- dovecot - dovecot.org

dovecot, virtiofs, fchown, invalid argument
by Кирилл Шигапов 29 Nov '24

29 Nov '24

Hello! Dovecot version: 2.3.16 (7e2e900c1a) dovecon -n deliver_log_format = from=%{from}, envelope_sender=%{from_envelope}, > subject=%{subject}, msgid=%m, size=%{size}, > delivery_time=%{delivery_time}ms, %$ > dict { > acl = mysql:/etc/dovecot/dovecot-share-folder.conf > lastlogin = mysql:/etc/dovecot/dovecot-last-login.conf > quotadict = mysql:/etc/dovecot/dovecot-used-quota.conf > } > first_valid_uid = 2000 > last_valid_uid = 2000 > listen = * [::] > lock_method = dotlock > login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c > %k session=<%{session}> > mail_gid = 2000 > mail_location = maildir:%Lh/Maildir/:INDEX=%Lh/Maildir/ > mail_plugins = quota mailbox_alias acl mail_log notify > mail_uid = 2000 > managesieve_notify_capability = mailto > managesieve_sieve_capability = fileinto reject envelope encoded-character > vacation subaddress comparator-i;ascii-numeric relational regex imap4flags > copy include variables body enotify environment mailbox date index ihave > duplicate mime foreverypart extracttext > namespace { > inbox = yes > location = > mailbox Archive { > auto = no > special_use = \Archive > } > mailbox Archives { > auto = no > special_use = \Archive > } > mailbox "Deleted Messages" { > auto = no > special_use = \Trash > } > mailbox Drafts { > auto = subscribe > special_use = \Drafts > } > mailbox Junk { > auto = subscribe > special_use = \Junk > } > mailbox "Junk E-mail" { > auto = no > special_use = \Junk > } > mailbox Sent { > auto = subscribe > special_use = \Sent > } > mailbox "Sent Items" { > auto = no > special_use = \Sent > } > mailbox "Sent Messages" { > auto = no > special_use = \Sent > } > mailbox Spam { > auto = no > special_use = \Junk > } > mailbox Trash { > auto = subscribe > special_use = \Trash > } > prefix = > separator = / > type = private > } > namespace { > list = children > location = maildir:%%Lh/Maildir/:INDEX=%%Lh/Maildir/Shared/%%Ld/%%Ln > prefix = Shared/%%u/ > separator = / > subscriptions = yes > type = shared > } > passdb { > args = /etc/dovecot/dovecot-mysql.conf > driver = sql > } > passdb { > args = /etc/dovecot/dovecot-master-users > driver = passwd-file > master = yes > } > plugin { > acl = vfile > acl_shared_dict = proxy::acl > last_login_dict = proxy::lastlogin > last_login_key = # hidden, use -P to show it > mail_log_events = delete undelete expunge copy mailbox_create > mailbox_delete mailbox_rename > mail_log_fields = uid box msgid size from subject flags > mailbox_alias_new = Sent Messages > mailbox_alias_new2 = Sent Items > mailbox_alias_old = Sent > mailbox_alias_old2 = Sent > quota = dict:user::proxy::quotadict > quota_grace = 10%% > quota_status_nouser = DUNNO > quota_status_overquota = 552 5.2.2 Mailbox is full > quota_status_success = DUNNO > quota_warning = storage=100%% quota-warning 100 %u > quota_warning2 = storage=95%% quota-warning 95 %u > quota_warning3 = storage=90%% quota-warning 90 %u > quota_warning4 = storage=85%% quota-warning 85 %u > sieve = ~/sieve/dovecot.sieve > sieve_before = /var/vmail/sieve/dovecot.sieve > sieve_dir = ~/sieve > sieve_global_dir = /var/vmail/sieve > sieve_max_redirects = 30 > sieve_vacation_send_from_recipient = yes > } > protocols = pop3 imap sieve lmtp > service auth { > unix_listener /var/spool/postfix/private/dovecot-auth { > group = postfix > mode = 0666 > user = postfix > } > unix_listener auth-master { > group = vmail > mode = 0666 > user = vmail > } > unix_listener auth-userdb { > group = vmail > mode = 0660 > user = vmail > } > } > service decode2text { > executable = script /usr/libexec/dovecot/decode2text.sh > unix_listener decode2text { > mode = 0666 > } > user = dovecot > } > service dict { > unix_listener dict { > group = vmail > mode = 0660 > user = vmail > } > } > service imap-login { > process_limit = 500 > service_count = 1 > } > service indexer-worker { > process_limit = 0 > vsz_limit = 2 G > } > service lmtp { > executable = lmtp -L > inet_listener lmtp { > address = 127.0.0.1 > port = 24 > } > process_min_avail = 5 > unix_listener /var/spool/postfix/private/dovecot-lmtp { > group = postfix > mode = 0600 > user = postfix > } > user = vmail > } > service managesieve-login { > inet_listener sieve { > address = 127.0.0.1 > port = 4190 > } > } > service pop3-login { > service_count = 1 > } > service quota-status { > client_limit = 1 > executable = quota-status -p postfix > inet_listener { > address = 127.0.0.1 > port = 12340 > } > } > service quota-warning { > executable = script /usr/local/bin/dovecot-quota-warning.sh > unix_listener quota-warning { > group = vmail > mode = 0660 > user = vmail > } > } > service stats { > fifo_listener stats-mail { > group = vmail > mode = 0664 > user = vmail > } > inet_listener { > address = 127.0.0.1 > port = 24242 > } > unix_listener stats-writer { > group = vmail > mode = 0660 > user = vmail > } > } > ssl = required > ssl_cert = </etc/pki/tls/certs/iRedMail.crt > ssl_cipher_list = EECDH+CHACHA20:EECDH+AESGCM:EDH+AESGCM:AES256+EECDH > ssl_dh = # hidden, use -P to show it > ssl_key = # hidden, use -P to show it > ssl_prefer_server_ciphers = yes > syslog_facility = local5 > userdb { > args = /etc/dovecot/dovecot-mysql.conf > driver = sql > } > protocol lda { > lda_mailbox_autocreate = yes > lda_mailbox_autosubscribe = yes > mail_plugins = quota mailbox_alias acl mail_log notify sieve last_login > } > protocol lmtp { > lmtp_save_to_detail_mailbox = yes > mail_plugins = quota mailbox_alias acl mail_log notify sieve last_login > recipient_delimiter = + > } > protocol imap { > imap_client_workarounds = tb-extra-mailbox-sep > mail_max_userip_connections = 30 > mail_plugins = quota mailbox_alias acl mail_log notify imap_quota > imap_acl last_login > } > protocol pop3 { > mail_max_userip_connections = 30 > mail_plugins = quota mailbox_alias acl mail_log notify last_login > pop3_client_workarounds = outlook-no-nuls oe-ns-eoh > pop3_uidl_format = %08Xu%08Xv > } We are using virtiofs share mounted to /var/vmail When dovecot tries to make a directory structure, it fails with error - fchown: Invalid argument strace doveadm mailbox create -u testuser(a)testdomain.com Trash ... mkdir("/var/vmail/vmail1/ testdomain.com/t/e/s/testuser-2024.11.25.12.58.50//Maildir/.Trash", 0700) = 0 umask(077) = 000 openat(AT_FDCWD, "/var/vmail/vmail1/ testdomain.com/t/e/s/testuser-2024.11.25.12.58.50//Maildir/.Trash", O_RDONLY) = 11 fchown(11, -1, -1) = -1 EINVAL (Invalid argument) close(11) = 0 rmdir("/var/vmail/vmail1/ testdomain.com/t/e/s/testuser-2024.11.25.12.58.50//Maildir/.Trash") = 0 ... So there is no permission issue, directory successfully created. It seems that virtiofs not allowing uid=-1 and gid=-1 I write a small C program for testing. And when using fchown($FileDescriptor, 2000, 2000) there is no error. I can't find a way to tell dovecot to use uid & gid 2000 when he tries to do fchown. If I create a directory structure manually, everything works well. Maybe we can make some parameter in config, telling that we are using virtiofs and skip EINVAL when doing fchown...

3 3

Auth timeout after reload
by rudolf＠padaru.de 29 Nov '24

29 Nov '24

Hello everyone, I have a Dovecot running and can often observe that the auth process goes wrong if a reload occurs at the moment of authentication. I have installed dovecot 2.3.21.1 on ubuntu 20. Whether the error also occurs under other versions, I cannot say at the moment. I have included three examples from the mail log: ## start logs ## # 1 # Nov 27 11:28:18 <myServer> dovecot[946292]: auth: Debug: sql(<myUser>,<myIP>,<I1eibOInIOW5zIKi>): Finished passdb lookup Nov 27 11:28:18 <myServer> dovecot[946292]: auth: Debug: auth(<myUser>,<myIP>,<I1eibOInIOW5zIKi>): Auth request finished Nov 27 11:30:49 <myServer> dovecot[946292]: auth: Error: plain(<myUser>,<myIP>,<I1eibOInIOW5zIKi>): Request 946296.13397 timed out after 151 secs, state=3 Nov 27 11:28:18 <myServer> systemd[1]: Reloading Dovecot IMAP/POP3 email server. # 2 # Nov 27 09:05:08 <myServer> dovecot[2940195]: auth: Debug: auth(<myUser><myIP>,<nK2cbOAnaMGiIdFS>): Auth request finished Nov 27 09:07:38 <myServer> dovecot[2940195]: auth: Error: plain(<myUser>,<myIP>,<nK2cbOAnaMGiIdFS>): Request 2940206.363 timed out after 150 secs, state=3 Nov 27 09:05:07 <myServer> systemd[1]: Reloading Dovecot IMAP/POP3 email server. # 3 # Nov 27 10:02:18 <myServer> dovecot[3736041]: auth: Debug: auth(<myUser><myIP>,<1v4HOeEnWtG5zIKi>): Auth request finished Nov 27 10:04:48 <myServer> dovecot[3736041]: auth: Error: plain(<myUser>,<myIP>,<1v4HOeEnWtG5zIKi>): Request 3736048.4962 timed out after 150 secs, state=3 Nov 27 10:02:18 <myServer> systemd[1]: Reloading Dovecot IMAP/POP3 email server. ## end logs ## You can clearly see that the sql query works, but then the auth-worker seems to hang. I suspect that the auth-worker sends the request to the DB, receives the response and is then killed before it can log in the user via imap. This then leads to some users not being able to log in for a long time. I write many configs on the server automatically, then I always run a reload so that the changed config is accepted. Is this a bug or do I have to change something in my setup? [Logo]<https://www.padaru.de/> Pascal Rudolf | Geschäftsführer PADARU-IT | Oppacher Straße 40 | 02689 Wehrsdorf @: rudolf(a)padaru.de | www: padaru.de<https://padaru.de/> mobil: +49 (0) 17 772 595 32

1 0

Error: Mailbox INBOX: open, missing +r perm
by drinaldi＠trustitalia.it 29 Nov '24

