- dovecot - dovecot.org

mail_attachment_detection_options not working
by Alessio Cecchi 09 Mar '18

09 Mar '18

Hi, I enabled mail_attachment_detection_options on dovecot 2.2.34, in 10-mail.conf I have: mail_attachment_detection_options = add-flags-on-save but when an email is delivered in mailbox (Maildir) via LMTP no flag (HasNoAttachment or HasAttachment) was added. In dovecot-keywords file I have: 0 $HasNoAttachment 1 NonJunk 2 $HasAttachment so I thinks that the feature was eanbled but is unable. What am I doing wrong? Thanks -- Alessio Cecchi Postmaster @ http://www.qboxmail.it https://www.linkedin.com/in/alessice

2 1

Dovecot LMTP rejects all users as non-existent
by Alexander Harm 09 Mar '18

09 Mar '18

I'm running Dovecot 2.2.27 (c0f36b0) on Debian Stretch and I'm having some trouble with LMTP delivery from Postfix to Dovecot. The message in the logs is Mar 9 09:21:19 mail postfix/smtpd[3295]: NOQUEUE: reject: RCPT from some.mail.server[1.2.3.4]: 450 4.1.1 <alias(a)my.domain>: Recipient address rejected: unverified address: host my.mail.server[private/dovecot-lmtp] said: 550 5.1.1 <user(a)my.domain> User doesn't exist: user(a)my.domain (in reply to RCPT TO command); from=<someone(a)another.domain> to=<alias(a)my.domain> proto=ESMTP helo=<some.mail.server> However, testing my installation with doveadm works fine: doveadm user -u user(a)my.domain userdb: user(a)my.domain user : user(a)my.domain uid : 5000 gid : 5000 home : /srv/mail/vhosts/my.domain/user doveadm auth test user(a)my.domain passdb: user(a)my.domain auth succeeded I'm using a static userdb and a ldap passdb: # /etc/dovecot/conf.d/auth-ldap.conf.ext passdb { driver = ldap args = /etc/dovecot/dovecot-ldap.conf.ext } userdb { driver = static args = uid=vmail gid=vmail home=/srv/mail/vhosts/%d/%n } And my LDAP config reads like this # /etc/dovecot/dovecot-ldap.conf.ext uris = ldap://127.0.0.1 dn = uid=dovecot,ou=services,dc=my,dc=domain dnpass = ********* auth_bind = yes auth_bind_userdn = cn=%u,ou=mail,dc=my,dc=domain ldap_version = 3 base = ou=mail,dc=querco,dc=org deref = never scope = onelevel user_attrs = user_filter = (&(objectclass=PostfixBookMailAccount)(mailEnabled=TRUE)(cn=%u)) pass_attrs = cn=user,userPassword=password pass_filter = (&(objectclass=PostfixBookMailAccount)(mailEnabled=TRUE)(cn=%u)) iterate_attrs = cn=user iterate_filter = (&(objectclass=PostfixBookMailAccount)(mailEnabled=TRUE)) Sending the mail straight to user(a)my.domain works. Sending it to another alias works as well. Is there some caching problem and if so how to delete the cache (reboot didn't work)? Any pointers are highly appreciated.

1 0

Sieve filter doesn't respect mailbox separator
by Konstantinos Tsakiltzidis 08 Mar '18

08 Mar '18

namespace separator is '.', this sieve script incorrectly tries to put the mail inside a mailbox rather that beside it, for example if the mailbox is named 'example', the mail will be put in the path 'example/.Spam' instead of 'example.Spam' require ["fileinto"]; if header :contains "X-Spam" "yes" { fileinto "Spam"; } # 2.2.33.2 (d6601f4ec): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.21 (92477967) # OS: Linux 4.9.0-6-amd64 x86_64 Debian 9.1 ext4 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_debug = yes mail_location = maildir:/var/vmail/%d/%n managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = . subscriptions = yes type = private } namespace modulus { list = children location = maildir:/var/vmail/%d/Public:INDEXPVT=~/public/indexes mailbox admin { auto = subscribe } mailbox support { auto = subscribe } mailbox telecoms { auto = subscribe } prefix = Public. separator = . subscriptions = yes type = public } passdb { driver = pam } plugin { acl = vfile mail_log_events = flag_change mail_log_fields = box flags uid sieve = ~/dovecot.sieve sieve_before = /var/vmail/global.sieve sieve_dir = ~/sieve sieve_global_dir = /var/vmail/sieve } protocols = " imap lmtp sieve lmtp" service auth { unix_listener /var/spool/postfix/private/auth { group = mail mode = 0666 user = postfix } unix_listener auth-userdb { group = mail mode = 0666 user = vmail } } service imap-login { inet_listener imap { port = 0 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 0 service_count = 1 vsz_limit = 64 M } service managesieve { process_limit = 1024 } ssl = required ssl_cert = </etc/ssl/certs/mail.crt ssl_key = # hidden, use -P to show it userdb { driver = passwd } protocol imap { mail_max_userip_connections = 20 mail_plugins = " mail_log notify acl" passdb { args = /etc/dovecot/dovecot-ldap-users.conf.ext driver = ldap name = } userdb { args = uid=vmail gid=mail home=/var/vmail/%d/%n driver = static name = } } protocol lda { mail_plugins = " sieve acl" userdb { args = /etc/dovecot/dovecot-ldap-users.conf.ext driver = ldap name = override_fields = uid=vmail gid=mail home=/var/vmail/%d/%n } userdb { args = /etc/dovecot/dovecot-ldap-groups.conf.ext driver = ldap name = override_fields = uid=vmail gid=mail home=/var/vmail/%d/Public/.%n mail=maildir:/var/vmail/%d/Public/.%n } } protocol lmtp { mail_plugins = " sieve acl" postmaster_address = postmaster(a)modulus.gr userdb { args = /etc/dovecot/dovecot-ldap-users.conf.ext driver = ldap name = override_fields = uid=vmail gid=mail home=/var/vmail/%d/%n } userdb { args = /etc/dovecot/dovecot-ldap-groups.conf.ext driver = ldap name = override_fields = uid=vmail gid=mail home=/var/vmail/%d/Public/.%n mail=maildir:/var/vmail/%d/Public/.%n } } protocol doveadm { userdb { args = /etc/dovecot/dovecot-ldap-users.conf.ext driver = ldap name = override_fields = uid=vmail gid=mail home=/var/vmail/%d/%n } userdb { args = /etc/dovecot/dovecot-ldap-groups.conf.ext driver = ldap name = override_fields = uid=vmail gid=mail home=/var/vmail/%d/Public/.%n mail=maildir:/var/vmail/%d/Public/.%n } } protocol sieve { mail_max_userip_connections = 10 managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_line_length = 65536 passdb { args = /etc/dovecot/dovecot-ldap-users.conf.ext driver = ldap name = } userdb { args = uid=vmail gid=mail home=/var/vmail/%d/%n driver = static name = } }

2 2

Re: Authentication Problem with dovecot-2.3.0.1
by Aki Tuomi 08 Mar '18

08 Mar '18

> On 08 March 2018 at 10:00 Odhiambo Washington <odhiambo(a)gmail.com> wrote: > > > On 8 March 2018 at 10:09, Aki Tuomi <aki.tuomi(a)dovecot.fi> wrote: > > > > > > > On 07.03.2018 22:07, Odhiambo Washington wrote: > > > > I am a little confused here. > > > > I have been running 2.2.34 which I installed in /opt/dovecot2.2 > > I installed 2.3.0.1 to /opt/dovecot23 > > > > I then used config files from /opt/dovecot2.2/etc/dovecot to > > /opt/dovecot2.3/etc/dovecot and all I did was sed -i.BAK > > 's/dovecot2.2/dovecot2.3/g'. Dovecot started and was running file. > > > > Next, I manually crafted config files for 2.3.0.1 based on the example > > config files provided which diff-ing those with what I had for 2.2.34. I > > doub't if I missed something crucial during the process. > > > > 1. I realized that I cannot start 2.3.0.1 when I enable submission, since > > my Exim MTA is already using that port. This persists even if I tell the > > submission protocol to use a different port than 587. I tested 2587, but it > > would appear that 587 is hard-coded! > > > > 2. I realize that "unix_listener auth-client" service ceased to exist! > > > > 3. *I realized that while 2.2.34 runs with default_pass_scheme = > > MD5-CRYPT, 2.3.0.1 would not run with it.* > > > > 4. I have run dovecot -n from my 2.2.x installation and 2.3.x installation > > and here is the diff from the two files. > > > > I am confused why authentication is failing with dovecot-2.3.0.1 when it > > uses 2.3.x config files using MD5-CRYPT scheme while it is succeeding with > > dovecot-2.2.34 using the same. > > *Mar 07 22:30:22 auth: Info: sql(user.name(a)domain.name > > <user.name(a)domain.name>,192.168.55.97,<4CETl9dmscvAqDdh>): Requested > > DIGEST-MD5 scheme, but we have only MD5-CRYPT* > > > > Maybe the problem is elsewhere??? I need a 3rd eye to help me. > > > > For now > > > > root@gw:~wash/public_html # sdiff dovecot-2.2.txt dovecot-2.3.txt | less > > # 2.2.34 (874deae): /opt/dovecot2.2/etc/dovecot/dovecot.conf | # 2.3.0.1 > > (ffd8a29): /opt/dovecot2.3/etc/dovecot/dovecot.conf > > # OS: FreeBSD 9.3-STABLE i386 ufs # OS: > > FreeBSD 9.3-STABLE i386 ufs > > # Hostname: localhost < > > auth_cache_size = 20 M > > auth_cache_size = 20 M > > auth_master_user_separator = * > > auth_master_user_separator = * > > auth_mechanisms = plain login digest-md5 > > auth_mechanisms = plain login digest-md5 > > auth_socket_path = /var/run/dovecot/auth-userdb > > auth_socket_path = /var/run/dovecot/auth-userdb > > base_dir = /var/run/dovecot/ base_dir = > > /var/run/dovecot/ > > default_login_user = dovecot > > default_login_user = dovecot > > disable_plaintext_auth = no > > disable_plaintext_auth = no > > first_valid_gid = 0 > > first_valid_gid = 0 > > first_valid_uid = 26 > > first_valid_uid = 26 > > hostname = gw hostname = gw > > info_log_path = /var/log/dovecot.log > > info_log_path = /var/log/dovecot.log > > mail_location = maildir:/var/spool/virtual/%d/%n/Maildir:INDE > > mail_location = maildir:/var/spool/virtual/%d/%n/Maildir:INDE > > mail_plugins = " quota" < > > namespace inbox { namespace > > inbox { > > inbox = yes inbox = > > yes > > location = location > > = > > mailbox Drafts { mailbox > > Drafts { > > special_use = \Drafts > > special_use = \Drafts > > } } > > mailbox Junk { mailbox > > Junk { > > special_use = \Junk > > special_use = \Junk > > } } > > mailbox Sent { mailbox > > Sent { > > special_use = \Sent > > special_use = \Sent > > } } > > mailbox "Sent Messages" { mailbox > > "Sent Messages" { > > special_use = \Sent > > special_use = \Sent > > } } > > mailbox Trash { mailbox > > Trash { > > special_use = \Trash > > special_use = \Trash > > } } > > prefix = prefix = > > } } > > passdb { passdb { > > args = /opt/dovecot2.2/etc/dovecot/passwd.master_users.ext | args = > > /opt/dovecot2.3/etc/dovecot/passwd.master_users.ext > > driver = passwd-file driver = > > passwd-file > > master = yes master = > > yes > > pass = yes pass = > > yes > > } } > > passdb { passdb { > > args = /opt/dovecot2.2/etc/dovecot/dovecot-sql.conf.ext | args = > > /opt/dovecot2.3/etc/dovecot/dovecot-sql.conf.ext > > driver = sql driver = > > sql > > } } > > plugin { plugin { > > mail_log_fields = uid box msgid size > > mail_log_fields = uid box msgid size > > quota_rule = *:storage=1G > > quota_rule = *:storage=1G > > quota_rule2 = Trash:storage=+100M > > quota_rule2 = Trash:storage=+100M > > quota_warning = storage=95%% quota-warning 95 %u > > quota_warning = storage=95%% quota-warning 95 %u > > quota_warning2 = storage=80%% quota-warning 80 %u > > quota_warning2 = storage=80%% quota-warning 80 %u > > quota_warning3 = -storage=100%% quota-warning below %u > > quota_warning3 = -storage=100%% quota-warning below %u > > } } > > service auth { service > > auth { > > unix_listener auth-client { < > > mode = 0600 < > > user = mailnull < > > } > > < > > unix_listener auth-userdb { > > unix_listener auth-userdb { > > group = mailnull group > > = mailnull > > user = mailnull user = > > mailnull > > } } > > } } > > service quota-warning { service > > quota-warning { > > executable = script /opt/dovecot2.2/scripts/quota-warning.s | > > executable = script /opt/dovecot2.3/scripts/quota-warning.s > > unix_listener quota-warning { > > unix_listener quota-warning { > > user = mailnull user = > > mailnull > > } } > > user = dovecot user = > > dovecot > > } } > > ssl_cert = </usr/local/etc/letsencrypt/live/gw.crownkenya.com ssl_cert > > = </usr/local/etc/letsencrypt/live/gw.crownkenya.com > > ssl_key = # hidden, use -P to show it ssl_key = > > # hidden, use -P to show it > > > > > submission_max_mail_size = 4 G > > userdb { userdb { > > args = /opt/dovecot2.2/etc/dovecot/dovecot-sql.conf.ext | args = > > /opt/dovecot2.3/etc/dovecot/dovecot-sql.conf.ext > > driver = sql driver = > > sql > > } } > > protocol lda { < > > mail_plugins = quota < > > } < > > protocol imap { protocol > > imap { > > mail_max_userip_connections = 5 > > mail_max_userip_connections = 5 > > mail_plugins = " quota imap_quota" < > > } } > > protocol pop3 { | protocol > > lda { > > mail_max_userip_connections = 5 | > > mail_plugins = quota > > } } > > > > > > Maybe I am just suffering brainlock and need to debug auth further, but I > > have see a question about this auth issue already from another poster, and > > it's not been answered by anyone. > > > > > > > > > > > > Can you send 'doveconf -n' for the 2.3.0.1 instance? > > > > Also. You cannot use hashed passwords with DIGEST-MD5. MD5-CRYPT is hashed > > password scheme. > > > > To change dovecot's submission service port, use > > > > service submission-login { > > inet_listener { > > port = 2587 > > } > > } > > > > "auth-client" cannot be missing, since you can specify arbitrary listeners > > in dovecot, so https://wiki.dovecot.org/HowTo/EximAndDovecotSASL is still > > quite valid. > > > > Aki > > > > > Here is the output: > > root@gw:/opt/dovecot2.3/etc # ../bin/doveconf -n > # 2.3.0.1 (ffd8a29): /opt/dovecot2.3/etc/dovecot/dovecot.conf > # OS: FreeBSD 9.3-STABLE i386 ufs > auth_cache_size = 20 M > auth_master_user_separator = * > auth_mechanisms = plain login digest-md5 > auth_socket_path = /var/run/dovecot/auth-userdb > base_dir = /var/run/dovecot/ > default_login_user = dovecot > disable_plaintext_auth = no > first_valid_gid = 0 > first_valid_uid = 26 > hostname = gw.crownkenya.com > info_log_path = /var/log/dovecot.log > mail_location = maildir:/var/spool/virtual/%d/%n/Maildir:INDEX=MEMORY > namespace inbox { > inbox = yes > location = > mailbox Drafts { > special_use = \Drafts > } > mailbox Junk { > special_use = \Junk > } > mailbox Sent { > special_use = \Sent > } > mailbox "Sent Messages" { > special_use = \Sent > } > mailbox Trash { > special_use = \Trash > } > prefix = > } > passdb { > args = /opt/dovecot2.3/etc/dovecot/passwd.master_users.ext > driver = passwd-file > master = yes > pass = yes > } > passdb { > args = /opt/dovecot2.3/etc/dovecot/dovecot-sql.conf.ext > driver = sql > } > plugin { > mail_log_fields = uid box msgid size > quota_rule = *:storage=1G > quota_rule2 = Trash:storage=+100M > quota_warning = storage=95%% quota-warning 95 %u > quota_warning2 = storage=80%% quota-warning 80 %u > quota_warning3 = -storage=100%% quota-warning below %u > } > postmaster_address = postmaster(a)ccc.com > service auth { > unix_listener auth-userdb { > group = mailnull > user = mailnull > } > } > service quota-warning { > executable = script /opt/dovecot2.3/scripts/quota-warning.sh > unix_listener quota-warning { > user = mailnull > } > user = dovecot > } > ssl_cert = </usr/local/etc/letsencrypt/live/gw.ccc.com/fullchain.pem > ssl_key = # hidden, use -P to show it > submission_max_mail_size = 4 G > userdb { > args = /opt/dovecot2.3/etc/dovecot/dovecot-sql.conf.ext > driver = sql > } > protocol imap { > mail_max_userip_connections = 5 > } > protocol lda { > mail_plugins = quota > } > > > > My default_pass_scheme = MD5-CRYPT, but while running 2.3.0.1 there were > many authentication failures and I would see some MS OutHouse clients were > asking for DIGEST-MD5! > Right now I am back to running 2.2.33.1 (2.2.34 has been having issues > which were forcing me to reboot the server, but being a busy server it'e > been hard to find a good time to figure out why server would run out of > buffers) and everything is good! > > > About submission, I looked in 10-master.conf and modified as follows: > > service submission-login { > inet_listener submission { > port = 2587 > } > } > > .... but it would still make dovecot fail to start, because Exim is > listening on port 587. > > I see that your suggested modification is slightly different when it comes > to inet_listener line, because you do not include "submission" after > inet_listener and that is different from the format used in 10-master.conf: > > service submission-login { > inet_listener { > port = 2587 > } > } > > PS: I will look at whether I accidentally did something during my editing > which resulted in the auth-client line missing in my new configuration. > > > -- > Best regards, > Odhiambo WASHINGTON, > Nairobi,KE > +254 7 3200 0004/+254 7 2274 3223 > "Oh, the cruft." service submission-login { inet_listener submission { address = haproxy = no port = 587 reuse_port = no ssl = no } } this is the default config. We have not hard-coded any listener port. Aki

