- dovecot - dovecot.org

[Dovecot] Proxy to gmail help
by Alex Wanderley 03 Oct '13

03 Oct '13

Hello, I understand the matter of using Dovecot as a forward proxy to Gmail is very popular (and even trivial), but my lack of Dovecot experience took me to at point where I truly need your help... I'm starting my task by trying to have something simple, where I can test connectivity to Gmail by sending a telnet to our Dovecot server. The Dovecot server accepts the telnet request, but for some reason (and here I guess is something related to SSL/TLS), I can't get to Gmail. Here my configuration and logs/outputs: ==> OS: * I'm using an old Centos 5.8 server as a proof of concept. ############################################################# ==> Dovecot configuration: # 2.2.5: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-308.8.2.el5xen x86_64 CentOS release 5.8 (Final) auth_cache_negative_ttl = 10 mins auth_cache_size = 1 k auth_cache_ttl = 10 mins auth_debug = yes auth_debug_passwords = yes auth_mechanisms = cram-md5 digest-md5 apop login plain auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@% auth_username_translation = %@AaBbCcDdEeFfGgHhIiJjKkLlMmNnOoPpQqRrSsTtUuVvWwXxYyZz auth_verbose = yes base_dir = /var/run/dovecot/ disable_plaintext_auth = no listen = XXX.XXX.XXX.XXX login_greeting = Dovecot Ready login_log_format_elements = %u %r %m %c mail_debug = yes mail_max_userip_connections = 100 passdb { args = /etc/dovecot/sql.conf driver = sql } protocols = pop3 service pop3-login { client_limit = 200 inet_listener pop3 { address = dovecotserver.<full domain> port = 110 } process_limit = 1 process_min_avail = 1 service_count = 0 vsz_limit = 256 M } shutdown_clients = no ssl_ca = /etc/pki/dovecot/certs/dovecot.pem ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_cipher_list = EECDH+AES:EDH+AES:-SHA1:EECDH+RC4:EDH+RC4:RC4-SHA:EECDH+AES256:EDH+AES256:AES256-SHA:HIGH:!aNULL:!eNULL:!EXP:!MD5:!LOW:!SSLv2 ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = static uid=10000 gid=10000 home=/dev/null driver = static } verbose_ssl = yes version_ignore = yes ############################################################# ==> sql.conf file driver = mysql connect = host=/var/lib/mysql/mysql.sock dbname=mysql user=root password=xxxxxx password_query = SELECT NULL AS password, host, destuser, proxy, 'Y' AS starttls, '995' AS port, 'Y' AS nopassword FROM DovecotProxy WHERE user = '%u' ############################################################# ==> DovecotProxy table mysql> select * from DovecotProxy where user = 'MYUSER'; +-------------+---------------+-----------------------+------------------------------------------------+-------+ | user | host | destuser | password | proxy | +-------------+---------------+-----------------------+------------------------------------------------+-------+ | MYUSER | pop.gmail.com | MYUSER(a)gmail.com | {MD5-CRYPT}$1$L824LVh4$r.hyZ icsE5tmGaeJrY/dw/ | Y | +-------------+---------------+-----------------------+------------------------------------------------+-------+ ##>> I understand "proxy" and "password" are not required there. That happened for testing. ############################################################# ==> Telnet