2 fetches 4085788205 without complaint. Is there any chance Dovecot could decide to invalidate and renumber a folder when identifiers greater than 2147483647 are found? sbg

2 1

[Dovecot] mysteriously disappearing RECENT flag
by Vadim Zeitlin 22 Jan '07

22 Jan '07

Hello, I've decided to switch from UW-IMAP to Dovecot and so installed 1.0.rc15-2 on a Debian/Etch system and started using it with the existing MBOX folders. My configuration is pretty much the default one, in particular I didn't touch to any of mbox_xxx options. The (hoped for) performance improvements were indeed quite noticeable and mostly it works just fine but I seem to have one strange problem with the recent messages: Dovecot seems to reset the RECENT flag on the message right *before* the mailbox is opened. So even if a message was just copied to a folder (e.g. by email client filtering), it doesn't have RECENT flag when the mailbox is opened. Here is an example of what I see: % telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS STARTTLS AUTH=PLAIN] Dovecot ready. 1 login user password 1 OK Logged in. 2 status test (messages recent unseen) * STATUS "test" (MESSAGES 41 RECENT 0 UNSEEN 0) 2 OK Status completed. [--- switch to another window and copy a message to the test folder ---] 3 status test (messages recent unseen) * STATUS "test" (MESSAGES 42 RECENT 1 UNSEEN 0) 3 OK Status completed. 4 select test * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 42 EXISTS * 0 RECENT * OK [UIDVALIDITY 1048987099] UIDs valid * OK [UIDNEXT 407] Predicted next UID 4 OK [READ-WRITE] Select completed. 5 status test (messages recent unseen) * STATUS "test" (MESSAGES 42 RECENT 0 UNSEEN 0) 5 OK Status completed. 6 fetch 42 flags * 42 FETCH (FLAGS (\Seen)) 7 logout * BYE Logging out 7 OK Logout completed. Connection closed by foreign host. Why does Dovecot send "0 RECENT" when the mailbox is opened when it had just told that there was a recent message in it? And why is the message effectively old (no \Recent in the FETCH reply)? Notice that if I look at the MBOX file I see "Status: R" until command number 7, it becomes "Status: RO" only when I log out -- but internally Dovecot clearly considers it to be old long before that. Am I doing something wrong? Or is this the expected behaviour and, in this case, is there any way to change it to the more expected one (UW-IMAP-like)? Thanks in advance, VZ

2 3

[Dovecot] RC18 core dumps
by Cassidy B. Larson 22 Jan '07

22 Jan '07

Still seeing a few core dumps via the deliver process and corrupted transaction log files with RC18: Jan 22 10:46:36 zahara deliver(user(a)host.com): Corrupted transaction log file /data/mail/host.com/us/user(a)home.com/dovecot.index.log: start_offset (71680) > file size (71520) Jan 22 10:46:36 zahara deliver(user(a)host.com): seq = 6, rec->uid = 0, first_new_seq = 6, records = 5 Jan 22 10:46:36 zahara kernel: pid 41186 (deliver), uid 127: exited on signal 6 (core dumped) Jan 22 10:50:17 zahara deliver(user(a)host.com): Corrupted transaction log file /data/mail/host.com/us/user(a)host.com/dovecot.index.log: Append with UID 512, but next_uid = 513 However, if the user gets another email, it appears deliver doesnt core dump again. Thoughts? -c

2 1

[Dovecot] mail_log plugin in RC18
by Roger Weeks 22 Jan '07

22 Jan '07

On Jan 22, 2007, at 8:37 AM, Timo Sirainen wrote: > + Added mail_log plugin to log various mail operations. Currently it > logs mail copies, deletions, expunges and mailbox deletions. Hi Timo - I saw this addition and it sounds very useful in our enviroment. Can the plugin be enabled for specific users? Or is is a system-wide only plugin? -- Roger J. Weeks Systems & Network Administrator Mendocino Community Network

3 2

[Dovecot] Logging
by Ioannis Zachariadis 22 Jan '07

22 Jan '07

I use the syslog facility for logging purposes. I was wondering if there is a way to redirect all logs to mail.* For example, there are user.* messages.. can I change all of them to mail.* ? thanks. -- giannis.

