- dovecot - dovecot.org

[Dovecot] Sharing all mailboxes and userdb LDAP attrs
by Felipe Scarel 19 Aug '11

19 Aug '11

Hello all, I'm setting up a Dovecot environment here, version 1.2.15 on Debian 6.0.2 "squeeze". This is actually a complete revamp of the previous setup we have in-place here, built from the ground up with updated versions of all involved software. The operators have told me that they use some scripts hacked up by a previous sysadmin to give a single "admin" account full access to all user mail. That is, if any user runs into problems, they: 1. Call in; 2. The operator logs in as the admin user; 3. Operator performs maintenance duties on user email. I've been researching the possibility of using Dovecot shared namespaces to perform that very same task in a better fashion in this new server. So far, I've been able to globally share users' INBOXes and view them from a single admin account (through user= entries on global acl's). My ultimate goal, however, is to have access to all user mailboxes with any user that's a member of a particular group, adding all operators to that group as needed. - - - - - First question, then, is this one: how can I give global access to all user mailboxes? I've read that it's possible to give access to all subfolders of a particular folder throught the use of a .DEFAUL acl. That didn't seem to work with the uppermost directory, however. Here's what I tried: root@mail:/etc/dovecot# dovecot -a | grep acl: acl: vfile:/etc/dovecot/acl:cache_secs=300 root@mail:/etc/dovecot# cat acl/.DEFAULT owner lrwstipekxa user=admin lrwstipekxa Renaming .DEFAULT to INBOX does achieve the intended goal, but only for the INBOX folder evidently. - - - - - Second question is somewhat simpler. So far I've been using a single admin user, but I'd like to switch to using an admin group in the future. I've read that the best way to do that would be to use the user_attrs entry in my dovecot-ldap.conf file, while using a userdb ldap. The groups should be strings separated by commas in the appropriate attribute, from what I understand. Is there any readily-available or recommended schema I can use to fill up that attribute? I'm using the default ones (plus samba.schema) but I've seen mostly space to fit GID's, not group names. Thanks in advance, fbscarel PS: Here's my dovecot -a output, should it be needed. - - - - - root@mailaluno:~# dovecot -a # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.2 base_dir: /var/run/dovecot log_path: /var/log/dovecot/error.log info_log_path: /var/log/dovecot/info.log log_timestamp: %Y-%m-%d %H:%M:%S syslog_facility: mail protocols: imap pop3 pop3s managesieve listen(default): * listen(imap): * listen(pop3): * listen(managesieve): localhost:2000 ssl_listen: 127.0.0.1 ssl: yes ssl_ca_file: ssl_cert_file: /etc/ssl/certs/dovecot.pem ssl_key_file: /etc/ssl/private/dovecot.pem ssl_key_password: ssl_parameters_regenerate: 168 ssl_cipher_list: ssl_cert_username_field: commonName ssl_verify_client_cert: no disable_plaintext_auth: no verbose_ssl: yes shutdown_clients: yes nfs_check: yes version_ignore: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login login_user: dovecot login_greeting: Server ready. login_log_format_elements: user=<%u> method=%m rip=%r lip=%l %c login_log_format: %$: %s login_process_per_connection: no login_chroot: yes login_trusted_networks: login_process_size: 64 login_processes_count: 5 login_max_processes_count: 128 login_max_connections: 256 valid_chroot_dirs: mail_chroot: max_mail_processes: 512 mail_max_userip_connections: 10 verbose_proctitle: no first_valid_uid: 