session: xxxxxx [/tmp] > telnet dovecotserver 110 Trying XXX.XXX.XXX.XXX... Connected to dovecotserver. Escape character is '^]'. +OK Dovecot Ready <6111.1.524dad13.VYOVkhqfe1Ox7Wz+VfogMg==@dovecotserver> user MYUSER +OK pass PASSWD -ERR Account is temporarily unavailable. quit +OK Logging out Connection to dovecotserver closed by foreign host. ############################################################# ==> Logged messages in /var/log/mailllog: Oct 3 12:23:02 dovecotserver dovecot: master: Warning: Killed with signal 15 (by pid=26790 uid=0 code=kill) Oct 3 12:23:53 dovecotserver dovecot: master: Dovecot v2.2.5 starting up (core dumps disabled) Oct 3 12:23:53 dovecotserver dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Oct 3 12:23:53 dovecotserver dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Oct 3 12:23:53 dovecotserver dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so Oct 3 12:23:53 dovecotserver dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Oct 3 12:23:53 dovecotserver dovecot: auth: Debug: Read auth token secret from /var/run/dovecot//auth-token-secret.dat Oct 3 12:23:53 dovecotserver dovecot: auth: Debug: auth client connected (pid=26810) Oct 3 12:24:30 dovecotserver dovecot: auth: Debug: client in: AUTH 1 PLAIN service=pop3 session=/IH8S9rnzACiat/X lip=162.106.XXX.YYY rip=162.106.XXX.ZZZ lport=110 rport=37836 resp=AHNtYXJ0YnVzZWRtAHMwbWV0aGluZw== (previous base64 data may contain sensitive data) Oct 3 12:24:30 dovecotserver dovecot: auth: Debug: cache(MYUSER,162.106.223.215,</IH8S9rnzACiat/X>): miss Oct 3 12:24:30 dovecotserver dovecot: auth-worker(26823): Debug: Loading modules from directory: /usr/lib64/dovecot/auth Oct 3 12:24:30 dovecotserver dovecot: auth-worker(26823): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Oct 3 12:24:30 dovecotserver dovecot: auth-worker(26823): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so Oct 3 12:24:30 dovecotserver dovecot: auth-worker(26823): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Oct 3 12:24:30 dovecotserver dovecot: auth-worker(26823): Debug: sql(MYUSER,162.106.XXX.ZZZ): query: SELECT NULL AS password, host, destuser, proxy, 'Y' AS starttls, '995' AS port, 'Y' AS nopassword FROM DovecotProxy WHERE user = 'MYUSER' Oct 3 12:24:30 dovecotserver dovecot: auth: Debug: client passdb out: OK 1 user=MYUSER host=pop.gmail.com destuser= MYUSER(a)gmail.com proxy starttls=Y port=995 nopassword=Y hostip=74.125.142.108 pass=XXXXXXXXX Oct 3 12:24:30 dovecotserver dovecot: pop3-login: Debug: Ignoring unknown passdb extra field: nopassword Oct 3 12:25:00 dovecotserver dovecot: pop3-login: Error: proxy(MYUSER): Login for pop.gmail.com:995 timed out in state=0 (after 30 secs, local=162.106.XXX.YYY:51196) Oct 3 12:25:12 dovecotserver dovecot: pop3-login: Aborted login (internal failure, 1 successful auths): MYUSER, 162.106.XXX.ZZZ, PLAIN ==> Something that caught my attention here: "....proxy starttls=Y..." shouldn't look like "...proxy=Y starttls=Y..." ??? I didn't see "...proxy=Y..." even after setting the sql query like "...'Y' as proxy...". ############################################################# If you had the patience to read this far, thanks a lot for trying to help... Alex

