- dovecot - dovecot.org

[Dovecot] Dovecot Authentication through LDAP Server
by ashok cvs 09 Jun '06

09 Jun '06

I have a Samba PDC with LDAP (samba version 3.0.21c with Openldap 2.3.19). where i have all the users. I have configured sendmail on another system with dovecot as IMAP and POP3 server. I wanted to enable user authentication from LDAP server which is on samba PDC. So configured /etc/dovecot.conf ################################################################ protocols = pop3 imap imap_listen = [::] pop3_listen = [::] login_dir = /var/run/dovecot-login login = imap login_user = testuser login = pop3 verbose_proctitle = yes maildir_copy_with_hardlinks = yes mbox_locks = fcntl auth = default auth_mechanisms = plain digest-md5 auth_userdb = ldap /etc/dovecot-ldap.conf auth_passdb = ldap /etc/dovecot-ldap.conf auth_user = dovecot auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ ################################################################ configured /etc/dovecot-ldap.conf ####################################################################### # NOTE: We don't support "authentication binds", so you'll have to give # dovecot-auth read access to userPassword field in LDAP server. With OpenLDAP # this is done by modifying /etc/ldap/slapd.conf. There should already be # something like this: # # access to attribute=userPassword # by dn="<dovecot's dn>" read # add this # by anonymous auth # by self write # by * none # Space separated list of LDAP hosts to use. host:port is allowed too. hosts = 192.168.129.18 # Distinguished Name - the username used to login to the LDAP server dn = uid=root,ou=People,dc=msdpl,dc=com # Password for LDAP server dnpass = mobil5@b1d # LDAP protocol version to use. Likely 2 or 3. ldap_version = 3 # LDAP base base = dc=msdpl,dc=com # Dereference: never, searching, finding, always deref = never # Search scope: base, onelevel, subtree scope = subtree # User attributes in order: # Virtual user name (user@domain) # Home directory # MAIL environment # System user name (for initgroups()) # System UID # System GID #user_attrs = uid,homeDirectory,,uid,uidNumber,gidNumber user_attrs = uid,homeDirectory,,uid,, # Filter for user lookup. Some variables can be used: # %u - username # %n - user part in user@domain, same as %u if there's no domain # %d - domain part in user@domain, empty if user there's no domain user_filter = (&(objectClass=posixAccount)(uid=%u)) #ser_filter = (&(objectClass=sambaSamAccount)(uid=%u)) # Password checking attributes in order: # Virtual user name (user@domain) # Password, may optionally start with {type}, eg. {crypt} pass_attrs = uid,userPassword # Filter for password lookups #pass_filter = (&(objectClass=posixAccount)(uid=%u)) # Default password scheme. "{scheme}" before password overrides this. # Currently supported schemes include PLAIN, PLAIN-MD5, DIGEST-MD5, CRYPT #default_pass_scheme = CRYPT # You can use same UID and GID for all user accounts if you really want to. # If the UID/GID is still found from LDAP reply, it overrides these values. #user_global_uid = 100 #user_global_gid = 100 ####################################################################### The following is the error when we check using [root]#telnet mymailserverip 110 Trying 192.168.129.248 Connected to testmail.mydomain.com (192.168.129.248) Escape character is '^]`. user dcadmin pass mypass ERR-Authentication Failure The following is the log output of /var/log/maillog ######################################################################### Jun 8 13:09:16 testmail dovecot-auth: ldap(dcadmin): No password in reply Jun 8 13:10:16 testmail pop3-login: Disconnected: Inactivity [::ffff: 127.0.0.1] Jun 8 13:10:26 testmail dovecot-auth: ldap(root): No password in reply Jun 8 13:11:26 testmail pop3-login: Disconnected: Inactivity [::ffff: 127.0.0.1] Jun 8 13:11:38 testmail dovecot-auth: LDAP: ldap_result() failed: Can't contact LDAP server Jun 8 13:13:46 testmail dovecot-auth: ldap(root): No password in reply Jun 8 13:13:46 testmail imap-login: Disconnected [::ffff:127.0.0.1] Jun 8 13:14:03 testmail dovecot-auth: ldap(dcadmin): No password in reply Jun 8 13:14:03 testmail imap-login: Disconnected [::ffff:127.0.0.1] ############################################################################ Regards Niranjan

2 1

[Dovecot] Login issue
by "M. Tolga Özses" 09 Jun '06

09 Jun '06

Hi, cat /var/log/dovecot.log|grep -i jun\ 09 dovecot: Jun 09 09:35:26 Info: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=192.168.1.2 rip=212.98.201.1 resp=<hidden> dovecot: Jun 09 09:35:26 Info: auth(default): client out: CONT 1 dovecot: Jun 09 09:35:26 Info: auth(default): client in: CONT<hidden> dovecot: Jun 09 09:35:26 Info: auth(default): client out: OK 1 user=kabuto dovecot: Jun 09 09:35:26 Info: auth(default): master in: REQUEST 13 12652 1 dovecot: Jun 09 09:35:26 Info: auth(default): master out: USER 13 kabuto system_user=kabuto uid=1000 gid=100 home=/home/kabuto dovecot: Jun 09 09:35:26 Info: pop3-login: Login: user=<kabuto>, method=PLAIN, rip=212.98.201.1, lip=192.168.1.2 dovecot: Jun 09 09:35:26 Info: POP3(kabuto): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Does this look right? I'm still not getting any e-mails from outside world. My latest .conf file is at http://www.kunduz.org/dovecot.conf. The last change I made was to out uncomment pop3_uidl_format as I was suggested yesterday. Regards,

2 2

[Dovecot] Error building on OpenBSD 3.9
by B.O.F.H. 08 Jun '06

08 Jun '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 This is for all versions from 1.0b3 - 1.0b8 All crash at the same place: Making all in auth gmake[3]: Entering directory `/src/mail/dovecot-1.0.beta8/src/auth' if gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../../src/lib - -I../../src/lib-sql -I../../src/lib-settings -I../../src/lib-ntlm - -DAUTH_MODULE_DIR=\""/usr/local/lib/dovecot/auth"\" - -DPKG_LIBEXECDIR=\""/usr/local/libexec/dovecot"\" -I@includedir@ @INCLUDE_des@ -I/usr/local/include -I/usr/include/kerberosV - -std=gnu99 -O2 -march=athlon -pipe -Wall -W -Wmissing-prototypes - -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 - -Wbad-function-cast -MT mycrypt.o -MD -MP -MF ".deps/mycrypt.Tpo" - -c -o mycrypt.o mycrypt.c; \ then mv -f ".deps/mycrypt.Tpo" ".deps/mycrypt.Po"; else rm -f ".deps/mycrypt.Tpo"; exit 1; fi gcc: cannot specify -o with -c or -S and multiple compilations gmake[3]: *** [mycrypt.o] Error 1 gmake[3]: Leaving directory `/src/mail/dovecot-1.0.beta8/src/auth' gmake[2]: *** [all-recursive] Error 1 gmake[2]: Leaving directory `/src/mail/dovecot-1.0.beta8/src' gmake[1]: *** [all-recursive] Error 1 gmake[1]: Leaving directory `/src/mail/dovecot-1.0.beta8' gmake: *** [all] Error 2 Gnu-make versus BSD make doesn't differ. Compile options were: ./configure \ - --sysconfdir=/etc/dovecot \ - --localstatedir=/var \ - --infodir=/usr/share/info \ - --mandir=/usr/share/man \ - --disable-rpath \ - --enable-ipv6 \ - --enable-asserts \ - --without-shadow \ - --without-pam \ - --without-vpopmail \ - --with-pgsql \ - --with-mysql \ - --with-ssl=openssl \ - --with-ssldir=/etc/ssl \ - --with-storages='maildir mbox' \ - --with-sql-drivers \ CFLAGS='-O2 -march=athlon -pipe' \ LDFLAGS='-L/usr/local/lib' \ CPPFLAGS='-I/usr/local/include -I/usr/include/kerberosV' What other data can I provide to help figure out what's going wrong? - -- Ed V. IBM: Into Building Money 7 June 2006 17:52:03 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (MingW32) iQIVAwUBRIdnZKfRmhqF/IZAAQrVUg//U0L4agoc5WGQ8gvj0XiEclzj+izer635 NYppYOc4AicVKq1Hp3HbcwaYcWYBY0nubkcUemSk+t8V/2qcZY2Y3rvaQo6B2aj8 rQF8Wj8BdqIzVMsX4IeVJO7XQlI7xUA/vaEOeL69dx43M/+7VE673YuaBpHYLvez UwXx/4pWujg0HbSuuX1SqFg5VntAE2XppxfukHmbK4FYfNbmWWGYKuAwAMqdr35t r+2cN8GOrk9nRBgisl2ADJW8YbDYvrj1DVcrNeo2cIeK68kqXU8knhCNxs9fXr75 pNRP811rdDLXQur66JHSlGdcJWOSNuoKUDUWLoJ5vpuQP/QlCpF2IfJ5kiK7rraJ 56q4Jbw63IHqYOiEC+yb2pGcgoh7tOOBSGTtlmzorym+0lOBS2SSKz7xd0+zfeU2 yHlRs5af13nCWG5ZV9e+gdyLuvZkd+8H9RTQyv2pbBgn9GHjq62HreDP/Drj6/DA HfHMXOtDF0tkfWbedIDD6SCeH4ptPf6FOqRd0BVdzuMk0Hi4uFeiChmkdXJYo9Vn c3176FN31fHmc7ZJm1P7MjAPdzAI/QP+vGiucMJg9bNTZVVOs5t/4aKMdG183zRT 5UZR4x+7ZA1JKZ4NgfVuaTM3khsgo9lQgw+A8QwrOOwKFGaek9By0AKxbJ06wIcg BFOZZSoKgWc= =U0oQ -----END PGP SIGNATURE-----