108 last_valid_uid: 0 first_valid_gid: 112 last_valid_gid: 0 mail_access_groups: mail_privileged_group: mail mail_uid: mail_gid: mail_location: mail_cache_fields: mail_never_cache_fields: imap.envelope mail_cache_min_mail_count: 0 mailbox_idle_check_interval: 30 mail_debug: yes mail_full_filesystem_access: no mail_max_keyword_length: 50 mail_save_crlf: no mmap_disable: no dotlock_use_excl: yes fsync_disable: no mail_nfs_storage: no mail_nfs_index: no mailbox_list_index_disable: yes lock_method: fcntl maildir_stat_dirs: no maildir_copy_with_hardlinks: yes maildir_copy_preserve_filename: no maildir_very_dirty_syncs: no mbox_read_locks: fcntl mbox_write_locks: fcntl dotlock mbox_lock_timeout: 300 mbox_dotlock_change_timeout: 120 mbox_min_index_size: 0 mbox_dirty_syncs: yes mbox_very_dirty_syncs: no mbox_lazy_writes: yes dbox_rotate_size: 2048 dbox_rotate_min_size: 16 dbox_rotate_days: 1 mail_drop_priv_before_exec: no mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_process_size: 256 mail_plugins(default): quota imap_quota trash mail_log acl imap_acl mail_plugins(imap): quota imap_quota trash mail_log acl imap_acl mail_plugins(pop3): quota mail_log mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve mail_log_prefix: %Us(%u): mail_log_max_lines_per_sec: 0 imap_max_line_length: 65536 imap_capability: imap_client_workarounds: imap_logout_format: bytes=%i/%o imap_id_send: imap_id_log: imap_idle_notify_interval: 120 pop3_no_flag_updates: no pop3_enable_last: no pop3_reuse_xuidl: no pop3_save_uidl: no pop3_lock_session: no pop3_uidl_format: %08Xu%08Xv pop3_client_workarounds: pop3_logout_format: top=%t/%p, retr=%r/%b, del=%d/%m, size=%s dict_db_config: dict_process_count: 1 managesieve_max_line_length: 65536 managesieve_logout_format: bytes=%i/%o managesieve_implementation_string: dovecot namespace: type: private separator: / prefix: location: maildir:/vmail/%Ln/Maildir alias_for: inbox: yes hidden: no list: yes subscriptions: yes namespace: type: shared separator: / prefix: shared/%%n/ location: maildir:/vmail/%%n/Maildir:INDEX=/vmail/%n/Maildir/shared/%%n alias_for: inbox: no hidden: no list: yes subscriptions: no lda: postmaster_address: xxx@xxx mail_plugins: quota sieve trash acl auth default: mechanisms: plain login realms: default_realm: cache_size: 0 cache_ttl: 3600 cache_negative_ttl: 3600 executable: /usr/lib/dovecot/dovecot-auth user: vmail chroot: username_chars: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ username_translation: username_format: %Lu master_user_separator: * anonymous_username: anonymous krb5_keytab: gssapi_hostname: winbind_helper_path: /usr/bin/ntlm_auth failure_delay: 2 verbose: no debug: no debug_passwords: no ssl_require_client_cert: no ssl_username_from_cert: no use_winbind: no count: 1 worker_max_count: 30 process_size: 256 passdb: driver: passwd-file args: /etc/dovecot/passwd.masterusers deny: no pass: no master: yes passdb: driver: shadow args: deny: no pass: no master: no passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf deny: no pass: no master: no userdb: driver: passwd args: userdb: driver: static args: uid=vmail gid=vmail home=/vmail/%Ln allow_all_users=yes socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail plugin: quota: maildir:User quota quota_rule: *:storage=1G quota_rule2: Trash:storage=100M acl: vfile:/etc/dovecot/acl:cache_secs=300 acl_shared_dict: file:/vmail/shared_mboxes trash: /etc/dovecot/dovecot-trash.conf mail_log_events: delete mailbox_delete mail_log_fields: uid box msgid size sieve: ~/.dovecot.sieve sieve_dir: ~/sieve sieve_before: /vmail/default.sieve

