- dovecot - dovecot.org

[Dovecot] different userdb and/or passdb for lmtp and pop3/imap?
by Gábor Lénárt 06 Sep '12

06 Sep '12

Dear All, I have a bit complex question about ldap based user/passdb with some twists caused by the LDAP schema I have to use. It's complex for me at least, since it's my first time to try to setup any dovecot install which is more than a "trivial" thing eg for some unix system users. What I'd like to do: Users are stored in LDAP with the following schema: storageMailUid: contains user's uid in x@z format, and it CAN be different than mail address. This value is used to login (pop3/imap) and to get the maildir path (well, home) in the form of /mailstorage/z/x/ regardless of the value of the "mail" attribute. If @z part is missing (I mean the user supplied login, not the LDAP!), some default value (example.com) should be treated (I guess that's easy: auth_default_realm may be enough, isn't it). It is NOT possible to login via pop3/imap with mail, only with storageMailUid! This storageMailUid can specify a string which is not even an existing mail address, of course. mail: contains user's mail address, or even mail addresses (there can be more mail addresses - more mail ldap attributes - for a single ldap entry). This attribute cannot be used for pop3/imap login, neither it counts to resolve the maildir path, it only counts when a mail is received: the location of the user's maildir must be got from storageMailUid. storageMailQuota: it contains the quota value (in bytes) for the given user, which should be enforced on receiving mail, or by using IMAP (not counting the Trash folder which is a fixed size for all users and it must be handled outside of this). All user maildirs have the same fixed unix UID/GID, which is not stored in LDAP, but must be configured statically. "Home directory" of the user is also not stored in LDAP, it must be got from storageMailUid LDAP parameter. Mails are received via LMTP only. I'd like to use prefetchdb to minimalize the amount of LDAP lookups (however I can live without that). I am unsure if auth_bind is OK, or it should not be used, currently I'd like to play with auth_bind, since it worked before on other servers well. I'm totally lost with the user_attrs/pass_attrs to create this kind of configuration. In case of static userdb, it was easy to set up: passdb { args = /etc/dovecot/dovecot-ldap-passdb.conf driver = ldap } userdb { args = uid=vmail gid=vmail home=/mailstorage/%Ld/%Ln driver = static } With this, pop3/imap worked (quota was not of the scope yet, though), however lmtp is not ("passdb doesn't support lookups, can't verify user's existence" which is odd for me, as userdb does not support it in my opinion). Please, give some suggestion how to set up userdb and passdb to support this configuration which works with the described scenario. I should also set iterate_filter and iterate_attrs I guess, so some doveadm commands can work then (-A stuffs, I guess). I am also not sure if auth service should be used or not (I mean extra configuration related): since I want LMTP not LDA, I guessed I don't need it, but I am not sure. I am also confused, because on receiving a mail (via LMTP) different kind of LDAP lookup is needed: then mail must be searched, but it's storageMailUid based lookup in case of pop3 or imap login ... Is it possible to give different userdb/passdb for lmtp and pop3/imap? In theory it's even possible to have x(a)example.com as mail and y(a)example.com as storageMailUid for one user, and the opposite for the another, so lookups cannot be done together for mail and storageMailUid. The LDAP schema/rest of the system works this way, not an option to change. Any help is greatly welcomed. Thanks a lot in advance, Gábor

1 1

[Dovecot] Anyone else seeing lots of random duplicate messages???
by Charles Marcus 06 Sep '12

06 Sep '12

Almost every message I'm getting through this list is duplicated, down to the same exact message-ID... Anyone else seeing this? Charles

