- dovecot - dovecot.org

[Dovecot] authentication problems with pam_mkhomedir
by Defenestrate 14 Jul '11

14 Jul '11

Hi! I'm struggling with pam_mkhomedir. Accounts are stored in LDAP (CentOS Directory Server AKA 389 Directory Server). I am not pre-creating user home directories, and would like to use the pam_mkhomedir module to create the directories on the fly, when a user is authenticated via pop3s. pam_mkhomedir is working for interactive (e.g. SSH logins), but I don't want to require users to login interactively just so their home directory is created. Dovecot version: 1.0.7 dovecot -n output: protocols: pop3s >ssl_cert_file: /etc/pki/tls/certs/mail.ourdomain.tld.pem >ssl_key_file: /etc/pki/tls/private/mail.ourdomain.tld.pem >login_dir: /var/run/dovecot/login >login_executable: /usr/libexec/dovecot/pop3-login >mail_privileged_group: mail >mail_location: mbox:~/mail:INBOX=/var/spool/mail/%u >mail_executable: /usr/libexec/dovecot/pop3 >mail_plugin_dir: /usr/lib64/dovecot/pop3 >pop3_client_workarounds: oe-ns-eoh, outlook-no-nuls >auth default: > verbose: yes > debug: yes > passdb: > driver: pam > args: session=yes dovecot > userdb: > driver: ldap > args: /etc/dovecot-ldap.conf /etc/pam.d/dovecot: authsufficientpam_ldap.so >authrequiredpam_deny.so > > >accountsufficientpam_ldap.so >accountrequiredpam_deny.so > > >passwordsufficientpam_ldap.so use_authtok >password requiredpam_deny.so > > >sessionoptionalpam_ldap.so >sessionrequiredpam_mkhomedir.so skel=/etc/skel umask=0022 > >With the pam_mkhomedir.so line, I see the following in maillog: Jul 14 16:14:26 mail dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 secured lip=xxx.xxx.xxx.xxx rip=xxx.xxx.xxx.xxx resp=<hidden> Jul 14 16:14:26 mail dovecot: auth(default): client out: CONT 1 Jul 14 16:14:26 mail dovecot: auth(default): client in: CONT<hidden> Jul 14 16:14:26 mail dovecot: auth(default): pam(joe.schmoe,xxx.xxx.xxx.xxx): lookup service=dovecot Jul 14 16:14:26 mail dovecot: auth(default): new auth connection: pid=25209 Jul 14 16:14:26 mail dovecot: auth(default): pam(joe.schmoe,xxx.xxx.xxx.xxx): pam_open_session() failed: Permission denied Jul 14 16:14:28 mail dovecot: auth(default): client out: FAIL 1 user=joe.schmoe Jul 14 16:14:28 mail dovecot: auth(default): client in: AUTH 2 PLAIN service=POP3 secured lip=xxx.xxx.xxx.xxx rip=xxx.xxx.xxx.xxx resp=<hidden> With the pam_mkhomedir.so line commented out: Jul 14 16:15:27 mail dovecot: auth(default): client out: CONT 1 Jul 14 16:15:27 mail dovecot: auth(default): client in: CONT<hidden> Jul 14 16:15:27 mail dovecot: auth(default): pam(joe.schmoe,xxx.xxx.xxx.xxx): lookup service=dovecot Jul 14 16:15:27 mail dovecot: auth(default): client out: OK 1 user=joe.schmoe Jul 14 16:15:27 mail dovecot: auth(default): master in: REQUEST 1 25286 1 Jul 14 16:15:27 mail dovecot: auth(default): ldap(joe.schmoe,xxx.xxx.xxx.xxx): user search: base=ou=People, dc=ourdomain, dc=tld scope=subtree filter=(&(objectClass=posixAccount)(uid=joe.schmoe)) fields=homeDirectory,uidNumber,gidNumber Jul 14 16:15:27 mail dovecot: auth(default): master out: USER 1 joe.schmoe home=/home/joe.schmoe uid=1057 gid=1000 Jul 14 16:15:27 mail dovecot: POP3(joe.schmoe): mkdir_parents(/home/joe.schmoe/mail) failed: Permission denied Jul 14 16:15:27 mail dovecot: POP3(joe.schmoe): Failed to create storage with data: mbox:/home/joe.schmoe/mail:INBOX=/var/spool/mail/joe.schmoe Jul 14 16:15:27 mail dovecot: child 25292 (pop3) returned error 89 Jul 14 16:15:27 mail dovecot: pop3-login: Login: user=<joe.schmoe>, method=PLAIN, rip=xxx.xxx.xxx.xxx, lip=xxx.xxx.xxx.xxx, TLS Jul 14 16:19:05 mail dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 secured lip=xxx.xxx.xxx.xxx rip=xxx.xxx.xxx.xxx resp=<hidden> Any Suggestions? Thank you!

