- dovecot - dovecot.org

[Dovecot] Multiple versions of Dovecot installed
by Phill Edwards 26 Mar '11

26 Mar '11

I have had to rebuild my 64-bit CentOS 5 email server and after installing dovecot rpms (using yum) I seem to have multiple versions installed: dovecot-1.1.20-1_98.el5 - from ATrpms repo dovecot-1.0.7-7.el5 - from CentOS repo dovecot-sieve-0.1.18-6.1.el5 - from ATrpms repo I have tried to install just the ATrpms version but when I do "yum install dovecot" the CentOS one always gets pulled in as well. Is this normal, or does it indicate that something has gone wrong in the installation process? I'm having an issue with Dovecot sieve because it can't find a sieve plugin in /usr/lib64/dovecot/lda/. However, there is one in /usr/lib/dovecot/lda/. Do I have some sort or 32-bit/64-bit mismatch?

2 1

[Dovecot] Ignored proxy_maybe var and no local login when "host = Proxy FQDN"
by Olaf Reitmaier Veracierta 26 Mar '11

26 Mar '11

Hi help is preciated, PROBLEM The dovecot-ldap.conf of "proxy server A" is working when the "host" attribute is the FQDN of other server: pass_attrs = uid=user,userPassword={SSHA}password,\ =proxy_maybe=,maildrop=host,=port=143,=destuser=%u,=starttls=any-cert pass_filter = (&(objectClass=posixAccount)(uid=%u)) CASES When the "host" attribute is the "FQDN of server A" dovecot imap-login start and infinite loop which swallow all RAM, and process are showing many connections although is just 1 test user connected. It seems that connections are infinitely proxified to it self. When the "host" attribute is the "IP of server A" dovecot imap-login works OK, login the user locally in the server A. I include debug message int the source of "dovecot-2.0.11/src/auth/auth-request.c" which appears: Mar 25 14:10:49 debian dovecot: auth: Debug: ldap(steran,172.26.98.85): result: uid(user)=steran maildrop(host)=smtp2.tsj-dem.gob.ve Mar 25 14:10:49 debian dovecot: auth: Debug: BROKEN SETUP The modifications appears here and reveals problems with the call to net_addr2ip(host, &ip) in auth_request_proxy_is_self: static bool auth_request_proxy_is_self(struct auth_request *request) { const char *const *tmp, *host = NULL, *port = NULL, *destuser = NULL; struct ip_addr ip; tmp = auth_stream_split(request->extra_fields); for (; *tmp != NULL; tmp++) { if (strncmp(*tmp, "host=", 5) == 0) host = *tmp + 5; else if (strncmp(*tmp, "port=", 5) == 0) port = *tmp + 5; if (strncmp(*tmp, "destuser=", 9) == 0) destuser = *tmp + 9; } if (host == NULL || net_addr2ip(host, &ip) < 0) { /* broken setup */ T_BEGIN { i_debug("BROKEN SETUP %s", host); } T_END; return FALSE; } if (!net_ip_compare(&ip, &request->local_ip)){ T_BEGIN { i_debug("%s", "IPS NOT EQUAL"); }T_END; return FALSE; } if (port != NULL && !str_uint_equals(port, request->local_port)){ T_BEGIN { i_debug("%s", "PORTS DIFFERENT"); } T_END; return FALSE; } return destuser == NULL || strcmp(destuser, request->original_username) == 0; } -- "You don't know where your shadow will fall", Somebody.- ---------------------------------------------------------------- Olaf Reitmaier Veracierta <olafrv(a)gmail.com> ---------------------------------------------------------------- http://www.olafrv.com ----------------------------------------------------------------