29 Nov '24

Hi Guys, Since few weeks, our email server based on Dovecot and Postfix has been returning this error with some users without any changes made to the configuration: mailserver dovecot: imap(user)<1115049><sEfO8d8nm/1dIlwX>: Error: Mailbox INBOX: open(/mnt/mail-storage/user/Maildir/cur/1732656368.M835097P860226.mailserver,S=43548,W=44150:2,) failed: Permission denied (euid=501(vmail) egid=501(vmail) missing +r perm: /mnt/mail-storage/user/Maildir/cur/1732656368.M835097P860226.mailserver,S=43548,W=44150:2, stat(/mnt/mail-storage/user/Maildir/cur/1732656368.M835097P860226.mailserver,S=43548,W=44150:2,) failed: Permission denied) mailserver dovecot: imap(user)<1115049><sEfO8d8nm/1dIlwX>: Disconnected: FETCH failed: Mailbox INBOX: open(/mnt/mail-storage/user/Maildir/cur/1732656368.M835097P860226.mailserver,S=43548,W=44150:2,) failed: Permission denied (euid=501(vmail) egid=501(vmail) missing +r perm: /mnt/mail-storage/user/Maildir/cur/1732656368.M835097P860226.mailserver,S=43548,W=44150:2, stat(/mnt/mail-storage/user/Maildir/cur/1732656368.M835097P860226.mailserver,S=43548,W=44150:2,) failed: Permission denied) in=429 out=24093 deleted=0 expunged=0 trashed=0 hdr_count=2 hdr_bytes=6437 body_count=0 body_bytes=0 This is the stat of the file after reboot the server: stat 1732656368.M835097P860226.ganimede,S=43548,W=44150:2, File: 1732656368.M835097P860226.ganimede,S=43548,W=44150:2, Size: 43548 Blocks: 88 IO Block: 262144 regular file Device: 0,41 Inode: 2155401218 Links: 1 Access: (0600/-rw-------) Uid: ( 501/ vmail) Gid: ( 501/ vmail) Access: 2024-11-26 22:26:09.925862755 +0100 Modify: 2024-11-26 22:26:10.005861434 +0100 Change: 2024-11-26 22:26:11.175842122 +0100 Birth: - The strange thing is that the issue seems to this impact only some Users and looks like the error disappear after restarting the server, and reappear few time later. Dovecot -n: # 2.3.19.1 (9b53102964): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.19 (4eae2f79) # OS: Linux 6.1.0-26-amd64 x86_64 Debian 12.7 auth_mechanisms = plain login default_vsz_limit = 1 G doveadm_password = # hidden, use -P to show it doveadm_port = 12345 mail_gid = 501 mail_location = maildir:~/Maildir:INDEX=/var/indexes/%n mail_max_userip_connections = 50 mail_plugins = " notify replication zlib" mail_privileged_group = vmail mail_uid = 501 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vacation-seconds imapflags notify namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox "Posta inviata" { special_use = \Sent } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { mail_replica = tcp:192.168.3.250 sieve = file:/var/www/html/ooo/%n;active=/var/www/html/ooo/%n/script sieve_default = /var/www/html/ooo/default.sieve sieve_duplicate_default_period = 14d sieve_duplicate_max_period = 7d sieve_extensions = +duplicate +notify +imapflags +vacation-seconds sieve_user_log = /var/www/html/ooo/%n/sieve_error.log } protocols = " imap lmtp sieve pop3" replication_max_conns = 2 service aggregator { fifo_listener replication-notify-fifo { user = vmail } unix_listener replication-notify { user = vmail } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = vmail mode = 0660 user = vmail } } service doveadm { inet_listener { port = 12345 } } service imap-login { process_limit = 200 } service imap { vsz_limit = 1 G } service lmtp { process_min_avail = 5 unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } user = vmail } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 10 service_count = 1 } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 user = vmail } } service stats { unix_listener stats-reader { group = vmail mode = 0666 user = vmail } unix_listener stats-writer { group = vmail mode = 0666 user = vmail } } ssl_cert = </etc/dovecot/private/chain-star_trustitalia_it.pem ssl_cipher_list = ALL:!LOW:!aNULL:!eNULL:!SSLv2:!RC4:!MD5:!DES:!EXP:!SEED:!IDEA:!3DES ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } protocol lmtp { mail_plugins = " notify replication zlib sieve quota zlib" postmaster_address = postmaster(a)trustitalia.it } protocol lda { auth_socket_path = /var/run/dovecot/auth-master hostname = ganimede.trustitalia.it mail_plugins = " notify replication zlib sieve quota zlib" } protocol imap { mail_plugins = " notify replication zlib zlib" } protocol sieve { mail_max_userip_connections = 10 managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 64 k } protocol pop3 { mail_plugins = " notify replication zlib zlib" } Thanks

2 2

"INBOX can't be deleted" error when syncing from imapc
by Andy Balholm 28 Nov '24

28 Nov '24

I'm syncing mail from an IMAP server to local Maildirs with `doveadm backup -R`, and I sometimes get an error the second time I sync an account: > Mailbox INBOX sync: mailbox_delete failed: INBOX can't be deleted. I've figured out that the sync completes the first time without an error, but the UIDVALIDITY of the INBOX Maildir doesn't match the UIDVALIDITY on the IMAP server. Then the second time doveadm detects the mismatch and wants to delete the INBOX, but it can't because Maildir INBOXes can't be deleted. So I think the root cause is that the INBOX is being created with the wrong UIDVALIDITY in the first place. It only seems to happen when there are no messages in the INBOX on the server at the time the Maildir is created, but it doesn't seem to happen all the time. Is there anything I can do to make the sync job run smoothly? Andy

1 0

Director to keep redirecting users to the same server even it is down
by abdelhaq.jalboush＠gmail.com 28 Nov '24

28 Nov '24

Hello, why the director always proxying IMAP connections to the same backend even if it is down? Also the director is showing the node as up although I have stopped the dovecot service on it: doveadm director status mail server ip tag vhosts state state changed users Node1 100 up - 2 Node2 100 up - 3 on the director here is: doveconf -n # 2.3.21 (47349e2482): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.21 (f6cd4b8e) # OS: Linux 6.8.0-1018-aws x86_64 Ubuntu 24.04.1 LTS # Hostname: auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_socket_path = director-userdb auth_verbose = yes director_mail_servers = Node1 Node2 director_servers = dir1 dir2 info_log_path = /var/log/dovecot.log listen = * lmtp_proxy = yes log_path = /var/log/dovecot.log mail_gid = vmail mail_privileged_group = mail mail_uid = vmail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-openldap-proxy.conf.ext default_fields = proxy=y driver = ldap } protocols = imap pop3 lmtp service auth { inet_listener { port = 12345 } } service director { fifo_listener login/proxy-notify { mode = 0600 user = $default_login_user } inet_listener { port = 9090 } unix_listener director-admin { mode = 0600 } unix_listener director-userdb { mode = 0600 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director inet_listener imap { port = 0 } inet_listener imaps { port = 993 ssl = yes } } service ipc { unix_listener ipc { user = dovecot } } service lmtp { inet_listener lmtp { port = 24 } } service pop3-login { executable = pop3-login director inet_listener pop3 { port = 0 } inet_listener pop3s { port = 995 ssl = yes } } service submission-login { inet_listener submission { port = 587 } } ssl_cert = </etc/dovecot/ssl/fullchain.pem ssl_client_ca_dir = /etc/ssl/certs ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it protocol lmtp { auth_socket_path = director-userdb }

3 2

bug? dsync extremely much slower on forward than reverse direction
by Bjørnar Ness 27 Nov '24

27 Nov '24

I have been experimenting with dsync lately, and to my surprise I found that dsync in forward direction is extremely slow compared for reverse (-R) direction for the exact same data, disk caches flushed both times. I have created a docker-compose setup to prove my findings. Am I missing something here, or is this a bug? link to tests: https://github.com/bjne/dovecot-dsync-benchmark -- Bj(/)rnar

2 2

lda_original_recipient_header for LMTP?
by dovecot＠ptld.com 26 Nov '24

26 Nov '24

How to get the X-Original-To: header added for LMTP? I tried adding: lda_original_recipient_header = X-Original-To But that didn't add the header for mail over LMTP. I couldn't find anything else in the docs.

2 1

Problem with Quota notification script
by Deeztek Support 25 Nov '24

25 Nov '24

Hello, Trying to get the following quota notification script to work with Dovecot 2.3.21.1: #!/bin/sh PERCENT=$1 USERNAME=$2 cat << EOF | /usr/lib/dovecot/dovecot-lda -d $USER -o "plugin/quota=count:User quota::noenforcing" From: postmaster(a)deeztek.com Subject: quota warning Your mailbox is now $PERCENT% full. EOF However running it produces the following error: lda: Fatal: Unknown argument: plugin/quota=count:User quota::noenforcing Below are my dovecot.conf settings: # Pigeonhole version 0.5.21.1 (49005e73) # OS: Linux 5.4.0-192-generic x86_64 Debian 11.10 # Hostname: be9f67c4e17e debug_log_path = /dev/stdout dict { quotadict = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } first_valid_uid = 1000 info_log_path = /dev/stdout last_valid_uid = 1000 listen = * log_path = /dev/stdout mail_debug = yes mail_gid = 1000 mail_home = /srv/mail/%d/%n mail_location = maildir:~/ mail_plugins = " quota zlib mail_crypt" mail_privileged_group = mail mail_uid = 1000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace { inbox = yes location = mailbox Archive { auto = subscribe special_use = \Archive } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { mail_crypt_curve = prime256v1 mail_crypt_global_private_key = # hidden, use -P to show it mail_crypt_global_public_key = # hidden, use -P to show it mail_crypt_save_version = 2 quota = dict:User quota::proxy::quotadict quota_rule2 = Trash:storage=+10%% quota_warning = storage=100%% quota-warning +100 %u quota_warning2 = storage=95%% quota-warning +95 %u quota_warning3 = storage=80%% quota-warning +80 %u quota_warning4 = -storage=100%% quota-warning -100 %u sieve = /srv/mail/sieve/%u.sieve zlib_save = lz4 } protocols = imap pop3 submission sieve lmtp service auth { inet_listener auth-inet { port = 9587 } } service dict { unix_listener dict { group = vmail mode = 0660 user = vmail } user = root } service imap-login { client_limit = 1000 process_min_avail = 1 service_count = 0 } service lmtp { inet_listener { port = 24 } } service managesieve-login { client_limit = 1000 process_min_avail = 1 service_count = 0 } service pop3-login { client_limit = 1000 process_min_avail = 1 service_count = 0 } service quota-warning { executable = script /scripts/quota-warning.sh unix_listener quota-warning { group = vmail mode = 0660 user = vmail } user = vmail } service submission-login { client_limit = 1000 process_min_avail = 1 service_count = 0 } ssl_cert = </certs/fullchain.pem ssl_cipher_list = ALL:!ADH:!LOW:!SSLv2:!SSLv3:!EXP:!aNULL:!eNULL:!3DES:!MD5:!PSK:!DSS:!RC4:!SEED:!IDEA:+HIGH:+MEDIUM ssl_key = # hidden, use -P to show it ssl_options = no_compression no_ticket ssl_prefer_server_ciphers = yes userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol imap { imap_metadata = yes mail_plugins = " quota zlib mail_crypt imap_quota zlib" } protocol lmtp { mail_plugins = quota sieve } protocol sieve { managesieve_logout_format = bytes=%i/%o } protocol pop3 { mail_plugins = " quota zlib mail_crypt mail_crypt" pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } Thanks

1 0

Extended LIST not working
by tim＠linux-daus.de 25 Nov '24

25 Nov '24

Hi, i try to use extended LIST command but it doesn't work out. I wonder if there is any option necessary to enable it or some option that prevent using extended LIST commands (for example Courier compatible namespace config). I didn't find anything in the documentation. Did anyone notice a similar behavior? curl -u $IMAPUSER:$IMAPPW imaps://... -X 'STATUS INBOX (MESSAGES UNSEEN)' * STATUS INBOX (MESSAGES 105 UNSEEN 79) curl -u $IMAPUSER:$IMAPPW imaps://... -X 'LIST "" "INBOX" RETURN (STATUS (MESSAGES UNSEEN))' * LIST () "." INBOX Best regards, Tim

2 2

Authentication hangs on before SSL initialization
by Matt 22 Nov '24

22 Nov '24

I'm running into below probem; my ath is stuck on initializing SSL. Certificates are fine, cert-chain is tested and auth no further errors are shown. Comparing to the default configuration from the docs it's pretty the same and up-to-date so I'm curious what cloud cause this. Also CHMOD on files has been checked. Nov 21 02:50:29 auth: Debug: Loading modules from directory: /usr/lib/dovecot/auth Nov 21 02:50:29 auth: Debug: Module loaded: /usr/lib/dovecot/auth/lib20_auth_var_expand_crypt.so Nov 21 02:50:29 auth: Debug: Module loaded: /usr/lib/dovecot/auth/libdriver_sqlite.so Nov 21 02:50:29 auth: Debug: Read auth token secret from /run/dovecot/auth-token-secret.dat Nov 21 02:50:29 auth: Debug: auth client connected (pid=477) Nov 21 02:50:29 imap-login: Debug: SSL: where=0x10, ret=1: before SSL initialization Nov 21 02:50:29 imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Nov 21 02:50:29 imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization Maybe someone has a suggestion... Thanks!