1 0

Authentication Problem with dovecot-2.3.0.1
by Odhiambo Washington 08 Mar '18

08 Mar '18

I am a little confused here. I have been running 2.2.34 which I installed in /opt/dovecot2.2 I installed 2.3.0.1 to /opt/dovecot23 I then used config files from /opt/dovecot2.2/etc/dovecot to /opt/dovecot2.3/etc/dovecot and all I did was sed -i.BAK 's/dovecot2.2/dovecot2.3/g'. Dovecot started and was running file. Next, I manually crafted config files for 2.3.0.1 based on the example config files provided which diff-ing those with what I had for 2.2.34. I doub't if I missed something crucial during the process. 1. I realized that I cannot start 2.3.0.1 when I enable submission, since my Exim MTA is already using that port. This persists even if I tell the submission protocol to use a different port than 587. I tested 2587, but it would appear that 587 is hard-coded! 2. I realize that "unix_listener auth-client" service ceased to exist! 3. *I realized that while 2.2.34 runs with default_pass_scheme = MD5-CRYPT, 2.3.0.1 would not run with it.* 4. I have run dovecot -n from my 2.2.x installation and 2.3.x installation and here is the diff from the two files. I am confused why authentication is failing with dovecot-2.3.0.1 when it uses 2.3.x config files using MD5-CRYPT scheme while it is succeeding with dovecot-2.2.34 using the same. *Mar 07 22:30:22 auth: Info: sql(user.name(a)domain.name <user.name(a)domain.name>,192.168.55.97,<4CETl9dmscvAqDdh>): Requested DIGEST-MD5 scheme, but we have only MD5-CRYPT* Maybe the problem is elsewhere??? I need a 3rd eye to help me. For now root@gw:~wash/public_html # sdiff dovecot-2.2.txt dovecot-2.3.txt | less # 2.2.34 (874deae): /opt/dovecot2.2/etc/dovecot/dovecot.conf | # 2.3.0.1 (ffd8a29): /opt/dovecot2.3/etc/dovecot/dovecot.conf # OS: FreeBSD 9.3-STABLE i386 ufs # OS: FreeBSD 9.3-STABLE i386 ufs # Hostname: localhost < auth_cache_size = 20 M auth_cache_size = 20 M auth_master_user_separator = * auth_master_user_separator = * auth_mechanisms = plain login digest-md5 auth_mechanisms = plain login digest-md5 auth_socket_path = /var/run/dovecot/auth-userdb auth_socket_path = /var/run/dovecot/auth-userdb base_dir = /var/run/dovecot/ base_dir = /var/run/dovecot/ default_login_user = dovecot default_login_user = dovecot disable_plaintext_auth = no disable_plaintext_auth = no first_valid_gid = 0 first_valid_gid = 0 first_valid_uid = 26 first_valid_uid = 26 hostname = gw hostname = gw info_log_path = /var/log/dovecot.log info_log_path = /var/log/dovecot.log mail_location = maildir:/var/spool/virtual/%d/%n/Maildir:INDE mail_location = maildir:/var/spool/virtual/%d/%n/Maildir:INDE mail_plugins = " quota" < namespace inbox { namespace inbox { inbox = yes inbox = yes location = location = mailbox Drafts { mailbox Drafts { special_use = \Drafts special_use = \Drafts } } mailbox Junk { mailbox Junk { special_use = \Junk special_use = \Junk } } mailbox Sent { mailbox Sent { special_use = \Sent special_use = \Sent } } mailbox "Sent Messages" { mailbox "Sent Messages" { special_use = \Sent special_use = \Sent } } mailbox Trash { mailbox Trash { special_use = \Trash special_use = \Trash } } prefix = prefix = } } passdb { passdb { args = /opt/dovecot2.2/etc/dovecot/passwd.master_users.ext | args = /opt/dovecot2.3/etc/dovecot/passwd.master_users.ext driver = passwd-file driver = passwd-file master = yes master = yes pass = yes pass = yes } } passdb { passdb { args = /opt/dovecot2.2/etc/dovecot/dovecot-sql.conf.ext | args = /opt/dovecot2.3/etc/dovecot/dovecot-sql.conf.ext driver = sql driver = sql } } plugin { plugin { mail_log_fields = uid box msgid size mail_log_fields = uid box msgid size quota_rule = *:storage=1G quota_rule = *:storage=1G quota_rule2 = Trash:storage=+100M quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u quota_warning2 = storage=80%% quota-warning 80 %u quota_warning3 = -storage=100%% quota-warning below %u quota_warning3 = -storage=100%% quota-warning below %u } } service auth { service auth { unix_listener auth-client { < mode = 0600 < user = mailnull < } < unix_listener auth-userdb { unix_listener auth-userdb { group = mailnull group = mailnull user = mailnull user = mailnull } } } } service quota-warning { service quota-warning { executable = script /opt/dovecot2.2/scripts/quota-warning.s | executable = script /opt/dovecot2.3/scripts/quota-warning.s unix_listener quota-warning { unix_listener quota-warning { user = mailnull user = mailnull } } user = dovecot user = dovecot } } ssl_cert = </usr/local/etc/letsencrypt/live/gw.crownkenya.com ssl_cert = </usr/local/etc/letsencrypt/live/gw.crownkenya.com ssl_key = # hidden, use -P to show it ssl_key = # hidden, use -P to show it > submission_max_mail_size = 4 G userdb { userdb { args = /opt/dovecot2.2/etc/dovecot/dovecot-sql.conf.ext | args = /opt/dovecot2.3/etc/dovecot/dovecot-sql.conf.ext driver = sql driver = sql } } protocol lda { < mail_plugins = quota < } < protocol imap { protocol imap { mail_max_userip_connections = 5 mail_max_userip_connections = 5 mail_plugins = " quota imap_quota" < } } protocol pop3 { | protocol lda { mail_max_userip_connections = 5 | mail_plugins = quota } } Maybe I am just suffering brainlock and need to debug auth further, but I have see a question about this auth issue already from another poster, and it's not been answered by anyone. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."

2 1

last login tracking
by David Mehler 08 Mar '18

08 Mar '18

Hello, I've got dovecot going with postfix and MySQL database for user and domain storage. Dovecot handles the authentication. My last login is not working, does anyone have a table example and configs? I looked at the wiki page on the lastlogin plugin but obviously what I'm doing isn't working, I keep getting message write was unsuccessful for the lastlogin ip. I'd appreciate any help. Thanks. Dave. #doveconf -n # 2.2.34 (874deae): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.22 (22940fb7) # OS: FreeBSD 11.1-RELEASE-p4 amd64 # Hostname: localhost auth_cache_size = 10 M auth_default_realm = example.com auth_mechanisms = plain login auth_realms = example.com example2.com dict { acl = proxy:mysql:/usr/local/etc/dovecot/shared-folders.conf lastlogin = proxy:mysql:/usr/local/etc/dovecot/last-login.conf sqlquota = proxy:mysql:/usr/local/etc/dovecot/quota.conf } first_valid_gid = 999 first_valid_uid = 999 hostname = mail.example.com imap_idle_notify_interval = 10 mins last_valid_gid = 999 last_valid_uid = 999 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lda_original_recipient_header = X-Original-To listen = 127.0.0.1 xxx.xxx.xxx.xxx lmtp_rcpt_check_quota = yes mail_access_groups = vmail mail_fsync = never mail_gid = vmail mail_home = /home/vmail/mailboxes/%d/%n mail_location = maildir:~/mail:LAYOUT=fs mail_plugins = acl mail_log notify quota quota_clone trash virtual welcome zlib mail_privileged_group = vmail mail_server_admin = mailto:postmaster@example.com mail_uid = vmail mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapflags notify imapsieve vnd.dovecot.imapsieve namespace { location = maildir:/home/vmail/public/:CONTROL=~/mail/public:INDEX=~/mail/public mailbox TestFolder { auto = subscribe comment = Public Folder for message sharing } prefix = Public/ separator = / subscriptions = yes type = public } namespace { list = children location = maildir:%%h/Maildir:INDEXPVT=~/Maildir/shared/%%u prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Archive { auto = no special_use = \Archive } mailbox Archives { auto = subscribe special_use = \Archive } mailbox "Deleted Messages" { auto = no autoexpunge = 30 days special_use = \Trash } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = no autoexpunge = 30 days special_use = \Junk } mailbox "Junk E-mail" { auto = no autoexpunge = 30 days special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Items" { auto = no special_use = \Sent } mailbox "Sent Messages" { auto = no special_use = \Sent } mailbox Spam { auto = subscribe autoexpunge = 30 days special_use = \Junk } mailbox Trash { auto = subscribe autoexpunge = 30 days special_use = \Trash } mailbox virtual/All { comment = All my messages special_use = \All } prefix = separator = / type = private } namespace virtual { location = virtual:/usr/local/etc/dovecot/virtual:INDEX=~/virtual:CONTROL=~/virtual prefix = virtual/ separator = / } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile:/usr/local/etc/dovecot/global-acls:cache_secs=300 acl_anyone = allow acl_globals_only = yes acl_shared_dict = proxy::acl imapsieve_mailbox1_before = file:/home/vmail/sieve/global/learn-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Spam imapsieve_mailbox2_before = file:/home/vmail/sieve/global/learn-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Spam imapsieve_mailbox2_name = * last_login_dict = proxy::lastlogin last_login_key = last-login/%u mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = count:User quota quota_clone_dict = proxy::sqlquota quota_exceeded_message = Storage quota for this account has been exceeded, please try again later. quota_grace = 10%% quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO quota_vsizes = true quota_warning = storage=100%% quota-exceeded 100 %u quota_warning2 = storage=95%% quota-warning 95 %u quota_warning3 = storage=90%% quota-warning 90 %u quota_warning4 = storage=85%% quota-warning 85 %u quota_warning5 = storage=75%% quota-warning 75 %u sieve = ~/.dovecot.sieve sieve_before = /home/vmail/sieve/before.d sieve_default = /home/vmail/sieve/default.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags sieve_global_dir = /home/vmail/sieve sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.execute sieve_max_redirects = 30 sieve_max_script_size = 1M sieve_pipe_bin_dir = /usr/local/bin sieve_plugins = sieve_imapsieve sieve_extprograms sieve_user_log = /home/vmail/sieve/sieve_error.log trash = /usr/local/etc/dovecot/trash.conf welcome_script = welcome %u welcome_wait = yes } postmaster_address = postmaster(a)example.com protocols = imap lmtp sieve sendmail_path = /usr/local/sbin/sendmail service auth-worker { user = vmail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service dict { unix_listener dict { group = vmail mode = 0660 user = vmail } user = root } service imap-login { inet_listener imap { address = 127.0.0.1 port = 143 } inet_listener imaps { address = xxx.xxx.xxx.xxx port = 993 ssl = yes } } service imap { executable = imap } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0666 user = postfix } } service managesieve-login { inet_listener sieve { address = 127.0.0.1 port = 4190 } } service quota-status { client_limit = 1 executable = quota-status -p postfix unix_listener /var/spool/postfix/private/dovecot-quota { group = postfix mode = 0660 user = postfix } } service quota-warning { executable = script /usr/local/etc/dovecot/quota-warning.sh unix_listener quota-warning { group = vmail mode = 0660 user = vmail } user = vmail } service welcome { executable = script /usr/local/etc/dovecot/welcome.sh unix_listener welcome { user = vmail } user = vmail } ssl = required ssl_cert = </usr/local/etc/ssl/acme/example.com/fullchain.pem ssl_cipher_list = ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256 ssl_dh_parameters_length = 4096 ssl_key = # hidden, use -P to show it ssl_options = no_compression ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 !TLSv1 !TLSv1.1 TLSv1.2 userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_fsync = optimized mail_plugins = acl mail_log notify quota quota_clone trash virtual welcome zlib quota sieve } protocol lda { mail_fsync = optimized mail_plugins = acl mail_log notify quota quota_clone trash virtual welcome zlib sieve virtual } protocol imap { mail_max_userip_connections = 20 mail_plugins = acl mail_log notify quota quota_clone trash virtual welcome zlib imap_acl imap_quota imap_sieve imap_zlib last_login virtual } mysql: describe virtual_users; +------------------+----------------------+------+-----+---------+----------------+ | Field | Type | Null | Key | Default | Extra | +------------------+----------------------+------+-----+---------+----------------+ | id | int(11) | NO | PRI | NULL | auto_increment | | domain_id | int(11) | NO | MUL | NULL | | | user | varchar(40) | NO | MUL | NULL | | | password | varchar(128) | NO | | NULL | | | uid | smallint(5) unsigned | NO | | 999 | | | gid | smallint(5) unsigned | NO | | 999 | | | quota | bigint(20) | NO | | 0 | | | active | tinyint(1) | NO | | 1 | | | allow_imap | tinyint(1) | NO | | 1 | | | last_login_ip | varchar(16) | YES | | NULL | | | last_login_date | datetime | YES | | NULL | | | last_login_proto | varchar(5) | YES | | NULL | | +------------------+----------------------+------+-----+---------+----------------+ 12 rows in set (0.00 sec) #cat last-login.conf connect = host=/tmp/mysql.sock dbname=DBNameHere user=UserNameHere password=PasswordHere # Last Login map { pattern = shared/last-login/$user table = virtual_users value_field = lastlogin value_type = uint fields { user = $user } } Mar 7 11:41:00 Servername dovecot: dict(16033): Error: dict client: Unconfigured dictionary name 'lastlogin' Mar 7 11:41:00 ServerName dovecot: imap(user(a)example.com): Error: last_login_dict: Write was unconfirmed (timeout or disconnect) for user username(a)davemehler.com

1 0

Authentification fails in dovecot 2.3.0.1
by post＠volker-wysk.de 08 Mar '18

08 Mar '18

Hi I've upgraded dovecot from 2.2.22 to 2.3.0.1. Now I can't authenticate any longer. My mail client says that the user name and password are rejected by dovecot. I get this line in /var/log/auth.log: Mar 6 19:28:02 desktop auth: PAM audit_log_acct_message() failed: Operation not permitted And this in /var/log/dovecot.log: Mar 06 19:28:02 auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Mar 06 19:28:02 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/lib20_auth_var_expand_crypt.so Mar 06 19:28:02 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_sqlite.so Mar 06 19:28:02 auth: Debug: Read auth token secret from /var/run/dovecot/auth-token-secret.dat Mar 06 19:28:02 auth: Debug: auth client connected (pid=5615) Mar 06 19:28:02 auth: Debug: client in: AUTH 1 PLAIN service=imap secured session=ggZPmsJmIoh/AAAB lip=127.0.0.1 rip=127.0.0.1 lport=993 rport=34850 local_ Mar 06 19:28:02 auth-worker(5617): Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Mar 06 19:28:02 auth-worker(5617): Debug: Module loaded: /usr/lib/dovecot/modules/auth/lib20_auth_var_expand_crypt.so Mar 06 19:28:02 auth-worker(5617): Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_sqlite.so Mar 06 19:28:02 auth-worker(5617): Debug: pam(v,127.0.0.1,<ggZPmsJmIoh/AAAB>): lookup service=dovecot Mar 06 19:28:02 auth-worker(5617): Debug: pam(v,127.0.0.1,<ggZPmsJmIoh/AAAB>): #1/1 style=1 msg=Password: Mar 06 19:28:02 auth-worker(5617): Info: pam(v,127.0.0.1,<ggZPmsJmIoh/AAAB>): pam_authenticate() failed: System error Mar 06 19:28:04 auth: Debug: client passdb out: FAIL 1 user=v Mar 06 19:28:06 imap-login: Info: Aborted login (auth failed, 1 attempts in 4 secs): user=<v>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, TLS, session=<ggZPmsJmIoh/AAAB> Now it seems I can't go back to 2.2.22 as well: https://wiki2.dovecot.org/Upgrading/2.3 says "Downgrading is possible to v2.2.27 and later. (v2.2.27 accidentally broke dovecot.index* backwards compatibility a bit.)" What should I do now? Remove the dysfunctional dovecot server and try a fresh new 2.3.0.1 install? How would I migrate my mail? Here's my dovecot -n: # 2.3.0.1 (ffd8a29): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.0.1 (d33dca2) # OS: Linux 4.4.0-116-generic x86_64 Ubuntu 16.04.4 LTS auth_debug = yes auth_username_format = %n auth_verbose = yes auth_verbose_passwords = plain hostname = volker-wysk.de log_path = /var/log/dovecot.log mail_debug = yes mail_location = mdbox:~/lib/Dovecot-Mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapsieve vnd.dovecot.imapsieve namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Entwürfe { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Papierkorb { special_use = \Trash } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } mailbox "Versendete Nachrichten" { special_use = \Sent } prefix = separator = . } passdb { driver = pam } plugin { imapsieve_mailbox1_before = file:/usr/lib/dovecot/sieve/report-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Spam imapsieve_mailbox2_before = file:/usr/lib/dovecot/sieve/report-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Spam imapsieve_mailbox2_name = * sieve = ~/.dovecot.sieve sieve_dir = ~/lib/Sieve sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.environment sieve_pipe_bin_dir = /usr/lib/dovecot/sieve sieve_plugins = sieve_imapsieve sieve_extprograms } postmaster_address = post(a)volker-wysk.de protocols = imap lmtp sieve ssl = required ssl_cert = </etc/ssl/certs/dovecot.pem ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it userdb { driver = passwd } protocol lmtp { mail_plugins = " sieve mail_log notify" } protocol lda { mail_plugins = " sieve" } protocol imap { mail_max_userip_connections = 50 mail_plugins = " imap_sieve" } Bye Volker

2 1

AppArmor profile for Dovecot on Debian Stretch
by André Rodier 08 Mar '18

08 Mar '18

Hello all, Is there any guide to help in the configuration of Dovecot for AppArmor on Debian / Ubuntu ? Or maybe does any of you already have something that works? I am actually adding AppArmor on an email server project, and I had some trouble with the versions from Debian. I would like to avoid - if possible - the long try and error process for each Dovecot executable. I am using IMAP, LMTP, Sieve and ManageSieve, with LDAP users. The full project reference is here: https://github.com/progmaticltd/homebox ii dovecot-core 1:2.2.27-3+deb9u2 amd64 ii dovecot-imapd 1:2.2.27-3+deb9u2 amd64 ii dovecot-ldap 1:2.2.27-3+deb9u2 amd64 ii dovecot-lmtpd 1:2.2.27-3+deb9u2 amd64 ii dovecot-managesieved 1:2.2.27-3+deb9u2 amd64 ii dovecot-pop3d 1:2.2.27-3+deb9u2 amd64 ii dovecot-sieve 1:2.2.27-3+deb9u2 amd64 Thanks for your advices André

1 0

Coredump: Panic: file smtp-address.c: line 530 (smtp_address_write): assertion failed: (smtp_char_is_qpair(*p))
by Ralf Hildebrandt 07 Mar '18

