- dovecot - dovecot.org

[Dovecot] best fine tune for 2.0.9
by fakessh ＠ 08 Feb '11

08 Feb '11

Hi Timo and the other directors of the following pigeonhole dovecot sieve I wonder what are the strengths and weaknesses of my config, and what do I need to change to stick more to a best configuration r13151 ~]# /usr/sbin/dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32.2-xxxx-grs-ipv6-32 i686 CentOS release 5.5 (Final) auth_mechanisms = plain login base_dir = /var/run/dovecot/ imap_capability = +IDLE listen = [::] log_path = /var/log/maillog log_timestamp = %Y-%m-%d %H:%M:%S login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c mail_location = maildir:~/Maildir mail_max_userip_connections = 20 managesieve_notify_capability = mailto managesieve_sieve_capability = comparator-i;octet comparator-i;ascii-casemap fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date spamtest spamtestplus virustest namespace { inbox = yes location = prefix = separator = . } passdb { driver = pam } plugin { plugin = autocreate managesieve sieve sieve = ~/.dovecot.sieve sieve_before = /var/sieve-scripts/roundcube.sieve sieve_dir = ~/sieve sieve_global_path = whatever } protocols = sieve imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { mode = 0666 } vsz_limit = 64 M } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { address = * , [::] port = 993 } process_limit = 128 vsz_limit = 64 M } service imap { client_limit = 5 service_count = 0 } service managesieve-login { inet_listener managesieve-login { address = * port = 2000 } process_limit = 128 vsz_limit = 64 M } service pop3-login { inet_listener pop3 { port = 0 } inet_listener pop3s { address = * , [::] port = 995 } process_limit = 128 vsz_limit = 64 M } ssl_ca = </etc/pki/tls/certs/root.crt ssl_cert = </etc/pki/tls/certs/r13151.ovh.net.crt ssl_key = </etc/pki/tls/private/r13151.ovh.net.key ssl_verify_client_cert = yes userdb { driver = passwd } version_ignore = yes protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep imap_max_line_length = 64 k mail_plugins = autocreate } protocol pop3 { mail_plugins = autocreate pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s } protocol lda { hostname = r13151.ovh.net mail_plugins = autocreate sieve postmaster_address = postmaster(a)fakessh.eu sendmail_path = /usr/lib/sendmail } protocol sieve { managesieve_implementation_string = dovecot managesieve_logout_format = bytes ( in=%i : out=%o ) managesieve_max_line_length = 65536 } -- gpg --keyserver pgp.mit.edu --recv-key 092164A7 http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x092164A7

2 2

[Dovecot] dovecot: imap-login: Error: net_connect_unix(imap) failed: Resource temporarily unavailable
by Kurt Hockenbury 08 Feb '11

08 Feb '11

We recently switched over mail servers to one running dovecot and postfix on RedHat Enterprise 6. The mail store is NFS on a NetApp filer, the index files are on local disk. We have about 6000 total active users, though not all of them access the system at the same time. All goes well for a while, then we start seeing errors like this in the log: dovecot: imap-login: Error: net_connect_unix(imap) failed: Resource temporarily unavailable imap-login: Internal login failure (auth failed, 1 attempts) And at this point, users can't log in. I don't know what Resource dovecot is running out of. The machine is a 12-core Xeon 2.27Ghz, with 24GB RAM. I have removed the 1024 nproc limit in /etc/security/limits.d/90-nproc.conf, and upped the nproc and nofile limits to 16384 and 65535 respectively, both in limits.conf, as well as adding ulimit statements in /etc/init.d/dovecot (belt and suspenders). I have tried adjusting dovecot.conf, but I'm obviously missing something. dovecot -n follows: # 2.0.beta6 (3156315704ef): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.14.1.el6.x86_64 x86_64 Red Hat Enterprise Linux Server release 6.0 (Santiago) auth_master_user_separator = * auth_mechanisms = plain login default_client_limit = 5000 default_process_limit = 5000 disable_plaintext_auth = no mail_fsync = always mail_gid = 501 mail_location = maildir:~/Maildir:INDEX=/var/indexes/%n mail_nfs_storage = yes mail_plugins = quota mail_uid = 501 passdb { args = /etc/dovecot/passwd.masterusers driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { quota = maildir:User quota quota_rule = *:storage=200M } service auth { client_limit = 32768 unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service imap-login { process_min_avail = 12 service_count = 0 } service pop3-login { service_count = 0 } shutdown_clients = no ssl_cert = </etc/pki/postfix/certs/nexus.pem ssl_key = </etc/pki/postfix/private/nexus_key.pem userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } protocol imap { mail_plugins = $mail_plugins imap_quota } Thanks, -Kurt Hockenbury