1 0

[Dovecot] Process parameters tuning
by Angel L. Mateo 14 Jul '11

14 Jul '11

Hi, I'm having problems with director and lmtp for delivering messages to my dovecot farm. Also I have a warning like this: doveconf: Warning: service auth { client_limit=4096 } is lower than required under max. load (5048) doveconf: Warning: service anvil { client_limit=1000 } is lower than required under max. load (2003) So I'm trying to tune processes parameters, but I haven't found a complete description of these parameters. All I've found are examples. Questions are about client_limit, service_count, process_limit and process_min_avail. I think that process_limit and process_min_avail are the maximum of running processes for a service and the minimuf of idle process, respectively. But I don't completely understand what exactly are client_limit and service_count, Service_count means how many times a process is reused. If you configure it as 1 means that every time a process ends its connections, it dies. If you configure as 0, when the connections ends, then the process remains idle waiting for new connections. Isn't it? But what does client_limit means? The number of clients that a process can handle? Then number that can handle concurrently? Can a process handle more than one client concurrently? The documentation at http://wiki2.dovecot.org/LoginProcess simply says: * Otherwise new processes are created only once an existing one's connection count reaches client_limit * Default client_limit * process_limit = 1000*100 = 100k connections Does this mean that a process handle a maximun of client_limit connections concurrently? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información _o) y las Comunicaciones Aplicadas (ATICA) / \\ http://www.um.es/atica _(___V Tfo: 868887590 Fax: 868888337

1 0

[Dovecot] IMAP access based on username & IP
by Andrei Dumitrescu 14 Jul '11

14 Jul '11

Hello, I have all the users and passwords in separate files like in the configuration below. I want that a specific user (ex: joe(a)domain.con) to be able to read mails using imaps only from a specific IP. All the other users should be able to read email from any IP. How can I do that? Thank you Imap version: #dovecot --version 1.2.12 dovecot.conf: # 1.2.12: /etc/dovecot/dovecot.conf # OS: Linux 2.6.35-28-server x86_64 Ubuntu 10.10 ext4 base_dir: /var/run/dovecot/ log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot.info ssl_cert_file: /etc/ssl/certs/dovecot1.crt ssl_key_file: /etc/ssl/private/dovecot1.key ssl_cipher_list: ALL:!LOW:!SSLv2 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login login_greeting: IMAP ready. login_processes_count: 7 login_max_processes_count: 84 verbose_proctitle: yes first_valid_uid: 1000 first_valid_gid: 1000 mail_privileged_group: mail mail_location: maildir:/var/spool/vmail/%d/%n fsync_disable: yes mbox_write_locks: fcntl dotlock imap_client_workarounds: delay-newmail netscape-eoh tb-extra-mailbox-sep lda: postmaster_address: postmaster(a)example.com sendmail_path: /usr/sbin/sendmail auth default: mechanisms: plain login user: mail username_format: %Lu passdb: driver: pam args: session=yes dovecot passdb: driver: passwd-file args: /etc/dovecot/dovecot_passwd userdb: driver: passwd args: blocking=yes userdb: driver: passwd-file args: /etc/dovecot/dovecot_users socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384

2 1

[Dovecot] Director lmtp timeout errors
by Angel L. Mateo 13 Jul '11

13 Jul '11

Hello, I have configured two dovecot servers with director acting as lmtp/imap/pop proxy server with 8 dovecot backend servers. In our test environment we had no problem, but when we migrated to production environment, our mail list server (it delivers mail through lmtp) is having a lot of errors like this: 451 4.4.0 Remote server not answering (DATA output timeout) (in reply to end of DATA command)) I have found this same issue in some posts to this list, but I can't find any solution Any idea? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información _o) y las Comunicaciones Aplicadas (ATICA) / \\ http://www.um.es/atica _(___V Tfo: 868887590 Fax: 868888337