2 3

Dovecot Director Proxy (Error: lmtp-server: conn Failed to initialize user: Namespace '': Mail storage autodetection failed with home=(not set))
by abdelhaq.jalboush＠gmail.com 20 Nov '24

20 Nov '24

dovecot --version 2.3.21 (47349e2482) I have Postfix and two dovecot directors I am trying to setup them as proxy in front of two dovecot backends, I am using openldap, when I set passdb { driver = static args = proxy=y nopassword=y } it is working fine. but If I try to authenticate on the proxy I get this error: lmtp(22086): Error: lmtp-server: conn [3]: rcpt : Failed to initialize user: Namespace '': Mail storage autodetection failed with home=(not set) here is my openldap file /etc/dovecot/dovecot-openldap-proxy.conf.ext: uris = ldaps:// dn = CN=,OU=,DC=,dc= dnpass = debug_level = 0 auth_bind = yes ldap_version = 3 base = OU=,DC=,dc= scope = subtree user_attrs = mail=user pass_attrs = userPassword=password pass_filter = (&(objectClass=person)(mail=%u)) dovecot -n on the director side: # 2.3.21 (47349e2482): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.21 (f6cd4b8e) # OS: Linux 6.8.0-1018-aws x86_64 Ubuntu 24.04.1 LTS # Hostname: stg-vm-dir01 auth_debug = yes auth_mechanisms = plain login auth_socket_path = director-userdb auth_verbose = yes director_mail_servers = 10.100.10.15 10.100.15.16 director_servers = 10.100.15.201 10.100.15.202 info_log_path = /var/log/dovecot.log listen = * lmtp_proxy = yes log_path = /var/log/dovecot.log mail_gid = vmail mail_privileged_group = mail mail_uid = vmail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-openldap-proxy.conf.ext driver = ldap } protocols = imap pop3 lmtp service director { fifo_listener login/proxy-notify { mode = 0600 user = $default_login_user } inet_listener { port = 9090 } unix_listener director-admin { mode = 0600 } unix_listener director-userdb { mode = 0600 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director inet_listener imap { port = 0 } inet_listener imaps { port = 993 ssl = yes } } service ipc { unix_listener ipc { user = dovecot } } service lmtp { inet_listener lmtp { port = 24 } } service pop3-login { executable = pop3-login director inet_listener pop3 { port = 0 } inet_listener pop3s { port = 995 ssl = yes } } service submission-login { inet_listener submission { port = 587 } } ssl_cert = </etc/dovecot/ssl/fullchain.pem ssl_client_ca_dir = /etc/ssl/certs ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it protocol lmtp { auth_socket_path = director-userdb }

2 4

sharing sso between regular mail client and web applications
by Marc 20 Nov '24

20 Nov '24

I am testing a bit with sso with keycloak, I was wondering if/how it is possible that your logged in session between eg Thunderbird and dovecot can be used as a single sign on in webapplications. So as long as you have an active session with dovecot you can access all your web applications without the need to login.

2 1

Fatal: sql proxy::sqlite-proxy: Can't open configuration file
by Matt 14 Nov '24

14 Nov '24

Hi, I'm running into a problem where I'm not sure anymore if it's possible to proxy to an SQLite database file using a dict for authentication. The docs are unclear about it and I thought it was not possible as it's not a connection for SQLite but a file-read where the documentation shows different. ov 14 13:57:52 auth: Debug: Loading modules from directory: /usr/lib/dovecot/auth Nov 14 13:57:52 auth: Debug: Module loaded: /usr/lib/dovecot/auth/lib20_auth_var_expand_crypt.so Nov 14 13:57:52 master: Error: service(auth): command startup failed, throttling for 4.000 secs Nov 14 13:57:52 auth: Debug: Module loaded: /usr/lib/dovecot/auth/libdriver_sqlite.so Nov 14 13:57:52 auth: Fatal: sql proxy::sqlite-proxy: Can't open configuration file proxy::sqlite-proxy: No such file or directory doveconf -n does show me the dict being loaded, the file exists as well but it still says not found. dict { sqlite-proxy = sqlite:/etc/dovecot/conf.d/dicts/sqlite/sqlite-connection.conf.ext } What am I missing here ? Thanks, Matt

2 4

openid / roundcube example
by Marc 14 Nov '24

14 Nov '24

Does anyone have a current config example using openid and with roundcube. I like to add this next to 'regular' logins'. I was able to login once but know I am getting these in the logs " No requests to service for this peer (1 connections exist, 0 pending)" I have added the 2 passdb with links to dovecot-oauth2.token.conf.ext from this manual[1], but it is not really clear if I need these and can just add a config file with openid_configuration_url [1] https://doc.dovecot.org/2.3/configuration_manual/authentication/oauth2/

1 3

2.3.21.1 and oauth
by v＠minakov.pro 14 Nov '24

14 Nov '24

Hello! I'm using dovecot with keycloak for oauth authentication. My config is: client_id = dovecot client_secret = MY_SECRET introspection_url = https://MY_KEYCLOAK/realms/master/protocol/openid-connect/token/introspect introspection_mode = post pass_attrs = pass=%{oauth2:access_token} Everything worked great on version 2.3.20. After upgrading to version 2.3.21.1 oauth stopped working with errors: auth: Debug: http-client: conn [::1]:443 [1]: Got 401 response for request [Req1: POST https://MY_KEYCLOAK/realms/master/protocol/openid-connect/token/introspect] Unauthorized (took 5 ms + >Aug 16 00:23:58 auth: Error: oauth2(MY_EMAIL,127.0.0.1,<HADwdb8f+PN/AAAB>): oauth2 failed: Introspection failed: No username returned I tried all combination of configurations, debugging and versions of keycloak. Seems something was broken in this version of dovecot.

3 3

Locking box for backups
by Steve Atkins 12 Nov '24

12 Nov '24

I’m running 2.3.19.1 on a system that isn’t set up to support filesystem snapshots. So I’d like to back up my mdbox mailboxes at a filesystem level (with rsync, or something equivalent). I’m assuming that to get a consistent backup I should lock the mailbox while I copy it. How should I acquire a (write) lock on an mdbox mailbox? Cheers, Steve

2 1

auto clear trash
by Hua Young 12 Nov '24

12 Nov '24

Hello where can I setup dovecot to auto clear trash periodically? for example, I want the messages in trash folder to be kept up to 20 days. Thanks.

5 5

replication and backup
by Philippe 12 Nov '24

12 Nov '24

Hi all & thanks Aki for adding me to the list. First of all, I'm not a dovecot user yet. For several years now I use cyrus imapd and never saw the urge to switch, until I recently lost random mails from my mailbox which were neither temporally connected nor related in some other way. Fortunately, I had a rolling replication which never expunges, so I was able to restore them. While circumventing some pitfalls during the restore, I learned that the backup and restore procedure cyrus imapd offers is deprecated and will be removed. Now I ponder whether or not I should switch the mda. Does dovecot offer the following? - setting up a rolling replication which replicates every action made to the mailbox (flags, mark as deleted, relocations, etc.) to a different server (one way only) - NOT expunging the emails that have been marked as deleted on the slave server or expunging only manually - restoring selected emails from the slave directly to the master The slave server doesn't need to be accessible via imap, I'd be happy to search for some header data (subject, recipient, sender, date, ...) and restore the email by command line using its uuid or message-id or something like that. Browsing the documentation I found "doveadm-backup" which is using "dsync", but I'm not sure whether or not it fits my requirements. I'd love to hear your opinions. Kind regards, Philippe

3 5

SMTPUTF8 in dovecot lmtp - current status
by Kamil Jońca 12 Nov '24

12 Nov '24

About a year ago I asked about SMTPUTF8 in dovecot-lmtp, and then dovecod did not handle it. Is that changed? KJ -- http://wolnelektury.pl/wesprzyj/teraz/ A bore is someone who persists in holding his own views after we have enlightened him with ours.

3 2

Re: What is the appropriate action for out of memory error for exceeding vsz_limit in my situation?
by Adrian C. 10 Nov '24

10 Nov '24

On Fri, 8 Nov 2024, Marc wrote: > How much does it cost to upgrade to more memory? I have a server with 4G RAM is affordable. But if you do colocation and have to rent remote PoP hands to insert the RAM their hourly rate could be hundreds of dollars. If you're renting the entire server you have to ask your service provider for a quote to provision more RAM.

1 0

Proper configuration of fts-xapian for dovecot
by Torge Riedel 10 Nov '24

10 Nov '24

Dears, I recently installed the package dovecot-fts-xapian on my Ubuntu 22.04 VM, where dovecot 2.3.16 is installed. I enabled the plugins mail_plugins = $mail_plugins fts fts_xapian plugin { ### # fts fts = xapian fts_xapian = partial=3 full=20 fts_autoindex = yes fts_enforced = yes #fts_autoindex_exclude = \Trash # Index attachements fts_decoder = decode2text } I skip to show the "service indexer-worker" and "decode2text" for the moment. After restarting dovecot I ran doveadm index -A \* which ran without any issues. But for the moment I am faced with two issues I am unable to solve on my own and also didn't found a solution on the internet: 1. The indexer created a new directory "xapian-indexes" in the user's mail folder (where also "INBOX", "Drafts", "Sent", ... exists), with the result that you can see this folder in Thunderbird and GMail Android App. How to hide / disable the folder to mail programs, IMHO no mail program should have access to it. 2. When listing the capabilities of my mail server I get "CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SPECIAL-USE LITERAL+ AUTH=PLAIN AUTH=LOGIN" and it seems to lack the FTS capability(s). Am I right? And should dovecot set the capabality on its own or is something missing in the config? If you need more info, just let me know please. Thanks and kind regards Torge

3 4

Re: Expunging and deleting old messages - moving from cyrus-imap
by Joseph Tam 08 Nov '24

08 Nov '24

> doveadm expunge -A MAILBOX * DELETED BEFORE 5d > > and got back: > > Fatal: Unknown argument BOOT > run-parts: /etc/cron.hourly/dovecot-cleanup exited with return code 75 Just a wild-ass guess, but did you escape the wildcard e.g. doveadm expunge -A MAILBOX \* DELETED BEFORE 5d Joseph Tam <jtam.home(a)gmail.com>

2 1

What is the appropriate action for out of memory error for exceeding vsz_limit in my situation?
by Steve Dondley 08 Nov '24

08 Nov '24

Hi, I have sporadic messages on my server about an account getting an out of memory error: Fatal: master: service(imap): child 17910 returned error 83 (Out of memory (service imap { vsz_limit=325 MB }, you may need to increase it) - set CORE_OUTOFMEM=1 environment to get core dump) In response, I raised the limit from 256MB up to 325. That didn’t seem to help. The server has only 512 MB of RAM so I’m afraid to go much higher. I googled around a bit and some people are saying that when the dovecot.index.cache grows too large, it can cause these errors. The imap account has a dovecot.index.cache file that is 167 MB which seems to be well below the limit (but maybe it is compressed?). So I’m not entirely sure as to what the underlying problem is. So before upgrading to the server to 1024 MB of ram and going on a wild goose chase, I just want to get input on whether I have positively identified the problem and whether there might be something else I can do to manage this problem.

2 3

Expunging and deleting old messages - moving from cyrus-imap
by Nick Howitt 07 Nov '24

07 Nov '24

I have just moved from cyrus-imap to dovecot. In cyrus I had an automatic purge of messages marked as deleted with a cron job: /usr/lib/cyrus-imapd/cyr_expire -E 1 -X 7 -D 7 -E = Expire Days -X = Expunge days What is the equivalent in doveadm? doveadm expunge -A DELETED BEFORE 1w Is there any equivalent to expire messages marked as deleted? I can't remember why I have it as I set up Cyrus so long ago. I also delete from deleted (INBOX.trash) anything older than a year. In Cyrus, it is run from an event in the configuration: trashPurge cmd="ipurge -s -X -f -d 365 user/*/Trash" at=0104 I would be happy to run it from cron, so does this work: doveadm expunge -A mailbox INBOX.trash SENTBEFORE 52w Except I get: doveadm(nobody): Error: mkdir(/nonexistent/.Maildir) failed: Permission denied (euid=65534(nobody) egid=65534(nogroup)) I can run it for the individual users but not -A. Nick

4 5

Re: Expunging and deleting old messages - moving from cyrus-imap
by Joseph Tam 07 Nov '24

07 Nov '24

> What is the equivalent in doveadm? > > doveadm expunge -A DELETED BEFORE 1w > > Is there any equivalent to expire messages marked as deleted? I can't > remember why I have it as I set up Cyrus so long ago. If by expire, you mean expunge, this is more or less what I used in a nightly cron script doveadm expunge -A $ mailbox 'Deleted Items' OR mailbox 'Deleted Messages*' OR mailbox Junk OR mailbox Trash OR \( mailbox INBOX Deleted $ \) BEFORE 7d In English, for all users, delete any messages in commonly named trash folders or any messages in INBOX marked as deleted that are older than a week. I recall one quirk: if the mailbox didn't have a cached entry for the message's age, the filter criteria would miss this and it would remain in the mailbox. I'm not sure if this still happens, but I got around this by seeding the cache by doing a doveadm search for that metadata (date.received?). Joseph Tam <jtam.home(a)gmail.com>

3 3

Re: IMAP quota reporting free disk space
by dovecot＠ptld.com 06 Nov '24

06 Nov '24

>> Try moving the quota outside of the protocol block. >> mail_plugins = quota ... >> protocol imap { >> mail_plugins = $mail_plugins imap_quota >> ... >> } >> >> >> Try adding a text label for the client to use. >> plugin { >> quota = maildir:Quota Limit >> ... >> } > > There is a progress, but not complete. > > When I right click at the inbox in Thunderbird and select properties and > quota tab - I get similar information as in case of Gmail account ("Quota / > STORAGE ... used 57% - 57.1 GB / 100 GB") - that information was previously > missing. > > But in case of Gmail inbox I also see a bar on the bottom of the > Thunderbird window displaying 82% (on the main screen, without going into > properties, etc.). In case of my dovecot server that bar is missing. Any > idea what should I change on my server to let MUA display that bar? Gmail advertises QUOTA as an CAPABILITY upon connection before login. Dovecot advertises QUOTA as an CAPABILITY only after login. GPT believes this is why Tbird doesn't show the quota on the status bar, because it's looking for the quota before login and not after. Does anyone know if its possible to get dovecot to advertise QUOTA before login?

