- dovecot - dovecot.org

[Dovecot] POP3S PORT
by Robert JR 14 Sep '12

14 Sep '12

Hello I am using dovecot with POP3S and IMAPS ports, When client connect to POP3S port (995) , i can see in dovecot log file that the protocol is TLSv1 So how come the protocol is TLSv1 and not SSL ? Does the user connect t port 995 with SSL protocol then encrypt again inside the SSL session to make The TLSv1 protocol ? Or does the client use TLSv1 Protocol immediately when connect to port 995 without Using SSL protocol ? Please Help. Robert JR

3 2

[Dovecot] sieve_execute_bytecode failed with squirrelmail
by Gregory Charot (EVENIUM) 14 Sep '12

14 Sep '12

Hello all, I'm using dovecot on CentOS 5.8 (official CentOS package) and have lot of lock and "sieve_execute_bytecode error" in my dovecot.log. $ cat /etc/redhat-release CentOS release 5.8 (Final) $ dovecot --version 1.0.13 The sieve scripts are generated by squirrelmail mail and are mostly mail filters and vacations notices. $ yum info squirrelmail.noarch Installed Packages Name : squirrelmail Arch : noarch Version : 1.4.8 Release : 5.el5.centos.13 When I look at my dovecot.log I have a lot of sieve error : deliver(foo): Sep 11 15:08:04 Info: msgid=<1881992580.96697.1347363282479.JavaMail.jboss(a)gula1.xxx.com>: save failed to EvSUPPORT: Timeout while wait ing for lock deliver(foo): Sep 11 15:08:04 Info: sieve runtime error: Fileinto: Generic Error deliver(foo): Sep 11 15:08:04 Error: sieve_execute_bytecode(/home/foo/.dovecot.sievec) failed The server hosts around 50 mailboxes, some people does have sieve errors some doesn't. Is there any way to get more details about the runtime error ? How can I debug this issue ? Thanks a lot in advance, Greg My config below : #dovecot -n # 1.0.13: /etc/dovecot.conf log_path: /var/log/dovecot.log ssl_ca_file: /etc/pki/roch_crt/roch_evenium_com.ca-bundle ssl_cert_file: /etc/pki/roch_crt/roch_evenium_com.crt ssl_key_file: /etc/pki/roch_crt/private/roch-private.key ssl_cipher_list: ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+SSLv3 login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_process_per_connection: no login_process_size: 256 login_processes_count: 10 login_max_connections: 32 mail_privileged_group: mail dotlock_use_excl: yes fsync_disable: yes maildir_copy_with_hardlinks: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls,oe-ns-eoh auth default: passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/run/dovecot/auth-client mode: 438 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384

2 3

[Dovecot] Possible mbox corruption if mail is saved with wrong Content-Length header (2.1.6)
by Jost Krieger 14 Sep '12

