- dovecot - dovecot.org

[Dovecot] selinux rules for dovecot
by Robert Moskowitz 28 Feb '13

28 Feb '13

I am running selinux in permissive mode on my new mail server, in part because of dovecot. I would really like to use selinux, but I suspect it may be a challenge. My setup is on Centos 6.3 with dovecot using mysql for virutal domains and users. I am looking for a set of definitive selinux instructions, not a pointer to selinux tutorial. Here are examples of what I am seeing: Feb 27 16:46:08 klovia kernel: type=1400 audit(1362001568.770:33468): avc: denied { search } for pid=2994 comm="dict" name="mysql" dev=dm-0 ino=1705864 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:mysqld_db_t:s0 tclass=dir Feb 27 16:46:08 klovia kernel: type=1400 audit(1362001568.770:33469): avc: denied { write } for pid=2994 comm="dict" name="mysql.sock" dev=dm-0 ino=1706116 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:mysqld_var_run_t:s0 tclass=sock_file Feb 27 16:46:08 klovia kernel: type=1400 audit(1362001568.770:33470): avc: denied { connectto } for pid=2994 comm="dict" path="/var/lib/mysql/mysql.sock" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:system_r:mysqld_t:s0 tclass=unix_stream_socket Feb 27 16:46:08 klovia kernel: type=1400 audit(1362001568.771:33471): avc: denied { getattr } for pid=2994 comm="dict" path="/usr/share/mysql/charsets/Index.xml" dev=dm-0 ino=395155 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=file Feb 27 16:46:08 klovia kernel: type=1400 audit(1362001568.771:33472): avc: denied { read } for pid=2994 comm="dict" name="Index.xml" dev=dm-0 ino=395155 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=file

1 0

[Dovecot] v2.2.beta2 released
by Timo Sirainen 27 Feb '13

27 Feb '13

http://dovecot.org/releases/2.2/beta/dovecot-2.2.beta2.tar.gz http://dovecot.org/releases/2.2/beta/dovecot-2.2.beta2.tar.gz.sig A ton of fixes since beta1. Especially the new dsync and the replication server related to that should really work now. It also works correctly now for shared mailboxes with private \Seen flags. And the replication server uses incremental syncing after the initial full sync, so it should be pretty efficient also. I've only two things left to do before v2.2.rc1: 1. Implement dsync to work via TCP and TCP+SSL sockets. This is pretty easy to do actually, since it can use the existing doveadm-server to start up. 2. Read up all the pending mails from Dovecot mailing list and fix up the reported issues. Actually I guess most of those are for v2.1, but still I should get around to it. :) There shouldn't be any major bugs left, so I'm expecting v2.2.rc1 out in maybe a week or so, hopefully followed by the final v2.2.0 soon afterwards. Please test and report any bugs found!

6 16

[Dovecot] Help with vpopmail authentication
by Fran Márquez 27 Feb '13

27 Feb '13

Hello, Currently I have a qmail server with vpopmail+courierImap. I want setup a new server in DMZ for proxy IMAP connections and I have a doubt with authentication method. I've read that dovecot can use a vpopmail driver for authentication. As my user database/password is stored by vpopmail, I think that this would be the best method for check the auth logins against dovecot. But I've read the docs and many examples availables on WWW and I haven't found any reference to validate against an *external* vpopmail server. The examples configuration doesn't contain any host/port, so I suppose that driver try to use a local vopomaild. In my case, I only want dovecot for proxying IMAP connections to my current mail server, without store mails or user/password info in dovecot server, because all that info is already stored in real mailserver. The ideal scenario would be this: user ---IMAPs----> dovecot ----- IMAP ---> mailserver Any advice will be wellcome. Regards and thank you very much in advance

1 0

[Dovecot] > 2.2.rc2: doveadm who -> Bad file descriptor
by Lutz Preßler 27 Feb '13