3 6

[Dovecot] a bug in the LDAP code
by Udo Rader 08 Jun '06

08 Jun '06

Hi, I was heaving some grave problems with dovecot's ldap client that left me with the following settings for virtual users: -------CUT------- mbox: data=/virtual/oeush.at/home/f.someone/mail/:INBOX=/var/mail/f.someone.oeush.at -------CUT------- data in that case was correct, yet the INBOX location was wrong, this should have been /virtual/oeush.at/var/mail/f.someone.oeush.at instead. My settings for the retrieval of the mail environment in /etc/dovecot/dovecot-ldap.conf were like this: -------CUT------- user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid,MailMessageStore=mail -------CUT------- now at first glance this seems correct, but the problem was the upper cased "MailMessageStore" attribute name. changing it to "mailMessageStore" gave me the correct settings: -------CUT------- mbox: data=/virtual/oeush.at/home/f.someone/mail/:INBOX=/virtual/oeush.at/var/mail/f.someone.oeush.at -------CUT------- I don't have any of the LDAP RFCs ready, but I think that per default the case of the attribute _names_ should not matter when querying an ldap server. Udo Rader -- B e s t S o l u t i o n . a t EDV Systemhaus GmbH ------------------------------------------------------------------------ udo rader technischer leiter/CTO mobile ++43 660 5263642 ------------------------------------------------------------------------ eduard-bodem-gasse 8/3 A-6020 innsbruck fax ++43 512 935833 http://www.bestsolution.at phone ++43 512 935834

2 1

[Dovecot] Login issue
by "M. Tolga Özses" 08 Jun '06

08 Jun '06

Hi, I have a login issue. I do everything I can think of, but can't login. My .conf file is at http://kabuto.kunduz.org/dovecot.conf and I make slight changes everytime I try a new thing. I last set disable_plaintext_auth to yes and when I try to login using Thunderbird, I get *Code:* Sending of username did not succeed. Mail server mail.somedomain.org responded: Plaintext authentication disabled. , and dovecot.log reads *Code:* Info: pop3-login: Login failed: Plaintext authentication disabled: method=PLAIN, rip=212.98.201.1, lip=192.168.1.2. When I set disable_plaintext_auth to no and try again, I get *Code:* Sending of password did not succeed. Mail server mail.somedomain.org responded: Authentication failed and dovecot.log reads *Code:* dovecot: Jun 07 16:05:45 Info: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=192.168.1.2 rip=212.98.201.1 resp=<hidden> dovecot: Jun 07 16:05:45 Info: auth(default): client out: CONT 1 dovecot: Jun 07 16:05:45 Info: auth(default): client in: CONT<hidden> dovecot: Jun 07 16:05:45 Info: auth(default): pam(kabuto,212.98.201.1): pam_authenticate() failed: Authentication failure dovecot: Jun 07 16:05:46 Info: auth(default): client out: FAIL 1 user=kabuto dovecot: Jun 07 16:05:47 Info: auth(default): client in: AUTH 2 PLAIN service=POP3 lip=192.168.1.2 rip=212.98.201.1 resp=<hidden> dovecot: Jun 07 16:05:47 Info: auth(default): pam(kabuto,212.98.201.1): pam_authenticate() failed: Authentication failure dovecot: Jun 07 16:05:48 Info: auth(default): client out: FAIL 2 user=kabuto dovecot: Jun 07 16:05:51 Info: pop3-login: Disconnected: user=<kabuto>, method=PLAIN, rip=212.98.201.1, lip=192.168.1.2 Can you help me with this? Sorry that it is long, but it was the only way to describe completely. Best regards,

3 3

RE: [Dovecot] Using MySQL to store email?
by Joshua Goodall 08 Jun '06

08 Jun '06

Marc Perkel scribbled: > Repeat after me - think outside the box. Did you miss the part where I said we've already tried this? Not only have we thought outside the box, but we've smashed it up and built several alternatives to see which one sucked the least. Turns out, SQL backends suck the most. Please try to keep up :) Marc Perkel also scribbled: > To do this with MySQL would be trivial. To do it without a database > isn't possible. Actually you could do that with a tiny Sieve extension. I don't think you really understand what you are even proposing. Your statement would be better phrased "to do it without an index would be slow". If you wanted to create a database server for mail, with a mail-specific query language, then that database might be called "Dovecot", and the query language might be called "IMAP". Innovation is not an excuse for lousy engineering. As usual, it turns out to be bad design practice to say "let's deploy shinytoy for feature X!" rather than say "we need capability X! What's a creative way to achieve that?". Which is why necessity is the mother of invention. /JG

1 0

RE: [Dovecot] Using MySQL to store email?
by Joshua Goodall 07 Jun '06

07 Jun '06

Marc Perkel: > Suppose I want to move all message from a specific host to another folder. > UPDATE table SET folder=new-folder WHERE host=value; > > With databases you can do things you would have to write complex programs > to do with files. Things that you would consider to be impossible are > trivial with databases. > > This outside the box. People who optimise their systems for shiny cute features rather than the common case get all the hacks they deserve. Repeat after me: design for the common case. Also your proposed sql above and implications (arbitrary operations based on mail metadata i.e. headers) seems to involve indexing every mail header on delivery. Good luck with that one large scale mail storage. Did you want a mail database, or an OLAP system? >-) /jg

3 2

RE: [Dovecot] Using MySQL to store email?
by Joshua Goodall 07 Jun '06

07 Jun '06

Marc Perkel trolled: > So Timo, > > Have you considered the idea of storing all the email in a MySQL > database? Seems to me that MySQL could somplify all the backend stuff > that everyone struggles with and with replication one could create very > massive and reliable systems. What would it take to use MySQL that way? Maybe we could recode Dovecot in PHP, too. Sorry, that was nasty. However, having recently experimented with a very large mail storage system using mysql, I strongly advise against this avenue. In particular, the two main backends have serious deficiencies when you get up to the multi-gigabyte ranges: * MyISAM doesn't restart in constant time. * InnoDB's next-key locking kills performance on large blob inserts & deletes. Anyway, what do you mean, everyone struggles with backends? Dovecot's backends are fast, modular and reliable. Regarding replication; all good logical volume managers can do this. Regarding massive; all good filesystems can do this. Regarding reliable; I guarantee that mysql reliability (when properly managed) is still lower than that of a filesystem (when properly managed). In fact, the whole argument is specious. Filesystems already are databases, optimised for storing arbitrary-sized data objects using a hierarchical key, which is practically the definition of mail storage. /jg

2 1

[Dovecot] Dspam Plugin
by Timothy White 07 Jun '06

07 Jun '06

Johannes, do you have any plans (regarding your dspam plugin) to: a) Integrate it into libdspam rather than calling the dspam binary? b) Any ideas for scaling it better, and implementing it scaled better? I notice a slight discussion about scaling, and you have chosen not to pursue it. Is that because it's too hard, or just because you don't need to? Thanks Tim p.s. If I knew how to use the libdspam stuff, I'd make the changes myself... I might have to learn ;-) -- Linux Counter user #273956

2 1

[Dovecot] Dovecot configure script for 1.0b8 not including SQL drivers?
by Will Buik 06 Jun '06

