- dovecot - dovecot.org

[Dovecot] Authentication process holding open filehandles
by George Barnett 06 May '12

06 May '12

Hi, We're using dovecot to provide pop3 for a number of mailboxes. The setup is pretty simple: Each user / domain has a mailstore in /data/mailstore/<domain>/<user>/Maildir (backed by NFS). Passwords are in simple passwd-file format in the top level domain directory eg: # cat /data/mailstore/foo.com/.passwd user:{plain}password The passdb setup looks like this. passdb { args = username_format=%n /data/mailstore/%d/.passwd driver = passwd-file } The problem we're having is that when we want to remove a domain from the system and we go to rm -rf /data/mailstore/<domain>/ we are unable to because the auth process is still holding onto the file handles for the password file. Can somebody suggest an alternative pattern that I could use for storing password files? Ideally, we'd avoid one large file to prevent locking issues and would also keep the passwd-file setup since it's simple. It would be possible to have the password files in a separate dir, but over time I'm guessing that would lead to nfs turds? Easy to clean up I suppose, but maybe there's a simpler solution I'm missing? George

2 1

[Dovecot] smtp -auth with using clear text password
by Agnello George 06 May '12

06 May '12

Hi I am setting up a mailserver .. where clients need to authenticate to the mail server . The mta i am using is postfix . It is possible to use a file like this : ---------------------------------- cat /etc/postfix/dovecote_passwd agnello:123456 --------------------------------- where user is agnello and password is 123456 If you can please send me some reference links thanks a ton -- Regards Agnello D'souza

5 9

Re: [Dovecot] IMAP STARTTLS Problem
by Patrick Ben Koetter 06 May '12

06 May '12

* markus(a)opsys.de <markus(a)opsys.de>: > Am 05.05.2012 22:44, schrieb Patrick Ben Koetter: > >* Markus Fritz <markus.fritz(a)opsys.de>: > >>Am 05.05.2012 21:06, schrieb Markus Fritz: > >Assuming your server cert is located in > >/etc/ssl/certs/ca-certificates.crt try > >this on your server: > > > >openssl s_client -starttls imap -CAfile > >/etc/ssl/certs/ca-certificates.crt -connect localhost:143 > > > >Use "2 logout" to get out of the session. > > > >If it works, try the same from your client host. > > > >Does it work both times? > > yes: > > Verify return code: 0 (ok) > --- > . OK Capability completed. > > it works. But I cannot login with Thunderbird. I imported the cert > in Thunderbird, too. IIRC it is not enough to import the cert. You also need to set a policy i.e. allow the cert to be used for e-mail. p@rick -- state of mind () http://www.state-of-mind.de Franziskanerstraße 15 Telefon +49 89 3090 4664 81669 München Telefax +49 89 3090 4666 Amtsgericht München Partnerschaftsregister PR 563

1 0

[Dovecot] HG 3d8a25a4394d Patch breaks UserDB Lookups
by Thomas Leuxner 06 May '12

06 May '12

Patch http://hg.dovecot.org/dovecot-2.1/rev/3d8a25a4394d breaks auth May 5 09:01:52 spectre dovecot: lmtp(24442): Connect from local May 5 09:01:52 spectre dovecot: lmtp(24442): Error: userdb lookup(tlx(a)leuxner.net): Disconnected unexpectedly May 5 09:01:52 spectre dovecot: auth: Fatal: master: service(auth): child 24443 killed with signal 11 (core not dumped) May 5 09:01:52 spectre dovecot: lmtp(24442): Disconnect from local: Client quit (in reset) Regards Thomas

2 2

[Dovecot] IMAP STARTTLS Problem
by Markus Fritz 05 May '12

05 May '12

Hello, I have this problem: May 5 21:02:35 opsys dovecot: imap-login: Disconnected (no auth attempts): rip=84.150.52.31, lip=78.46.216.126 Connecting via Thunderbird to STARTTLS won't work, but with a website from the same server it works for tls://opsys.de. So why is the port closed for external ip's? IPTABLES entry for imap is this: fail2ban-dovecot-pop3imap tcp -- anywhere anywhere multiport dports pop3,pop3s,imap2,imaps Key files are correct TLS is working from localhost. System is Debian squeeze -- Markus Fritz Administration opsys.de

3 4

[Dovecot] Corrupted mdbox file
by Daniel L. Miller 05 May '12

05 May '12

With an error like this: doveadm(dmiller(a)amfes.com): Error: Corrupted dbox file /var/mail/amfes.com/dmiller/mdbox/storage/m.20 (around offset=74408): Unexpected EOF while reading metadata header What can be done? -- Daniel