5 17

[Dovecot] Outlook 2010 IMAP disconnected
by Luigi Rosa 08 Feb '11

08 Feb '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 A customer moved from a previous version of Outlook to 2010. When he forces the synchronization of the IMAP folders he gets this error: Disconnected for inactivity. Protocollo: IMAP Server: mail.xxxxxxxxxxxxxxxxxxx Porta: 143 Codice errore: 0x800CCCDD Dovecot simply logs this: Feb 3 09:20:34 server dovecot: imap(xxxx): Disconnected: Logged out bytes=2488/534485 Feb 3 09:20:34 server dovecot: imap(xxxx): Disconnected: Logged out bytes=63/815 Where can I search to solve this issue? Ciao, luigi - -- / +--[Luigi Rosa]-- \ I'd be a vegetarian if bacon grew on trees. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk1KZj8ACgkQ3kWu7Tfl6ZQtHwCfTZPpFC5iHvL1+5EuxKAFlqWD DjcAn3rYU0Uwc13arHirb/5G3NuYcWX/ =LkGi -----END PGP SIGNATURE-----

5 9

[Dovecot] vpopmail passdb deadlock if tcprules binary is missing
by Teodor Milkov 07 Feb '11

07 Feb '11

Hello, I've just found that if vpopmail is compiled with --enable-roaming-users=y, but tcprules binary is missing there is kind of denial of service situation, which is not very obvious for debugging. I know this is result of misconfiguration and I suppose this is more of a vpopmail() bug, but it is somewhat hard to debug and causes greater harm to dovecot long running auth process than vpopmail's short living vchkpw process. Symptoms -------- Login to dovecot imap takes very long time. There are auth processes in D state: USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 9873 0.0 0.0 2884 1396 ? D 14:04 0:00 dovecot/auth -w root 11292 0.0 0.0 2884 1396 ? S 14:25 0:00 \_ dovecot/auth -w Cause ----- When new user has to be authenticated from vpopmail, the sequence of events goes something like this: * libexec/dovecot/auth -w process is doing the authentication (passdb-vpopmail.c) * passdb-vpopmail.c: at some point user is authenticated and open_smtp_relay() is called * vpopmail.c: open_smtp_relay() gets a write lock on ~vpopmail/etc/open-smtp.lock adds new IP to ~vpopmail/etc/open-smtp and calls update_rules() etc. to rebuild the tcp.cdb file * vpopmailc: tcprules_open() is called and it fork()s and tries to execv() tcprules * if tcprules is not found, execv() fails silently, and we are left with a forked libexec/dovecot/auth instance, which runs all over again up to the open_smtp_relay() point where it tries to obtain write lock on ~vpopmail/etc/open-smtp.lock again (it is already locked by parent) Hope this helps someone.