07 Mar '18

Got a coredump: Mar 5 15:09:42 mail-cbf dovecot: lmtp(backup(a)backup.invalid)<15425><2B+kCaZPnVpBPAAAplP5LA>: Fatal: master: service(lmtp): child 15425 killed with signal 6 (core dumped) #0 0x00007fea19977428 in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:54 resultvar = 0 pid = 15425 selftid = 15425 #1 0x00007fea1997902a in __GI_abort () at abort.c:89 save_stage = 2 act = { __sigaction_handler = { sa_handler = 0x56239d9a3890, sa_sigaction = 0x56239d9a3890 }, sa_mask = { __val = {1, 94710917811261, 140643428345904, 94710917811577, 0, 140735221053024, 94710938452648, 513, 7700885895375379200, 0, 140643433202867, 94710938452648, 140735221053120, 94710938452304, 140643433203225, 94710938452648} }, sa_flags = 433895898, sa_restorer = 0x5 } sigs = { __val = {32, 0 <repeats 15 times>} } #2 0x00007fea19dd2aaf in default_fatal_finish (type=LOG_TYPE_PANIC, status=status@entry=0) at failures.c:228 backtrace = 0x56239bd7c2e0 "/usr/lib/dovecot/libdovecot.so.0(+0xc6aca) [0x7fea19dd2aca] -> /usr/lib/dovecot/libdovecot.so.0(+0xc6bad) [0x7fea19dd2bad] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fea19d44721] -> /usr/lib/d"... recursed = 0 #3 0x00007fea19dd2bad in i_internal_fatal_handler (ctx=0x7fff78dbb710, format=<optimized out>, args=<optimized out>) at failures.c:718 status = 0 #4 0x00007fea19d44721 in i_panic (format=format@entry=0x7fea19e0ec98 "file %s: line %d (%s): assertion failed: (%s)") at failures.c:306 ctx = { type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0, timestamp_usecs = 0, log_prefix = 0x0 } args = <error reading variable args (Attempt to dereference a generic pointer.)> #5 0x00007fea19d4831d in smtp_address_write (out=0x56239bd7c150, address=0x56239bd7c108) at smtp-address.c:530 quoted = <optimized out> p = 0x56239bd7c11b "üller" pend = 0x56239bd7c121 "" pblock = 0x56239bd7c11a "müller" __func__ = "smtp_address_write" #6 0x00007fea19d48411 in smtp_address_encode (address=0x56239bd7c108) at smtp-address.c:567 str = 0x56239bd7c150 #7 0x00007fea1a3cf774 in mail_deliver_log_update_cache (cache=cache@entry=0x56239bddf1c8, pool=0x56239bddf180, mail=0x56239be185c8) at mail-deliver.c:111 message_id = 0x56239d943a4c "<ae7dbbbcb4790c611b6a104ef5f7c540(a)cron-eu.crsend.com>" subject = 0x56239d943b69 "JOMEC Seminar | Von Kennzahlencockpits und Lean Hospital Strategien" from_envelope = 0x0 from = <optimized out> #8 0x00007fea1a3cfabf in mail_deliver_save_finish (ctx=0x56239be14ca0) at mail-deliver.c:533 box = <optimized out> mbox = 0x56239be0efc0 muser = 0x56239bdcb7c0 dt = 0x56239bddf1c0 #9 0x00007fea1a0c758c in mailbox_save_finish (_ctx=_ctx@entry=0x7fff78dbb948) at mail-storage.c:2461 _data_stack_cur_id = 4 ctx = 0x56239be14ca0 t = 0x56239be10ce0 keywords = 0x0 pvt_flags = 0 copying_via_save = true ret = <optimized out> #10 0x00007fea1a0b9eb4 in mail_storage_copy (ctx=0x0, ctx@entry=0x56239be14ca0, mail=mail@entry=0x56239bdfdb28) at mail-copy.c:112 __func__ = "mail_storage_copy" #11 0x00007fea1a0e03f6 in mdbox_copy (_ctx=0x56239be14ca0, mail=0x56239bdfdb28) at mdbox-save.c:461 ctx = 0x56239be14ca0 save_mail = 0x56239bdfdb28 src_mbox = <optimized out> rec = { map_uid = 2615013952, save_date = 22051 } guid_data = 0x7fff78dbb9b0 wanted_guid = "@\362ݛ#V\000\000\240L\341\233#V\000" #12 0x00007fea1a3cf999 in mail_deliver_copy (ctx=0x56239be14ca0, mail=0x56239bdfdb28) at mail-deliver.c:547 box = <optimized out> mbox = 0x56239be0efc0 muser = 0x56239bdcb7c0 dt = 0x56239bddf1c0 #13 0x00007fea1a0c7956 in mailbox_copy_int (_ctx=_ctx@entry=0x7fff78dbba98, mail=0x56239bdfdb28) at mail-storage.c:2532 _data_stack_cur_id = 3 ctx = 0x56239be14ca0 t = 0x56239be10ce0 keywords = 0x0 pvt_flags = 0 backend_mail = 0x56239bdfdb28 ret = <optimized out> __func__ = "mailbox_copy_int" #14 0x00007fea1a0c7c38 in mailbox_save_using_mail (_ctx=_ctx@entry=0x7fff78dbba98, mail=<optimized out>) at mail-storage.c:2584 ctx = <optimized out> __func__ = "mailbox_save_using_mail" #15 0x00007fea1a3d02ac in mail_deliver_save (ctx=ctx@entry=0x7fff78dbbc60, mailbox=<optimized out>, flags=flags@entry=0, keywords=keywords@entry=0x0, storage_r=storage_r@entry=0x7fff78dbbc50) at mail-deliver.c:363 open_ctx = { user = 0x56239bdcacb8, lda_mailbox_autocreate = false, lda_mailbox_autosubscribe = false } box = 0x56239be0e6b8 trans_flags = <optimized out> t = 0x56239be10ce0 save_ctx = 0x0 headers_ctx = 0x0 kw = 0x0 dest_mail = <optimized out> error = MAIL_ERROR_NONE mailbox_name = 0x56239a9d0a54 "INBOX" errstr = 0x0 guid = 0x6adf0aebb9aa5b00 <error: Cannot access memory at address 0x6adf0aebb9aa5b00> changes = { pool = 0x1, uid_validity = 434166593, saved_uids = { arr = { buffer = 0x100000000, element_size = 7700885895375379200 }, v = 0x100000000, v_modifiable = 0x100000000 }, ignored_modseq_changes = 2614870800, changed = 35, no_read_perm = 86 } default_save = <optimized out> ret = 0 __func__ = "mail_deliver_save" #16 0x00007fea1a3d0916 in mail_deliver (ctx=ctx@entry=0x7fff78dbbc60, storage_r=storage_r@entry=0x7fff78dbbc50) at mail-deliver.c:496 muser = 0x56239bdcb7c0 ret = <optimized out> __func__ = "mail_deliver" #17 0x000056239a9cedc0 in lmtp_local_deliver (session=0x56239bddf1a8, src_mail=0x56239bdfdb28, rcpt=0x56239bdd5c80, trans=0x56239bde0d68, cmd=0x56239bde1ea8, local=0x56239bde2020) at lmtp-local.c:603 set_parser = <optimized out> line = <optimized out> str = 0x56239bd7bc08 proxy_data = { proto = SMTP_PROXY_PROTOCOL_LMTP, source_ip = { family = 0, u = { ip6 = { __in6_u = { __u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0} } }, ip4 = { s_addr = 0 } } }, source_port = 0, helo = 0x56239bd8d470 "mail-cbf.charite.de", login = 0x0, ttl_plus_1 = 0, timeout_secs = 0, extra_fields = 0x0, extra_fields_count = 0 } delivery_time_started = { tv_sec = 1520258982, tv_usec = 162818 } sets = <optimized out> rcpt_user = 0x56239bdcacb8 mail_set = <optimized out> username = <optimized out> rcpt_idx = 0 smtp_set = 0x56239be046e0 lda_set = 0x56239be04750 ns = <optimized out> rcpt_to = 0x56239bde0e78 trcpt = 0x56239bde0e38 storage = 0x56239bdcecc8 mail_error = 1793002219 ret = <optimized out> client = 0x56239bdbc338 service_user = <optimized out> dctx = { pool = 0x56239bddf180, set = 0x56239be04750, smtp_set = 0x56239be046e0, session = 0x56239bddf1a8, session_time_msecs = 0, delivery_time_started = { tv_sec = 1520258982, tv_usec = 162818 }, dup_db = 0x0, session_id = 0x56239bd8d450 "2B+kCaZPnVpBPAAAplP5LA", src_mail = 0x56239bdfdb28, mail_from = 0x56239bde0e08, mail_params = { auth = 0x0, body = { type = SMTP_PARAM_MAIL_BODY_TYPE_UNSPECIFIED, ext = 0x0 }, envid = 0x0, ret = SMTP_PARAM_MAIL_RET_UNSPECIFIED, size = 0, extra_params = { arr = { buffer = 0x0, element_size = 0 }, v = 0x0, v_modifiable = 0x0 } }, rcpt_to = 0x56239bde0e78, rcpt_params = { orcpt = { addr_type = 0x0, addr = 0x56239bde0e78, addr_raw = 0x0 }, notify = SMTP_PARAM_RCPT_NOTIFY_UNSPECIFIED, extra_params = { arr = { buffer = 0x0, element_size = 0 }, v = 0x0, v_modifiable = 0x0 } }, rcpt_user = 0x56239bdcacb8, rcpt_default_mailbox = 0x56239a9d0a54 "INBOX", dest_mail = 0x0, cache = 0x0, tempfail_error = 0x0, tried_default_save = true, saved_mail = false, save_dest_mail = false, mailbox_full = false, dsn = false } input = <optimized out> var_table = <optimized out> error = 0x0 #18 lmtp_local_deliver_to_rcpts (session=0x56239bddf1a8, trans=0x56239bde0d68, cmd=0x56239bde1ea8, local=0x56239bde2020) at lmtp-local.c:657 rcpt = 0x56239bdd5c80 first_uid = 4294967295 src_mail = 0x56239bdfdb28 count = <optimized out> i = 0 #19 lmtp_local_data (client=client@entry=0x56239bdbc338, cmd=cmd@entry=0x56239bde1ea8, trans=trans@entry=0x56239bde0d68, input=<optimized out>) at lmtp-local.c:734 local = 0x56239bde2020 session = 0x56239bddf1a8 old_uid = 0 #20 0x000056239a9cdb53 in cmd_data_finish (trans=0x56239bde0d68, cmd=0x56239bde1ea8, client=0x56239bdbc338) at commands.c:144 state = 0x56239bdbc3c0 input_proxy = 0x0 input_msg = 0x0 input_local = 0x56239bde26b8 inputs = {0x0, 0x56239bde2238, 0x0} #21 cmd_data_continue (conn_ctx=0x56239bdbc338, cmd=0x56239bde1ea8, trans=0x56239bde0d68) at commands.c:190 client = 0x56239bdbc338 state = 0x56239bdbc3c0 data_input = <optimized out> data = <optimized out> size = 543 ret = <optimized out> __func__ = "cmd_data_continue" #22 0x00007fea19d566e0 in cmd_data_handle_input (cmd=0x56239bde1ea8) at smtp-server-cmd-data.c:199 conn = 0x56239bde0930 callbacks = 0x56239abd27a0 <lmtp_callbacks> command = 0x56239bde1ea8 data_cmd = 0x56239bde83e8 ret = <optimized out> __func__ = "cmd_data_handle_input" #23 0x00007fea19dea649 in io_loop_call_io (io=0x56239bdba970) at ioloop.c:614 ioloop = 0x56239bd82c70 t_id = 2 __func__ = "io_loop_call_io" #24 0x00007fea19debf29 in io_loop_handler_run_internal (ioloop=ioloop@entry=0x56239bd82c70) at ioloop-epoll.c:222 ctx = 0x56239bd849f0 ret = <optimized out> __func__ = "cmd_data_handle_input" #23 0x00007fea19dea649 in io_loop_call_io (io=0x56239bdba970) at ioloop.c:614 ioloop = 0x56239bd82c70 t_id = 2 __func__ = "io_loop_call_io" #24 0x00007fea19debf29 in io_loop_handler_run_internal (ioloop=ioloop@entry=0x56239bd82c70) at ioloop-epoll.c:222 ctx = 0x56239bd849f0 ---Type <return> to continue, or q <return> to quit--- io = <optimized out> tv = { tv_sec = 299, tv_usec = 999816 } events_count = <optimized out> msecs = <optimized out> ret = 1 i = 0 j = <optimized out> call = <optimized out> __func__ = "io_loop_handler_run_internal" #25 0x00007fea19dea752 in io_loop_handler_run (ioloop=<optimized out>) at ioloop.c:666 No locals. #26 0x00007fea19dea968 in io_loop_run (ioloop=0x56239bd82c70) at ioloop.c:639 __func__ = "io_loop_run" #27 0x00007fea19d672a3 in master_service_run (service=0x56239bd82b00, callback=<optimized out>) at master-service.c:767 No locals. #28 0x000056239a9ccc3d in main (argc=1, argv=0x56239bd82890) at main.c:159 set_roots = {0x56239abd3280 <smtp_submit_setting_parser_info>, 0x56239abd31e0 <lda_setting_parser_info>, 0x56239abd2600 <lmtp_setting_parser_info>, 0x0} service_flags = <optimized out> storage_service_flags = (MAIL_STORAGE_SERVICE_FLAG_DISALLOW_ROOT | MAIL_STORAGE_SERVICE_FLAG_USERDB_LOOKUP | MAIL_STORAGE_SERVICE_FLAG_TEMP_PRIV_DROP | MAIL_STORAGE_SERVICE_FLAG_NO_LOG_INIT | MAIL_STORAGE_SERVICE_FLAG_NO_IDLE_TIMEOUT) tmp_base_dir = 0x56239bd7a040 "tp data)" c = <optimized out> error = 0x0 -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | https://www.charite.de

3 3

Mail addresses with quotes + Postfix
by Philipp Berger 07 Mar '18

07 Mar '18

Dear all, I have a working setup with Postfix + Dovecot, storing users in a MySQL table. I ran into problems setting up and using a mail address like a"@"b(a)mydomain.tld, which by RFC should be valid, but leads to problems in Dovecot. From my debugging, I can see that on the lookup, Dovecot replaces %n with "a" (quotes added by me) and %d with "b(a)mydomain.tld" (quotes added by me). So the original quotes are gone, and the domain/user split is incorrect. I am not sure of Postfix passes the address without quotes to Dovecot or whether Dovecot can not handle quotes correctly, but I was hoping that someone with more insight into Dovecot could help me out here. System Info: Debian 9, Postifx 3.1.6-0+deb9u1, Dovecot 2.2.27-3+deb9u1 Postfix master.cf for Dovecot: dovecot unix - n n - - pipe flags=DRhu user=virtual:virtual argv=/usr/lib/dovecot/dovecot-lda -f ${sender} -d ${user}@${nexthop} I am grateful for any hints :) Thank you in advance, kind regards, Philipp

4 12

Why does dovecot tell Error: passwd-file(...)failed: No such file or directory?
by Sergio Belkin 07 Mar '18

07 Mar '18

Hi, I get this error even when user logins succesfully: Mar 7 10:41:16 mail dovecot: auth: Debug: client in: AUTH#0111#011CRAM-MD5#011service=imap#011secured#011session=maOgttJmCADAqHoB#011lip=192.168.122.202#011rip=192.168.122.1#011lport=993#011rport=36872 Mar 7 10:41:16 mail dovecot: auth: Debug: client passdb out: CONT#0111#011PDYyMjM4NTMwODIyODI0MDguMTUyMDQzMDA3NkBtYWlsLmV4YW1wbGUuY29tPg== Mar 7 10:41:16 mail dovecot: auth: Debug: client in: CONT<hidden> Mar 7 10:41:16 mail dovecot: auth: Debug: passwd-file(sergio(a)example.com,192.168.122.1,<maOgttJmCADAqHoB>): lookup: user=sergio(a)example.com file=/etc/dovecot/users Mar 7 10:41:16 mail dovecot: auth: Debug: client passdb out: OK#0111#011user=sergio(a)example.com Mar 7 10:41:16 mail dovecot: auth: Debug: master in: REQUEST#0112080243713#01110733#0111#011b99fa14550a72c26f219b7dd4ffa6f27#011session_pid=10736#011request_auth_token Mar 7 10:41:16 mail dovecot: auth: Error: passwd-file(sergio(a)example.com,192.168.122.1,<maOgttJmCADAqHoB>): stat(schme=CRAM-MD5 username_format=sergio(a)example.com /etc/dovecot/users) failed: No such file or directory Mar 7 10:41:16 mail dovecot: auth: Debug: master userdb out: USER#0112080243713# 011sergio@example.com#011uid=12345#011gid=12345#011home=/home/vmail/sergio@example.com#011auth_token=34a7660e0c85afacd29709561b0bc7e024942955 Mar 7 10:41:16 mail dovecot: imap-login: Login: user=<sergio(a)example.com>, method=CRAM-MD5, rip=192.168.122.1, lip=192.168.122.202, mpid=10736, TLS, session=<maOgttJmCADAqHoB> Is that an error, a warning? I don't understand why dovecot tell me that "No such file or directory" because really it does exist. Dovecot configuration is as follows: auth_debug = yes auth_mechanisms = cram-md5 plain login auth_verbose = yes disable_plaintext_auth = no first_valid_uid = 1000 mail_location = maildir:/home/vmail/%d/%n/Maildir mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = scheme=CRAM-MD5 username_format=%u /etc/dovecot/users driver = passwd-file } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } ssl_cert = </etc/pki/tls/certs/mailcert.pem ssl_key = </etc/pki/tls/private/mailkey.pem userdb { args = schme=CRAM-MD5 username_format=%u /etc/dovecot/users driver = passwd-file } userdb { args = uid=vmail gid=vmail home=/home/vmail/%u driver = static } EOF Thanks in advance -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org

2 4

extra IMAP folders: how to make all clients use the same Sent folder?
by Stanislaw Findeisen 07 Mar '18

07 Mar '18

Dear All I have just setup IMAP with Maildir, but unfortunately some clients create their own folders instead of using those specified in 15-mailboxes.conf . What could be the reason? Here's what it looks like: > B list "" * > * LIST (\HasNoChildren \Sent) "." "Sent Messages" > * LIST (\HasNoChildren) "." Gesendet > * LIST (\HasNoChildren) "." Entw&APw-rfe > * LIST (\HasNoChildren \Trash) "." Trash > * LIST (\HasNoChildren) "." Papierkorb > * LIST (\HasNoChildren \Drafts) "." Drafts > * LIST (\HasNoChildren \Sent) "." Sent > * LIST (\HasNoChildren) "." Ausgang > * LIST (\HasNoChildren \Junk) "." Junk > * LIST (\HasNoChildren) "." INBOX > B OK List completed. Here for example "Gesendet" (meaning "Sent" in German) is a folder created by some Android client app. This app uses it to store its sent mail, while another client uses the Sent folder. Also, is it correct that all those folders (both pre-made and extra) get created directly in the user's maildir, alongside cur, new, tmp and Dovecot index files? Shouldn't there be any subdir? > # dovecot --version > 2.2.13 Thanks! Stanisław

2 1

requiring a full fqdn for authentication
by David Mehler 07 Mar '18

07 Mar '18

Hello, I'm using dovecot to do postfix authentication. I'm trying to get dovecot to require a complete email address as a login. Currently I can log in by either a username or fqdn. I've got the below what is the issue? If I need to provide my sql password query let me know. Thanks. Dave. doveconf -n # 2.2.34 (874deae): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.21 (92477967) # OS: FreeBSD 11.1-RELEASE-p4 amd64 # Hostname: localhost auth_cache_size = 10 M auth_default_realm = example.com auth_realms = example.com example2.com dict { acl = mysql:/usr/local/etc/dovecot/shared-folders.conf sqlquota = mysql:/usr/local/etc/dovecot/quota.conf } first_valid_gid = 999 first_valid_uid = 999 hostname = mail.example.com imap_idle_notify_interval = 10 mins last_valid_gid = 999 last_valid_uid = 999 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lda_original_recipient_header = X-Original-To listen = 127.0.0.1 xxx.xxx.xxx.xxx lmtp_rcpt_check_quota = yes mail_access_groups = vmail mail_fsync = never mail_gid = vmail mail_home = /home/vmail/mailboxes/%d/%n mail_location = maildir:~/mail:LAYOUT=fs mail_plugins = acl mail_log notify quota quota_clone trash virtual welcome zlib mail_privileged_group = vmail mail_server_admin = mailto:postmaster@example.com mail_uid = vmail mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapflags notify imapsieve vnd.dovecot.imapsieve namespace { list = children location = maildir:/home/vmail/public:LAYOUT=fs:INDEXPVT=~/mail/public mailbox TestFolder { auto = subscribe comment = Public Folder for message sharing } prefix = public/ separator = / subscriptions = no type = public } namespace { list = children location = maildir:%%h/Maildir:INDEXPVT=~/Maildir/shared/%%u prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Archive { auto = no special_use = \Archive } mailbox Archives { auto = subscribe special_use = \Archive } mailbox "Deleted Messages" { auto = no autoexpunge = 30 days special_use = \Trash } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = no autoexpunge = 30 days special_use = \Junk } mailbox "Junk E-mail" { auto = no autoexpunge = 30 days special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Items" { auto = no special_use = \Sent } mailbox "Sent Messages" { auto = no special_use = \Sent } mailbox Spam { auto = subscribe autoexpunge = 30 days special_use = \Junk } mailbox Trash { auto = subscribe autoexpunge = 30 days special_use = \Trash } mailbox virtual/All { comment = All my messages special_use = \All } prefix = separator = / type = private } namespace virtual { location = virtual:/usr/local/etc/dovecot/virtual:INDEX=~/virtual:CONTROL=~/virtual prefix = virtual/ separator = / } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile:/usr/local/etc/dovecot/global-acls:cache_secs=300 acl_anyone = allow acl_globals_only = yes acl_shared_dict = proxy::acl fts = solr fts_autoindex = yes fts_solr = url=http://127.0.0.1:8983/solr/dovecot/ imapsieve_mailbox1_before = file:/home/vmail/sieve/global/learn-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Spam imapsieve_mailbox2_before = file:/home/vmail/sieve/global/learn-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Spam imapsieve_mailbox2_name = * last_login_dict = proxy::lastlogin last_login_key = last-login/%u mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = count:User quota quota_clone_dict = proxy::sqlquota quota_exceeded_message = Storage quota for this account has been exceeded, please try again later. quota_grace = 10%% quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO quota_vsizes = true quota_warning = storage=100%% quota-exceeded 100 %u quota_warning2 = storage=95%% quota-warning 95 %u quota_warning3 = storage=90%% quota-warning 90 %u quota_warning4 = storage=85%% quota-warning 85 %u quota_warning5 = storage=75%% quota-warning 75 %u sieve = ~/.dovecot.sieve sieve_before = /home/vmail/sieve/before.d sieve_default = /home/vmail/sieve/default.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags sieve_global_dir = /home/vmail/sieve sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.execute sieve_max_redirects = 30 sieve_max_script_size = 1M sieve_pipe_bin_dir = /usr/local/bin sieve_plugins = sieve_imapsieve sieve_extprograms sieve_user_log = /home/vmail/sieve/sieve_error.log trash = /usr/local/etc/dovecot/trash.conf welcome_script = welcome %u welcome_wait = yes } postmaster_address = postmaster(a)example.com protocols = imap lmtp sieve sendmail_path = /usr/local/sbin/sendmail service auth-worker { user = vmail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service dict { unix_listener dict { group = vmail mode = 0660 user = vmail } } service imap-login { inet_listener imap { address = 127.0.0.1 port = 143 } inet_listener imaps { address = xxx.xxx.xxx.xxx port = 993 ssl = yes } } service imap { executable = imap } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0666 user = postfix } } service managesieve-login { inet_listener sieve { address = 127.0.0.1 port = 4190 } } service quota-status { client_limit = 1 executable = quota-status -p postfix unix_listener /var/spool/postfix/private/dovecot-quota { group = postfix mode = 0660 user = postfix } } service quota-warning { executable = script /usr/local/etc/dovecot/quota-warning.sh unix_listener quota-warning { group = vmail mode = 0660 user = vmail } user = vmail } service welcome { executable = script /usr/local/etc/dovecot/welcome.sh unix_listener welcome { user = vmail } user = vmail } ssl = required ssl_cert = </usr/local/etc/ssl/acme/example.com/fullchain.pem ssl_cipher_list = ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256 ssl_dh_parameters_length = 4096 ssl_key = # hidden, use -P to show it ssl_options = no_compression ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 !TLSv1 !TLSv1.1 TLSv1.2 userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_fsync = optimized mail_plugins = acl mail_log notify quota quota_clone trash virtual welcome zlib quota sieve } protocol lda { mail_fsync = optimized mail_plugins = acl mail_log notify quota quota_clone trash virtual welcome zlib sieve virtual } protocol imap { mail_max_userip_connections = 20 mail_plugins = acl mail_log notify quota quota_clone trash virtual welcome zlib imap_acl imap_quota imap_sieve imap_zlib last_login virtual }