2 2

[Dovecot] segfault in dovecot 2.0.9
by Morten P.D. Stevens 18 Aug '11

18 Aug '11

Hi folks, I noticed the following in the dovecot log files: /var/log/maillog Jun 9 00:12:34 mail dovecot: master: Error: service(imap): child 8970 killed with signal 11 (core dumps disabled) Jun 9 00:12:34 mail dovecot: imap-login: Login: user=<username>, method=PLAIN, rip=IP, lip=IP, mpid=8987, TLS Jun 9 00:12:34 mail dovecot: master: Error: service(imap): child 8987 killed with signal 11 (core dumps disabled) /var/log/messages Jun 9 00:12:34 mail kernel: imap[8970]: segfault at 0 ip 00007fe4b2fe432d sp 00007fff29383740 error 4 in libdovecot-storage.so.0.0.0[7fe4b2fb8000+d1000] Jun 9 00:12:34 mail kernel: imap[8987]: segfault at 0 ip 00007f949de1532d sp 00007fff120721b0 error 4 in libdovecot-storage.so.0.0.0[7f949dde9000+d1000] # dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.29.1.el6.x86_64 OS: Scientific Linux 6.0 (Red Hat Enterprise Linux 6.0) Filesystem: ext4 I think this is a bug. Any ideas? Best regards, Morten

3 2

[Dovecot] mdbox and doveadm purge
by Morten P.D. Stevens 18 Aug '11

18 Aug '11

Hi, We are currently testing Dovecot 2.0.13 with mdbox. If I delete large objects with refcount=0 the index is not updated apparently. Here's an example: [root@mail-004 storage]# ls -l total 194776 -rw------- 1 vmail vmail 482960 Jul 9 14:58 dovecot.map.index -rw------- 1 vmail vmail 4584 Jul 9 16:06 dovecot.map.index.log -rw------- 1 vmail vmail 32856 Jul 9 14:50 dovecot.map.index.log.2 [root@mail-004 mdbox]# du storage/ 194788 storage/ [root@mail-004 mdbox]# doveadm dump /var/vmail/example.org/user/mdbox/storage/ | grep 'ref.*\b0\b' - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) [root@mail-004 mdbox]# doveadm purge -A [root@mail-004 mdbox]# du storage/ 142072 storage/ [root@mail-004 mdbox]# doveadm dump /var/vmail/example.org/user/mdbox/storage/ | grep 'ref.*\b0\b' - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) [root@mail-004 mdbox]# cd storage/ [root@mail-004 storage]# ls -l total 142060 -rw------- 1 vmail vmail 482960 Jul 9 14:58 dovecot.map.index -rw------- 1 vmail vmail 4584 Jul 9 16:06 dovecot.map.index.log -rw------- 1 vmail vmail 32856 Jul 9 14:50 dovecot.map.index.log.2 [root@mail-004 mdbox]# doveadm purge -A [root@mail-004 mdbox]# cd storage/ [root@mail-004 storage]# ls -l total 142060 -rw------- 1 vmail vmail 482960 Jul 9 14:58 dovecot.map.index -rw------- 1 vmail vmail 4936 Jul 9 16:12 dovecot.map.index.log -rw------- 1 vmail vmail 32856 Jul 9 14:50 dovecot.map.index.log.2 [root@mail-004 storage]# doveadm dump /var/vmail/example.org/user/mdbox/storage/ | grep 'ref.*\b0\b' [root@mail-004 storage]# The index is updated only after the second run of doveadm purge -A ? Best regards, Morten