1 0

[Dovecot] How to configure statistics tracking
by Bruce Marriner 03 Oct '13

03 Oct '13

I'm trying to configure the dovecot statistics tracking option with Dovecot 2.1.12 on FreeBSD 9.1-RELEASE. I've seen on the wiki page the configuration settings needed for this but it does not say which configuration file these settings should be added to. http://wiki2.dovecot.org/Statistics I was hoping someone could tell me which file these settings should be added to? Do they all just go into the same file or different files? I have a primary dovecot.conf file then inside conf.d/ there are dozens of files that hold the configuration settings for all the different parts of dovecot. Would I just add all of these settings into a conf.d/stats.conf file that would be pulled into the main configuration? Does it matter what order the (10-stats.conf, 20-stats.conf, etc) the file is set for? Thanks.

3 2

[Dovecot] Username issue with Dovecot LDA, IMAP and Winbind Authentication
by Laz Peterson 03 Oct '13

03 Oct '13

Hi there Dovecot community -- I'll try to make this short. Here's the setup … Ubuntu 12.04, Postfix, Dovecot, along with Amavis/Clamd/Spamassassin. Postfix is currently receiving emails for virtual users in multiple domains, all of which are authenticating through Winbind to Windows AD servers. The users log in to the POP/IMAP/SMTP services using the format user(a)domain.corp (the internal domain, not the external mail domain). The domains are all in the same forest, but there are many different domains to authenticate against. Dovecot is currently handling POP, IMAP, and authentication. Postfix uses a MySQL database to map the external email domain to the internal AD domain, for example domain.com -> domain.corp. Postfix also queries the same SQL database for where to save the messages -- /home/vmail/domain\user -- I have the SQL query strip off the ".corp". I had to do this because pam_winbind returns the usernames as "DOMAIN\user" upon successful Dovecot authentication, instead of "user(a)domain.corp", which ends up invalidating all of the %u, %n, and %d variables. On the user side, after successful auth, I can only define %u and %n in my Dovecot configuration -- %d is null, %u is "DOMAIN\user", and %n is "DOMAIN\user". (I use %Lu or %Ln to make it all lower-case.) With this, I am able to authenticate users off of multiple domains, have the mail delivered to a folder that is also accessible to the user when they log in. It serves its purpose. Here's my problem. I am trying to now integrate Pigeonhole and ManageSieve using Dovecot-LDA specified by "virtual_transport", and this is where things get confusing. Dovecot IMAP/POP/SMTP auth notes the user account to be "DOMAIN\user", while Dovecot-LDA receives the email to user(a)domain.com, noting the user account to be "user(a)domain.corp". The same arguments for userdb in "auth-system.conf.ext" are used by both Dovecot when user is logging in for IMAP/POP/SMTP and Dovecot-LDA when it is storing the mail. Because of the way pam_winbind returns the usernames without being able to use %d anymore, I cannot seem to get the same behavior for both sides of Dovecot. For example, if I set home and maildir to "/home/vmail/%Ln", Dovecot-LDA delivers emails into the folder "/home/vmail/user(a)domain.corp" and Dovecot IMAP/POP looks in "/home/vmail/domain\user". If I set the home/maildir to "/home/vmail/%Ld/%Lu", Dovecot-LDA delivers emails into the folder "/home/vmail/domain.corp/user" and Dovecot IMAP/POP looks in "/home/vmail/\/domain\user". So, I seem to be thoroughly unable to get something here that works … The closest I can get is setting home/maildir to "/home/vmail/%Ld\%Lu", but that now gives the LDA side "/home/vmail/domain.corp\user" and the IMAP/POP/SMTP side "/home/vmail/\\domain\user". If I am able to get pam_winbind to return "user(a)domain.corp" instead of "DOMAIN\user", I'd be fine. Or, if I could set the home and maildir locations separately for Dovecot-LDA and Dovecot, I would also be okay. Any suggestions? I know this is probably a Winbind limitation, but I do not know a thing about working with PAM authentication. I tried to compile and install a pam_regex module (which seems to not be offered as a native package in Ubuntu), but it gives errors after adding that to my PAM configuration. I'm stumped. Please let me know if I can include my configuration for either Postfix or Dovecot. Thank you so much for any help. ~ Laz Peterson

1 2

[Dovecot] understanding user_attrs and mail_uid/gid
by Vincent Zakofski 03 Oct '13

03 Oct '13

Hello, I'm trying to understand what's the difference between those parameters. In my dovecot.conf in the global section I have a definition of mail_uid and mail_gid. In my LDAP configuration used by passdb and userdb, I have a definition for user_attrs= uidNumber=500,gidNumber=8. Here is a part of my configuration files (dovecot version: 2.1.7) dovecot.conf mail_gid = 8 mail_uid = 500 passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } dovecot-ldap.conf user_filter = (&(objectClass=posixAccount)(mailLocalAddress=%n)) user_attrs = uidNumber=500,gidNumber=8 So everything works fine when all those parameters are present in my configuration files. If I suppress one of them nothing is working (mail reading or delivering). Can someone tell me where I can find a definition of those arguments, if found nothing relevant on the wiki. Thanks,

1 0

[Dovecot] sieve notify and lmtp
by Lampa 02 Oct '13

02 Oct '13

Hello, i've setup sieve script which send notify to user (user(a)domain.com) But user(a)domain.com is alias user(a)domain.com and user(a)anotherdomain.com. LMTP delivers notification only to user(a)domain.com but not to user(a)anotherdomain.com. How to force send notification over smtp (which will be delivered to both) or i must use to=user(a)anotherdomain.com in notify ? Thank you for your advices. Lampa