14 Sep '12

One of our users likes to delete attachments from his mails. He is using roundcube and we installed a plugin for that. He reports that from time to time one of his mails gets corrupted (cut off in the middle). I could verify there is something wrong in the logs: imap(x1234567): Error: Cached message size larger than expected (6796 > 2844) imap(x1234567): Error: Corrupted index cache file /net/mbx3/disc2/home/85/x1234567/Index/.imap/Sent/dovecot.index.cache: Broken physical size for mail UID 5001 imap(x1234567): Error: read(/net/mbx3/disc2/home/85/x1234567/Mail/Sent) failed: Input/output error (FETCH for mailbox Sent UID 5001) imap(x1234567): Info: Disconnected: Internal error occurred. Refer to server log for more information. [2012-08-23 00:00:49] in=1124145 out=1324791 I had a look at the plugin and it works by duplicating the message and leaving out the attachment(s). The headers are also duplicated, including Content-Length. I've fixed that in the plugin, (don't know yet if it helps), but I think it shouldn't cause such breakage in dovecot. # doveconf -n # 2.1.6: /usr/local/dovecot/etc/dovecot/dovecot.conf # OS: Linux 2.6.9-103.ELsmp i686 Red Hat Enterprise Linux AS release 4 (Nahant Update 9) doveconf: Warning: Dovecot was last started using /usr/local/dovecot/etc/dovecot.conf, but this config is /usr/local/dovecot/etc/dovecot/dovecot.conf auth_master_user_separator = * disable_plaintext_auth = no doveadm_password = (hidden) lda_mailbox_autocreate = yes log_path = /dev/stderr log_timestamp = mail_location = mbox:~/Mail:INBOX=~/Mailbox:INDEX=~/Index mail_plugins = " quota zlib mail_log notify virtual" mdbox_rotate_size = 5 M namespace { hidden = no inbox = yes location = prefix = separator = / type = private } namespace { hidden = yes inbox = no list = children location = maildir:~/Maildir prefix = "#MD/" separator = / type = private } passdb { driver = pam } passdb { args = /usr/local/dovecot/etc/passwd.dovcot.master driver = passwd-file master = yes } plugin { acl = vfile mail_log_events = undelete mailbox_delete mailbox_rename mailbox_create mail_log_fields = uid box msgid size quota = fs:Disk quota } protocols = pop3 imap service auth { client_limit = 4300 user = root } service doveadm { inet_listener { port = 542 } } service imap-login { inet_listener imap { address = 134.147.64.42 port = 143 } service_count = 0 } service imap { drop_priv_before_exec = yes process_limit = 4096 vsz_limit = 1 G } service pop3-login { inet_listener pop3 { address = 134.147.64.42 port = 110 } service_count = 0 } service pop3 { drop_priv_before_exec = yes process_limit = 2048 vsz_limit = 512 M } ssl = no userdb { driver = passwd } protocol imap { mail_max_userip_connections = 50 mail_plugins = " quota zlib mail_log notify virtual imap_quota imap_zlib" } Thanks Jost Krieger -- | Helft Spam ausrotten! HTML in Mail ist unhöflich. | | Postmaster, JAPH, manchmal Wahrsager am RZ der RUB | | Wahre Worte sind nicht gefällig, gefällige Worte sind nicht wahr.| | Lao Tse, Tao Te King 81 |

2 4

[Dovecot] Couldn't drop privileges: User is missing UID (see mail_uid setting)
by Carsten Laun-De Lellis 14 Sep '12

14 Sep '12

Hi all I hope anyone could help me out with my problem regarding the user_id settings. I am running my mail servers just for fun and I am not a professional mail admin. After I am using postfix and dovecot for my mail servers with a mysql backend for the last 2 years I have tried to set up an installation with a ldap backend. I followed the how-to from the Postfix Book and now I have always the following error message: Couldn't drop privileges: User is missing UID (see mail_uid setting) This error message occurs whenever I try to connect via a mail client. System emails were delivered the way I expected. So I assume postfix is working fine. The ldap search I use for user authentication is as follows: uris = ldap://myserver.com dn = cn=admin, dc=mydomain, dc=com dnpass = secure tls = no base = ou=mailuser,dc=mydomain,dc=com ldap_version = 3 user_attrs = pfMailMessageStore=home user_filter = (&(objectClass=PFMailAccount)(pfMail=%u)) pass_attrs = pfClearPassword=password,pfMailMessageStore=userdb_home pass_filter = (&(objectClass=PFMailAccount)(pfMail=%u)) default_pass_scheme = PLAIN user_global_uid = 5000 user_global_gid = 5000 I am using dovecot 2.1.9, postfix 2.8.5 and openldap 2.4.23 I would appreciate any help or tipps. ~ Mit freundlichem Gruß Carsten Laun-De Lellis Dipl.-Ing. Elektrotechnik Certified Information Systems Auditor (CISA) Hauptstrasse 13 D-67705 Trippstadt Phone: +49 (6306) 992140 Mobile: +49 (151) 27530865 Fax: +49 (6306) 992142 email: <mailto:carsten.delellis@delellis.net> carsten.delellis(a)delellis.net

1 0

[Dovecot] best way to activate quota
by Angel L. Mateo 14 Sep '12

14 Sep '12

Hello, I'm planning to activate quota control in dovecot, with maildir quota backend. I have about 70k users in my system directed to 4 backend servers (with a director to ensure that a user is always directed to the same server). I have tried to activate it in one of my nodes. The problem is that load of it has increase a lot, as much as the system was unusable (maildir is in nfs storage, with indexes in local disks). What do you think is the best to activate it? I have think that I could use doveadm commands to calculate an initial quota (on low load periods) and then activate quota, hoping that although quota is not correct, it would be used. Should this work?

