- dovecot - dovecot.org

[Dovecot] last hope... public namespace and directory structure
by Daniel Fischer 28 Jun '12

28 Jun '12

hello, I would like to migrate to dovecot, but I have a problem with a public namespace declaration: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-2-amd64 x86_64 Debian wheezy/sid And here are the relevant parts from the configuration: namespace { location = maildir:/var/mail/vhosts/%d/public prefix = Public. separator = . type = public } namespace inbox { prefix = separator = . subscriptions = yes type = private } I assume that all folders under ./public/ are public mailboxes. The public folder itself is not a maildir, but contains the team mailboxes i.e. ./public/.sales/ ./public/.service/ ./public/.purchase/ The file passwd for those 3 samples looks like this: sales@$DOMAIN::5000:5000::/var/mail/vhosts/$DOMAIN/public/.sales service@$DOMAIN::5000:5000::/var/mail/vhosts/$DOMAIN/public/.service purchase@$DOMAIN::5000:5000::/var/mail/vhosts/$DOMAIN/public/.purchase Note: All other users have mail_location /var/mail/vhosts/%d/%n Now a have the following problem: If I login in as user sales and create a folder foo and in there a folder bar. The directory structure is: ./public/. sales /.foo and /public/. sales /.foo.bar thats exactly what I´m expect. Now I logon as normal user. I can see the namespace Public with the sales mailbox but no subfolder foo or foo.bar. Now I create also the folders foo and in there bar, but the result is to me unexpected ;-): ./public/. sales ./public/. sales.foo ./public/. sales.foo.bar Looking forward to your comment, Daniel

2 2

[Dovecot] permissions on auth-userdb
by spamvoll＠googlemail.com 28 Jun '12

28 Jun '12

Hi.. im still trying to upgrade to 2.0. Im getting: dovecot: lda: Error: userdb lookup: connect(/var/run/dovecot/auth-userdb) failed: Permission denied (euid=10000(vmail) egid=10000(vmail) missing +r perm: /var/run/dovecot/auth-userdb, euid is not dir owner) the error is correct caus its owned by root. My Questions is who should own it ? Im not sure how that works, what process/user calls the auth-userdb ? The auth-userdb returns the args generated in master.conf, right ? i think comment out the user and group setting in master.conf will fix it but im not sure if that is the securest way. the mails come from postfix via dovecot-lda Hans master.conf service auth { # auth_socket_path points to this userdb socket by default. It's typically # used by dovecot-lda, doveadm, possibly imap process, etc. Its default # permissions make it readable only by root, but you may need to relax these # permissions. Users that have access to this socket are able to get a list # of all usernames and get results of everyone's userdb lookups. unix_listener auth-userdb { mode = 0600 #user = vmail #group = vmail } auth-ldap.conf.ext passdb { driver = ldap args = /etc/dovecot/dovecot-ldap.conf.ext } userdb { driver = static args = uid=vmail gid=vmail home=/home/MAILBOXES/%u/ mail=/home/MAILBOXES/%u/mail }

5 8

[Dovecot] (no subject)
by Daminto Lie 28 Jun '12

28 Jun '12

http://ccomplaint.com/Vocational-Schools/googlesave.html?otv=vby.mig&himoj=…

1 0

[Dovecot] The deleted_to_trash Plugin (workaround Outlook 2007 behaviour)
by J E Lyon 27 Jun '12

27 Jun '12

Hi, I see this plugin exists for v1 & v2, all very interesting... Surprised no one seems to have created an RPM and it looks like deleted_to_trash is one of the very few plugins to not be shipped as part of the default install with CentOS 5.5 or CentOS 6 (i.e. Dovecot v1 & v2 respectively.) Am I missing something, or does everyone really build from source? Thanks, James.

3 2

[Dovecot] pop3-throttle
by manu＠netbsd.org 27 Jun '12

27 Jun '12

Hello I am having a hard time with users using POP while leaving mailboxes of several gigabyte cumulated. This causes a lot of disk I/O and kills performancs for everyone. I try to encourage people migrating to IMAP, but that migration will take some time, and therefore I am looking for alterantive ways to workaround the problem. I found pop3-throttle-plugin.c, which seems a smart way to solve the problem, unfortunately it comes with no documentation. I was able to build it and load it, bu itsays nothing in the logs. Is there any doc somewhere? Any advices on how to set it up? -- Emmanuel Dreyfus http://hcpnet.free.fr/pubz manu(a)netbsd.org