2 2

[Dovecot] try to compile dovecot 2.0.11 with ssl support
by easy 26 Mar '11

26 Mar '11

Hello, I try to compile dovecot in Version 2.0.11 with ssl support on a CentOS 4.5 system. Installed packages are openssl and openssl-devel. after "./configure --with-ssl=openssl" "make" "make install"the message is: (also tried with CPPFLAGS="-I/opt/openssl/include" LDFLAGS="-L/opt/openssl/lib -ldl") Install prefix . : /usr/local File offsets ... : 64bit I/O polling .... : epoll I/O notifys .... : dnotify SSL ............ : yes (OpenSSL) GSSAPI ......... : no passdbs ........ : static passwd passwd-file shadow checkpassword : -pam -bsdauth -sia -ldap -sql -vpopmail userdbs ........ : static prefetch passwd passwd-file checkpassword nss : -ldap -sql -vpopmail SQL drivers .... : : -pgsql -mysql -sqlite so it looks like SSL support is included, but when I start dovecot the message is: # 2.0.11: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-128.1.1.el5.028stab062.3ent i686 CentOS release 4.5 (Final) passdb { driver = pam } protocols = imap ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } doveconf: Error: SSL support not compiled in but ssl=yes doveconf: Fatal: Error in configuration file /usr/local/etc/dovecot/dovecot.conf: SSL support not compiled in but ssl=yes I also tried to use the source files of openssl and compile openssl by myself, but the error is the same. thanks Regards Markus

2 1

[Dovecot] mdbox, quota, ns, maildir quota?
by Brandon Lamb 26 Mar '11

26 Mar '11

Hello, I pasted my config below, hoping someone can point out something obvious. In my dovecot.log I am seeing: Warning: quota: Namespace '' is not Maildir, skipping for Maildir++ quota I am using mysql userdb_* and passing maildir:~/maildir or mdbox:~/mdbox for mail. When its maildir its fine, I had that originally then used dsync to convert to mdbox, updated mysql entry to point to mdbox:~/mdbox and now I keept getting those quota errors. It IS possible to have mixed environment still correct? Some users can be maildir and some can be mdbox since Im using the per-user userdb options? Any hints here? I would swear this was all working on a different server I had setup but Im no longer employed there so I cant peek at the config =P Thanks for any help or tips Brandon ------------------------------------------------------------------------------- root@mail1:~# dovecot -n # 2.0.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.37-2-amd64 x86_64 Debian wheezy/sid auth_cache_negative_ttl = 30 secs auth_cache_size = 4 k auth_cache_ttl = 30 secs auth_default_realm = greencrane.com auth_mechanisms = plain login auth_username_format = %Lu auth_verbose = yes auth_worker_max_count = 60 base_dir = /var/run/dovecot debug_log_path = /var/log/dovecot/debug.log default_client_limit = 1024 default_internal_user = mail default_login_user = mail deliver_log_format = %s from %f %$ dict/expire = mysql:/etc/dovecot/conf.d/dovecot-dict-expire.conf.ext disable_plaintext_auth = no first_valid_gid = 8 first_valid_uid = 8 info_log_path = /var/log/dovecot/info.log last_valid_gid = 8 last_valid_uid = 8 log_path = /var/log/dovecot/dovecot.log log_timestamp = "%Y-%m-%d %H:%M:%S " login_log_format = %s login_log_format_elements = (%u) (%r) mail_access_groups = mail mail_fsync = never mail_gid = 8 mail_location = maildir:~/maildir mail_log_prefix = "%Ls <%u>: " mail_max_userip_connections = 4 mail_plugins = quota expire mail_privileged_group = mail mail_uid = 8 mailbox_idle_check_interval = 1 mins maildir_very_dirty_syncs = yes passdb { args = /etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } plugin/auth_socket_path = /var/run/dovecot/auth-master plugin/autocreate = Trash plugin/autocreate2 = Sent plugin/autocreate3 = Drafts plugin/autocreate4 = Spam plugin/autosubscribe = Trash plugin/autosubscribe2 = Sent plugin/autosubscribe3 = Drafts plugin/autosubscribe4 = Spam plugin/quota = maildir:User quota plugin/quota_warning = storage=95%% quota-warning 95 %u plugin/quota_warning2 = storage=80%% quota-warning 80 %u protocols = imap pop3 service auth { executable = /usr/local/libexec/dovecot/auth unix_listener auth-client { group = mail mode = 0666 user = mail } unix_listener auth-master { group = mail mode = 0666 user = mail } unix_listener auth-userdb { group = mail mode = 0666 user = mail } vsz_limit = 512 M } service dict { unix_listener dict { group = mail mode = 0666 } } service imap-login { chroot = login client_limit = 512 executable = /usr/local/libexec/dovecot/imap-login process_limit = 20 process_min_avail = 4 service_count = 0 user = dovecot vsz_limit = 128 M } service imap { drop_priv_before_exec = no executable = /usr/local/libexec/dovecot/imap vsz_limit = 512 M } service pop3-login { chroot = login client_limit = 512 executable = /usr/local/libexec/dovecot/pop3-login process_limit = 20 process_min_avail = 4 service_count = 0 user = dovecot vsz_limit = 128 M } service pop3 { drop_priv_before_exec = no executable = /usr/local/libexec/dovecot/pop3 vsz_limit = 512 M } service quota-warning { executable = script /etc/dovecot/quota-warning.sh user = mail } ssl_cert = </etc/dovecot/ssl/dovecot-cert.pem ssl_key = </etc/dovecot/ssl/dovecot-key.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } valid_chroot_dirs = /mail verbose_proctitle = yes protocol lda { auth_socket_path = /var/run/dovecot/auth-userdb info_log_path = /var/log/dovecot/deliver.log lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes log_path = /var/log/dovecot/deliver.log mail_fsync = optimized mail_plugin_dir = /usr/local/lib/dovecot mail_plugins = quota expire trash autocreate postmaster_address = postmaster(a)greencrane.com quota_full_tempfail = yes rejection_reason = Your message to <%t> with subject of <%s> was automatically rejected:%n%r rejection_subject = Mailbox Full: %s sendmail_path = /usr/sbin/exim } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep imap_id_log = * imap_logout_format = bytes=%i/%o imap_max_line_length = 64 k mail_max_userip_connections = 20 mail_plugin_dir = /usr/local/lib/dovecot mail_plugins = quota expire imap_quota autocreate trash } protocol pop3 { mail_max_userip_connections = 2 mail_plugin_dir = /usr/local/lib/dovecot mail_plugins = quota expire pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_enable_last = no pop3_lock_session = no pop3_logout_format = retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = yes pop3_reuse_xuidl = no pop3_save_uidl = yes pop3_uidl_format = %g }