1 1

IMAP quota reporting free disk space
by piotr＠connecta.pl 06 Nov '24

06 Nov '24

Hi, Is it possible to make IMAP quota commands report free filesystem space? I don't want to set quota limits to individual users, but it would be nice to have an information on the bottom of Thunderbird window about free disk space (it could be percentage of the total disk size). Anyway I have trouble with quota reporting itself, because I tried to setup a regular quota (100G) first, but somehow Thunderbird doesn't report free quota as it does in case of Gmail accounts. I added to 20-imap.conf: protocol imap { mail_plugins = $mail_plugins quota imap_quota } and to 90-quota.conf: plugin { quota = maildir quota_rule = *:storage=100G } What else should I add to enable reporting? (without warning emails, commands changing quota and all that stuff) P.

2 2

Upgrade Dovecot Cluster 2.2 to 2.3
by Steven Varco 05 Nov '24

05 Nov '24

Hi All I’m planing to upgrade/migrate my dovecot cluster with two dovecot 2.2.36 nodes to 2.3.16. They use Maildir als IMAP backend and will continue to use that in the future. Can I just: - Install a new Server (AlmaLinux 9) - Stop dovecot on the old node-2 - Copy all the data from the old mail directory of node-2 to the new one - Install dovecot 2.3 on the new on with more or less the same config and let it run - Repeat the same with old node-1 ? Or would it be better to start of with an empty mail directory and let the other old node imapsync the data to the new one? - What would the advantage be (over the disadvantage that it may take some time to get everything synced)? I know that Maildir are just static files, so moving them to the new server should not be a problem. I’m thinking more about indexes created by dovecot 2.2.36… Are they read without issues with the newever dovecot 2.3.16 or should I consider a re-index. or something the like? thanks in advance, Steven -- https://steven.varco.ch/ https://www.tech-island.com/

2 1

IRC channel link on the website
by Sebastian Crane 04 Nov '24

04 Nov '24

Dear all, On the Dovecot website, I noticed that the IRC link isn't clickable: https://www.dovecot.org/support/ The Markdown-esque square brackets suggest to me that this should be a hyperlink, but it's just plain text at the moment. The other issue is that there is no hash symbol before the channel name, so even if it were clickable the user's IRC client would start a private message rather than join the channel. Best wishes, Sebastian

2 1

dovecot-lda from www-data - doesnt work
by Sebastian Nielsen 01 Nov '24

01 Nov '24

m trying to deliver email from a webform, but its not working. I then tried manually in the console: WORKS: sudo -u info /usr/lib/dovecot/dovecot-lda -d info DOES NOT WORK: sudo -u www-data /usr/lib/dovecot/dovecot-lda -d info sudo -u postfix /usr/lib/dovecot/dovecot-lda -d info sudo -u dovecot /usr/lib/dovecot/dovecot-lda -d info I need to be able to deliver email from "www-data" to any user on the system (that is a valid dovecot-lda mail user). It seems a security setting blocks it. I have already set authdb to 0777 in dovecot settings (because otherwise it gives an error about lookup rights), and also enabled stats-writer and stats-reader with 0666. so no more error messages in log, but the above commands that does NOT work, terminate immediately, while the working command waits for email from STDIN. No error messages in either log or on STDOUT/STDERR. What can be the problem?

3 7

Namespace configuration
by Scott Q. 31 Oct '24

31 Oct '24

We are having an issue with our namespace configuration, as per the eM Client folks. We present the following namespaces via IMAP, with Dovecot as backend. This is the actual imap conversation 08:37:10.896|03E| 01: A4 ID ("name" "eM Client" "version" "10.1.4393.0" "GUID" "EMCLIENT_V1" "vendor" "eM Client" "contact" "support(a)emclient.com") 08:37:10.961|03E| 01: * ID ("name" "Dovecot") 08:37:10.961|03E| 01: A4 OK ID completed (0.001 + 0.000 secs). 08:37:10.961|03E| 01: A5 NAMESPACE 08:37:11.184|03E| 01: * NAMESPACE (("" ".")("Labels." ".")) (("shared." ".")) NIL 08:37:11.184|03E| 01: A5 OK Namespace completed (0.001 + 0.162 + 0.161 secs). As per them, the problem is the first empty prefix: "The problem is not necessarily in the fact that it is empty but because it is then mixed with another one with a prefix. Logically it means that everything in the empty namespace must be mixed together with the prefixed namespace and that is not really ok." "NAMESPACE (("personal." ".")("Labels." ".")) (("shared." ".")) NIL would make sense as both personal namespaces point to different directory structures." Reading the RFC I'm not understanding this at all, but then again, maybe I'm wrong. Anyone care to shed some light on how multiple namespaces should be defined ? Thank you, Scott