1 0

[Dovecot] maildrop and multi-dbox
by Manfred Lotz 07 Feb '11

07 Feb '11

Hi there, I'm using Dovecot 2.0.9-1 under Arch Linux. Currently, I have Maildir configured, and I move all my emails into dovecot by using this sequence: 1) cron starts fetchmail periodically under user manfred to collect my mails from various email accounts. 2) In ~/.fetchmailrc I have configured /usr/bin/maildrop as MDA. 3) In ~/.mailfilter (used by maildrop) I have extensive filtering in place and call bogofilter (by using xfilter) to classify spam mails. This works fine so far. Now I'd like to migrate to dovecot's new format multi-dbox. My question now: Is it correct that then I cannot longer use maildrop and would need to switch do dovecot-lda? -- Thanks, Manfred

3 4

[Dovecot] DoveCot 2.0.19: Problem compiling Solaris 10u9 x86 with dbox storage enabled
by Denny Schierz 07 Feb '11

07 Feb '11

hi, I can't compile DoveCot 2.0.19 with dbox enabled on our Solaris 10/U9: LDFLAGS="-L/opt/csw/lib -L/usr/lib -R/opt/csw/lib/" ./configure --prefix=/usr/local/dovecot/2.0.19 --with-ssl=openssl --with-rundir=/var/run/dovecot --with-storages=maildir,mbox,dbox --with-ldap=yes gmake -> ========================== [... ../../src/lib-storage/mailbox-list.h:250: warning: parameter has incomplete type mv -f .deps/mail-storage-callbacks.Tpo .deps/mail-storage-callbacks.Po gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-settings -I../../src/lib-dict -I../../src/lib-master -I../../src/lib-mail -I../../src/lib-imap -I../../src/lib-index -I../../src/lib-storage -I/opt/csw/include -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -MT main.o -MD -MP -MF .deps/main.Tpo -c -o main.o main.c In file included from ../../src/lib-storage/mail-storage.h:10, from imap-commands.h:6, from imap-client.h:4, from imap-common.h:17, from main.c:3: ../../src/lib-storage/mailbox-list.h:250: warning: parameter has incomplete type mv -f .deps/main.Tpo .deps/main.Po /bin/bash ../../libtool --tag=CC --mode=link gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -export-dynamic -L/opt/csw/lib -L/usr/lib -R/opt/csw/lib/ -o imap cmd-append.o cmd-capability.o cmd-cancelupdate.o cmd-check.o cmd-close.o cmd-copy.o cmd-create.o cmd-delete.o cmd-enable.o cmd-examine.o cmd-expunge.o cmd-fetch.o cmd-id.o cmd-idle.o cmd-list.o cmd-logout.o cmd-lsub.o cmd-namespace.o cmd-noop.o cmd-rename.o cmd-search.o cmd-select.o cmd-sort.o cmd-status.o cmd-store.o cmd-subscribe.o cmd-thread.o cmd-uid.o cmd-unselect.o cmd-unsubscribe.o cmd-x-cancel.o imap-client.o imap-commands.o imap-commands-util.o imap-expunge.o imap-fetch.o imap-fetch-body.o imap-search.o imap-search-args.o imap-settings.o imap-status.o imap-sync.o mail-storage-callbacks.o main.o ../../src/lib-storage/libdovecot-storage.la ../../src/lib-dovecot/libdovecot.la -export-dynamic -lrt -lnsl -lsocket -lrt -lsendfile libtool: link: gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -o .libs/imap cmd-append.o cmd-capability.o cmd-cancelupdate.o cmd-check.o cmd-close.o cmd-copy.o cmd-create.o cmd-delete.o cmd-enable.o cmd-examine.o cmd-expunge.o cmd-fetch.o cmd-id.o cmd-idle.o cmd-list.o cmd-logout.o cmd-lsub.o cmd-namespace.o cmd-noop.o cmd-rename.o cmd-search.o cmd-select.o cmd-sort.o cmd-status.o cmd-store.o cmd-subscribe.o cmd-thread.o cmd-uid.o cmd-unselect.o cmd-unsubscribe.o cmd-x-cancel.o imap-client.o imap-commands.o imap-commands-util.o imap-expunge.o imap-fetch.o imap-fetch-body.o imap-search.o imap-search-args.o imap-settings.o imap-status.o imap-sync.o mail-storage-callbacks.o main.o -L/opt/csw/lib -L/usr/lib ../../src/lib-storage/.libs/libdovecot-storage.so /usr/local/dovecot/v2/dovecot-2.0.9/src/lib-dovecot/.libs/libdovecot.so ../../src/lib-dovecot/.libs/libdovecot.so -liconv -lnsl -lsocket -lrt -lsendfile -R/usr/local/dovecot/2.0.19/lib/dovecot -R/opt/csw/lib/ ld: warning: file ../../src/lib-dovecot/.libs/libdovecot.so: linked to /usr/local/dovecot/v2/dovecot-2.0.9/src/lib-dovecot/.libs/libdovecot.so: attempted multiple inclusion of file Undefined first referenced symbol in file dbox_storage ../../src/lib-storage/.libs/libdovecot-storage.so ld: fatal: Symbol referencing errors. No output written to .libs/imap collect2: ld returned 1 exit status gmake[3]: *** [imap] Error 1 gmake[3]: Leaving directory `/usr/local/dovecot/v2/dovecot-2.0.9/src/imap' gmake[2]: *** [all-recursive] Error 1 gmake[2]: Leaving directory `/usr/local/dovecot/v2/dovecot-2.0.9/src' gmake[1]: *** [all-recursive] Error 1 gmake[1]: Leaving directory `/usr/local/dovecot/v2/dovecot-2.0.9' gmake: *** [all] Error 2 ============================ compiling without dbox works. # pkgutil -a | grep iconv libiconv CSWiconv 1.9.2 1.3 MB cu denny