1 0

[Dovecot] Dovecot 2.0.13 and removing IMAP folders in thunderbird
by Christian Roessner 13 Jul '11

13 Jul '11

Hi, I use Dovecot-2.0.13 with mdbox and Thunderbird (IMAP). I have dozens of imap folders and sometimes I wish to delete several folders: First Problem: If I remove a folder under TB, it get moved to my Trash folder. After that I close TB, which also purges the trash. When I come back, the deleted folder and its content is still there. There is no way to remove it with TB. On the server side I see that the folder is listed under mailboxes/Trash and in the subscriptions file, a last line shows that Trash/foldername is subscribed. If I remove that line and the mailboxes-folder, then TB is happy again. Second problem: If I have two folders a and b, both containing a folder example: a/example b/example I only can delete one folder. By deleting the second one, the IMAP server tells me that there already exists on folder named example. I am not sure, if this is thunderbird or dovecot related, but both problems are really annoying. Am I missing some configuration? Thunderbird is Ubuntu's packaged version 3.1.10. Thanks for any ideas and help in advance and don't get me wrong: I really love dovecot ;-) Best wishes Christian -- Roessner-Network-Solutions Bachelor of Science Informatik 50°34.725'N, 08°40.904'O, Nahrungsberg 81, 35390 Giessen F: +49 641 5879091, M: +49 176 93118939 USt-IdNr.: DE225643613 http://www.roessner-network-solutions.com

3 5

[Dovecot] How to turn off "plus" delivery
by gene 13 Jul '11

13 Jul '11

I use a lot of plus-style addresses (me+stuff(a)example.com) except I use underscore as the separator rather than plus (me_stuff(a)example.com) My mail logs are full of messages where dovecot looks for a mailbox named "stuff", fails, then delivers to my inbox. Is there a way to turn that off so that dovecot automatically delivers to my inbox? Thanks! Here are the details: > dovecot --version 1.2.15 > dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.38-8-server x86_64 Ubuntu 11.04 info_log_path: /dev/null log_timestamp: %Y-%m-%d %H:%M:%S ssl_cert_file: /etc/ssl/server.crt ssl_key_file: /etc/ssl/server.key ssl_cipher_list: ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mail_location: maildir:~/Maildir mbox_write_locks: fcntl dotlock imap_client_workarounds: outlook-idle delay-newmail lda: postmaster_address: postmaster(a)xxxxxxxxx.com postmaster_address: postmaster(a)xxxxxxxxx.com mail_plugins: sieve quota_full_tempfail: yes deliver_log_format: msgid=%m: %$ rejection_reason: Your message to <%t> was automatically rejected:%n%r postmaster_address: postmaster(a)xxxxxxxxx.com mail_plugins: sieve quota_full_tempfail: yes deliver_log_format: msgid=%m: %$ rejection_reason: Your message to <%t> was automatically rejected:%n%r auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/dovecot-auth mode: 432 user: postfix group: postfix plugin: sieve: ~/.dovecot.sieve sieve_dir: ~/sieve sieve: ~/.dovecot.sieve sieve_dir: ~/sieve > cat ~/.dovecot.sieve require ["regex","fileinto"]; if header :regex ["X-Bogosity"] ["^ *Spam,"] { fileinto "caughtspam"; stop; } # excerpt from mail.log: postfix/pipe[32255]: BE4FCE24069: to=<gene_att(a)xxxxxxxxxx.com>, relay=bogo_filter, delay=1.2, delays=0.13/0.01/0/1.1, dsn=2.0.0, status=sent (delivered via bogo_filter service) postfix/qmgr[28916]: BE4FCE24069: removed postfix/cleanup[32254]: DBA1EE2406E: message-id=<1310331364610.sdc.29057010.18396.155116668(a)connect2.wireless.att-mail.com> postfix/qmgr[28916]: DBA1EE2406E: from=<sdc.29057010.18396.155116668(a)connect2.wireless.att-mail.com>, size=7859, nrcpt=1 (queue active) dovecot: deliver(gene): sieve: msgid=<1310331364610.sdc.29057010.18396.155116668(a)connect2.wireless.att-mail.com>: failed to store into mailbox 'att': Mailbox doesn't exist: att dovecot: deliver(gene): sieve: script /home/gene/.dovecot.sieve failed with unsuccessful implicit keep dovecot: deliver(gene): msgid=<1310331364610.sdc.29057010.18396.155116668(a)connect2.wireless.att-mail.com>: save failed to att: Mailbox doesn't exist: att dovecot: deliver(gene): msgid=<1310331364610.sdc.29057010.18396.155116668(a)connect2.wireless.att-mail.com>: saved mail to INBOX postfix/local[32261]: DBA1EE2406E: to=<gene_att(a)xxxxxxxxxx.com>, relay=local, delay=0.05, delays=0.01/0.01/0/0.03, dsn=2.0.0, status=sent (delivered to command: /usr/lib/dovecot/deliver -c /etc/dovecot/conf.d/01-dovecot-postfix.conf -n -m "${EXTENSION}") postfix/qmgr[28916]: DBA1EE2406E: removed