06 Jun '06

On 6/5/06, grant beattie <grant(a)grunta.com> wrote: > On Mon, Jun 05, 2006 at 05:57:36PM -0400, Will Buik wrote: > > > I am having a problem with the configure script for Dovecot 1.0b8. It > > doesn't seem to be compiling in sql engine driver support. I have > > specified --with-sql and --with-pgsql but when the script is done it > > says "Building with SQL drivers ..............:" but lists no drivers > > afterwards. I tried compiling it anyway but it logs the error " > > auth(default): Unknown database driver 'pgsql' " so the it defiantly > > didn't get compiled in. My pgsql includes and libs are in a non > > standard location but I specified that in the CPPFLAGS and LDFLAGS > > before the ./configure invocation. What have I done wrong here, or is > > there a bug in the script? > > > > The whole invocation is: > > CPPFLAGS='-I/usr/local/openssl-0.9.8b/include > > -I/usr/local/pgsql-8.1.4/include' > > LDFLAGS='-L/usr/local/openssl-0.9.8b/lib -L/usr/local/pgsql-8.1.4/lib' > > ./configure --prefix=/usr/local/dovecot-1.0b8 > > --sysconfdir=/etc/dovecot --localstatedir=/var --with-ioloop=eooll > > --with-notify=dnotify --without-pop3d --with-storages=maildir > > --with-sql --with-pgsql --with-gnu-ld > > what does config.log say? and does it report any problems with > finding openssl? > > the problem may be that the shared libraries can't be found at > runtime, in which case you will need to set the rpath in the binaries > that are built. you didn't mention which platform/compiler you're > using, but this is done using the -Wl,-R<directory> argument for gcc > and Sun Studio compiler/Solaris ld, at least (-Wl passes the next > argument to the linker, -R tells the linker to include this path in the > binary's rpath). > > grant. I looked at the config.log file and it doesn't look like it's having any problems with openssl, but when I looked for pgsql I got what looked like some errors. configure:29296: checking for PQconnectdb in -lpq | char PQconnectdb (); | PQconnectdb (); ac_cv_lib_pq_PQconnectdb=no /usr/local/pgsql-8.1.4/lib/libpq.so: undefined reference to `dlerror' /usr/local/pgsql-8.1.4/lib/libpq.so: undefined reference to `dlclose' /usr/local/pgsql-8.1.4/lib/libpq.so: undefined reference to `dlopen' /usr/local/pgsql-8.1.4/lib/libpq.so: undefined reference to `dlsym'

2 1

Re: [Dovecot] Using MySQL to store email?
by nodata 06 Jun '06

06 Jun '06

> On 06-06-2006 15:48:20 +0200, nodata wrote: >> Putting everything in a database would provide one benefit: >> * Less storage space needed due to duplicated e-mail > > ... assuming that the mails are completely identical (i.e. have no slightly different headers) and that the database backend does expensive duplicate elimination on its string heaps. Yes, like Exchange does (unless you did something "clever" with the headers). > So the real benefit you get I think is: > * full text searching capabilities based on the IR-like indices > provided/maintained by the database backend, such as for instance: http://dev.mysql.com/doc/refman/5.0/en/fulltext-query-expansion.html If the original poster if struggling with a filesystem version of dovecot, and wants to create "massive and reliable systems" using MySQL, then he's going to have trouble. Adding MySQL won't do that.

1 0

[Dovecot] vpopmail
by C J Kenneth Tan -- OptimaNumerics 06 Jun '06

06 Jun '06

I was running 1.0.beta3 code with no problems. I recently switched to 1.0.beta8 and I noticed that vpopmail's pop-before-smtp functionality stopped working. I am using vpopmail authentication. Has anyone else encountered this problem? Thank you. Kenneth Tan ----------------------------------------------------------------------- C J Kenneth Tan, PhD OptimaNumerics Ltd Telephone: +44 798 941 7838 E-mail: cjtan(a)OptimaNumerics.com Telephone: +44 207 099 4428 Web: http://www.OptimaNumerics.com Facsimile: +44 207 100 4572 -----------------------------------------------------------------------

8 24

[Dovecot] Procmail and dovecot interactions
by Jeff Turner 06 Jun '06

06 Jun '06

Hi, I'm using procmail to deliver to Maildir directories: DEFAULT=${HOME}/Maildir/ I notice dovecot keeps a 'dovecot-uidlist' plus cache and index files, in each maildir. How is it that dovecot keeps these up to date when the contents of cur/ keeps changing? Is dovecot scanning cur/ every so often checking for changes? Isn't this slow for large folders (100k+)? I note on the Dovecot LDA page[1], that it keeps the "Dovecot index base up to date". Does this mean Dovecot isn't expected to work properly with a delivery agent which doesn't know about its indexes? Cheers, Jeff [1] http://wiki.dovecot.org/LDA

2 2

[Dovecot] Dovecot configure script for 1.0b8 not including SQL drivers?
by Will Buik 06 Jun '06

06 Jun '06

I am having a problem with the configure script for Dovecot 1.0b8. It doesn't seem to be compiling in sql engine driver support. I have specified --with-sql and --with-pgsql but when the script is done it says "Building with SQL drivers ..............:" but lists no drivers afterwards. I tried compiling it anyway but it logs the error " auth(default): Unknown database driver 'pgsql' " so the it defiantly didn't get compiled in. My pgsql includes and libs are in a non standard location but I specified that in the CPPFLAGS and LDFLAGS before the ./configure invocation. What have I done wrong here, or is there a bug in the script? The whole invocation is: CPPFLAGS='-I/usr/local/openssl-0.9.8b/include -I/usr/local/pgsql-8.1.4/include' LDFLAGS='-L/usr/local/openssl-0.9.8b/lib -L/usr/local/pgsql-8.1.4/lib' ./configure --prefix=/usr/local/dovecot-1.0b8 --sysconfdir=/etc/dovecot --localstatedir=/var --with-ioloop=eooll --with-notify=dnotify --without-pop3d --with-storages=maildir --with-sql --with-pgsql --with-gnu-ld Thanks in advance.

2 1

[Dovecot] Maildir, procmail, and locks
by Mark Nienberg 05 Jun '06

05 Jun '06

I'm using procmail as the local delivery agent for Maildir style mailboxes. I discovered that I was able to send mail to other users but was unable to send mail to myself. Examples from verbose procmail log: **** Successful message to another user **** procmail: [24589] Fri Jun 2 15:03:34 2006 procmail: Assigning "PATH=/home/david/bin:/bin:/usr/bin:/sbin:/usr/sbin:/usr/local/bin:/usr/X11R6/bin" procmail: Assigning "LASTFOLDER=/home/david/Maildir/new/msg.4AAdC" procmail: Opening "/home/david/Maildir/new/msg.4AAdC" procmail: Acquiring kernel-lock procmail: Notified comsat: "david@0:/home/david/Maildir/new/msg.4AAdC" From mark.nienberg(a)tippingmar.com Fri Jun 2 15:03:34 2006 Subject: test to other user Folder: /home/david/Maildir/new/msg.4AAdC **** Failed message to myself **** procmail: [24596] Fri Jun 2 15:05:13 2006 procmail: Assigning "PATH=/home/mark/bin:/bin:/usr/bin:/sbin:/usr/sbin:/usr/local/bin:/usr/X11R6/bin" procmail: Couldn't create or rename temp file "/home/mark/Maildir/new/msg.A" procmail: Assigning "LASTFOLDER=/var/mail/mark" procmail: Opening "/var/mail/mark" procmail: Acquiring kernel-lock procmail: Notified comsat: "mark@686:/var/mail/mark" From mark.nienberg(a)tippingmar.com Fri Jun 2 15:05:13 2006 Subject: test to self Folder: /var/mail/mark Anyway, I changed dovecot's lock_method from the default fcntl to flock and the problem disappeared. I'll add this to the wiki unless someone points out an error in my method. Mark Nienberg

3 8

[Dovecot] Re: Expunge is not expunging unless called twice--revisited
by Glenn Leavell 05 Jun '06

05 Jun '06

On Tue May 30 05:45:12 EEST 2006, Jeff Blank jb000002 at mr-happy.com wrote: > Hi, > > I'm running dovecot-1.0.beta8 from FreeBSD ports, using mbox mail > store. My problem appears to have come up on the list about a month > ago, "Expunge is not expunging unless it is called twice". I ran > through Bill Boebel's telnet-IMAP session for myself, and I see that > his test case is now fixed (as Timo said), but mutt, for whatever > reason, uses +FLAGS.SILENT, and I'm still getting the behaviour in > Bill's original problem when I telnet and use +FLAGS.SILENT: > > 1 OK Logged in. > 2 select INBOX > * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) > * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] > * Flags permitted. > * 1 EXISTS > * 1 RECENT > * OK [UNSEEN 1] First unseen. > * OK [UIDVALIDITY 1148956034] UIDs valid > * OK [UIDNEXT 4] Predicted next UID > 2 OK [READ-WRITE] Select completed. > 3 UID STORE 3 +FLAGS.SILENT (\Deleted) > 3 OK Store completed. > 4 expunge > 4 OK Expunge completed. > 5 expunge > * 1 EXPUNGE > * 0 RECENT > 5 OK Expunge completed. > > After step 4, the message is still in the mailbox with "X-Status: D"; > the second expunge is required to remove it. I seem to get the same > behaviour with Thunderbird, so is this still a dovecot problem? (I > have Thunderbird set up to remove deleted messages immediately, not > move to trash or just mark as deleted.) I'm also still experiencing the twice-needed expunge problem (with mutt and +FLAGS.SILENT) just as Jeff described it. I have the problem both with Beta8 and with last night's CVS snapshot. I'm using Maildir. Thanks very much, Glenn