2 1

[Dovecot] Dovecot namespace solved while writing; preparing to refilter
by miro.rovis＠croatiafidelis.hr 02 Oct '13

02 Oct '13

Hi! My plea to readers: =================== Pls., people who only want strictly technical issues to read, and frown at any broader context regardless how intrinsically related, but not strictly technically related, it might be, skip all the way, all the way to, search for exact words: "strictly technical" or visually, find two lines of sole "===" characters. Thank you! Upon umptieth failure, and having cloned the system onto another same arch, much more: same MBO-model box (cloning and restoring clean is my defence to get the system into as clean a state as can be, after any longer time online --I had had systems comprimised, and now I am a little paranoid)... So, after weeks of some failures in some phases of installations of dovecot and friends (as explained further in this text), I cloned the same system, but from previously taken clean backup, used it some time, and now I want to update the mailbox back because now the first system is in clean state, having I restored from clean backup... This is a Debian weekly testing install, which I clone btwn two same MBO-model boxes to keep it as clean as a non-expert user like me can have it... To a large extent I do trust installing and update/upgrading my systems from the weekly builds (but hey, why don't they PGP-sign those as kernel tarballs and as Grsecurity or Tor-browser tarballs are signed? any Debian developer reading this, why not?)... because I can check with some trust the weekly builds' sums for integrity, but how and why could or would I trust simply installing anything straight from the internet? By cloning (I used to dd disk dump when cloning, but nowadays it seems faster and reliable enough with Sysresccd's fsarchiver, so I dd just the small boot partition), by cloning I keep the system as close to clean as those non-pgp-signed weekly builds allow... Now add to that that the real FFmpeg is not allowed into Debian, and I am a fan of it (I very much use it, it's running almost all the time, on some or other of my systems), but you have to get it through deb-multimedia.org if you want it on Debian (what freedom is that, banning programs from official repositories?!)... and add to that that I want Grsecurity/Pax at all cost, in my system, and not: http://www.nsa.gov/research/selinux/ which I don't want in my system, at all cost, but to which the Debian current leadership seems to be total-blind-fidelity bound to... Add those and you get pretty much all the basic ingredients of my fight for freedom and true privacy which are layed siege onto in the GNU/Linux Operating System and the few related other free OS's, in most of its flavors and branches and deployments of the day, from the outside and also from the inside. Because even with the long-delayed-in-updating gNewSense, for insufficient developer power (I mean: too few), probably, what's the use of the fine deblobbed kernel if they put SELinux into it? Where's freedom with what I suspect can not be other than fake security with surreptitious surveillance? (BTW, go and ask people, but not loudly, who compile their Gentoo's --there' a link to my short post on forums.gentoo.org a few lines below-- like I compile (on other systems of mine), only a minority of very uninformed or some special entities' aficionados use anything other than Grsecurity on their Hardened Gentoos --and Gentoo is unquestionably the leader in hardening-- it's not just me, it's only that I am loud about it)... But I also tried to call this issue to GNU-freedom seeking people's attention such as here: https://lists.nongnu.org/archive/html/gnewsense-users/2013-09/msg00001.html and entire thread: Grsecurity on gNewSense, but for real? I didn't mean to dwell on these issues here, and it is not the reason I write my messege to dovecot-mailing list, but this is the broad perspective of my, and I am sure not only my case, of my deployment of dovecot and broadly these are the reasons why I deploy it on my system. No, this broader picture I don't think is not off-topic. I did think hard about it... No, I believe it is good to mention these issues in this post-Snowden era when the scale and scope of total surveillance can not be successfully sneered and scoffed at and dismissed, like some "exceptional" (Obama