2 2

[Dovecot] Dovecot Or Debian, Boot-Time Error "Can't assign requested address"
by Sabahattin Gucukoglu 06 Feb '11

06 Feb '11

Hi all, I have a really weird problem, which for now I have solved by just binding to the IPv6 wildcard address "::". Using the latest packages from Debian unstable (1.x series), I set up a tunnel with tunnelbroker.net for IPv6. I assign two of the delegated addresses in my /48 using IP aliases in /etc/network/interfaces to my ethernet interface (eth0 and eth0:1). All other servers start and run, binding to the primary address (eth0) assigned. The packet forwarder is not necessary, so it isn't turned on using sysctl. But Dovecot will only start if I launch it using the init script after boot. Until then, in syslog there is always: Fatal: listen(2001:470:xxxx::1): Can't assign requested address Anybody have the slightest clue what's going on here? Debian bug, or Dovecot? I suspect some problem with initscript order, yet inspection shows no apparent problem; network starts up before services. Very, very odd. Cheers, Sabahattin

1 0

[Dovecot] Splitting up mail_location setting?
by Timo Sirainen 06 Feb '11

06 Feb '11

mail_location setting has started becoming a bit bloaty. I'm not actually even sure why I've kept adding more parameters to it rather than just adding new settings. It's also caused confusion, because people try things like: mail_location = mbox:/var/mail/%u mail_location = mbox:INBOX=/var/mail/%u Although the first one has been giving ok enough error message for a long time now and the second one also will give in v2.0.10, it still would be nicer if there wasn't any need for such confusion at all. The settings could instead be: mail_format = mbox mail_inbox_path = /var/mail/%u Then Dovecot could complain about mail_root_path being empty, which would be more understandable.. The mail_location setting itself would keep working probably forever for backwards compatibility (and also in some setups it would be difficult to split it when it comes from LDAP/SQL), although some of its parameters could maybe be dropped after a while (SUBSCRIPTIONS, DIRNAME, MAILBOXDIR). So if you did e.g.: mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_root_path = ~/mail2 The result would be same as mbox:~/mail2:INBOX=/var/mail/%u. Although this can also result in probably unwanted situation: mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_format = maildir mail_root_path = ~/Maildir Now the result would be maildir:~/Maildir:INBOX=/var/mail/%u. This can be avoided by setting mail_inbox_path="" explicitly. Or the other way around: mail_inbox_path = /var/mail/%u mail_location = maildir:~/Maildir:INBOX= Without the INBOX= the mail_inbox_path would be in use. Below are the setting names I thought about using: a) mail_location = maildir:~/Maildir:INBOX=~/Maildir/.INBOX:INDEX=~/indexes:CONTROL=~/control:LAYOUT=fs:SUBSCRIPTIONS=courier-subscriptions mail_format = maildir mail_root_path = ~/Maildir mail_inbox_path = ~/Maildir/.INBOX mail_index_path = ~/indexes mail_control_path = ~/control mail_directory_layout = fs mail_subscriptions_fname = courier-subscriptions b) mail_location = mdbox:~/mdbox:ALT=/alt/%u:LAYOUT=fs:DIRNAME=dbox-Mails:MAILBOXDIR=mailboxes mail_format = mdbox mail_root_path = ~/mdbox mail_alt_path = /alt/%u mail_dir_name = dbox-Mails mail_mailboxes_dir_name = mailboxes Thoughts?