27 Feb '13

Hello, 2.2.rc2 is reproducibly fine, but (all from xi.rename-it.nl) dovecot_2.2.0~rc2-0~auto+11 (15988:2020ed15efb9) and dovecot_2.2.0~rc2-0~auto+7 (15980:d84c7c11d7b7) have "doveadm who" not working: # doveadm who doveadm(root): Fatal: fcntl(-1, F_GETFL) failed: Bad file descriptor strace doveadm who ends with: socket(PF_FILE, SOCK_STREAM, 0) = 8 fcntl(8, F_GETFL) = 0x2 (flags O_RDWR) fcntl(8, F_SETFL, O_RDWR|O_NONBLOCK) = 0 connect(8, {sa_family=AF_FILE, path="/var/run/dovecot/anvil"}, 110) = 0 fcntl(-1, F_GETFL) = -1 EBADF (Bad file descriptor) write(2, "doveadm(root): Fatal: fcntl(-1, "..., 69doveadm(root): Fatal: fcntl(-1, F_GETFL) failed: Bad file descriptor ) = 69 exit_group(75) = ? same with 2.2.rc2 includes: socket(PF_FILE, SOCK_STREAM, 0) = 8 fcntl(8, F_GETFL) = 0x2 (flags O_RDWR) fcntl(8, F_SETFL, O_RDWR|O_NONBLOCK) = 0 connect(8, {sa_family=AF_FILE, path="/var/run/dovecot/anvil"}, 110) = 0 fcntl(8, F_GETFL) = 0x802 (flags O_RDWR|O_NONBLOCK) fcntl(8, F_SETFL, O_RDWR) = 0 fstat(8, {st_mode=S_IFSOCK|0777, st_size=0, ...}) = 0 write(8, "VERSION\tanvil\t1\t0\nCONNECT-DUMP\n", 31) = 31 Lutz -- Lutz Preßler <Lutz.Pressler(a)SerNet.DE> http://www.SerNet.DE/ SerNet Service Network GmbH, Bahnhofsallee 1b, D-37081 Göttingen Tel.: +49-551-370000-2, FAX: +49-551-370000-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen

2 2

Re: [Dovecot] Sieve filters on folders, different from INBOX
by Valery V. Sedletski 27 Feb '13

27 Feb '13

>> >> So, if sieve is invoked by lda, then, probably, I could invoke dovecot-lda from wrapper script on each mail >> after it is fetched? > >with getmail > >[destination] >type = MDA_external >path = /usr/lib/dovecot/deliver > >But then it will be copied to INBOX... -- Is it possible to specify the >other folder to deliver to, >> to the deliver program? > >the sieve filter invoked bx deliver does it, i.e rule > >if header :contains ... fileinto :create "folder" > >or whatever > Ah, yes. Really, I looked to mpop options, it can call various LDA's. And, dovecot-lda has "-m" parameter, which allows to specify the mailbox name. So, I can deliver the mail arrived by fetcher, via dovecot-lda, and Sieve filters will work. Also, as a bonus, delivering mail via LDA will correctly update user quotas -- the problem which resolved by itself :) Great :) >> >>> >>>> outgoing mail to folders, specific >>> >>> outgoing mail is smtp, with i.e imap copy to sent folder etc >>> if you want other folders your imap client should do it >>> >> >> So, I can invoke Sieve interpreter from SMTP server, or process it via dovecot-lda, like in fetcher case? > >in general ,i dont think so , there may be some workaround with server >bcc_copy and i.e plus adressing with sieve then for "sent" mail > Yes, this is a variant. But what if I modify the Dovecot post-login script (a wrapper for IMAP process), or add the sieve plugin to protocol "imap {mail_plugins = ...}" ? Will it be invoked on each operation with mailboxes? >> >>> >>> try i.e >>> >>> https://addons.mozilla.org/de/thunderbird/addon/send-filter/?src=search >>> >>> >>>> to their recipients. WBR, valery

2 1

[Dovecot] Protocol logging - TLS vs SSL
by Charles Marcus 27 Feb '13

27 Feb '13

Hi all, Ok, I have: login_log_format_elements = user=<%u> method=%m rip=%r lport=%{lport} mpid=%e %c session=<%{session}> We only allow inbound IMAP, and only SSL on port 993. Looking at the logs, %c is obviously the encryption type, but... Why does it say 'TLS', when it technically (there is a difference after all) should say 'SSL'? Not a big deal, but it is just something I've been meaning to ask. -- Best regards, */Charles/*