3 9

[Dovecot] Dovecot rc15 crash in mbox-sync-update.c
by Steven F Siirila 22 Jan '07

22 Jan '07

Here is another crash we've been seeing recently in rc15 on Solaris 10. (gdb) bt full #0 0xff1c12a4 in ?? () No symbol table info available. #1 0xff140040 in ?? () No symbol table info available. #2 0x000786a8 in t_buffer_alloc (size=688976) at data-stack.c:346 __PRETTY_FUNCTION__ = "file %s: line %" #3 0x00078190 in t_pop () at data-stack.c:149 frame_block = (struct stack_frame_block *) 0x7fffffff #4 0x00042a90 in mbox_sync_update_status (ctx=0x8f7e0) at mbox-sync-update.c:267 No locals. #5 0x00041730 in mbox_sync_rewrite (sync_ctx=0xffbff548, mail_ctx=0x39d5, end_offset=14098141, move_diff=27645, extra_space=1, first_seq=45, last_seq=163) at mbox-sync-rewrite.c:552 mails = (struct mbox_sync_mail *) 0xcf238 offset = 1 dest_offset = 4294967295 next_end_offset = 14079696 next_move_diff = 6 start_offset = 1275633 expunged_space = 0 idx = 185 first_nonexpunged_idx = 0 padding_per_mail = 50 count = 542 ret = 0 __PRETTY_FUNCTION__ = "mktime(today) fail" #6 0x0003db84 in mbox_sync (mbox=0xc09c0, flags=32407386) at mbox-sync.c:1375 index_sync_ctx = (struct mail_index_sync_ctx *) 0xc1d58 sync_view = (struct mail_index_view *) 0xc1d90 sync_ctx = {mbox = 0xc09c0, flags = 0, input = 0xc5878, file_input = 0xc5750, write_fd = 10, index_sync_ctx = 0xc1d58, sync_view = 0xc1d90, t = 0xc3340, hdr = 0xc1dd8, header = 0xb6900, from_line = 0xb68d8, base_uid_validity = 1143728609, base_uid_last = 5161, base_uid_last_offset = 1538, mails = {buffer = 0xb6928, element_size = 56}, syncs = {buffer = 0xb6950, element_size = 20}, sync_rec = {uid1 = 0, uid2 = 0, type = 0, add_flags = 0 '\0', remove_flags = 0 '\0', keyword_idx = 0}, mail_keyword_pool = 0xc3598, saved_keywords_pool = 0xc36a0, prev_msg_uid = 5494, next_uid = 5709, idx_next_uid = 1, seq = 586, idx_seq = 587, need_space_seq = 45, expunged_space = 0, space_diff = -27680, dest_first_mail = 0, first_mail_crlf_expunged = 0, delay_writes = 0} seq = 4294967295 offset = 18446744073709551615 lock_id = 3 ret = 0 changed = 1 #7 0x0003e2c8 in mbox_sync (mbox=0xb8128, flags=0) at mbox-sync.c:1312 index_sync_ctx = (struct mail_index_sync_ctx *) 0x7e9 sync_view = (struct mail_index_view *) 0x1ee3429 sync_ctx = {mbox = 0x164d, flags = MBOX_SYNC_LAST_COMMIT, input = 0x24a, file_input = 0x24b, write_fd = 45, index_sync_ctx = 0x0, sync_view = 0x0, t = 0x0, hdr = 0xffffffff, header = 0xffff93e0, from_line = 0x0, base_uid_validity = 0, base_uid_last = 0, base_uid_last_offset = 18428719917034373157, mails = {buffer = 0x10, element_size = 753960}, syncs = {buffer = 0xb7e14, element_size = 753960}, sync_rec = {uid1 = 753104, uid2 = 752648, type = 563200, add_flags = 0 '\0', remove_flags = 8 '\b', keyword_idx = 788928}, mail_keyword_pool = 0x0, saved_keywords_pool = 0x0, prev_msg_uid = 13, next_uid = 2155905152, idx_next_uid = 7, seq = 4290770536, idx_seq = 433948, need_space_seq = 563200, expunged_space = -18024225394221448, space_diff = 2418925581670400, dest_first_mail = 0, first_mail_crlf_expunged = 0, delay_writes = 0} seq = 32386076 offset = 2516850835456 lock_id = 4294967295 ret = 788928 changed = 753960 #8 0x00069f24 in mail_storage_class_register (storage_class=0xb8128) at mail-storage.c:42 No locals. #9 0x00028fe0 in imap_sync_deinit (ctx=0xc09c0) at imap-sync.c:83 status = {messages = 706560, recent = 705536, unseen = 0, uidvalidity = 0, uidnext = 753216, first_unseen_seq = 0, keywords = 0x3e7} #10 0x00021248 in cmd_status (cmd=0xb7e14) at cmd-status.c:91 client = (struct client *) 0xb7dd0 args = (struct imap_arg *) 0xb8078 status = {messages = 745216, recent = 2, unseen = 4290771088, uidvalidity = 0, uidnext = 0, first_unseen_seq = 0, keywords = 0xffbff830} storage = (struct mail_storage *) 0xb7c08 real_mailbox = 0xb8128 "mail/AutoFiled/2006" str = (string_t *) 0x10 #11 0x0002287c in client_handle_input (cmd=0xb7dd0) at client.c:380 client = (struct client *) 0x210e8 __PRETTY_FUNCTION__ = "parameter \0\0\0\0\0\0Inva" #12 0x0007e3bc in timeout_add (msecs=743112, callback=0xab800, context=0xac400) at ioloop.c:152 timeout = (struct timeout *) 0x2 #13 0x0007dcb4 in _seek (stream=0xb56c8, v_offset=3039960672808960, mark=116) at istream-mmap.c:149 No locals. #14 0x0002ab24 in main (argc=-4195379, argv=0xab800, envp=0xac400) at main.c:123 No locals. (gdb) quit -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593