5 9

[Dovecot] antispam_plugin prevents IMAP login (error 3) [Dovecot 2.0.19]
by dof＠projektfabrik.com 13 Sep '12

13 Sep '12

Hi everybody, trying to get the Dovecot antispam_plugin to work and I must be doing something wrong, because as soon as it is enabled with a certain backend, imap logins do not work anymore (the session is immediately closed after a successful login). Interestingly, pipe and spool2dir are working (that is, the session won't be closed), dspam-exec and crm114-exec are not. If this happens, mail_debug output is as follows: imap-login: Login: user=<dof>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=10420, secured imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_autocreate_plugin.so imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_fts_plugin.so imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib21_fts_squat_plugin.so imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib90_antispam_plugin.so imap(dof): Debug: Effective uid=23244, gid=8, home=/var/spool/dovecot/userdata/dof imap(dof): Debug: Home dir not found: /var/spool/dovecot/userdata/dof master: Error: service(imap): child 10420 returned error 3 Without the plugin I get: imap-login: Login: user=<dof>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=10469, secured imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_autocreate_plugin.so imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_fts_plugin.so imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib21_fts_squat_plugin.so imap(dof): Debug: Effective uid=23244, gid=8, home=/var/spool/dovecot/userdata/dof imap(dof): Debug: Home dir not found: /var/spool/dovecot/userdata/dof imap(dof): Debug: fs: root=/var/spool/dovecot/mail/dof, index=, control=, inbox=/var/spool/dovecot/mail/dof/INBOX, alt= imap(dof): Debug: Namespace : Using permissions from /var/spool/dovecot/mail/dof: mode=0755 gid=-1 Hopefully this is just a configuration problem. I tried the plugin in the Ubuntu repository (I'm using LTS 12.04) and even checked out the source from git and compiled it myself, but to no avail. Thanks a lot in advance and best regards, Florian ------------------- dovecot -n output: auth_cache_size = 128 k auth_cache_ttl = 20 mins auth_failure_delay = 10 secs auth_mechanisms = plain login disable_plaintext_auth = no login_greeting = Projektfabrik IMAP ready. mail_gid = mail mail_home = /var/spool/dovecot/userdata/%u mail_location = maildir:/var/spool/dovecot/mail/%u:INBOX=/var/spool/dovecot/mail/%u/INBOX:LAYOUT=fs mail_uid = dovemail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { antispam_backend = dspam-exec antispam_dspam_binary = /usr/bin/dspam antispam_signature = X-DSPAM-Signature antispam_signature_missing = error antispam_spam = Spam antispam_trash = trash;Trash;Deleted Items; Deleted Messages autocreate = INBOX/Sent Mail autocreate2 = INBOX/Spam autocreate3 = INBOX/Trash autosubscribe = INBOX/Sent Mail autosubscribe2 = INBOX/Spam autosubscribe3 = INBOX/Trash fts = squat sieve = /var/spool/dovecot/sieve/%u/defaultbc sieve_before = /etc/dovecot/sieve/spam.sieve sieve_dir = /var/spool/dovecot/sieve/%u } protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0600 user = postfix } unix_listener auth-userdb { mode = 0600 user = dovemail } user = dovenull } service imap-login { inet_listener imap { address = localhost port = 143 } inet_listener imaps { address = localhost XX.XXX.XX.XXX port = 993 } service_count = 1 user = dovenull } service managesieve-login { inet_listener sieve { address = localhost port = 2000 } service_count = 1 user = dovenull } service pop3-login { inet_listener pop3 { address = localhost port = 110 } inet_listener pop3s { address = XX.XXX.XX.XXX port = 995 } service_count = 1 user = dovenull } ssl_ca = </etc/ssl/dovecot/cacert.pem ssl_cert = </etc/ssl/dovecot/cert.pem ssl_key = </etc/ssl/dovecot/key.pem protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_plugins = antispam autocreate fts fts_squat } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_lock_session = yes } protocol lda { mail_fsync = optimized mail_plugins = sieve postmaster_address = postmaster(a)projektfabrik.com }

2 1

[Dovecot] cyrus2dovecot script converts mailboxes to bigger sizes
by Igor Zinovik 13 Sep '12