3 2

[Dovecot] dovecot with pam - ldap
by Daniel Aschauer 18 Aug '11

18 Aug '11

I am running dovecot v1.2.10 on a FreeBSD server and I am facing problems authenticating using pam. I always get the error message, although I do provide the right password: pam_authenticate() failed: authentication error (password mismatch?) I use /etc/pam.d/imap: # # PAM configuration for the "imap" service # # auth auth sufficient /usr/local/lib/pam_ldap.so no_warn try_first_pass auth required pam_unix.so no_warn try_first_pass # account account required pam_unix.so and my config: srvfbsd01# dovecot -n # 1.2.10: /usr/local/etc/dovecot.conf # OS: FreeBSD 8.0-RELEASE-p2 amd64 protocols: imap ssl: no disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login verbose_proctitle: yes first_valid_uid: 1000 first_valid_gid: 0 mail_location: maildir:~/Maildir namespace: type: private separator: . inbox: yes list: yes subscriptions: yes namespace: type: public separator: . prefix: Public. location: maildir:/home/vmail/public list: yes auth default: debug: yes passdb: driver: pam args: failure_show_msg=yes cache_key=%u imap passdb: driver: passwd-file args: /usr/local/etc/dovecot/vmail userdb: driver: passwd userdb: driver: passwd-file args: /usr/local/etc/dovecot/vmail Logging: Aug 18 12:48:10 srvfbsd01 dovecot: auth(default): passwd-file /usr/local/etc/dovecot/vmail: Read 6 users Aug 18 12:48:10 srvfbsd01 dovecot: auth-worker(default): passwd-file /usr/local/etc/dovecot/vmail: Read 6 users Aug 18 12:48:11 srvfbsd01 dovecot: auth(default): new auth connection: pid=3690 Aug 18 12:48:11 srvfbsd01 dovecot: auth(default): new auth connection: pid=3688 Aug 18 12:48:11 srvfbsd01 dovecot: auth(default): new auth connection: pid=3689 Aug 18 12:48:14 srvfbsd01 dovecot: auth(default): client in: AUTH 1 PLAIN service=imap lip=10.0.10.150 rip=10.0.10.71 lport=143 rport=3583 Aug 18 12:48:14 srvfbsd01 dovecot: auth(default): client out: CONT 1 Aug 18 12:48:14 srvfbsd01 dovecot: auth(default): client in: CONT<hidden> Aug 18 12:48:14 srvfbsd01 dovecot: auth-worker(default): pam(daniel,10.0.10.71): lookup service=imap Aug 18 12:48:14 srvfbsd01 dovecot: auth-worker(default): pam(daniel,10.0.10.71): #1/1 style=1 msg=Password: Aug 18 12:48:14 srvfbsd01 dovecot: auth-worker(default): pam(daniel,10.0.10.71): pam_authenticate() failed: authentication error (password mismatch?) Aug 18 12:48:14 srvfbsd01 dovecot: auth(default): passwd-file(daniel,10.0.10.71): lookup: user=daniel file=/usr/local/etc/dovecot/vmail Aug 18 12:48:14 srvfbsd01 dovecot: auth(default): passwd-file(daniel,10.0.10.71): unknown user Aug 18 12:48:14 srvfbsd01 dovecot: auth(default): new auth connection: pid=3691 Aug 18 12:48:16 srvfbsd01 dovecot: auth(default): client out: FAIL 1 user=daniel Aug 18 12:48:21 srvfbsd01 dovecot: auth(default): client in: AUTH 2 PLAIN service=imap lip=10.0.10.150 rip=10.0.10.71 lport=143 rport=3583 resp=<hidden> Aug 18 12:48:21 srvfbsd01 dovecot: auth-worker(default): pam(daniel,10.0.10.71): lookup service=imap Aug 18 12:48:21 srvfbsd01 dovecot: auth-worker(default): pam(daniel,10.0.10.71): #1/1 style=1 msg=Password: Aug 18 12:48:21 srvfbsd01 dovecot: auth-worker(default): pam(daniel,10.0.10.71): pam_authenticate() failed: authentication error (password mismatch?) Aug 18 12:48:21 srvfbsd01 dovecot: auth(default): passwd-file(daniel,10.0.10.71): lookup: user=daniel file=/usr/local/etc/dovecot/vmail Aug 18 12:48:21 srvfbsd01 dovecot: auth(default): passwd-file(daniel,10.0.10.71): unknown user Aug 18 12:48:23 srvfbsd01 dovecot: auth(default): client out: FAIL 2 user=daniel

