- dovecot - dovecot.org

[Dovecot] LDAP timeout
by Bernhard Schmidt 29 Jun '11

29 Jun '11

Hi, we recently hit an issue where one (of the three configured) LDAP servers dropped an index on an attribute due to a misconfiguration, which caused all/most queries for passdb to take a very long time (several 10s of seconds). The other servers would have been fine, but it seems like Dovecot does either not set a timelimit on the query or uses a very high one. I could not find any place to control that either. Is there any knob to tune the LDAP timeout? Bernhard

2 2

[Dovecot] Dovecot 1.2.16 -> Dovecot 2.0.13 Performance?
by Jorgen Lundman 29 Jun '11

29 Jun '11

Hello list, Currently running dovecot-1.2.16 as pop, imap, and deliver (with sieve). All on Solaris 10u9, on NFSv4 backends. All is working great. But occasionally, the system gets rather loaded, not entirely sure what part yet, but as part of researching that; If we were to start the upgrade path to dovecot 2.0.13, are there any known areas of performance increase which should encourage us to do this? Since we have a stable system, there is hesitation in changing any part of it :) Each NFS server hosts about 92,381 mailboxes, LDAP as authentication and ZFS user quotas. What sort of numbers do others manage generally? Cheers, Lund -- Jorgen Lundman | <lundman(a)lundman.net> Unix Administrator | +81 (0)3 -5456-2687 ext 1017 (work) Shibuya-ku, Tokyo | +81 (0)90-5578-8500 (cell) Japan | +81 (0)3 -3375-1767 (home)

1 0

[Dovecot] Sendmail + dovecot-lda + LDAP
by Василий Яковлев 28 Jun '11

28 Jun '11

Hi, I experince some problems with setting up Sendmail with the LDAP database for virtual mail accounts. Why i'm not writing to the LDAP mailing list? I believe, that the reason of my problem is in configuring dovecot-deliver. What i have: - FreeBSD 8.2-RELEASE - sendmail (Version 8.14.4 with LDAP support installed from ports) - Dovecot LDA + dovecot (as pop3/imap) - 1.2.16 - Cyrus Sasl (authdaemon for authentification) 1. Following http://wiki.dovecot.org/LDA/Sendmail i've set up deliver as LDA. Everything worked fine. 2. Following http://wiki.dovecot.org/HowTo/DovecotOpenLdap i've set up Dovecot to work with tha ldap. Now i can authorize through the client or web interface and get to my maildir. 3. Now, i want my sendmail to accept mail for the account in LDAP database. sendmail.mc: ++++++++++++++++++++++ FEATURE(`local_procmail', `/usr/local/libexec/dovecot/deliver',`/usr/local/libexec/dovecot/deliver -d $u') MODIFY_MAILER_FLAGS(`LOCAL', `-f') ...................................... define(`confLDAP_DEFAULT_SPEC', `-h "localhost" -b "dc=mydomain,dc=ru" -d "cn=dovecot,ou=accounts,dc=mydomain,dc=ru" -MLDAP_AUTH_SIMPLE -P /etc/mail/ldap_pass')dnl LDAPROUTE_DOMAIN(`mydomain.ru')dnl FEATURE(`ldap_routing', `null -T<TMPF>', `ldap -1 -T<TMPF> -v mail -k (&(objectclass=posixaccount)(mail=%0))', `passthru')dnl ...................................... MAILER(procmail) ++++++++++++++++++++++ After re-making the sendmail: ++++++++++++++++++++++ [root@test2 /etc/mail]# sendmail -bv -d60.1 test_user(a)mydomain.ru map_lookup(dequote, test) => NOT FOUND (0) map_lookup(host, mydomain.ru) => mydomain.ru. (0) map_lookup(dequote, test_user) => NOT FOUND (0) map_lookup(ldapmra, test_user(a)mydomain.ru) => test_user(a)mydomain.ru (0) map_lookup(ldapmh, test_user(a)mydomain.ru) => NOT FOUND (68) map_lookup(host, mydomain.ru) => mydomain.ru. (0) map_lookup(dequote, test_user) => NOT FOUND (0) map_lookup(virtuser, test_user(a)mydomain.ru) => NOT FOUND (0) map_lookup(virtuser, @mydomain.ru) => NOT FOUND (0) test_user(a)mydomain.ru... User unknown ++++++++++++++++++++++ It's the problem of the local delivery, i believe. Why? Because after sendmail getting an email it passes it to the LDA, which must check the LDAP (not the passwd!) database for the user, to which this email is send to. Are there some possibilities to solve this problem? I appreciate any help... ----------------------- Best regards, Vasily Yakovlev ----------------------------------------------------------------------