1 0

Crash dovecot-2.3.21.1 on OpenBSD
by Kirill A. Korinsky 31 Oct '24

31 Oct '24

Good day, I just discovered a core file from dovecot's imap. It is running on OpenBSD 7.6 and dovecot is built with https://github.com/dovecot/core/pull/223 Stacktrace: #0 fts_search_merge_scores_or (dest=0x73b552104f38, src=<optimized out>) at fts-search.c:278 src2 = <error reading variable src2 (Cannot access memory at address 0x8)> src_map = 0xc7d7dcb6028 src2_map = 0xc7d6338d5c0 src2i = 3157 srci = 8699 src_count = 6133 src2_count = 5729 #1 fts_search_merge_scores_level (fctx=0xc7df32c4000, args=0xc7dc4e9a110, idx=0x73b552105064, and_args=<optimized out>, scores=0x73b552104f38) at fts-search.c:333 arg_scores = {arr = {buffer = 0xc7e01e35468, element_size = 8}, v = 0xc7e01e35468, v_modifiable = 0xc7e01e35468} level = <optimized out> #2 0x00000c7da13ccabe in fts_search_merge_scores_level (fctx=0xc7df32c4000, args=0xc7dc4e99ca0, idx=0x73b552105064, and_args=<optimized out>, scores=0x73b552104fc8) at fts-search.c:326 arg_scores = {arr = {buffer = 0xc7e01e34860, element_size = 8}, v = 0xc7e01e34860, v_modifiable = 0xc7e01e34860} level = <optimized out> #3 0x00000c7da13ccabe in fts_search_merge_scores_level (fctx=0xc7df32c4000, args=0xc7e24477628, idx=0x73b552105064, and_args=<optimized out>, scores=0xc7daf51ea28) at fts-search.c:326 arg_scores = {arr = {buffer = 0xc7e01e345f8, element_size = 8}, v = 0xc7e01e345f8, v_modifiable = 0xc7e01e345f8} level = <optimized out> #4 0x00000c7da13cbf07 in fts_search_merge_scores (fctx=0xc7df32c4000) at fts-search.c:341 idx = 8 #5 fts_search_try_lookup (fctx=0xc7df32c4000) at fts-search.c:373 last_uid = <optimized out> seq1 = <optimized out> seq2 = 0 #6 fts_search_lookup (fctx=0xc7df32c4000) at fts-search.c:383 reason = <optimized out> #7 0x00000c7da13cefb4 in fts_try_build_init (ctx=0xc7daf52b640, fctx=0xc7df32c4000) at fts-storage.c:147 ret = 8699 #8 fts_mailbox_search_init (t=<optimized out>, args=0xc7dd96dd048, sort_program=<optimized out>, wanted_fields=<optimized out>, wanted_headers=<optimized out>) at fts-storage.c:262 ft = 0xc7df32dec00 fbox = <optimized out> flist = <optimized out> ctx = 0xc7daf52b640 fctx = 0xc7df32c4000 #9 0x00000c7b3879aef3 in imap_search_start (ctx=0xc7df32dfbc8, sargs=0xc7dd96dd048, sort_program=0x0) at imap-search.c:537 cmd = 0xc7df32df848 #10 0x00000c7b38789e6e in cmd_search (cmd=0xc7df32df848) at cmd-search.c:48 args = <optimized out> ctx = 0xc7df32dfbc8 ret = 8699 charset = <optimized out> sargs = 0x0 #11 0x00000c7b38792db3 in command_exec (cmd=0xc7df32df848) at imap-commands.c:201 hook = <optimized out> finished = <optimized out> #12 0x00000c7b387915d8 in client_command_input (cmd=0xc7df32df848) at imap-client.c:1237 client = 0xc7df32bc048 command = <optimized out> tag = <optimized out> ret = <optimized out> name = <optimized out> #13 0x00000c7b38791749 in client_command_input (cmd=0xc7df32df848) at imap-client.c:1305 client = 0xc7df32bc048 command = <optimized out> tag = <optimized out> ret = <optimized out> name = <optimized out> #14 0x00000c7b38791749 in client_command_input (cmd=0xc7df32df848) at imap-client.c:1305 client = 0xc7df32bc048 command = <optimized out> tag = <optimized out> ret = <optimized out> name = <optimized out> #15 0x00000c7b3878ff68 in client_handle_next_command (client=0xc7df32bc048, remove_io_r=<optimized out>) at imap-client.c:1348 No locals. #16 client_handle_input (client=0xc7df32bc048) at imap-client.c:1363 _data_stack_cur_id = <optimized out> handled_commands = <optimized out> ret = <optimized out> remove_io = <optimized out> #17 0x00000c7b3878e569 in client_input (client=0xc7df32bc048) at imap-client.c:1407 output = 0xc7daf5003a0 bytes = 251 cmd = <optimized out> #18 0x00000c7dc9c7ff3f in io_loop_call_io (io=0xc7daf515240) at ioloop.c:737 ioloop = 0xc7daf520460 t_id = 8699 #19 0x00000c7dc9c830a4 in io_loop_handler_run_internal (ioloop=0xc7daf520460) at ioloop-kqueue.c:164 tv = {tv_sec = 4, tv_usec = 790941} ts = {tv_sec = 4, tv_nsec = 790941000} ctx = 0xc7daf503520 msecs = <optimized out> events = <optimized out> events_count = <optimized out> ret = <optimized out> i = 0 io = 0xc7daf515240 event = <optimized out> #20 0x00000c7dc9c806a0 in io_loop_handler_run (ioloop=0xc7daf520460) at ioloop.c:789 No locals. #21 0x00000c7dc9c804a8 in io_loop_run (ioloop=0xc7daf520460) at ioloop.c:762 No locals. #22 0x00000c7dc9bd56b9 in master_service_run (service=0xc7daf52b500, callback=0x0) at master-service.c:878 No locals. #23 0x00000c7b387a19d0 in main (argc=1, argv=<optimized out>) at main.c:575 set_roots = {0xc7dc9ccd480 <smtp_submit_setting_parser_info>, 0xc7b387af1b0 <imap_setting_parser_info>, 0x0} login_set = {auth_socket_path = 0xc7e01e2f550 "\004", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0xc7b387a1bc0 <login_client_connected>, failure_callback = 0xc7b387a1f40 <login_client_failed>, update_proctitle = false, request_auth_token = true} service_flags = <optimized out> storage_service_flags = <optimized out> username = <optimized out> auth_socket_path = <optimized out> c = <optimized out> error = 0xc7e056c4af0 <_dl_dtors> "\363\017\036\372UH\211\345\350s\030" config: # 2.3.21.1 (d492236fa0): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.21.1 (49005e73) # OS: OpenBSD 7.6 amd64 # Hostname: mx1.catap.net # NOTE: Send doveconf -n output instead when asking for help. auth_anonymous_username = anonymous auth_cache_negative_ttl = 1 hours auth_cache_size = 0 auth_cache_ttl = 1 hours auth_cache_verify_password_with_worker = no auth_debug = no auth_debug_passwords = no auth_default_realm = auth_failure_delay = 2 secs auth_gssapi_hostname = auth_krb5_keytab = auth_master_user_separator = auth_mechanisms = plain auth_policy_check_after_auth = yes auth_policy_check_before_auth = yes auth_policy_hash_mech = sha256 auth_policy_hash_nonce = auth_policy_hash_truncate = 12 auth_policy_log_only = no auth_policy_reject_on_fail = no auth_policy_report_after_auth = yes auth_policy_request_attributes = login=%{requested_username} pwhash=%{hashed_password} remote=%{rip} device_id=%{client_id} protocol=%s session_id=%{session} auth_policy_server_api_header = auth_policy_server_timeout_msecs = 2000 auth_policy_server_url = auth_proxy_self = auth_realms = auth_socket_path = auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_stats = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Lu auth_username_translation = auth_verbose = no auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 30 base_dir = /var/dovecot config_cache_size = 1 M debug_log_path = default_client_limit = 1000 default_idle_kill = 1 mins default_internal_group = _dovecot default_internal_user = _dovecot default_login_user = _dovenull default_process_limit = 100 default_vsz_limit = 10 G deliver_log_format = msgid=%m: %$ dict_db_config = director_flush_socket = director_mail_servers = director_max_parallel_kicks = 100 director_max_parallel_moves = 100 director_output_buffer_size = 10 M director_ping_idle_timeout = 30 secs director_ping_max_timeout = 1 mins director_servers = director_user_expire = 15 mins director_user_kick_delay = 2 secs director_username_hash = %Lu disable_plaintext_auth = yes dotlock_use_excl = yes doveadm_allowed_commands = doveadm_api_key = doveadm_http_rawlog_dir = doveadm_password = # hidden, use -P to show it doveadm_port = 12345 doveadm_socket_path = doveadm-server doveadm_ssl = no doveadm_username = doveadm doveadm_worker_count = 0 dsync_alt_char = _ dsync_commit_msgs_interval = 100 dsync_features = dsync_hashed_headers = Date Message-ID dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u -U first_valid_gid = 1 first_valid_uid = 1000 haproxy_timeout = 3 secs haproxy_trusted_networks = hostname = imap_capability = imap_client_workarounds = imap_fetch_failure = disconnect-immediately imap_hibernate_timeout = 0 imap_id_log = imap_id_retain = no imap_id_send = name * imap_idle_notify_interval = 2 mins imap_literal_minus = no imap_logout_format = in=%i out=%o deleted=%{deleted} expunged=%{expunged} trashed=%{trashed} hdr_count=%{fetch_hdr_count} hdr_bytes=%{fetch_hdr_bytes} body_count=%{fetch_body_count} body_bytes=%{fetch_body_bytes} imap_max_line_length = 64 k imap_metadata = no imap_urlauth_host = imap_urlauth_logout_format = in=%i out=%o imap_urlauth_port = 143 imapc_cmd_timeout = 5 mins imapc_connection_retry_count = 1 imapc_connection_retry_interval = 1 secs imapc_features = imapc_host = imapc_list_prefix = imapc_master_user = imapc_max_idle_time = 29 mins imapc_max_line_length = 0 imapc_password = imapc_port = 143 imapc_rawlog_dir = imapc_sasl_mechanisms = imapc_ssl = no imapc_ssl_verify = yes imapc_user = import_environment = TZ CORE_OUTOFMEM CORE_ERROR info_log_path = instance_name = dovecot last_valid_gid = 0 last_valid_uid = 0 lda_mailbox_autocreate = no lda_mailbox_autosubscribe = no lda_original_recipient_header = libexec_dir = /usr/local/libexec/dovecot listen = *, :: lmtp_add_received_header = no lmtp_client_workarounds = lmtp_hdr_delivery_address = final lmtp_proxy = no lmtp_proxy_rawlog_dir = lmtp_rawlog_dir = lmtp_rcpt_check_quota = no lmtp_save_to_detail_mailbox = no lmtp_user_concurrency_limit = 0 lmtp_verbose_replies = no lock_method = fcntl log_core_filter = log_debug = log_path = syslog log_timestamp = "%b %d %H:%M:%S " login_access_sockets = login_greeting = Dovecot ready. login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c session=<%{session}> login_plugin_dir = /usr/local/lib/dovecot/login login_plugins = login_proxy_max_disconnect_delay = 0 login_proxy_max_reconnects = 3 login_proxy_notify_path = proxy-notify login_proxy_rawlog_dir = login_proxy_timeout = 30 secs login_source_ips = login_trusted_networks = mail_access_groups = mail_always_cache_fields = mail_attachment_detection_options = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_attribute_dict = file:%h/Maildir/dovecot-attributes mail_cache_fields = flags mail_chroot = mail_debug = no mail_fsync = optimized mail_full_filesystem_access = no mail_gid = vmail mail_home = mail_location = maildir:~/Maildir mail_log_prefix = "%s(%u)<%{pid}><%{session}>: " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 10 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /usr/local/lib/dovecot mail_plugins = notify fts fts_flatcurve replication virtual mail_prefetch_count = 0 mail_privileged_group = mail_save_crlf = no mail_server_admin = mail_server_comment = mail_shared_explicit_inbox = no mail_sort_max_read_count = 0 mail_temp_dir = /tmp mail_temp_scan_interval = 1 weeks mail_uid = vmail mail_vsize_bg_after_count = 0 mailbox_idle_check_interval = 30 secs mailbox_list_index = yes mailbox_list_index_include_inbox = no mailbox_list_index_very_dirty_syncs = no maildir_broken_filename_sizes = no maildir_copy_with_hardlinks = yes maildir_empty_new = no maildir_stat_dirs = no maildir_very_dirty_syncs = no managesieve_client_workarounds = managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 64 k managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_md5 = apop3d mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = fcntl mdbox_preallocate_space = no mdbox_rotate_interval = 0 mdbox_rotate_size = 10 M mmap_disable = yes namespace inbox { disabled = no hidden = no ignore_on_failure = no inbox = yes list = yes location = mailbox Archive { auto = subscribe autoexpunge = 0 autoexpunge_max_mails = 0 comment = driver = special_use = \Archive } mailbox Drafts { auto = subscribe autoexpunge = 0 autoexpunge_max_mails = 0 comment = driver = special_use = \Drafts } mailbox Junk { auto = subscribe autoexpunge = 60 days autoexpunge_max_mails = 0 comment = driver = special_use = \Junk } mailbox Sent { auto = subscribe autoexpunge = 0 autoexpunge_max_mails = 0 comment = driver = special_use = \Sent } mailbox Trash { auto = subscribe autoexpunge = 60 days autoexpunge_max_mails = 0 comment = driver = special_use = \Trash } order = 0 prefix = separator = . subscriptions = yes type = private } namespace virtual { disabled = no hidden = no ignore_on_failure = no inbox = no list = yes location = virtual:/etc/dovecot/virtual:INDEX=~/virtual mailbox All { auto = no autoexpunge = 0 autoexpunge_max_mails = 0 comment = All messages without Trash and Junk driver = special_use = \All } mailbox Flagged { auto = no autoexpunge = 0 autoexpunge_max_mails = 0 comment = All flagged messages without Trash and Junk driver = special_use = \Flagged } order = 0 prefix = virtual. separator = . subscriptions = yes type = private } old_stats_carbon_interval = 30 secs old_stats_carbon_name = old_stats_carbon_server = old_stats_command_min_time = 1 mins old_stats_domain_min_time = 12 hours old_stats_ip_min_time = 12 hours old_stats_memory_limit = 16 M old_stats_session_min_time = 15 mins old_stats_user_min_time = 1 hours passdb { args = username_format=%u /etc/mail/credentials auth_verbose = default default_fields = deny = no driver = passwd-file master = no mechanisms = name = override_fields = pass = no result_failure = continue result_internalfail = continue result_success = return-ok skip = never username_filter = } plugin { fts = flatcurve fts_decoder = decode2text fts_filters = normalizer-icu snowball stopwords fts_filters_en = lowercase snowball english-possessive stopwords fts_flatcurve_substring_search = yes fts_languages = en de ru es fts_tokenizer_generic = algorithm=simple fts_tokenizers = generic email-address mail_replica = tcps:mx2.catap.net replication_sync_timeout = 10 sieve = file:~/sieve;active=~/.dovecot.sieve sieve_before = /etc/dovecot/sieve_before.d/ } pop3_client_workarounds = pop3_delete_type = default pop3_deleted_flag = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_duplicates = allow pop3_uidl_format = %08Xu%08Xv pop3c_features = pop3c_host = pop3c_master_user = pop3c_password = pop3c_port = 110 pop3c_quick_received_date = no pop3c_rawlog_dir = pop3c_ssl = no pop3c_ssl_verify = yes pop3c_user = %u postmaster_address = postmaster@%{if;%d;ne;;%d;%{hostname}} process_shutdown_filter = protocols = imap lmtp sieve quota_full_tempfail = no rawlog_dir = recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s replication_dsync_parameters = -d -l 30 -U -x virtual. replication_full_sync_interval = 5 mins replication_max_conns = 10 replicator_host = replicator replicator_port = 0 sendmail_path = /usr/sbin/sendmail service aggregator { chroot = . client_limit = 0 drop_priv_before_exec = no executable = aggregator extra_groups = fifo_listener replication-notify-fifo { group = vmail mode = 0600 user = vmail } group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replication-notify { group = vmail mode = 0600 user = vmail } user = $default_internal_user vsz_limit = 18446744073709551615 B } service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = worker unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 0 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener auth-client { group = mode = 0600 user = $default_internal_user } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } unix_listener login/login { group = mode = 0666 user = } unix_listener token-login/tokenlogin { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service decode2text { chroot = client_limit = 0 drop_priv_before_exec = no executable = script /usr/local/libexec/dovecot/decode2text.sh extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener decode2text { group = mode = 0666 user = } user = vmail vsz_limit = 18446744073709551615 B } service dict-async { chroot = client_limit = 0 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict-async { group = $default_internal_group mode = 0660 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = $default_internal_group mode = 0660 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = . client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs inet_listener { address = haproxy = no port = 0 reuse_port = no ssl = no } privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener director-userdb { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns-client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } unix_listener login/dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = $default_internal_group group = idle_kill = 0 inet_listener { address = haproxy = no port = 12345 reuse_port = no ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service health-check { chroot = client_limit = 1 drop_priv_before_exec = yes executable = script -p health-check.sh extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = user = $default_internal_user vsz_limit = 18446744073709551615 B } service imap-hibernate { chroot = client_limit = 0 drop_priv_before_exec = no executable = imap-hibernate extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 0 type = unix_listener imap-hibernate { group = $default_internal_group mode = 0660 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = haproxy = no port = 143 reuse_port = no ssl = no } inet_listener imaps { address = haproxy = no port = 993 reuse_port = no ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service imap-urlauth-login { chroot = token-login client_limit = 0 drop_priv_before_exec = no executable = imap-urlauth-login extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login unix_listener imap-urlauth { group = mode = 0666 user = } user = $default_login_user vsz_limit = 18446744073709551615 B } service imap-urlauth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth-worker extra_groups = $default_internal_group group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener imap-urlauth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service imap-urlauth { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener token-login/imap-urlauth { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service imap { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap extra_groups = $default_internal_group group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener imap-master { group = mode = 0600 user = } unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service indexer-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = indexer-worker extra_groups = $default_internal_group group = idle_kill = 0 privileged_group = process_limit = 10 process_min_avail = 0 protocol = service_count = 0 type = worker unix_listener indexer-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service indexer { chroot = client_limit = 0 drop_priv_before_exec = no executable = indexer extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service ipc { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = ipc extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener ipc { group = mode = 0600 user = $default_internal_user } unix_listener login/ipc-proxy { group = mode = 0600 user = $default_login_user } user = $default_internal_user vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 1 drop_priv_before_exec = no executable = lmtp extra_groups = $default_internal_group group = vmail idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener lmtp { group = mode = 0666 user = } user = vmail vsz_limit = 18446744073709551615 B } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log unix_listener log-errors { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service managesieve-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = managesieve-login extra_groups = group = idle_kill = 0 inet_listener sieve { address = haproxy = no port = 4190 reuse_port = no ssl = no } privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service managesieve { chroot = client_limit = 1 drop_priv_before_exec = no executable = managesieve extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = unix_listener login/sieve { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service old-stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = old-stats extra_groups = fifo_listener old-stats-mail { group = mode = 0600 user = } fifo_listener old-stats-user { group = mode = 0600 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener old-stats { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = haproxy = no port = 110 reuse_port = no ssl = no } inet_listener pop3s { address = haproxy = no port = 995 reuse_port = no ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = $default_internal_group group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service replicator { chroot = client_limit = 0 drop_priv_before_exec = no executable = replicator extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = unix_listener replicator-doveadm { group = vmail mode = 0600 user = vmail } unix_listener replicator { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service stats { chroot = client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener login/stats-writer { group = mode = 0600 user = $default_login_user } unix_listener stats-reader { group = mode = 0600 user = } unix_listener stats-writer { group = $default_internal_group mode = 0660 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service submission-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = submission-login extra_groups = group = idle_kill = 0 inet_listener submission { address = haproxy = no port = 587 reuse_port = no ssl = no } inet_listener submissions { address = haproxy = no port = 0 reuse_port = no ssl = no } privileged_group = process_limit = 0 process_min_avail = 0 protocol = submission service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service submission { chroot = client_limit = 1 drop_priv_before_exec = no executable = submission extra_groups = $default_internal_group group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = submission service_count = 1 type = unix_listener login/submission { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_alt_cert = ssl_alt_key = ssl_ca = ssl_cert = </etc/ssl/mx.catap.net.crt ssl_cert_username_field = commonName ssl_cipher_list = ALL:!kRSA:!SRP:!kDHd:!DSS:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH ssl_cipher_suites = ssl_client_ca_dir = ssl_client_ca_file = ssl_client_cert = ssl_client_key = ssl_client_require_valid_cert = yes ssl_crypto_device = ssl_curve_list = ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it ssl_key_password = ssl_min_protocol = TLSv1.2 ssl_options = ssl_prefer_server_ciphers = no ssl_require_crl = yes ssl_verify_client_cert = no state_dir = /var/dovecot stats_http_rawlog_dir = stats_writer_socket_path = stats-writer submission_client_workarounds = submission_host = submission_logout_format = in=%i out=%o submission_max_mail_size = 0 submission_max_recipients = 0 submission_relay_command_timeout = 5 mins submission_relay_connect_timeout = 30 secs submission_relay_host = submission_relay_master_user = submission_relay_max_idle_time = 29 mins submission_relay_password = submission_relay_port = 25 submission_relay_rawlog_dir = submission_relay_ssl = no submission_relay_ssl_verify = yes submission_relay_trusted = no submission_relay_user = submission_ssl = no submission_timeout = 30 secs syslog_facility = mail userdb { args = username_format=%u /etc/mail/credentials auth_verbose = default default_fields = driver = passwd-file name = override_fields = uid=vmail gid=vmail home=/var/vmail/%u result_failure = continue result_internalfail = continue result_success = return-ok skip = never } valid_chroot_dirs = verbose_proctitle = no verbose_ssl = no version_ignore = no protocol lmtp { mail_plugins = notify fts fts_flatcurve replication virtual sieve } protocol imap { imap_metadata = yes mail_max_userip_connections = 1000 } -- wbr, Kirill