3 2

Re: [Dovecot] Samba AD and Dovecot
by Jason Gunthorpe 06 Feb '11

06 Feb '11

On Fri, Feb 04, 2011 at 01:47:31PM -0700, Trever L. Adams wrote: > > There was a thread a month or so ago on how to do GSSAPI with AD and > > dovecot kerberos. It works great, and I highly recommend it for AD > > sites. Check the archives, it isn't really too hard. > I am not finding this. Do you happen to remember the subject? No, but it is pretty simple using latest everything (well, Debian squeeze).. Basically from scratch.. Notice this also sets up NTLM, which is supported by many roaming devices (ie phones). 1) Put this or similar in /etc/samba/smb.conf [global] workgroup = $NT_WORKGROUP$ realm = $REALM$ security = ads kerberos method = secrets and keytab 2) Confirm that hostname gives an unqualified name and hostname -f gives a fully qualified name. Confirm you have DNS setup properly (eg dig -t SRV _kerberos._udp.$REALM$ works OK) 3) Join the machine to AD $ net ads join -U 'user with AD privs' $ kinit AD_USER $ kvno host/`hostname -f` 4) Setup imap SPN: $ net ads keytab add imap $ net ads search cn=`hostname` | grep servicePrincipalName $ klist -k $ kvno imap/`hostname -f` The last three should report imap/`hostname -f` entries. 5) Setup dovecot.. Set these things in the config auth_use_winbind = yes mechanisms = plain gssapi gss-spnego login ntlm 6) Setup exim.. $ net ads keytab add smtp Use these in the dovecot config: client { path = /var/run/dovecot/auth-client mode = 0660 group = Debian-exim } } And this at the end of the exim.conf: dovecot_plain: driver = dovecot public_name = PLAIN server_socket = /var/run/dovecot/auth-client server_set_id=PLAIN-${quote:$auth1} dovecot_ntlm: driver = dovecot public_name = NTLM server_socket = /var/run/dovecot/auth-client server_set_id=NTLM-${quote:$auth1} dovecot_gssapi: driver = dovecot public_name = GSSAPI server_socket = /var/run/dovecot/auth-client server_set_id=GSSAPI-${quote:$auth1} dovecot_gssapi_spnego: driver = dovecot public_name = GSS-SPNEGO server_socket = /var/run/dovecot/auth-client server_set_id=GSS-SPNEGO-${quote:$auth1} 7) Setup openssh in sshd_config GSSAPIAuthentication yes GSSAPICleanupCredentials yes GSSAPIStrictAcceptorCheck yes Jason

2 2

[Dovecot] Best filesystem?
by Monika Janek 05 Feb '11

05 Feb '11

Hi everyone! What's the best filesystem to use for the mail spool? I'm debating between Debian with xfs or FreeBSD with zfs. I'm not sure which way to go. I'm migrating from cyrus. I have about 50 users so it's not a large setup. Cheers! Monika -- Monika Janek Systems Administrator, Side Effects Software Toronto, Ontario Canada 416-504-9876 x207 www.sidefx.com

14 43