3 4

pigeonhole 0.4.22 with sieve_before script crashes
by Jan 06 Mar '18

06 Mar '18

Hello! Dovecot 2.2.34 (874deae) Pigeonhole version 0.4.22 (22940fb7) After the update to pigeonhole version 0.4.22 the following configuration does not work. With version 0.4.21 it works. dovecot.conf (only sieve configuration) --------------------------------------------------------------- managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext editheader sieve = file:~/sieve;active=~/.dovecot.sieve sieve_before = /etc/dovecot/sieve/filter sieve_extensions = +editheader sieve_max_script_size = 1M service managesieve-login { inet_listener sieve { port = 4190 } } protocol sieve { mail_max_userip_connections = 10 managesieve_implementation_string = Sieve managesieve_logout_format = bytes=%i/%o } --------------------------------------------------------------- sieve_before script for all users (/etc/dovecot/sieve/filter) --------------------------------------------------------------- require ["editheader"]; if header :contains "X-Spam-Flag" "YES" { addheader "X-Filter-Junk-Flag" "YES"; addheader "X-Filter-Junk-Type" "SPAM"; } elsif header :contains "X-Amavis-Alert" "INFECTED" { addheader "X-Filter-Junk-Flag" "YES"; addheader "X-Filter-Junk-Type" "VIRUS"; } elsif header :contains "X-Amavis-Alert" "BANNED" { addheader "X-Filter-Junk-Flag" "YES"; addheader "X-Filter-Junk-Type" "ATTACHMENT"; } else { addheader "X-Filter-Junk-Flag" "NO"; addheader "X-Filter-Junk-Type" "NONE"; } --------------------------------------------------------------- sieve script for user postbox(a)example.com (.dovecot.sieve) --------------------------------------------------------------- require ["copy"]; if allof (header :is "X-Filter-Junk-Flag" "NO") { redirect :copy "copy(a)example.com"; } --------------------------------------------------------------- I use LMTP to deliver the mail to the user and the following error occurs: Mar 3 02:31:34 test dovecot: lmtp(postbox(a)example.com): Panic: file istream.c: line 197 (i_stream_read): assertion failed: ((size_t)ret+old_size == _stream->pos - _stream->skip) Mar 3 02:31:34 test dovecot: lmtp(postbox(a)example.com): Error: Raw backtrace: /usr/local/lib/dovecot/libdovecot.so.0(+0x9c7a0) [0x7f8c015be7a0] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x9c88c) [0x7f8c015be88c] -> /usr/local/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f8c0155294d] -> /usr/local/lib/dovecot/libdovecot.so.0(i_stream_read+0x2c8) [0x7f8c015c99d8] -> /usr/local/lib/dovecot/libdovecot.so.0(i_stream_read_data+0x3d) [0x7f8c015ca15d] -> /usr/local/lib/dovecot/libdovecot.so.0(message_parse_header_next+0x63) [0x7f8c015a72e3] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x7efb1) [0x7f8c015a0fb1] -> /usr/local/lib/dovecot/libdovecot.so.0(i_stream_read+0x53) [0x7f8c015c9763] -> /usr/local/lib/dovecot/libdovecot.so.0(i_stream_read_data+0x3d) [0x7f8c015ca15d] -> /usr/local/lib/dovecot/libdovecot.so.0(io_stream_copy+0x75) [0x7f8c015df1a5] -> /usr/local/lib/dovecot/libdovecot.so.0(+0xbf5e0) [0x7f8c015e15e0] -> /usr/local/lib/dovecot/libdovecot.so.0(o_stream_send_istream+0x33) [0x7f8c015df003] -> /usr/local/lib/dovecot/libdovecot-sieve.so.0(+0x4dbf4) [0x7f8bfbb3abf4] -> /usr/local/lib/dovecot/libdovecot-sieve.so.0(+0x3f22a) [0x7f8bfbb2c22a] -> /usr/local/lib/dovecot/libdovecot-sieve.so.0(sieve_result_execute+0x27f) [0x7f8bfbb2da6f] -> /usr/local/lib/dovecot/libdovecot-sieve.so.0(+0x502ee) [0x7f8bfbb3d2ee] -> /usr/local/lib/dovecot/libdovecot-sieve.so.0(sieve_multiscript_run+0xa6) [0x7f8bfbb3def6] -> /usr/local/lib/dovecot/lib90_sieve_plugin.so(+0x379a) [0x7f8bfbda279a] -> /usr/local/lib/dovecot/libdovecot-lda.so.0(mail_deliver+0xa2) [0x7f8c01b9d942] -> dovecot/lmtp [DATA 127.0.0.1 postbox(a)example.com]() [0x406c0b] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x52) [0x7f8c015d3c22] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xea) [0x7f8c015d51ca] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x3c) [0x7f8c015d3cbc] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f8c015d3e68] -> /usr/local/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f8c0155caa3] -> dovecot/lmtp [DATA 127.0.0.1 postbox(a)example.com](main+0x18c) [0x404fbc] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f8c01198b45] -> dovecot/lmtp [DATA 127.0.0.1 postbox(a)example.com]() [0x405065] Mar 3 02:31:34 test dovecot: lmtp(postbox(a)example.com): Fatal: master: service(lmtp): child 13445 killed with signal 6 (core dumps disabled) If I change the sieve script for this user, it works. For example: --------------------------------------------------------------- require ["copy"]; if allof (header :is "X-Filter-Junk-Status" "NO") { redirect :copy "copy(a)example.com"; } --------------------------------------------------------------- The error occurs only in version 0.4.22, not in version 0.4.21. Thanks, Jan

2 7

Re: Outlook 2016 & IMAP Trouble with dovecot
by G A 06 Mar '18

06 Mar '18

On 03/05/2018 05:40 PM, John Woods wrote: > George, > > We run Dovecot with Outlook, and have had similar problems when > Outlook is operating in "Offline Mode". When you're in offline mode, > doing any folder-level operations, such as Copy, Create, Rename, Move, > Delete, etc. causes problems with the mailbox. The end result is that > you could lose e-mails and entire folders that were involved in the > offline operation. > > How we have fixed this in the past, what we have done is: > > 1. Do an Outlook "export" of the entire contents of the IMAP account > into a ".pst" file. (This saves the e-mails that may be at-risk of > being lost.) > 2. Delete the IMAP account in Outlook, which includes the ".ost" file. > 3. Delete the IMAP account on the Dovecot server > 4. Reconfigure the IMAP account in Outlook > 5. Restore the IMAP contents from the ".pst" file in step #1. > 6. Educate the user about not doing folder-level operations while in > offline mode. > > Hope this helps... > > Thanks, > John > Thanks, that means that outlook is useless as an Imap client then . This is the whole idea behind imap, to be able to do work while off-line and sync changes when on-line or I get it wrong ? thanks anyway George

3 4

sieve vacation alias handling problem
by Karol Augustin 06 Mar '18

06 Mar '18

Hi, I am using Dovecot LDA as LMTP renders envelope extension unusable. The problem I have noticed is that when user has multiple aliases sieve responds to all of them, not only to :addresses specified. >From testing it seems that :addresses only adds addresses to the list of "known" emails to check against. It is not limiting it. As I understand, sieve should check if To: header is consistent with addresses known to be users. But how Dovecot knows about aliases assigned to the user? >From my testing if header To: address is consistent with envelope To: address the reply is fired. I have sieve_vacation_use_original_recipient left at it's default value (no), so that shouldn't be the case. Now if user address(a)example.com has alias alias(a)example.com specified, the vacation reply will be sent to email addressed to alias(a)example.com, which is weird, because this behavior should be enabled by switching sieve_vacation_use_original_recipient to yes. When user receives an email that was originally sent to his gmail account (forwarded) there is no reply. If I add gmail address to :addresses reply is generated as expected. So my main question is if this is expected? I would like to enable only delivery to primary address and to + extensions to that address by default. I think that it might be that Postfix is expanding aliases and passing the final recipient (as to=<XXX>) to dovecot. Then dovecot is using that address to check for explicit delivery, but something fails, as this address is obviously not in To: header. So it looks like orig_to has to be used as well which should be disabled by sieve_vacation_use_original_recipient? My address is: karol(a)augustin.pl, alias is: carol(a)augustin.pl Mar 2 12:37:32 mail dovecot: lda(karol(a)augustin.pl): sieve: msgid=<3ba0578a5f6b170e942b5bac1b19be36(a)posteo.net>: sent vacation response to <sender(a)example.com> Mar 2 12:37:32 mail postfix/qmgr[4744]: 3zt82h4CG4z2xlw: from=<>, size=732, nrcpt=1 (queue active) Mar 2 12:37:32 mail dovecot: lda(karol(a)augustin.pl): sieve: msgid=<3ba0578a5f6b170e942b5bac1b19be36(a)posteo.net>: stored mail into mailbox 'INBOX' Mar 2 12:37:32 mail postfix/pipe[8793]: 3zt82f3x4xz2xmw: to=<karol(a)augustin.pl>, orig_to=<carol(a)augustin.pl>, relay=dovecot, delay=2.2, delays=2.2/0/0/0.06, dsn=2.0.0, status=sent (delivered via dovecot service) Forward from from gmail: Mar 2 11:38:19 mail postfix/qmgr[4744]: 3zt6kL1yF7z2xgg: from=<karolaug+caf_=karol=augustin.pl(a)gmail.com>, size=5831, nrcpt=1 (queue active) Mar 2 11:38:19 mail dovecot: lda(karol(a)augustin.pl): sieve: msgid=<e610a47934f9aabb31f833c025075cff(a)posteo.net>: discarding vacation response for implicitly delivered message; no known (envelope) recipient address found in message headers (recipient=<karol(a)augustin.pl>, and additional `:addresses' are specified) Mar 2 11:38:19 mail dovecot: lda(karol(a)augustin.pl): sieve: msgid=<e610a47934f9aabb31f833c025075cff(a)posteo.net>: stored mail into mailbox 'INBOX' Mar 2 11:38:19 mail postfix/pipe[5362]: 3zt6kL1yF7z2xgg: to=<karol(a)augustin.pl>, relay=dovecot, delay=1.3, delays=1.2/0/0/0.05, dsn=2.0.0, status=sent (delivered via dovecot service) from my master.cf: dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/dovecot-lda -f ${sender} -a ${original_recipient} -d ${user}@${nexthop} Thanks, Karol -- Karol Augustin karol(a)augustin.pl http://karolaugustin.pl/ +353 85 775 5312

3 4

Plugin charset_alias compile error: void function cannot return value
by John Woods 06 Mar '18

06 Mar '18

Hey Everyone, We are getting a compile error for Dovecot 2.2.34 on Solaris 11.3 x86, using Solaris Studio 12.6 compiler, and it doesn't occur with Dovecot 2.2.33. Making all in charset-alias source='charset-alias-plugin.c' object='charset-alias-plugin.lo' libtool=yes \ DEPDIR=.deps depmode=none /bin/sh ../../../depcomp \ /bin/sh ../../../libtool --tag=CC --mode=compile cc -DHAVE_CONFIG_H -I. -I../../.. -I../../../src/lib -I../../../src/lib-master -I../../../src/lib-mail -I../../../src/lib-charset -I../../../src/lib-index -I../../../src/lib-storage -m64 -I/usr/local/include -I/usr/mysql/5.7/include -I/usr/local/include/sasl -I/usr/include -L/usr/local/lib -L/usr/local/lib/sasl2 -L/usr/mysql/5.7/lib/64 -L/usr/lib/64 -L/usr/lib -R/usr/local/lib -R/usr/local/lib/sasl2 -R/usr/mysql/5.7/lib/64 -R/usr/lib/64 -R/usr/lib -m64 -I/usr/local/include -I/usr/mysql/5.7/include -I/usr/local/include/sasl -I/usr/include -L/usr/local/lib -L/usr/local/lib/sasl2 -L/usr/mysql/5.7/lib/64 -L/usr/lib/64 -L/usr/lib -R/usr/local/lib -R/usr/local/lib/sasl2 -R/usr/mysql/5.7/lib/64 -R/usr/lib/64 -R/usr/lib -c -o charset-alias-plugin.lo charset-alias-plugin.c libtool: compile: cc -DHAVE_CONFIG_H -I. -I../../.. -I../../../src/lib -I../../../src/lib-master -I../../../src/lib-mail -I../../../src/lib-charset -I../../../src/lib-index -I../../../src/lib-storage -m64 -I/usr/local/include -I/usr/mysql/5.7/include -I/usr/local/include/sasl -I/usr/include -L/usr/local/lib -L/usr/local/lib/sasl2 -L/usr/mysql/5.7/lib/64 -L/usr/lib/64 -L/usr/lib -R/usr/local/lib -R/usr/local/lib/sasl2 -R/usr/mysql/5.7/lib/64 -R/usr/lib/64 -R/usr/lib -m64 -I/usr/local/include -I/usr/mysql/5.7/include -I/usr/local/include/sasl -I/usr/include -L/usr/local/lib -L/usr/local/lib/sasl2 -L/usr/mysql/5.7/lib/64 -L/usr/lib/64 -L/usr/lib -R/usr/local/lib -R/usr/local/lib/sasl2 -R/usr/mysql/5.7/lib/64 -R/usr/lib/64 -R/usr/lib -c charset-alias-plugin.c -KPIC -DPIC -o .libs/charset-alias-plugin.o *"charset-alias-plugin.c", line 86: void function cannot return value** **"charset-alias-plugin.c", line 92: void function cannot return value* cc: acomp failed for charset-alias-plugin.c In charset-alias-plugin.c, the functions charset_alias_to_utf8_end() and charset_alias_to_utf8_reset() are declared to return void, but they also attempt to return something. I suspect other compilers, such as GCC, might generate a warning about the "return" statement, but Solaris Studio compiler is being more strict about it... I suspect that the "return" keyword should be dropped from both functions. Thoughts? Thanks, John *John Woods | System Integration Administrator* *Great Plains Manufacturing* | 1030 E North St | Salina, KS 67401 P: 785-823-3276 ext. 2663 | F: 785-822-5676 | E: john.woods(a)greatplainsmfg.com <mailto:john.woods@greatplainsmfg.com> <http://www.greatplainsmfg.com/> <http://www.facebook.com/greatplainsag> <http://www.twitter.com/greatplains_ag> <http://www.youtube.com/greatplainsmfg>

4 5

Re: Outlook 2016 & IMAP Trouble with dovecot
by G A 06 Mar '18

06 Mar '18

On 03/05/2018 05:40 PM, John Woods wrote: > George, > > We run Dovecot with Outlook, and have had similar problems when > Outlook is operating in "Offline Mode". When you're in offline mode, > doing any folder-level operations, such as Copy, Create, Rename, Move, > Delete, etc. causes problems with the mailbox. The end result is that > you could lose e-mails and entire folders that were involved in the > offline operation. > > How we have fixed this in the past, what we have done is: > > 1. Do an Outlook "export" of the entire contents of the IMAP account > into a ".pst" file. (This saves the e-mails that may be at-risk of > being lost.) > 2. Delete the IMAP account in Outlook, which includes the ".ost" file. > 3. Delete the IMAP account on the Dovecot server > 4. Reconfigure the IMAP account in Outlook > 5. Restore the IMAP contents from the ".pst" file in step #1. > 6. Educate the user about not doing folder-level operations while in > offline mode. > > Hope this helps... Thanks, that means that outlook is useless as an Imap client then . This is the whole idea behind imap, to be able to do work while off-line and sync changes when on-line or I get it wrong ? thanks anyway George

1 0

dovecot connections to mysql
by David Mehler 06 Mar '18

06 Mar '18

Hello, I'm running a virtual mail hosting system with MySQL as a backend for dovecot to do it's authentication against. I am getting intermediant failures when users attempt mail-related tasks such as checking their inbox or setting up an alias. The error is to many connections. Any ideas? Thanks. Dave.

2 1

LMTP delivery segfaults when user is over quota.
by Reio Remma 06 Mar '18

06 Mar '18

Hello! I'm having crashes with LMTP delivery when user is over quota on the latest CentOS 7.4 with the latest Dovecot 2.3.0.1 from Dovecot repo. I see the issue has been fixed on January 17, but it doesn't seem to have made it into 2.3.0.1 (I compared with the source from https://dovecot.org/releases/2.3/dovecot-2.3.0.1.tar.gz) https://github.com/dovecot/core/commit/2bf919786518d138cc07d9cc21e14ad5e07e… I also noticed a similar construct being used on line 465 (rcpt->rcpt.rcpt->path) that was causing the segfault on the above commit on line 136. struct smtp_address *rcpt_to = rcpt->rcpt.rcpt->path; Should that also use rcpt->rcpt.path; ? Thanks from the other side of the gulf! Reio

2 3

Panic: file smtp-address.c: line 530 (smtp_address_write): assertion failed: (smtp_char_is_qpair(*p))
by Ralf Hildebrandt 05 Mar '18

05 Mar '18

I have an email which cannot be delivered using LMTP: Mar 2 15:26:54 mail-cbf dovecot: lmtp(backup(a)backup.invalid)<29736><cPd5Mi5fmVoodAAAplP5LA>: Panic: file smtp-address.c: line 530 (smtp_address_write): assertion failed: (smtp_char_is_qpair(*p)) Mar 2 15:26:54 mail-cbf dovecot: lmtp(backup(a)backup.invalid)<29736><cPd5Mi5fmVoodAAAplP5LA>: Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0xc6aca) [0x7f7fb50d3aca] -> /usr/lib/dovecot/libdovecot.so.0(+0xc6bad) [0x7f7fb50d3bad] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f7fb5045721] -> /usr/lib/dovecot/libdovecot.so.0(smtp_address_write+0x21d) [0x7f7fb504931d] -> /usr/lib/dovecot/libdovecot.so.0(smtp_address_encode+0x21) [0x7f7fb5049411] -> /usr/lib/dovecot/libdovecot-lda.so.0(+0x3774) [0x7f7fb56d0774] -> /usr/lib/dovecot/libdovecot-lda.so.0(+0x3abf) [0x7f7fb56d0abf] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_save_finish+0x7c) [0x7f7fb53c858c] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_storage_copy+0x104) [0x7f7fb53baeb4] -> /usr/lib/dovecot/libdovecot-storage.so.0(mdbox_copy+0x46) [0x7f7fb53e13f6] -> /usr/lib/dovecot/libdovecot-lda.so.0(+0x3999) [0x7f7fb56d0999] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x48956) [0x7f7fb53c8956] -> /usr/lib/dovecot/libdovecot-lda.so.0(mail_deliver_save+0x1ac) [0x7f7fb56d12ac] -> /usr/lib/dovecot/libdovecot-lda.so.0(mail_deliver+0x1f6) [0x7f7fb56d1916] -> dovecot/lmtp(lmtp_local_data+0x610) [0x560dfd665dc0] -> dovecot/lmtp(cmd_data_continue+0x233) [0x560dfd664b53] -> /usr/lib/dovecot/libdovecot.so.0(+0x4a6e0) [0x7f7fb50576e0] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x69) [0x7f7fb50eb649] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x109) [0x7f7fb50ecf29] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x52) [0x7f7fb50eb752] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f7fb50eb968] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f7fb50682a3] -> dovecot/lmtp(main+0x23d) [0x560dfd663c3d] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf0) [0x7f7fb4c63830] -> dovecot/lmtp(_start+0x29) [0x560dfd663d79] Mar 2 15:26:55 mail-cbf dovecot: lmtp(backup(a)backup.invalid)<29736><cPd5Mi5fmVoodAAAplP5LA>: Fatal: master: service(lmtp): child 29736 killed with signal 6 (core dumped) Using dovecot 2:2.3.0.1-6 packages on Ubuntu 16.04 The address causing the error is: From: =?utf-8?Q?Dorit_M=C3=BCller?= <d.müller(a)JOMEC.de> Note the "umlaut" in the email address... :) -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | https://www.charite.de

5 15

Deprecations for schema.xml and newest Solr version (7.2.x)
by TG Servers 05 Mar '18

05 Mar '18

Hi, the schema.xml example provided for dovecot in /usr/share/doc/dovecot-<verison> does not work anymore with the newest Solr Version (as I know of 7.2.x) because some field classes and filter classes are deprecated in this version. The changes (according to the Solr documentation) would have to be : In the index analyzer : <fieldType name="long" class="solr.TrieLongField" /> into <fieldType name="long" class="solr.LongPointField" /> ......... <filter class="solr.WordDelimiterFilterFactory" generateWordParts="1" generateNumberParts="1" catenateWords="1" catenateNumbers="1" catenateAll="0" splitOnCaseChange="1"/> into <filter class="solr.WordDelimiterGraphFilterFactory" generateWordParts="1" generateNumberParts="1" catenateWords="1" catenateNumbers="1" catenateAll="0" splitOnCaseChange="1"/> and because this is used in the index analyzer it has to be followed by <filter class="solr.FlattenGraphFilterFactory"/> .............. In the query analyzer : <filter class="solr.SynonymFilterFactory" synonyms="synonyms.txt" ignoreCase="true" expand="true"/> into <filter class="solr.SynonymGraphFilterFactory" synonyms="synonyms.txt" ignoreCase="true" expand="true"/> ............... <filter class="solr.WordDelimiterFilterFactory" generateWordParts="1" generateNumberParts="1" catenateWords="0" catenateNumbers="0" catenateAll="0" splitOnCaseChange="1"/> into <filter class="solr.WordDelimiterGraphFilterFactory" generateWordParts="1" generateNumberParts="1" catenateWords="0" catenateNumbers="0" catenateAll="0" splitOnCaseChange="1"/> ......... Don't know if you want to mention this somewhere in your docs. Cheers, Thomas

4 6

getmail, dovecot, virtual users
by David Mehler 05 Mar '18

05 Mar '18

Hello, I've got a dovecot setup with virtual users coming from a MySQL database. The only system user I have is the vmail owner of the email store. What i'd like to do is use the program getmail to back up my gmail account and place that in my user's virtual mail store. I'm having issues making the configuration file and where to put it. Should it go in the virtual user's home directory or somewhere else and run by which user root or the vmail user? If anyone has this working any suggestions appreciated. Thanks. Dave.