13 Sep '12

Hello, list. I'm asking question not directly connected with dovecot. I'm planning a migration from cyrus-imapd to dovecot and i'm using cyrus2dovecot script (by Freie Universität Berlin) to convert mailboxes of users, but i'm wondering why size of mailbox in Maildir++ is so much bigger than mailbox in cyrus format after conversion: linux-a9qw:~/ # du -sh /mnt/imap/z/user/zinovik /srv/vmail/petrsu.ru/z/zinovik/Maildir 238M /mnt/imap/z/user/zinovik 1.2G /srv/vmail/mydom.ru/z/zinovik/Maildir I was planning to implement quota for mailboxes about 1 gigabyte, but after conversion I would not be able to receive messages to my own box, because i'm overquota. I think the only way would be to set quota up to 15 GB since some of users have mailbox with 12GB after conversion, but I have no such disk capacity to allow more than 1500 users have 15GB quota. Would it be practical solution to compress all files after conversion and enable zlib support in dovecot?

1 1

[Dovecot] doveadm director map : User listing returned failure
by Ramón Frontera 13 Sep '12

13 Sep '12

Hello we are running Dovecot 2.1.9. We have 2 proxies with director and 4 mail servers. We have the user information in a LDAP. I try to do: # doveadm director map doveadm(root): Error: User listing returned failure doveadm(root): Error: user listing failed user mail server ip expire time <unknown> x.x.x.x 2012-09-12 10:52:17 <unknown> x.x.x.x 2012-09-12 10:55:53 in the dovecot log i have found: dovecot: auth: Error: Trying to iterate users, but userdbs don't support it What can I do to solve this problem? Thanks in advance. -- ------------------------------------------ Ramon Frontera Gallardo Universitat de les Illes Balears

2 1

[Dovecot] Dovecot 1.x POP3 to Dovecot 2.x POP3 mbox to Maildir best transfer program/method
by Tim E. 12 Sep '12

12 Sep '12

I have a box running Dovecot 1.x POP3 only server using mbox format. I want to port the mail over to a Centos 6.3 box running a Dovecot 2.x POP3 only server using Maildir format. The main thing I want to do is support XUID/read/unread status so the transfer is transparent for the end user. I have been able to achieve transfers from the mbox format to Maildir but loose the XUID/read/unread status so that the Thunderbird client always re-downloads all the mail as if it were new. Ive googled and I have tried the following: dsync : dovecot 1.x server is too old and doesnt support the command? mb2md.pl: transfers the mbox to maildir and creates file dovecot-uidlist but the Thunderbird client redownloads the files virtualmin copy-mailbox: transfers the mailbox to Maildir but doesnt reproduce the dovecot indexes. Any thoughts would be appreciated. I would like to produce a howto of the process when I am done.

2 6

[Dovecot] TIMO HELP! director ring wont stay connected
by Kelsey Cummings 12 Sep '12