2 1

[Dovecot] Dovecot + Logcheck Regex
by Rik Wade 05 Jun '06

05 Jun '06

I'm using logcheck for log reporting on Debian Etch, and am currently getting a lot of log entries from Syslog falling through the standard logcheck regex filters. I'm running Dovecot 1.0beta8. The filters follow: ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (imap|pop3)-login: Login: [.[:alnum:]@-]+ \[(::ffff:)?[:0-9a-f.]+\]$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (dovecot: )?(imap|pop3)-login: Disconnected \[(::ffff:)?[:0-9a-f.]+\]$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (dovecot: )?(imap|pop3)$[^[:space:]]+$: File isn't in mbox format: [^[:space:]]+$ # dovecot 1.0 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dovecot: (imap|pop3)-login: Login: user=<[.[:alnum:]@-]+>, method=(PLAIN|plain|LOGIN|login|(CRAM|cram|DIGEST|digest)-(MD5|md5)), rip=(::ffff:)?[:.[:digit:]]+, lip=(::ffff:)?[:0-9a-f.]+(, TLS)?$ The type of entry coming through is: Jun 5 09:05:57 myhostname dovecot: IMAP(myusername): Disconnected for inactivity Jun 5 09:07:05 myhostname dovecot: IMAP(myusername): Disconnected: Logged out Jun 5 09:07:05 myhostname dovecot: IMAP(myusername): Disconnected: Logged out The first alnum pattern doesn't match given a host name, but the messages given by Dovecot do not appear to be catered for in the logcheck files. I wondered whether anyone on the dovecot list was also using logcheck and had fixed the regex patterns? -- rik

1 0

[Dovecot] Specifying with openssl to use
by Chase 05 Jun '06

05 Jun '06

I'm trying to setup dovecot on Solaris 10. I can get it all working except TLS/SSL. I traced my problem down to the version of openssl that Solaris 10 ships with. The fix is supposed to be to use a newer version of openssl. Without removing the built-in version of openssl I've installed openssl-0.9.8b to /usr/local. When I "./configure" dovecot it seems to always pick up the broken version of openssl in /usr/sfw. How do I make dovecot use an alternate copy of openssl? How is it even finding the one in /usr/sfw? Thanks, -Chase I tried setting CPPFLAGS and LDFLAGS already.

3 4

[Dovecot] Since Updating Dovecot - Problem by connecting with Client
by Mailing 04 Jun '06

04 Jun '06

Hi, in the last days I've updated my dovecot on my Gentoo System. Before all went fine. Since the update it doesn't work in any way. After the Update my Thunderbird Client says: The Connecction could not proceeded because it was rejected. Another message was, that I should use TLS or SSL to connect. I've not changed my config - probably the update does - and it's only a simple configuration in my home-network. Has anybody an idea which is causing the problem? the config looks like this: protocols = imap imaps listen = [::] default_mail_env = maildir:%h/.mail mechanism = plain Thx for help k1x

3 3

[Dovecot] imaps multiple domains proposal
by Jim Flowers 04 Jun '06

04 Jun '06

There was a thread earlier this year that noted a difficulty in modifying dovecot to handle multiple domain certificates. This is a proposal that may require only minor modifications. Virtual domains can be set up with a unique ip address for each server; mail.domain1.tld ###.###.###.1, mail.domain2.tld ###.###.###.2, etc. Users are instructed to enter 'mail.domain?.tld' for their imap server. When an SSL TCP connection is established on port 993, the server program will know the IP # that was used for the connection and can use getnameinfo to extract the domain name (%d). This can then be used to build a specific reference to the certificate to be used, prior to responding to CLIENT_HELLO. Something like /etc/ssl/%d/[certs|private]/dovecot.pem One technique would be to include this in multiple dovecot.conf listen parameters read on startup, similar to tpop3d: listen = ###.###.###.1:993(domain1.tld);tls=stls,\ /etc/ssl/domain1.tld/certs/dovecot.pem,\ /etc/ssl/domain1.tld/private/dovecot.pem listen = ###.###.###.2:993(domain2.tld);tls=stls,\ /etc/ssl/domain2.tld/certs/dovecot.pem,\ /etc/ssl/domain2.tld/private/dovecot.pem Alternatively, as virtual servers almost always use some form of lookup (in my case mysql) the certificate used could be determined at time of connection, similar to the way ssl_ca is handled. For example: user_query = SELECT '125'as uid, '125' as gid, maildir as home, '/etc/ssl/%d/certs/dovecot.pem' as cert, '/etc/ssl/%d/private/dovecot.pem as priv FROM mailbox WHERE username = '%u' In this manner the certificate returned would match the server ip/FQDN and can also be customized for the specific domain involved. Seeing their own domain name as the CN for both the certificate and CA goes a long way to establish credibility for most secure email users. Could this be done? -- Jim Flowers<jflowers(a)ezo.net>

4 5

[Dovecot] "Bug" report (and patch)
by Soren Hansen 03 Jun '06

03 Jun '06

1 0

[Dovecot] outlook express 6 imap client workaround
by david williams 03 Jun '06

03 Jun '06

My outlook express users connecting with imap are having issues with client timeout. The wiki says to add oe6-fetch-no-newmail, but when I add that workaround I get this error in the logs: Jun 2 10:00:13 mail dovecot: IMAP(username): Unknown client workaround: oe6-fetch-no-newmail I'm using 1.0b7. Any ideas?

3 2

Re[2]: [Dovecot] dovecot can't start!
by Oleg D. 02 Jun '06

02 Jun '06

MB> Hmmm... I was seeing a problem rather like this with 1.0beta8 under Solaris MB> with Sun's compiler: only it was with the IMAP protocol rather than POP. MB> The problem there was an assumption Tio had made that everyone was using a MB> C99-compatible compiler. Apparently this handles some aspects of variable MB> initialisation differently from earlier C compilers. MB> In my case adding a command-line option to the C compiler to flip it into MB> C99 mode seemed to solve the problem. The option for our compiler was MB> "-xc99" -- however if your compiler has such an option it may have a MB> different name. If you check the manual page for your C compiler you may MB> find an equivalent option to try. MB> However another solution was provided by Timo in the form of a simple patch MB> that made changes to a couple of source files. I hope Timo doesn't mind: MB> I'm re-sending his patch as an attachment to this message as it is tiny. MB> You could try applying it and rebuilding Dovecot. MB> Cheers, MB> Mike Brudenell But I use FreeBSD 4.11-RELEASE-p15 with native compiler. Really nobody has this problem on freebsd? And the main - Why I can't start dovecot without SSL :) Why I see in log "pop3-login: BUG: SSL initialization parameters not given while they should have been" even if I have "ssl_disable = yes" in dovecot.conf 1.0b3 works fine. This problem is main for me because I don't want to use SSL. -- Best regards, Oleg mailto:dzoleg@rsute.ru

4 6

[Dovecot] Duplicate Attachments....
by Charles Marcus 02 Jun '06

02 Jun '06

Love Dovecot, many thanks for it! But, I have a question regarding the storing of emails, with respect to efficiency... Our business model (advertising industry) is such that our users exchange a lot of emails with attachments - most less than a megabyte, but some considerably larger. Consequently, I have been looking for a good, open source imap server that doesn't store multiple copies of the same attachment - but instead, stores a checksum, and whenever a message is stored with a duplicate attachment, the attachment is stored only once, and simply referenced by some kind of link to other emails. This would *drastically* reduce the storage requirements for our company - imagine a message with a 10MB attachment, sent to 40 of our users, sometimes more than once. Now multiply this by 3 times per day, for 5 years... Are there any plans for Dovecot to support this type of storage in the future? Does this require the use of an SQL DB for storing the message components? -- Best regards, Charles