2 1

Sieve filter imapflags with "flagvar" not working
by Konstantinos Tsakiltzidis 05 Mar '18

05 Mar '18

Following the rfc5232, Sieve Email Filtering: Imap4flags Extension the following filter doesn't work when the `"flagvar"` part is added require "imap4flags"; if header :contains "X-Spam" "Yes" { setflag "flagvar" "spam"; } removing the `"flagvar"` part works as expected # 2.2.33.2 (d6601f4ec): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.21 (92477967) # OS: Linux 4.9.0-6-amd64 x86_64 Debian 9.1 ext4 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_debug = yes mail_location = maildir:/var/vmail/%d/%n managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = . subscriptions = yes type = private } namespace modulus { list = children location = maildir:/var/vmail/%d/Public:INDEXPVT=~/public/indexes mailbox admin { auto = subscribe } mailbox support { auto = subscribe } mailbox telecoms { auto = subscribe } prefix = Public. separator = . subscriptions = yes type = public } passdb { driver = pam } plugin { acl = vfile mail_log_events = flag_change mail_log_fields = box flags uid sieve = ~/dovecot.sieve sieve_before = /var/vmail/global.sieve sieve_dir = ~/sieve sieve_global_dir = /var/vmail/sieve } protocols = " imap lmtp sieve lmtp" service auth { unix_listener /var/spool/postfix/private/auth { group = mail mode = 0666 user = postfix } unix_listener auth-userdb { group = mail mode = 0666 user = vmail } } service imap-login { inet_listener imap { port = 0 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 0 service_count = 1 vsz_limit = 64 M } service managesieve { process_limit = 1024 } ssl = required ssl_cert = </etc/ssl/certs/mail.crt ssl_key = # hidden, use -P to show it userdb { driver = passwd } protocol imap { mail_max_userip_connections = 20 mail_plugins = " mail_log notify acl" passdb { args = /etc/dovecot/dovecot-ldap-users.conf.ext driver = ldap name = } userdb { args = uid=vmail gid=mail home=/var/vmail/%d/%n driver = static name = } } protocol lda { mail_plugins = " sieve acl" userdb { args = /etc/dovecot/dovecot-ldap-users.conf.ext driver = ldap name = override_fields = uid=vmail gid=mail home=/var/vmail/%d/%n } userdb { args = /etc/dovecot/dovecot-ldap-groups.conf.ext driver = ldap name = override_fields = uid=vmail gid=mail home=/var/vmail/%d/Public/.%n mail=maildir:/var/vmail/%d/Public/.%n } } protocol lmtp { mail_plugins = " sieve acl" postmaster_address = postmaster(a)modulus.gr userdb { args = /etc/dovecot/dovecot-ldap-users.conf.ext driver = ldap name = override_fields = uid=vmail gid=mail home=/var/vmail/%d/%n } userdb { args = /etc/dovecot/dovecot-ldap-groups.conf.ext driver = ldap name = override_fields = uid=vmail gid=mail home=/var/vmail/%d/Public/.%n mail=maildir:/var/vmail/%d/Public/.%n } } protocol doveadm { userdb { args = /etc/dovecot/dovecot-ldap-users.conf.ext driver = ldap name = override_fields = uid=vmail gid=mail home=/var/vmail/%d/%n } userdb { args = /etc/dovecot/dovecot-ldap-groups.conf.ext driver = ldap name = override_fields = uid=vmail gid=mail home=/var/vmail/%d/Public/.%n mail=maildir:/var/vmail/%d/Public/.%n } } protocol sieve { mail_max_userip_connections = 10 managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_line_length = 65536 passdb { args = /etc/dovecot/dovecot-ldap-users.conf.ext driver = ldap name = } userdb { args = uid=vmail gid=mail home=/var/vmail/%d/%n driver = static name = } }

4 10

Outlook 2016 & IMAP Trouble with dovecot
by G A 05 Mar '18

05 Mar '18

Reposting since it went under another thread somehow... Hello List, I'm facing an issue with dovecot (2.2.27) IMAP and Outlook as a client. I have some users that use Outlook (2016) as a client . One of them has a desktop PC in the office and a laptop machine which I've setup some days ago . The user did some work, during the weekend, in his laptop (filling messages into IMAP folders) and to his (and mine) surprise, today in the office he saw that none of his work is reflected on the server. Messages are not where they supposed to be .Tomorrow he will bring the laptop over to check, but I have seen this problem again in the past again with outlook 2016 as a client (specifically I've had a user which during work he was deleting or renaming folders which appear fine on his copy of outlook (ost) but not on the server). Anyone has any experience with dovecot and outlook and related problems ? thanks in advance George

1 0

Dovecot 2.2.34 FTS-SOLR = inconsistent results
by kfx 05 Mar '18

05 Mar '18

Hello, I'm trying to figure why I have inconsistent results with my fts-solr powered search: My test is to find the string "am5oocobey9hait5Wiex8yohgoob9thu" in the 3 emails containing it that I sent to myself: - Directly on the server: doveadm search -u username text am5oocobey9hait5Wiex8yohgoob9thu e2c58a3093235153110800003ea484a8 7937 e2c58a3093235153110800003ea484a8 7938 e0c58a3093235153110800003ea484a8 36479 e0c58a3093235153110800003ea484a8 36480 e0c58a3093235153110800003ea484a8 36481 - RoundCube webmail: 0 Result - On the server with "telnet localhost imap" (2 identical searches): [snip...] a23 SEARCH text am5oocobey9hait5Wiex8yohgoob9thu * SEARCH * 14488 FETCH (FLAGS (\Seen NonJunk)) * 14495 EXISTS a23 OK Search completed (0.015 + 0.000 + 0.004 secs). a25 SEARCH text am5oocobey9hait5Wiex8yohgoob9thu * SEARCH a25 OK Search completed (0.006 + 0.000 + 0.003 secs). Here is my setup: root@myMailServer ~ # uname -a Linux myMailServer.mydomain 3.10.0-693.17.1.el7.x86_64 #1 SMP Thu Jan 25 20:13:58 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux root@myMailServer ~ # cat /etc/redhat-release CentOS Linux release 7.4.1708 (Core) root@plainte ~ # doveconf -n # 2.2.34 (874deae): /usr/local/etc/dovecot/dovecot.conf [50/1259] # Pigeonhole version 0.4.22 (22940fb7) # OS: Linux 3.10.0-693.17.1.el7.x86_64 x86_64 CentOS Linux release 7.4.1708 (Core) ext4 # Hostname: myMailServer.mydomain auth_cache_size = 10 M auth_master_user_separator = * auth_socket_path = /var/run/dovecot/auth-userdb auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@* auth_verbose = yes base_dir = /var/run/dovecot/ debug_log_path = /var/log/dovecot-debug.log default_client_limit = 5120 default_process_limit = 1024 default_vsz_limit = 2 G hostname = mydomain info_log_path = /var/log/dovecot.log lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = * log_path = /var/log/dovecot-error.log login_greeting = Welcome login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_gid = vmail mail_location = maildir:/var/vmail/%Ln mail_plugins = fts fts_solr quota stats mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace { inbox = yes location = maildir:/var/vmail/%Ln mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = type = private } passdb { args = /usr/local/etc/dovecot/deny-users deny = yes driver = passwd-file } passdb { args = /usr/local/etc/dovecot/master-users driver = passwd-file master = yes } passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { fts = solr fts_autoindex = yes fts_autoindex_max_recent = 1000 fts_solr = url=http://127.0.0.1:8983/solr/dovecot/ quota = maildir:User quota quota_rule = *:storage=20GB quota_rule2 = Trash:storage=+200M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = /var/sieve-scripts/%Ln.sieve sieve_dir = /var/vmail/%Ln/home/sieve stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_refresh = 30 secs stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours } postmaster_address = postmaster@mydomain protocols = imap pop3 sieve sieve service auth-worker { user = root } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0777 user = vmail } } service imap-login { inet_listener imaps { port = 993 ssl = yes } process_min_avail = 10 } service imap { process_limit = 2128 } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh user = nobody } service stats { fifo_listener stats-mail { mode = 0600 user = vmail } } ssl_cert = </etc/letsencrypt/live/myMailServer.mydomain/fullchain.pem ssl_key = # hidden, use -P to show it userdb { args = /usr/local/etc/dovecot/dovecot-ldap-userdb.conf.ext driver = ldap override_fields = uid=vmail gid=vmail home=/var/vmail/%Ln/home } verbose_proctitle = yes protocol lda { mail_plugins = fts fts_solr quota stats sieve virtual } protocol imap { mail_max_userip_connections = 20 mail_plugins = fts fts_solr quota stats imap_quota virtual imap_stats } protocol sieve { mail_max_userip_connections = 20 } SOLR: 7.1.0 configured as pear the wiki. No error in solr.log and it seems to be indexing okay: root@myMailServer /var/vmail/solr # du -hs 22G . CRONTAB: 0 3 * * * /usr/bin/curl http://127.0.0.1:8983/solr/dovecot/update?optimize=true > /dev/null 2>&1 */5 * * * * /usr/bin/curl http://127.0.0.1:8983/solr/dovecot/update?commit=true > /dev/null 2>&1 I would be very grateful if someone can point me where my error is, as I've been on this problem for weeks :( Thanks, kfx

1 0

Sieve filter fileinto doesn't preserve flags
by Konstantinos Tsakiltzidis 05 Mar '18

05 Mar '18

Using `fileinto` to move a mail into another mailbox removes flags that have been set with a previous sieve filter with `addflag`. # 2.2.33.2 (d6601f4ec): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.21 (92477967) # OS: Linux 4.9.0-6-amd64 x86_64 Debian 9.1 ext4 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_debug = yes mail_location = maildir:/var/vmail/%d/%n managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = . subscriptions = yes type = private } namespace modulus { list = children location = maildir:/var/vmail/%d/Public:INDEXPVT=~/public/indexes mailbox admin { auto = subscribe } mailbox support { auto = subscribe } mailbox telecoms { auto = subscribe } prefix = Public. separator = . subscriptions = yes type = public } passdb { driver = pam } plugin { acl = vfile mail_log_events = flag_change mail_log_fields = box flags uid sieve = ~/dovecot.sieve sieve_before = /var/vmail/global.sieve sieve_dir = ~/sieve sieve_global_dir = /var/vmail/sieve } protocols = " imap lmtp sieve lmtp" service auth { unix_listener /var/spool/postfix/private/auth { group = mail mode = 0666 user = postfix } unix_listener auth-userdb { group = mail mode = 0666 user = vmail } } service imap-login { inet_listener imap { port = 0 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 0 service_count = 1 vsz_limit = 64 M } service managesieve { process_limit = 1024 } ssl = required ssl_cert = </etc/ssl/certs/mail.crt ssl_key = # hidden, use -P to show it userdb { driver = passwd } protocol imap { mail_max_userip_connections = 20 mail_plugins = " mail_log notify acl" passdb { args = /etc/dovecot/dovecot-ldap-users.conf.ext driver = ldap name = } userdb { args = uid=vmail gid=mail home=/var/vmail/%d/%n driver = static name = } } protocol lda { mail_plugins = " sieve acl" userdb { args = /etc/dovecot/dovecot-ldap-users.conf.ext driver = ldap name = override_fields = uid=vmail gid=mail home=/var/vmail/%d/%n } userdb { args = /etc/dovecot/dovecot-ldap-groups.conf.ext driver = ldap name = override_fields = uid=vmail gid=mail home=/var/vmail/%d/Public/.%n mail=maildir:/var/vmail/%d/Public/.%n } } protocol lmtp { mail_plugins = " sieve acl" postmaster_address = postmaster(a)modulus.gr userdb { args = /etc/dovecot/dovecot-ldap-users.conf.ext driver = ldap name = override_fields = uid=vmail gid=mail home=/var/vmail/%d/%n } userdb { args = /etc/dovecot/dovecot-ldap-groups.conf.ext driver = ldap name = override_fields = uid=vmail gid=mail home=/var/vmail/%d/Public/.%n mail=maildir:/var/vmail/%d/Public/.%n } } protocol doveadm { userdb { args = /etc/dovecot/dovecot-ldap-users.conf.ext driver = ldap name = override_fields = uid=vmail gid=mail home=/var/vmail/%d/%n } userdb { args = /etc/dovecot/dovecot-ldap-groups.conf.ext driver = ldap name = override_fields = uid=vmail gid=mail home=/var/vmail/%d/Public/.%n mail=maildir:/var/vmail/%d/Public/.%n } } protocol sieve { mail_max_userip_connections = 10 managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_line_length = 65536 passdb { args = /etc/dovecot/dovecot-ldap-users.conf.ext driver = ldap name = } userdb { args = uid=vmail gid=mail home=/var/vmail/%d/%n driver = static name = } }

2 3

Re: [enhancement] fts-solr low performance
by azurIt 05 Mar '18

05 Mar '18

>Hi, > >we have activated fts-solr about a week ago and immediately started to >experience really *low* performance with MOVE and EXPUNGE commands. >After several days of googling, tcpdumping and straceing i was able to >find and resolve the problem. > >We are using Dovecot 2.2.27 from Debian Jessie (jessie-backports), >which is doing a soft commit in solr after every MOVE or EXPUNGE >command - this behavior cannot be, currently, changed. The problem is >that this was causing every MOVE/EXPUNGE to take about 6 seconds to >complete. The problem appears to be in very old version of Solr - >3.6.2 (!!). This is the only version which is shipped with current >(Jessie) and also next (Stretch) version of Debian, don't ask my why, >i don't understand it either. Solr versions below 4.0 are NOT >supporting soft commits, so all commits are hard and this was the >problem. Finally, i decided to patch our Dovecot to not send a commit >at all and everything started to be super fast. I'm doing hard commits >every minute via cron so the only consequence of this is that you >cannot search for messages delivered before less then a minute (which >you, usually, don't need to do anyway). > >While googling i also find out that Solr supports autoCommit function >(and from version 4.0 also autoSoftCommit), so there's no reason for >Dovecot to handle this on it's own (and potentially doing hundreds or >thousands of soft commits every second) - you can just set Solr to, >for example, do autoSoftCommit every second and autoCommit every minute: >https://cwiki.apache.org/confluence/display/solr/UpdateHandlers+in+SolrConf… > >Also this wiki page should be updated with warning about old versoins >of Solr not supporting soft commits (you could also mention the >auto[Soft]Commit function): >http://wiki2.dovecot.org/Plugins/FTS/Solr > >I suggest to allow completely disable Solr commits in Dovecot by >configuration, so people like me can handle this easily. What do you >think? > >azur Hi, any news on this? Even Solr documentation suggests to NOT doing commits from applications: https://lucene.apache.org/solr/guide/6_6/shards-and-indexing-data-in-solrcl… Thanks for not ignoring me. azur