talking to the U.S. of A. nation in September 2013, in his quest for support, thankfully lacking, of then being planned Iraq-2003-like-in-pretence-and-lies attack-to-be on Syria)... like some "exceptional" people would want it (that's the Gentoo Forum's link mentioned above)... http://forums.gentoo.org/viewtopic-t-967806.html A case of actual protection of my Gentoo box by Grsecurity At least these issues should not be anymore successfully sneered and scoffed at and dismissed, but we're all less and less free as mankind... And, since I don't connect to my SOHO network the box which I open to the internet, I have mails to refilter into the very probably clean cloned box... And I need to refilter using dovecot (which I finally got to work)... These lines, all the dozen or so paragraphs from the beginning up unto here, do appear first for reading, but are written just about all the very last, after the rest of the text below has already been written, except the final proofreading notes intersparsed). ============================================================================= ============================================================================= Now nearly only strictly technical I go, for the sake of people who prefer so. That maildir mailbox being all poorly sorted (I must have made other mistakes, I am just still new and generally lack expertise in all these true mailer tools; but very impressed I am with them! thanks Sirainen, thanks Varshavchik, thanks MuttDude, thanks Venema, and all, I admire you people!), so I removed the old Maildir and I made this scriptlet: This is my configuration: me@mybox:# dovecot -n # 2.1.17: /etc/dovecot/dovecot.conf # OS: Linux 3.10.9-grsec-130827 x86_64 Debian jessie/sid auth_debug = yes mail_debug = yes mail_location = maildir:~/Maildir:LAYOUT=fs mail_plugins = acl quota mail_privileged_group = mail namespace { hidden = yes inbox = yes list = no location = mbox:~/mail:INBOX=/var/mail/%u prefix = "#mbox/" separator = / } namespace { location = maildir:~/Maildir prefix = separator = / } passdb { args = dovecot driver = pam } protocols = " imap" ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { driver = passwd } protocol imap { mail_plugins = acl quota imap_acl imap_quota mail_log notify } me@mybox:# cd ~ maildirmake Maildir maildirmake -f Drafts Maildir/ maildirmake -f Sent Maildir/ maildirmake -f someFolder1 Maildir/ maildirmake -f someFolder2 Maildir/ maildirmake -f someFolder2.Facebk Maildir/ One note: pls. don't get me wrong, I hate Stasibook (Facebk above is less typing, but it's for Facebook mail), I just would like to learn enough to teach and get at least some of my friends who "socialize" there out of reach of those stasi-like entities that Zuck and his Gang serve all the "socializing" users' data to, which is so hard a task for me to do, but which desire keeps me moving in this steep-learning-curve quest of mine that got me this far where I am now, with dovecot and other tools. That is the reason I am still subscribed there, to be able to follow what my people do, occasionally. I'm not logging into that walled-off sewage-like stasi hole featuring as virtual garden! I saved that scriplet as maildirmake_00.sh, then $ chmod 755 maildirmake_00.sh and ran it. me@mybox:~$ ./maildirmake_00.sh And I have, I guess so far, all correct: me@mybox:~$ ls -la Maildir/ total 40 drwx------ 10 mr mr 4096 Oct 1 23:06 . drwxr-xr-x 33 mr mr 4096 Oct 1 23:06 .. drwx------ 2 mr mr 4096 Oct 1 23:06 cur drwx------ 5 mr mr 4096 Oct 1 23:06 .Drafts drwx------ 5 mr mr 4096 Oct 1 23:06 .someFolder1 drwx------ 5 mr mr 4096 Oct 1 23:06 .someFolder2 drwx------ 5 mr mr 4096 Oct 1 23:06 .someFolder2.Facebk drwx------ 2 mr mr 4096 Oct 1 23:06 new drwx------ 5 mr mr 4096 Oct 1 23:06 .Sent drwx------ 2 mr mr 4096 Oct 1 23:06 tmp me@mybox:~$ I really hope no mistake I made so far. someFolder1 and someFolder2 are for two different servers I get my mail from. Will probably need to tell some more about them later if the thread develops, when the problems I have are more fully explained/solved/expanded. Now the dovecot. It has, in Debian, and I'm on weekly testing branch, currently up to date, actually last week's, that's just a little behind... It has 15-mailboxes.conf like this (only pasting non-commented lines), /etc/dovecot/conf.d/15-mailboxes.conf namespace inbox { mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Trash { special_use = \Trash } mailbox Sent { special_use = \Sent } } [ here is a time lapse of cca 5-10 hours ] Well, since I began writing, I realized that I can get the namespace to work properly, but exactly only without the above: /etc/dovecot/conf.d/15-mailboxes.conf (I mean with all the lines above commented out) It kept telling me this (in the logs I find): Error: user me: Initialization failed: namespace configuration error: Duplicate namespace prefix Let me first say that it's I finally got closer to solution, and saw directories with mutt as ~/Maildir/this/that instead of what maildirs are: ~/Maildir/.this.that only after getting the following in the 10-mail.conf /etc/dovecot/conf.d/10-mail.conf: mail_location = maildir:~/Maildir:LAYOUT=fs mail_plugins = acl quota namespace { separator = / location = mbox:~/mail:INBOX=/var/mail/%u inbox = yes hidden = yes list = no } namespace { separator = / prefix = location = maildir:~/Maildir } It's what is recommended in <Namespaces.txt> on the wiki and maybe other places. But only after the 15-mailboxes.conf was completely commented out. Now I can view my mailbox from anywhere on my network, I guess (tried from the other box and from the same box with mutt, it works!). So namespace is solved I guess. However, for my mail system to completely function in the right GNU/Linux way, I have to get more GNU good things together in harmony. Naming some of the other dovecot friends: *getmail*, which hands on to *maildrop* for delivery... And *postfix* with TLS for sending mail, via 465 port, *stunnel*... That bit feels daunting to me, really... This namespace thing also cost me a few ounces of raw nerves and some occasional darkness in feelings... The worse is still before my mind constantly: still not being able to send mail the normal way, since the normal way is simply not in cleartext anymore... I probably could just fine sent to port 25, but after all the political persecution and censorship that as homeland-living dissident I suffered and still suffer, I don't see that as a solution at all... The obscured morale that I was upon me for a while is due to that stunnel connection not being yet set up... So, sending this from the web yet, I guess (prepared upfront, jealous of my time fixing systems that suffer from strange behavior or break whenever I'm longer online)... However, since I have been writing this not really hoping to get the namespace working in the process (quite a few days I spent on it, and weeks on mail system altogether, I can only hope to get the stunnel right if I really study it as if attending university classes, I'm afraid, just like the hurdles that I went finally past cost me real studying your manuals, my GNU freedom heros!)... ...And this message I having had started some five or ten hours ago [ before the final broader picture paragraphs that are all in the beginning part of the message; this very note is at the time of the very last proofreading ], now I see that I went different direction before discovering the setup for namespace that worked for me. How I used maildirmake (it's the maildrop's not the dovecot's one) I thought but now see doesn't probably have much to do with the solution for namespace I found. I leave it there though, because I need to fix the mailbox by refiltering it, with the aid of the dovecot server, similar to how it is explained in: http://wiki.dovecot.org/HowTo/RefilterMail Because I got some syntax wrong in ~/.mailfiler for the maildrop MDA, and then I got some of those wrongly named (numbered, no a-z, only 0-9 digits in names) fake mailing-list folders that can be seen in my post on mutt mailing-list: http://marc.info/?l=mutt-users&m=138021971816188&w=2 (the .muttrc however is completely different now, sure, than in that link) I hope the main, the namespace dovecot part of this message may elicit someone's advice, if they got past that phase with the 15-mailboxes.conf at its default. Or it is explained in the manuals I need to give a second or a third read to understand them... And I'll be back to report if I made ordered mails in my Maildir right with the refiltering. Just pls. allow time, I'm a late adopter, I'm 56 years of age, can't make these things as quick as you youngsters do it. Thanks for the fine Dovecot mail server! Miroslav Rovis Zagreb, Croatia