2 2

Inboxes incorrectly become /var/mail/%u
by ma.sao＠msa.hinet.net 29 Oct '24

29 Oct '24

With configuration "mail_location = maildir:~/Maildir", incoming mails are always saved to /var/mail/%u , which are invisible to Thunderbird. How do I configure Dovecot to save incoming mails to ~/Maildir/cur/ and ~/Maildir/new/ ? Thank you in advance! context: I replaced my host recently. Version 2.3.13 running in the old host used to correctly save incoming mails to ~/Maildir. I copied the files in /home/user1/Maildir/ Dovecot 2.3.13 managed to my new host where the new Dovecot 2.3.19.1 runs. Thunderbird now correctly displays files in /home/user1/Maildir/cur/ in the new server as inbox mails, but obviously it can not see file /var/mail/user1 in the new server. ===== Output of "dovecot -n" follows. # 2.3.19.1 (9b53102964): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.19 (4eae2f79) # OS: Linux 6.1.0-22-amd64 x86_64 Debian 12.7 # Hostname: example auth_mechanisms = plain login disable_plaintext_auth = no mail_location = maildir:~/Maildir mail_privileged_group = mail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } protocols = " imap" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imap { port = 143 } } ssl = required ssl_cert = </etc/letsencrypt/live/example.com/fullchain.pem ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it userdb { driver = passwd } ======== Output of "ls -la /home/user1/Maildir/" in my new host follows. total 112 drwx------ 9 user1 user1 4096 Oct 26 23:39 . drwxr-xr-x 4 user1 user1 4096 Oct 26 23:39 .. drwx------ 5 user1 user1 4096 Oct 26 22:18 .Drafts drwx------ 5 user1 user1 4096 Oct 29 00:11 .Sent drwx------ 5 user1 user1 4096 Oct 26 23:39 .Templates drwx------ 5 user1 user1 4096 Oct 29 00:12 .Trash drwx------ 2 user1 user1 4096 Oct 26 21:14 cur -rw------- 1 user1 user1 609 Oct 26 20:15 dovecot-uidlist -rw------- 1 user1 user1 8 Nov 13 2023 dovecot-uidvalidity -r--r--r-- 1 user1 user1 0 Oct 15 2022 dovecot-uidvalidity.634a88ee -rw------- 1 user1 user1 600 Oct 18 16:39 dovecot.index -rw------- 1 user1 user1 13296 Oct 26 21:23 dovecot.index.cache -rw------- 1 user1 user1 26084 Oct 26 21:14 dovecot.index.log -rw------- 1 user1 user1 744 Oct 22 18:32 dovecot.list.index -rw------- 1 user1 user1 7232 Oct 29 00:12 dovecot.list.index.log -rw------- 1 user1 user1 96 Nov 13 2023 dovecot.mailbox.log drwx------ 2 user1 user1 4096 Oct 26 20:15 new -rw------- 1 user1 user1 33 Nov 13 2023 subscriptions drwx------ 2 user1 user1 4096 Oct 25 21:32 tmp ==== Output of "ls -l /var/mail" follows. total 288 -rw------- 1 user1 mail 35086 Oct 29 18:02 user1 -rw------- 1 daemon mail 36244 Oct 28 12:32 daemon -rw------- 1 debian mail 36223 Oct 26 21:32 debian -rw------- 1 dovecot mail 36248 Oct 28 19:18 dovecot -rw------- 1 games mail 36223 Oct 27 12:38 games -rw------- 1 news mail 36237 Oct 27 13:52 news -rw------- 1 nobody mail 36266 Oct 27 15:31 nobody -rw------- 1 sshd mail 36195 Oct 29 12:36 sshd

3 4

Aggregating auth/proxy events
by matus.vlcek＠gmail.com 28 Oct '24

28 Oct '24

Hi, I'm working on aggregating event logs and trying to correlate all related events using session IDs. However, I’m struggling with some events as they're missing the session ID. 1. proxy_session_* events lack a session ID field, making it difficult to pair them with auth_request_* events. 2. when using dovecot as sasl for postfix with a unix listener, both auth_request_* and auth_passdb_request_* events are missing the session ID too. Example of the fields object for auth_request_finished when using smtp. It's missing multiple common fields, but session ID is, imho, the most important one. https://doc.dovecot.org/2.3/admin_manual/list_of_events/#id1 ``` categories: [ "auth", "service:auth" ] "fields": { "translated_user": "alex", "mechanism": "LOGIN", "real_remote_ip": "X.X.X.X", "user": "alex", "transport": "insecure", "local_ip": "X.X.X.X", "remote_ip": "X.X.X.X", "real_local_ip": "X.X.X.X", "policy_result": "ok", "service": "smtp", "duration": 96764, "original_user": "alex" }, ``` Would it be possible to add session ID fields to these logs? Alternatively, is there another method to correlate all the session related logs? Thanks, Matus Dovecot v. 2.3.21

1 0

LMTP rejecting aliased emails
by Nick Howitt 27 Oct '24

27 Oct '24

Hi, I am pretty new to Dovecot and totally new to LMTP. I have normal delivery working but I am struggling with aliases. In my mail queue I am seeing things like: -Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient------- E0F617055DB 720 Sat Oct 26 14:50:24 clamav(a)mydomain.com (host mail.mydomain.com[private/dovecot-lmtp] said: 451 4.3.0 <clamav(a)mydomain.com> Temporary internal error (in reply to end of DATA command)) clamav(a)mydomain.com But in my /etc/aliases, I am aliasing clamav to nick and nick(a)mydomain.com is a valid mail box that can receive normal mail. The corresponding line in the mail log is: 2024-10-26T14:55:56.385500+01:00 mail-www dovecot: lmtp(1371485): Error: lmtp-server: conn unix:pid=1371484,uid=102 [1]: rcpt clamav(a)mydomain.com: Failed to initialize user: Mail access for users with UID 107 not permitted (see first_valid_uid in config file, uid from userdb lookup). How do I get round this issue? I can drop the minimum UID to 0, but then all system users are deemed valid for mail which is not true. None of them are. Thanks, Nick

5 30

sieve crashes when two optional include scripts are missing
by Michal Hlavinka 27 Oct '24

27 Oct '24

Hi, we've found an issue with sieve plugin. When script includes two missing optional scripts, it causes crash. For reproducing the issue, script names must belong to same hash table node, so either two scripts with same name or scripts where 'hash(name) % table->size' results in same value, like missing_a and missing_aa in reproducer below. Reduced reproducer: cat >dovecot.min.conf <<EOF mail_location = maildir:~/Maildir plugin { sieve = file:/tmp;active=/tmp/dovecot.sieve } EOF cat >reproducer.sieve <<EOF require "include"; include :personal :optional "missing_a"; include :personal :optional "missing_aa"; EOF echo -n > empty sieve-test -c dovecot.min.conf reproducer.sieve empty any test mail would do, but empty file is enough for reproducer # return sblock->id causes the crash as sblock is NULL backtrace: (gdb) bt #0 sieve_binary_block_get_id (sblock=0x0) at src/lib-sieve/sieve-binary.c:421 #1 ext_include_execute_include (renv=0x5555555bbed8, include_id=1, flags=EXT_INCLUDE_FLAG_OPTIONAL) at plugins/include/ext-include-common.c:696 #2 opc_include_execute (renv=0x5555555bbed8, address=0x5555555bbf10) at plugins/include/cmd-include.c:399 #3 sieve_interpreter_operation_execute (interp=0x5555555bbe88) at src/lib-sieve/sieve-interpreter.c:901 #4 sieve_interpreter_continue (interp=0x5555555bbe88, interrupted=0x0) at src/lib-sieve/sieve-interpreter.c:959 #5 sieve_interpreter_start (interp=0x5555555bbe88, result=0x5555555b9230, interrupted=0x0) at src/lib-sieve/sieve-interpreter.c:1049 #6 sieve_interpreter_run (interp=0x5555555bbe88, result=0x5555555b9230) at src/lib-sieve/sieve-interpreter.c:1057 #7 sieve_run (sbin=0x55555558ee18, result=0x5555555b9230, eenv=0x7fffffffe890, ehandler=0x55555558c338) at src/lib-sieve/sieve.c:357 #8 sieve_test (sbin=0x55555558ee18, msgdata=0x7fffffffe9f0, senv=0x7fffffffea30, ehandler=0x55555558c338, stream=0x5555555b2cd0, flags=SIEVE_EXECUTE_FLAG_LOG_RESULT) at src/lib-sieve/sieve.c:598 #9 main (argc=5, argv=0x555555567a10) at src/sieve-tools/sieve-test.c:391 issue seems to be caused by lib-sieve/plugins/include/ext-include-common.c: ext_include_generate_include on first pass (script) the check for script already compiled into binary at 529: included = ext_include_binary_script_get_include_info(binctx, script); returns NULL, so code goes through 'else' block where it hits sieve_script_is_open(script) check. It includes script with NULL block, returns 0 so caller cmd_include_generate does not emit anything. On second pass the above 'included' check returns first missing script, it goes through true block where it just checks flags and returns non-zero, so caller this time goes through the emit code block and the previously included NULL sblock gets referenced causing crash later. Note: despite scripts have different name, they pass the "same script" check because sieve_file_script_equals compares 0==0 dev & inode numbers as scripts do not exist. This is why scripts do not have to have same names. Side effect of this is that as missing_a and missing_aa are treated like the same script, only first one is linked in compiled svbin. Which means that if missing_aa reappears later, svbin won't get recompiled. Another manifestation of the issue is when included missing_a script is present when main script is compiled and later missina_a is removed again. During execution, script is not recompiled and it aborts for hash table dupe check: sieve_binary_open->ext_include_binary_script_include->hash_table_insert There are several ways how to solve this. I've tried a few, but there were other corner cases that appeared. One tried way was for example ext_include_generate_include in the 'if (included)' replicate the check sieve_script_is_open(...) from else block, just check flags, no include and set result to 0. Another way to solve this is to return from ext_include_execute_include early if sblock is NULL just before it tries to derefernce it, similarly as it does if it fails 'once' check. Same for dumping in opc_include_dump. Whilst the first approach seems a bit better, it won't stop crashing in existing environments as it won't trigger svbin recompilation and svbin would fail. This means that the second soultion is sort of needed anyway. This still won't solve the problem with different missing scripts as only first one would be able to trigger recompilation when file becomes available. Just including both in the mentioned function won't work either as they would still be evaluated as same and hash table anti-dupe check would trigger abort. So some changes in script comparison seem needed anyway. This is what I've used in my approach. Return early from ext_include_execute_include and opc_include_dump if sblock is NULL and change sieve_file_script_equals to compare also script->location for missing scripts (when inode is 0). Let me know if you need more information. Cheers, Michal Hlavinka