2 1

[Dovecot] Restrict clients access during mailboxes convertion ?
by Frank Bonnet 26 Mar '11

26 Mar '11

Hello Is there a way to restrict access to Dovecot server during mailboxes convertion ? I need dovecot to be running to convert mailboxes from a format to another, but I would like to block all our LAN clients until the end of convertion. If there is no internal Dovecot mechanism I will use some firewall rule on the server. Thanks

2 2

[Dovecot] quota warning email to user
by upen 25 Mar '11

25 Mar '11

Hi, I am trying to use Quota in dovecot-2.0.11. I find as a sender(same user a receiver) I receive an email that receiver's Quota is exceeded , and receiver's mailbox is full . This is good, however the receiver whose MB is full isn't getting any quota-warning. Configuration is as below, dovecot -n # 2.0.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.35-gentoo-r8 x86_64 Gentoo Base System release 1.12.14 ext4 auth_mechanisms = plain login listen = * mail_location = maildir:/nfs1/mail/%u mail_plugins = " quota" passdb { args = * driver = pam } plugin/quota = maildir:User quota plugin/quota_rule = *:storage=5M plugin/quota_rule2 = Trash:storage=+1M plugin/quota_rule3 = Junk:storage=+1M plugin/quota_warning = storage=95%% quota-warning 95 %u plugin/quota_warning2 = storage=80%% quota-warning 80 %u service quota-warning { executable = script /usr/local/bin/quota-warning.sh user = dovecot } ssl_cert = </etc/postfix/ssl/smtpd.pem ssl_cipher_list = ALL:!LOW:!SSLv2 ssl_key = </etc/postfix/ssl/smtpd.pem userdb { driver = passwd } protocol imap { mail_plugins = " quota imap_quota" Mar 24 15:41:28 email_serverdovecot: imap(local_username): Error: quota: net_connect_unix(/var/run/dovecot/quota-warning) failed: Permission denied (euid=1002(local_username) egid=10(wheel) missing +r perm: /var/run/dovecot/quota-warning, euid is not dir owner) Mar 24 15:41:28 email_serverdovecot: lda(local_username): msgid=<20110324154128.0df8855a(a)local_username_ots.domainname>: save failed to INBOX: Quota exceeded (mailbox for user is full) Mar 24 15:41:28 email_serverdovecot: lda(local_username): msgid=<20110324154128.0df8855a(a)local_username_ots.domainname>: rejected: Quota exceeded (mailbox for user is full) Mar 24 15:41:28 email_serverpostfix/pickup[25550]: D25C121BB4: uid=1002 from=<> ls -al /var/run/dovecot/ total 20 drwxr-xr-x 4 root root 4096 Mar 24 15:35 . drwxr-xr-x 33 root root 4096 Mar 24 14:54 .. srw------- 1 root root 0 Mar 24 15:35 anvil srw------- 1 root root 0 Mar 24 15:35 anvil-auth-penalty srw------- 1 root root 0 Mar 24 15:35 auth-client srw------- 1 dovecot root 0 Mar 24 15:35 auth-login srw------- 1 root root 0 Mar 24 15:35 auth-master srw------- 1 root root 0 Mar 24 15:35 auth-userdb srw------- 1 dovecot root 0 Mar 24 15:35 auth-worker srw------- 1 root root 0 Mar 24 15:35 config srw------- 1 root root 0 Mar 24 15:35 dict srw------- 1 root root 0 Mar 24 15:35 director-admin srw------- 1 root root 0 Mar 24 15:35 director-userdb srw-rw-rw- 1 root root 0 Mar 24 15:35 dns-client srw------- 1 root root 0 Mar 24 15:35 doveadm-server lrwxrwxrwx 1 root root 25 Mar 24 15:35 dovecot.conf -> /etc/dovecot/dovecot.conf drwxr-xr-x 2 root root 4096 Mar 16 13:24 empty srw-rw-rw- 1 root root 0 Mar 24 15:35 lmtp drwxr-x--- 2 root dovenull 4096 Mar 24 15:35 login -rw------- 1 root root 6 Mar 24 15:35 master.pid srw------- 1 root root 0 Mar 24 15:35 quota-warning ls -al /usr/local/bin/quota-warning.sh -rwxrwxrwx 1 root root 225 Mar 24 13:16 /usr/local/bin/quota-warning.sh cat /usr/local/bin/quota-warning.sh #!/bin/sh PERCENT=$1 USER=$2 cat << EOF | /usr/libexec/dovecot/dovecot-lda -d $USER -o "plugin/quota=maildir:User quota:noenforcing" From: postmaster(a)domain.com Subject: quota warning Your mailbox is now $PERCENT% full. EOF ### Any help is appreciated. Thanks.

1 1

[Dovecot] lda_mailbox_autocreate and lda_mailbox_autosubscribe
by Frank Bonnet 25 Mar '11

25 Mar '11

Hello I use real unix users on the mailhub and I would like to automate home directories creation for new users. I found lda_mailbox_autocreate and lda_mailbox_autosubscribe statements in 15-lda.conf file ( dovecot 2.0.11 ) which seem to be the right things for me :-) I use Postfix 2.8.1 with Dovecot LDA mailbox_command = /usr/local/libexec/dovecot/dovecot-lda All Mailboxes are located in /user/$USER/mail/ Does those two statements means that if a home directory does not exists it will be created at the first login of the new user ? I mean if new user "toto" has no homedir at all , dovecot will create /user/toto/mail at the very first successful connection ? Thanks a lot