2 1

2.2.34 fails to build on OpenBSD
by Brad Smith 04 Mar '18

04 Mar '18

Trying to build Dovecot 2.2.34 on OpenBSD fails. This seems to have been introduced by this commit.. https://github.com/dovecot/core/commit/4a9020ed888caf03fd3132a30a7818b01daa… Fairly -current.. /usr/bin/libtool --tag=CC --mode=link cc -std=gnu99 -O2 -pipe -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -Wno-duplicate-decl-specifier -Wstrict-aliasing=2 -L/usr/local/lib -o libssl_iostream.la iostream-ssl.lo libtool: link: ar cru .libs/libssl_iostream.a .libs/iostream-ssl.o libtool: link: ranlib .libs/libssl_iostream.a cc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-test -DMODULE_DIR=\""/usr/local/lib/dovecot"\" -I/usr/local/include -I../../src/lib -I../../src/lib-test -DMODULE_DIR=\""/usr/local/lib/dovecot"\" -std=gnu99 -O2 -pipe -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -Wno-duplicate-decl-specifier -Wstrict-aliasing=2 -MT test_ssl_iostream-test-ssl-iostream.o -MD -MP -MF .deps/test_ssl_iostream-test-ssl-iostream.Tpo -c -o test_ssl_iostream-test-ssl-iostream.o `test -f 'test-ssl-iostream.c' || echo './'`test-ssl-iostream.c mv -f .deps/test_ssl_iostream-test-ssl-iostream.Tpo .deps/test_ssl_iostream-test-ssl-iostream.Po /usr/bin/libtool --tag=CC --mode=link cc -I../../src/lib -I../../src/lib-test -DMODULE_DIR=\""/usr/local/lib/dovecot"\" -std=gnu99 -O2 -pipe -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -Wno-duplicate-decl-specifier -Wstrict-aliasing=2 -L/usr/local/lib -o test-ssl-iostream test_ssl_iostream-test-ssl-iostream.o libssl_iostream_openssl.la libssl_iostream.la ../lib-test/libtest.la ../lib/liblib.la -export-dynamic warning: library filename /home/ports/pobj/dovecot-2.2.34-no_db-no_ldap-no_mysql-no_postgresql/dovecot-2.2.34/src/lib-ssl-iostream/.libs/libssl_iostream_openssl.so has no version number libtool: link: cc -o .libs/test-ssl-iostream -I../../src/lib -I../../src/lib-test -DMODULE_DIR="/usr/local/lib/dovecot" -std=gnu99 -O2 -pipe -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -Wno-duplicate-decl-specifier -Wstrict-aliasing=2 -Wl,-E test_ssl_iostream-test-ssl-iostream.o /home/ports/pobj/dovecot-2.2.34-no_db-no_ldap-no_mysql-no_postgresql/dovecot-2.2.34/src/lib-ssl-iostream/.libs/libssl_iostream.a /home/ports/pobj/dovecot-2.2.34-no_db-no_ldap-no_mysql-no_postgresql/dovecot-2.2.34/src/lib-test/.libs/libtest.a /home/ports/pobj/dovecot-2.2.34-no_db-no_ldap-no_mysql-no_postgresql/dovecot-2.2.34/src/lib/.libs/liblib.a -L.libs -lssl_iostream_openssl -lssl -lcrypto -Wl,-rpath,/usr/local/lib/dovecot /home/ports/pobj/dovecot-2.2.34-no_db-no_ldap-no_mysql-no_postgresql/dovecot-2.2.34/src/lib/.libs/liblib.a(net.o): In function `net_connect_unix_with_retries': net.c:(.text+0x852): warning: rand() may return deterministic values, is that what you want? .libs/libssl_iostream_openssl.so: undefined reference to `ssl_iostream_cert_match_name' .libs/libssl_iostream_openssl.so: undefined reference to `ssl_iostream_context_deinit' .libs/libssl_iostream_openssl.so: undefined reference to `ssl_iostream_handshake' .libs/libssl_iostream_openssl.so: undefined reference to `ssl_iostream_unref' .libs/libssl_iostream_openssl.so: undefined reference to `iostream_ssl_module_init' .libs/libssl_iostream_openssl.so: undefined reference to `ssl_iostream_has_valid_client_cert' cc: error: linker command failed with exit code 1 (use -v to see invocation) Error while executing cc -o .libs/test-ssl-iostream -I../../src/lib -I../../src/lib-test -DMODULE_DIR="/usr/local/lib/dovecot" -std=gnu99 -O2 -pipe -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -Wno-duplicate-decl-specifier -Wstrict-aliasing=2 -Wl,-E test_ssl_iostream-test-ssl-iostream.o /home/ports/pobj/dovecot-2.2.34-no_db-no_ldap-no_mysql-no_postgresql/dovecot-2.2.34/src/lib-ssl-iostream/.libs/libssl_iostream.a /home/ports/pobj/dovecot-2.2.34-no_db-no_ldap-no_mysql-no_postgresql/dovecot-2.2.34/src/lib-test/.libs/libtest.a /home/ports/pobj/dovecot-2.2.34-no_db-no_ldap-no_mysql-no_postgresql/dovecot-2.2.34/src/lib/.libs/liblib.a -L.libs -lssl_iostream_openssl -lssl -lcrypto -Wl,-rpath,/usr/local/lib/dovecot A 6.0-ish build.. /usr/bin/libtool --tag=CC --mode=link cc -std=gnu99 -O2 -pipe -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -I/usr/include -L/usr/local/lib -o libssl_iostream.la iostream-ssl.lo libtool: link: ar cru .libs/libssl_iostream.a .libs/iostream-ssl.o libtool: link: ranlib .libs/libssl_iostream.a cc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-test -DMODULE_DIR=\""/usr/local/lib/dovecot"\" -I/usr/local/include -I../../src/lib -I../../src/lib-test -DMODULE_DIR=\""/usr/local/lib/do vecot"\" -std=gnu99 -O2 -pipe -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -I/usr/include -MT test_ssl_iostream-test-ssl-iostream.o -MD -MP -MF .deps/test_ssl_iostream-test-ssl-iostream.Tpo -c -o test_ssl_iostream-test-ssl-iostream.o `test -f 'test-ssl-iostream.c' || echo './'`test-ssl-iostream. c mv -f .deps/test_ssl_iostream-test-ssl-iostream.Tpo .deps/test_ssl_iostream-test-ssl-iostream.Po /usr/bin/libtool --tag=CC --mode=link cc -I../../src/lib -I../../src/lib-test -DMODULE_DIR=\""/usr/local/lib/dovecot"\" -std=gnu99 -O2 -pipe -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpoi nter-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -I/usr/include -L/usr/local/lib -o test-ssl-iostream test_ssl_iostream-test-ssl-iostream.o libssl_io stream_openssl.la libssl_iostream.la ../lib-test/libtest.la ../lib/liblib.la -export-dynamic warning: library filename /home/brad/ports/pobj/dovecot-2.2.34-no_db-no_ldap-no_mysql-no_postgresql/dovecot-2.2.34/src/lib-ssl-iostream/.libs/libssl_iostream_openssl.so has no version number libtool: link: cc -o .libs/test-ssl-iostream -I../../src/lib -I../../src/lib-test -DMODULE_DIR="/usr/local/lib/dovecot" -std=gnu99 -O2 -pipe -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-ar ith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -I/usr/include -Wl,-E test_ssl_iostream-test-ssl-iostream.o /home/brad/ports/pobj/dovecot-2.2.34-no_db-no_ldap- no_mysql-no_postgresql/dovecot-2.2.34/src/lib-ssl-iostream/.libs/libssl_iostream.a /home/brad/ports/pobj/dovecot-2.2.34-no_db-no_ldap-no_mysql-no_postgresql/dovecot-2.2.34/src/lib-test/.libs/libtest.a /home /brad/ports/pobj/dovecot-2.2.34-no_db-no_ldap-no_mysql-no_postgresql/dovecot-2.2.34/src/lib/.libs/liblib.a -L.libs -lssl_iostream_openssl -lssl -lcrypto -Wl,-rpath,/usr/local/lib/dovecot .libs/libssl_iostream_openssl.so: undefined reference to `ssl_iostream_cert_match_name' .libs/libssl_iostream_openssl.so: undefined reference to `ssl_iostream_context_deinit' .libs/libssl_iostream_openssl.so: undefined reference to `o_stream_ref' .libs/libssl_iostream_openssl.so: undefined reference to `t_malloc' .libs/libssl_iostream_openssl.so: undefined reference to `buffer_append_space_unsafe' .libs/libssl_iostream_openssl.so: undefined reference to `i_error' .libs/libssl_iostream_openssl.so: undefined reference to `o_stream_get_fd' .libs/libssl_iostream_openssl.so: undefined reference to `i_stream_compress' .libs/libssl_iostream_openssl.so: undefined reference to `o_stream_set_max_buffer_size' .libs/libssl_iostream_openssl.so: undefined reference to `p_strdup' .libs/libssl_iostream_openssl.so: undefined reference to `ssl_iostream_handshake' .libs/libssl_iostream_openssl.so: undefined reference to `o_stream_unref' .libs/libssl_iostream_openssl.so: undefined reference to `safe_memset' .libs/libssl_iostream_openssl.so: undefined reference to `i_stream_alloc' .libs/libssl_iostream_openssl.so: undefined reference to `i_stream_get_data_size' .libs/libssl_iostream_openssl.so: undefined reference to `o_stream_get_buffer_used_size' .libs/libssl_iostream_openssl.so: undefined reference to `i_strdup_printf' .libs/libssl_iostream_openssl.so: undefined reference to `o_stream_close' .libs/libssl_iostream_openssl.so: undefined reference to `i_fatal_status' .libs/libssl_iostream_openssl.so: undefined reference to `buffer_append' .libs/libssl_iostream_openssl.so: undefined reference to `i_strdup' .libs/libssl_iostream_openssl.so: undefined reference to `i_strocpy' .libs/libssl_iostream_openssl.so: undefined reference to `str_printfa' .libs/libssl_iostream_openssl.so: undefined reference to `ssl_iostream_unref' .libs/libssl_iostream_openssl.so: undefined reference to `i_panic' .libs/libssl_iostream_openssl.so: undefined reference to `i_stream_get_max_buffer_size' .libs/libssl_iostream_openssl.so: undefined reference to `i_stream_try_alloc' .libs/libssl_iostream_openssl.so: undefined reference to `i_stream_unref' .libs/libssl_iostream_openssl.so: undefined reference to `buffer_append_zero' .libs/libssl_iostream_openssl.so: undefined reference to `i_stream_get_name' .libs/libssl_iostream_openssl.so: undefined reference to `i_debug' .libs/libssl_iostream_openssl.so: undefined reference to `o_stream_set_name' .libs/libssl_iostream_openssl.so: undefined reference to `i_stream_create' .libs/libssl_iostream_openssl.so: undefined reference to `iostream_ssl_module_init' .libs/libssl_iostream_openssl.so: undefined reference to `i_stream_get_fd' .libs/libssl_iostream_openssl.so: undefined reference to `i_stream_close' .libs/libssl_iostream_openssl.so: undefined reference to `o_stream_create' .libs/libssl_iostream_openssl.so: undefined reference to `i_stream_skip' .libs/libssl_iostream_openssl.so: undefined reference to `io_stream_set_error' .libs/libssl_iostream_openssl.so: undefined reference to `i_fatal' .libs/libssl_iostream_openssl.so: undefined reference to `str_c' .libs/libssl_iostream_openssl.so: undefined reference to `o_stream_send' .libs/libssl_iostream_openssl.so: undefined reference to `o_stream_flush' .libs/libssl_iostream_openssl.so: undefined reference to `buffer_delete' .libs/libssl_iostream_openssl.so: undefined reference to `o_stream_set_flush_pending' .libs/libssl_iostream_openssl.so: undefined reference to `o_stream_uncork' .libs/libssl_iostream_openssl.so: undefined reference to `i_stream_get_data' .libs/libssl_iostream_openssl.so: undefined reference to `o_stream_switch_ioloop' .libs/libssl_iostream_openssl.so: undefined reference to `o_stream_get_error' .libs/libssl_iostream_openssl.so: undefined reference to `o_stream_set_flush_callback' .libs/libssl_iostream_openssl.so: undefined reference to `t_strsplit_spaces' .libs/libssl_iostream_openssl.so: undefined reference to `o_stream_get_name' .libs/libssl_iostream_openssl.so: undefined reference to `i_stream_read_data' .libs/libssl_iostream_openssl.so: undefined reference to `i_info' .libs/libssl_iostream_openssl.so: undefined reference to `t_strdup_noconst' .libs/libssl_iostream_openssl.so: undefined reference to `i_stream_get_error' .libs/libssl_iostream_openssl.so: undefined reference to `o_stream_get_buffer_avail_size' .libs/libssl_iostream_openssl.so: undefined reference to `t_strndup' .libs/libssl_iostream_openssl.so: undefined reference to `i_stream_set_input_pending' .libs/libssl_iostream_openssl.so: undefined reference to `i_stream_set_name' .libs/libssl_iostream_openssl.so: undefined reference to `buffer_create_dynamic' .libs/libssl_iostream_openssl.so: undefined reference to `pool_alloconly_create' .libs/libssl_iostream_openssl.so: undefined reference to `o_stream_set_no_error_handling' .libs/libssl_iostream_openssl.so: undefined reference to `default_pool' .libs/libssl_iostream_openssl.so: undefined reference to `ssl_iostream_has_valid_client_cert' .libs/libssl_iostream_openssl.so: undefined reference to `buffer_free' .libs/libssl_iostream_openssl.so: undefined reference to `t_strdup_printf' .libs/libssl_iostream_openssl.so: undefined reference to `buffer_get_writable_size' .libs/libssl_iostream_openssl.so: undefined reference to `net_ip_compare' .libs/libssl_iostream_openssl.so: undefined reference to `o_stream_cork' .libs/libssl_iostream_openssl.so: undefined reference to `t_str_new' .libs/libssl_iostream_openssl.so: undefined reference to `t_strconcat' collect2: ld returned 1 exit status Error while executing cc -o .libs/test-ssl-iostream -I../../src/lib -I../../src/lib-test -DMODULE_DIR="/usr/local/lib/dovecot" -std=gnu99 -O2 -pipe -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpoi nter-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -I/usr/include -Wl,-E test_ssl_iostream-test-ssl-iostream.o /home/brad/ports/pobj/dovecot-2.2.34-no_db-n o_ldap-no_mysql-no_postgresql/dovecot-2.2.34/src/lib-ssl-iostream/.libs/libssl_iostream.a /home/brad/ports/pobj/dovecot-2.2.34-no_db-no_ldap-no_mysql-no_postgresql/dovecot-2.2.34/src/lib-test/.libs/libtest. a /home/brad/ports/pobj/dovecot-2.2.34-no_db-no_ldap-no_mysql-no_postgresql/dovecot-2.2.34/src/lib/.libs/liblib.a -L.libs -lssl_iostream_openssl -lssl -lcrypto -Wl,-rpath,/usr/local/lib/dovecot

2 1

Virtual question
by LuKreme 03 Mar '18

03 Mar '18

“For each virtual directory you need to create a dovecot-virtual file. Its syntax is like:” OK, where does this file get created? Say I want the users to have a virtual mailbox that is messages received in the last month, does that file go into each user' s Maildir path? It sounds like I have to create a virtual folder for each user, then any folders inside that folders, and then the config files in each of the sub folders. user1/Maildir/virtual/month/dovecot-virtual user1/Maildir/virtual/week/dovecot-virtual user1/Maildir/virtual/flagged/dovecot-virtual user1/Maildir/virtual/Amazon/dovecot-virtual user2/Maildir/virtual/month/dovecot-virtual user2/Maildir/virtual/week/dovecot-virtual user2/Maildir/virtual/flagged/dovecot-virtual user2/Maildir/virtual/Amazon/dovecot-virtual Yes? If so, is there anyway to have a "global”virtual that applies to all users (but not that unifies the mail between users or anything like that). Also, will virtual mailboxes show up automatically for the user in the folder list or will they have to specifically subscribe to them? (Assuming they use a client that allows subscribing instead of auto showing all mailboxes like iOS). ˜kremels/ $ cat Maildir/virtual/month/dovecot-vitual # ~/Maildir/virtual/month/dovecot-virtual INBOX work/* all younger 2678400 That should create a mailbox "month” in a folder named "virtual” that shows all the messages from the last 31d, yes? And I should be able to access that mailbox in a MUA like Roundcube or <spit>Thunderbird? -- My main job is trying to come up with new and innovative and effective ways to reject even more mail. I'm up to about 97% now.

4 7

Debian: Dovecot 2.3.0.1 won't start if dovecot-pop3d is missing
by Markus Schönhaber 03 Mar '18

03 Mar '18

Hello, given a Debian 9 system with Dovecot 2.2.34 installed from self-built packages made from the official tarball combined with Stephan Bosch's debian files (upgraded multiple times from packages made in a similar way). Today, I updated this system to 2.3.0.1 from the official repository at repo.dovecot.org. After the update, dovecot wouldn't start because of: > dovecot: master: Fatal: service(pop3) access(/usr/lib/dovecot/pop3) failed: No such file or directory Obviously, installing the dovecot-pop3d package, which provides the pop3 binary, made the error go away. Nevertheless, until v. 2.2.34 not installing the pop3 binary had never been a problem. Trying to solve this, I even commented the following sections in the config (which previously hadn't caused problems since the lines defining the ports etc. had already been commented): > 10-master.conf: > service pop3-login { > inet_listener pop3 { > #port = 110 > } > inet_listener pop3s { > #port = 995 > #ssl = yes > } > } > service pop3 { > # Max. number of POP3 processes (connections) > #process_limit = 1024 > } > 10-director.conf: > service pop3-login { > #executable = pop3-login director > } After those changes I had the configuration shown below, which produced the described error. Why would Dovecot insist that the pop3 binary has to exist on the system? BTW: Note the protocols = line in the doveconf -n output, whereas > # grep -R protocols /etc/dovecot/ > /etc/dovecot/dovecot.conf:# Most (but not all) settings can be overridden by different protocols and/or > /etc/dovecot/dovecot.conf:# Enable installed protocols > /etc/dovecot/dovecot.conf:!include_try /usr/share/dovecot/protocols.d/*.protocol > /etc/dovecot/conf.d/20-managesieve.conf:#protocols = $protocols sieve > /etc/dovecot/conf.d/10-ssl.conf:# SSL protocols to use > /etc/dovecot/conf.d/10-ssl.conf:#ssl_protocols = !SSLv2 > # ll /usr/share/dovecot/protocols.d/ > insgesamt 12 > -rw-r--r-- 1 root root 28 Mär 2 14:51 imapd.protocol > -rw-r--r-- 1 root root 28 Mär 2 14:51 lmtpd.protocol > -rw-r--r-- 1 root root 29 Mär 2 14:51 managesieved.protocol Regards mks doveconf -n # 2.3.0.1 (ffd8a29): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.0.1 (d33dca2) # OS: Linux 4.9.0-6-amd64 x86_64 Debian 9.3 ext4 auth_master_user_separator = * auth_mechanisms = plain login dict { quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } imap_id_log = * mail_home = /var/spool/vmail/home/%d/%n mail_location = mdbox:/var/spool/vmail/mail/%d/%n mail_log_prefix = "%s[%p](%u)<%{session}>: " mail_plugins = " quota acl" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace { list = children location = mdbox:/var/spool/vmail/mail/Public:INDEXPVT=/var/spool/vmail/home/Public prefix = Public/ separator = / subscriptions = no type = public } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-proxy-sql.conf.ext driver = sql } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } passdb { args = /etc/dovecot/dovecot-system-sql.conf.ext driver = sql } plugin { acl = vfile mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = dict:User quota::proxy::quota recipient_delimiter = + sieve = file:~/sieve;active=~/.dovecot.sieve sieve_after = /var/spool/vmail/home/1-global/sieve } protocols = imap pop3 lmtp imap lmtp sieve service auth { inet_listener { port = 12345 } unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } service dict { unix_listener dict { group = vmail mode = 0600 user = vmail } } service imap-login { inet_listener imap_2 { port = 10143 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } ssl_cert = </etc/ssl/certs/complete.crt ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it userdb { args = /etc/dovecot/master-users default_fields = master_user=%u driver = passwd-file } userdb { args = /etc/dovecot/dovecot-sql.conf.ext default_fields = master_user=%u driver = sql } userdb { args = /etc/dovecot/dovecot-system-sql.conf.ext driver = sql } verbose_proctitle = yes protocol lmtp { mail_plugins = " quota acl quota sieve" postmaster_address = postmaster@<domain> } protocol lda { mail_plugins = " quota acl sieve" } protocol imap { mail_max_userip_connections = 40 mail_plugins = " quota acl imap_quota acl" } remote 192.168.1.116 { protocol imap { disable_plaintext_auth = no } } remote 192.168.1.127 { protocol imap { disable_plaintext_auth = no } }

3 4

Re: Upgrade to 2.3.0.1 bre aks server
by post＠volker-wysk.de 03 Mar '18

03 Mar '18

Another remark: I have installed the new version from the PPA provided by dovecot.org: deb https://repo.dovecot.org/ce-2.3-latest/ubuntu/xenial xenial main Before (2.2.22) I had installed it from the ubuntu (canonical) package sources - and not the PPA provided by dovecot.org. Could it be, that the two don't play together? Bye Volker

1 0

Re: Upgrade to 2.3.0.1 bre aks server
by post＠volker-wysk.de 03 Mar '18

03 Mar '18

Here is my "dovecot -n": # 2.3.0.1 (ffd8a29): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.0.1 (d33dca2) # OS: Linux 4.4.0-116-generic x86_64 Ubuntu 16.04.4 LTS auth_debug = yes auth_username_format = %n auth_verbose = yes hostname = volker-wysk.de log_path = /var/log/dovecot.log mail_debug = yes mail_location = mdbox:~/lib/Dovecot-Mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapsieve vnd.dovecot.imapsieve namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Entwürfe { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Papierkorb { special_use = \Trash } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } mailbox "Versendete Nachrichten" { special_use = \Sent } prefix = separator = . } passdb { driver = pam } plugin { imapsieve_mailbox1_before = file:/usr/lib/dovecot/sieve/report-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Spam imapsieve_mailbox2_before = file:/usr/lib/dovecot/sieve/report-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Spam imapsieve_mailbox2_name = * sieve = ~/.dovecot.sieve sieve_dir = ~/lib/Sieve sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.environment sieve_pipe_bin_dir = /usr/lib/dovecot/sieve sieve_plugins = sieve_imapsieve sieve_extprograms } postmaster_address = post(a)volker-wysk.de protocols = imap lmtp sieve ssl = required ssl_cert = </etc/ssl/certs/dovecot.pem ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it userdb { driver = passwd } protocol lmtp { mail_plugins = " sieve mail_log notify" } protocol lda { mail_plugins = " sieve" } protocol imap { mail_max_userip_connections = 50 mail_plugins = " imap_sieve" }

1 0

Upgrade to 2.3.0.1 breaks server
by post＠volker-wysk.de 03 Mar '18

03 Mar '18

Hi I've upgraded dovecot from 2.2.22 to 2.3.0.1, and now I can't log in any longer. My mail client says that the user name and password are rejected by dovecot. I get this messsage in the system logs: % journalctl -u dovecot.service (...) Mär 03 01:39:23 desktop systemd[1]: Stopped Dovecot IMAP/POP3 email server. Mär 03 01:39:23 desktop systemd[1]: Started Dovecot IMAP/POP3 email server. Mär 03 01:39:39 desktop auth[5736]: PAM audit_log_acct_message() failed: Operation not permitted I've followed the instructions in https://wiki2.dovecot.org/Upgrading/2.3 and https://repo.dovecot.org/ (for Ubuntu Xenial). Any ideas..? Bye V.W.