3 3

[Dovecot] Hardware infrastructure for email system
by Michael Wessel 27 Jun '12

27 Jun '12

Hi, I'm currently (re-)planning my email setup and have been doing some research. I have done some searches and read several threads in the areas of my questions here. While there are some that come close I haven't yet been able to get all my questions answered. I currently run a postfix, dovecot & roundcube setup and have about 2000 active accounts. I have a separate SMTP server for outbound mail and auth is done against a separate LDAP server. In front of the POP/IMAP server I have another SMTP (4 in parallel actually) server that receives and filters inbound mail through a company specific, proprietary filter before the mail hits the POP/IMAP server. LDAP & SMTP servers are ESXi VMs. So right now both dovecot and roundcube run on the same box which is a Dell PE2950 with dual quad-core Xeon, 16GB RAM and 6 1TB disks in RAID 6, so only local storage using maildir. So far it's been holding up fine, but it's beginning to show signs of overload now. I also expect an increase in users over the next few months up to somewhere between 10 - 20,000 mail boxes. Hence the re-planning. My first priority in redesigning my setup is reliability. I definitely need something fail-save and as close to always on as possible. Next is performance. And while the budget is of course limited for the moment I'm setting that aside and will worry about that when the time comes. Now here is my question(s): In order to support up to 20,000 mailboxes (distributed over several times-zones so they won't all be used at the same time) with a very reliable service with good performance, what do I actually need? Do I need(ul) SAN or is it just a "would be nice to have"? If yes, why and what would be appropriate for my needs? Or will a setup with a few more servers like the ones I already have, using something like DRBD and distributing services (imap, http, spamd etc) onto different boxes do? I know I have more reading to do on all the different options out there, but would like some input from people that have experience in this area so I can focus on the stuff that's right for my situation. Michael

10 15

[Dovecot] doveadm proxy kick in director setups
by Tom Pawlowski 27 Jun '12

27 Jun '12

Something I noticed on a 2.1.7 director test cluster (two directors, three backends): 'doveadm proxy kick user' will kick all connections for that user on that director only. Any additional connections on other directors will remain active unless the command is run on all directors. Are the proxy and director sub-commands intended to be separate and distinct in their operation? If so, then this makes sense, as a proxy isn't necessarily a director. Are there any plans for a proxy kick equivalent that would work across directors? -- Tom Pawlowski OIT-CSS System Administrator office: Hill 145 email: tompru(a)jla.rutgers.edu phone: (732) 445-2634

2 1

[Dovecot] director map and mysql
by Костырев Александр Алексеевич 27 Jun '12

27 Jun '12

hello! Is "doveadm director map" command suppose to work when I store "host" value in mysql table? It gives me nothing in output with no errors in log. I've successfully setup directors with static passdb, and decided to give a try setup with storing host value in mysql table. The proxying is actually working, I'm just unhappy with no output from "doveadm director map". on the other hand output from "doveadm director map" is not empty, when I configure my password_query not to return host from table. director's settings in dovecot.sql is: passdb { driver = sql args = /etc/dovecot/dovecot-sql.conf } userdb { driver = sql args = /etc/dovecot/dovecot-sql.conf } director_servers = 192.168.5.125 director_mail_servers = 192.168.5.110 192.168.5.111 service doveadm { inet_listener { port = 24245 } } protocol doveadm { auth_socket_path = director-userdb } doveadm_proxy_port = 24245 in /etc/dovecot/dovecot-sql.conf at director there's password_query = SELECT \ NULL AS password,\ 'Y' as nopassword, \ 'Y' AS proxy, \ MBOX_NAME as user, \ host2 as host \ from M_MAILBOX \ where MBOX_NAME = '%u' user_query = SELECT \ MBOX_NAME AS username, \ MAIL_DIRECTORY as home \ from M_MAILBOX \ where MBOX_NAME = '%u'; iterate_query = select MBOX_NAME AS username from M_MAILBOX; backend's conf: service doveadm { inet_listener { port = 24245 } }

2 3

[Dovecot] pop3c_master_user
by Martin Schitter 27 Jun '12

27 Jun '12

the configuration keyword "pop3c_master_user" mentioned in the dsync migration documentation (http://wiki2.dovecot.org/Migration/Dsync) does not work for dovecot 2.1.7. a config line like: "pop3c_master_user = cyrus" will produce this error: doveconf: Fatal: Error in configuration file /etc/dovecot/local.conf line 33: Unknown setting: pop3c_master_user it's not defined in: src/lib-storage/index/pop3c/pop3c-settings.* is this feature not enabled with intention? btw. another question: will 'doveadm backup' mirror all the IMAP ACL information? thanks martin

2 1

Re: [Dovecot] started with dovecot sieve
by Daniel Parthey 27 Jun '12

27 Jun '12

Rolf wrote: > Jun 25 20:22:54 rolf14 dovecot: lda(rolf): Error: setegid(privileged) failed: Operation not permitted Manual page "man 2 setegid" states that setegid() sets the effective group ID of the calling process. Unprivi- leged user processes may only set the effective group ID to the real group ID, the effective group ID or the saved set-group-ID. Your "postfix" user is a member of group "mail", but "mail" which you configured as "mail_privileged_group = vmail" is neither the primary group of user "postfix", nor is it the effective group id of the calling postfix process. Therefore you might get the error as documented in the manpage setegid(2): EPERM The calling process is not privileged (Linux: does not have the CAP_SETUID capability in the case of seteuid(), or the CAP_SET- GID capability in the case of setegid()) and euid (respectively, egid) is not the real user (group) ID, the effective user (group) ID, or the saved set-user-ID (saved set-group-ID). Regards Daniel -- https://plus.google.com/103021802792276734820

2 1