6 26

[Dovecot] Can't access to shared mailbox
by Angel L. Mateo 27 Feb '13

27 Feb '13

Hello, I have a user sharing a folder to me (and other users). This has worked for me for a time. And it is still working for some users, but not for me. I'm using thunderbird (17.0.3, ubuntu 12.04 package). My server is dovecot 2.1.9 (it's the same since it works). The user sharing its mailbox is: $ sudo doveadm user t userdb: t home : /home/generica/02/001002 uid : 1002 he is sharing its mailbox "cron". This is its dovecot-acl: root@myotis31:/home/generica/02/001002/Maildir# cat dovecot-acl user=<other user> kxeilprwts user=<my user> kxeilprwts user=<other user> kxeilprwts user=<other user> kxeilprwts user=<other user> kxeilprwts user=<other user> kxeilprwts user=<other user> kxeilprwts I can subscribe to this folder: # sudo doveadm mailbox subscribe -u <myuser> shared.t.cron # sudo doveadm mailbox list -u <myuser> -s INBOX ... ... shared.t.cron but when I try to access to this folder through thunderbird (what I really do in TB is subscribe/unsubscribe to it, because it is not actually listed in the folder list), I get: Feb 26 13:35:03 myotis32 dovecot: imap(<myuser>): Error: Couldn't create namespace 'shared.' for user shared: userdb didn't return a home directory, but plugin setting quota used it (%h): dict:User quota::file:%h/Maildir/dovecot.quota With doveadm commands I can access to the shared folder from my user (not the user sharing): $ sudo doveadm search -u <myuser> mailbox shared.t.cron | wc -l 652 Other users can use this shared folder without any (apparent) problem. I have attached my doveconf -n. Any idea? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

2 2

[Dovecot] Special characters in dovecot.conf
by Antonio Casado Rodriguez 27 Feb '13

27 Feb '13

Hi all, I've configured "quota_exceeded_message" in dovecot 1.2, but I have two questions: - Can I use "CRLF" in it? I'd like have two messages: english and spanish. - If char character set in dovecot.conf is ASCII, How do I set special characters (spanish)? The email received is in UTF-8 Thanks you -- Antonio Casado Rodríguez Administrador de Servicios de Red y Seguridad TIC Área de Comunicaciones STIC (Servicio de las Tecnologías de la Información y las Comunicaciones) UNIVERSIDAD DE ALMERÍA Este mensaje y los ficheros que puedan ser adjuntados son confidenciales. Los mismos contienen información reservada que no puede ser difundida. Si usted ha recibido este correo por error, tenga la amabilidad de eliminarlo de su sistema y avisar al remitente mediante reenvío a su dirección electrónica; no deberá copiar el mensaje ni divulgar su contenido a ninguna persona. Su dirección de correo electrónico junto a sus datos personales constan en un fichero titularidad de La UNIVERSIDAD DE ALMERÍA cuya finalidad es la de mantener el contacto con usted. Si quiere saber de qué información disponemos de usted, modificarla, y en su caso, cancelarla, puede hacerlo enviando un escrito al efecto, acompañado de una fotocopia de su D.N.I. a la siguiente dirección: UNIVERSIDAD DE ALMERÍA –. Secretaría General de La Universidad de Almería. Edificio Central, Planta baja. Ctra. Sacramento s/n, La Cañada de San Urbano. CP 04120 Almería