3 3

[Dovecot] Issue with Dovecot v2.0 auto packages
by Stephan Bosch 25 Mar '11

25 Mar '11

Hi, Yesterday night I upgraded the automated packages built at Xi to the latest experimental Debian packages for v2.0. This unfortunately causes a problem upon upgrade. I've contacted the maintainer, so this issue should resolve itself soon. The issue manifests as follows: Setting up dovecot-imapd (2:2.0.11-0~auto+25) ... ucfr: Attempt from package dovecot-imapd to take /etc/dovecot/conf.d/20-imap.conf away from package dovecot-common ucfr: Aborting. dpkg: error processing dovecot-imapd (--configure): subprocess installed post-installation script returned error exit status 4 configured to not write apport reports The Debian maintainer split dovecot-common in various new packages and moved config files in the process. Use ucfr --purge --force dovoecot-imapd /etc/dovecot/conf.d/20-imap.conf ucfr --purge --force dovoecot-managesieved /etc/dovecot/conf.d/20-managesieve.conf ucfr --purge --force dovoecot-sieve /etc/dovecot/conf.d/90-sieve.conf to get rid of these errors as a workaround. I did this in combination with temporarily purging and removing Dovecot, but that is probably not necessary. Once you have upgraded, you will not encounter this problem again. And yes, if you are using Sieve, be sure to install the new dovecot-sieve and dovecot-managesieved packages. Regards, Stephan.

2 2

[Dovecot] try to compile dovecot 2.0.11 with ssl support
by easy 24 Mar '11

24 Mar '11

Hello, I try to compile dovecot in Version 2.0.11 with ssl support on a CentOS 4.5 system. Installed packages are openssl and openssl-devel. after "./configure --with-ssl=openssl" "make" "make install"the message is: (also tried with CPPFLAGS="-I/opt/openssl/include" LDFLAGS="-L/opt/openssl/lib -ldl") Install prefix . : /usr/local File offsets ... : 64bit I/O polling .... : epoll I/O notifys .... : dnotify SSL ............ : yes (OpenSSL) GSSAPI ......... : no passdbs ........ : static passwd passwd-file shadow checkpassword : -pam -bsdauth -sia -ldap -sql -vpopmail userdbs ........ : static prefetch passwd passwd-file checkpassword nss : -ldap -sql -vpopmail SQL drivers .... : : -pgsql -mysql -sqlite so it looks like SSL support is included, but when I start dovecot the message is: # 2.0.11: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-128.1.1.el5.028stab062.3ent i686 CentOS release 4.5 (Final) passdb { driver = pam } protocols = imap ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } doveconf: Error: SSL support not compiled in but ssl=yes doveconf: Fatal: Error in configuration file /usr/local/etc/dovecot/dovecot.conf: SSL support not compiled in but ssl=yes I also tried to use the source files of openssl and compile openssl by myself, but the error is the same. thanks Regards Markus

1 0

[Dovecot] Dotlock dovecot-uidlist errors / NFS / High Load
by list＠airstreamcomm.net 24 Mar '11

24 Mar '11

As of late our four node dovecot 1.2.13 cluster has been experiencing a massive number of these dotlock errors: Created dotlock file's timestamp is different than current time (1295480202 vs 1295479784): /mail/user/Maildir/dovecot-uidlist These dotlock errors correspond with very high load averages, and eventually we have to turn off all but one server to stop them from occurring. We first assumed this trend was related to the NFS storage, but we could not find a networking issue or NFS related problem to speak of. We run the mail storage on NFS which is hosted on a Centos 5.5 host, and mounted with the following options: udp,nodev,noexec,nosuid. Secondly we thought the issues were due to NTP as the time stamps vary so widely, so we rebuilt our NTP servers and found closer stratum 1 source clocks to synchronize to hoping it would alleviate the problem but the dotlock errors returned after about 12 hours. We have fcntl locking set in our configuration file, but it is our understanding from look at the source code that this file is locked with dotlock. Any help troubleshooting is appreciated. Thanks, Michael # 1.2.13: /etc/dovecot.conf # OS: Linux 2.6.18-194.8.1.el5 x86_64 CentOS release 5.5 (Final) protocols: imap pop3 listen(default): *:143 listen(imap): *:143 listen(pop3): *:110 shutdown_clients: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_process_per_connection: no login_process_size: 128 login_processes_count: 4 login_max_processes_count: 256 login_max_connections: 386 first_valid_uid: 300 mail_location: maildir:~/Maildir mmap_disable: yes dotlock_use_excl: no mail_nfs_storage: yes mail_nfs_index: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 auth default: username_format: %Ln worker_max_count: 50 passdb: driver: pam userdb: driver: passwd

5 14