9 14

[Dovecot] Platform change, considerations?
by Peter Lindgren 02 Jun '06

02 Jun '06

Hello! I am switching hardware platform for my dovecot 1.0beta3 installation. From Sun Sparc (SS4) to Intel i386. OS platform will only change from OpenBSD 3.7 to 3.9. From Dovecot 1.0beta3 to beta8. Is there anything special to consider, in terms of endianness or other incompatibilities? I plan on a fresh install (compile) on the new machine, migrate the settings manually (by hand), test the new server and then migrate old mail. Can I just mount the disks and copy, or should I go through NFS to be safe from potential endianness problems? Or perhaps copy with IMAP using my Thunderbird client? The live switch (the old server is in production) isn't that delicate, several hours downtime is OK. There's a backup server that can receive any mail I might loose during downtime, which can be copied though IMAP later. Thanks for any input! /Peter -- Peter Lindgren, dataingenjör E-post: peter "at" norrskenkonsult punkt com http://www.norrskenkonsult.com

2 1

[Dovecot] Outlook causes BIG dovecot index problem (beta 8, outlook 2003)
by Casey Allen Shobe 01 Jun '06

01 Jun '06

Hey all, Well, I typed up all the below, then managed to fix the problem before sending this to the list. I'll send it anyways, in case anybody else is affected by it (and because it does indicate a definite bug in Dovecot's experimental Kerberos support). The fix is to recompile without kerberos enabled, and to take gssapi out of the auth methods in the config (the latter alone may or may not be enough of a fix on it's own, I didn't try it without recompiling). I'm guessing that Outlook attempts to use Kerberos authentication by default or something and silently fails and uses other auth methods, and that any attempt to use Kerberos is in fact what hoses the server. However I have not done any further testing against beta8 with a Kerberos-enabled client such as KMail, so I leave this as an exercise for the next adventurer. I'm also uncertain as to why this problem does not manifest on our main servers, which also have Kerberos enabled (and Outlook 2003 clients). Or /had/ anyways, as I'm disabling Kerberos support as we speak as a preventative measure. Here's the problem description: I've been running dovecot happily for many months on our production mail servers hosting about 600 accounts, with no problems. People use every mail client under the sun - Apple Mail, Outlook 97|2000|XP|2003, Outlook Express, Mutt, Thunderbird, Mozilla Mail, Eudora, and other esoteric things with no problem. So today I installed a new mail server on a client site dedicated to their domain. The MTA is exim, running with almost the same configuration we use on our main servers. The dovecot.conf is 100% identical. No mail was moved by hand to the new mail server - to migrate we copied the mail setting up the old and new accounts in Thunderbird and dragging things over (just to rule out that possibility, we have also tested using brand new empty accounts to reproduce the issue). Everything is golden using Thunderbird - email is send, and shows up in the inbox immediately. Enter Outlook 2003 (SP1): It shows all folders and mail fine. It sends mail fine. Nothing shows up in the inbox. At this moment, Thunderbird also stops receiving new mail in the inbox. I check the server, and there's a mail sitting in the /new directory in the maildir. Not only that, but suddenly NONE of the accounts on the box show any new mail, exhibiting the same signs. I tried a variety of things, including 'sync', removing all the dovecot* index files in the maildir, and restarting dovecot (being sure to killall imap before bringing it back up). Sometimes, these steps would magically cause everything to work again, until I did a mail poll in Outlook which causes the problem to re-occur. Other times, these steps didn't seem to do anything. A couple times, for no apparent reason, without doing anything, mail would show up. Too hopeful, we sat around for 30 minutes sending more mail to an account and then just idling...nothing showed up. The hardware is good, we've compiled a full glibc and gcc just to ensure that there are no CPU/memory issues, and this box has a solid good history behind it in it's prior uses. Until Outlook is used, everything works fine. We do have the outlook-idle workaround enabled, and tried both with and without delay-newmail, which didn't make any difference. Cheers, -- Casey Allen Shobe | cshobe(a)seattleserver.com | 206-381-2800 SeattleServer.com, Inc. | http://www.seattleserver.com

3 3

[Dovecot] mbx to mbox conversion
by Marc Perkel 01 Jun '06

01 Jun '06

Here's a feature I'd like. If Dovecot opened an MBX format file that it would convert it to an MBOX format file. I have several files that I'm having a hard time converting. The one I got from Washington University WUIMAP is extremely flawed.

3 2

[Dovecot] Cannot remove Maildir folder
by Marcin Deranek 01 Jun '06

01 Jun '06

Hi, I have been using dovecot 1.0 beta 8 on Debian Sarge for a couple of days and I experienced some problems when removing folders.. As an IMAP client I use Thunderbird 1.5 and IMAP folders are on NFS. Here are the steps to re-produce the problem: 1. Run Thunderbird as usual 2. Create folder 3. Remove folder - In my case folder is not removed but moved to Trash (Thunderbird setting) 4. I go to Trash and remove it from there 5. Folder is removed but I get additional ..DOVECOT-TRASHED directory - next time it won't be possible to remove it Some more info: * Just before removal I run lsof to see which files are in use: bash# lsof /home/marcin ... imap 21360 marcin cwd DIR 0,15 344064 3307008 /home/marcin (filer:/vol/vol0/home/marcin) imap 21360 marcin 8u DIR 0,15 4096 4223651 /home/marcin/Maildir/.Trash.test/new (filer:/vol/vol0/home/marcin) imap 21360 marcin 9u DIR 0,15 4096 4223650 /home/marcin/Maildir/.Trash.test/cur (filer:/vol/vol0/home/marcin) imap 21360 marcin 11r REG 0,15 144 4223663 /home/marcin/Maildir/.Trash.test/dovecot.index (filer:/vol/vol0/home/marcin) imap 21360 marcin 12r REG 0,15 104 4223647 /home/marcin/Maildir/.Trash.test/dovecot.index.log (filer:/vol/vol0/home/marcin) imap 21360 marcin 13u REG 0,15 10272 4223657 /home/marcin/Maildir/.Trash.test/dovecot.index.cache (filer:/vol/vol0/home/marcin) ... There are more files in use but in this case I'm interested with PID 21360 which has opened Trash/test (the one which I'm going to remove) * Just after removal I see error message in Syslog: dovecot: IMAP(marcin): unlink_directory(/home/marcin/Maildir/..DOVECOT-TRASHED) failed: Device or resource busy Running lsof again gives the following: imap 21360 marcin cwd DIR 0,15 344064 3307008 /home/marcin (filer:/vol/vol0/home/marcin) imap 21360 marcin 11r REG 0,15 144 4223663 /home/marcin/Maildir/..DOVECOT-TRASHED/.nfs004072af0002cb1b (filer:/vol/vol0/home/marcin) imap 21360 marcin 12r REG 0,15 104 4223647 /home/marcin/Maildir/..DOVECOT-TRASHED/.nfs0040729f0002cb1a (filer:/vol/vol0/home/marcin) imap 21360 marcin 13u REG 0,15 10272 4223657 /home/marcin/Maildir/..DOVECOT-TRASHED/.nfs004072a90002cb1c (filer:/vol/vol0/home/marcin) Looking into some NFS docs we can read: "A client has a file opened. Another process on that client deletes the file. So the client NFS stack rather than deleting the file and potentially hurting the other process, it renames the file to .nfs<file_handle>." To me it looks like one imap process tries to delete .Trash.test directory (first rename and then unlink) whereas other imap process has still opened dovecot.* files. Any workaround/fix for that ? Regards, Marcin Deranek

2 5

[Dovecot] beta8 starts but no POP3 access
by Obantec Support 31 May '06

31 May '06

Hi Timo i see you just answered a posting less than 1 hour old! any chance you can comment on mine (29/05/06) repeated below and very urgent i get dovecot beta8 up. I just compiled stock beta8 on FC3 with ./configure make make install all looked ok and i changed my dovecot.conf to suit. start dovecot and i see it running May 29 08:18:00 Info: Dovecot v1.0.beta8 starting up POP3 to 1 account and May 29 08:18:06 Info: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=xx.xx.xx.xx rip=yy.yy.yy.yy resp=<hidden> May 29 08:18:06 Info: auth(default): client out: OK 1 user=obantec_com May 29 08:18:06 Info: auth(default): master in: REQUEST 1 19528 1 May 29 08:18:06 Info: auth(default): master out: USER 1 obantec_com system_user=obantec_com uid=501 gid=10001 home=/home/domain/domain17 May 29 08:18:06 Info: pop3-login: Login: user=<obantec_com>, method=PLAIN, rip=yy.yy.yy.yy, lip=xx.xx.xx.xx May 29 08:18:06 proteus2 dovecot: POP3(obantec_com): Corrupted index cache file /home/domain/domain17/mail/.imap/INBOX/dovecot.index.cache: indexid changed May 29 08:18:06 proteus2 dovecot: child 19536 (pop3) killed with signal 11 yy.yy.yy.yy & xx.xx.xx.xx are the ip's just masked out. OE just immediately say error , what is also worrying is the Corrupted index message even though i am using POP3. any ideas what to look for. I might add a test box running FC3 and the same .conf works! Mark -- Obantec Support www.obantec.net 0845 458 3121 WebHosting and Domains Nominet UK Member & IPStag Holder CentralNic Accredited Reseller