2 1

[Dovecot] Dovecot/doveadm crash
by Daniel L. Miller 05 May '12

05 May '12

Having a problem with a mailbox. I've been trying to rebuild - but doveadm force-resync crashes. This is mdbox with sis. doveadm purge -u dmiller(a)amfes.com doveadm(dmiller(a)amfes.com): Panic: file istream.c: line 466 (i_stream_grow_buffer): assertion failed: (stream->max_buffer_size > 0) doveadm(dmiller(a)amfes.com): Error: Raw backtrace: /usr/local/lib/dovecot/libdovecot.so.0(+0x4167a) [0x7fb73465467a] -> /usr/local/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x32) [0x7fb734654762] -> /usr/local/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fb73462c2a0] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x4949b) [0x7fb73465c49b] -> /usr/local/lib/dovecot/libdovecot.so.0(i_stream_get_buffer_space+0x82) [0x7fb73465c522] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x4b1c8) [0x7fb73465e1c8] -> /usr/local/lib/dovecot/libdovecot.so.0(i_stream_read+0x69) [0x7fb73465bb69] -> /usr/local/lib/dovecot/libdovecot.so.0(i_stream_read_next_line+0x1d) [0x7fb73465c04d] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(mdbox_purge+0x921) [0x7fb7348d7d71] -> doveadm() [0x40e1e6] -> doveadm() [0x40e018] -> doveadm() [0x40ea83] -> doveadm(doveadm_mail_try_run+0x141) [0x40eef1] -> doveadm(main+0x3c1) [0x415911] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xff) [0x7fb73429deff] -> doveadm() [0x40de39] -- Daniel

2 2

[Dovecot] per user sieve after filters
by Andre Rodier 05 May '12

05 May '12

Hello, Thanks for dovecot, as it's still the best mail server. I'd like to use per users sieve_after scripts. Can I put in my dovecot config file, something like that: sieve_after = %h/Mails/Sieve/After/ It would be very useful for me, as I'd like to add vacation script to be executed from this place. Kind regards, André.

2 3

[Dovecot] Shared INBOX change in v2.1.6?
by Timo Sirainen 04 May '12

04 May '12

Previously Dovecot has shown shared INBOX like: * LIST (\HasChildren) "/" "shared/tss2" * LIST (\HasNoChildren) "/" "shared/tss2/INBOX" * LIST (\HasNoChildren) "/" "shared/tss2/foo" The last change in hg makes it return simply (same as with Cyrus): * LIST (\HasChildren) "/" "shared/tss2" * LIST (\HasNoChildren) "/" "shared/tss2/foo" This behavior could be made optional, but does anyone actually want it to work the old way (and why)? I'd rather not add an option that isn't useful to anyone. I think older Dovecot versions have allowed opening both shared/tss2 and shared/tss2/INBOX, but at least in v2.1 that code was broken. With the last change it's still possible to open both of them, the shared/tss2/INBOX just isn't visible in LIST output.

4 4

[Dovecot] dovecot sasl with postfix: SASL LOGIN authentication failed: Connection lost to authentication server
by David Jonas 04 May '12

04 May '12

When using dovecot (2.1.5) sasl with postfix (2.8.4) behind nginx smtp proxy I am seeing a ton of errors of the form: postfix/smtpd[7731]: warning: unknown[192.168.0.6]: SASL LOGIN authentication failed: Connection lost to authentication server Nothing is printed by dovecot in the logs regarding the error. It seems that dovecot just hung up on postfix. (side note: no, can't use xclient in nginx/postfix. But perhaps soon.) After much digging I thought I solved it with: login_trusted_networks = 172.20.20.0/24 mail_max_userip_connections = 0 This seems safe enough because dovecot is only providing sasl to postfix, no connections to the outside world. But the error is still happening. # doveadm penalty IP penalty last_penalty last_update 172.20.20.61 1 2012-04-30 19:15:56 19:15:56 strace on the anvil process shows a lot of GETs and INCs: 18:54:06 read(14, "PENALTY-GET\t172.20.20.61\n", 397) = 25 <0.000016> 18:54:06 write(14, "1 1335837245\n", 13) = 13 <0.000029> A two minute survey showed penalty distribution: 0: 60% 1: 15% 2: 18% 3: 8% Finally I just disabled penalties with the info from http://www.dovecot.org/list/dovecot/2011-December/062631.html and that seemed to do it. Is there a better way? This took me a long time to run down so I tried to make this message detailed enough that others with similar problems will stumble upon it.

2 1