2 1

[Dovecot] missing +r perm:
by Max Dunlap 12 Jul '11

12 Jul '11

This is probably a really simple issue but I am not sure how to tackle it. sudo dovecot -n: http://pastie.org/2179100 The error message in mail.log: http://pastie.org/2179032 Dovecot.conf says: mail_privileged_group: mail I thought of added the user dovecot to the group mail in hopes of solving the permissions problem, but it didn't seem to make a difference. Any ideas?

5 15

[Dovecot] need help with metadata plugin
by Helga Mayer 12 Jul '11

12 Jul '11

Hello, I've downloaded the metadata plugin from http://hg.intevation.org/kolab/dovecot-metadata-plugin compiled it without errors, made the entries as described in README in dovecot.conf. Only ANNOTATEMORE or anything else additional doesn't show up in the capabilties. Is there anything wrong with my configuration? What I see is: telnet localhost 143 Trying 127.0.0.1... Connected to localhost.localdomain (127.0.0.1). Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready. a001 login myaccount secret a001 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS ACL RIGHTS=texk] Logged in Output of dovecot -n: # 1.2.12: /etc/dovecot.conf # OS: Linux 2.6.18-238.9.1.el5 x86_64 Scientific Linux SL release 5.5 (Boron) listen(default): 192.168.0.104:143 127.0.0.1:143 listen(imap): 192.168.0.104:143 127.0.0.1:143 listen(pop3): *:110 ssl_listen(default): <testserver address>:993 ssl_listen(imap): <testserver address>:993 ssl_listen(pop3): <testserver address>:995 ssl_cert_file: /etc/ssl/certs/imapd.pem ssl_key_file: /etc/ssl/certs/imapd.pem disable_plaintext_auth(default): no disable_plaintext_auth(imap): no disable_plaintext_auth(pop3): yes login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_max_processes_count: 2048 max_mail_processes: 2048 first_valid_uid: 200 mail_drop_priv_before_exec(default): yes mail_drop_priv_before_exec(imap): yes mail_drop_priv_before_exec(pop3): no mail_executable(default): /etc/mail/bin/acl-groups mail_executable(imap): /etc/mail/bin/acl-groups mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_process_size: 1024 mail_plugins(default): acl imap_acl lazy_expunge mail_plugins(imap): acl imap_acl lazy_expunge mail_plugins(pop3): lazy_expunge mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 mail_log_max_lines_per_sec: 0 namespace: type: private separator: / location: maildir:/maildir/%1n/%u:LAYOUT=fs inbox: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: .EXPUNGED/ location: maildir:/maildir/expunged/%1n/%u:LAYOUT=fs hidden: yes list: no subscriptions: yes namespace: type: shared separator: / prefix: Shared/%%u/ location: maildir:/maildir/%%1n/%%u:LAYOUT=fs list: children namespace: type: public separator: / prefix: Groups/ location: maildir:/maildir/public:LAYOUT=fs list: children lda: postmaster_address: postmaster@<our.domain> mail_plugins: acl auth default: mechanisms: plain login verbose: yes debug: yes passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/spool/postfix/private/auth-master mode: 384 user: postfix group: postfix plugin: acl: vfile acl_shared_dict: proxy::acl_dict lazy_expunge: .EXPUNGED/ metadata_dict: proxy:/var/run/dovecot/dict-server:metadata dict: acl_dict: mysql:/etc/dovecot-dict-sql.conf metadata: sqlite:/etc/metadata-dict.conf /var/run/dovecot total 8 srw------- 1 root root 0 Jul 8 11:04 auth-worker.27644 srwxrwxrwx 1 root root 0 Jul 8 11:04 dict-server lrwxrwxrwx 1 root root 17 Jul 8 11:04 dovecot.conf -> /etc/dovecot.conf drwxr-x--- 2 root amavis 4096 Jul 8 11:04 login -rw------- 1 root root 6 Jul 8 11:04 master.pid Kind Regards Helga Mayer Helga Mayer Universität Hohenheim Kommunikations-, Informations- und Medienzentrum (630) IT-Dienste | Mail Schloss-Westhof-Süd | 70599 Stuttgart Tel.: +49 711 459-22838 | Fax: +49 711 459-23449 https://kim.uni-hohenheim.de *************************************************************************** A: Because we read from top to bottom, left to right. Q: Why should i start my reply below the quoted text?