2 9

[Dovecot] can i set "folder alias"?
by John Wong 22 Jan '07

22 Jan '07

when i use mailclientA to send mail, then the mailclientA program default will save it to folder "sendA", when i use mailclientB to send mail, then the mailclientB program default will save it to folder "sendB". i know i can configure the mailclient program to use which folder, but can i set something like "folder alias"? imap { # ln -s sendA sendB folder alias = "sendA = sendB"; folser alias = "draftA = draftB"; ....... } i use dovecot-1.0rc17, imap, maildir sorry, i don't speak english

3 2

Re: [Dovecot] Deliver log entries have no date and time
by Timo Sirainen 22 Jan '07

22 Jan '07

On Sun, 2007-01-21 at 12:09 -0500, My BSD wrote: > This works but keeps the double quotes (""), please see below: > > "deliver([username]): "Jan 21 11:43:42 "Info: auth input: > [username]" Yea, bug, fixed again: http://dovecot.org/list/dovecot-cvs/2007-January/007476.html

1 0

Re: [Dovecot] Deliver log entries have no date and time
by Timo Sirainen 21 Jan '07

21 Jan '07

On Sun, 2007-01-21 at 10:37 -0500, My BSD wrote: > Deliver's log entries do not include a date and time: > > "deliver([username]): Info: auth input: [username]" Fixed: http://dovecot.org/list/dovecot-cvs/2007-January/007474.html You can also uncomment log_timestamp from dovecot.conf to make it work.

1 0

[Dovecot] feature request: proxy destination in logs
by Marshal Newrock 21 Jan '07

21 Jan '07

I would like to be able to see in the logs which server a pop/imap connection is proxied to. Thank you. -- Marshal Newrock, Ideal Solution LLC http://www.idealso.com

3 3

[Dovecot] MRTG
by Luigi Rosa 21 Jan '07

21 Jan '07

Quite a long ago someone proposed a patch to allow the Dovecot data to be collected and displayed via MRTG. Is there anyone who is actually using MRTG to analyze Dovecot traffic? Ciao, luigi -- / +--[Luigi Rosa]-- \ Barometer: an ingenious instrument which indicates what kind of weather we are having.

1 0

[Dovecot] Message size incorrect?
by Tristan Woudenberg - Prism Mail Solutions 20 Jan '07

20 Jan '07

Hi there, I recently installed a plugin for SquirelMail (php imap client, squirrelmail.org) which adds up message sizes per folder to display a nice total size of each subscribed folder. After consulting the plugin maintainers at SquirrelMail in this thread: http://thread.gmane.org/gmane.mail.squirrelmail.plugins/12468/focus=12468 There is quite a discrepancy in the rfc822.size reported by Dovecot and the actual space it takes up on my harddisk. I know there could be some overhead here from all the dovecot* and subscription list files in my imap folders, but like I stated in my email to the SquirrelMail plugin mailing list, about 1mb for a 4.3mb maildir mailbox might be a but much. Could this be like Tomas Kuliavas wrote: "Maybe those message have some data that does not belong to message or their formating breaks dovecot's message parsing functions."? I'm using Dovecot-1.0.rc15, sorry if this has been fixed between this release and the current. Kindest regards, Tristan -- Prism Mail Solutions Deployment, customization and hosting http://prism.nl

4 10

Re: [Dovecot] dovecot-auth file descriptor usage
by Timo Sirainen 20 Jan '07

20 Jan '07

On Tue, 2007-01-16 at 16:33 -0600, Steven F Siirila wrote: > > I'm now just wondering if it's only dovecot-auth that doesn't notice the > > socket closing for some reason, or if the imap-login processes proxying > > SSL didn't really close the socket after all. > > I have attached our dovecot.conf and a "pfiles" (like lsof) output of > dovecot-auth, showing all of its open file descriptors. I hope this helps. > If there is anything else I can provide to shed more light, let me know. login_processes_count = 32 This means that Dovecot always keeps extra 32 login processes that don't do anything else than wait for new connections. That's not at least helping :) Anyway, I'd like to get lsof of an imap-login process that is doing SSL proxying. Unfortunately I don't think there's any simple way to know what processes are doing that and what aren't. Setting login_process_count=1 at least makes it more likely that you'll hit the right process. If trussing the process shows that it's writing some garbage to file descriptor 1, it's probably proxying SSL..