1 0

[Dovecot] LDAP for passdb and SQL for userdb
by Bambero 02 Oct '13

02 Oct '13

Hello Is it possible to setup double backend ? ldap for auth only and SQL for userdb information(quota,maildir etc) ? Now I'm using SQL backend and configuration looks like this: passdb { driver = sql args = /etc/dovecot/dovecot-sql.conf } userdb { driver = prefetch } userdb { driver = sql args = /etc/dovecot/dovecot-sql.conf } Can I do something like: passdb { driver = sql args = /etc/dovecot/dovecot-ldap.conf } userdb { driver = prefetch } userdb { driver = sql args = /etc/dovecot/dovecot-sql.conf } Should I leave: userdb { driver = prefetch } Bambero

2 1

[Dovecot] Older messages not showing up after reinstall
by dclist 02 Oct '13

02 Oct '13

I reinstalled Ubuntu, keeping my maildir directories. Messages older than the date of reinstall are not being served by dovecot. The messages show up normally in my MUA if I load the maildir directory directly. I assume there is a file somewhere where dovecot is keeping a list of seen messages which I need to reset. The old messages appear to be in dovecot-uidlist. I tried moving dovecot.index* to no effect. How do I get the pre-reinstall messages to be served by dovecot? # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.8.0-31-generic x86_64 Ubuntu 13.04 auth_debug = yes auth_debug_passwords = yes log_timestamp = "%Y-%m-%d %H:%M:%S " mail_debug = yes mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_privileged_group = mail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/password driver = passwd-file } passdb { driver = pam } plugin { fts = squat fts_squat = partial=4 full=4 } protocols = imap service auth { user = root } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = uid=vmail gid=vmail home=/home/vmail/%u driver = static } userdb { driver = passwd } protocol imap { mail_plugins = fts fts_squat } protocol pop3 { pop3_uidl_format = %08Xu%08Xv }

2 1

[Dovecot] Dovecot disconnecting while downloading large attachments
by Marc Casas - Girotec 01 Oct '13

01 Oct '13

Hi, We're using Dovecot 1.2.15 with Debian Squeeze. The mail server is working properly (we use both POP3 and IMAP) with normal messages, but if we try to download a large message (more than 20mb) using POP3, the server disconnects and our application fails. It's possible to change this behavior? How can we setup Dovecot so it disconnects after 20 or 30 minutes (I think now is disconnecting after 10 minutes) of "inactivity"? Regards, Marc

1 0

[Dovecot] Panic: file mail-storage.c: line 834 (mailbox_verify_name): assertion failed
by Kamil Andrusz 01 Oct '13

01 Oct '13

Hello List! I've encountered an error after upgrading my system and dovecot. I guess it's probably a result of a configuration problem, however after quite some tinkering with configuration I am still missing the source of the problem. Sep 28 16:57:21 shwurzbung dovecot: imap(wizz): Panic: file mail-storage.c: line 834 (mailbox_verify_name): assertion failed: (strncmp(vname, ns->prefix, ns->prefix_len-1) == 0) Sep 28 16:57:21 shwurzbung dovecot: imap(wizz): Fatal: master: service(imap): child 23203 killed with signal 6 (core not dumped - set service imap { drop_priv_before_exec=yes }) The problem above appears with both dovecot 2.2.5 and 2.2.6. It did not happen while using dovecot 2.1.12. Operating system is OpenBSD 5.4-current and AMD64. FS type is FFS (default for OpenBSD). Output of dovecot -n: # 2.2.6: /etc/dovecot/dovecot.conf # OS: OpenBSD 5.4 amd64 auth_mechanisms = plain login default_process_limit = 200 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl mmap_disable = yes namespace { hidden = yes inbox = yes list = no location = mbox:~/mail:INBOX=/var/mail/%u prefix = inbox/ type = private } namespace inbox { location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = bsdauth } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh protocols = imap pop3 lmtp sieve service auth { unix_listener /var/run/dovecot/auth-master { group = virtuals mode = 0600 user = virtuals } unix_listener /var/spool/postfix/private/auth { mode = 0660 user = _postfix } user = root } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl_cert = </etc/ssl/ssl.crt ssl_key = </etc/ssl/private/ssl.key userdb { driver = passwd override_fields = mail_home=/home/%u } protocol lmtp { mail_plugins = " sieve" } protocol lda { mail_plugins = " sieve" } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags mail_max_userip_connections = 64 } Thanks in advance for any pointers to a resolution. Best regards, Kamil Andrusz -- It's just a matter of opinion.

2 2