1 1

Re: [Dovecot] POP3 vs. IMAP Load/Memory usage in Dovecot 1.0.15
by David Ledger 12 Jul '11

12 Jul '11

At 01:59 -0500 12/7/11, Stan Hoeppner wrote: >On 7/12/2011 1:12 AM, Rainer Frey wrote: >> >> On 11.07.2011, at 17:03, Stan Hoeppner wrote: >> >>> The R410 is a two socket Xeon box with max 2 x 6 core CPUs. The 24 CPUs >>> you see is the result of HyperThreading being enabled. I'd disable HT >>> if I were you, or those boxen mine. >> >> Why? > >It's a troubleshooting step. HT can cause weird problems with some >systems/kernels. It can also decrease performance with some workloads. > As with anything, if it doesn't provide benefit, turn if off to reduce >complexity and potential problems. Or, another way, HT only helps when having twice as many (apparent) processors running at half the (effective) speed is good for your specific workload. Just because it's a band-waggon it doesn't mean you have to jump onto it. David -- David Ledger - Freelance Unix Sysadmin in the UK. HP-UX specialist of hpUG technical user group (www.hpug.org.uk) david.ledger(a)ivdcs.co.uk www.ivdcs.co.uk

1 0

[Dovecot] Many "Error: Corrupted index cache file /XXX/dovecot.index.cache: invalid record size"
by Florent Bautista 11 Jul '11

11 Jul '11

Hi all, I just joigned this list, so I'm sorry if this problem has already been reported. I'm running Dovecot 2.0.13 on many servers, one for POP/IMAP access, others for LDA, others for authentification only, etc. All servers are accessing a shared file system, based on MooseFS (www.moosefs.org) The FS is mounted using FUSE. All my Dovecot servers have this configuration : mail_fsync = always mail_nfs_index = yes mail_nfs_storage = yes mmap_disable = yes (as adviced for NFS installation). But I'm still getting errors like this in POP/IMAP logs : Error: Corrupted index cache file /my_moosefs_fs/domain/user/indexes/.INBOX/dovecot.index.cache: invalid record size Sometimes my Dovecot LDA repairs these files, but then it happens again... All my servers are running Debian 6 over KVM virtualization. Have you ever encountered this ? Do you think this is a Dovecot problem or MooseFS problem ? Thank you a lot for your answers. -- Florent Bautista ------------------------------------------------------------------------ Ce message et ses éventuelles pièces jointes sont personnels, confidentiels et à l'usage exclusif de leur destinataire. Si vous n'êtes pas la personne à laquelle ce message est destiné, veuillez noter que vous avez reçu ce courriel par erreur et qu'il vous est strictement interdit d'utiliser, de diffuser, de transférer, d'imprimer ou de copier ce message. This e-mail and any attachments hereto are strictly personal, confidential and intended solely for the addressee. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this message is strictly prohibited. ------------------------------------------------------------------------

1 2