2 5

[Dovecot] Mistake in Wiki
by Juha Saarinen 20 Jan '07

20 Jan '07

http://wiki.dovecot.org/LDA reads: "Exim System-users Replace/rewrite the default local_delivery router:" I believe it should refer to a the default local_deliver transport, and not router. The page is immutable so can't edit it. -- Juha http://www.geekzone.co.nz/juha

3 2

[Dovecot] stale locks
by Thomas Hummel 20 Jan '07

20 Jan '07

Hello Timo, I'm running dovecot-1.0.rc15 (imap and pop) postfix-2.3.5,1 procmail-3.22_6 (which is my LDA) on FreeBSD 6.1-STABLE I'm still using the mbox format (I'm planning to migrate to Maildir soon), mailboxes are on an NFS filesystem. I regulary see stale dotlocks files (either from dovecot (29 bytes, hold the pid of the process) or procmail (1 byte) and processes stucked in Disk Wait state. The only way I can get ridd of them is to restart nfslocking remove the .lock file change the inode of the mailbox file locking strategies are fcntl for mbox_read in dovecot dotlock fcntl for mbox_write in dovecot dotlock fcntl for procmail so I can't figure out why I see such stale locks and processes. Note : I disabled nfs attribute caching so I avoid cache related issues (such as a dotlock showing up late, etc...) Besides, I often see several imap-login processes for the same remote IP address. Does it means the user has several instances of his UA running or is it the behavior of some UA (Eudora ? Thunderbird ?) even if only one instance is run by the user. In any case, wouldn't that be dead-lock/stale lock prone ? -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

3 4

[Dovecot] Squirrelmail Login Error
by Jay Chandler 20 Jan '07

20 Jan '07

One user attempts to log in, and perpetually gets this from Squirrelmail: ERROR: Bad or malformed request. Query: THREAD ORDEREDSUBJECT ISO-8859-1 ALL Server responded: Error in IMAP command UID: ORDEREDSUBJECT threading is currently not supported. Dovecot's logs are clean. -- Jay Chandler Network Administrator Chapman University

2 1

[Dovecot] Disconnects with proxies
by Michael Kress 19 Jan '07

19 Jan '07

Hi, I know I shouldn't ask stuff like this when using dovecot-0.99.11-4.EL4 (CentOS-4.4), but why I'm asking this is whether it's worth to switch from rpm based upstream dovecot to a self compiled one or not and thus I think you wouldn't kill me presenting you this question. o:-) I've got a problem with dovecot regarding a pop3 proxy issue. When I configure my dovecot server to do just plain pop3 I can telnet from a windows box without any flaw, but as soon as the client uses some pop3 proxy (for example outlook uses avira antivir Mail-AntiVirus Protection), queries to that server fail. A log line looks like this: pop3-login: Dec 05 22:53:24 Info: Disconnected [::ffff:84.165.54.42] Moreover with the proxy activated, a telnet to port 110 (pop3) is not working properly, the cursor stays right behind "+OK dovecot ready." and as soon as I enter a character, the server rejects this character as an unknown command (Without pressing ENTER). As soon as I turn off the Antivir-Proxy the telnet to port 110 runs flawlessly and I can login. So I'd like to know is there anything I can do with this version or is it worth trying the newest version? Is this a known issue? Thanks in advance Michael -- Michael Kress, kress(a)hal.saar.de http://www.michael-kress.de / http://kress.net P E N G U I N S A R E C O O L

2 1

[Dovecot] Bug Report: ACL plugin searches wrong directory with shared folders
by Garret Huntress 19 Jan '07