6 8

[Dovecot] managesieve problem
by Léon Keijser 06 Sep '12

06 Sep '12

Hi, I'm using roundcube in combination with postfix (2.6.6), dovecot (2.0.9) and pigeonhole (2.0.9). All works well except sieve. I've already posted on the roundcube forum (http://www.roundcubeforum.net/index.php/topic,9690.0.html ) but was told I should ask here since it's more likely a dovecot issue rather than roundcube. The problem is that if I want to manage sieve filters from roundcube, I get this error in maillog: Sep 5 12:55:39 emperor dovecot: managesieve-login: Login: user=<leon(a)EXAMPLE.COM>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=1575, secured Sep 5 12:55:39 emperor dovecot: managesieve(leon(a)EXAMPLE.COM): Error: sieve-storage: stat((null)) failed: Bad address Sep 5 12:55:39 emperor dovecot: managesieve(leon(a)EXAMPLE.COM): Error: sieve-storage: stat((null)) failed: Bad address Sep 5 12:55:39 emperor dovecot: managesieve(leon(a)EXAMPLE.COM): Fatal: Failed to open Sieve storage The managesieve daemon is listening though: emperor ~ # netstat -tlpne | grep dovecot tcp 0 0 0.0.0.0:143 0.0.0.0:* LISTEN 0 1275042 362/dovecot tcp 0 0 0.0.0.0:2000 0.0.0.0:* LISTEN 0 1275037 362/dovecot tcp 0 0 0.0.0.0:4190 0.0.0.0:* LISTEN 0 1275035 362/dovecot tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN 0 1275044 362/dovecot tcp 0 0 :::143 :::* LISTEN 0 1275043 362/dovecot tcp 0 0 :::2000 :::* LISTEN 0 1275038 362/dovecot tcp 0 0 :::4190 :::* LISTEN 0 1275036 362/dovecot tcp 0 0 :::993 :::* LISTEN 0 1275045 362/dovecot emperor ~ # telnet localhost 4190 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. "IMPLEMENTATION" "Dovecot Pigeonhole" "SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date spamtest spamtestplus" "NOTIFY" "mailto" "SASL" "PLAIN" "STARTTLS" "VERSION" "1.0" OK "Dovecot ready." Before I paste any configuration files, I wanted to ask first if this is a common/known issue. Else, please let me know what additional information I should provide. Thanks in advance! kind regards, Léon

2 5

[Dovecot] Length of attachment filenames
by Fuhrmann, Hauke 06 Sep '12

06 Sep '12

Hi there, I have a beginners question to Dovecot: does it have a restriction on the supported length and character encodings of filenames of attachments? Can filenames be arbitrary large? Cheers, Hauke -- Diese E-Mail kann vertrauliche und/oder rechtlich geschuetzte Informationen enthalten. Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtuemlich erhalten haben, informieren Sie bitte sofort den Absender durch eine Antwortmail und vernichten Sie diese Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail ist nicht gestattet. Wir danken fuer Ihre Kooperation. This e-mail may contain confidential and/or privileged information. If you are not the intended recipient or have received this e-mail in error, you are on notice of its status. Please notify the sender immediately by reply e-mail and delete this e-mail from your systems. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly prohibited. Thank you for your cooperation.

3 2

[Dovecot] dovecot stats: useful data to gather
by Patrick Ben Koetter 06 Sep '12

06 Sep '12

Timo, following our discussion on dovecot stats at the LinuxTag 2012 my team and I sat down and put together a list of stat items we think to be useful in daily dovecot usage. Besides pulling together all the data we also think it would be useful to have an SNMP interface to access the stats. Our offer to create and contribute a standalone web interface for dovecot stats stands. Here are the stats we believe to be useful: Login/Logout - total number login success/time - total number login failure/time - total number per authentication mechanism - total number plain sessions - total number STARTTLS sessions - total number of currently connected users (pop3/pop3s/imap/imaps/managesieve) - login names of connected users (not really stats, but great for actions regarding those uses e.g. force logout) - total number logout commands/time - total number BYE responses (autologout) Mailbox state - Inflow rate (number incoming messages/time) - Deleted rate (number \Deleted flagged messages/time) - Expunge rate (number Expunge operations/time) - total number current messages mailboxes normal storage - total number current messages mailboxes alt storage - total number read messages mailboxes normal storage - total number read messages mailboxes alt storage - per user number current messages mailboxes normal storage - per user number current messages mailboxes alt storage - per user number read messages mailboxes normal storage - per user number read messages mailboxes alt storage Mailbox Quota - total number persons under soft-quota per quota - total number persons above or equal soft-quota per quota - total number persons above or equal hard-quota per quota Performance - minimum time to write a message - maximum time to write a message - average time to write a message - minimum time to modify a message - maximum time to modify a message - average time to modify a message - minimum time to delete a message - maximum time to delete a message - average time to delete a message - minimum time search operations - maximum time search operations - average time search operations Regards, p@rick -- state of mind () http://www.state-of-mind.de Franziskanerstraße 15 Telefon +49 89 3090 4664 81669 München Telefax +49 89 3090 4666 Amtsgericht München Partnerschaftsregister PR 563