1 0

[Dovecot] sender for Sieve vacation message
by Florian Effenberger 18 Aug '11

18 Aug '11

Hello, is it possible to define the sender for the Dovecot Sieve implementation's vacation extension? It seems to be impossible to add, e.g., a name, or choose a different sender address. Thanks, Florian

2 3

[Dovecot] Dovecot-Antispam 2.0 with SpamAssassin (sa-learn)
by Nick Rosier 18 Aug '11

18 Aug '11

Hi, has anyone figured out how to use the dovecot-antispam plugin with sa-learn? I need to pass the username (user(a)domain.tld) to sa-learn and --ham or --spam depending on the move. I was thinking of using the CRM14 option and replace the command and arguments but cannot find anything about the ability to pass the username. Any pointers would be welcome. N.

3 4

[Dovecot] May Dovecot help in users education
by Alexandre Chapellon 18 Aug '11

18 Aug '11

Hello, I was wondering if dovecot could help me in my project to smoothly make all my users switch to TLS encrypted POP / IMAP sessions and forget about cleartext. My first idea was to setup dovecot as a POP/IMAP proxy for my mailhosts and ask dovecot to display a warning message or slowdown non TLS sessions. Is there any way to achieve this with dovecot? Does anybody have another idea smoothly force used to switch to TLS? Regards. -- <http://www.horoa.net>

4 6

[Dovecot] invalid credential using openldap
by Daminto Lie 17 Aug '11

17 Aug '11

Hi, What I have been trying to achieve is to be able to authenticate users through openLDAP while using Postfix, Dovecot as IMAP server and squirrelmail. I keep getting the following error messages when trying to login to squirrelmail 2011-08-17 12:27:59 auth(default): Info: client in: AUTH 1 PLAIN service=imap secured lip=127.0.0.1 rip=127.0.0.1 lport=143 rport=57794 resp=AGFkbWluAGFwbXg2c3Bu 2011-08-17 12:27:59 auth(default): Info: ldap(myuser,127.0.0.1): invalid credentials (given password: xxx) 2011-08-17 12:28:00 auth(default): Info: new auth connection: pid=1921 2011-08-17 12:28:01 auth(default): Info: client out: FAIL 1 user=myuser 2011-08-17 12:28:06 imap-login: Info: Aborted login (auth failed, 1 attempts): user=<myuser>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured This seems to be trivial but I just could not figure out what else went wrong. I wonder if anyone might be able to give me a bit of help as I'm still learning my way around under linux system environment. The following is what I have in /etc/dovecot/dovecot-slapd.conf hosts = localhost dn = cn=myadmin,dc=mycompany,dc=com dnpass = secrets auth_bind = yes auth_bind_userdn = cn=%u,ou=people,dc=mycompany,dc=com ldap_version = 3 base = ou=people, dc=pbj, dc=com, dc=au scope = subtree user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid user_filter = (&(objectClass=posixAccount)(uid=%u)) pass_attrs = uid=user,userPassword=password pass_filter = (&(objectClass=posixAccount)(uid=%u)) Thank you in advance

1 0

[Dovecot] Dovecot-2.0.14?
by David Favor 17 Aug '11

17 Aug '11

ETA on 2.0.14? -- Love feeling your best ever, all day, every day? Click http://RadicalHealth.com for the easy way!

2 1

[Dovecot] maildirsize not always present
by Jean-Max Reymond 17 Aug '11

17 Aug '11

hi, I have a dovecot 1.2.9 and all is runnig fine except for quotas. Some accounts have a maildirsize file in the mail directory. If I delete the file, it is automatically rebuild: OK But other accounts does not have the maildirsize file even after access from dovecot server. All is OK for theses accounts except quota service. what's wrong ? -- Jean-Max Reymond Éruption de l'Etna: http://jmreymond.free.fr/Etna2002

3 7