1 0

[Dovecot] hide sieve folder from imap clients
by Christopher Stolzenberg 28 Jun '11

28 Jun '11

Hello, What is the best way to hide sieve folders from IMAP clients? old config mail_home = /var/vmail/%d/%n plugin { sieve_dir = /var/vmail/%d/%n/.sieve/ sieve = /var/vmail/%d/%n/.dovecot.sieve } new config (hide sieve folder) mail_home = /var/vmail/%d/%n maildir_stat_dirs = yes plugin { sieve_dir = /var/vmail/%d/%n/sieve/ sieve = /var/vmail/%d/%n/.dovecot.sieve } Is there a better way without maildir_stat_dirs = yes ? -- Christopher

5 10

[Dovecot] ACLs: Group ACL adds empty ACL for user of same name, why?
by Jim Hague 28 Jun '11

28 Jun '11

I'm playing around with ACLs, Groups and SOGo on Debian Stable, Dovecot 1.2.15. If I set an ACL for a group 'developers': 6 setacl "INBOX.Trash" "$developers" "lrsw" 6 OK Setacl complete. The dovecot-acl file for INBOX.Trash then contains a group setting for the group, and a user setting for a user of the same name, giving it no permissions. group=developers lrws user=developers and a subsequent GETACL reports the user: 5 getacl "INBOX.Trash" * ACL "INBOX.Trash" "$developers" lrws "developers" "" "jim" lrwstipekxacd 5 OK Getacl completed. Currently SOGo does not deal well with the unexpected non-existant user. So I'm curious - why's it there? -- Jim Hague - jim.hague(a)acm.org Never trust a computer you can't lift.

2 2

[Dovecot] Hi
by Meisam Navaki 28 Jun '11

28 Jun '11

Hi all, I'm reading dovecot source codes(2.0.13),and I need to know how dovecot communicate with sasl? I traced the source code from cmd_login function,and found out something about sasl_callback. but i never found where this function called and also I couldn't understand how sasl inform the dovecot from authentication result. I'll be thankful if someone could help me out.

1 0

[Dovecot] Panic: doveadm quota get -A
by Urban Loesch 28 Jun '11

28 Jun '11

Hi, I'm new to the list and I'm using dovecot since 2 months. Still in progress to migrating from Stalker (Communigate Pro) to Dovecot. Today I upgraded from Dovecot 2.0.13-0~auto+27 (used form the Mirror xi.rename-it.nl - stable-auto) to 2:2.0.13-0~auto+48. List of installed packages: ii dovecot-common 2:2.0.13-0~auto+48 secure mail server that supports mbox, maildir, dbox and mdbox mailboxes ii dovecot-imapd 2:2.0.13-0~auto+48 secure IMAP server that supports mbox, maildir, dbox and mdbox mailboxes ii dovecot-lmtpd 2:2.0.13-0~auto+48 secure LMTP server for Dovecot ii dovecot-managesieved 2:2.0.13-0~auto+48 secure ManageSieve server for Dovecot ii dovecot-mysql 2:2.0.13-0~auto+48 MySQL support for Dovecot ii dovecot-pop3d 2:2.0.13-0~auto+48 secure POP3 server that supports mbox, maildir, dbox and mdbox mailboxes ii dovecot-sieve 2:2.0.13-0~auto+48 sieve filters support for Dovecot It seems all is working fine, except "doveadm quota get -A". It gives me the following error: # doveadm quota get -A doveadm: Panic: file doveadm-print-table.c: line 58 (doveadm_calc_header_length): assertion failed: ((value_count % hdr_count) == 0) doveadm: Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x3fd0a) [0x7fb901d0fd0a] -> /usr/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x32) [0x7fb901d0fdf2] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7fb901ce916f] -> doveadm() [0x416bed] -> doveadm(doveadm_print_flush+0x1f) [0x40f1cf] -> doveadm() [0x40a92d] -> doveadm(doveadm_mail_try_run+0x11c) [0x40acfc] -> doveadm(main+0x381) [0x410761] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7fb901581c4d] -> doveadm() [0x409e09] Aborted I also tried the versions 2.0.13-0~auto+45 - 47 from xi.rename-it.nl. Same thing. Have you any idea how i can fix this. Downgrade to a 2.0.13-0~auto+27 is not possible because i have to fix this error to: http://hg.dovecot.org/dovecot-2.0/rev/09b8701362a4 Many thanks and regards Urban Loesch