2 1

Ignore specific subfolders within Maildir?
by Ralph Seichter 25 Oct '24

25 Oct '24

Consider Dovecot with "mail_location = maildir:~/.maildir". Is it possible to configure Dovecot to completely ignore directories like ~/.maildir/.foo ? The subdirectory .foo is created by third party software and the name cannot be changed. Because of the leading dot, Dovecot interprets ~/.maildir/.foo as IMAP folder /foo by default, creates the typical subdirectory structure with cur/new/tmp, and exposes ~/.maildir/.foo to IMAP clients. Not being able to change the name or location of .foo, I would like to tell Dovecot to ignore .foo's presence altogether. So far I have not found documentation about how that can be done (or if it can). Helpful pointers are appreciated. -Ralph

3 7

Re: "client_id" in lua script
by Michael Slusarz 25 Oct '24

25 Oct '24

> On 10/25/2024 9:47 AM MDT ecdlguy--- via dovecot <dovecot(a)dovecot.org> wrote: > > Hi, > > I'm trying to block specific MUAs, like e.g. Outlook-App for iOS and Android or Xiaomi Mail / MiMail using a lua script. > While implementing this, I noticed that "client_id" is always nil in the lua script or I am doing something wrong. > This is part of the postfix config: A note that this is explicitly not a supported IMAP ID use-case. Per https://www.rfc-editor.org/rfc/rfc2971.html#section-3: Servers MUST NOT deny access to or refuse service for a client based on information from the ID command. Clients MUST NOT refuse to operate or limit their operation with a server based on the ID response. Client blocking is much better handled via other mechanisms, that may incorporate ID information as a part of the decision making process but does not make a determinative decision based on that string. michael

1 0

"client_id" in lua script
by ecdlguy＠gmail.com 25 Oct '24

25 Oct '24

Hi, I'm trying to block specific MUAs, like e.g. Outlook-App for iOS and Android or Xiaomi Mail / MiMail using a lua script. While implementing this, I noticed that "client_id" is always nil in the lua script or I am doing something wrong. This is part of the postfix config: imap_id_retain = yes imap_id_log = * passdb { driver = lua args = file=/etc/dovecot/lua/badimapid.lua blocking=yes } Logging (imap_id_log = *) works, the dovecot log has entries like: imap(user@domain)<226><pWFZx9siRt+CUwMp>: ID sent: name=Thunderbird, version=115.15.0 Here is the content of the lua-script file: function auth_passdb_lookup(req) req.log_info('badimapid info: user="'..req.user..'", client_id="'..req.client_id..'"') return dovecot.auth.PASSDB_RESULT_NEXT, "" end function script_init() return 0 end function script_deinit() end In principle, "req.client_id" should contain the client id string according to https://doc.dovecot.org/2.3/configuration_manual/authentication/lua_based_a… However, dovecot log reads: auth-worker(163): Error: conn unix:auth-worker (pid=162,uid=401): auth-worker<27>: lua(user@domain): db-lua: lua_pcall(auth_passdb_lookup, 1, 2) failed: /etc/dovecot/lua/badimapid.lua:2: attempt to concatenate a nil value (field 'client_id') Why is client_id nil? Thanks, Thorsten

1 0

BUG: logging bug creeped back in pop3-login
by Laura Steynes 25 Oct '24

25 Oct '24

Oct 20 14:23:29 pop3-login: Info: Disconnected: Disconnected: Too many bad commands (no auth attempts in 0 secs): use....... Double logging of Disconnected

2 2

fixing sieve (?)
by Stefan G. Weichinger 24 Oct '24

24 Oct '24

Yesterday I was told that at a customer the vacation scripts don't work anymore. Looking closer it seems the whole sieve-funtionality is missing (eg. filtering mails into folders). I am in the process of analysing, and don't have a clue yet. Editing scripts via managesieved works (for example from roundcube). The scripts are in the right place, afai understand. I compare this with another setup where things work and don't see the difference. All this worked perfectly until maybe summer. This is Debian 12.7 bookworm, the dovecot repo still points to bullseye. # cat /etc/apt/sources.list.d/dovecot.list deb [arch=amd64 signed-by=/usr/share/keyrings/dovecot.gpg] https://repo.dovecot.org/ce-2.3-latest/debian/bullseye bullseye main There is rspamd in place with postfix if that is somehow relevant. The installation is on premise and has maybe 60-100 mailboxes in now 2 domains. That was the largest change this year: add a so-called "alias domain" in postfixadmin: mailbox(a)new.domain points to mailbox(a)old.domain I assume the sieve scripts should simply be executed as before. The basics of mailing etc work fine! I'd appreciate any pointers. trying to enable debug logs etc, for example I don't get anything into "sieve_user_log" --- # 2.3.21.1 (d492236fa0): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.21.1 (49005e73) # OS: Linux 6.1.0-26-amd64 x86_64 Debian 12.7 # Hostname: mail2.my.tld auth_cache_size = 4 M default_process_limit = 300 listen = * mail_home = /mnt/mailboxes/%d/%u mail_location = maildir:~ mail_plugins = " notify quota acl" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapflags imapsieve vnd.dovecot.imapsieve namespace { inbox = yes location = prefix = separator = / type = private } namespace { location = maildir:/home/vmail/oeffentlich prefix = Oeffentlich/ separator = / subscriptions = yes type = public } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { acl = vfile:/etc/dovecot/dovecot-acl:cache_secs=300 acl_shared_dict = file:/var/lib/dovecot/shared-mailboxes imapsieve_mailbox1_before = file:/etc/dovecot/sieve/global/learn-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Spam imapsieve_mailbox2_before = file:/etc/dovecot/sieve/global/learn-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Spam imapsieve_mailbox2_name = * sieve = /home/vmail/%d/%u/sieve/.dovecot.sieve sieve_before = /etc/dovecot/sieve/global/spam-global.sieve sieve_dir = /home/vmail/%d/%u/sieve/scripts/ sieve_extensions = +imapflags sieve_global_extensions = +vnd.dovecot.pipe sieve_pipe_bin_dir = /usr/bin sieve_plugins = sieve_imapsieve sieve_extprograms sieve_trace_dir = /tmp/sieve_trace/ sieve_trace_level = commands sieve_user_log = /home/vmail/%d/%u/sieve/sieve_user.log } protocols = imap sieve lmtp service auth { client_limit = 1200 unix_listener auth-client { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0777 } user = root } service imap-login { process_min_avail = 10 } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } user = vmail } service managesieve-login { inet_listener sieve { port = 4190 } } ssl = required ssl_ca = </etc/letsencrypt/pfsense/cloud_imap_mail_smtp_LE_cert.ca ssl_cert = </etc/letsencrypt/pfsense/cloud_imap_mail_smtp_LE_cert.fullchain ssl_cipher_list = ALL:HIGH:!SSLv2:!MEDIUM:!LOW:!EXP:!RC4:!MD5:!aNULL:@STRENGTH ssl_key = # hidden, use -P to show it ssl_key_password = # hidden, use -P to show it userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol lmtp { mail_debug = yes mail_plugins = sieve postmaster_address = logs(a)my.tld } protocol imap { mail_max_userip_connections = 20 mail_plugins = " notify quota acl imap_sieve imap_acl" } protocol sieve { managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags }

4 14

Issue with logrotate and dovecot
by jim＠themailshack.com 24 Oct '24

24 Oct '24

Something new here has cropped up, no changes to configs for some time. I've had my dovecot using the default /var/log/dovecot.log location for logging, logrotate used to back this up weekly and logging would continue using this same file. Now when logrotate runs, it correctly backs up the log but then creates a new dovecot.log-yyyymmdd file and dovecot starts logging to that. I'm at a loss as to why this is happening. My postfix and other processes are still using their correct log files, so it seems related only to dovecot. From dovecot/conf.d/10-logging.conf: # Log file to use for error messages. "syslog" logs to syslog, # /dev/stderr logs to stderr. #log_path = syslog log_path = /var/log/dovecot.log From /etc/logrotate.d/dovecot /var/log/dovecot.log { weekly rotate 4 missingok notifempty compress delaycompress sharedscripts postrotate doveadm log reopen endscript } Looks like something happened mid last month but other than periodic software updates nothing has changed for a while here. If I reboot the system, dovecot resumes logging to /var/log/dovecot.log, but as soon as logrotate runs (I did a --force to test) it logs to the new file again. Hoping this may sound familiar to someone on the list.

1 1

Struggling to get sieve running
by nick＠howitts.co.uk 23 Oct '24

23 Oct '24

Hi, I am new to Dovecot and Debian, but I seem to have got Dovecot up and running with local delivery and then switched to LMTP. I am running Debian 12.7 and Webmin 2.202 to try and get things running, but I've had to tweak files. Also Webmin did not install dovecot-lmtpd, dovecot-sieve or dovecot-managesieved, so I did that manually. I have tried following the configuration guide from Dovecot (but there seems to be little there) and other sources I've found on the internet, but there is nothing I have found to get sieve listening on port 4190 when checked with ss. My Dovecot config from `dovecot -n` is: ``` # 2.3.19.1 (9b53102964): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.19 (4eae2f79) # OS: Linux 6.1.0-26-amd64 x86_64 Debian 12.7 # Hostname: my.fqdn auth_username_format = %Ln disable_plaintext_auth = no first_valid_uid = 1000 mail_location = maildir:~/Maildir mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } plugin { sieve = file:~/sieve;active=~/.dovecot.sieve } protocols = imap lmtp service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl_cert = </etc/letsencrypt/live/mydomain.com/fullchain.pem ssl_client_ca_dir = /etc/ssl/certs ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it userdb { driver = passwd } protocol lmtp { mail_plugins = " sieve" postmaster_address = nick(a)mydomain.com } protocol lda { mail_plugins = " sieve" } ``` Dovecot packages installed from the Debian repos are: ``` dovecot-core/stable,stable-security,now 1:2.3.19.1+dfsg1-2.1+deb12u1 amd64 [installed] dovecot-imapd/stable,stable-security,now 1:2.3.19.1+dfsg1-2.1+deb12u1 amd64 [installed] dovecot-lmtpd/stable,stable-security,now 1:2.3.19.1+dfsg1-2.1+deb12u1 amd64 [installed] dovecot-managesieved/stable,stable-security,now 1:2.3.19.1+dfsg1-2.1+deb12u1 amd64 [installed] dovecot-pop3d/stable,stable-security,now 1:2.3.19.1+dfsg1-2.1+deb12u1 amd64 [installed] dovecot-sieve/stable,stable-security,now 1:2.3.19.1+dfsg1-2.1+deb12u1 amd64 [installed] ``` Ultimately I intend to run manage sieve from Roundcube which I have already got running, or I may try a Thunderbird addon. Can anyone give me some pointers, please?