2 2

[Dovecot] dovecot.index.cache
by Fintec 31 May '06

31 May '06

Hopefully someone can explain/help me with the dovecot.index.cache file. I am wanting to move a dovecot server (v1.0b7) onto a new box running the same version (1.0b7) of dovecot. To do this I rsync'd the maildir files to the new server but when I logged into the new machine through IMAP dovecot reported: IMAP(username): file index-mail.c: line 105 (index_mail_get_fixed_field): assertion failed: (buffer_get_used_size(buf) == data_size) As soon as I delete the dovecot.index.cache file within the users mailbox this error goes away. Great, but that now I have some questions: 1) Does the dovecot.index.cache file store/cache server specific settings? If not why did it cause this error on the new box with exactly the same dovecot version and dovecot.conf? 2) What will happen if I delete the dovecot.index.cache file for all users? Will POP3 users have to re-download all their mail or will dovecot simply reference the dovecot.index file in the absence of the cache file? If I've missed something on the wiki explaining all this please point me in the right direction. Any help would be greatly appreciated. Gavin

3 4

[Dovecot] Apple Mail and too many open files?
by Alan Schmitt 31 May '06

31 May '06

Hello, For two days in a row, I've noticed that my dovecot server (hosted on a PowerMac running OS X) has stopped working, with a bunch of error messages in /var/log/mail.log like: May 24 07:31:10 top dovecot: pipe() failed: Too many open files To solve this, I have to kill -9 dovecot and the (many) imap processes running. The only client accessing the server is a machine running Apple Mail. I tried to increase the limit in the number of files (I did a "launchctl limit maxfiles 1024 unlimited", but the problem still happened. Is this a known problem? Should I allow still more files? Thanks, Alan -- Alan Schmitt <http://alan.petitepomme.net/> The hacker: someone who figured things out and made something cool happen. .O. ..O OOO

4 5

[Dovecot] problems with Debian Sarge
by Andrea Riela 31 May '06

31 May '06

Hi folks, I've updated my dovecot 0.99.14 with the last package (0.99.14-1sarge0), but it doesn't work. I've found that problem: http://comments.gmane.org/gmane.linux.debian.devel.bugs.general/80872 then I've removed that, and reinstalled first package (from /var/cache/apt/archives), and NOW it doesnt' work too :( When I start the daemon, I see in my logs: dovecot: May 31 12:40:28 Info: Dovecot starting up dovecot-auth: May 31 12:40:29 Fatal: Unknown userdb type 'vpopmail' dovecot: May 31 12:40:29 Error: Auth process died too early - shutting down dovecot: May 31 12:40:29 Error: child 15798 (auth) returned error 89 imap-login: May 31 12:40:29 Fatal: fd_send(-1) failed: No such file or directory imap-login: May 31 12:40:29 Fatal: fd_send(-1) failed: No such file or directory I don't understand. Any advice will be appreciated Best Regards Andrea my dovecot.conf is like that: ## Dovecot 1.0 configuration file <...> # Protocols we want to be serving: # imap imaps pop3 pop3s protocols = imaps <...> # IP or host address where to listen in for SSL connections. Defaults # to above non-SSL equilevants if not specified. imaps_listen = 192.168.17.10:993 #pop3s_listen = # Disable SSL/TLS support. ssl_disable = no # PEM encoded X.509 SSL/TLS certificate and private key. They're opened before # dropping root privileges, so keep the key file unreadable by anyone but # root. #ssl_cert_file = /etc/ssl/certs/dovecot.pem #ssl_key_file = /etc/ssl/private/dovecot.pem ssl_cert_file = /var/qmail/control/servercert.pem ssl_key_file = /var/qmail/control/servercert.pem <...> # Use this logfile instead of syslog(). /dev/stderr can be used if you want to # use stderr for logging (ONLY /dev/stderr - otherwise it is closed). log_path = /var/log/dovecot.log # For informational messages, use this logfile instead of the default info_log_path = /var/log/dovecot.log <...> ## ## IMAP login process ## login = imap # Executable location. #login_executable = /usr/lib/dovecot/imap-login # User to use for the login process. Create a completely new user for this, # and don't use it anywhere else. The user must also belong to a group where # only it has access, it's used to control access for authentication process. # Note that this user is NOT used to access mails. # http://wiki.dovecot.org/UserIds login_user = dovecot <...> ## ## Mail processes ## # Maximum number of running mail processes. When this limit is reached, # new users aren't allowed to log in. #max_mail_processes = 1024 # Show more verbose process titles (in ps). Currently shows user name and # IP address. Useful for seeing who are actually using the IMAP processes # (eg. shared mailboxes or if same uid is used for multiple accounts). verbose_proctitle = no # Show protocol level SSL errors. #verbose_ssl = no # Valid UID range for users, defaults to 500 and above. This is mostly # to make sure that users can't log in as daemons or other system users. # Note that denying root logins is hardcoded to dovecot binary and can't # be done even if first_valid_uid is set to 0. first_valid_uid = 89 last_valid_uid = 89 # Valid GID range for users, defaults to non-root/wheel. Users having # non-valid GID as primary group ID aren't allowed to log in. If user # belongs to supplementary groups with non-valid GIDs, those groups are # not set. first_valid_gid = 0 #last_valid_gid = 0 <...> # Default MAIL environment to use when it's not set. By leaving this empty # dovecot tries to do some automatic detection as described in # /usr/share/doc/dovecot-common/mail-storages.txt. There's a few special # variables you can use: # # %u - username # %n - user part in user@domain, same as %u if there's no domain # %d - domain part in user@domain, empty if user there's no domain # %h - home directory # # You can also limit a width of string by giving the number of max. characters # after the '%' character. For example %1u gives the first character of # username. Some examples: # # default_mail_env = maildir:/var/mail/%1u/%u/Maildir # default_mail_env = mbox:~/mail/:INBOX=/var/mail/%u # default_mail_env = mbox:/var/mail/%d/%n/:INDEX=/var/indexes/%d/%n # default_mail_env = maildir:~/Maildir <...> # Workarounds for various client bugs: # oe6-fetch-no-newmail: # Never send EXISTS/RECENT when replying to FETCH command. Outlook Express # seems to think they are FETCH replies and gives user "Message no longer # in server" error. Note that OE6 still breaks even with this workaround # if synchronization is set to "Headers Only". # outlook-idle: # Outlook and Outlook Express never abort IDLE command, so if no mail # arrives in half a hour, Dovecot closes the connection. This is still # fine, except Outlook doesn't connect back so you don't see if new mail # arrives. # outlook-pop3-no-nuls: # Outlook and Outlook Express hang if mails contain NUL characters. # This setting replaces them with 0x80 character. client_workarounds = oe6-fetch-no-newmail outlook-idle outlook-pop3-no-nuls <...> # Copy mail to another folders using hard links. This is much faster than # actually copying the file. This is problematic only if something modifies # the mail in one folder but doesn't want it modified in the others. I don't # know any MUA which would modify mail files directly. IMAP protocol also # requires that the mails don't change, so it would be problematic in any case. # If you care about performance, enable it. maildir_copy_with_hardlinks = yes <...> ## ## Authentication processes ## # An Authentication process is a child process used by Dovecot that # handles the authentication steps. The steps cover an authentication # mechanism (auth_mechanisms, how the client authenticates in the IMAP or # POP3 protocol), which password database should be queried (auth_passdb), # and which user database should be queried (auth_userdb, to obtain # UID, GID, and location of the user's mailbox/home directory). # # You can have multiple processes, though a typical configuration will # have only one. Each time "auth = xx" is seen, a new process # definition is started. The point of multiple processes is to be able # to set stricter permissions. (See auth_user below.) # # Just remember that only one Authentication process is asked for the # password, so you can't have different passwords accessible through # different process definitions (unless they have different # auth_mechanisms, and you're ok with having different password for # each mechanisms). # Authentication process name. auth = default # Specifies how the client authenticates in the IMAP protocol. # Space separated list of permitted authentication mechanisms: # anonymous plain digest-md5 cram-md5 # # anonymous - No authentication required. # plain - The password is sent as plain text. All IMAP/POP3 clients # support this, and the password can be encrypted by Dovecot to match # any of the encryption schemes used in password databases. # digest-md5 and cram-md5 - both encrypt the password so it is more # secure in transit, but are not well supported by clients, and # require that the password database use a matching encryption # scheme (or be in plaintext). # # See auth.txt for more details. # # If you are using SSL there is less benefit to digest-md5 and # cram-md5 as the communication is already encrypted. auth_mechanisms = plain # Space separated list of realms for SASL authentication mechanisms that need # them. You can leave it empty if you don't want to support multiple realms. # Many clients simply use the first one listed here, so keep the default realm # first. #auth_realms = # Default realm/domain to use if none was specified. This is used for both # SASL realms and appending @domain to username in plaintext logins. #auth_default_realm = # User database specifies where mails are located and what user/group IDs # own them. For single-UID configuration use "static". # http://wiki.dovecot.org/Authentication # http://wiki.dovecot.org/VirtualUsers # passwd: /etc/passwd or similiar, using getpwnam() # passwd-file <path>: passwd-like file with specified location # static uid=<uid> gid=<gid> home=<dir template>: static settings # vpopmail: vpopmail library # ldap <config path>: LDAP, see /etc/dovecot/dovecot-ldap.conf # mysql <config path>: a MySQL database, see /etc/dovecot/dovecot-mysql.conf # pgsql <config path>: a PostgreSQL database, see # /etc/dovecot/dovecot-pgsql.conf auth_userdb = vpopmail # Password database specifies only the passwords for users. # http://wiki.dovecot.org/Authentication # passwd: /etc/passwd or similiar, using getpwnam() # shadow: /etc/shadow or similiar, using getspnam() # pam [<service> | *]: PAM authentication # passwd-file <path>: passwd-like file with specified location # vpopmail: vpopmail authentication # ldap <config path>: LDAP, see /etc/dovecot/dovecot-ldap.conf # mysql <config path>: a MySQL database, see /etc/dovecot/dovecot-mysql.conf # pgsql <config path>: a PostgreSQL database, see # /etc/dovecot/dovecot-pgsql.conf auth_passdb = vpopmail #auth_executable = /usr/lib/dovecot/dovecot-auth # Set max. process size in megabytes. #auth_process_size = 256 # User to use for the process. This user needs access to only user and # password databases, nothing else. Only shadow and pam authentication # requires roots, so use something else if possible. Note that passwd # authentication with BSDs internally accesses shadow files, which also # requires roots. Note that this user is NOT used to access mails. # That user is specified by auth_userdb above. auth_user = root <...>