2 1

[Dovecot] Master passwords and ACLs
by Angel L. Mateo 27 Feb '13

27 Feb '13

Hello, Since I have activated acl plugin, master password is no longer working. I'm running dovecot 2.1.9 with master password and acl plugin (among others). I have attached my configuration. If I disable acl plugin, it works, but if I enabled it, dovecot fails. In the client, I get: amateo@joshua:~$ telnet myotis30.um.es 143 Trying 155.54.211.169... Connected to myotis30.um.es. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. 1 login <user>*master <master pass> 1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE QUOTA ACL RIGHTS=texk] Logged in 2 SELECT INBOX 2 NO [SERVERBUG] Internal error occurred. Refer to server log for more information. [2013-02-27 11:46:50] and in the server I get: Feb 27 11:46:47 myotis30 dovecot: imap-login: Login: user=<<user>>, method=PLAIN, rip=155.54.67.5, lip=155.54.211.169, mpid=53762, session=<aECqfbLWvACbNkMF> Feb 27 11:46:47 myotis30 dovecot: imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules Feb 27 11:46:47 myotis30 dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so Feb 27 11:46:47 myotis30 dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib02_imap_acl_plugin.so Feb 27 11:46:47 myotis30 dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so Feb 27 11:46:47 myotis30 dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so Feb 27 11:46:47 myotis30 dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_zlib_plugin.so Feb 27 11:46:47 myotis30 dovecot: imap: Debug: Added userdb setting: plugin/master_user=master Feb 27 11:46:47 myotis30 dovecot: imap: Debug: Added userdb setting: plugin/quota_rule=*:storage=10G Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: Effective uid=113246, gid=110, home=/home/alumnos/46/113246 Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: No acl_shared_dict setting - shared mailbox listing is disabled Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: Quota root: name=User quota backend=dict args=:file:/home/alumnos/46/113246/Maildir/dovecot.quota Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: Quota rule: root=User quota mailbox=* bytes=10737418240 messages=0 Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: Quota rule: root=User quota mailbox=Trash bytes=+1073741824 messages=0 Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: dict quota: user=<user>, uri=file:/home/alumnos/46/113246/Maildir/dovecot.quota, noenforcing=0 Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: Namespace : type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir:INDEX=/var/indexes/<user> Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: maildir++: root=/home/alumnos/46/113246/Maildir, index=/var/indexes/<user>, control=, inbox=/home/alumnos/46/113246/Maildir, alt= Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: initializing backend with data: vfile Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: acl username = master Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: owner = 0 Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl vfile: Global ACL directory: (none) Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: Namespace : type=private, prefix=BORRADOS., sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=maildir:~/Maildir/expunged Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: maildir++: root=/home/alumnos/46/113246/Maildir/expunged, index=, control=, inbox=, alt= Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: initializing backend with data: vfile Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: acl username = master Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: owner = 0 Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl vfile: Global ACL directory: (none) Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: Namespace : type=shared, prefix=shared.%u., sep=., inbox=no, hidden=no, list=children, subscriptions=no location=maildir:%h/Maildir:INDEX=~/Maildir/shared/%u Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: shared: root=/var/run/dovecot, index=, control=, inbox=, alt= Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: initializing backend with data: vfile Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: acl username = master Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: owner = 0 Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl vfile: Global ACL directory: (none) Feb 27 11:46:50 myotis30 dovecot: imap(<user>): Debug: acl vfile: file /home/alumnos/46/113246/Maildir/dovecot-acl not found Feb 27 11:46:50 myotis30 dovecot: imap(<user>): Error: Failed to autocreate mailbox INBOX: Permission denied This user, accesed directly, without master user, works perfectly, with no problem, even with acl plugin. Any idea? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

1 1

[Dovecot] "sent" and "accepted" missing mails
by Spyros Tsiolis 27 Feb '13

27 Feb '13

Hello all, OK, this most probably is not dovecot related. However, I have to start from somewhere. output of "dovecot -n" : # 1.2.16: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.17.4.el5 i686 CentOS release 5.5 (Final) ext3 base_dir: /var/run/dovecot/ log_path: /var/log/dovecot/dovecot.log info_log_path: /var/log/dovecot/dovecot-info.log ssl_parameters_regenerate: 48 verbose_ssl: yes login_dir: /var/run/dovecot//login login_executable: /usr/local/dovecot/libexec/dovecot/imap-login login_greeting: * Dovecot ready * login_max_processes_count: 96 mail_location: maildir:/var/MailRoot/domains/%d/%n/Maildir mail_plugins: zlib auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd-file args: /etc/dovecot/passwd passdb: driver: pam userdb: driver: static args: uid=vmail gid=vmail home=/home/vmail/%u userdb: driver: passwd User (really weird user) today tells me she is missing "sent" and "accepted" folders. She is running the latest version of Thunderbird on a windows XP pro 32-bit machine. My question is : Should I hunt something that is dovecot-related or is it MUA related ? And since I brought this up; Does anyone know if dovecot (v1.2.16) has any limits on user quota, message sizes and stuff like that ? Thank you kindly, spyros ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

3 2