19 Jan '07

I've been attempting to get to get Shared Folders and ACL's to work under dovecot 1.0rc17. Unfortunately, I've run into some problems (many have already been mentioned on the list), specifically the problem where folder-specific ACL files are not found (and I will not use Global ACL's due to the 100% probability of cross-namespace mailbox name conflicts). My namespace is as follows: namespace private { separator = / prefix = location = maildir:%h/Maildir inbox = yes } namespace private { separator = / prefix = CIW Archived/ location = maildir:%h/Mailarchive } namespace public { separator = / prefix = CIW Groups/ location = maildir:/srv/export/groups:CONTROL=%h/Maildir/public- subscriptions:INDEX=%h/Maildir/public-index } I decided to run a quick strace on dovecot's imap daemon while I was getting a folder listing to see why dovecot was not finding the folder-specific ACLs. Below are what I feel are the two key instances in the trace: Example 1: searching for ACL on private folder open("/etc/dovecot-acls//.DEFAULT", O_RDONLY) = -1 ENOENT (No such file or directory) open("/home/ghuntress/Maildir/./dovecot-acl", O_RDONLY) = -1 ENOENT (No such file or directory) open("/etc/dovecot-acls/Work", O_RDONLY) = -1 ENOENT (No such file or directory) open("/home/ghuntress/Maildir/.Work/dovecot-acl", O_RDONLY) = -1 ENOENT (No such file or directory) stat("/etc/dovecot-acls/", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0 open("/etc/dovecot-acls/", O_RDONLY) = 7 That looks good. The ACL plugin looking for the global acls first in the correct location, then in the maildir itself for the folder- specific acl. Example 2: searching for ACL on shared folder open("/etc/dovecot-acls//.DEFAULT", O_RDONLY) = -1 ENOENT (No such file or directory) open("/home/ghuntress/Maildir/public-subscriptions/./dovecot-acl", O_RDONLY) = -1 ENOENT (No such file or directory) open("/etc/dovecot-acls/IS.Postmaster", O_RDONLY) = -1 ENOENT (No such file or directory) open("/home/ghuntress/Maildir/public-subscriptions/.IS.Postmaster/ dovecot-acl", O_RDONLY) = -1 ENOENT (No such file or directory) stat("/etc/dovecot-acls/", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0 open("/etc/dovecot-acls/", O_RDONLY) = 7 Not so good. The ACL plugin is looking under the "CONTROL=" setting from the namespace location configuration, and not under the maildir itself for the folder-specific acl. Since we have to set the separate CONTROL location because of subscription conflicts (http:// wiki.dovecot.org/SharedFolders) we either break subscriptions by removing the CONTROL setting, or break ACL's by adding it. I'm not terribly familiar with the inner workings of Dovecot, however I can envision two possible fixes: 1.) Always have the ACL plugin look under the maildir location (and not the CONTROL override) for folder-specific ACLs or 2.) Have dovecot always place subscriptions for shared folders in a user-specific directory regardless of the namespace location configuration (although, this would probably break a ton of production configurations). I don't know what either of the above options would break, but I hope it's gives some ideas on how to fix this long-standing bug. Please let me know if I can be of any more help. -Garret -- Garret W. Huntress System Administrator / System Developer Geophysical Laboratory Carnegie Institution of Washington 5251 Broad Branch Road, NW Washington, DC 20015 Email: ghuntress(a)ciw.edu Phone: (202)-478-8973 AIM: Garret Huntress

2 1

[Dovecot] Dovecot killing OpenLDAP
by Gavin Henry 19 Jan '07

19 Jan '07

Hi all, Using rc15 here, with userdb and passdb in LDAP, no prefetcg. Dovecot keeps a thread open, so we can't shutdown our directory. Any ideas why? Thanks. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/

2 4

[Dovecot] quota in mysql not being updated
by Marshal Newrock 19 Jan '07

19 Jan '07

I'm having trouble getting the quota plugin to work with deliver. The quota in the database is not getting set. I am using dovecot-1.0-rc15. This server is not yet in production. Some values below are because I'm trying to test with the simplest possible case, and some because it's reading from a different database. Also, I noticed that "dovecot -n" doesn't display any information for the lda, nor any plugin information. Entries from /etc/dovecot/dovecot.conf: protocol lda { ... mail_plugins = quota } auth default { .... userdb sql { args = /etc/dovecot/dovecot-sql.conf } } dict { quotadict = mysql:/etc/dovecot/dict-quota.conf } plugin { quota = dict:storage=1024000: proxy::quotadict } from dovecot-sql.conf: user_query = SELECT 225 as uid, 225 as gid, mailbox_path as home, mailbox_path as mail, 'dirsize:storage=10240:messages=1000' as quota FROM transports WHERE email = '%u' dict-quota.conf: connect = ... table = quota_used select_field = quota_used_kb where_field = quota_type username_field = username_and_realm in mysql: describe quota_used; +--------------------+--------------+------+-----+---------+-------+ | Field | Type | Null | Key | Default | Extra | +--------------------+--------------+------+-----+---------+-------+ | username_and_realm | varchar(255) | NO | PRI | | | | quota_type | varchar(255) | NO | PRI | | | | quota_used_kb | int(11) | NO | | 0 | | +--------------------+--------------+------+-----+---------+-------+ mail logs: Jan 7 22:13:46 sentinel deliver(test.marshal(a)acd.net): auth input: test.marshal(a)acd.net Jan 7 22:13:46 sentinel deliver(test.marshal(a)acd.net): auth input: uid=225 Jan 7 22:13:46 sentinel deliver(test.marshal(a)acd.net): auth input: gid=225 Jan 7 22:13:46 sentinel deliver(test.marshal(a)acd.net): auth input: home=/var/mail/vmail01/00/00000001 Jan 7 22:13:46 sentinel deliver(test.marshal(a)acd.net): auth input: mail=/var/mail/vmail01/00/00000001 Jan 7 22:13:46 sentinel deliver(test.marshal(a)acd.net): auth input: quota=maildir:storage=1048576 Jan 7 22:13:46 sentinel deliver(test.marshal(a)acd.net): Loading modules from directory: /usr/lib/dovecot/lda Jan 7 22:13:46 sentinel deliver(test.marshal(a)acd.net): Module loaded: /usr/lib/dovecot/lda/lib01_quota_plugin.so Jan 7 22:13:46 sentinel deliver(test.marshal(a)acd.net): maildir: data=/var/mail/vmail01/00/00000001 Jan 7 22:13:46 sentinel deliver(test.marshal(a)acd.net): maildir: root=/var/mail/vmail01/00/00000001, index=/var/mail/vmail01/00/00000001, control=, inbox= Jan 7 22:13:46 sentinel deliver(test.marshal(a)acd.net): msgid=<20070107221155.0db93ce6@localhost>: saved mail to INBOX -- Marshal Newrock Ideal Solution, LLC - http://www.idealso.com