3 2

[Dovecot] about init.d script
by Andrea Riela 31 May '06

31 May '06

Hi folks, someone using Debian? I need the init script, if you please :) Thanks for your support Regards Andrea

3 2

[Dovecot] How to move a Maildir directory to a new server?
by Darrin Smart 31 May '06

31 May '06

Hi All, I'd like to ask about the best practice for moving a user's Maildir from one host to another. I moved a few user's home directories, and therefore their ~/Maildir folders. They have complained that since the move, they don't see all the messages in their INBOX for a while, but eventually they all appear again. They are using Thunderbird. I tried deleting the index files but it didn't help. Can anyone give advice? I have a soft link pointing from the old home directory to the new one, and both paths were on NFS. I can't see how dovecot could give different results, could it be related to message UID numbers? I did notice that when I moved my own home directory, Mail.app re-downloaded every mail when I opened each folder. Thunderbird doesn't seem to do this, perhaps its related. Thanks. Darrin

1 0

[Dovecot] public folders aren't public
by Mark Nienberg 30 May '06

30 May '06

I'm testing dovecot as a replacement for an aging UW-IMAP server. I have the basic IMAP setup working but I'm stuck on public folders (which my users are addicted to). I set up public folders generally a described in the wiki. The problem is that when a user creates a new public folder, the folder is owned by the user with permissions drwx------ which prevents other users from viewing the contents. Here is part of dovecot.conf: namespace public { separator = / prefix = Public/ location = maildir:/home/public/Maildir } and here is the Maildir directory [root@tesla Maildir]# ls -la total 70k drwxrwxrwx 7 dovecot Everyone 4.1k May 12 14:33 ./ drwxrwxrwx 3 root root 4.1k May 12 13:43 ../ drwxrwS--- 2 dovecot Everyone 4.1k May 12 13:48 cur/ drwx------ 5 david Everyone 4.1k May 12 14:33 .davi/ -rw-rw-r-- 1 dovecot Everyone 0 May 12 13:46 dovecot-shared drwxrwS--- 2 dovecot Everyone 4.1k May 12 13:48 new/ -rw------- 1 mark Everyone 6 May 12 14:07 subscriptions drwxrwS--- 2 dovecot Everyone 4.1k May 12 13:48 tmp/ drwx------ 5 mark Everyone 4.1k May 12 14:30 .tryit/ The directories .davi/ and .tryit/ were created by users david and mark respectively. These are real system users. They are both members of the Everyone group. Any suggestions appreciated. Thanks, Mark

2 3

[Dovecot] IMAP server <defunct> (beta 7)
by Graham Briggs 30 May '06

30 May '06

Hi, We've been using a 0.99 version of Dovecot for nearly a year without problems, but due to a server death I had to reinstall with the same configuration as before, but more recent versions of the software, on different hardware. This time though, every few days IMAP login and access fails, and the output of ps ax shows entries such as [imap-login] <defunct> and [imap] <defunct>, with the lovely brain-eating Zombie status. There is nothing in the log file that suggests an issue. We're using dovecot with authentication/etc being done against a Postgresql database. I searched online for a solution, but the nearest problem said it was a problem with PAM, which we are not using with Dovecot. We're using Maildir as the message storage format. Does anyone have any suggestions as to why this might be occurring? If it will help to see the dovecot configuration files then I can provide them. The platform is Debian 64-bit running on a dual-core Opteron system. Yes, it isn't Debian-stable! Graham

8 13

[Dovecot] Maildirquota
by Rodolfo Gonzalez Gonzalez 30 May '06

30 May '06

Hi, I'd like to use dovecot+postfix (with Maildir) for several virtual email servers, but one requirement is quota support. I'm aware about the lack of maildirquota support in dovecot, and I found a patch in the "unofficial patches" section which is said to provide maildirquota support to dovecot. How stable is this patch?, is it usable with dovecot 1.0b2?. And, is there any plan to support maildirquota natively in the near future?, I'd like to replace courier-imap in my setup. Thanks. Rodolfo.

7 13

[Dovecot] separate pop and imap server keys?
by Noah 30 May '06

30 May '06

Hi there, is there any way to get the imap and pop client to use separate keys? My Thunderbird client complains when I am popping from popss.domain.com that the certificate is owned by imapss.domain.com Any clues here? Cheers, Noah

3 3

[Dovecot] Problems with subfolders in Thunderbird
by Ian Thurlbeck 30 May '06

30 May '06

Dear All Server: dovecot-1.0.beta8 (compiled from source) centos 4.3 Client: thunderbird 1.0.8 on Fedora Core 4 on port 993 Using maildir Normally (with the current UW-IMAP) I can create a folder which may contain only messages or only folders. If I create a folder which will contain only folders, it is listed in thunderbird in light-grey italics. Subsequently I can create message folders within this folder. When doing the same thing using dovecot as the server, the same options are available, but any attempt to create a folder containing only folders is silently ignored and nothing happens (nothing is created anywhere on the server filesystem). Is this a known problem ? I do not want to use the setting which allows you to create folders which may contain both messages and folders. Thanks Ian -- Ian Thurlbeck http://www.stams.strath.ac.uk/ Statistics and Modelling Science, University of Strathclyde Livingstone Tower, 26 Richmond Street, Glasgow, UK, G1 1XH Tel: +44 (0)141 548 3667 Fax: +44 (0)141 552 2079

3 3

[Dovecot] Hint for Fatal: sigaction(SIGRTMIN) failed: Invalid argument
by Breno Jacinto Duarte da Costa 30 May '06

30 May '06

Hello, Search google I've found a thread ("errors in logfile") discussing a similar problem to mine. It`s something related to the #define IOLOOP_NOTIFY_DNOTIFY in config.h, but disbling it resulted in errors in compilation. I'm really running out of answers for this one... if anyone could give a hint, it'd be of great help. cheers -- .''`. -- Breno Jacinto : :´` : -- breno /at/ freeunix dot com dot br : ' ' : -- 88AE 3F43 7110 57F6 A206 `. `'` -- D116 02CA 02F4 803D 4294 `-- -- Debian GNU/Linux - The Universal OS

2 1

[Dovecot] imap proxy and passwd-like passdb/userdb
by HenkJan Wolthuis 30 May '06

30 May '06

Hi, I'm testing/using dovecot as imap proxy, passdb/userdb as passwd-like-file. It seems to function as expected (1). This setup is described in the wiki in AuthSpecials. But I also noticed in the documentation (ImapProxy / FeatLoginProxy pages) that the proxy feature only works with a sql passdb. Maybe I did something strange, but passwd-like-passdb does work..... So I have some questions: Is the documentation wrong? Is the documentation right? ;-) Are there reasons not to use dovecot this way (other than scalability / maintainability)? Are there bugs I've not yet seen? (am I the only one using dovecot this way?) thanks-in-advance, HenkJan 1) i'm proxying to a courier backend, had to modify dovecots capability_string, because the emailclient gets the capabilities from dovecot, while it uses the proxied server (=courier). Had some strange errors with append, as courier doesn't support Literal+, modifying dovecot so that it stopped advertising Literal+ solved the problem....