1 0

Autoexpunge of lazy_expunge namespace
by Angel L. Mateo 02 Mar '18

02 Mar '18

Hi, I'm using autoexpunge to clean my users' Trash and Spam mailboxes. But I'm also using lazy_expunge to keep a copy of deleted messages. Is there any to configure lazy_expunge namespace to be autoexpunged too? My lazy_expunge configuration is the "1 Namespace" described at https://wiki2.dovecot.org/Plugins/Lazyexpunge -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

1 0

Re: Make fails with 2.3.0.1 & 2.2.34 on Mac OS X 10.7.5
by Aki Tuomi 02 Mar '18

02 Mar '18

> On 02 March 2018 at 08:42 James Brown <jlbrown(a)bordo.com.au> wrote: > > > > On 1 Mar 2018, at 9:52 pm, Aki Tuomi <aki.tuomi(a)dovecot.fi <mailto:aki.tuomi@dovecot.fi>> wrote: > > > > Can you also post your config.h? It should be at source root. > > > > Aki > > I tried but it was too big to post on the mailing list. I’m not sure if you got the direct email. > Yeah I got it. We have attempted to compile our code with OpenSSL 1.0, 1.0.2 and 1.1.0, but I'll try the specific releases too. Can you try this patch? diff --git a/src/lib-dcrypt/dcrypt-openssl.c b/src/lib-dcrypt/dcrypt-openssl.c index 26c9b91..187bb75 100644 --- a/src/lib-dcrypt/dcrypt-openssl.c +++ b/src/lib-dcrypt/dcrypt-openssl.c @@ -9,17 +9,17 @@ #include "array.h" #include "module-dir.h" #include "dovecot-openssl-common.h" -#include <openssl/evp.h> -#include <openssl/sha.h> -#include <openssl/err.h> -#include <openssl/rsa.h> -#include <openssl/ec.h> -#include <openssl/bio.h> -#include <openssl/pem.h> -#include <openssl/x509.h> -#include <openssl/engine.h> -#include <openssl/hmac.h> -#include <openssl/objects.h> +#include "openssl/evp.h" +#include "openssl/sha.h" +#include "openssl/err.h" +#include "openssl/rsa.h" +#include "openssl/ec.h" +#include "openssl/bio.h" +#include "openssl/pem.h" +#include "openssl/x509.h" +#include "openssl/engine.h" +#include "openssl/hmac.h" +#include "openssl/objects.h" #include "dcrypt.h" #include "dcrypt-private.h" And if it does not work, add after the includes #pragma message("OpenSSL version is " OPENSSL_VERSION_TEXT) #error See above And provide output? Aki

1 0

Make fails with 2.3.0.1 & 2.2.34 on Mac OS X 10.7.5
by James Brown 02 Mar '18

02 Mar '18

Have tried 2.3.0, 2.3.0.1 & 2.2.34. Compile is failing for me. ./configure --with-mysql --with-ssl=openssl: ... checking for SSL_read in -lssl... yes checking openssl/ssl.h usability... yes checking openssl/ssl.h presence... yes checking for openssl/ssl.h... yes checking openssl/err.h usability... yes checking openssl/err.h presence... yes checking for openssl/err.h... yes checking if OpenSSL version is 1.0.1 or newer... true checking if OpenSSL version is 1.0.2 or better... true checking whether SSL_clear_options exists... no ... No problems. But then ‘make’ ends with: dcrypt-openssl.c:117: error: field 'ctx' has incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_ctx_hmac_destroy': dcrypt-openssl.c:451: warning: implicit declaration of function 'HMAC_cleanup' dcrypt-openssl.c: In function 'dcrypt_openssl_generate_ec_key': dcrypt-openssl.c:555: error: dereferencing pointer to incomplete type dcrypt-openssl.c:556: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_ecdh_derive_secret_local': dcrypt-openssl.c:588: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_ecdh_derive_secret_peer': dcrypt-openssl.c:668: error: dereferencing pointer to incomplete type dcrypt-openssl.c:697: error: dereferencing pointer to incomplete type dcrypt-openssl.c:698: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_store_private_key_dovecot': dcrypt-openssl.c:1461: error: dereferencing pointer to incomplete type dcrypt-openssl.c:1482: error: dereferencing pointer to incomplete type dcrypt-openssl.c:1489: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_load_private_key': dcrypt-openssl.c:1615: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_store_public_key': dcrypt-openssl.c:1765: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_private_to_public_key': dcrypt-openssl.c:1801: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_name2oid': dcrypt-openssl.c:2062: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_public_key_id_old': dcrypt-openssl.c:2112: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_private_key_id_old': dcrypt-openssl.c:2135: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_public_key_id_evp': dcrypt-openssl.c:2153: error: dereferencing pointer to incomplete type make[3]: *** [libdcrypt_openssl_la-dcrypt-openssl.lo] Error 1 make[2]: *** [all-recursive] Error 1 make[1]: *** [all-recursive] Error 1 make: *** [all] Error 2 Any suggestions? Thanks, James.

2 6

v2.2.34 released
by Timo Sirainen 01 Mar '18

01 Mar '18

https://dovecot.org/releases/2.2/dovecot-2.2.34.tar.gz https://dovecot.org/releases/2.2/dovecot-2.2.34.tar.gz.sig * CVE-2017-15130: TLS SNI config lookups may lead to excessive memory usage, causing imap-login/pop3-login VSZ limit to be reached and the process restarted. This happens only if Dovecot config has local_name { } or local { } configuration blocks and attacker uses randomly generated SNI servernames. * CVE-2017-14461: Parsing invalid email addresses may cause a crash or leak memory contents to attacker. For example, these memory contents might contain parts of an email from another user if the same imap process is reused for multiple users. First discovered by Aleksandar Nikolic of Cisco Talos. Independently also discovered by "flxflndy" via HackerOne. * CVE-2017-15132: Aborted SASL authentication leaks memory in login process. * Linux: Core dumping is no longer enabled by default via PR_SET_DUMPABLE, because this may allow attackers to bypass chroot/group restrictions. Found by cPanel Security Team. Nowadays core dumps can be safely enabled by using "sysctl -w fs.suid_dumpable=2". If the old behaviour is wanted, it can still be enabled by setting: import_environment=$import_environment PR_SET_DUMPABLE=1 * doveconf output now includes the hostname. + mail_attachment_detection_options setting controls when $HasAttachment and $HasNoAttachment keywords are set for mails. + imap: Support fetching body snippets using FETCH (SNIPPET) or (SNIPPET (LAZY=FUZZY)) + fs-compress: Automatically detect whether input is compressed or not. Prefix the compression algorithm with "maybe-" to enable the detection, for example: "compress:maybe-gz:6:..." + Added settings to change dovecot.index* files' optimization behavior. See https://wiki2.dovecot.org/IndexFiles#Settings + Auth cache can now utilize auth workers to do password hash verification by setting auth_cache_verify_password_with_worker=yes. + Added charset_alias plugin. See https://wiki2.dovecot.org/Plugins/CharsetAlias + imap_logout_format and pop3_logout_format settings now support all of the generic variables (e.g. %{rip}, %{session}, etc.) + Added auth_policy_check_before_auth, auth_policy_check_after_auth and auth_policy_report_after_auth settings. - v2.2.33: doveadm-server: Various fixes related to log handling. - v2.2.33: doveadm failed when trying to access UNIX socket that didn't require authentication. - v2.2.33: doveadm log reopen stopped working - v2.2.30+: IMAP stopped advertising SPECIAL-USE capability - v2.2.30+: IMAP stopped sending untagged OK/NO storage notifications - replication: dsync sends unnecessary replication notification for changes it does internally. NOTE: Folder creates, renames, deletes and subscribes still trigger unnecessary replication notifications, but these should be rather rare. - mail_always/never_cache_fields setting changes weren't applied for existing dovecot.index.cache files. - Fix compiling and other problems with OpenSSL v1.1 - auth policy: With master user logins, lookup using login username. - FTS reindexed all mails unnecessarily after loss of dovecot.index.cache file - mdbox rebuild repeatedly fails with "missing map extension" - SSL connections may have been hanging with imapc or doveadm client. - cassandra: Using protocol v3 (Cassandra v2.1) caused memory leaks and also timestamps weren't set to queries. - fs-crypt silently ignored public/private keys specified in configuration (mail_crypt_global_public/private_key) and just emitted plaintext output. - lock_method=dotlock caused crashes - imapc: Reconnection may cause crashes and other errors

7 9

Released Pigeonhole v0.4.22 for Dovecot v2.2.34.
by Stephan Bosch 01 Mar '18

01 Mar '18

Hello Dovecot users, Here is a new Pigeonhole release that goes with the new Dovecot v2.2.34 release. This release is not strictly necessary, as previous versions should be usable as well. This release only contains bugfixes. Changelog v0.4.22: - Fixed filesystem path handling problem: sieve plugin could have assert-crashed with specific path lengths with: "Panic: file realpath.c: line 86 (path_normalize): assertion failed: (npath_pos + 1 < npath + asize)". - Sieve extprograms plugin: Large output from "execute" command crashed delivery. Fixed buffering issue in code that handles output from the external program. - editheader extension: Extensively reworked the low-level implementation of adding and removing headers. This solves a few integer arithmetic problems reported by Clang runtime checks, but also improves code structure and reliability in general. - imapsieve: Fix assert crash occurring when selected messages are expunged concurrently by the time Sieve filter is to be applied. - imap4flags extension: Fix binary byte-code corruption occurring when the setflag, addflag, or removeflag command's flag-list is a variable. - enotify extension: mailto method: Fixed parsing of mailto URI with only a header part. - enotify extension: mailto method: Make sure "From:" header is set to a usable address and not "(null)". - Fixed writing address headers to outgoing messages. It sometimes erroneously applied another layer of MIME header encoding. The release is available as follows: https://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.22.t… https://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.22.t… Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

question about quota setting with postfix and dovecot
by Masaharu Kawada 01 Mar '18

01 Mar '18

Dear dovecot-list, I have questions regarding setting up quota with postfix(Maildir format)+ dovect. My main point of the question is to know how the user password is used in quota in this case. Please see the below configuration info and my questions are in the bottom. Here are what have been done: <Postfix side configuration> /etc/postfix/main.cf: ----- myhostname = mail.example.com mydomain = example.com myorigin = $mydomain inet_interfaces = all mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain home_mailbox = Maildir/ mailbox_command = /usr/libexec/dovecot/dovecot-lda -f "$SENDER" -a "$RECIPIENT" -d "$USER" <--Add ----- <Dovecot side configuration> 1. /etc/dovecot/conf.d/10-auth.conf: #!include auth-system.conf.ext #!include auth-sql.conf.ext #!include auth-ldap.conf.ext !include auth-passwdfile.conf.ext <---Only enabled #!include auth-checkpassword.conf.ext #!include auth-vpopmail.conf.ext #!include auth-static.conf.ext 2. /etc/dovecot/conf.d/10-master.conf service auth { snip/ unix_listener auth-userdb { mode = 0666 <---The permission for userdb 666 #user = #group = snip/ 3. /etc/dovecot/conf.d/10-mail.conf: mail_location = maildir:~/Maildir snip/ mail_plugins = $mail_plugins quota <---set the plugin snip/ 4. /etc/dovecot/conf.d/15-lda.conf: snip/ postmaster_address = root(a)example.com <---Add postmaster snip/ protocol lda { mail_plugins = $mail_plugins <--set the plugin } 5. /etc/dovecot/conf.d/20-imap.conf: protocol imap { mail_plugins = $mail_plugins imap_quota <--set the plugin snip/ 6. /etc/dovecot/conf.d/20-pop3.conf: snip/ protocol pop3 { mail_plugins = $mail_plugins quota <--set the plugin snip/ 7. /etc/dovecot/conf.d/90-quota.conf: plugin { <--set global quota quota = maildir:<User quota> quota_rule = *:storage=100M quota_rule2 = Trash:storage=+100M } 8. /etc/dovecot/conf.d/auth-passwdfile.conf.ext: snip/ passdb { driver = passwd-file args = scheme=CRYPT username_format=%u /etc/dovecot/users <--Path for passwdfile } userdb { driver = passwd-file args = username_format=%u /etc/dovecot/users } snip/ 9. /etc/dovecot/users: test004:{SSHA256}hFxB8tbyZrCCcwZKDaQEiUfojbRovOq8ECU0syPHQTCY0233:18222:18222::/home/test004::userdb_quota_rule=*:storage=1M test005:{SSHA256}hFxB8tbyZrCCcwZKDaQEiUfojbRovOq8ECU0syPHQTCY0233:18223:18223::/home/test005::userdb_quota_rule=*:storage=1M test006:{SSHA256}hFxB8tbyZrCCcwZKDaQEiUfojbRovOq8ECU0syPHQTCY0233:18224:18224::/home/test006::userdb_quota_rule=*:storage=1M Note:The hashed password is created running the blow command: # doveadm pw -s ssha256 10. /etc/dovecot/dovecot.conf: snip/ protocols = imap pop3 <--Available protocols snip/ 11. # service postfix restart # service dovcot restart Question: 1./etc/dovecot/users is supposed to be seen instead of /etc/passwd for authentification of imap and pops in receiving emails, isn't it? 2.If the answer for above question 1 is 'YES', then doesn't it require to get all password in /etc/passwd hashed for each user and place all of them into /etc/dovecot/users? 3.If the answer for above question 1 is 'NO', then what the hashed-password in /etc/dovcot/users such as {SSHA256}hFX... used for? Excuse me if those are silly questions, but I am not a dovecot person and would very much appreciate it if anyone would kindly give me a hand on this. Regards, Masaharu Kawada

1 0

Using virtual folders with younger and index files
by Rob Hoelz 01 Mar '18

01 Mar '18

Hi list, I just encountered a problem while using dovecot's Virtual plugin with 2.3.0. I managed to solve the issue, but I wanted to bring it to the attention of others on the list to see if there exists a better solution, if I found a bug, or if it's just a matter of updating documentation. I have a virtual folder to get the most recent two weeks of mails; it looks something like this: > INBOX > all younger 1209600 I made this folder back in October. Lately, I started to notice that the virtual folder had a surprising amount of mail in it - I don't get 1,000 e-mails per week! After some doveadm commands, I realized that e-mails from October were still present in my virtual folder! Updating the dovecot-virtual would clear away e-mails older than two weeks (I needed to actually introduce a change, even if it was just whitespace - just touching the file didn't update things), and removing the dovecot index file also cleared things away. In then end, I ended up just telling dovecot to disable on-disk indexes for that folder. I created this folder based on the examples on https://wiki.dovecot.org/Plugins/Virtual - I'm wondering if I found a bug or if that page should be changed to recommend disabling on-disk indexes when using certain search query filters such as "younger". If the latter, I can always make the change - just let me know! -Rob

2 2

v2.3.0.1 released
by Timo Sirainen 28 Feb '18

28 Feb '18

https://dovecot.org/releases/2.3/dovecot-2.3.0.1.tar.gz https://dovecot.org/releases/2.3/dovecot-2.3.0.1.tar.gz.sig Small patch release to fix the worst bugs in v2.3.0. v2.3.1 is coming in about a month with a lot more changes. * CVE-2017-15130: TLS SNI config lookups may lead to excessive memory usage, causing imap-login/pop3-login VSZ limit to be reached and the process restarted. This happens only if Dovecot config has local_name { } or local { } configuration blocks and attacker uses randomly generated SNI servernames. * CVE-2017-14461: Parsing invalid email addresses may cause a crash or leak memory contents to attacker. For example, these memory contents might contain parts of an email from another user if the same imap process is reused for multiple users. First discovered by Aleksandar Nikolic of Cisco Talos. Independently also discovered by "flxflndy" via HackerOne. * CVE-2017-15132: Aborted SASL authentication leaks memory in login process. * Linux: Core dumping is no longer enabled by default via PR_SET_DUMPABLE, because this may allow attackers to bypass chroot/group restrictions. Found by cPanel Security Team. Nowadays core dumps can be safely enabled by using "sysctl -w fs.suid_dumpable=2". If the old behaviour is wanted, it can still be enabled by setting: import_environment=$import_environment PR_SET_DUMPABLE=1 - imap-login with SSL/TLS connections may end up in infinite loop

1 0

Re: Quota status to postfix in distributed environment (Karol Augustin)
by SAAHIL IFTEKHAR 28 Feb '18

28 Feb '18

Hi Karol Thanks for taking time to go through the email and replying. I'll rewrite the issue again --> For example consider there two nodes. These each having their postfix and dovecot. I am trying to implement quota status to postfix to both the below cases:- case 1) mail sent within the node case 2) mail sent across the nodes In case 1 the postfix will query the dovecot of same node white in case 2 it will query the dovecot of other node. But suppose I am sending mail within the node and dovecot in other node is down. Mail will not go within the node. Even it will not defer also. This is evident from the logs(in last sections). I'll try to work suggestions you have given in mysetup though and post the relevant output. But if you have any other suggestion regarding what i have wrote just now. please let me know. Regards On 28-Feb-2018 5:19 am, <dovecot-request(a)dovecot.org> wrote: Send dovecot mailing list submissions to dovecot(a)dovecot.org To subscribe or unsubscribe via the World Wide Web, visit https://dovecot.org/mailman/listinfo/dovecot or, via email, send a message with subject or body 'help' to dovecot-request(a)dovecot.org You can reach the person managing the list at dovecot-owner(a)dovecot.org When replying, please edit your Subject line so it is more specific than "Re: Contents of dovecot digest..." Today's Topics: 1. Re: Quota status to postfix in distributed environment (@lbutlr) (SAAHIL IFTEKHAR) 2. Re: Quota status to postfix in distributed environment (Karol Augustin) 3. Re: Quota status to postfix in distributed environment (LuKreme) 4. Re: Quota status to postfix in distributed environment (Karol Augustin) ---------------------------------------------------------------------- Message: 1 Date: Tue, 27 Feb 2018 19:29:44 +0530 From: SAAHIL IFTEKHAR <response2saahil(a)gmail.com> To: dovecot(a)dovecot.org Subject: Re: Quota status to postfix in distributed environment (@lbutlr) Message-ID: <CAM5TiAQ2CT+u_BKEn0sKonirOQLD_Q0v=pVCcJBCiJfC08p7Mw(a)mail.gmail.com> Content-Type: text/plain; charset="utf-8" Hi Actually, the requirement is such that we have to work with this version only. I want to point out that the reason from the problem can be found out from logs(the end section). The "check_policy_service" in main.cf of postfix is the problem according to me. This configuration as a part of quota staus to postfix configuration. I hope many have went through this scenario or similar. So I am hoping to get some help for the same. Regards ------------------------------ Message: 2 Date: Tue, 27 Feb 2018 14:18:31 +0000 From: Karol Augustin <karol(a)augustin.pl> To: dovecot(a)dovecot.org Subject: Re: Quota status to postfix in distributed environment Message-ID: <b50c30e1b65c3875565ca2e49efeaafd(a)augustin.pl> Content-Type: text/plain; charset=US-ASCII On 2018-02-26 16:28, SAAHIL IFTEKHAR wrote: > Hi > > I have implemented Quota status to postfix in our setup. I have an imap server (dovecot) and mail server (postfix) in every node. I am able to send quota status to postfix and mails are rejected after 100% mail quota is crossed. This rejection is happening both in across the nodes and within the nodes. > > The problem is if I am sending mails to any node and if any other node's dovecot is down, mails are not going. For example, I am sending an email within the system but if some other node's dovecot is down then email within the system also will not go. > > My dovecot version is 2.2.10. My postfix version is 2.1.10. > > doveconf -n output is below:- > [snap] > > Here "service quota status" is the concerned section in conf file. > ____________________________________________________________ ____________________________________________ > > Postfix configuration is below:- > smtpd_relay_restrictions = > check_policy_service inet:201.123.80.9:54317 > check_policy_service inet:201.123.80.23:54317 > > virtual_transport=lmtp:unix:private/dovecot-lmtp > > Here, I am querying both two nodes. 201.123.80.9 is the other node. 201.123.80.23 is the node within which, email is sent. > ____________________________________________________________ _______________________________________________ > > logs while sending mail is below:- > [snap] > > I am understanding what the logs are trying to say. But I am not able to resolve the issue even after searching solution on internet and trying different hit and trials by myself. I want that if i am sending email to any node or within node, the configuration relating to "check _policy_service" for other node does not interfere and mail goes properly. At the same time I can also fetch quota status from other nodes. > > If I can get any help regarding this it will be really appreciable as I have tried a lot of options already. > Your problem is that if the dovecot is unreachable Postfix can't check the quota for the user. http://www.postfix.org/SMTPD_POLICY_README.html explains how to resolve this problem: smtpd_policy_service_default_action (default: 451 4.3.5 Server configuration problem): The default action when an SMTPD policy service request fails. Available with Postfix 3.0 and later. The default action when an SMTPD policy service request fails. Specify "DUNNO" to behave as if the failed SMTPD policy service request was not sent, and to continue processing other access restrictions, if any. You can configure it per policy also. The issue you might encounter with this setup is that if both of your dovecot nodes are unreachable Postfix will accept the e-mail and try to deliver it. When the nodes come online it will fail if the user is over quota and generate bounce to the envelope sender of the message, which might produce backscatter. I resolved this problem by keeping quota information in Mysql table and using custom policy server to check if user is allowed to receive more e-mail. Also this approach might not work with aliases and other redirections, the e-mail address checked by smtpd policy is the one before alias expansion. You should check if it suits your environment. Best, Karol -- Karol Augustin karol(a)augustin.pl http://karolaugustin.pl/ +353 85 775 5312