3 2

Missing IMAP folders after upgrading from 2.3.17 to 2.3.21.1
by Frank Kirschner 23 Oct '24

23 Oct '24

Hi, I have upgraded from 2.3.17 to 2.3.21.1. mail_location = maildir Now in some mailboxes are IMAP folder in subdir of INBOX missing. When I do a 'ls -la' in filesystem, I see the subfolder like other folder with identical owner an permissions. But when I do doveadm mailbox list -u [user] the IMAP folder is not displayed. So I have deleted all files in /opt/dovecot/[hash]/[user] because I use INDEX=/opt/dovecot/%2.256Nu/%u:ITERINDEX The restart dovecot and re-login the Imap client. All IMAP folders are rebuilt but the same folders like before are still missing. Any ideas please? thanks, Frank doveconf -n # 2.3.21.1 (d492236fa0): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.21.1 (49005e73) # OS: Linux 5.15.149-1-pve x86_64 AlmaLinux release 8.10 (Cerulean Leopard) # Hostname: *** auth_verbose = yes disable_plaintext_auth = no doveadm_password = # hidden, use -P to show it first_valid_uid = 1000 imap_id_send = lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lmtp_save_to_detail_mailbox = yes log_path = /var/log/dovecot.log login_greeting = IMAP ready. mail_fsync = always mail_full_filesystem_access = yes mail_gid = 1000 mail_home = /srv/mail/mail_storage2/%d/%n mail_location = maildir:~/mail:VOLATILEDIR=/dev/shm/dovecot/%2.256Nu/%u:INDEX=/opt/dovecot/%2.256Nu/%u:ITERINDEX mail_plugins = " notify replication" mail_privileged_group = vpostfix mail_uid = 1000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vacation-seconds mbox_write_locks = fcntl mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { special_use = \Trash } prefix = } passdb { args = scheme=CRYPT username_format=%u /etc/dovecot/users driver = passwd-file } plugin { recipient_delimiter = + replication_full_sync_interval = 1 hour sieve = file:~/sieve;active=~/.dovecot.sieve sieve_before = /etc/dovecot/spam-global.sieve sieve_extensions = +vacation-seconds sieve_vacation_default_period = 1d sieve_vacation_max_period = 30d sieve_vacation_min_period = 0 sieve_vacation_use_original_recipient = yes } postmaster_address = ***** protocols = imap pop3 lmtp sieve service aggregator { fifo_listener replication-notify-fifo { mode = 0666 user = vpostfix } unix_listener replication-notify { mode = 0666 user = vpostfix } } service auth { inet_listener { address = 192.168.130.192 port = 3659 } unix_listener /var/spool/postfix/private/auth { group = vpostfix mode = 0666 user = vpostfix } unix_listener auth-userdb { group = vpostfix mode = 0600 user = vpostfix } } service config { unix_listener config { user = vpostfix } } service doveadm { inet_listener { port = 4711 } user = vpostfix } service imap-login { process_min_avail = 1 service_count = 1 } service lmtp { inet_listener lmtp { address = 192.168.130.192 port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 user = vpostfix } } ssl_alt_cert = </etc/alt/fullchain.pem ssl_alt_key = # hidden, use -P to show it ssl_cert = </etc/fullchain.pem ssl_cipher_list = PROFILE=SYSTEM ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } protocol lmtp { mail_plugins = " notify replication sieve" } protocol lda { mail_plugins = " notify replication sieve" } protocol imap { mail_max_userip_connections = 10 mail_plugins = " notify replication quota imap_quota" }

3 5

disable sieve header
by Marc 22 Oct '24

22 Oct '24

Is it possible to disable emitting the sieve header? X-Sieve: Pigeonhole Sieve

1 0

Uppercase username emails are rejected
by lua8ds＠proton.me 20 Oct '24

20 Oct '24

When a sender writes my email address with my username uppercase, e.g. USERNAME(a)name.com, in the to: field of their MUA, my mail server rejects that email. /var/log/mail.log prints: <USERNAME(a)redacted.com>: host mail.redacted.com[private/dovecot-lmtp] said: 550 5.1.1 > <USERNAME(a)redacted.com> User doesn't exist: USERNAME(a)redacted.com (in reply to RCPT TO > command) In the manual, I found that: auth_username_format Default: %Lu Formatting applied to username before querying the auth database. You can use the standard variables here. Examples: %Lu Lowercases the username [...] My current setting was not the default; I had: auth_username_format = %n So I updated that setting to: auth_username_format = %Lu expecting that %Lu would lowercase the username - and that my problem would be fixed. It does not though. Updating this setting not only prompts my email server to still reject USERNAME(a)redacted.com, but now also rejects (lowercase username) username(a)redacted.com (which my server had no issue receiving beforehand). So I reverted auth_username_format to: auth_username_format = %n Emails sent to username(a)redacted.com land in my mailbox again - but emails sent to USERNAME(a)redacted.com still don't. What can I try to troubleshoot? Which config file shall I share with you?

10 22

vsz_limit status
by Joan Moreau 19 Oct '24

19 Oct '24

Hi How to get (programatically, c++) the current usage of memory, under the limit of vsz_limit ? https://doc.dovecot.org/2.3/configuration_manual/service_configuration/#ser… Thank you

2 15

replication Error with wrong file lock
by Frank Kirschner 18 Oct '24

18 Oct '24

Hi there, I have setup a replication between two dovecot servers. It seems working: # doveadm replicator status '*' && doveadm replicator dsync-status && doveadm replicator status username priority fast sync full sync success sync failed ******************** none 00:59:22 18:50:17 18:21:25 - ********************low 01:54:26 18:57:58 - y ********************none 21:42:55 21:47:55 21:36:24 - ******************** none 21:14:57 21:51:07 21:33:13 - ********************none 21:13:52 21:51:04 21:17:57 - ********************none 00:04:23 01:29:24 - y ********************none 02:34:15 21:56:23 02:34:15 - ******************** none 00:03:56 18:55:17 - y ********************none 01:18:42 01:18:42 19:18:46 - ********************none 21:20:04 21:24:46 21:43:49 - ********************none 00:05:13 00:09:36 21:47:55 - ********************none 00:16:50 18:55:17 18:45:57 - ********************none 00:04:23 18:55:17 38:07:24 y username type status - Not connected - Not connected - Not connected ********************normal Waiting for dsync to finish - Not connected Queued 'sync' requests 0 Queued 'high' requests 0 Queued 'low' requests 1 Queued 'failed' requests 0 Queued 'full resync' requests 0 Waiting 'failed' requests 3 Total number of known users 13 But on the one server, I found this errors repeating and this users are at the list above marked as failed: Oct 18 09:41:08 dsync-local(1(a)tld.de): Error: Couldn't lock /srv/mail/mail_storage/tld.de/1/.dovecot-sync.lock: fcntl(/srv/mail/mail_storage/tld.de/1/.dovecot-sync.lock, write-lock, F_SETLKW) locking failed: Timed out after 30 seconds (WRITE lock held by pid 71613) The directory shows: # ls -la /srv/mail/mail_storage/celebrate.de/1/ | grep '\.dove' drwxrwxrwx 5 vpostfix vpostfix 4096 Oct 18 08:55 .dovecot -rw------- 2 vpostfix vpostfix 0 Oct 18 09:37 .dovecot-sync.lock -rwxrwxrwx 1 vpostfix vpostfix 912 Mar 20 2023 .dovecot.sieve.log -rwxrwxrwx 1 vpostfix vpostfix 275 Oct 11 00:00 .dovecot.svbin So it seems, that there are more processes want accessing same locking file. But normally this and other files should not exist there: # ls -la /srv/mail/mail_storage/celebrate.de/fk/ | grep '\.index' -rw-rw-rw- 1 vpostfix vpostfix 194008 Oct 17 12:26 dovecot.index -rwxrwxrwx 1 vpostfix vpostfix 16890796 Oct 17 14:20 dovecot.index.cache -rw-rw-rw- 1 vpostfix vpostfix 7420 Oct 17 14:04 dovecot.index.log -rwxrwxrwx 1 vpostfix vpostfix 32824 Oct 17 11:46 dovecot.index.log.2 -rwxrwxrwx 1 vpostfix vpostfix 5752 Oct 9 05:14 dovecot.list.index -rwxrwxrwx 1 vpostfix vpostfix 7556 Oct 9 09:32 dovecot.list.index.log In my config, I have set: mail_location = maildir:~:VOLATILEDIR=/dev/shm/dovecot/%2.256Nu/%u:INDEX=/opt/dovecot/%2.256Nu/%u:ITERINDEX But below /dev/shm/dovecot and /opt/dovecot, directories and files are generated too Following my config and hoping for some useful hints: # dovecot -n # 2.2.36 (1f10bfa63): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.24 (124e06aa) # OS: Linux 5.15.149-1-pve x86_64 CentOS Linux release 7.9.2009 (Core) # Hostname: host.tld.de disable_plaintext_auth = no doveadm_password = # hidden, use -P to show it first_valid_uid = 1000 imap_id_send = lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lmtp_save_to_detail_mailbox = yes log_path = /var/log/dovecot.log mail_fsync = always mail_full_filesystem_access = yes mail_gid = 1000 mail_home = /srv/mail/mail_storage/%d/%n mail_location = maildir:~:VOLATILEDIR=/dev/shm/dovecot/%2.256Nu/%u:INDEX=/opt/dovecot/%2.256Nu/%u:ITERINDEX mail_plugins = " notify replication" mail_privileged_group = vpostfix mail_uid = 1000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vacation-seconds mbox_write_locks = fcntl mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { special_use = \Trash } prefix = } passdb { args = scheme=CRYPT username_format=%u /etc/dovecot/users driver = passwd-file } plugin { mail_replica = tcp:192.168.130.192:4711 recipient_delimiter = + replication_full_sync_interval = 1 hour replication_sync_timeout = 10 sieve = file:~/sieve;active=~/.dovecot.sieve sieve_before = /etc/dovecot/spam-global.sieve sieve_extensions = +vacation-seconds sieve_vacation_default_period = 1d sieve_vacation_max_period = 30d sieve_vacation_min_period = 0 sieve_vacation_use_original_recipient = yes } protocols = imap pop3 lmtp sieve service aggregator { fifo_listener replication-notify-fifo { mode = 0666 user = vpostfix } unix_listener replication-notify { mode = 0666 user = vpostfix } } service auth { inet_listener { address = 192.168.130.191 port = 3659 } unix_listener /var/spool/postfix/private/auth { group = vpostfix mode = 0666 user = vpostfix } unix_listener auth-userdb { group = vpostfix mode = 0600 user = vpostfix } } service config { unix_listener config { user = vpostfix } } service doveadm { inet_listener { port = 4711 } user = vpostfix } service imap-login { process_min_avail = 1 service_count = 1 } service lmtp { inet_listener lmtp { address = 192.168.130.191 port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 user = vpostfix } } ssl_cert = </opt/fullchain.pem ssl_cipher_list = ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA:!AES256-SHA:AES:CAMELLIA:!CAMELLIA128-SHA:!DHE-RSA-CAMELLIA128-SHA:!CAMELLIA256-SHA:!DHE-RSA-CAMELLIA256-SHA ssl_key = # hidden, use -P to show it ssl_prefer_server_ciphers = yes userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } protocol lmtp { mail_plugins = " notify replication sieve" } protocol lda { mail_plugins = " notify replication sieve" } protocol imap { mail_max_userip_connections = 10 mail_plugins = " notify replication quota imap_quota" }

2 2

Sieve script error when quota is full
by Kosti 18 Oct '24

18 Oct '24

Hello. My sieve script gives an error; "failed with unsuccessful implicit keep". Here is maillog file output; (Yes my user does has quota exceeded, but is this the issue for the sieve script and is it normal for the script give such output?) postfix dovecot: lda(me(a)mydomain.com)<50709><iEd4O9YLDGcVxgAA/dJgOw>: sieve: msgid=<x(a)jol.mysite.com>: failed to store into mailbox 'INBOX': Quota exceeded (mailbox for user is full) postfix dovecot: lda(me(a)mydomain.com)<50709><iEd4O9YLDGcVxgAA/dJgOw>: sieve: Execution of script /etc/dovecot/sieve/default.sieve failed with unsuccessful implicit keep postfix dovecot: lda(me(a)mydomain.com)<50709><iEd4O9YLDGcVxgAA/dJgOw>: msgid=<x(a)jol.mysite.com>: rejected: Quota exceeded (mailbox for user is full) And /etc/dovecot/sieve/default.sieve file contains: require ["fileinto"]; if header :contains "X-Spam" "Yes" { fileinto "Junk"; stop; } Any idea would be much appreciated. Best regards.

1 0

Piegeonhole and PATH variable
by Julien Salort 18 Oct '24

18 Oct '24

Hello, I have a dovecot-sieve rule that has been working fine for years which calls sa-learn whenever a message is moved from or to the Junk folder. Recently, but I don't know when it started exactly, this no longer works. I get the following error message in mail.log: dovecot: imap: Error: Use of uninitialized value $ENV{"PATH"} in split at /usr/lib/x86_64-linux-gnu/perl-base/File/Spec/Unix.pm line 136. Error: program exec:/usr/lib/dovecot/sieve-pipe/sa-learn-spam.sh (2526990): Forcibly terminated with signal 15 Error: sieve: failed to pipe message to program `sa-learn-spam.sh': refer to server log for more information. [2024-10-16 10:16:51] Error: sieve: Execution of script /usr/lib/dovecot/sieve-pipe/report-spam.sieve failed The content of report-spam.sieve is require ["vnd.dovecot.pipe", "copy", "imapsieve", "environment", "variables"]; if environment :matches "imap.user" "*" { set "username" "${1}"; } pipe :copy "sa-learn-spam.sh" [ "${username}" ]; So my guess is that one of the require on the first line triggers this Unix.pm, and it fails because somehow the PATH variable is not set in this context. However, I am at a complete loss to determine how to change the environment variable in the context of dovecot-sieve. And also, I am not sure why this would be required. Does somebody know how to fix this problem, or alternatively point me to the relevant part in the documentation? Thanks, Julien

2 2