2 1

[Dovecot] Out of Quota Causing "BYE Too many invalid IMAP commands."
by Timothy White 30 May '06

30 May '06

Doing some testing in Squirrelmail, with quotas, and basically opening a message, and saving it as a draft, over and over until I run at of quota. This is what I get when I try and save a message that is larger than the size left May 30 19:36:36 mafeking dovecot: IMAP(joeblogs): Disconnected: Too many invalid IMAP commands. and in SM ERROR: IMAP server closed the connection. Server responded:* BYE Too many invalid IMAP commands. I would expect something a little more user friendly in that situation. I haven't worked out how to debug the IMAP session in SM, or how to run an IMAP session with logging. I may get around to setting up debug in dovecot to see what happens. I'm running dovecot beta8. Any suggestions as to how to make it 'die' nicer? Thanks Tim -- Linux Counter user #273956

4 5

[Dovecot] Leave copy on server problem.
by Dario Ale 30 May '06

30 May '06

Hello, I am using Dovecot 0.99.14-r1 with mbox format. I have a problem with the option "Leave copy on server", the messages are duplicated. I tried many options but I can´t find the solution. The last test was: I modified in src/pop3/commands.c (function list_uids()) the folowing things: "... client_send_line(client, message == 0 ? "%u %u.%u" : "+OK %u %u.%u", mail->seq, client->uidvalidity, mail->uid); ..." by "... client_send_line(client, message == 0 ? "%u %08x%08x" : "+OK %u %08x%08x", mail->seq, mail->uid, client->uidvalidity); ..." then, I removed all index files so this were regenerated, I deleted popstate.dat, after with Mozilla Thunderbird I got the messages. popstate.dat was regenerated too, with the following information: this is the last lines: "... k 000000b14062ffdb 1148496134 k 000000b24062ffdb 1148496135 " After I send a new email and get messages, the last lines in popstate.dat was: "... k 000000b14062ffdb 1148496134 <-- no duplicated k 000000b34062ffdb 1148496827 <-- duplicated of k "000000b24062ffdb 1148496135" k 000000b44062ffdb 1148496828 <-- new " the new messaged arrived and the previous message was duplicated. This problem happens with OutLook Express too. Please, somebody can help me?? Thanks very much. pd: sorry by my english. -- Dario Ale (dario.a en telpin.com.ar)

3 2

[Dovecot] pop3-login: Internal login failure
by Pedro Vieira 30 May '06

30 May '06

Hi all... I'm running Dovecot 0.99.14 on Debian Sarge and I'm now trying to configure a mysql-based authentication. I made all the nessary setup accordinf to dovecot.conf and dovecot-mysql-conf but when i try to login I get the follwing error: pop3-login: Internal login failure: username(a)mydomain.tld [xxx.xxx.xxx.xxx] Any ideias on what may be happening? Thanks in advance, Pedro ---------------------------------------------------------------------------- "Very funny, Scotty. Now beam down my clothes." "Change is inevitable, except from a vending machine."

2 1

[Dovecot] Migration problems from Courier-Imap
by Mattia Martinello 30 May '06

30 May '06

Hi, I'm migrating from Courier-Imap to Dovecot-Imapd and I have some problems.. I don't want to change the IMAP folders, so I wish to have Dovecot's compatibility with Courier's IMAP folders. In the Dovecot configuration I configured this: namespace private { separator = . prefix = INBOX. inbox = yes } Dovecot correctly shows me the INBOX folder, but doesn't show me the subfolders anymore... What can I do to solve this problem? Thank you very much and goodbye. Mattia.

2 1

[Dovecot] Effect of "login_process_per_connection = no"?
by Pete Slagle 29 May '06

29 May '06

Using dovecot version v1.0.beta8 on FreeBSD 6.1_RELEASE with login_process_per_connection = no in the dovecot.conf file, I still get a new imap process for each IMAP login. That is, if a single user logs in five times, five imap processes are created. The difference appears to be that with a "yes" setting each user login causes a new copy of the imap-login processes to be forked, which then creates the imap process for the connection and exits. With a "no" setting, one of the existing imap-login processes creates the imap process directly (and does not exit). I am understanding the effect of this control setting correctly? Are there other actions or implications? Pete

3 2

[Dovecot] Security hole with mboxes
by Timo Sirainen 29 May '06

29 May '06

Unfortunately we have our first problem that could really be counted as security hole. Giving "1 LIST .. *" IMAP command allows the user to see all files and directories under the mbox root's parent directory, so potentially you could see other users' mailbox names. Nothing can be done with them though, so it's not possible to read or modify them. There are also some other less than wanted behaviors that can be done with "." and ".." directories, such as "DELETE .." command can give errors. Also with maildir if you store indexes in different directory than mails this command can be used to delete the index files. Anyway I don't see any of these as security issues. Hopefully most people have their mail directory under user's home directory, so this would only list the home directory's contents. But if you do have users' mails stored in eg. under /var/mail/%u/ directory, giving that command would list everything under /var/mail, assuming that the process has permissions to do that (that's why you should be using different UIDs for users if possible). This affects 1.0 beta and 1.0 stable releases, but not 0.99.x. Fix is in http://dovecot.org/list/dovecot-cvs/2006-May/005563.html I'll also release 1.0 beta8 now. Thanks for Bill Boebel for noticing "DELETE .." doing weird things with maildir.

3 2

[Dovecot] Subfolder in Maildir
by Bart Braem 29 May '06

29 May '06

Hello, We have installed a brand new Dovecot because it seems very interesting as an IMAP server. We created a mailbox for a test user and we succeeded in copying some mails into it. However making subfolders does not work. The only folders we can create are in the root, next to the INBOX that is. We thought Maildir does support subfolders (as opposed to mbox), are we wrong here? Our Dovecot version is 1.0.b8_1. Bart

3 3

[Dovecot] Server statistics
by Dean Manners 29 May '06

29 May '06

Hey guys, Is there a way to extract the concurrent connectons to a dovecot servers? Got a fairly busy installation that Id like to monitor/graph concurrent connections for. __________________________________________ Dean Manners

4 3

[Dovecot] beta8 starts but no POP3 access
by Obantec Support 29 May '06

29 May '06

Hi I just compiled stock beta8 on FC3 with ./configure make make install all looked ok and i changed my dovecot.conf to suit. start dovecot and i see it running May 29 08:18:00 Info: Dovecot v1.0.beta8 starting up POP3 to 1 account and May 29 08:18:06 Info: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=xx.xx.xx.xx rip=yy.yy.yy.yy resp=<hidden> May 29 08:18:06 Info: auth(default): client out: OK 1 user=obantec_com May 29 08:18:06 Info: auth(default): master in: REQUEST 1 19528 1 May 29 08:18:06 Info: auth(default): master out: USER 1 obantec_com system_user=obantec_com uid=501 gid=10001 home=/home/domain/domain17 May 29 08:18:06 Info: pop3-login: Login: user=<obantec_com>, method=PLAIN, rip=yy.yy.yy.yy, lip=xx.xx.xx.xx May 29 08:18:06 proteus2 dovecot: POP3(obantec_com): Corrupted index cache file /home/domain/domain17/mail/.imap/INBOX/dovecot.index.cache: indexid changed May 29 08:18:06 proteus2 dovecot: child 19536 (pop3) killed with signal 11 yy.yy.yy.yy & xx.xx.xx.xx are the ip's just masked out. OE just immediately say error , what is also worrying is the Corrupted index message even though i am using POP3. any ideas what to look for. I might add a test box running FC3 and the same .conf works! Mark -- Obantec Support www.obantec.net 0845 458 3121 WebHosting and Domains Nominet UK Member & IPStag Holder CentralNic Accredited Reseller

1 0