2 5

[Dovecot] Authorization client connect failing
by Ryan Hinton 19 Jan '07

19 Jan '07

Hello, and thank you in advance for your valuable time. I am running Dovecot v1.0.rc15 on an OpenBSD 3.9 i386 machine (no time to upgrade yet). I downloaded the source from the dovecot site, compiled and installed without any problem. The server starts up find and runs for a while. After a few hours to a few days, the server stops sending the CAPABILITY statement when a client tries to login. I found a few descriptions of this problem on the web, but no satisfactory resolution. I added some debugging code to the functions in auth-client.c and got the following traces. Included in this email are a successful login attempt, a failed attempt, and a startup trace. I am not a UNIX sockets guru and don't know the dovecot internals well enough to figure out what's wrong. I am happy to add/remove debugging code as requested to help track down the problem, although it may take a few days for the server to hang again. I hope someone can help me figure out the problem so my mail server works reliably! Here is a successful login attempt. Dec 9 10:34:45 myhost dovecot: imap-login: DEBUG:: auth_client_is_connected? Dec 9 10:34:45 myhost dovecot: imap-login: DEBUG:: auth_client_get_available_mechs Dec 9 10:34:45 myhost dovecot: imap-login: DEBUG:: auth_client_new Dec 9 10:34:45 myhost dovecot: imap-login: DEBUG:: auth_client_new_external Dec 9 10:34:45 myhost dovecot: imap-login: DEBUG:: auth_client_connect_missing_servers Dec 9 10:34:45 myhost dovecot: imap-login: DEBUG:: creating file descriptor for path... Dec 9 10:34:45 myhost dovecot: imap-login: default Dec 9 10:34:45 myhost dovecot: imap-login: DEBUG:: auth_client_set_connect_notify Dec 9 10:34:45 myhost dovecot: imap-login: DEBUG:: auth_client_find_mech Dec 9 10:34:45 myhost dovecot: imap-login: DEBUG:: auth_client_is_connected? Dec 9 10:34:47 myhost dovecot: imap-login: DEBUG:: auth_client_is_connected? Dec 9 10:34:47 myhost dovecot: imap-login: DEBUG:: auth_client_find_mech Dec 9 10:34:47 myhost dovecot: imap-login: Login: user=<myuser>, method=plain, rip=1.2.3.client, lip=1.2.3.server, TLS Dec 9 11:02:13 myhost dovecot: IMAP(myuser): Disconnected: Logged out Dec 9 11:02:13 myhost dovecot: imap-login: DEBUG:: auth_client_free Dec 9 11:02:13 myhost dovecot: imap-login: DEBUG:: auth_client_is_connected? The "creating file" output is from auth_server_connection_new(...) and dumps the requested path on the next line. Following is a failed attempt. The failure messages continue about every 5 seconds thereafter until I kill dovecot and restart. Dec 9 16:26:53 myhost dovecot: imap-login: DEBUG:: auth_client_is_connected? Dec 9 16:26:53 myhost dovecot: imap-login: DEBUG:: auth_client_get_available_mechs Dec 9 16:26:53 myhost dovecot: imap-login: DEBUG:: auth_client_new Dec 9 16:26:53 myhost dovecot: imap-login: DEBUG:: auth_client_new_external Dec 9 16:26:53 myhost dovecot: imap-login: DEBUG:: auth_client_connect_missing_servers Dec 9 16:26:53 myhost dovecot: imap-login: DEBUG:: auth_client_set_connect_notify Dec 9 16:26:58 myhost dovecot: imap-login: DEBUG:: reconnect_timeout Dec 9 16:26:58 myhost dovecot: imap-login: DEBUG:: auth_client_connect_missing_servers Dec 9 16:26:58 myhost dovecot: imap-login: DEBUG:: auth_client_is_connected? Dec 9 16:27:03 myhost dovecot: imap-login: DEBUG:: reconnect_timeout Dec 