12 Sep '12

I've had 2x director ring up and running with production load on 2.1.8 with around 10,000 active connections for two weeks and everything has been working great - until this morning. There isn't anything obvious in the logs beyond the fact that the director connections started bouncing. It was not resolved by reloads or restarts or an upgrade to 2.1.9 (only the directors.) I've dropped one of the servers out of the ring to prevent suffering but this is a less than ideal situation. Any idea what is going on? Load today is consistent with low weekend load since it is a major US holiday so this wouldn't appear to be a load related issue. auth_master_user_separator = * auth_username_format = %Ln auth_verbose = yes default_client_limit = 10000 director_mail_servers = 1.1.1.1 1.1.1.2 1.1.1.3 1.1.1.4 director_servers = a.director.foo b.director.foo disable_plaintext_auth = no doveadm_proxy_port = 1842 login_trusted_networks = 10.0.0.1 mbox_write_locks = fcntl passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes pass = yes } passdb { args = proxy=y nopassword=y driver = static } service anvil { client_limit = 20103 } service auth { client_limit = 41704 } service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { port = 9321 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director process_limit = 20000 process_min_avail = 32 } service imap { process_limit = 20480 } service pop3-login { executable = pop3-login director process_limit = 20000 process_min_avail = 32 } ssl_ca = </etc/dovecot/ssl/gd_bundle.crt ssl_cert = </etc/dovecot/ssl/imap.sonic.net.crt ssl_key = </etc/dovecot/ssl/imap.sonic.net.key ssl_parameters_regenerate = 1 days syslog_facility = local0 protocol imap { ssl_ca = </etc/dovecot/ssl/gd_bundle.crt ssl_cert = </etc/dovecot/ssl/imap.sonic.net.crt ssl_key = </etc/dovecot/ssl/imap.sonic.net.key } protocol pop3 { ssl_ca = </etc/dovecot/ssl/pop.sonic.net.ca-bundle ssl_cert = </etc/dovecot/ssl/pop.sonic.net.crt ssl_key = </etc/dovecot/ssl/pop.sonic.net.key } >Sep 3 09:22:42 b.director. b dovecot: director: Error: Director 10.10.10.71:9321/right disconnected >Sep 3 09:22:45 a.director. a dovecot: director: Error: Director 10.10.10.37:9321/left disconnected >Sep 3 09:22:49 b.director. b dovecot: director: Error: Director 10.10.10.71:9321/left disconnected >Sep 3 09:22:53 b.director. b dovecot: director: Error: Director 10.10.10.71:9321/left disconnected >Sep 3 09:22:54 a.director. a dovecot: director: Error: Director 10.10.10.37:9321/left disconnected >Sep 3 09:22:59 b.director. b dovecot: director: Error: Director 10.10.10.71:9321/left disconnected >Sep 3 09:23:02 a.director. a dovecot: director: Error: Director 10.10.10.37:9321/right disconnected >Sep 3 09:23:02 a.director. a dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director left >Sep 3 09:23:02 b.director. b dovecot: director: Error: Director 10.10.10.71:9321/right disconnected >Sep 3 09:23:02 b.director. b dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director left >Sep 3 09:23:32 a.director. a dovecot: director: Error: director: User foo host lookup failed: Timeout - queued for 47 secs (Ring synced for 30 secs, weak user, user refreshed 47 secs ago) >Sep 3 09:23:32 a.director. a dovecot: director: Error: director: User bar host lookup failed: Timeout - queued for 38 secs (Ring synced for 30 secs, weak user, user refreshed 38 secs ago) >Sep 3 09:23:32 a.director. a dovecot: director: Error: director: User bla host lookup failed: Timeout - queued for 30 secs (Ring synced for 30 secs) >Sep 3 09:23:32 a.director. a dovecot: director: Error: director: User bla2 host lookup failed: Timeout - queued for 30 secs (Ring synced for 30 secs) >Sep 3 09:23:32 a.director. a dovecot: director: Error: Director 10.10.10.37:9321/right disconnected >Sep 3 09:23:32 a.director. a dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director left >Sep 3 09:23:32 a.director. a dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director left >Sep 3 09:23:32 b.director. b dovecot: director: Error: Director 10.10.10.71:9321/out disconnected before handshake finished >Sep 3 09:23:32 b.director. b dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director left >Sep 3 09:24:02 b.director. b dovecot: director: Error: Director 10.10.10.71:9321/out disconnected before handshake finished >Sep 3 09:24:02 b.director. b dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director left >Sep 3 09:24:05 a.director. a dovecot: director: Warning: Delaying new user requests until ring is synced >Sep 3 09:24:32 a.director. a dovecot: director: Warning: Ring is synced, continuing delayed requests >Sep 3 09:24:41 b.director. b dovecot: director: Error: Director 10.10.10.71:9321/right disconnected >Sep 3 09:24:41 b.director. b dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director left >Sep 3 09:24:41 a.director. a dovecot: director: Error: Director 10.10.10.37:9321/right disconnected >Sep 3 09:24:41 a.director. a dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director left >Sep 3 09:25:11 b.director. b dovecot: director: Error: User hash 2285697953 is being redirected to two hosts: 10.10.10.39 and 10.10.10.76 (old_ts=1346689481,handshaking,recv_ts=1346689467) >Sep 3 09:25:12 b.director. b dovecot: director: Error: User hash 623192092 is being redirected to two hosts: 10.10.10.76 and 10.10.10.39 (old_ts=1346689481,handshaking,recv_ts=1346689468) >Sep 3 09:25:12 b.director. b dovecot: director: Error: User hash 1683990717 is being redirected to two hosts: 10.10.10.43 and 10.10.10.76 (old_ts=1346689481,handshaking,recv_ts=1346689468) >Sep 3 09:25:12 a.director. a dovecot: director: Error: Director 10.10.10.37:9321/right disconnected >Sep 3 09:25:12 a.director. a dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director lef -- Kelsey Cummings - kgc(a)corp.sonic.net sonic.net, inc. System Architect 2260 Apollo Way 707.522.1000 Santa Rosa, CA 95407

3 10