5 5

Re: [Dovecot] thunderbird not connecting
by Joseph Tam 06 Sep '12

06 Sep '12

On Wed, 5 Sep 2012, Charles Marcus wrote > On 2012-09-05 6:23 AM, cc maco young <bangkokmaco(a)gmail.com> wrote: >> On Wed, Sep 5, 2012 at 12:02 AM, Stan Hoeppner<stan(a)hardwarefreak.com>wrote: >>> What does TB activity manager say? > >> Activity Manager is blank >> >> as an update, went to Claws email client. it had enough feedback and gave >> me enough ways to tweak - got everything going. >> >> went back to TB. recognized server, but no username/password. perhaps >> it's not letting the full email - which is the user name - through. but >> who knows? no feedback. > > You're looking at the wrong end. > > You need to be looking at your SERVER logs, not the Clients. Actually, I think he did supply that and it showed imap and pop3 not getting any auth information. > dovecot: pop3-login: Aborted login (no auth attempts): rip=223.205.150.234, > lip=xxx.xx.xx.xx > dovecot: imap-login: Aborted login (no auth attempts): rip=223.205.150.234, lip=xxx.xx.xx.xx There are other log options to verbosely log auth and ssl information, and that might help. I frequently see the above log messages when the client and the server get their security protocol (SSL/TLS) and ports crossed up (i.e. trying IMAP/SSL on port 143 or trying IMAP/TLS on port 993). Try fiddling with TB's setting here and see if anything shakes loose. You can also use openssl and simulate the server end and maybe that will shed light on the situation: (You'll have to read the man page yourself to find all the options) openssl s_server -accept 993 ... Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] mail_location / mail_home
by Denny Schierz 06 Sep '12

06 Sep '12

hi, I had a long (upgraded today from 2.0.17 to 2.1.9) time mail_location and mail_home at the same path, which I recognize know, that it wasn't a good idea, idea. On my testsystem I've set: mail_home = /imap/spool/%d/%1u/%u mail_location = maildir:~/:INDEX=~/ otherwise I don't have access to the mails anymore. Is that ok? cu denny

3 3

[Dovecot] Outlook 2013 imap specialuse RFC6154 XLIST
by Robert Schetterer 05 Sep '12

05 Sep '12

Hi, perhaps somebody wants to this --snip Microsoft® Outlook® 2013 Preview Outlook 2013 Preview implements the IMAP LIST extension specified in [RFC6154] as the XLIST command. ---snip taken out of [MS-STANOIMAP].pdf which zip you may download here http://msdn.microsoft.com/en-us/library/ee157124%28v=exchg.80%29 -- Best Regards MfG Robert Schetterer

3 6

[Dovecot] strange Folder in subscription list (was: Imap Ghost Folder)
by Sascha Zucca 05 Sep '12

05 Sep '12

Hi list, here's the complete Problem for easy reading again. Can someone reproduce this? I have a strange "ghostfolder" when using shares/%%n/ as prefix for shared namespace. If i swith only this setting to shares/%%u/ everything is just as wanted, only then the prefix is very long, so i would prefer the name. dovecot --version 2.1.7 dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-14-pve i686 Debian 6.0.5 simfs auth_mechanisms = plain login disable_plaintext_auth = no log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/var/vmail/%%d/%%n/Maildir mail_plugins = acl mail_privileged_group = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = prefix = separator = / type = private } namespace { hidden = yes list = children location = maildir:/var/vmail/%%d/%%n/Maildir:INDEX=/var/vmail/%d/%n/Maildir/shared/%%u prefix = shares/%%n/ separator = / subscriptions = no type = shared } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { acl = vfile acl_shared_dict = file:/var/lib/dovecot/db/shared-mailboxes.db quota = dict:user::file:/var/vmail/%d/%n/.quotausage sieve = /var/vmail/%d/%n/.sieve } protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } user = root } ssl_cert = </etc/postfix/smtpd.cert ssl_key = </etc/postfix/smtpd.key userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } protocol lda { mail_plugins = sieve quota } protocol imap { mail_plugins = quota imap_quota acl imap_acl } Thank you very much for your help Sascha -- Systemschmiede IT-Lösungen Zucca & Teves GbR August-Thyssen-Straße 2-4 52511 Geilenkirchen www.systemschmiede.com Tel.: 02451 - 9088390 Fax: 02451 - 9124070 Mobil: 0178 - 4073254 Ust.ID: DE248030393

1 0

Re: [Dovecot] finding messages deleted before timespec
by Joseph Tam 05 Sep '12

05 Sep '12

On Tue, 4 Sep 2012, Sven Hartge wrote: > I am searching for a search_query which only matches messages with the > flag \Deleted whose flag has been set 24h or longer ago. > > Doing something like > > doveadm expunge -A mailbox \* DELETED > > is not the solution, since it will expunge all deleted mails without > looking at the time when they have been deleted. > > Using savedbefore does not work either, since a message may have been > saved 2 years ago but only recently deleted. You could work out a cron job that does a "doveadm search ...", then diff it with one generated 24 hours ago, extract the common GID/UUIDs, then do a second pass to delete them. Not elegant, but it would probably work. (I just read the man page, and there doesn't seem to be an option to pipe the search like "doveadm search ... | doveadm expunge ...". You'll have to expunge one message at a time. Ugh.) Or maybe the advice "don't worry, be happy" applies here. I find that too many "mistake mitigation" features is counterproductive as users habitually relying on them, rather than being careful. Extending your grace period to a week will lessen the probability of this race condition. Joseph Tam <jtam.home(a)gmail.com>

1 0