9 16:27:03 myhost dovecot: imap-login: DEBUG:: auth_client_connect_missing_servers Dec 9 16:27:03 myhost dovecot: imap-login: DEBUG:: auth_client_is_connected? Dec 9 16:27:04 myhost dovecot: imap-login: DEBUG:: auth_client_is_connected? Dec 9 16:27:04 myhost dovecot: imap-login: DEBUG:: auth_client_find_mech Dec 9 16:27:04 myhost dovecot: imap-login: Login: user=<myuser>, method=plain, rip=1.2.3.client, lip=1.2.3.server, TLS Dec 9 16:27:08 myhost dovecot: imap-login: DEBUG:: reconnect_timeout Dec 9 16:27:08 myhost dovecot: imap-login: DEBUG:: auth_client_connect_missing_servers Dec 9 16:27:08 myhost dovecot: imap-login: DEBUG:: auth_client_is_connected? Dec 9 16:27:13 myhost dovecot: imap-login: DEBUG:: reconnect_timeout Dec 9 16:27:13 myhost dovecot: imap-login: DEBUG:: auth_client_connect_missing_servers Dec 9 16:27:13 myhost dovecot: imap-login: DEBUG:: auth_client_is_connected? Dec 9 16:27:18 myhost dovecot: imap-login: DEBUG:: reconnect_timeout Dec 9 16:27:18 myhost dovecot: imap-login: DEBUG:: auth_client_connect_missing_servers Dec 9 16:27:18 myhost dovecot: imap-login: DEBUG:: auth_client_is_connected? Dec 9 16:27:23 myhost dovecot: imap-login: DEBUG:: reconnect_timeout Here is the startup trace. After this I see 3 imap-login processes. Dec 9 15:32:33 myhost dovecot: Dovecot v1.0.rc15 starting up Dec 9 15:32:33 myhost dovecot: Generating Diffie-Hellman parameters for the first time. This may take a while.. Dec 9 15:32:35 myhost dovecot: imap-login: DEBUG:: auth_client_new Dec 9 15:32:35 myhost dovecot: imap-login: DEBUG:: auth_client_new Dec 9 15:32:35 myhost dovecot: imap-login: DEBUG:: auth_client_new_external Dec 9 15:32:35 myhost dovecot: imap-login: DEBUG:: auth_client_new_external Dec 9 15:32:35 myhost dovecot: imap-login: DEBUG:: auth_client_connect_missing_servers Dec 9 15:32:35 myhost dovecot: imap-login: DEBUG:: auth_client_connect_missing_servers Dec 9 15:32:35 myhost dovecot: imap-login: DEBUG:: auth_client_new Dec 9 15:32:35 myhost dovecot: imap-login: DEBUG:: creating file descriptor for path... Dec 9 15:32:35 myhost dovecot: imap-login: DEBUG:: creating file descriptor for path... Dec 9 15:32:35 myhost dovecot: imap-login: DEBUG:: auth_client_new_external Dec 9 15:32:35 myhost dovecot: imap-login: default Dec 9 15:32:35 myhost dovecot: imap-login: default Dec 9 15:32:35 myhost dovecot: imap-login: DEBUG:: auth_client_connect_missing_servers Dec 9 15:32:35 myhost dovecot: imap-login: DEBUG:: creating file descriptor for path... Dec 9 15:32:35 myhost dovecot: imap-login: default Dec 9 15:32:35 myhost dovecot: imap-login: DEBUG:: auth_client_set_connect_notify Dec 9 15:32:35 myhost dovecot: imap-login: DEBUG:: auth_client_set_connect_notify Dec 9 15:32:35 myhost dovecot: imap-login: DEBUG:: auth_client_find_mech Dec 9 15:32:35 myhost dovecot: imap-login: DEBUG:: auth_client_find_mech Dec 9 15:32:35 myhost dovecot: imap-login: DEBUG:: auth_client_set_connect_notify Dec 9 15:32:35 myhost dovecot: imap-login: DEBUG:: auth_client_is_connected? Dec 9 15:32:35 myhost dovecot: imap-login: DEBUG:: auth_client_is_connected? Dec 9 15:32:35 myhost dovecot: imap-login: DEBUG:: auth_client_find_mech Dec 9 15:32:35 myhost dovecot: imap-login: DEBUG:: auth_client_is_connected? Thank you! --- Ryan Hinton iobass(a)email.com

3 5

[Dovecot] ioloop=best and imap-login: No authentication sockets found ??
by Jeremy C. Reed 19 Jan '07