1 0

compile-error on pigeonhole
by Jakobus Schürz 28 Feb '18

28 Feb '18

Hi! I try to compile pigeonhole from git-sources and get this error: libtool: link: gcc -std=gnu99 -g -O2 -fstack-protector-strong -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strfti me -Wstrict-aliasing=2 -I../.. -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -o .libs/sievec sievec-sievec.o -Wl,--export-dynamic ../../src/lib-sieve/.libs/libdovecot-sieve.so ../../src/lib-sieve-tool/.libs/libsieve-tool.a /usr/local/lib/dovecot /libdovecot-storage.so /usr/local/lib/dovecot/libdovecot-lda.so -L/usr/local/lib/dovecot /usr/local/lib/dovecot/libdovecot.so -Wl,-rpath -Wl,/usr/local/lib/dovecot ../../src/lib-sieve/.libs/libdovecot-sieve.so: undefined reference to `array_idx_get_space' collect2: error: ld returned 1 exit status I'm not able to compile pigeonhole. Jakob

2 1

dovecot.index.pvt reset, view is now inconsistent
by Rupert Gallagher 28 Feb '18

28 Feb '18

Problem solved by going in manually. The log message appears for empty "public" folders. Say, you have a folder X with subfolder Y, where X does not contain any e-mail. The log message disappears if you drop an email into X, then remove it. Puf, gone! So, there seems to be a baby bug in how dovecot manages the index in this case.

3 2

BUG: Error: dovecot.index.pvt reset, view is now inconsistent when shared folder is new and empty
by Marco Giunta 28 Feb '18

28 Feb '18

Hi, I'm using Dovecot 2.2.33.2 on a RHEL 7, new installation. My log is full of : Error: INDEX_FOLDER/dovecot.index.pvt reset, view is now inconsistent or Error: INDEX_FOLDER/dovecot.index.pvt view is inconsistent when shared folder is never touched and empty. UserA share XXXXX folder with UserB, if XXXXX folder is new (never touched) and empty every time UserB looks in that folder, an error appears in log file. If UserA copy a mail in XXXXX folder, no more errors. If UserA (or UserB) delete all mails in XXXXX folder (the folder is empty again), no more errors. So the errors appear when UserB access a new (never touched) shared empty folder; if the folder is empty, but not new (p.e. UserA has already copied and deleted mails in that folder) error is logged only once. Attached my configuration. Thanks, Marco -- Marco Giunta - ITCS SysAdmin Via Bonomea, 265 34136 - Trieste, Italy Tel: +39-040-3787-503 Fax: +39-040-3787-244

1 0

Out of memory on lmtp vsz_limit
by Terence Lau 28 Feb '18

28 Feb '18

Hi, We've been getting these types or errors for quite a while now ... Fatal: master: service(lmtp): child 63477 returned error 83 (Out of memory (service lmtp { vsz_limit=4096 MB }, you may need to increase it) ... and these errors have been decreasing in occurrence as we increased the default_vsz_limit. Which is good but I would like to get some advice on how I could possibly eliminate the errors. We have an internal smtp server (postfix 3.1.0) that has the config "always_bcc=archive(a)company.com" over lmtp. This mailbox is on a separate dovecot server with the following config (please let me know if the full config is required): # 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.13 (7b14904) # OS: Linux 4.4.0-109-generic x86_64 Ubuntu 16.04.1 LTS ext4 default_vsz_limit = 4 G mail_location = maildir:/home/vmail/%d/%n protocols = " imap lmtp pop3" service lmtp { inet_listener lmtp { port = 24 } } userdb { args = username_format=%u /etc/dovecot/users default_fields = uid=vmail gid=vmail home=/home/vmail/%d/%n driver = passwd-file } protocol lmtp { mail_plugins = } Since we discovered the errors, we've been increasing the default_vsz_limit to 1G, then 2G and now 4G (Server has 6GB of memory). These errors occur whenever a large number of emails get sent around the same time to our smtp server. This causes the dovecot server to start crunching CPU and Memory. Load average goes through the roof and takes some time to come back down as the smtp queue clears itself. This mailbox is obviously very large but we have a script that runs daily to delete any emails older than a month: find /home/vmail/company.com/archive/new/ -type f -mtime +30 -exec rm {} \; find /home/vmail/company.com/archive/cur/ -type f -mtime +30 -exec rm {} \; Still, the mailbox has on average of just under 300,000 emails. No one accesses this mailbox with an email client, not until we need to dig something up. And this has only happen once. So the emails pretty much never get read/process by a user. Now that we've increased the default_vsz_limit to 4G, the occurrence of these errors has reduced considerably. But they still happen occasionally. Short of increasing the memory further, are there any other options I have? Thanks. [https://www.royhill.com.au/email/Emalisignaturecurrent.jpg]

2 3

use IMAP and POP3 simultaneously (single inbox)
by Stanislaw Findeisen 28 Feb '18

28 Feb '18

Hi Is it safe to use IMAP and POP3 simultaneously to access the same inbox (using Maildir structure)? Thanks! Stanisław

2 1

Quota status to postfix in distributed environment
by SAAHIL IFTEKHAR 27 Feb '18

27 Feb '18

Hi I have implemented Quota status to postfix in our setup. I have an imap server (dovecot) and mail server (postfix) in every node. I am able to send quota status to postfix and mails are rejected after 100% mail quota is crossed. This rejection is happening both in across the nodes and within the nodes. The problem is if I am sending mails to any node and if any other node's dovecot is down, mails are not going. For example, I am sending an email within the system but if some other node's dovecot is down then email within the system also will not go. My dovecot version is 2.2.10. My postfix version is 2.1.10. *doveconf -n output is below:-* # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-514.el7.x86_64 x86_64 Red Hat Enterprise Linux Server release 7.3 (Maipo) xfs auth_debug = yes base_dir = /var/run/dovecot/ first_valid_gid = 5000 first_valid_uid = 5000 hostname = CmdHQ login_greeting = ^^^^^^^^^^Dovecot ready^^^^^^^^^^ mail_debug = yes mail_gid = 6000 mail_location = Maildir:/var/mail/vmail/tcs.mil.in/%n mail_plugins = " quota" mail_uid = 6000 mbox_write_locks = fcntl passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { quota = maildir:User quota quota_rule = *:storage=8KB quota_rule2 = *:messages=12B quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is over quota / mailbox is full quota_status_success = DUNNO quota_warning = storage=80%% quota-warning 80 %u } postmaster_address = postmaster(a)tcs.mil.in service auth { unix_listener auth-userdb { mode = 0600 user = postfix } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service quota-status { client_limit = 1 executable = quota-status -p postfix inet_listener { port = 54317 } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { group = postfix mode = 0666 user = postfix } user = postfix } ssl = required ssl_ca = </etc/dovecot/certs/cacert.pem ssl_cert = </etc/dovecot/certs/1CorpHQ_IMAP_Admin(a)tcs.mil.in.pem ssl_key = </etc/dovecot/certs/1CorpHQ_IMAP_Admin(a)tcs.mil.in.key userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } verbose_ssl = yes protocol lmtp { info_log_path = /var/log/dovecot-lmtp.log mail_plugins = " quota" } protocol lda { info_log_path = /var/log/dovecot-lda.log log_path = /var/log/dovecot-lda-errors.log mail_plugins = " quota" } protocol imap { mail_plugins = " quota" } Here "service quota status" is the concerned section in conf file. ________________________________________________________________________________________________________ *Postfix configuration is below:- * smtpd_relay_restrictions = check_policy_service inet:201.123.80.9:54317 check_policy_service inet:201.123.80.23:54317 virtual_transport=lmtp:unix:private/dovecot-lmtp Here, I am querying both two nodes. 201.123.80.9 is the other node. 201.123.80.23 is the node within which, email is sent. ___________________________________________________________________________________________________________ *logs while sending mail is below:-F*eb 22 12:43:24 1CorpHQ postfix/proxymap[7327]: In dict_changed_name Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: initializing the server-side TLS engine Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: In dict_changed_name Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: match_list_match: 1CorpHQ: no match Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: match_list_match: 201.123.80.23: no match Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: match_list_match: 1CorpHQ: no match Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: match_list_match: 201.123.80.23: no match Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: text 220 1CorpHQserver.tcs.mil.in ESMTP Postfix Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: text EHLO 1CorpHQ Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: match_list_match: 1CorpHQ: no match Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: match_list_match: 201.123.80.23: no match Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: text 250-1CorpHQserver.tcs.mil.in Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: text 250-PIPELINING Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: text 250-SIZE 10240000 Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: text 250-VRFY Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: text 250-ETRN Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: text 250-STARTTLS Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: text 250-ENHANCEDSTATUSCODES Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: text 250-8BITMIME Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: text 250 DSN Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: text STARTTLS Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: text 220 2.0.0 Ready to start TLS Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: setting up TLS connection from 1CorpHQ[201.123.80.23] Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: 1CorpHQ[201.123.80.23]: TLS cipher list "aNULL:-aNULL:ALL:!EXPORT:!LOW:+RC4:@STRENGTH" Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: SSL_accept:before/accept initialization Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: SSL_accept:SSLv3 read client hello A Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: SSL_accept:SSLv3 write server hello A Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: SSL_accept:SSLv3 write certificate A Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: SSL_accept:SSLv3 write key exchange A Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: SSL_accept:SSLv3 write server done A Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: SSL_accept:SSLv3 flush data Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: SSL_accept:SSLv3 read client key exchange A Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: SSL_accept:SSLv3 read finished A Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: SSL_accept:SSLv3 write change cipher spec A Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: SSL_accept:SSLv3 write finished A Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: SSL_accept:SSLv3 flush data Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: Anonymous TLS connection established from 1corphq[201.123.80.23]: TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits) Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: text EHLO 1CorpHQ Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: match_list_match: 1CorpHQ: no match Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: match_list_match: 201.123.80.23: no match Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: text 250-1CorpHQserver.tcs.mil.in Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: text 250-PIPELINING Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: text 250-SIZE 10240000 Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: text 250-VRFY Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: text 250-ETRN Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: text 250-ENHANCEDSTATUSCODES Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: text 250-8BITMIME Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: text 250 DSN Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: text MAIL FROM:< Cdr.1CorpHQ(a)tcs.mil.in> Feb 22 12:43:24 1CorpHQ postfix/trivial-rewrite[7330]: match_list_match: transport_maps: no match Feb 22 12:43:24 1CorpHQ postfix/trivial-rewrite[7330]: match_list_match: transport_maps: no match Feb 22 12:43:24 1CorpHQ postfix/trivial-rewrite[7330]: In dict_changed_name Feb 22 12:43:24 1CorpHQ postfix/trivial-rewrite[7330]: match_list_match: tcs.mil.in: no match Feb 22 12:43:24 1CorpHQ postfix/trivial-rewrite[7330]: match_list_match: tcs.mil.in: no match Feb 22 12:43:24 1CorpHQ postfix/trivial-rewrite[7330]: match_list_match: tcs.mil.in: no match Feb 22 12:43:24 1CorpHQ postfix/trivial-rewrite[7330]: match_list_match: tcs.mil.in: no match Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: In valid verify sender addr Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: text 250 2.1.0 Ok Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: text RCPT TO:< CO.1CorpHQ(a)tcs.mil.in> Feb 22 12:43:24 1CorpHQ postfix/trivial-rewrite[7330]: match_list_match: tcs.mil.in: no match Feb 22 12:43:24 1CorpHQ postfix/trivial-rewrite[7330]: match_list_match: tcs.mil.in: no match Feb 22 12:43:24 1CorpHQ postfix/trivial-rewrite[7330]: match_list_match: tcs.mil.in: no match Feb 22 12:43:24 1CorpHQ postfix/trivial-rewrite[7330]: match_list_match: tcs.mil.in: no match Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: In valid verify sender addr Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: match_list_match: permit_mynetworks: no match Feb 22 12:43:24 1CorpHQ dovecot: quota-status: Debug: Loading modules from directory: /usr/lib64/dovecot Feb 22 12:43:24 1CorpHQ dovecot: quota-status: Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so Feb 22 12:43:24 1CorpHQ dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Feb 22 12:43:24 1CorpHQ dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Feb 22 12:43:24 1CorpHQ dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Feb 22 12:43:24 1CorpHQ dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Feb 22 12:43:24 1CorpHQ dovecot: auth: Debug: Read auth token secret from /var/run/dovecot//auth-token-secret.dat Feb 22 12:43:24 1CorpHQ dovecot: auth: Debug: master in: USER#0111# 011CO.1CorpHQ(a)tcs.mil.in#011service=quota-status Feb 22 12:43:24 1CorpHQ dovecot: auth: Debug: ldap(co.1corphq(a)tcs.mil.in): user search: base=dc=tcs,dc=mil,dc=in scope=subtree filter=(&(objectClass=person)(uid=co.1corphq)) fields=homeDirectory,uidNumber,gidNumber Feb 22 12:43:24 1CorpHQ dovecot: auth: Debug: ldap(co.1corphq(a)tcs.mil.in): no fields returned by the server Feb 22 12:43:24 1CorpHQ dovecot: auth: Debug: ldap(co.1corphq(a)tcs.mil.in): result: homeDirectory missing; uidNumber missing; gidNumber missing Feb 22 12:43:24 1CorpHQ dovecot: auth: Debug: userdb out: USER#0111# 011co.1corphq(a)tcs.mil.in Feb 22 12:43:24 1CorpHQ dovecot: quota-status: Debug: auth input: co.1corphq(a)tcs.mil.in Feb 22 12:43:24 1CorpHQ dovecot: quota-status: Debug: changed username to co.1corphq(a)tcs.mil.in Feb 22 12:43:24 1CorpHQ dovecot: quota-status: Debug: Added userdb setting: plugin/=yes Feb 22 12:43:24 1CorpHQ dovecot: quota-status(co.1corphq(a)tcs.mil.in): Debug: Effective uid=6000, gid=6000, home= Feb 22 12:43:24 1CorpHQ dovecot: quota-status(co.1corphq(a)tcs.mil.in): Debug: Quota root: name=User quota backend=maildir args= Feb 22 12:43:24 1CorpHQ dovecot: quota-status(co.1corphq(a)tcs.mil.in): Debug: Quota rule: root=User quota mailbox=* bytes=8192 messages=0 Feb 22 12:43:24 1CorpHQ dovecot: quota-status(co.1corphq(a)tcs.mil.in): Debug: Quota rule: root=User quota mailbox=* bytes=8192 messages=12 Feb 22 12:43:24 1CorpHQ dovecot: quota-status(co.1corphq(a)tcs.mil.in): Debug: Quota warning: bytes=6553 (80%) messages=0 reverse=no command=quota-warning 80 co.1corphq(a)tcs.mil.in Feb 22 12:43:24 1CorpHQ dovecot: quota-status(co.1corphq(a)tcs.mil.in): Debug: Quota grace: root=User quota bytes=819 (10%) Feb 22 12:43:24 1CorpHQ dovecot: quota-status(co.1corphq(a)tcs.mil.in): Debug: maildir++: root=/var/mail/vmail/tcs.mil.in/co.1corphq, index=, indexpvt=, control=, inbox=/var/mail/vmail/tcs.mil.in/co.1corphq, alt= Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: warning: connect to 201.123.80.9:54317: Connection refused Feb 22 12:43:24 1CorpHQ postfix/smtpd[7326]: warning: problem talking to server 201.123.80.9:54317: Connection refused Feb 22 12:43:25 1CorpHQ postfix/smtpd[7326]: warning: connect to 201.123.80.9:54317: Connection refused Feb 22 12:43:25 1CorpHQ postfix/smtpd[7326]: warning: problem talking to server 201.123.80.9:54317: Connection refused Feb 22 12:43:25 1CorpHQ postfix/smtpd[7326]: NOQUEUE: reject: RCPT from 1CorpHQ[201.123.80.23]: 451 4.3.5 Server configuration problem; from=< Cdr.1CorpHQ(a)tcs.mil.in> to=<CO.1CorpHQ(a)tcs.mil.in> proto=ESMTP helo=<1CorpHQ> Feb 22 12:43:25 1CorpHQ postfix/smtpd[7326]: text 451 4.3.5 Server configuration problem Feb 22 12:43:25 1CorpHQ postfix/smtpd[7326]: text RSET Feb 22 12:43:25 1CorpHQ postfix/smtpd[7326]: text 250 2.0.0 Ok Feb 22 12:43:25 1CorpHQ postfix/smtpd[7326]: lost connection after RSET from 1CorpHQ[201.123.80.23] I am understanding what the logs are trying to say. But I am not able to resolve the issue even after searching solution on internet and trying different hit and trials by myself. I want that if i am sending email to any node or within node, the configuration relating to "check _policy_service" for other node does not interfere and mail goes properly. At the same time I can also fetch quota status from other nodes. If I can get any help regarding this it will be really appreciable as I have tried a lot of options already. Regards

4 4

Re: Quota status to postfix in distributed environment (@lbutlr)
by SAAHIL IFTEKHAR 27 Feb '18

27 Feb '18

Hi Actually, the requirement is such that we have to work with this version only. I want to point out that the reason from the problem can be found out from logs(the end section). The "check_policy_service" in main.cf of postfix is the problem according to me. This configuration as a part of quota staus to postfix configuration. I hope many have went through this scenario or similar. So I am hoping to get some help for the same. Regards On 27-Feb-2018 15:30, <dovecot-request(a)dovecot.org> wrote: Send dovecot mailing list submissions to dovecot(a)dovecot.org To subscribe or unsubscribe via the World Wide Web, visit https://dovecot.org/mailman/listinfo/dovecot or, via email, send a message with subject or body 'help' to dovecot-request(a)dovecot.org You can reach the person managing the list at dovecot-owner(a)dovecot.org When replying, please edit your Subject line so it is more specific than "Re: Contents of dovecot digest..." Today's Topics: 1. Re: Quota status to postfix in distributed environment (@lbutlr) ---------------------------------------------------------------------- Message: 1 Date: Mon, 26 Feb 2018 08:32:43 -0800 From: "@lbutlr" <kremels(a)kreme.com> To: dovecot(a)dovecot.org Subject: Re: Quota status to postfix in distributed environment Message-ID: <D525FAB8-D208-4B6E-AFBD-104EF48A6234(a)kreme.com> Content-Type: text/plain; charset=us-ascii On Feb 26, 2018, at 08:28, SAAHIL IFTEKHAR <response2saahil(a)gmail.com> wrote: > My dovecot version is 2.2.10. > My postfix version is 2.1.10. What happens if you use current-ish versions. -- This is my signature. There are many like it, but this one is mine. ------------------------------ Subject: Digest Footer _______________________________________________ dovecot mailing list dovecot(a)dovecot.org https://dovecot.org/mailman/listinfo/dovecot ------------------------------ End of dovecot Digest, Vol 178, Issue 64 ****************************************

1 0