2 2

Re: [Dovecot] Default sendmail_path value
by Joseph Tam 28 Jun '11

28 Jun '11

Timo Sirainen <tss(a)iki.fi> wrote: > On Sun, 2011-06-26 at 16:43 -0700, Joseph Tam wrote: >> ... >> but the documentations states >> >> http://wiki2.dovecot.org/LDA >> >> sendmail_path is used to send mails. Note that the default is >> /usr/lib/sendmail, which doesn't necessarily work the same as >> /usr/sbin/sendmail. > > It used to be /usr/lib/sendmail, but some people complained that it's > obsolete now and /usr/sbin/sendmail should be used, so I changed it in > v2.0. > > I changed the wiki2 now. Thanks. Solaris still uses /usr/lib/sendmail which is a pain since /usr/lib is rarely in shell search paths. Nothing a few symlinks can't fix. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Maildir parent directory permissions incorrect for new mailbox
by Dominic Marks 28 Jun '11

28 Jun '11

Hi, My issue is with the automatic creation of parent directories above new maildirs. It seems to be that they're being set with incorrect (or unhelpful) permissions, applying the permissions of the mailbox down the path towards the mailbox root, as opposed to taking the permissions of the mailbox root up towards the mailbox. Our mail is stored under the scheme: location = maildir:/var/dovecot/mail/%d/%n:INDEX=/var/dovecot/index/%d/%n Initially, /var/dovecot consists of acl, index and mail, all empty. The permissions on these are: >> ls -l total 6 drwxrwxr-x 2 hmgp hmgp 512 17 Jun 12:23 acl drwxrwxr-x 3 hmgp hmgp 512 17 Jun 15:56 index drwxrwxr-x 3 hmgp hmgp 512 17 Jun 15:56 mail If I perform a mail delivery to my mailbox, the mailbox parent directory is created with the following permissions: >> ls -l total 2 drwx------ 3 dm hmgp 512 17 Jun 15:56 insidetrading.co.uk Note that the user ID is my own and the mode restricts all other access. When I perform a second delivery to different mailbox under that domain, one mapped to a different UID, the delivery fails because that user cannot access the parent folder in order to create the new maildir. I've read on the Wiki that Dovecot copies permissions from the parent directory when adding new messages to a mailbox. That would suit my situation, but it doesn't happen here. Maybe there is there a reason why this is the case? I've had a look at the code and it it works in the opposite direction, starting from the full path (with its associated mode, uid & gid) and working by removing a section from the right-hand side each time. For me, at least, it would be better if it started from the bottom and worked upwards, inheriting the parent uid, gid and mode until the mailbox directory, where the existing behaviour would be retained, looking like: >> ls -dl insidetrading.co.uk/dm total 2 drwx------ 5 dm hmgp 512 17 Jun 15:56 dm I know I could hold all our mail under a single uid/gid or I could fix the mode manually, but I'd rather not do either. Am I missing some key configuration detail or should I work on a patch for this? Thanks, Dominic >> dovecot -n # 2.0.12: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.2-RELEASE amd64 auth_debug = yes listen = * mail_debug = yes mail_plugins = acl namespace { inbox = yes location = maildir:/var/dovecot/mail/%d/%n:INDEX=/var/dovecot/index/%d/%n prefix = separator = / type = private } namespace { list = children location = maildir:/var/dovecot/mail/%%d/%%n:INDEX=/var/dovecot/index/%%d/shared/%%n prefix = shared/%%n separator = / subscriptions = no type = shared } passdb { args = /usr/local/etc/dovecot/ldap.conf driver = ldap } plugin { acl = vfile acl_shared_dict = file:/var/dovecot/acl/%d/%n-shared.db } protocols = lmtp imap service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } ssl = required ssl_ca = </usr/local/etc/ssl/cert/geotrust-all.pem ssl_cert = </usr/local/etc/ssl/cert/mail.helenmarks.co.uk.pem ssl_cipher_list = AES+HIGH ssl_key = </usr/local/etc/ssl/private/mail.helenmarks.co.uk.key userdb { args = /usr/local/etc/dovecot/ldap.conf driver = ldap } verbose_proctitle = yes protocol imap { mail_plugins = acl imap_acl }

3 4

[Dovecot] Invalid cross-device link while trying to delete folder - Dovecot 2.0.7
by Laurent CARON 28 Jun '11

28 Jun '11

Hi, I'm having the following setup. 2 datastores mounted as: /home/ and /data/mail2/ I have 2 namespaces: namespace archives-baie { prefix = INBOX.Extra-001. hidden = no list = yes inbox = no location = maildir:/data/mail2/%u/Maildir type = private } namespace { inbox = yes location = prefix = INBOX. type = private } When trying to trash some folder from the second namespace, I get the following error in the logs: imap(USER): Error: rename(/data/mail2/USER/Maildir/.Archives.20112, /home/USER/Maildir/.Trash.20112) failed: Invalid cross-device link In my config I have: maildir_copy_with_hardlinks = no Do you have a clue about this issue ? Thanks

2 1