19 Jan '07

Attempting to use dovecot-1.0.rc16 on centos built with: env CPPFLAGS=-I/usr/kerberos/include \ ./configure --prefix=/local/service/dovecot --with-ssl=openssl \ --with-ioloop=best My config has changed from example: protocols = imap ssl_disable = yes (because not pem) Plus I set to yes all the debug and verbose options. I couldn't login via IMAP: Jan 5 19:52:28 hostabc dovecot: imap-login: No authentication sockets found Jan 5 19:52:28 hostabc dovecot: child 14361 (login) returned error 89 Jan 5 19:52:42 hostabc dovecot: imap-login: No authentication sockets found Jan 5 19:52:42 hostabc dovecot: child 14362 (login) returned error 89 Jan 5 19:52:43 hostabc dovecot: imap-login: No authentication sockets found Jan 5 19:52:43 hostabc dovecot: child 14363 (login) returned error 89 Jan 5 19:52:56 hostabc dovecot: auth(default): client in: AUTH^I1^IPLAIN^Iservice=IMAP^Isecured^Ilip=127.0.0.1^Irip=127.0.0.1^Iresp=AGplcmVteXRlc3QAYWJjMTIz Jan 5 19:52:56 hostabc dovecot: auth(default): pam(jeremytest,127.0.0.1): pam_authenticate() failed: Authentication failure Jan 5 19:52:57 hostabc dovecot: auth(default): client out: FAIL^I1^Iuser=jeremytest Jan 5 19:52:57 hostabc dovecot: imap-login: No authentication sockets found Jan 5 19:52:57 hostabc dovecot: child 14366 (login) returned error 89 Jan 5 19:52:58 hostabc dovecot: imap-login: No authentication sockets found Jan 5 19:52:58 hostabc dovecot: child 14367 (login) returned error 89 Jan 5 19:53:02 hostabc dovecot: imap-login: No authentication sockets found Jan 5 19:53:02 hostabc dovecot: child 14369 (login) returned error 89 Jan 5 19:53:03 hostabc dovecot: imap-login: Disconnected: user=<jeremytest>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Jan 5 19:53:12 hostabc dovecot: imap-login: No authentication sockets found Jan 5 19:53:12 hostabc dovecot: child 14371 (login) returned error 89 I looked in ./src/lib-auth/auth-client.c and saw this was related to ioloop. So, I rebuilt and reinstalled without the --with-ioloop=best and it used "poll". And now I could log in.

2 1

[Dovecot] Connection to server time out when deleting (moving to Trash)
by Anders Lund 19 Jan '07

19 Jan '07

Hi, Running: * Dovecot 1.0 rc15 * Debian Sarge Linux Using Maildir and IMAP over SSL. When trying to delete a lot of mail (> 5000-6000 messages) in some folder, using Mozilla Thunderbird (1.5.0.7) on Ubuntu, I often experience "Connection to server <hostname> timed out." Any suggestions on how to fix this problem? "Empty Trash" seem to work fine, so I guess this is related to moving a lot of mail from one folder to another (Thrash)? - Anders -- Anders Lund <Anders.Lund(a)uninett.no> .~. UNINETT, N-7465 Trondheim, Norway / V \ Phone: +47 73 55 79 08 | Fax: +47 73 55 79 01 /( )\ ^ ^

4 10

[Dovecot] Error reading dovecot.conf under vmware/archlinux
by Eric PENOT 19 Jan '07

19 Jan '07

Hi I have some problemes when dovecot read it's config file dovecot.conf My config is : Linux distribution : Arch Linux 0.7.2 Gimmick UNDER VMware session (VMware workstation version 5.5.2build 29772) Linux kernel version 2.6.17 Dovecot version 1.0.rc17 GCC version 4.1.1 Using the 'dovecot-example.conf' as dovecot.conf => When Dovecot si compiled with : --with-file-offset-size=32 The Dovecot message is : Missing auth section for server default When Dovecot si compiled with : --with-file-offset-size=64 The Dovecot message is : Error in configuration file /etc/dovecot.conf line 746: Expecting '=' Can someone help me please? Regards Eric Pénot

2 1

[Dovecot] One User Cannot Log In
by Jay Chandler 19 Jan '07

19 Jan '07

Attempting to log in through Squirrelmail. Jan 19 09:34:07 montreal dovecot: imap-login: Login: user=<steve>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Jan 19 09:34:07 montreal dovecot: IMAP(steve): initgroups(steve, 15) failed: Invalid argument This entry appears nowhere else in the log. montreal# id steve uid=268(steve) gid=15(users) groups=15(users), 626(moodleCreators), 80(www), 98(ident), 28(saweb), 303(helpdeskweb), 53(bind), 86(cgi), 206(oacmail), 70(shakes), 43(xfs), 83(acweb), 10(wheel), 208(nasa), 54(lock), 244(helpdeskadmin) montreal# id chandler uid=119833(chandler) gid=15(users) groups=15(users) We did have the problem of his low UID causing trouble, but I've temporarily changed the Lowest UID setting in dovecot.conf until we can get about 200 users moved. Any suggestions? -- Jay Chandler Network Administrator, Chapman University 714.628.7249 / chandler(a)chapman.edu Today's Excuse: PEBKAC (Problem Exists Between Keyboard And Chair)

2 1